@lushly-dev/afd-auth 0.6.0 → 2.0.0

package/dist/adapters/convex.js

@@ -4,74 +4,157 @@
  * Bridges @convex-dev/auth React hooks to the AuthAdapter interface.
  * This is a React hook — must be called inside a component.
  */
-import { useCallback, useEffect, useRef } from 'react';
+import { useEffect, useRef, useState } from 'react';
+import { AuthAdapterError } from '../errors.js';
+import { ListenerSet, reportListenerError } from '../listeners.js';
+import { areSessionStatesEqual, areUsersEqual } from '../session-state.js';
 import { LOADING, UNAUTHENTICATED } from '../types.js';
+import { describeThrown, isKnownNetworkFailure } from './provider-errors.js';
+/** Id of `Password()` from `@convex-dev/auth/providers/Password`. */
+const DEFAULT_PASSWORD_PROVIDER_ID = 'password';
 /**
  * React hook that creates an AuthAdapter backed by Convex.
  *
- * Must be called inside a ConvexProvider + ConvexAuthProvider tree.
+ * Must be called inside a ConvexProvider + ConvexAuthProvider tree. It returns
+ * the same adapter object on every render; the adapter always uses the latest
+ * actions and options passed to the hook.
  */
 export function useConvexAuthAdapter(options) {
-    const { signIn: convexSignIn, signOut: convexSignOut } = options.useAuthActions();
+    const actions = options.useAuthActions();
     const { isAuthenticated, isLoading } = options.useConvexAuth();
     const me = options.meQuery();
-    const listenersRef = useRef(new Set());
+    const latest = useRef({ actions, options });
+    latest.current = { actions, options };
     const stateRef = useRef(LOADING);
-    // Derive current state
-    let currentState;
-    if (isLoading) {
-        currentState = LOADING;
-    }
-    else if (isAuthenticated && me) {
-        currentState = {
-            status: 'authenticated',
-            session: {
-                id: `convex-${me.id}`,
-                expiresAt: new Date(Date.now() + 86_400_000), // Synthetic — 24h
-            },
-            user: me,
-        };
-        if (typeof process !== 'undefined' && process.env?.NODE_ENV === 'development') {
-            // Dev-only warning for synthetic expiresAt
-            console.debug('[afd-auth] Convex adapter uses synthetic expiresAt — token lifecycle managed by Convex internally');
-        }
-    }
-    else {
-        currentState = UNAUTHENTICATED;
-    }
-    // Notify listeners on state change
-    const prevStatusRef = useRef(stateRef.current.status);
+    const notifiedStateRef = useRef(LOADING);
+    const [listeners] = useState(() => new ListenerSet((error) => reportListenerError(error, latest.current.options.onListenerError)));
+    // Keep the previous object when its values are unchanged. Auth hooks may
+    // rerender for unrelated Convex data, and useSyncExternalStore requires a
+    // cached snapshot in that case.
+    const previousState = stateRef.current;
+    const nextState = deriveState(previousState, isLoading, isAuthenticated, me);
+    const currentState = areSessionStatesEqual(previousState, nextState) ? previousState : nextState;
     stateRef.current = currentState;
     useEffect(() => {
-        if (prevStatusRef.current !== currentState.status) {
-            prevStatusRef.current = currentState.status;
-            for (const listener of listenersRef.current) {
-                listener(currentState);
-            }
-        }
-    }, [currentState]);
-    const signIn = useCallback(async (opts) => {
-        if (opts.method === 'credentials') {
-            await convexSignIn('credentials', { email: opts.email, password: opts.password });
+        if (!areSessionStatesEqual(notifiedStateRef.current, currentState)) {
+            notifiedStateRef.current = currentState;
+            listeners.emit(currentState);
         }
-        else {
-            await convexSignIn(opts.provider);
+    }, [currentState, listeners]);
+    const [adapter] = useState(() => ({
+        signIn: (signInOptions) => signInWithConvex(latest.current.actions, latest.current.options.passwordProviderId ?? DEFAULT_PASSWORD_PROVIDER_ID, signInOptions),
+        signOut: async () => {
+            try {
+                await latest.current.actions.signOut();
+            }
+            catch (error) {
+                throw mapConvexError(error, false);
+            }
+        },
+        getSession: () => stateRef.current,
+        onAuthStateChange: (callback) => listeners.add(callback),
+    }));
+    return adapter;
+}
+function deriveState(previous, isLoading, isAuthenticated, me) {
+    if (isLoading)
+        return LOADING;
+    if (!isAuthenticated || me === null)
+        return UNAUTHENTICATED;
+    // The token is valid but the user query has not resolved yet.
+    if (me === undefined)
+        return LOADING;
+    const previousUser = previous.status === 'authenticated' ? previous.user : null;
+    return {
+        status: 'authenticated',
+        // Convex refreshes its JWT internally and does not expose an expiry, so
+        // the session carries no expiresAt rather than an invented one.
+        session: previous.status === 'authenticated' && previousUser?.id === me.id
+            ? previous.session
+            : { id: `convex-${me.id}` },
+        user: previousUser && areUsersEqual(previousUser, me) ? previousUser : me,
+    };
+}
+async function signInWithConvex(actions, passwordProviderId, options) {
+    const request = toSignInRequest(passwordProviderId, options);
+    try {
+        return toSignInOutcome(await actions.signIn(...request));
+    }
+    catch (error) {
+        throw mapConvexError(error, options.method === 'credentials');
+    }
+}
+/**
+ * The stock Password provider signs in with `flow: 'signIn'`. OAuth providers
+ * take only `redirectTo`; their scopes are part of the server-side provider
+ * config, so scopes passed at sign-in are rejected rather than dropped.
+ */
+function toSignInRequest(passwordProviderId, options) {
+    if (options.method === 'credentials') {
+        if (options.password === undefined) {
+            throw new AuthAdapterError({
+                code: 'INVALID_CREDENTIALS',
+                message: 'A password is required to sign in with the Convex Password provider',
+                suggestion: 'Provide the account password and try again',
+            });
         }
-    }, [convexSignIn]);
-    const signOut = useCallback(async () => {
-        await convexSignOut();
-    }, [convexSignOut]);
-    const getSession = useCallback(() => {
-        return stateRef.current;
-    }, []);
-    const onAuthStateChange = useCallback((callback) => {
-        listenersRef.current.add(callback);
-        return {
-            unsubscribe: () => {
-                listenersRef.current.delete(callback);
-            },
-        };
-    }, []);
-    return { signIn, signOut, getSession, onAuthStateChange };
+        return [
+            passwordProviderId,
+            { email: options.email, password: options.password, flow: 'signIn' },
+        ];
+    }
+    if (options.scopes !== undefined && options.scopes.length > 0) {
+        throw new AuthAdapterError({
+            code: 'PROVIDER_ERROR',
+            message: 'Convex Auth does not accept OAuth scopes at sign-in',
+            suggestion: `Configure scopes on the '${options.provider}' provider in convex/auth.ts, then sign in without scopes`,
+        });
+    }
+    return options.redirectTo === undefined
+        ? [options.provider]
+        : [options.provider, { redirectTo: options.redirectTo }];
+}
+/**
+ * @convex-dev/auth resolves signIn() with `{ signingIn, redirect? }`: a
+ * redirect starts an OAuth flow, and `signingIn: false` without one means a
+ * further step (such as email verification) is needed.
+ */
+function toSignInOutcome(result) {
+    if (typeof result !== 'object' || result === null)
+        return { kind: 'signed-in' };
+    const redirect = 'redirect' in result ? result.redirect : undefined;
+    if (redirect instanceof URL)
+        return { kind: 'redirect', url: redirect.href };
+    if (typeof redirect === 'string')
+        return { kind: 'redirect', url: redirect };
+    if ('signingIn' in result && result.signingIn === false)
+        return { kind: 'pending' };
+    return { kind: 'signed-in' };
+}
+/**
+ * Map a Convex error to the codes the other adapters use. The Password
+ * provider fails with `InvalidAccountId`, `InvalidSecret` or
+ * `Invalid credentials`, and the account lock with `TooManyFailedAttempts`.
+ * Production deployments hide server error text unless it is thrown as a
+ * `ConvexError`, so those failures surface as PROVIDER_ERROR.
+ */
+function mapConvexError(error, credentials) {
+    if (error instanceof AuthAdapterError)
+        return error;
+    const message = describeThrown(error);
+    if (credentials && /InvalidAccountId|InvalidSecret|Invalid credentials/i.test(message)) {
+        return AuthAdapterError.invalidCredentials();
+    }
+    if (/TooManyFailedAttempts/.test(message)) {
+        return new AuthAdapterError({
+            code: 'PROVIDER_ERROR',
+            message: 'Too many failed sign-in attempts for this account',
+            suggestion: 'Wait before trying again, or reset the password',
+        });
+    }
+    if (isKnownNetworkFailure(error, message)) {
+        return AuthAdapterError.networkError();
+    }
+    return AuthAdapterError.providerError('convex', message);
 }
 //# sourceMappingURL=convex.js.map

package/dist/adapters/convex.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex.js","sourceRoot":"","sources":["../../src/adapters/convex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEvD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAcvD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAiC;IACrE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAClF,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAC/D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,EAAqC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,CAAmB,OAAO,CAAC,CAAC;IAEnD,uBAAuB;IACvB,IAAI,YAA8B,CAAC;IACnC,IAAI,SAAS,EAAE,CAAC;QACf,YAAY,GAAG,OAAO,CAAC;IACxB,CAAC;SAAM,IAAI,eAAe,IAAI,EAAE,EAAE,CAAC;QAClC,YAAY,GAAG;YACd,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;gBACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,EAAE,kBAAkB;aAChE;YACD,IAAI,EAAE,EAAE;SACR,CAAC;QACF,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/E,2CAA2C;YAC3C,OAAO,CAAC,KAAK,CACZ,mGAAmG,CACnG,CAAC;QACH,CAAC;IACF,CAAC;SAAM,CAAC;QACP,YAAY,GAAG,eAAe,CAAC;IAChC,CAAC;IAED,mCAAmC;IACnC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC;IAEhC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,aAAa,CAAC,OAAO,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YACnD,aAAa,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC;YAC5C,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC7C,QAAQ,CAAC,YAAY,CAAC,CAAC;YACxB,CAAC;QACF,CAAC;IACF,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,WAAW,CACzB,KAAK,EAAE,IAAmB,EAAiB,EAAE;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,YAAY,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACP,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACF,CAAC,EACD,CAAC,YAAY,CAAC,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACrD,MAAM,aAAa,EAAE,CAAC;IACvB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAqB,EAAE;QACrD,OAAO,QAAQ,CAAC,OAAO,CAAC;IACzB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,WAAW,CACpC,CAAC,QAA2C,EAA+B,EAAE;QAC5E,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO;YACN,WAAW,EAAE,GAAG,EAAE;gBACjB,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;SACD,CAAC;IACH,CAAC,EACD,EAAE,CACF,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"convex.js","sourceRoot":"","sources":["../../src/adapters/convex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAA6B,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQ3E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,qEAAqE;AACrE,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAmChD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAiC;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IACzC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAC/D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,QAAQ,GAAG,MAAM,CAAmB,OAAO,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,MAAM,CAAmB,OAAO,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAC3B,GAAG,EAAE,CACJ,IAAI,WAAW,CAAmB,CAAC,KAAK,EAAE,EAAE,CAC3C,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAClE,CACF,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;IACvC,MAAM,SAAS,GAAG,WAAW,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,qBAAqB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC;IAEhC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACpE,gBAAgB,CAAC,OAAO,GAAG,YAAY,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAE9B,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAc,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CACzB,gBAAgB,CACf,MAAM,CAAC,OAAO,CAAC,OAAO,EACtB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,EACzE,aAAa,CACb;QACF,OAAO,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,CAAC;gBACJ,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACF,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO;QAClC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;KACxD,CAAC,CAAC,CAAC;IAEJ,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CACnB,QAA0B,EAC1B,SAAkB,EAClB,eAAwB,EACxB,EAA2B;IAE3B,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9B,IAAI,CAAC,eAAe,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IAC5D,8DAA8D;IAC9D,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAErC,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,OAAO;QACN,MAAM,EAAE,eAAe;QACvB,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,EACN,QAAQ,CAAC,MAAM,KAAK,eAAe,IAAI,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAChE,CAAC,CAAC,QAAQ,CAAC,OAAO;YAClB,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE;QAC7B,IAAI,EAAE,YAAY,IAAI,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;KACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAA0B,EAC1B,kBAA0B,EAC1B,OAAsB;IAEtB,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;IAC/D,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACvB,kBAA0B,EAC1B,OAAsB;IAEtB,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CAAC;gBAC1B,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,qEAAqE;gBAC9E,UAAU,EAAE,4CAA4C;aACxD,CAAC,CAAC;QACJ,CAAC;QACD,OAAO;YACN,kBAAkB;YAClB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;SACpE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC;YAC1B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,qDAAqD;YAC9D,UAAU,EAAE,4BAA4B,OAAO,CAAC,QAAQ,2DAA2D;SACnH,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,KAAK,SAAS;QACtC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAe;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAEhF,MAAM,QAAQ,GAAG,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,QAAQ,YAAY,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC7E,IAAI,WAAW,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,WAAoB;IAC3D,IAAI,KAAK,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAEpD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,WAAW,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,gBAAgB,CAAC;YAC3B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,mDAAmD;YAC5D,UAAU,EAAE,iDAAiD;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,gBAAgB,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC"}

package/dist/adapters/mock.d.ts

@@ -2,24 +2,36 @@
  * @fileoverview Mock auth adapter for testing
  */
 import { AuthAdapterError } from '../errors.js';
-import type { AuthAdapter, AuthSessionState, SignInOptions, User } from '../types.js';
+import { type ListenerErrorHandler } from '../listeners.js';
+import type { AuthAdapter, AuthSessionState, Session, SignInOptions, SignInOutcome, User } from '../types.js';
 export interface MockAuthAdapterOptions {
     /** Simulated async delay in milliseconds (default: 0) */
     delay?: number;
+    /**
+     * Receives errors thrown by `onAuthStateChange` subscribers. Without it,
+     * they are rethrown in a microtask. Either way the other subscribers still
+     * run and the adapter method that changed the state does not reject.
+     */
+    onListenerError?: ListenerErrorHandler;
 }
 export declare class MockAuthAdapter implements AuthAdapter {
     private state;
-    private listeners;
+    private readonly listeners;
     private readonly delay;
     constructor(options?: MockAuthAdapterOptions);
-    signIn(options: SignInOptions): Promise<void>;
+    signIn(options: SignInOptions): Promise<SignInOutcome>;
     signOut(): Promise<void>;
     getSession(): AuthSessionState;
     onAuthStateChange(callback: (state: AuthSessionState) => void): {
         unsubscribe: () => void;
     };
     _reset(): void;
-    _setUser(user: User): void;
+    /**
+     * Sign in as `user`. The session expires in one hour unless `session`
+     * overrides its fields, for example `{ expiresAt: new Date(0) }` for an
+     * expired session or `{ expiresAt: undefined }` for one without an expiry.
+     */
+    _setUser(user: User, session?: Partial<Session>): void;
     _setLoading(): void;
     _triggerError(code: 'INVALID_CREDENTIALS' | 'TOKEN_EXPIRED' | 'PROVIDER_ERROR' | 'NETWORK_ERROR' | 'REFRESH_FAILED'): AuthAdapterError;
     _getListenerCount(): number;

package/dist/adapters/mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGtF,MAAM,WAAW,sBAAsB;IACtC,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,OAAO,GAAE,sBAA2B;IAI1C,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,UAAU,IAAI,gBAAgB;IAI9B,iBAAiB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE;IAa3F,MAAM,IAAI,IAAI;IAId,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAW1B,WAAW,IAAI,IAAI;IAInB,aAAa,CACZ,IAAI,EACD,qBAAqB,GACrB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GACjB,gBAAgB;IAenB,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,QAAQ;IAOhB,OAAO,CAAC,KAAK;CAGb"}
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,KAAK,oBAAoB,EAAe,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EACX,WAAW,EACX,gBAAgB,EAChB,OAAO,EACP,aAAa,EACb,aAAa,EACb,IAAI,EACJ,MAAM,aAAa,CAAC;AAGrB,MAAM,WAAW,sBAAsB;IACtC,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,OAAO,GAAE,sBAA2B;IAK1C,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAsBtD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,UAAU,IAAI,gBAAgB;IAI9B,iBAAiB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE;IAQ3F,MAAM,IAAI,IAAI;IAId;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE,OAAO,CAAC,OAAO,CAAM,GAAG,IAAI;IAY1D,WAAW,IAAI,IAAI;IAInB,aAAa,CACZ,IAAI,EACD,qBAAqB,GACrB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GACjB,gBAAgB;IAenB,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,KAAK;CAGb"}

package/dist/adapters/mock.js

@@ -2,13 +2,15 @@
  * @fileoverview Mock auth adapter for testing
  */
 import { AuthAdapterError } from '../errors.js';
+import { ListenerSet } from '../listeners.js';
 import { LOADING, UNAUTHENTICATED } from '../types.js';
 export class MockAuthAdapter {
     state = UNAUTHENTICATED;
-    listeners = new Set();
+    listeners;
     delay;
     constructor(options = {}) {
         this.delay = options.delay ?? 0;
+        this.listeners = new ListenerSet(options.onListenerError);
     }
     async signIn(options) {
         if (this.delay > 0) {
@@ -27,6 +29,7 @@ export class MockAuthAdapter {
                 name: email.split('@')[0],
             },
         });
+        return { kind: 'signed-in' };
     }
     async signOut() {
         if (this.delay > 0) {
@@ -38,12 +41,7 @@ export class MockAuthAdapter {
         return this.state;
     }
     onAuthStateChange(callback) {
-        this.listeners.add(callback);
-        return {
-            unsubscribe: () => {
-                this.listeners.delete(callback);
-            },
-        };
+        return this.listeners.add(callback);
     }
     // ═══════════════════════════════════════════════════════════════════════════
     // TEST HELPERS
@@ -51,12 +49,18 @@ export class MockAuthAdapter {
     _reset() {
         this.setState(UNAUTHENTICATED);
     }
-    _setUser(user) {
+    /**
+     * Sign in as `user`. The session expires in one hour unless `session`
+     * overrides its fields, for example `{ expiresAt: new Date(0) }` for an
+     * expired session or `{ expiresAt: undefined }` for one without an expiry.
+     */
+    _setUser(user, session = {}) {
         this.setState({
             status: 'authenticated',
             session: {
                 id: `mock-session-${Date.now()}`,
                 expiresAt: new Date(Date.now() + 3600_000),
+                ...session,
             },
             user,
         });
@@ -83,9 +87,7 @@ export class MockAuthAdapter {
     }
     setState(state) {
         this.state = state;
-        for (const listener of this.listeners) {
-            listener(state);
-        }
+        this.listeners.emit(state);
     }
     sleep(ms) {
         return new Promise((resolve) => setTimeout(resolve, ms));

package/dist/adapters/mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAOvD,MAAM,OAAO,eAAe;IACnB,KAAK,GAAqB,eAAe,CAAC;IAC1C,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAChD,KAAK,CAAS;IAE/B,YAAY,UAAkC,EAAE;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QAClC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;QAEhG,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;aAC1C;YACD,IAAI,EAAE;gBACL,EAAE,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC7B,KAAK;gBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACzB;SACD,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,QAA2C;QAC5D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;YACN,WAAW,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,MAAM;QACL,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAAU;QAClB,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;aAC1C;YACD,IAAI;SACJ,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;QACV,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,aAAa,CACZ,IAKmB;QAEnB,MAAM,SAAS,GAA2C;YACzD,mBAAmB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;YAChE,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC;YAC5D,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE;SACtD,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,iBAAiB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,KAAuB;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;CACD"}
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAA6B,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASzE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAavD,MAAM,OAAO,eAAe;IACnB,KAAK,GAAqB,eAAe,CAAC;IACjC,SAAS,CAAgC;IACzC,KAAK,CAAS;IAE/B,YAAY,UAAkC,EAAE;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QAClC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,QAAQ,MAAM,CAAC;QAEhG,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;aAC1C;YACD,IAAI,EAAE;gBACL,EAAE,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC7B,KAAK;gBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACzB;SACD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,QAA2C;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,MAAM;QACL,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,IAAU,EAAE,UAA4B,EAAE;QAClD,IAAI,CAAC,QAAQ,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACR,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;gBAC1C,GAAG,OAAO;aACV;YACD,IAAI;SACJ,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;QACV,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,aAAa,CACZ,IAKmB;QAEnB,MAAM,SAAS,GAA2C;YACzD,mBAAmB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;YAChE,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC;YAC5D,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE;YACpD,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE;SACtD,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,iBAAiB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,KAAuB;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;CACD"}

package/dist/adapters/provider-errors.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview Helpers for classifying errors thrown by auth provider clients
+ */
+/**
+ * Collect the readable text of a thrown value: the message, plus the `data`
+ * string of a Convex `ConvexError`, which carries the application's message
+ * when the deployment hides server error text.
+ */
+export declare function describeThrown(error: unknown): string;
+/**
+ * Whether a thrown value is a transport failure rather than a provider
+ * answer. Matches the fetch failure messages of Chrome, Firefox, Safari,
+ * undici and cross-fetch.
+ */
+export declare function isKnownNetworkFailure(error: unknown, message: string): boolean;
+//# sourceMappingURL=provider-errors.d.ts.map

package/dist/adapters/provider-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-errors.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOrD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ9E"}

package/dist/adapters/provider-errors.js

@@ -0,0 +1,27 @@
+/**
+ * @fileoverview Helpers for classifying errors thrown by auth provider clients
+ */
+/**
+ * Collect the readable text of a thrown value: the message, plus the `data`
+ * string of a Convex `ConvexError`, which carries the application's message
+ * when the deployment hides server error text.
+ */
+export function describeThrown(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const data = typeof error === 'object' && error !== null && 'data' in error && typeof error.data === 'string'
+        ? error.data
+        : undefined;
+    return data === undefined || message.includes(data) ? message : `${message} (${data})`;
+}
+/**
+ * Whether a thrown value is a transport failure rather than a provider
+ * answer. Matches the fetch failure messages of Chrome, Firefox, Safari,
+ * undici and cross-fetch.
+ */
+export function isKnownNetworkFailure(error, message) {
+    if (error instanceof Error && (error.name === 'NetworkError' || error.name === 'TimeoutError')) {
+        return true;
+    }
+    return /failed to fetch|fetch failed|load failed|networkerror when attempting to fetch|network (?:request )?failed|connection (?:refused|reset|closed)|request timed out|internet connection appears to be offline/i.test(message);
+}
+//# sourceMappingURL=provider-errors.js.map

package/dist/adapters/provider-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-errors.js","sourceRoot":"","sources":["../../src/adapters/provider-errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GACT,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC/F,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,OAAe;IACpE,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,6MAA6M,CAAC,IAAI,CACxN,OAAO,CACP,CAAC;AACH,CAAC"}

package/dist/command-names.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Names of the built-in auth commands
+ *
+ * Kept apart from commands.ts so the middleware can use them without pulling
+ * in the optional `@lushly-dev/afd-server` and `zod` peer dependencies.
+ */
+/**
+ * The commands created by `createAuthCommands`. `createAuthMiddleware` always
+ * lets them through, so a signed-out caller can sign in, sign out and read
+ * the session state.
+ */
+export declare const AUTH_COMMAND_NAMES: readonly ["auth-sign-in", "auth-sign-out", "auth-session-get"];
+//# sourceMappingURL=command-names.d.ts.map

package/dist/command-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-names.d.ts","sourceRoot":"","sources":["../src/command-names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,gEAAiE,CAAC"}

package/dist/command-names.js

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Names of the built-in auth commands
+ *
+ * Kept apart from commands.ts so the middleware can use them without pulling
+ * in the optional `@lushly-dev/afd-server` and `zod` peer dependencies.
+ */
+/**
+ * The commands created by `createAuthCommands`. `createAuthMiddleware` always
+ * lets them through, so a signed-out caller can sign in, sign out and read
+ * the session state.
+ */
+export const AUTH_COMMAND_NAMES = ['auth-sign-in', 'auth-sign-out', 'auth-session-get'];
+//# sourceMappingURL=command-names.js.map

package/dist/command-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-names.js","sourceRoot":"","sources":["../src/command-names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,CAAU,CAAC"}

package/dist/commands.d.ts

@@ -3,13 +3,22 @@
  *
  * Requires optional peer dependencies: @lushly-dev/afd-server, zod
  */
-import { type ZodCommandDefinition } from '@lushly-dev/afd-server';
+import { type ZodCommandDefinition } from '@lushly-dev/afd-server/define';
 import type { AuthAdapter } from './types.js';
+export interface AuthCommandsOptions {
+    /**
+     * How long `auth-sign-in` waits, after the adapter's `signIn()` resolves,
+     * for the adapter to report the new session through `onAuthStateChange`,
+     * in milliseconds (default: 10_000). When the wait runs out, the command
+     * returns the current state with a `SIGN_IN_PENDING` warning.
+     */
+    signInTimeoutMs?: number;
+}
 /**
  * Create AFD command definitions for auth operations.
  *
  * Returns ZodCommandDefinition[] that can be passed directly to `createMcpServer`.
  * Requires `@lushly-dev/afd-server` and `zod` as peer dependencies.
  */
-export declare function createAuthCommands(adapter: AuthAdapter): ZodCommandDefinition[];
+export declare function createAuthCommands(adapter: AuthAdapter, options?: AuthCommandsOptions): ZodCommandDefinition[];
 //# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGlF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,oBAAoB,EAAE,CA0F/E"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,KAAK,EAAE,WAAW,EAAkD,MAAM,YAAY,CAAC;AAE9F,MAAM,WAAW,mBAAmB;IACnC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAwB,GAC/B,oBAAoB,EAAE,CAmGxB"}