@neutron-build/auth 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tyler
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,25 @@
+# @neutron-build/auth
+
+Authentication middleware for Neutron.
+
+Integrates with better-auth and next-auth. Session management, RBAC, and multi-tenant support.
+
+## Installation
+
+```bash
+npm install @neutron-build/auth
+```
+
+## Usage
+
+```typescript
+import { authMiddleware } from "@neutron-build/auth";
+```
+
+## Documentation
+
+[neutron.build](https://neutron.build)
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,61 @@
+import type { AppContext, MiddlewareFn } from "@neutron-build/core";
+export interface AuthUser {
+    id?: string;
+    email?: string;
+    name?: string;
+    [key: string]: unknown;
+}
+export interface AuthSession<TUser extends AuthUser = AuthUser> {
+    user?: TUser | null;
+    expiresAt?: string | number | Date;
+    [key: string]: unknown;
+}
+export interface NeutronAuthState<TUser extends AuthUser = AuthUser> {
+    adapter: string;
+    session: AuthSession<TUser> | null;
+    user: TUser | null;
+    isAuthenticated: boolean;
+}
+export interface AuthAdapter<TUser extends AuthUser = AuthUser> {
+    name: string;
+    getSession(request: Request): Promise<AuthSession<TUser> | null>;
+}
+export interface AuthContextMiddlewareOptions<TUser extends AuthUser = AuthUser> {
+    adapter: AuthAdapter<TUser>;
+    contextKey?: string;
+}
+export interface ProtectedRouteOptions<TUser extends AuthUser = AuthUser> {
+    adapter?: AuthAdapter<TUser>;
+    contextKey?: string;
+    redirectTo?: string;
+    unauthorizedStatus?: number;
+}
+export declare function createAuthContextMiddleware<TUser extends AuthUser = AuthUser>(options: AuthContextMiddlewareOptions<TUser>): MiddlewareFn;
+export declare function createProtectedRouteMiddleware<TUser extends AuthUser = AuthUser>(options?: ProtectedRouteOptions<TUser>): MiddlewareFn;
+export declare function getAuthFromContext<TUser extends AuthUser = AuthUser>(context: AppContext, contextKey?: string): NeutronAuthState<TUser> | null;
+export declare function requireAuth<TUser extends AuthUser = AuthUser>(context: AppContext, contextKey?: string): NeutronAuthState<TUser>;
+export interface BetterAuthAdapterOptions<TUser extends AuthUser = AuthUser> {
+    auth: BetterAuthLike;
+    name?: string;
+}
+interface BetterAuthLike {
+    api?: {
+        getSession?: (args: {
+            headers: Headers;
+            request: Request;
+        }) => Promise<unknown>;
+    };
+    getSession?: (request: Request) => Promise<unknown>;
+}
+export declare function createBetterAuthAdapter<TUser extends AuthUser = AuthUser>(options: BetterAuthAdapterOptions<TUser>): AuthAdapter<TUser>;
+export interface AuthJsAdapterOptions<TUser extends AuthUser = AuthUser> {
+    auth: AuthJsLike;
+    name?: string;
+}
+type AuthJsLike = ((request: Request) => Promise<unknown>) | {
+    auth?: (request: Request) => Promise<unknown>;
+    getSession?: (request: Request) => Promise<unknown>;
+};
+export declare function createAuthJsAdapter<TUser extends AuthUser = AuthUser>(options: AuthJsAdapterOptions<TUser>): AuthAdapter<TUser>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,WAAW,QAAQ;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IAC5D,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,4BAA4B,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IAC7E,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IACtE,OAAO,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,wBAAgB,2BAA2B,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EAC3E,OAAO,EAAE,4BAA4B,CAAC,KAAK,CAAC,GAC3C,YAAY,CAgBd;AAED,wBAAgB,8BAA8B,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EAC9E,OAAO,GAAE,qBAAqB,CAAC,KAAK,CAAM,GACzC,YAAY,CAgCd;AAED,wBAAgB,kBAAkB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EAClE,OAAO,EAAE,UAAU,EACnB,UAAU,GAAE,MAAiC,GAC5C,gBAAgB,CAAC,KAAK,CAAC,GAAG,IAAI,CAMhC;AAED,wBAAgB,WAAW,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EAC3D,OAAO,EAAE,UAAU,EACnB,UAAU,GAAE,MAAiC,GAC5C,gBAAgB,CAAC,KAAK,CAAC,CAMzB;AAED,MAAM,WAAW,wBAAwB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IACzE,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,UAAU,cAAc;IACtB,GAAG,CAAC,EAAE;QACJ,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACjF,CAAC;IACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACvE,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,GACvC,WAAW,CAAC,KAAK,CAAC,CAapB;AAED,MAAM,WAAW,oBAAoB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ;IACrE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,KAAK,UAAU,GACX,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GACxC;IACE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD,CAAC;AAEN,wBAAgB,mBAAmB,CAAC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACnE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,GACnC,WAAW,CAAC,KAAK,CAAC,CAepB"}

package/dist/index.js

@@ -0,0 +1,166 @@
+const DEFAULT_AUTH_CONTEXT_KEY = "auth";
+export function createAuthContextMiddleware(options) {
+    const contextKey = options.contextKey || DEFAULT_AUTH_CONTEXT_KEY;
+    const adapter = options.adapter;
+    return async (request, context, next) => {
+        const session = await adapter.getSession(request);
+        const user = resolveUserFromSession(session);
+        context[contextKey] = {
+            adapter: adapter.name,
+            session,
+            user,
+            isAuthenticated: Boolean(user),
+        };
+        return await next();
+    };
+}
+export function createProtectedRouteMiddleware(options = {}) {
+    const contextKey = options.contextKey || DEFAULT_AUTH_CONTEXT_KEY;
+    const redirectTo = options.redirectTo;
+    const unauthorizedStatus = options.unauthorizedStatus ?? 401;
+    return async (request, context, next) => {
+        const existing = getAuthFromContext(context, contextKey);
+        let authState = existing;
+        if (!authState && options.adapter) {
+            const session = await options.adapter.getSession(request);
+            const user = resolveUserFromSession(session);
+            authState = {
+                adapter: options.adapter.name,
+                session,
+                user,
+                isAuthenticated: Boolean(user),
+            };
+            context[contextKey] = authState;
+        }
+        if (!authState?.isAuthenticated) {
+            if (redirectTo) {
+                return new Response(null, {
+                    status: 302,
+                    headers: { Location: safeRedirectLocation(redirectTo, request) },
+                });
+            }
+            return new Response("Unauthorized", { status: unauthorizedStatus });
+        }
+        return await next();
+    };
+}
+export function getAuthFromContext(context, contextKey = DEFAULT_AUTH_CONTEXT_KEY) {
+    const value = context[contextKey];
+    if (!value || typeof value !== "object") {
+        return null;
+    }
+    return value;
+}
+export function requireAuth(context, contextKey = DEFAULT_AUTH_CONTEXT_KEY) {
+    const auth = getAuthFromContext(context, contextKey);
+    if (!auth?.isAuthenticated) {
+        throw new Response("Unauthorized", { status: 401 });
+    }
+    return auth;
+}
+export function createBetterAuthAdapter(options) {
+    return {
+        name: options.name || "better-auth",
+        async getSession(request) {
+            let raw = null;
+            if (options.auth.api?.getSession) {
+                raw = await options.auth.api.getSession({ headers: request.headers, request });
+            }
+            else if (options.auth.getSession) {
+                raw = await options.auth.getSession(request);
+            }
+            return normalizeSession(raw);
+        },
+    };
+}
+export function createAuthJsAdapter(options) {
+    return {
+        name: options.name || "authjs",
+        async getSession(request) {
+            let raw = null;
+            if (typeof options.auth === "function") {
+                raw = await options.auth(request);
+            }
+            else if (options.auth.auth) {
+                raw = await options.auth.auth(request);
+            }
+            else if (options.auth.getSession) {
+                raw = await options.auth.getSession(request);
+            }
+            return normalizeSession(raw);
+        },
+    };
+}
+function normalizeSession(value) {
+    if (!value || typeof value !== "object") {
+        return null;
+    }
+    const candidate = value;
+    if ("session" in candidate && candidate.session && typeof candidate.session === "object") {
+        return candidate.session;
+    }
+    // Auth.js commonly returns the session object directly.
+    return candidate;
+}
+function resolveUserFromSession(session) {
+    if (!session || typeof session !== "object") {
+        return null;
+    }
+    // Enforce expiry: an expired session is not authenticated even if an adapter
+    // still returns a user object attached to it.
+    if (isSessionExpired(session)) {
+        return null;
+    }
+    const user = session.user;
+    if (!user || typeof user !== "object") {
+        return null;
+    }
+    return user;
+}
+function isSessionExpired(session) {
+    const exp = session.expiresAt;
+    if (exp === undefined || exp === null) {
+        return false;
+    }
+    let ms;
+    if (exp instanceof Date) {
+        ms = exp.getTime();
+    }
+    else if (typeof exp === "number") {
+        // Accept both seconds- and milliseconds-epoch values.
+        ms = exp < 1e12 ? exp * 1000 : exp;
+    }
+    else {
+        ms = Date.parse(String(exp));
+    }
+    if (Number.isNaN(ms)) {
+        return false;
+    }
+    return ms <= Date.now();
+}
+/**
+ * Resolve a post-auth redirect target to a safe, same-origin Location. Relative
+ * paths are allowed as-is; absolute URLs are permitted only when same-origin;
+ * protocol-relative (`//host`), backslash, and cross-origin targets fall back
+ * to "/" — preventing an open redirect if `redirectTo` is ever derived from
+ * request input.
+ */
+function safeRedirectLocation(target, request) {
+    // Browsers strip TAB/LF/CR from URLs, so "/\t/evil" would resolve to
+    // "//evil" client-side — remove them before the same-origin checks.
+    const cleaned = target.replace(/[\t\n\r]/g, "");
+    if (cleaned.startsWith("/") && !cleaned.startsWith("//") && !cleaned.startsWith("/\\")) {
+        return cleaned;
+    }
+    try {
+        const url = new URL(cleaned, request.url);
+        if (url.origin === new URL(request.url).origin) {
+            return url.pathname + url.search + url.hash;
+        }
+    }
+    catch {
+        // fall through to safe default
+    }
+    return "/";
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAuCA,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,MAAM,UAAU,2BAA2B,CACzC,OAA4C;IAE5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,UAAU,CAAC,GAAG;YACpB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,OAAO;YACP,IAAI;YACJ,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC;SACG,CAAC;QAEpC,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAwC,EAAE;IAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAE7D,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAQ,OAAO,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,SAAS,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC7C,SAAS,GAAG;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC7B,OAAO;gBACP,IAAI;gBACJ,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC;aAC/B,CAAC;YACF,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC;YAChC,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAmB,EACnB,aAAqB,wBAAwB;IAE7C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAmB,EACnB,aAAqB,wBAAwB;IAE7C,MAAM,IAAI,GAAG,kBAAkB,CAAQ,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAcD,MAAM,UAAU,uBAAuB,CACrC,OAAwC;IAExC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,aAAa;QACnC,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,IAAI,GAAG,GAAY,IAAI,CAAC;YACxB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;gBACjC,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,gBAAgB,CAAQ,GAAG,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAcD,MAAM,UAAU,mBAAmB,CACjC,OAAoC;IAEpC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ;QAC9B,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,IAAI,GAAG,GAAY,IAAI,CAAC;YACxB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACvC,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,gBAAgB,CAAQ,GAAG,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,SAAS,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzF,OAAO,SAAS,CAAC,OAA6B,CAAC;IACjD,CAAC;IAED,wDAAwD;IACxD,OAAO,SAA+B,CAAC;AACzC,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkC;IAElC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,8CAA8C;IAC9C,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAa,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC;QACxB,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;SAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,sDAAsD;QACtD,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,MAAc,EAAE,OAAgB;IAC5D,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@neutron-build/auth",
+  "version": "0.1.0",
+  "description": "Auth middleware for Neutron. Better Auth and Auth.js adapters with protected route helpers.",
+  "author": "Tyler",
+  "license": "MIT",
+  "homepage": "https://neutron.build",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/neutron-build/neutron",
+    "directory": "typescript/packages/neutron-auth"
+  },
+  "keywords": [
+    "neutron",
+    "auth",
+    "authentication",
+    "better-auth",
+    "middleware"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.test.*"
+  ],
+  "dependencies": {
+    "@neutron-build/core": "0.1.0"
+  },
+  "peerDependencies": {
+    "better-auth": "*",
+    "next-auth": "*"
+  },
+  "peerDependenciesMeta": {
+    "better-auth": {
+      "optional": true
+    },
+    "next-auth": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.7",
+    "typescript": "^5.7.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "lint": "tsc --noEmit --pretty false",
+    "test": "pnpm run build && node --test --experimental-test-isolation=none dist/index.test.js"
+  }
+}