@nebutra/identity 0.1.0 → 0.1.1

package/.turbo/turbo-build.log

@@ -0,0 +1,37 @@
+
+> @nebutra/identity@0.1.1 build /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/iam/identity
+> tsup
+
+CLI Building entry: src/index.ts, src/registry.ts, src/types.ts, src/adapters/authjs.ts, src/adapters/clerk.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Using tsup config: /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/iam/identity/tsup.config.ts
+CLI Target: es2022
+CLI Cleaning output folder
+ESM Build start
+ESM dist/index.js               480.00 B
+ESM dist/adapters/authjs.js     134.00 B
+ESM dist/registry.js            255.00 B
+ESM dist/chunk-DOCMMNRB.js      1.34 KB
+ESM dist/types.js               136.00 B
+ESM dist/chunk-MZKK4BRU.js      472.00 B
+ESM dist/chunk-ZERXN5CV.js      1.34 KB
+ESM dist/adapters/clerk.js      131.00 B
+ESM dist/chunk-QKUYKQO6.js      1018.00 B
+ESM dist/index.js.map           71.00 B
+ESM dist/adapters/authjs.js.map 71.00 B
+ESM dist/registry.js.map        71.00 B
+ESM dist/chunk-DOCMMNRB.js.map  3.24 KB
+ESM dist/types.js.map           71.00 B
+ESM dist/chunk-MZKK4BRU.js.map  1.22 KB
+ESM dist/chunk-ZERXN5CV.js.map  2.68 KB
+ESM dist/adapters/clerk.js.map  71.00 B
+ESM dist/chunk-QKUYKQO6.js.map  1.94 KB
+ESM ⚡️ Build success in 85ms
+DTS Build start
+DTS ⚡️ Build success in 29586ms
+DTS dist/index.d.ts           1.17 KB
+DTS dist/registry.d.ts        216.00 B
+DTS dist/adapters/authjs.d.ts 301.00 B
+DTS dist/adapters/clerk.d.ts  298.00 B
+DTS dist/types.d.ts           605.00 B

package/.turbo/turbo-typecheck.log

@@ -0,0 +1,4 @@
+
+> @nebutra/identity@0.1.1 typecheck /home/runner/work/Nebutra-Sailor/Nebutra-Sailor/packages/iam/identity
+> tsc --noEmit
+

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# @nebutra/identity
+
+## 0.1.1
+
+### Patch Changes
+
+- Publish registry package metadata under the MIT license.
+
+- Updated dependencies []:
+  - @nebutra/contracts@0.1.1

package/dist/adapters/authjs.d.ts

@@ -0,0 +1,9 @@
+import { CanonicalIdentity } from '@nebutra/contracts';
+import { IdentityAdapter } from '../types.js';
+
+declare class AuthJsIdentityAdapter implements IdentityAdapter<unknown> {
+    provider: "authjs";
+    mapToCanonical(input: unknown): CanonicalIdentity | null;
+}
+
+export { AuthJsIdentityAdapter };

package/dist/adapters/authjs.js

@@ -0,0 +1,7 @@
+import {
+  AuthJsIdentityAdapter
+} from "../chunk-ZERXN5CV.js";
+export {
+  AuthJsIdentityAdapter
+};
+//# sourceMappingURL=authjs.js.map

package/dist/adapters/authjs.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/adapters/clerk.d.ts

@@ -0,0 +1,9 @@
+import { CanonicalIdentity } from '@nebutra/contracts';
+import { IdentityAdapter } from '../types.js';
+
+declare class ClerkIdentityAdapter implements IdentityAdapter<unknown> {
+    provider: "clerk";
+    mapToCanonical(input: unknown): CanonicalIdentity | null;
+}
+
+export { ClerkIdentityAdapter };

package/dist/adapters/clerk.js

@@ -0,0 +1,7 @@
+import {
+  ClerkIdentityAdapter
+} from "../chunk-QKUYKQO6.js";
+export {
+  ClerkIdentityAdapter
+};
+//# sourceMappingURL=clerk.js.map

package/dist/adapters/clerk.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-DOCMMNRB.js

@@ -0,0 +1,55 @@
+import {
+  IdentityAdapterRegistry
+} from "./chunk-MZKK4BRU.js";
+import {
+  AuthJsIdentityAdapter
+} from "./chunk-ZERXN5CV.js";
+import {
+  ClerkIdentityAdapter
+} from "./chunk-QKUYKQO6.js";
+
+// src/adapters/nebutra.ts
+var NebutraIdentityAdapter = class {
+  provider = "nebutra";
+  mapToCanonical(input) {
+    if (!input.sub) return null;
+    return {
+      provider: "nebutra",
+      userId: input.sub,
+      organizationId: input["nebutra:organization_id"],
+      role: this.mapRole(input["nebutra:role"]),
+      plan: this.mapPlan(input["nebutra:plan"]),
+      email: input.email,
+      claimsVersion: "v1"
+    };
+  }
+  mapRole(role) {
+    const validRoles = ["OWNER", "ADMIN", "MEMBER", "VIEWER"];
+    if (role && validRoles.includes(role)) {
+      return role;
+    }
+    return void 0;
+  }
+  mapPlan(plan) {
+    const validPlans = ["FREE", "PRO", "ENTERPRISE"];
+    if (plan && validPlans.includes(plan)) {
+      return plan;
+    }
+    return void 0;
+  }
+};
+
+// src/registry.ts
+function createDefaultIdentityAdapterRegistry() {
+  const registry = new IdentityAdapterRegistry();
+  registry.register(new ClerkIdentityAdapter());
+  registry.register(new AuthJsIdentityAdapter());
+  registry.register(new NebutraIdentityAdapter());
+  return registry;
+}
+
+export {
+  NebutraIdentityAdapter,
+  createDefaultIdentityAdapterRegistry
+};
+//# sourceMappingURL=chunk-DOCMMNRB.js.map

package/dist/chunk-DOCMMNRB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/nebutra.ts","../src/registry.ts"],"sourcesContent":["/**\n * Nebutra Identity Adapter\n *\n * Maps oidc-provider / Nebutra-issued OIDC tokens to CanonicalIdentity.\n * Used when Nebutra acts as both the IdP AND the resource server —\n * i.e., when a Nebutra service receives an access token issued by\n * the Nebutra IdP and needs to resolve the user identity.\n */\n\nimport type { CanonicalIdentity } from \"@nebutra/contracts\";\nimport type { IdentityAdapter } from \"../types\";\n\ninterface NebutraOIDCClaims {\n  sub: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n  \"nebutra:organization_id\"?: string;\n  \"nebutra:role\"?: string;\n  \"nebutra:plan\"?: string;\n  [key: string]: unknown;\n}\n\nexport class NebutraIdentityAdapter implements IdentityAdapter<NebutraOIDCClaims> {\n  readonly provider = \"nebutra\" as const;\n\n  mapToCanonical(input: NebutraOIDCClaims): CanonicalIdentity | null {\n    if (!input.sub) return null;\n\n    return {\n      provider: \"nebutra\",\n      userId: input.sub,\n      organizationId: input[\"nebutra:organization_id\"],\n      role: this.mapRole(input[\"nebutra:role\"]),\n      plan: this.mapPlan(input[\"nebutra:plan\"]),\n      email: input.email,\n      claimsVersion: \"v1\",\n    };\n  }\n\n  private mapRole(role?: string): \"OWNER\" | \"ADMIN\" | \"MEMBER\" | \"VIEWER\" | undefined {\n    const validRoles = [\"OWNER\", \"ADMIN\", \"MEMBER\", \"VIEWER\"] as const;\n    if (role && validRoles.includes(role as (typeof validRoles)[number])) {\n      return role as (typeof validRoles)[number];\n    }\n    return undefined;\n  }\n\n  private mapPlan(plan?: string): \"FREE\" | \"PRO\" | \"ENTERPRISE\" | undefined {\n    const validPlans = [\"FREE\", \"PRO\", \"ENTERPRISE\"] as const;\n    if (plan && validPlans.includes(plan as (typeof validPlans)[number])) {\n      return plan as (typeof validPlans)[number];\n    }\n    return undefined;\n  }\n}\n","import { AuthJsIdentityAdapter } from \"./adapters/authjs\";\nimport { ClerkIdentityAdapter } from \"./adapters/clerk\";\nimport { NebutraIdentityAdapter } from \"./adapters/nebutra\";\nimport { IdentityAdapterRegistry } from \"./types\";\n\nexport function createDefaultIdentityAdapterRegistry(): IdentityAdapterRegistry {\n  const registry = new IdentityAdapterRegistry();\n  registry.register(new ClerkIdentityAdapter());\n  registry.register(new AuthJsIdentityAdapter());\n  registry.register(new NebutraIdentityAdapter());\n  return registry;\n}\n"],"mappings":";;;;;;;;;;;AAuBO,IAAM,yBAAN,MAA2E;AAAA,EACvE,WAAW;AAAA,EAEpB,eAAe,OAAoD;AACjE,QAAI,CAAC,MAAM,IAAK,QAAO;AAEvB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,gBAAgB,MAAM,yBAAyB;AAAA,MAC/C,MAAM,KAAK,QAAQ,MAAM,cAAc,CAAC;AAAA,MACxC,MAAM,KAAK,QAAQ,MAAM,cAAc,CAAC;AAAA,MACxC,OAAO,MAAM;AAAA,MACb,eAAe;AAAA,IACjB;AAAA,EACF;AAAA,EAEQ,QAAQ,MAAoE;AAClF,UAAM,aAAa,CAAC,SAAS,SAAS,UAAU,QAAQ;AACxD,QAAI,QAAQ,WAAW,SAAS,IAAmC,GAAG;AACpE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,QAAQ,MAA0D;AACxE,UAAM,aAAa,CAAC,QAAQ,OAAO,YAAY;AAC/C,QAAI,QAAQ,WAAW,SAAS,IAAmC,GAAG;AACpE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACF;;;AClDO,SAAS,uCAAgE;AAC9E,QAAM,WAAW,IAAI,wBAAwB;AAC7C,WAAS,SAAS,IAAI,qBAAqB,CAAC;AAC5C,WAAS,SAAS,IAAI,sBAAsB,CAAC;AAC7C,WAAS,SAAS,IAAI,uBAAuB,CAAC;AAC9C,SAAO;AACT;","names":[]}

package/dist/chunk-MZKK4BRU.js

@@ -0,0 +1,22 @@
+// src/types.ts
+var IdentityAdapterRegistry = class {
+  adapters = /* @__PURE__ */ new Map();
+  register(adapter) {
+    this.adapters.set(adapter.provider, adapter);
+  }
+  get(provider) {
+    return this.adapters.get(provider);
+  }
+  map(provider, input) {
+    const adapter = this.get(provider);
+    if (!adapter) {
+      return null;
+    }
+    return adapter.mapToCanonical(input);
+  }
+};
+
+export {
+  IdentityAdapterRegistry
+};
+//# sourceMappingURL=chunk-MZKK4BRU.js.map

package/dist/chunk-MZKK4BRU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { CanonicalIdentity } from \"@nebutra/contracts\";\n\nexport type IdentityProvider = \"clerk\" | \"authjs\" | \"custom\";\n\nexport interface IdentityAdapter<TInput = unknown> {\n  provider: IdentityProvider | string;\n  mapToCanonical(input: TInput): CanonicalIdentity | null;\n}\n\nexport class IdentityAdapterRegistry {\n  private readonly adapters = new Map<string, IdentityAdapter>();\n\n  register(adapter: IdentityAdapter): void {\n    this.adapters.set(adapter.provider, adapter);\n  }\n\n  get(provider: string): IdentityAdapter | undefined {\n    return this.adapters.get(provider);\n  }\n\n  map<TInput = unknown>(provider: string, input: TInput): CanonicalIdentity | null {\n    const adapter = this.get(provider);\n    if (!adapter) {\n      return null;\n    }\n    return adapter.mapToCanonical(input);\n  }\n}\n"],"mappings":";AASO,IAAM,0BAAN,MAA8B;AAAA,EAClB,WAAW,oBAAI,IAA6B;AAAA,EAE7D,SAAS,SAAgC;AACvC,SAAK,SAAS,IAAI,QAAQ,UAAU,OAAO;AAAA,EAC7C;AAAA,EAEA,IAAI,UAA+C;AACjD,WAAO,KAAK,SAAS,IAAI,QAAQ;AAAA,EACnC;AAAA,EAEA,IAAsB,UAAkB,OAAyC;AAC/E,UAAM,UAAU,KAAK,IAAI,QAAQ;AACjC,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,eAAe,KAAK;AAAA,EACrC;AACF;","names":[]}

package/dist/chunk-QKUYKQO6.js

@@ -0,0 +1,35 @@
+// src/adapters/clerk.ts
+import { CanonicalIdentitySchema } from "@nebutra/contracts";
+import { z } from "zod";
+var ClerkPayloadSchema = z.object({
+  sub: z.string().min(1),
+  org_id: z.string().min(1).optional(),
+  org_role: z.enum(["OWNER", "ADMIN", "MEMBER", "VIEWER"]).optional(),
+  sid: z.string().min(1).optional(),
+  email: z.string().email().optional()
+});
+var ClerkIdentityAdapter = class {
+  provider = "clerk";
+  mapToCanonical(input) {
+    const parsed = ClerkPayloadSchema.safeParse(input);
+    if (!parsed.success) {
+      return null;
+    }
+    const candidate = {
+      provider: "clerk",
+      userId: parsed.data.sub,
+      organizationId: parsed.data.org_id,
+      role: parsed.data.org_role,
+      email: parsed.data.email,
+      sessionId: parsed.data.sid,
+      claimsVersion: "v1"
+    };
+    const canonical = CanonicalIdentitySchema.safeParse(candidate);
+    return canonical.success ? canonical.data : null;
+  }
+};
+
+export {
+  ClerkIdentityAdapter
+};
+//# sourceMappingURL=chunk-QKUYKQO6.js.map

package/dist/chunk-QKUYKQO6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/clerk.ts"],"sourcesContent":["import { type CanonicalIdentity, CanonicalIdentitySchema } from \"@nebutra/contracts\";\nimport { z } from \"zod\";\n\nimport type { IdentityAdapter } from \"../types\";\n\nconst ClerkPayloadSchema = z.object({\n  sub: z.string().min(1),\n  org_id: z.string().min(1).optional(),\n  org_role: z.enum([\"OWNER\", \"ADMIN\", \"MEMBER\", \"VIEWER\"]).optional(),\n  sid: z.string().min(1).optional(),\n  email: z.string().email().optional(),\n});\n\nexport class ClerkIdentityAdapter implements IdentityAdapter<unknown> {\n  provider = \"clerk\" as const;\n\n  mapToCanonical(input: unknown): CanonicalIdentity | null {\n    const parsed = ClerkPayloadSchema.safeParse(input);\n    if (!parsed.success) {\n      return null;\n    }\n\n    const candidate = {\n      provider: \"clerk\" as const,\n      userId: parsed.data.sub,\n      organizationId: parsed.data.org_id,\n      role: parsed.data.org_role,\n      email: parsed.data.email,\n      sessionId: parsed.data.sid,\n      claimsVersion: \"v1\" as const,\n    };\n\n    const canonical = CanonicalIdentitySchema.safeParse(candidate);\n    return canonical.success ? canonical.data : null;\n  }\n}\n"],"mappings":";AAAA,SAAiC,+BAA+B;AAChE,SAAS,SAAS;AAIlB,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,KAAK,CAAC,SAAS,SAAS,UAAU,QAAQ,CAAC,EAAE,SAAS;AAAA,EAClE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AACrC,CAAC;AAEM,IAAM,uBAAN,MAA+D;AAAA,EACpE,WAAW;AAAA,EAEX,eAAe,OAA0C;AACvD,UAAM,SAAS,mBAAmB,UAAU,KAAK;AACjD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO;AAAA,IACT;AAEA,UAAM,YAAY;AAAA,MAChB,UAAU;AAAA,MACV,QAAQ,OAAO,KAAK;AAAA,MACpB,gBAAgB,OAAO,KAAK;AAAA,MAC5B,MAAM,OAAO,KAAK;AAAA,MAClB,OAAO,OAAO,KAAK;AAAA,MACnB,WAAW,OAAO,KAAK;AAAA,MACvB,eAAe;AAAA,IACjB;AAEA,UAAM,YAAY,wBAAwB,UAAU,SAAS;AAC7D,WAAO,UAAU,UAAU,UAAU,OAAO;AAAA,EAC9C;AACF;","names":[]}

package/dist/chunk-ZERXN5CV.js

@@ -0,0 +1,46 @@
+// src/adapters/authjs.ts
+import { CanonicalIdentitySchema } from "@nebutra/contracts";
+import { z } from "zod";
+var AuthJsSessionSchema = z.object({
+  user: z.object({
+    id: z.string().min(1).optional(),
+    email: z.string().email().optional()
+  }).optional(),
+  token: z.object({
+    sub: z.string().min(1).optional(),
+    orgId: z.string().min(1).optional(),
+    orgRole: z.enum(["OWNER", "ADMIN", "MEMBER", "VIEWER"]).optional(),
+    sid: z.string().min(1).optional(),
+    plan: z.enum(["FREE", "PRO", "ENTERPRISE"]).optional()
+  }).optional()
+});
+var AuthJsIdentityAdapter = class {
+  provider = "authjs";
+  mapToCanonical(input) {
+    const parsed = AuthJsSessionSchema.safeParse(input);
+    if (!parsed.success) {
+      return null;
+    }
+    const userId = parsed.data.user?.id ?? parsed.data.token?.sub;
+    if (!userId) {
+      return null;
+    }
+    const candidate = {
+      provider: "authjs",
+      userId,
+      organizationId: parsed.data.token?.orgId,
+      role: parsed.data.token?.orgRole,
+      plan: parsed.data.token?.plan,
+      email: parsed.data.user?.email,
+      sessionId: parsed.data.token?.sid,
+      claimsVersion: "v1"
+    };
+    const canonical = CanonicalIdentitySchema.safeParse(candidate);
+    return canonical.success ? canonical.data : null;
+  }
+};
+
+export {
+  AuthJsIdentityAdapter
+};
+//# sourceMappingURL=chunk-ZERXN5CV.js.map

package/dist/chunk-ZERXN5CV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/authjs.ts"],"sourcesContent":["import { type CanonicalIdentity, CanonicalIdentitySchema } from \"@nebutra/contracts\";\nimport { z } from \"zod\";\n\nimport type { IdentityAdapter } from \"../types\";\n\nconst AuthJsSessionSchema = z.object({\n  user: z\n    .object({\n      id: z.string().min(1).optional(),\n      email: z.string().email().optional(),\n    })\n    .optional(),\n  token: z\n    .object({\n      sub: z.string().min(1).optional(),\n      orgId: z.string().min(1).optional(),\n      orgRole: z.enum([\"OWNER\", \"ADMIN\", \"MEMBER\", \"VIEWER\"]).optional(),\n      sid: z.string().min(1).optional(),\n      plan: z.enum([\"FREE\", \"PRO\", \"ENTERPRISE\"]).optional(),\n    })\n    .optional(),\n});\n\nexport class AuthJsIdentityAdapter implements IdentityAdapter<unknown> {\n  provider = \"authjs\" as const;\n\n  mapToCanonical(input: unknown): CanonicalIdentity | null {\n    const parsed = AuthJsSessionSchema.safeParse(input);\n    if (!parsed.success) {\n      return null;\n    }\n\n    const userId = parsed.data.user?.id ?? parsed.data.token?.sub;\n    if (!userId) {\n      return null;\n    }\n\n    const candidate = {\n      provider: \"authjs\" as const,\n      userId,\n      organizationId: parsed.data.token?.orgId,\n      role: parsed.data.token?.orgRole,\n      plan: parsed.data.token?.plan,\n      email: parsed.data.user?.email,\n      sessionId: parsed.data.token?.sid,\n      claimsVersion: \"v1\" as const,\n    };\n\n    const canonical = CanonicalIdentitySchema.safeParse(candidate);\n    return canonical.success ? canonical.data : null;\n  }\n}\n"],"mappings":";AAAA,SAAiC,+BAA+B;AAChE,SAAS,SAAS;AAIlB,IAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,MAAM,EACH,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EACrC,CAAC,EACA,SAAS;AAAA,EACZ,OAAO,EACJ,OAAO;AAAA,IACN,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAChC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAClC,SAAS,EAAE,KAAK,CAAC,SAAS,SAAS,UAAU,QAAQ,CAAC,EAAE,SAAS;AAAA,IACjE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAChC,MAAM,EAAE,KAAK,CAAC,QAAQ,OAAO,YAAY,CAAC,EAAE,SAAS;AAAA,EACvD,CAAC,EACA,SAAS;AACd,CAAC;AAEM,IAAM,wBAAN,MAAgE;AAAA,EACrE,WAAW;AAAA,EAEX,eAAe,OAA0C;AACvD,UAAM,SAAS,oBAAoB,UAAU,KAAK;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,OAAO,KAAK,MAAM,MAAM,OAAO,KAAK,OAAO;AAC1D,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,UAAM,YAAY;AAAA,MAChB,UAAU;AAAA,MACV;AAAA,MACA,gBAAgB,OAAO,KAAK,OAAO;AAAA,MACnC,MAAM,OAAO,KAAK,OAAO;AAAA,MACzB,MAAM,OAAO,KAAK,OAAO;AAAA,MACzB,OAAO,OAAO,KAAK,MAAM;AAAA,MACzB,WAAW,OAAO,KAAK,OAAO;AAAA,MAC9B,eAAe;AAAA,IACjB;AAEA,UAAM,YAAY,wBAAwB,UAAU,SAAS;AAC7D,WAAO,UAAU,UAAU,UAAU,OAAO;AAAA,EAC9C;AACF;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,34 @@
+export { AuthJsIdentityAdapter } from './adapters/authjs.js';
+export { ClerkIdentityAdapter } from './adapters/clerk.js';
+import { CanonicalIdentity } from '@nebutra/contracts';
+import { IdentityAdapter } from './types.js';
+export { IdentityAdapterRegistry, IdentityProvider } from './types.js';
+export { createDefaultIdentityAdapterRegistry } from './registry.js';
+
+/**
+ * Nebutra Identity Adapter
+ *
+ * Maps oidc-provider / Nebutra-issued OIDC tokens to CanonicalIdentity.
+ * Used when Nebutra acts as both the IdP AND the resource server —
+ * i.e., when a Nebutra service receives an access token issued by
+ * the Nebutra IdP and needs to resolve the user identity.
+ */
+
+interface NebutraOIDCClaims {
+    sub: string;
+    email?: string;
+    name?: string;
+    picture?: string;
+    "nebutra:organization_id"?: string;
+    "nebutra:role"?: string;
+    "nebutra:plan"?: string;
+    [key: string]: unknown;
+}
+declare class NebutraIdentityAdapter implements IdentityAdapter<NebutraOIDCClaims> {
+    readonly provider: "nebutra";
+    mapToCanonical(input: NebutraOIDCClaims): CanonicalIdentity | null;
+    private mapRole;
+    private mapPlan;
+}
+
+export { IdentityAdapter, NebutraIdentityAdapter };

package/dist/index.js

@@ -0,0 +1,21 @@
+import {
+  NebutraIdentityAdapter,
+  createDefaultIdentityAdapterRegistry
+} from "./chunk-DOCMMNRB.js";
+import {
+  IdentityAdapterRegistry
+} from "./chunk-MZKK4BRU.js";
+import {
+  AuthJsIdentityAdapter
+} from "./chunk-ZERXN5CV.js";
+import {
+  ClerkIdentityAdapter
+} from "./chunk-QKUYKQO6.js";
+export {
+  AuthJsIdentityAdapter,
+  ClerkIdentityAdapter,
+  IdentityAdapterRegistry,
+  NebutraIdentityAdapter,
+  createDefaultIdentityAdapterRegistry
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/registry.d.ts

@@ -0,0 +1,6 @@
+import { IdentityAdapterRegistry } from './types.js';
+import '@nebutra/contracts';
+
+declare function createDefaultIdentityAdapterRegistry(): IdentityAdapterRegistry;
+
+export { createDefaultIdentityAdapterRegistry };

package/dist/registry.js

@@ -0,0 +1,10 @@
+import {
+  createDefaultIdentityAdapterRegistry
+} from "./chunk-DOCMMNRB.js";
+import "./chunk-MZKK4BRU.js";
+import "./chunk-ZERXN5CV.js";
+import "./chunk-QKUYKQO6.js";
+export {
+  createDefaultIdentityAdapterRegistry
+};
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/types.d.ts

@@ -0,0 +1,15 @@
+import { CanonicalIdentity } from '@nebutra/contracts';
+
+type IdentityProvider = "clerk" | "authjs" | "custom";
+interface IdentityAdapter<TInput = unknown> {
+    provider: IdentityProvider | string;
+    mapToCanonical(input: TInput): CanonicalIdentity | null;
+}
+declare class IdentityAdapterRegistry {
+    private readonly adapters;
+    register(adapter: IdentityAdapter): void;
+    get(provider: string): IdentityAdapter | undefined;
+    map<TInput = unknown>(provider: string, input: TInput): CanonicalIdentity | null;
+}
+
+export { type IdentityAdapter, IdentityAdapterRegistry, type IdentityProvider };

package/dist/types.js

@@ -0,0 +1,7 @@
+import {
+  IdentityAdapterRegistry
+} from "./chunk-MZKK4BRU.js";
+export {
+  IdentityAdapterRegistry
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@nebutra/identity",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Provider-agnostic identity adapter layer (Clerk-first, Auth.js-ready)",
   "private": false,
-  "license": "AGPL-3.0",
+  "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "zod": "^4.3.6",
-    "@nebutra/contracts": "0.1.0"
+    "@nebutra/contracts": "0.1.1"
   },
   "devDependencies": {
     "@types/node": "^22.19.15",