@lushly-dev/afd-auth 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lushly
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/adapters/better-auth.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @fileoverview BetterAuth adapter
+ *
+ * Bridges better-auth client to the AuthAdapter interface.
+ * Types are defined locally to avoid hard dependency on better-auth.
+ */
+import type { AuthAdapter, AuthSessionState, SignInOptions } from '../types.js';
+/** Minimal interface for better-auth client — avoids hard import */
+interface BetterAuthClient {
+    signIn: {
+        social: (params: {
+            provider: string;
+            callbackURL?: string;
+        }) => Promise<unknown>;
+        email: (params: {
+            email: string;
+            password: string;
+        }) => Promise<unknown>;
+    };
+    signOut: () => Promise<unknown>;
+    useSession: () => {
+        subscribe: (callback: (value: {
+            data: BetterAuthSessionData | null;
+            isPending: boolean;
+        }) => void) => () => void;
+        get: () => {
+            data: BetterAuthSessionData | null;
+            isPending: boolean;
+        };
+    };
+}
+interface BetterAuthSessionData {
+    session: {
+        id: string;
+        expiresAt: string | Date;
+    };
+    user: {
+        id: string;
+        email: string;
+        name?: string;
+        image?: string;
+    };
+}
+export interface BetterAuthAdapterOptions {
+    /** better-auth client instance */
+    client: BetterAuthClient;
+}
+export declare class BetterAuthAdapter implements AuthAdapter {
+    private readonly client;
+    private listeners;
+    private currentState;
+    private unsubscribeStore;
+    constructor(options: BetterAuthAdapterOptions);
+    signIn(options: SignInOptions): Promise<void>;
+    signOut(): Promise<void>;
+    getSession(): AuthSessionState;
+    onAuthStateChange(callback: (state: AuthSessionState) => void): {
+        unsubscribe: () => void;
+    };
+    /**
+     * Clean up the nanostore subscription.
+     */
+    dispose(): void;
+    private setupSubscription;
+    private mapToState;
+}
+export {};
+//# sourceMappingURL=better-auth.d.ts.map

package/dist/adapters/better-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.d.ts","sourceRoot":"","sources":["../../src/adapters/better-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGhF,oEAAoE;AACpE,UAAU,gBAAgB;IACzB,MAAM,EAAE;QACP,MAAM,EAAE,CAAC,MAAM,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACjF,KAAK,EAAE,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACzE,CAAC;IACF,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM;QACjB,SAAS,EAAE,CACV,QAAQ,EAAE,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,KAAK,IAAI,KACjF,MAAM,IAAI,CAAC;QAChB,GAAG,EAAE,MAAM;YAAE,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAC;KACtE,CAAC;CACF;AAED,UAAU,qBAAqB;IAC9B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClD,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,MAAM,WAAW,wBAAwB;IACxC,kCAAkC;IAClC,MAAM,EAAE,gBAAgB,CAAC;CACzB;AAED,qBAAa,iBAAkB,YAAW,WAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,gBAAgB,CAA6B;gBAEzC,OAAO,EAAE,wBAAwB;IAKvC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAY9B,UAAU,IAAI,gBAAgB;IAI9B,iBAAiB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE;IAS3F;;OAEG;IACH,OAAO,IAAI,IAAI;IAQf,OAAO,CAAC,iBAAiB;IAiBzB,OAAO,CAAC,UAAU;CA6BlB"}

package/dist/adapters/better-auth.js

@@ -0,0 +1,109 @@
+/**
+ * @fileoverview BetterAuth adapter
+ *
+ * Bridges better-auth client to the AuthAdapter interface.
+ * Types are defined locally to avoid hard dependency on better-auth.
+ */
+import { AuthAdapterError } from '../errors.js';
+import { LOADING, UNAUTHENTICATED } from '../types.js';
+export class BetterAuthAdapter {
+    client;
+    listeners = new Set();
+    currentState = LOADING;
+    unsubscribeStore = null;
+    constructor(options) {
+        this.client = options.client;
+        this.setupSubscription();
+    }
+    async signIn(options) {
+        try {
+            if (options.method === 'credentials') {
+                await this.client.signIn.email({
+                    email: options.email,
+                    password: options.password ?? '',
+                });
+            }
+            else {
+                await this.client.signIn.social({
+                    provider: options.provider,
+                    callbackURL: options.redirectTo,
+                });
+            }
+        }
+        catch (error) {
+            if (error instanceof AuthAdapterError)
+                throw error;
+            throw AuthAdapterError.providerError('better-auth', error instanceof Error ? error.message : String(error));
+        }
+    }
+    async signOut() {
+        try {
+            await this.client.signOut();
+        }
+        catch (error) {
+            if (error instanceof AuthAdapterError)
+                throw error;
+            throw AuthAdapterError.providerError('better-auth', error instanceof Error ? error.message : String(error));
+        }
+    }
+    getSession() {
+        return this.currentState;
+    }
+    onAuthStateChange(callback) {
+        this.listeners.add(callback);
+        return {
+            unsubscribe: () => {
+                this.listeners.delete(callback);
+            },
+        };
+    }
+    /**
+     * Clean up the nanostore subscription.
+     */
+    dispose() {
+        if (this.unsubscribeStore) {
+            this.unsubscribeStore();
+            this.unsubscribeStore = null;
+        }
+        this.listeners.clear();
+    }
+    setupSubscription() {
+        // biome-ignore lint/correctness/useHookAtTopLevel: useSession is a better-auth store accessor, not a React hook
+        const store = this.client.useSession();
+        this.unsubscribeStore = store.subscribe((value) => {
+            const newState = this.mapToState(value);
+            if (newState.status !== this.currentState.status) {
+                this.currentState = newState;
+                for (const listener of this.listeners) {
+                    listener(newState);
+                }
+            }
+        });
+        // Initialize from current store value
+        this.currentState = this.mapToState(store.get());
+    }
+    mapToState(value) {
+        if (value.isPending) {
+            return LOADING;
+        }
+        if (!value.data) {
+            return UNAUTHENTICATED;
+        }
+        return {
+            status: 'authenticated',
+            session: {
+                id: value.data.session.id,
+                expiresAt: value.data.session.expiresAt instanceof Date
+                    ? value.data.session.expiresAt
+                    : new Date(value.data.session.expiresAt),
+            },
+            user: {
+                id: value.data.user.id,
+                email: value.data.user.email,
+                name: value.data.user.name,
+                image: value.data.user.image,
+            },
+        };
+    }
+}
+//# sourceMappingURL=better-auth.js.map

package/dist/adapters/better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.js","sourceRoot":"","sources":["../../src/adapters/better-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA2BvD,MAAM,OAAO,iBAAiB;IACZ,MAAM,CAAmB;IAClC,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IACzD,YAAY,GAAqB,OAAO,CAAC;IACzC,gBAAgB,GAAwB,IAAI,CAAC;IAErD,YAAY,OAAiC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QAClC,IAAI,CAAC;YACJ,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;iBAChC,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,gBAAgB,CAAC,aAAa,CACnC,aAAa,EACb,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,gBAAgB,CAAC,aAAa,CACnC,aAAa,EACb,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,iBAAiB,CAAC,QAA2C;QAC5D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;YACN,WAAW,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACN,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,iBAAiB;QACxB,gHAAgH;QAChH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBAClD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;gBAC7B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACvC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,sCAAsC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,UAAU,CAAC,KAGlB;QACA,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,OAAO;YACN,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACzB,SAAS,EACR,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,YAAY,IAAI;oBAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;oBAC9B,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;aAC1C;YACD,IAAI,EAAE;gBACL,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACtB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC1B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;aAC5B;SACD,CAAC;IACH,CAAC;CACD"}

package/dist/adapters/convex.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @fileoverview Convex auth adapter
+ *
+ * Bridges @convex-dev/auth React hooks to the AuthAdapter interface.
+ * This is a React hook — must be called inside a component.
+ */
+import type { AuthAdapter, User } from '../types.js';
+export interface ConvexAuthAdapterOptions {
+    /** Return value of useAuthActions() from @convex-dev/auth/react */
+    useAuthActions: () => {
+        signIn: (provider: string, params?: Record<string, unknown>) => Promise<void>;
+        signOut: () => Promise<void>;
+    };
+    /** Return value of useConvexAuth() from convex/react */
+    useConvexAuth: () => {
+        isAuthenticated: boolean;
+        isLoading: boolean;
+    };
+    /** A Convex query hook that returns the current user, e.g. useQuery(api.users.me) */
+    meQuery: () => User | null | undefined;
+}
+/**
+ * React hook that creates an AuthAdapter backed by Convex.
+ *
+ * Must be called inside a ConvexProvider + ConvexAuthProvider tree.
+ */
+export declare function useConvexAuthAdapter(options: ConvexAuthAdapterOptions): AuthAdapter;
+//# sourceMappingURL=convex.d.ts.map

package/dist/adapters/convex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convex.d.ts","sourceRoot":"","sources":["../../src/adapters/convex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAmC,IAAI,EAAE,MAAM,aAAa,CAAC;AAGtF,MAAM,WAAW,wBAAwB;IACxC,mEAAmE;IACnE,cAAc,EAAE,MAAM;QACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7B,CAAC;IACF,wDAAwD;IACxD,aAAa,EAAE,MAAM;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACtE,qFAAqF;IACrF,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CA4EnF"}

package/dist/adapters/convex.js

@@ -0,0 +1,77 @@
+/**
+ * @fileoverview Convex auth adapter
+ *
+ * Bridges @convex-dev/auth React hooks to the AuthAdapter interface.
+ * This is a React hook — must be called inside a component.
+ */
+import { useCallback, useEffect, useRef } from 'react';
+import { LOADING, UNAUTHENTICATED } from '../types.js';
+/**
+ * React hook that creates an AuthAdapter backed by Convex.
+ *
+ * Must be called inside a ConvexProvider + ConvexAuthProvider tree.
+ */
+export function useConvexAuthAdapter(options) {
+    const { signIn: convexSignIn, signOut: convexSignOut } = options.useAuthActions();
+    const { isAuthenticated, isLoading } = options.useConvexAuth();
+    const me = options.meQuery();
+    const listenersRef = useRef(new Set());
+    const stateRef = useRef(LOADING);
+    // Derive current state
+    let currentState;
+    if (isLoading) {
+        currentState = LOADING;
+    }
+    else if (isAuthenticated && me) {
+        currentState = {
+            status: 'authenticated',
+            session: {
+                id: `convex-${me.id}`,
+                expiresAt: new Date(Date.now() + 86_400_000), // Synthetic — 24h
+            },
+            user: me,
+        };
+        if (typeof process !== 'undefined' && process.env?.NODE_ENV === 'development') {
+            // Dev-only warning for synthetic expiresAt
+            console.debug('[afd-auth] Convex adapter uses synthetic expiresAt — token lifecycle managed by Convex internally');
+        }
+    }
+    else {
+        currentState = UNAUTHENTICATED;
+    }
+    // Notify listeners on state change
+    const prevStatusRef = useRef(stateRef.current.status);
+    stateRef.current = currentState;
+    useEffect(() => {
+        if (prevStatusRef.current !== currentState.status) {
+            prevStatusRef.current = currentState.status;
+            for (const listener of listenersRef.current) {
+                listener(currentState);
+            }
+        }
+    }, [currentState]);
+    const signIn = useCallback(async (opts) => {
+        if (opts.method === 'credentials') {
+            await convexSignIn('credentials', { email: opts.email, password: opts.password });
+        }
+        else {
+            await convexSignIn(opts.provider);
+        }
+    }, [convexSignIn]);
+    const signOut = useCallback(async () => {
+        await convexSignOut();
+    }, [convexSignOut]);
+    const getSession = useCallback(() => {
+        return stateRef.current;
+    }, []);
+    const onAuthStateChange = useCallback((callback) => {
+        listenersRef.current.add(callback);
+        return {
+            unsubscribe: () => {
+                listenersRef.current.delete(callback);
+            },
+        };
+    }, []);
+    return { signIn, signOut, getSession, onAuthStateChange };
+}
+//# sourceMappingURL=convex.js.map

package/dist/adapters/convex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convex.js","sourceRoot":"","sources":["../../src/adapters/convex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEvD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAcvD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAiC;IACrE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAClF,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAC/D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,EAAqC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,CAAmB,OAAO,CAAC,CAAC;IAEnD,uBAAuB;IACvB,IAAI,YAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACf,YAAY,GAAG,OAAO,CAAC;IACxB,CAAC;SAAM,IAAI,eAAe,IAAI,EAAE,EAAE,CAAC;QAClC,YAAY,GAAG;YACd,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,EAAE,kBAAkB;aAChE;YACD,IAAI,EAAE,EAAE;SACR,CAAC;QACF,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/E,2CAA2C;YAC3C,OAAO,CAAC,KAAK,CACZ,mGAAmG,CACnG,CAAC;QACH,CAAC;IACF,CAAC;SAAM,CAAC;QACP,YAAY,GAAG,eAAe,CAAC;IAChC,CAAC;IAED,mCAAmC;IACnC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC;IAEhC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,aAAa,CAAC,OAAO,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YACnD,aAAa,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC;YAC5C,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC7C,QAAQ,CAAC,YAAY,CAAC,CAAC;YACxB,CAAC;QACF,CAAC;IACF,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,WAAW,CACzB,KAAK,EAAE,IAAmB,EAAiB,EAAE;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,YAAY,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACP,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACF,CAAC,EACD,CAAC,YAAY,CAAC,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACrD,MAAM,aAAa,EAAE,CAAC;IACvB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAqB,EAAE;QACrD,OAAO,QAAQ,CAAC,OAAO,CAAC;IACzB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,WAAW,CACpC,CAAC,QAA2C,EAA+B,EAAE;QAC5E,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO;YACN,WAAW,EAAE,GAAG,EAAE;gBACjB,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;SACD,CAAC;IACH,CAAC,EACD,EAAE,CACF,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;AAC3D,CAAC"}

package/dist/adapters/mock.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @fileoverview Mock auth adapter for testing
+ */
+import { AuthAdapterError } from '../errors.js';
+import type { AuthAdapter, AuthSessionState, SignInOptions, User } from '../types.js';
+export interface MockAuthAdapterOptions {
+    /** Simulated async delay in milliseconds (default: 0) */
+    delay?: number;
+}
+export declare class MockAuthAdapter implements AuthAdapter {
+    private state;
+    private listeners;
+    private readonly delay;
+    constructor(options?: MockAuthAdapterOptions);
+    signIn(options: SignInOptions): Promise<void>;
+    signOut(): Promise<void>;
+    getSession(): AuthSessionState;
+    onAuthStateChange(callback: (state: AuthSessionState) => void): {
+        unsubscribe: () => void;
+    };
+    _reset(): void;
+    _setUser(user: User): void;
+    _setLoading(): void;
+    _triggerError(code: 'INVALID_CREDENTIALS' | 'TOKEN_EXPIRED' | 'PROVIDER_ERROR' | 'NETWORK_ERROR' | 'REFRESH_FAILED'): AuthAdapterError;
+    _getListenerCount(): number;
+    private setState;
+    private sleep;
+}
+//# sourceMappingURL=mock.d.ts.map

package/dist/adapters/mock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGtF,MAAM,WAAW,sBAAsB;IACtC,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,OAAO,GAAE,sBAA2B;IAI1C,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,UAAU,IAAI,gBAAgB;IAI9B,iBAAiB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE;IAa3F,MAAM,IAAI,IAAI;IAId,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAW1B,WAAW,IAAI,IAAI;IAInB,aAAa,CACZ,IAAI,EACD,qBAAqB,GACrB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GACjB,gBAAgB;IAenB,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,QAAQ;IAOhB,OAAO,CAAC,KAAK;CAGb"}

package/dist/adapters/mock.js

@@ -0,0 +1,94 @@
+/**
+ * @fileoverview Mock auth adapter for testing
+ */
+import { AuthAdapterError } from '../errors.js';
+import { LOADING, UNAUTHENTICATED } from '../types.js';
+export class MockAuthAdapter {
+    state = UNAUTHENTICATED;
+    listeners = new Set();
+    delay;
+    constructor(options = {}) {
+        this.delay = options.delay ?? 0;
+    }
+    async signIn(options) {
+        if (this.delay > 0) {
+            await this.sleep(this.delay);
+        }
+        const email = options.method === 'credentials' ? options.email : `user@${options.provider}.com`;
+        this.setState({
+            status: 'authenticated',
+            session: {
+                id: `mock-session-${Date.now()}`,
+                expiresAt: new Date(Date.now() + 3600_000),
+            },
+            user: {
+                id: `mock-user-${Date.now()}`,
+                email,
+                name: email.split('@')[0],
+            },
+        });
+    }
+    async signOut() {
+        if (this.delay > 0) {
+            await this.sleep(this.delay);
+        }
+        this.setState(UNAUTHENTICATED);
+    }
+    getSession() {
+        return this.state;
+    }
+    onAuthStateChange(callback) {
+        this.listeners.add(callback);
+        return {
+            unsubscribe: () => {
+                this.listeners.delete(callback);
+            },
+        };
+    }
+    // ═══════════════════════════════════════════════════════════════════════════
+    // TEST HELPERS
+    // ═══════════════════════════════════════════════════════════════════════════
+    _reset() {
+        this.setState(UNAUTHENTICATED);
+    }
+    _setUser(user) {
+        this.setState({
+            status: 'authenticated',
+            session: {
+                id: `mock-session-${Date.now()}`,
+                expiresAt: new Date(Date.now() + 3600_000),
+            },
+            user,
+        });
+    }
+    _setLoading() {
+        this.setState(LOADING);
+    }
+    _triggerError(code) {
+        const factories = {
+            INVALID_CREDENTIALS: () => AuthAdapterError.invalidCredentials(),
+            TOKEN_EXPIRED: () => AuthAdapterError.tokenExpired(),
+            PROVIDER_ERROR: () => AuthAdapterError.providerError('mock'),
+            NETWORK_ERROR: () => AuthAdapterError.networkError(),
+            REFRESH_FAILED: () => AuthAdapterError.refreshFailed(),
+        };
+        const factory = factories[code];
+        if (!factory) {
+            throw new Error(`Unknown error code: ${code}`);
+        }
+        return factory();
+    }
+    _getListenerCount() {
+        return this.listeners.size;
+    }
+    setState(state) {
+        this.state = state;
+        for (const listener of this.listeners) {
+            listener(state);
+        }
+    }
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+//# sourceMappingURL=mock.js.map

package/dist/adapters/mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAOvD,MAAM,OAAO,eAAe;IACnB,KAAK,GAAqB,eAAe,CAAC;IAC1C,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAChD,KAAK,CAAS;IAE/B,YAAY,UAAkC,EAAE;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QAClC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;QAEhG,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;aAC1C;YACD,IAAI,EAAE;gBACL,EAAE,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC7B,KAAK;gBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACzB;SACD,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,QAA2C;QAC5D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;YACN,WAAW,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,MAAM;QACL,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAAU;QAClB,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;aAC1C;YACD,IAAI;SACJ,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;QACV,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,aAAa,CACZ,IAKmB;QAEnB,MAAM,SAAS,GAA2C;YACzD,mBAAmB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;YAChE,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC;YAC5D,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE;SACtD,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,iBAAiB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,KAAuB;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;CACD"}

package/dist/commands.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview AFD command wrappers for auth operations
+ *
+ * Requires optional peer dependencies: @lushly-dev/afd-server, zod
+ */
+import { type ZodCommandDefinition } from '@lushly-dev/afd-server';
+import type { AuthAdapter } from './types.js';
+/**
+ * Create AFD command definitions for auth operations.
+ *
+ * Returns ZodCommandDefinition[] that can be passed directly to `createMcpServer`.
+ * Requires `@lushly-dev/afd-server` and `zod` as peer dependencies.
+ */
+export declare function createAuthCommands(adapter: AuthAdapter): ZodCommandDefinition[];
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGlF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,oBAAoB,EAAE,CA0F/E"}

package/dist/commands.js

@@ -0,0 +1,106 @@
+/**
+ * @fileoverview AFD command wrappers for auth operations
+ *
+ * Requires optional peer dependencies: @lushly-dev/afd-server, zod
+ */
+import { failure, success } from '@lushly-dev/afd-core';
+import { defineCommand } from '@lushly-dev/afd-server';
+import { z } from 'zod';
+import { AuthAdapterError } from './errors.js';
+/**
+ * Create AFD command definitions for auth operations.
+ *
+ * Returns ZodCommandDefinition[] that can be passed directly to `createMcpServer`.
+ * Requires `@lushly-dev/afd-server` and `zod` as peer dependencies.
+ */
+export function createAuthCommands(adapter) {
+    const signIn = defineCommand({
+        name: 'auth-sign-in',
+        description: 'Sign in with credentials or OAuth provider',
+        category: 'auth',
+        tags: ['auth', 'session'],
+        mutation: true,
+        expose: { palette: true, agent: true, cli: true, mcp: false },
+        input: z.discriminatedUnion('method', [
+            z.object({
+                method: z.literal('credentials'),
+                email: z.string().email(),
+                password: z.string().optional(),
+            }),
+            z.object({
+                method: z.literal('oauth'),
+                provider: z.string(),
+                scopes: z.array(z.string()).optional(),
+                redirectTo: z.string().optional(),
+            }),
+        ]),
+        async handler(input) {
+            try {
+                await adapter.signIn(input);
+                const session = adapter.getSession();
+                return success(session, {
+                    reasoning: `Signed in via ${input.method}`,
+                });
+            }
+            catch (error) {
+                if (error instanceof AuthAdapterError) {
+                    return failure({
+                        code: error.code,
+                        message: error.message,
+                        suggestion: error.suggestion,
+                        retryable: error.retryable,
+                    });
+                }
+                throw error;
+            }
+        },
+    });
+    const signOut = defineCommand({
+        name: 'auth-sign-out',
+        description: 'Sign out of the current session',
+        category: 'auth',
+        tags: ['auth', 'session'],
+        mutation: true,
+        destructive: true,
+        confirmPrompt: 'Sign out of your account?',
+        expose: { palette: true, agent: true, cli: true, mcp: false },
+        input: z.object({}),
+        async handler() {
+            try {
+                await adapter.signOut();
+                return success(null, {
+                    reasoning: 'Successfully signed out',
+                });
+            }
+            catch (error) {
+                if (error instanceof AuthAdapterError) {
+                    return failure({
+                        code: error.code,
+                        message: error.message,
+                        suggestion: error.suggestion,
+                        retryable: error.retryable,
+                    });
+                }
+                throw error;
+            }
+        },
+    });
+    const sessionGet = defineCommand({
+        name: 'auth-session-get',
+        description: 'Get the current authentication session state',
+        category: 'auth',
+        tags: ['auth', 'session'],
+        mutation: false,
+        expose: { palette: true, agent: true, cli: true, mcp: true },
+        input: z.object({}),
+        async handler() {
+            const session = adapter.getSession();
+            return success(session, {
+                reasoning: `Current auth status: ${session.status}`,
+            });
+        },
+    });
+    // Cast needed for heterogeneous generic command arrays (same pattern as todo example)
+    return [signIn, signOut, sessionGet];
+}
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAA6B,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC5B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;QAC7D,KAAK,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YACrC,CAAC,CAAC,MAAM,CAAC;gBACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;gBAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC/B,CAAC;YACF,CAAC,CAAC,MAAM,CAAC;gBACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;gBACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aACjC,CAAC;SACF,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,KAAK;YAClB,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,OAAO,EAAE;oBACvB,SAAS,EAAE,iBAAiB,KAAK,CAAC,MAAM,EAAE;iBAC1C,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;oBACvC,OAAO,OAAO,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC1B,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,aAAa,CAAC;QAC7B,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,2BAA2B;QAC1C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,OAAO;YACZ,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,IAAI,EAAE;oBACpB,SAAS,EAAE,yBAAyB;iBACpC,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;oBACvC,OAAO,OAAO,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC1B,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,aAAa,CAAC;QAChC,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QACzB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,OAAO;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,OAAO,EAAE;gBACvB,SAAS,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE;aACnD,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;IAEH,sFAAsF;IACtF,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAsC,CAAC;AAC3E,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @fileoverview Auth-specific error types
+ *
+ * Provides structured errors for authentication failures with
+ * retryable flags and static factory methods.
+ */
+export type AuthErrorCode = 'INVALID_CREDENTIALS' | 'TOKEN_EXPIRED' | 'PROVIDER_ERROR' | 'NETWORK_ERROR' | 'REFRESH_FAILED';
+export declare class AuthAdapterError extends Error {
+    readonly code: AuthErrorCode;
+    readonly suggestion: string;
+    readonly retryable: boolean;
+    constructor(error: {
+        code: AuthErrorCode;
+        message: string;
+        suggestion: string;
+    });
+    static invalidCredentials(): AuthAdapterError;
+    static tokenExpired(): AuthAdapterError;
+    static providerError(provider: string, details?: string): AuthAdapterError;
+    static networkError(): AuthAdapterError;
+    static refreshFailed(): AuthAdapterError;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,aAAa,GACtB,qBAAqB,GACrB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,gBAAgB,CAAC;AAQpB,qBAAa,gBAAiB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,KAAK,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACnB;IAQD,MAAM,CAAC,kBAAkB,IAAI,gBAAgB;IAQ7C,MAAM,CAAC,YAAY,IAAI,gBAAgB;IAQvC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB;IAW1E,MAAM,CAAC,YAAY,IAAI,gBAAgB;IAQvC,MAAM,CAAC,aAAa,IAAI,gBAAgB;CAOxC"}