@rajeev02/auth 0.1.0

package/lib/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @rajeev02/auth
+ * Universal Auth & Identity SDK
+ * OTP, biometric, Aadhaar/DigiLocker, session management, social login
+ *
+ * @author Rajeev Kumar Joshi
+ * @license MIT
+ */
+export { SessionManager } from "./session";
+export type { TokenPair, SessionConfig, AuthState } from "./session";
+export { OtpManager } from "./otp";
+export type { OtpConfig, OtpState } from "./otp";
+export { AuthProviderRegistry, getIndianAuthProviders } from "./providers";
+export type { ProviderType, AuthProvider, ProviderResult, UserProfile, AadhaarConfig, DigiLockerConfig, AadhaarStep, } from "./providers";
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/lib/index.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIndianAuthProviders = exports.AuthProviderRegistry = exports.OtpManager = exports.SessionManager = void 0;
+/**
+ * @rajeev02/auth
+ * Universal Auth & Identity SDK
+ * OTP, biometric, Aadhaar/DigiLocker, session management, social login
+ *
+ * @author Rajeev Kumar Joshi
+ * @license MIT
+ */
+var session_1 = require("./session");
+Object.defineProperty(exports, "SessionManager", { enumerable: true, get: function () { return session_1.SessionManager; } });
+var otp_1 = require("./otp");
+Object.defineProperty(exports, "OtpManager", { enumerable: true, get: function () { return otp_1.OtpManager; } });
+var providers_1 = require("./providers");
+Object.defineProperty(exports, "AuthProviderRegistry", { enumerable: true, get: function () { return providers_1.AuthProviderRegistry; } });
+Object.defineProperty(exports, "getIndianAuthProviders", { enumerable: true, get: function () { return providers_1.getIndianAuthProviders; } });
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACH,qCAA2C;AAAlC,yGAAA,cAAc,OAAA;AAGvB,6BAAmC;AAA1B,iGAAA,UAAU,OAAA;AAGnB,yCAA2E;AAAlE,iHAAA,oBAAoB,OAAA;AAAE,mHAAA,sBAAsB,OAAA"}

package/lib/otp/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @rajeev02/auth — OTP Authentication
+ * Phone/email OTP flow with rate limiting, cooldown timer, auto-read
+ */
+export interface OtpConfig {
+    onSendOtp: (destination: string, method: "sms" | "email" | "whatsapp") => Promise<{
+        requestId: string;
+        expiresInSeconds: number;
+    }>;
+    onVerifyOtp: (requestId: string, otp: string) => Promise<{
+        success: boolean;
+        tokens?: {
+            accessToken: string;
+            refreshToken: string;
+            accessExpiresAt: number;
+            refreshExpiresAt: number;
+        };
+    }>;
+    otpLength?: number;
+    resendCooldownSeconds?: number;
+    maxAttempts?: number;
+    lockoutSeconds?: number;
+}
+export type OtpState = "idle" | "sending" | "waiting_for_otp" | "verifying" | "verified" | "failed" | "locked";
+export declare class OtpManager {
+    private config;
+    private state;
+    private requestId;
+    private attempts;
+    private resendCooldownEnd;
+    private lockoutEnd;
+    private expiresAt;
+    private listeners;
+    constructor(config: OtpConfig);
+    sendOtp(destination: string, method?: "sms" | "email" | "whatsapp"): Promise<boolean>;
+    verifyOtp(otp: string): Promise<{
+        success: boolean;
+        tokens?: unknown;
+    }>;
+    resendOtp(destination: string, method?: "sms" | "email" | "whatsapp"): Promise<boolean>;
+    getResendCooldownSeconds(): number;
+    getExpirySeconds(): number;
+    isLocked(): boolean;
+    isExpired(): boolean;
+    isInCooldown(): boolean;
+    getState(): OtpState;
+    getAttempts(): number;
+    onStateChange(listener: (state: OtpState) => void): () => void;
+    private setState;
+    private reset;
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/otp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/otp/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,CACT,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,UAAU,KACjC,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,WAAW,EAAE,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,KACR,OAAO,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE;YACP,WAAW,EAAE,MAAM,CAAC;YACpB,YAAY,EAAE,MAAM,CAAC;YACrB,eAAe,EAAE,MAAM,CAAC;YACxB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,SAAS,GACT,iBAAiB,GACjB,WAAW,GACX,UAAU,GACV,QAAQ,GACR,QAAQ,CAAC;AAEb,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,SAAS,CAA6C;gBAElD,MAAM,EAAE,SAAS;IAIvB,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,KAAK,GAAG,OAAO,GAAG,UAAkB,GAC3C,OAAO,CAAC,OAAO,CAAC;IAsBb,SAAS,CACb,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAiC5C,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,KAAK,GAAG,OAAO,GAAG,UAAkB,GAC3C,OAAO,CAAC,OAAO,CAAC;IAInB,wBAAwB,IAAI,MAAM;IAIlC,gBAAgB,IAAI,MAAM;IAI1B,QAAQ,IAAI,OAAO;IAGnB,SAAS,IAAI,OAAO;IAGpB,YAAY,IAAI,OAAO;IAGvB,QAAQ,IAAI,QAAQ;IAGpB,WAAW,IAAI,MAAM;IAIrB,aAAa,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI;IAK9D,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,KAAK;CAKd"}

package/lib/otp/index.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * @rajeev02/auth — OTP Authentication
+ * Phone/email OTP flow with rate limiting, cooldown timer, auto-read
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpManager = void 0;
+class OtpManager {
+    constructor(config) {
+        this.state = "idle";
+        this.requestId = null;
+        this.attempts = 0;
+        this.resendCooldownEnd = 0;
+        this.lockoutEnd = 0;
+        this.expiresAt = 0;
+        this.listeners = new Set();
+        this.config = config;
+    }
+    async sendOtp(destination, method = "sms") {
+        if (this.isLocked()) {
+            this.setState("locked");
+            return false;
+        }
+        if (this.isInCooldown())
+            return false;
+        this.setState("sending");
+        try {
+            const result = await this.config.onSendOtp(destination, method);
+            this.requestId = result.requestId;
+            this.expiresAt = Date.now() + result.expiresInSeconds * 1000;
+            this.resendCooldownEnd =
+                Date.now() + (this.config.resendCooldownSeconds ?? 30) * 1000;
+            this.setState("waiting_for_otp");
+            return true;
+        }
+        catch {
+            this.setState("failed");
+            return false;
+        }
+    }
+    async verifyOtp(otp) {
+        if (!this.requestId || this.isLocked())
+            return { success: false };
+        if (this.isExpired()) {
+            this.setState("failed");
+            return { success: false };
+        }
+        this.setState("verifying");
+        this.attempts++;
+        const maxAttempts = this.config.maxAttempts ?? 5;
+        if (this.attempts >= maxAttempts) {
+            this.lockoutEnd = Date.now() + (this.config.lockoutSeconds ?? 300) * 1000;
+            this.setState("locked");
+            return { success: false };
+        }
+        try {
+            const result = await this.config.onVerifyOtp(this.requestId, otp);
+            if (result.success) {
+                this.setState("verified");
+                this.reset();
+                return { success: true, tokens: result.tokens };
+            }
+            else {
+                this.setState("waiting_for_otp");
+                return { success: false };
+            }
+        }
+        catch {
+            this.setState("failed");
+            return { success: false };
+        }
+    }
+    async resendOtp(destination, method = "sms") {
+        return this.sendOtp(destination, method);
+    }
+    getResendCooldownSeconds() {
+        return Math.max(0, Math.ceil((this.resendCooldownEnd - Date.now()) / 1000));
+    }
+    getExpirySeconds() {
+        return Math.max(0, Math.ceil((this.expiresAt - Date.now()) / 1000));
+    }
+    isLocked() {
+        return this.lockoutEnd > Date.now();
+    }
+    isExpired() {
+        return this.expiresAt > 0 && this.expiresAt < Date.now();
+    }
+    isInCooldown() {
+        return this.resendCooldownEnd > Date.now();
+    }
+    getState() {
+        return this.state;
+    }
+    getAttempts() {
+        return this.attempts;
+    }
+    onStateChange(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    setState(state) {
+        this.state = state;
+        for (const l of this.listeners) {
+            try {
+                l(state);
+            }
+            catch { }
+        }
+    }
+    reset() {
+        this.attempts = 0;
+        this.requestId = null;
+        this.expiresAt = 0;
+    }
+}
+exports.OtpManager = OtpManager;
+//# sourceMappingURL=index.js.map

package/lib/otp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/otp/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAkCH,MAAa,UAAU;IAUrB,YAAY,MAAiB;QARrB,UAAK,GAAa,MAAM,CAAC;QACzB,cAAS,GAAkB,IAAI,CAAC;QAChC,aAAQ,GAAW,CAAC,CAAC;QACrB,sBAAiB,GAAW,CAAC,CAAC;QAC9B,eAAU,GAAW,CAAC,CAAC;QACvB,cAAS,GAAW,CAAC,CAAC;QACtB,cAAS,GAAmC,IAAI,GAAG,EAAE,CAAC;QAG5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,SAAuC,KAAK;QAE5C,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,KAAK,CAAC;QAEtC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7D,IAAI,CAAC,iBAAiB;gBACpB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,GAAW;QAEX,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;YAC1E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,SAAuC,KAAK;QAE5C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,YAAY;QACV,OAAO,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;IACD,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,aAAa,CAAC,QAAmC;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,QAAQ,CAAC,KAAe;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,CAAC;CACF;AA5HD,gCA4HC"}

package/lib/providers/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @rajeev02/auth — Identity Providers
+ * Abstraction layer for Aadhaar eKYC, DigiLocker, Google, Apple, Facebook login
+ */
+export type ProviderType = "phone_otp" | "google" | "apple" | "facebook" | "aadhaar" | "digilocker" | "custom";
+export interface AuthProvider {
+    type: ProviderType;
+    name: string;
+    icon?: string;
+    enabled: boolean;
+}
+export interface ProviderResult {
+    success: boolean;
+    provider: ProviderType;
+    providerToken?: string;
+    profile?: UserProfile;
+    error?: string;
+}
+export interface UserProfile {
+    id?: string;
+    name?: string;
+    email?: string;
+    phone?: string;
+    photoUrl?: string;
+    aadhaarMasked?: string;
+    digilockerDocs?: string[];
+    emailVerified?: boolean;
+    phoneVerified?: boolean;
+    raw?: Record<string, unknown>;
+}
+export type AadhaarStep = "enter_aadhaar" | "consent" | "otp_sent" | "otp_verify" | "kyc_complete" | "failed";
+export interface AadhaarConfig {
+    initiateOtpUrl: string;
+    verifyOtpUrl: string;
+    apiKey: string;
+    sandbox?: boolean;
+}
+export interface DigiLockerConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    requestedDocTypes?: ("aadhaar" | "pan" | "driving_license" | "voter_id" | "passport")[];
+}
+/**
+ * Auth Provider Registry — manages available login methods
+ */
+export declare class AuthProviderRegistry {
+    private providers;
+    private callbacks;
+    register(provider: AuthProvider, handler: (config?: unknown) => Promise<ProviderResult>): void;
+    getAvailable(): AuthProvider[];
+    login(type: ProviderType, config?: unknown): Promise<ProviderResult>;
+    isAvailable(type: ProviderType): boolean;
+    setEnabled(type: ProviderType, enabled: boolean): void;
+}
+export declare function getIndianAuthProviders(): AuthProvider[];
+//# sourceMappingURL=index.d.ts.map

package/lib/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,QAAQ,GACR,OAAO,GACP,UAAU,GACV,SAAS,GACT,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,SAAS,GACT,UAAU,GACV,YAAY,GACZ,cAAc,GACd,QAAQ,CAAC;AAEb,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,CAChB,SAAS,GACT,KAAK,GACL,iBAAiB,GACjB,UAAU,GACV,UAAU,CACb,EAAE,CAAC;CACL;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,SAAS,CAGH;IAEd,QAAQ,CACN,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,CAAC,GACrD,IAAI;IAKP,YAAY,IAAI,YAAY,EAAE;IAIxB,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IAgB1E,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;IAKxC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;CAIvD;AAED,wBAAgB,sBAAsB,IAAI,YAAY,EAAE,CAavD"}

package/lib/providers/index.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * @rajeev02/auth — Identity Providers
+ * Abstraction layer for Aadhaar eKYC, DigiLocker, Google, Apple, Facebook login
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthProviderRegistry = void 0;
+exports.getIndianAuthProviders = getIndianAuthProviders;
+/**
+ * Auth Provider Registry — manages available login methods
+ */
+class AuthProviderRegistry {
+    constructor() {
+        this.providers = new Map();
+        this.callbacks = new Map();
+    }
+    register(provider, handler) {
+        this.providers.set(provider.type, provider);
+        this.callbacks.set(provider.type, handler);
+    }
+    getAvailable() {
+        return Array.from(this.providers.values()).filter((p) => p.enabled);
+    }
+    async login(type, config) {
+        const handler = this.callbacks.get(type);
+        if (!handler) {
+            return {
+                success: false,
+                provider: type,
+                error: `Provider ${type} not registered`,
+            };
+        }
+        try {
+            return await handler(config);
+        }
+        catch (e) {
+            return { success: false, provider: type, error: String(e) };
+        }
+    }
+    isAvailable(type) {
+        const p = this.providers.get(type);
+        return p?.enabled ?? false;
+    }
+    setEnabled(type, enabled) {
+        const p = this.providers.get(type);
+        if (p)
+            p.enabled = enabled;
+    }
+}
+exports.AuthProviderRegistry = AuthProviderRegistry;
+function getIndianAuthProviders() {
+    return [
+        { type: "phone_otp", name: "Phone OTP", enabled: true },
+        { type: "google", name: "Google", icon: "google", enabled: true },
+        { type: "aadhaar", name: "Aadhaar eKYC", icon: "aadhaar", enabled: false },
+        {
+            type: "digilocker",
+            name: "DigiLocker",
+            icon: "digilocker",
+            enabled: false,
+        },
+        { type: "apple", name: "Apple", icon: "apple", enabled: false },
+    ];
+}
+//# sourceMappingURL=index.js.map

package/lib/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAoHH,wDAaC;AA9DD;;GAEG;AACH,MAAa,oBAAoB;IAAjC;QACU,cAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;QACvD,cAAS,GAGb,IAAI,GAAG,EAAE,CAAC;IAuChB,CAAC;IArCC,QAAQ,CACN,QAAsB,EACtB,OAAsD;QAEtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAkB,EAAE,MAAgB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,YAAY,IAAI,iBAAiB;aACzC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAkB;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,OAAO,IAAI,KAAK,CAAC;IAC7B,CAAC;IAED,UAAU,CAAC,IAAkB,EAAE,OAAgB;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,CAAC;CACF;AA5CD,oDA4CC;AAED,SAAgB,sBAAsB;IACpC,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;QACvD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QACjE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC1E;YACE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK;SACf;QACD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;KAChE,CAAC;AACJ,CAAC"}

package/lib/session/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @rajeev02/auth — Session Manager
+ * Handles JWT access/refresh tokens, auto-refresh, secure persistence, session expiry
+ */
+export interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+    accessExpiresAt: number;
+    refreshExpiresAt: number;
+}
+export interface SessionConfig {
+    onRefreshToken: (refreshToken: string) => Promise<TokenPair | null>;
+    onSessionExpired: () => void;
+    onPersistTokens?: (tokens: TokenPair) => Promise<void>;
+    onLoadTokens?: () => Promise<TokenPair | null>;
+    refreshBufferMs?: number;
+}
+export type AuthState = "initializing" | "authenticated" | "unauthenticated" | "refreshing";
+export declare class SessionManager {
+    private tokens;
+    private config;
+    private refreshTimer;
+    private state;
+    private listeners;
+    constructor(config: SessionConfig);
+    initialize(): Promise<AuthState>;
+    setTokens(tokens: TokenPair): Promise<void>;
+    getAccessToken(): Promise<string | null>;
+    getState(): AuthState;
+    isAuthenticated(): boolean;
+    logout(): Promise<void>;
+    onStateChange(listener: (state: AuthState) => void): () => void;
+    static decodeToken(token: string): Record<string, unknown> | null;
+    getUserFromToken(): Record<string, unknown> | null;
+    private refresh;
+    private scheduleRefresh;
+    private setState;
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpE,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GACjB,cAAc,GACd,eAAe,GACf,iBAAiB,GACjB,YAAY,CAAC;AAEjB,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,SAAS,CAA8C;gBAEnD,MAAM,EAAE,aAAa;IAI3B,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC;IAsBhC,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3C,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS9C,QAAQ,IAAI,SAAS;IAGrB,eAAe,IAAI,OAAO;IAIpB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAe7B,aAAa,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,MAAM,IAAI;IAK/D,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAWjE,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;YAKpC,OAAO;IA8BrB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,QAAQ;CAQjB"}

package/lib/session/index.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * @rajeev02/auth — Session Manager
+ * Handles JWT access/refresh tokens, auto-refresh, secure persistence, session expiry
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionManager = void 0;
+class SessionManager {
+    constructor(config) {
+        this.tokens = null;
+        this.refreshTimer = null;
+        this.state = "initializing";
+        this.listeners = new Set();
+        this.config = config;
+    }
+    async initialize() {
+        if (this.config.onLoadTokens) {
+            try {
+                const tokens = await this.config.onLoadTokens();
+                if (tokens && tokens.refreshExpiresAt > Date.now()) {
+                    this.tokens = tokens;
+                    if (tokens.accessExpiresAt > Date.now()) {
+                        this.setState("authenticated");
+                        this.scheduleRefresh();
+                    }
+                    else {
+                        await this.refresh();
+                    }
+                    return this.state;
+                }
+            }
+            catch (_) {
+                /* persisted tokens invalid */
+            }
+        }
+        this.setState("unauthenticated");
+        return this.state;
+    }
+    async setTokens(tokens) {
+        this.tokens = tokens;
+        this.setState("authenticated");
+        this.scheduleRefresh();
+        if (this.config.onPersistTokens) {
+            await this.config.onPersistTokens(tokens);
+        }
+    }
+    async getAccessToken() {
+        if (!this.tokens)
+            return null;
+        const buffer = this.config.refreshBufferMs ?? 60000;
+        if (this.tokens.accessExpiresAt - Date.now() < buffer) {
+            await this.refresh();
+        }
+        return this.tokens?.accessToken ?? null;
+    }
+    getState() {
+        return this.state;
+    }
+    isAuthenticated() {
+        return this.state === "authenticated" && this.tokens !== null;
+    }
+    async logout() {
+        this.tokens = null;
+        if (this.refreshTimer)
+            clearTimeout(this.refreshTimer);
+        this.refreshTimer = null;
+        this.setState("unauthenticated");
+        if (this.config.onPersistTokens) {
+            await this.config.onPersistTokens({
+                accessToken: "",
+                refreshToken: "",
+                accessExpiresAt: 0,
+                refreshExpiresAt: 0,
+            });
+        }
+    }
+    onStateChange(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    static decodeToken(token) {
+        try {
+            const parts = token.split(".");
+            if (parts.length !== 3)
+                return null;
+            const payload = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+            return JSON.parse(atob(payload));
+        }
+        catch {
+            return null;
+        }
+    }
+    getUserFromToken() {
+        if (!this.tokens)
+            return null;
+        return SessionManager.decodeToken(this.tokens.accessToken);
+    }
+    async refresh() {
+        if (!this.tokens?.refreshToken) {
+            this.setState("unauthenticated");
+            this.config.onSessionExpired();
+            return;
+        }
+        this.setState("refreshing");
+        try {
+            const newTokens = await this.config.onRefreshToken(this.tokens.refreshToken);
+            if (newTokens) {
+                this.tokens = newTokens;
+                this.setState("authenticated");
+                this.scheduleRefresh();
+                if (this.config.onPersistTokens) {
+                    await this.config.onPersistTokens(newTokens);
+                }
+            }
+            else {
+                this.tokens = null;
+                this.setState("unauthenticated");
+                this.config.onSessionExpired();
+            }
+        }
+        catch {
+            this.tokens = null;
+            this.setState("unauthenticated");
+            this.config.onSessionExpired();
+        }
+    }
+    scheduleRefresh() {
+        if (this.refreshTimer)
+            clearTimeout(this.refreshTimer);
+        if (!this.tokens)
+            return;
+        const buffer = this.config.refreshBufferMs ?? 60000;
+        const delay = Math.max(0, this.tokens.accessExpiresAt - Date.now() - buffer);
+        this.refreshTimer = setTimeout(() => this.refresh(), delay);
+    }
+    setState(state) {
+        this.state = state;
+        for (const l of this.listeners) {
+            try {
+                l(state);
+            }
+            catch { }
+        }
+    }
+}
+exports.SessionManager = SessionManager;
+//# sourceMappingURL=index.js.map

package/lib/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAuBH,MAAa,cAAc;IAOzB,YAAY,MAAqB;QANzB,WAAM,GAAqB,IAAI,CAAC;QAEhC,iBAAY,GAAyC,IAAI,CAAC;QAC1D,UAAK,GAAc,cAAc,CAAC;QAClC,cAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;QAG7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChD,IAAI,MAAM,IAAI,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,IAAI,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACxC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;wBAC/B,IAAI,CAAC,eAAe,EAAE,CAAC;oBACzB,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;oBACvB,CAAC;oBACD,OAAO,IAAI,CAAC,KAAK,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,8BAA8B;YAChC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAiB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC/B,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,eAAe;QACb,OAAO,IAAI,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,YAAY;YAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBAChC,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,EAAE;gBAChB,eAAe,EAAE,CAAC;gBAClB,gBAAgB,EAAE,CAAC;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,aAAa,CAAC,QAAoC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAY,CACzB,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAC/B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAChC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,YAAY;YAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAClD,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAEO,QAAQ,CAAC,KAAgB;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA/ID,wCA+IC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@rajeev02/auth",
+  "version": "0.1.0",
+  "description": "Universal Auth & Identity SDK — OTP, biometric, Aadhaar/DigiLocker, session management, social login",
+  "main": "lib/index.js",
+  "author": "Rajeev Kumar Joshi <rajeevjoshi91@gmail.com> (https://rajeev02.github.io)",
+  "license": "MIT",
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf lib",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "react-native",
+    "auth",
+    "oauth",
+    "biometric",
+    "session"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Rajeev02/rajeev-sdk",
+    "directory": "packages/auth"
+  },
+  "homepage": "https://github.com/Rajeev02/rajeev-sdk#readme",
+  "bugs": {
+    "url": "https://github.com/Rajeev02/rajeev-sdk/issues"
+  },
+  "files": [
+    "lib/",
+    "src/",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "react": ">=18.3.0",
+    "react-native": ">=0.84.0"
+  },
+  "peerDependenciesMeta": {
+    "react-native": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/react": "^19.0.0",
+    "typescript": "^5.4.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,24 @@
+/**
+ * @rajeev02/auth
+ * Universal Auth & Identity SDK
+ * OTP, biometric, Aadhaar/DigiLocker, session management, social login
+ *
+ * @author Rajeev Kumar Joshi
+ * @license MIT
+ */
+export { SessionManager } from "./session";
+export type { TokenPair, SessionConfig, AuthState } from "./session";
+
+export { OtpManager } from "./otp";
+export type { OtpConfig, OtpState } from "./otp";
+
+export { AuthProviderRegistry, getIndianAuthProviders } from "./providers";
+export type {
+  ProviderType,
+  AuthProvider,
+  ProviderResult,
+  UserProfile,
+  AadhaarConfig,
+  DigiLockerConfig,
+  AadhaarStep,
+} from "./providers";

package/src/otp/index.ts

@@ -0,0 +1,162 @@
+/**
+ * @rajeev02/auth — OTP Authentication
+ * Phone/email OTP flow with rate limiting, cooldown timer, auto-read
+ */
+
+export interface OtpConfig {
+  onSendOtp: (
+    destination: string,
+    method: "sms" | "email" | "whatsapp",
+  ) => Promise<{ requestId: string; expiresInSeconds: number }>;
+  onVerifyOtp: (
+    requestId: string,
+    otp: string,
+  ) => Promise<{
+    success: boolean;
+    tokens?: {
+      accessToken: string;
+      refreshToken: string;
+      accessExpiresAt: number;
+      refreshExpiresAt: number;
+    };
+  }>;
+  otpLength?: number;
+  resendCooldownSeconds?: number;
+  maxAttempts?: number;
+  lockoutSeconds?: number;
+}
+
+export type OtpState =
+  | "idle"
+  | "sending"
+  | "waiting_for_otp"
+  | "verifying"
+  | "verified"
+  | "failed"
+  | "locked";
+
+export class OtpManager {
+  private config: OtpConfig;
+  private state: OtpState = "idle";
+  private requestId: string | null = null;
+  private attempts: number = 0;
+  private resendCooldownEnd: number = 0;
+  private lockoutEnd: number = 0;
+  private expiresAt: number = 0;
+  private listeners: Set<(state: OtpState) => void> = new Set();
+
+  constructor(config: OtpConfig) {
+    this.config = config;
+  }
+
+  async sendOtp(
+    destination: string,
+    method: "sms" | "email" | "whatsapp" = "sms",
+  ): Promise<boolean> {
+    if (this.isLocked()) {
+      this.setState("locked");
+      return false;
+    }
+    if (this.isInCooldown()) return false;
+
+    this.setState("sending");
+    try {
+      const result = await this.config.onSendOtp(destination, method);
+      this.requestId = result.requestId;
+      this.expiresAt = Date.now() + result.expiresInSeconds * 1000;
+      this.resendCooldownEnd =
+        Date.now() + (this.config.resendCooldownSeconds ?? 30) * 1000;
+      this.setState("waiting_for_otp");
+      return true;
+    } catch {
+      this.setState("failed");
+      return false;
+    }
+  }
+
+  async verifyOtp(
+    otp: string,
+  ): Promise<{ success: boolean; tokens?: unknown }> {
+    if (!this.requestId || this.isLocked()) return { success: false };
+    if (this.isExpired()) {
+      this.setState("failed");
+      return { success: false };
+    }
+
+    this.setState("verifying");
+    this.attempts++;
+
+    const maxAttempts = this.config.maxAttempts ?? 5;
+    if (this.attempts >= maxAttempts) {
+      this.lockoutEnd = Date.now() + (this.config.lockoutSeconds ?? 300) * 1000;
+      this.setState("locked");
+      return { success: false };
+    }
+
+    try {
+      const result = await this.config.onVerifyOtp(this.requestId, otp);
+      if (result.success) {
+        this.setState("verified");
+        this.reset();
+        return { success: true, tokens: result.tokens };
+      } else {
+        this.setState("waiting_for_otp");
+        return { success: false };
+      }
+    } catch {
+      this.setState("failed");
+      return { success: false };
+    }
+  }
+
+  async resendOtp(
+    destination: string,
+    method: "sms" | "email" | "whatsapp" = "sms",
+  ): Promise<boolean> {
+    return this.sendOtp(destination, method);
+  }
+
+  getResendCooldownSeconds(): number {
+    return Math.max(0, Math.ceil((this.resendCooldownEnd - Date.now()) / 1000));
+  }
+
+  getExpirySeconds(): number {
+    return Math.max(0, Math.ceil((this.expiresAt - Date.now()) / 1000));
+  }
+
+  isLocked(): boolean {
+    return this.lockoutEnd > Date.now();
+  }
+  isExpired(): boolean {
+    return this.expiresAt > 0 && this.expiresAt < Date.now();
+  }
+  isInCooldown(): boolean {
+    return this.resendCooldownEnd > Date.now();
+  }
+  getState(): OtpState {
+    return this.state;
+  }
+  getAttempts(): number {
+    return this.attempts;
+  }
+
+  onStateChange(listener: (state: OtpState) => void): () => void {
+    this.listeners.add(listener);
+    return () => this.listeners.delete(listener);
+  }
+
+  private setState(state: OtpState): void {
+    this.state = state;
+    for (const l of this.listeners) {
+      try {
+        l(state);
+      } catch {}
+    }
+  }
+
+  private reset(): void {
+    this.attempts = 0;
+    this.requestId = null;
+    this.expiresAt = 0;
+  }
+}

package/src/providers/index.ts

@@ -0,0 +1,133 @@
+/**
+ * @rajeev02/auth — Identity Providers
+ * Abstraction layer for Aadhaar eKYC, DigiLocker, Google, Apple, Facebook login
+ */
+
+export type ProviderType =
+  | "phone_otp"
+  | "google"
+  | "apple"
+  | "facebook"
+  | "aadhaar"
+  | "digilocker"
+  | "custom";
+
+export interface AuthProvider {
+  type: ProviderType;
+  name: string;
+  icon?: string;
+  enabled: boolean;
+}
+
+export interface ProviderResult {
+  success: boolean;
+  provider: ProviderType;
+  providerToken?: string;
+  profile?: UserProfile;
+  error?: string;
+}
+
+export interface UserProfile {
+  id?: string;
+  name?: string;
+  email?: string;
+  phone?: string;
+  photoUrl?: string;
+  aadhaarMasked?: string;
+  digilockerDocs?: string[];
+  emailVerified?: boolean;
+  phoneVerified?: boolean;
+  raw?: Record<string, unknown>;
+}
+
+export type AadhaarStep =
+  | "enter_aadhaar"
+  | "consent"
+  | "otp_sent"
+  | "otp_verify"
+  | "kyc_complete"
+  | "failed";
+
+export interface AadhaarConfig {
+  initiateOtpUrl: string;
+  verifyOtpUrl: string;
+  apiKey: string;
+  sandbox?: boolean;
+}
+
+export interface DigiLockerConfig {
+  clientId: string;
+  clientSecret: string;
+  redirectUri: string;
+  requestedDocTypes?: (
+    | "aadhaar"
+    | "pan"
+    | "driving_license"
+    | "voter_id"
+    | "passport"
+  )[];
+}
+
+/**
+ * Auth Provider Registry — manages available login methods
+ */
+export class AuthProviderRegistry {
+  private providers: Map<ProviderType, AuthProvider> = new Map();
+  private callbacks: Map<
+    ProviderType,
+    (config?: unknown) => Promise<ProviderResult>
+  > = new Map();
+
+  register(
+    provider: AuthProvider,
+    handler: (config?: unknown) => Promise<ProviderResult>,
+  ): void {
+    this.providers.set(provider.type, provider);
+    this.callbacks.set(provider.type, handler);
+  }
+
+  getAvailable(): AuthProvider[] {
+    return Array.from(this.providers.values()).filter((p) => p.enabled);
+  }
+
+  async login(type: ProviderType, config?: unknown): Promise<ProviderResult> {
+    const handler = this.callbacks.get(type);
+    if (!handler) {
+      return {
+        success: false,
+        provider: type,
+        error: `Provider ${type} not registered`,
+      };
+    }
+    try {
+      return await handler(config);
+    } catch (e) {
+      return { success: false, provider: type, error: String(e) };
+    }
+  }
+
+  isAvailable(type: ProviderType): boolean {
+    const p = this.providers.get(type);
+    return p?.enabled ?? false;
+  }
+
+  setEnabled(type: ProviderType, enabled: boolean): void {
+    const p = this.providers.get(type);
+    if (p) p.enabled = enabled;
+  }
+}
+
+export function getIndianAuthProviders(): AuthProvider[] {
+  return [
+    { type: "phone_otp", name: "Phone OTP", enabled: true },
+    { type: "google", name: "Google", icon: "google", enabled: true },
+    { type: "aadhaar", name: "Aadhaar eKYC", icon: "aadhaar", enabled: false },
+    {
+      type: "digilocker",
+      name: "DigiLocker",
+      icon: "digilocker",
+      enabled: false,
+    },
+    { type: "apple", name: "Apple", icon: "apple", enabled: false },
+  ];
+}

package/src/session/index.ts

@@ -0,0 +1,170 @@
+/**
+ * @rajeev02/auth — Session Manager
+ * Handles JWT access/refresh tokens, auto-refresh, secure persistence, session expiry
+ */
+
+export interface TokenPair {
+  accessToken: string;
+  refreshToken: string;
+  accessExpiresAt: number;
+  refreshExpiresAt: number;
+}
+
+export interface SessionConfig {
+  onRefreshToken: (refreshToken: string) => Promise<TokenPair | null>;
+  onSessionExpired: () => void;
+  onPersistTokens?: (tokens: TokenPair) => Promise<void>;
+  onLoadTokens?: () => Promise<TokenPair | null>;
+  refreshBufferMs?: number;
+}
+
+export type AuthState =
+  | "initializing"
+  | "authenticated"
+  | "unauthenticated"
+  | "refreshing";
+
+export class SessionManager {
+  private tokens: TokenPair | null = null;
+  private config: SessionConfig;
+  private refreshTimer: ReturnType<typeof setTimeout> | null = null;
+  private state: AuthState = "initializing";
+  private listeners: Set<(state: AuthState) => void> = new Set();
+
+  constructor(config: SessionConfig) {
+    this.config = config;
+  }
+
+  async initialize(): Promise<AuthState> {
+    if (this.config.onLoadTokens) {
+      try {
+        const tokens = await this.config.onLoadTokens();
+        if (tokens && tokens.refreshExpiresAt > Date.now()) {
+          this.tokens = tokens;
+          if (tokens.accessExpiresAt > Date.now()) {
+            this.setState("authenticated");
+            this.scheduleRefresh();
+          } else {
+            await this.refresh();
+          }
+          return this.state;
+        }
+      } catch (_) {
+        /* persisted tokens invalid */
+      }
+    }
+    this.setState("unauthenticated");
+    return this.state;
+  }
+
+  async setTokens(tokens: TokenPair): Promise<void> {
+    this.tokens = tokens;
+    this.setState("authenticated");
+    this.scheduleRefresh();
+    if (this.config.onPersistTokens) {
+      await this.config.onPersistTokens(tokens);
+    }
+  }
+
+  async getAccessToken(): Promise<string | null> {
+    if (!this.tokens) return null;
+    const buffer = this.config.refreshBufferMs ?? 60000;
+    if (this.tokens.accessExpiresAt - Date.now() < buffer) {
+      await this.refresh();
+    }
+    return this.tokens?.accessToken ?? null;
+  }
+
+  getState(): AuthState {
+    return this.state;
+  }
+  isAuthenticated(): boolean {
+    return this.state === "authenticated" && this.tokens !== null;
+  }
+
+  async logout(): Promise<void> {
+    this.tokens = null;
+    if (this.refreshTimer) clearTimeout(this.refreshTimer);
+    this.refreshTimer = null;
+    this.setState("unauthenticated");
+    if (this.config.onPersistTokens) {
+      await this.config.onPersistTokens({
+        accessToken: "",
+        refreshToken: "",
+        accessExpiresAt: 0,
+        refreshExpiresAt: 0,
+      });
+    }
+  }
+
+  onStateChange(listener: (state: AuthState) => void): () => void {
+    this.listeners.add(listener);
+    return () => this.listeners.delete(listener);
+  }
+
+  static decodeToken(token: string): Record<string, unknown> | null {
+    try {
+      const parts = token.split(".");
+      if (parts.length !== 3) return null;
+      const payload = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+      return JSON.parse(atob(payload));
+    } catch {
+      return null;
+    }
+  }
+
+  getUserFromToken(): Record<string, unknown> | null {
+    if (!this.tokens) return null;
+    return SessionManager.decodeToken(this.tokens.accessToken);
+  }
+
+  private async refresh(): Promise<void> {
+    if (!this.tokens?.refreshToken) {
+      this.setState("unauthenticated");
+      this.config.onSessionExpired();
+      return;
+    }
+    this.setState("refreshing");
+    try {
+      const newTokens = await this.config.onRefreshToken(
+        this.tokens.refreshToken,
+      );
+      if (newTokens) {
+        this.tokens = newTokens;
+        this.setState("authenticated");
+        this.scheduleRefresh();
+        if (this.config.onPersistTokens) {
+          await this.config.onPersistTokens(newTokens);
+        }
+      } else {
+        this.tokens = null;
+        this.setState("unauthenticated");
+        this.config.onSessionExpired();
+      }
+    } catch {
+      this.tokens = null;
+      this.setState("unauthenticated");
+      this.config.onSessionExpired();
+    }
+  }
+
+  private scheduleRefresh(): void {
+    if (this.refreshTimer) clearTimeout(this.refreshTimer);
+    if (!this.tokens) return;
+    const buffer = this.config.refreshBufferMs ?? 60000;
+    const delay = Math.max(
+      0,
+      this.tokens.accessExpiresAt - Date.now() - buffer,
+    );
+    this.refreshTimer = setTimeout(() => this.refresh(), delay);
+  }
+
+  private setState(state: AuthState): void {
+    this.state = state;
+    for (const l of this.listeners) {
+      try {
+        l(state);
+      } catch {}
+    }
+  }
+}