@robelest/convex-auth 0.0.4-preview.18 → 0.0.4-preview.19

package/dist/factors/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","names":[],"sources":["../../src/client/factors/passkey.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\n\nimport { base64urlDecode, base64urlEncode } from \"../runtime/browser\";\nimport type {\n  AuthSession,\n  ConvexTransport,\n  PasskeyClient,\n  SignInActionResult,\n  SignInResult,\n} from \"../core/types\";\n\ntype PasskeyDeps = {\n  proxy: string | undefined;\n  convex: ConvexTransport;\n  requireApiRefs: () => { signIn: any };\n  proxyFetch: (body: Record<string, unknown>) => Promise<any>;\n  setTokenAndMaybeWait: (\n    args:\n      | {\n          shouldStore: true;\n          tokens: AuthSession | null;\n          waitForHandshake: boolean;\n          context: { provider?: string; flow: string };\n        }\n      | {\n          shouldStore: false;\n          tokens: { token: string } | null;\n          waitForHandshake: boolean;\n          context: { provider?: string; flow: string };\n        },\n  ) => Promise<boolean>;\n};\n\n/** @internal */\nexport function createPasskeyClient(deps: PasskeyDeps): PasskeyClient {\n  const { proxy, convex, requireApiRefs, proxyFetch, setTokenAndMaybeWait } =\n    deps;\n\n  const handleSignedInResult = async (\n    result: SignInActionResult,\n    flow: string,\n  ): Promise<SignInResult> => {\n    return Fx.run(\n      Fx.match(result, result.kind, {\n        signedIn: (signedInResult) =>\n          Fx.from({\n            ok: async () => {\n              const signingIn = await setTokenAndMaybeWait(\n                proxy\n                  ? {\n                      shouldStore: false as const,\n                      tokens:\n                        signedInResult.tokens === null\n                          ? null\n                          : { token: signedInResult.tokens.token },\n                      waitForHandshake: true,\n                      context: { provider: \"passkey\", flow },\n                    }\n                  : {\n                      shouldStore: true as const,\n                      tokens: signedInResult.tokens,\n                      waitForHandshake: true,\n                      context: { provider: \"passkey\", flow },\n                    },\n              );\n              return signingIn\n                ? ({ kind: \"signedIn\" as const } as SignInResult)\n                : ({ kind: \"started\" as const } as SignInResult);\n            },\n            err: (e) => e as never,\n          }),\n        redirect: () => Fx.succeed({ kind: \"started\" as const }),\n        started: () => Fx.succeed({ kind: \"started\" as const }),\n        passkeyOptions: () => Fx.succeed({ kind: \"started\" as const }),\n        totpRequired: () => Fx.succeed({ kind: \"started\" as const }),\n        totpSetup: () => Fx.succeed({ kind: \"started\" as const }),\n        deviceCode: () => Fx.succeed({ kind: \"started\" as const }),\n      }),\n    );\n  };\n\n  return {\n    isSupported: (): boolean => {\n      return (\n        typeof window !== \"undefined\" &&\n        typeof window.PublicKeyCredential !== \"undefined\"\n      );\n    },\n\n    isAutofillSupported: async (): Promise<boolean> => {\n      if (typeof window === \"undefined\") return false;\n      if (typeof window.PublicKeyCredential === \"undefined\") return false;\n      if (\n        typeof (window.PublicKeyCredential as any)\n          .isConditionalMediationAvailable !== \"function\"\n      ) {\n        return false;\n      }\n      return (\n        window.PublicKeyCredential as any\n      ).isConditionalMediationAvailable();\n    },\n\n    register: async (opts?: {\n      name?: string;\n      email?: string;\n      userName?: string;\n      userDisplayName?: string;\n    }): Promise<SignInResult> => {\n      const phase1Params = {\n        flow: \"registerOptions\",\n        email: opts?.email,\n        userName: opts?.userName,\n        userDisplayName: opts?.userDisplayName,\n      };\n\n      let phase1Result: SignInActionResult;\n      if (proxy) {\n        phase1Result = (await proxyFetch({\n          action: \"auth:signIn\",\n          args: { provider: \"passkey\", params: phase1Params },\n        })) as SignInActionResult;\n      } else {\n        phase1Result = (await convex.action(requireApiRefs().signIn, {\n          provider: \"passkey\",\n          params: phase1Params,\n        })) as SignInActionResult;\n      }\n\n      if (phase1Result.kind !== \"passkeyOptions\") {\n        throw new Error(\"Server did not return passkey registration options\");\n      }\n\n      const options = phase1Result.options;\n      const createOptions: CredentialCreationOptions = {\n        publicKey: {\n          rp: options.rp,\n          user: {\n            id: base64urlDecode(options.user.id).buffer as ArrayBuffer,\n            name: options.user.name,\n            displayName: options.user.displayName,\n          },\n          challenge: base64urlDecode(options.challenge).buffer as ArrayBuffer,\n          pubKeyCredParams: options.pubKeyCredParams,\n          timeout: options.timeout,\n          attestation: options.attestation,\n          authenticatorSelection: options.authenticatorSelection,\n          excludeCredentials: (options.excludeCredentials ?? []).map(\n            (cred: any) => ({\n              type: cred.type ?? \"public-key\",\n              id: base64urlDecode(cred.id).buffer as ArrayBuffer,\n              transports: cred.transports,\n            }),\n          ),\n        },\n      };\n\n      const credential = (await navigator.credentials.create(\n        createOptions,\n      )) as PublicKeyCredential | null;\n      if (!credential) {\n        throw new Error(\"Passkey registration was cancelled\");\n      }\n\n      const response = credential.response as AuthenticatorAttestationResponse;\n      const transports =\n        typeof response.getTransports === \"function\"\n          ? response.getTransports()\n          : undefined;\n\n      const phase2Params = {\n        flow: \"registerVerify\",\n        clientDataJSON: base64urlEncode(response.clientDataJSON),\n        attestationObject: base64urlEncode(response.attestationObject),\n        transports,\n        passkeyName: opts?.name,\n        email: opts?.email,\n      };\n\n      let phase2Result: SignInActionResult;\n      if (proxy) {\n        phase2Result = (await proxyFetch({\n          action: \"auth:signIn\",\n          args: {\n            provider: \"passkey\",\n            params: phase2Params,\n            verifier: phase1Result.verifier,\n          },\n        })) as SignInActionResult;\n      } else {\n        phase2Result = (await convex.action(requireApiRefs().signIn, {\n          provider: \"passkey\",\n          params: phase2Params,\n          verifier: phase1Result.verifier,\n        })) as SignInActionResult;\n      }\n\n      return handleSignedInResult(phase2Result, \"registerVerify\");\n    },\n\n    authenticate: async (opts?: {\n      email?: string;\n      autofill?: boolean;\n    }): Promise<SignInResult> => {\n      const phase1Params = {\n        flow: \"authOptions\",\n        email: opts?.email,\n      };\n\n      let phase1Result: SignInActionResult;\n      if (proxy) {\n        phase1Result = (await proxyFetch({\n          action: \"auth:signIn\",\n          args: { provider: \"passkey\", params: phase1Params },\n        })) as SignInActionResult;\n      } else {\n        phase1Result = (await convex.action(requireApiRefs().signIn, {\n          provider: \"passkey\",\n          params: phase1Params,\n        })) as SignInActionResult;\n      }\n\n      if (phase1Result.kind !== \"passkeyOptions\") {\n        throw new Error(\"Server did not return passkey authentication options\");\n      }\n\n      const options = phase1Result.options;\n      const getOptions: CredentialRequestOptions = {\n        publicKey: {\n          challenge: base64urlDecode(options.challenge).buffer as ArrayBuffer,\n          timeout: options.timeout,\n          rpId: options.rpId,\n          userVerification: options.userVerification,\n          allowCredentials: (options.allowCredentials ?? []).map(\n            (cred: any) => ({\n              type: cred.type ?? \"public-key\",\n              id: base64urlDecode(cred.id).buffer as ArrayBuffer,\n              transports: cred.transports,\n            }),\n          ),\n        },\n        ...(opts?.autofill ? { mediation: \"conditional\" as any } : {}),\n      };\n\n      const credential = (await navigator.credentials.get(\n        getOptions,\n      )) as PublicKeyCredential | null;\n      if (!credential) {\n        throw new Error(\"Passkey authentication was cancelled\");\n      }\n\n      const response = credential.response as AuthenticatorAssertionResponse;\n      const phase2Params = {\n        flow: \"authVerify\",\n        credentialId: base64urlEncode(credential.rawId),\n        clientDataJSON: base64urlEncode(response.clientDataJSON),\n        authenticatorData: base64urlEncode(response.authenticatorData),\n        signature: base64urlEncode(response.signature),\n      };\n\n      let phase2Result: SignInActionResult;\n      if (proxy) {\n        phase2Result = (await proxyFetch({\n          action: \"auth:signIn\",\n          args: {\n            provider: \"passkey\",\n            params: phase2Params,\n            verifier: phase1Result.verifier,\n          },\n        })) as SignInActionResult;\n      } else {\n        phase2Result = (await convex.action(requireApiRefs().signIn, {\n          provider: \"passkey\",\n          params: phase2Params,\n          verifier: phase1Result.verifier,\n        })) as SignInActionResult;\n      }\n\n      return handleSignedInResult(phase2Result, \"authVerify\");\n    },\n  };\n}\n"],"mappings":";;;;;AAkCA,SAAgB,oBAAoB,MAAkC;CACpE,MAAM,EAAE,OAAO,QAAQ,gBAAgB,YAAY,yBACjD;CAEF,MAAM,uBAAuB,OAC3B,QACA,SAC0B;AAC1B,SAAO,GAAG,IACR,GAAG,MAAM,QAAQ,OAAO,MAAM;GAC5B,WAAW,mBACT,GAAG,KAAK;IACN,IAAI,YAAY;AAmBd,YAlBkB,MAAM,qBACtB,QACI;MACE,aAAa;MACb,QACE,eAAe,WAAW,OACtB,OACA,EAAE,OAAO,eAAe,OAAO,OAAO;MAC5C,kBAAkB;MAClB,SAAS;OAAE,UAAU;OAAW;OAAM;MACvC,GACD;MACE,aAAa;MACb,QAAQ,eAAe;MACvB,kBAAkB;MAClB,SAAS;OAAE,UAAU;OAAW;OAAM;MACvC,CACN,GAEI,EAAE,MAAM,YAAqB,GAC7B,EAAE,MAAM,WAAoB;;IAEnC,MAAM,MAAM;IACb,CAAC;GACJ,gBAAgB,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GACxD,eAAe,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GACvD,sBAAsB,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GAC9D,oBAAoB,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GAC5D,iBAAiB,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GACzD,kBAAkB,GAAG,QAAQ,EAAE,MAAM,WAAoB,CAAC;GAC3D,CAAC,CACH;;AAGH,QAAO;EACL,mBAA4B;AAC1B,UACE,OAAO,WAAW,eAClB,OAAO,OAAO,wBAAwB;;EAI1C,qBAAqB,YAA8B;AACjD,OAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,OAAI,OAAO,OAAO,wBAAwB,YAAa,QAAO;AAC9D,OACE,OAAQ,OAAO,oBACZ,oCAAoC,WAEvC,QAAO;AAET,UACE,OAAO,oBACP,iCAAiC;;EAGrC,UAAU,OAAO,SAKY;GAC3B,MAAM,eAAe;IACnB,MAAM;IACN,OAAO,MAAM;IACb,UAAU,MAAM;IAChB,iBAAiB,MAAM;IACxB;GAED,IAAI;AACJ,OAAI,MACF,gBAAgB,MAAM,WAAW;IAC/B,QAAQ;IACR,MAAM;KAAE,UAAU;KAAW,QAAQ;KAAc;IACpD,CAAC;OAEF,gBAAgB,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC3D,UAAU;IACV,QAAQ;IACT,CAAC;AAGJ,OAAI,aAAa,SAAS,iBACxB,OAAM,IAAI,MAAM,qDAAqD;GAGvE,MAAM,UAAU,aAAa;GAC7B,MAAM,gBAA2C,EAC/C,WAAW;IACT,IAAI,QAAQ;IACZ,MAAM;KACJ,IAAI,gBAAgB,QAAQ,KAAK,GAAG,CAAC;KACrC,MAAM,QAAQ,KAAK;KACnB,aAAa,QAAQ,KAAK;KAC3B;IACD,WAAW,gBAAgB,QAAQ,UAAU,CAAC;IAC9C,kBAAkB,QAAQ;IAC1B,SAAS,QAAQ;IACjB,aAAa,QAAQ;IACrB,wBAAwB,QAAQ;IAChC,qBAAqB,QAAQ,sBAAsB,EAAE,EAAE,KACpD,UAAe;KACd,MAAM,KAAK,QAAQ;KACnB,IAAI,gBAAgB,KAAK,GAAG,CAAC;KAC7B,YAAY,KAAK;KAClB,EACF;IACF,EACF;GAED,MAAM,aAAc,MAAM,UAAU,YAAY,OAC9C,cACD;AACD,OAAI,CAAC,WACH,OAAM,IAAI,MAAM,qCAAqC;GAGvD,MAAM,WAAW,WAAW;GAC5B,MAAM,aACJ,OAAO,SAAS,kBAAkB,aAC9B,SAAS,eAAe,GACxB;GAEN,MAAM,eAAe;IACnB,MAAM;IACN,gBAAgB,gBAAgB,SAAS,eAAe;IACxD,mBAAmB,gBAAgB,SAAS,kBAAkB;IAC9D;IACA,aAAa,MAAM;IACnB,OAAO,MAAM;IACd;GAED,IAAI;AACJ,OAAI,MACF,gBAAgB,MAAM,WAAW;IAC/B,QAAQ;IACR,MAAM;KACJ,UAAU;KACV,QAAQ;KACR,UAAU,aAAa;KACxB;IACF,CAAC;OAEF,gBAAgB,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC3D,UAAU;IACV,QAAQ;IACR,UAAU,aAAa;IACxB,CAAC;AAGJ,UAAO,qBAAqB,cAAc,iBAAiB;;EAG7D,cAAc,OAAO,SAGQ;GAC3B,MAAM,eAAe;IACnB,MAAM;IACN,OAAO,MAAM;IACd;GAED,IAAI;AACJ,OAAI,MACF,gBAAgB,MAAM,WAAW;IAC/B,QAAQ;IACR,MAAM;KAAE,UAAU;KAAW,QAAQ;KAAc;IACpD,CAAC;OAEF,gBAAgB,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC3D,UAAU;IACV,QAAQ;IACT,CAAC;AAGJ,OAAI,aAAa,SAAS,iBACxB,OAAM,IAAI,MAAM,uDAAuD;GAGzE,MAAM,UAAU,aAAa;GAC7B,MAAM,aAAuC;IAC3C,WAAW;KACT,WAAW,gBAAgB,QAAQ,UAAU,CAAC;KAC9C,SAAS,QAAQ;KACjB,MAAM,QAAQ;KACd,kBAAkB,QAAQ;KAC1B,mBAAmB,QAAQ,oBAAoB,EAAE,EAAE,KAChD,UAAe;MACd,MAAM,KAAK,QAAQ;MACnB,IAAI,gBAAgB,KAAK,GAAG,CAAC;MAC7B,YAAY,KAAK;MAClB,EACF;KACF;IACD,GAAI,MAAM,WAAW,EAAE,WAAW,eAAsB,GAAG,EAAE;IAC9D;GAED,MAAM,aAAc,MAAM,UAAU,YAAY,IAC9C,WACD;AACD,OAAI,CAAC,WACH,OAAM,IAAI,MAAM,uCAAuC;GAGzD,MAAM,WAAW,WAAW;GAC5B,MAAM,eAAe;IACnB,MAAM;IACN,cAAc,gBAAgB,WAAW,MAAM;IAC/C,gBAAgB,gBAAgB,SAAS,eAAe;IACxD,mBAAmB,gBAAgB,SAAS,kBAAkB;IAC9D,WAAW,gBAAgB,SAAS,UAAU;IAC/C;GAED,IAAI;AACJ,OAAI,MACF,gBAAgB,MAAM,WAAW;IAC/B,QAAQ;IACR,MAAM;KACJ,UAAU;KACV,QAAQ;KACR,UAAU,aAAa;KACxB;IACF,CAAC;OAEF,gBAAgB,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC3D,UAAU;IACV,QAAQ;IACR,UAAU,aAAa;IACxB,CAAC;AAGJ,UAAO,qBAAqB,cAAc,aAAa;;EAE1D"}

package/dist/factors/totp.js

@@ -0,0 +1,122 @@
+//#region src/client/factors/totp.ts
+/** @internal */
+function createTotpClient(deps) {
+	const { proxy, convex, requireApiRefs, proxyFetch, setTokenAndMaybeWait } = deps;
+	return {
+		setup: async (opts) => {
+			const params = { flow: "setup" };
+			if (opts?.name) params.name = opts.name;
+			if (opts?.accountName) params.accountName = opts.accountName;
+			if (proxy) {
+				const result$1 = await proxyFetch({
+					action: "auth:signIn",
+					args: {
+						provider: "totp",
+						params
+					}
+				});
+				return {
+					uri: result$1.totpSetup.uri,
+					secret: result$1.totpSetup.secret,
+					verifier: result$1.verifier,
+					totpId: result$1.totpSetup.totpId
+				};
+			}
+			const result = await convex.action(requireApiRefs().signIn, {
+				provider: "totp",
+				params
+			});
+			return {
+				uri: result.totpSetup.uri,
+				secret: result.totpSetup.secret,
+				verifier: result.verifier,
+				totpId: result.totpSetup.totpId
+			};
+		},
+		confirm: async (opts) => {
+			const params = {
+				flow: "confirm",
+				code: opts.code,
+				totpId: opts.totpId
+			};
+			if (proxy) {
+				const result$1 = await proxyFetch({
+					action: "auth:signIn",
+					args: {
+						provider: "totp",
+						params,
+						verifier: opts.verifier
+					}
+				});
+				if (result$1.tokens) await setTokenAndMaybeWait({
+					shouldStore: false,
+					tokens: result$1.tokens === null ? null : { token: result$1.tokens.token },
+					waitForHandshake: true,
+					context: {
+						provider: "totp",
+						flow: "confirm"
+					}
+				});
+				return;
+			}
+			const result = await convex.action(requireApiRefs().signIn, {
+				provider: "totp",
+				params,
+				verifier: opts.verifier
+			});
+			if (result.tokens) await setTokenAndMaybeWait({
+				shouldStore: true,
+				tokens: result.tokens ?? null,
+				waitForHandshake: true,
+				context: {
+					provider: "totp",
+					flow: "confirm"
+				}
+			});
+		},
+		verify: async (opts) => {
+			const params = {
+				flow: "verify",
+				code: opts.code
+			};
+			if (proxy) {
+				const result$1 = await proxyFetch({
+					action: "auth:signIn",
+					args: {
+						provider: "totp",
+						params,
+						verifier: opts.verifier
+					}
+				});
+				if (result$1.tokens) await setTokenAndMaybeWait({
+					shouldStore: false,
+					tokens: result$1.tokens === null ? null : { token: result$1.tokens.token },
+					waitForHandshake: true,
+					context: {
+						provider: "totp",
+						flow: "verify"
+					}
+				});
+				return;
+			}
+			const result = await convex.action(requireApiRefs().signIn, {
+				provider: "totp",
+				params,
+				verifier: opts.verifier
+			});
+			if (result.tokens) await setTokenAndMaybeWait({
+				shouldStore: true,
+				tokens: result.tokens ?? null,
+				waitForHandshake: true,
+				context: {
+					provider: "totp",
+					flow: "verify"
+				}
+			});
+		}
+	};
+}
+
+//#endregion
+export { createTotpClient };
+//# sourceMappingURL=totp.js.map

package/dist/factors/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","names":["result"],"sources":["../../src/client/factors/totp.ts"],"sourcesContent":["import type { AuthSession, ConvexTransport, TotpClient } from \"../core/types\";\n\ntype TotpDeps = {\n  proxy: string | undefined;\n  convex: ConvexTransport;\n  requireApiRefs: () => { signIn: any };\n  proxyFetch: (body: Record<string, unknown>) => Promise<any>;\n  setTokenAndMaybeWait: (\n    args:\n      | {\n          shouldStore: true;\n          tokens: AuthSession | null;\n          waitForHandshake: boolean;\n          context: { provider?: string; flow: string };\n        }\n      | {\n          shouldStore: false;\n          tokens: { token: string } | null;\n          waitForHandshake: boolean;\n          context: { provider?: string; flow: string };\n        },\n  ) => Promise<boolean>;\n};\n\n/** @internal */\nexport function createTotpClient(deps: TotpDeps): TotpClient {\n  const { proxy, convex, requireApiRefs, proxyFetch, setTokenAndMaybeWait } =\n    deps;\n\n  return {\n    setup: async (opts?: {\n      name?: string;\n      accountName?: string;\n    }): Promise<{\n      uri: string;\n      secret: string;\n      verifier: string;\n      totpId: string;\n    }> => {\n      const params: Record<string, any> = { flow: \"setup\" };\n      if (opts?.name) params.name = opts.name;\n      if (opts?.accountName) params.accountName = opts.accountName;\n\n      if (proxy) {\n        const result = await proxyFetch({\n          action: \"auth:signIn\",\n          args: { provider: \"totp\", params },\n        });\n        return {\n          uri: result.totpSetup.uri,\n          secret: result.totpSetup.secret,\n          verifier: result.verifier,\n          totpId: result.totpSetup.totpId,\n        };\n      }\n\n      const result = await convex.action(requireApiRefs().signIn, {\n        provider: \"totp\",\n        params,\n      });\n      return {\n        uri: result.totpSetup.uri,\n        secret: result.totpSetup.secret,\n        verifier: result.verifier,\n        totpId: result.totpSetup.totpId,\n      };\n    },\n\n    confirm: async (opts: {\n      code: string;\n      verifier: string;\n      totpId: string;\n    }): Promise<void> => {\n      const params: Record<string, any> = {\n        flow: \"confirm\",\n        code: opts.code,\n        totpId: opts.totpId,\n      };\n\n      if (proxy) {\n        const result = await proxyFetch({\n          action: \"auth:signIn\",\n          args: { provider: \"totp\", params, verifier: opts.verifier },\n        });\n        if (result.tokens) {\n          await setTokenAndMaybeWait({\n            shouldStore: false,\n            tokens:\n              result.tokens === null ? null : { token: result.tokens.token },\n            waitForHandshake: true,\n            context: { provider: \"totp\", flow: \"confirm\" },\n          });\n        }\n        return;\n      }\n\n      const result = await convex.action(requireApiRefs().signIn, {\n        provider: \"totp\",\n        params,\n        verifier: opts.verifier,\n      });\n      if (result.tokens) {\n        await setTokenAndMaybeWait({\n          shouldStore: true,\n          tokens: (result.tokens as AuthSession | null) ?? null,\n          waitForHandshake: true,\n          context: { provider: \"totp\", flow: \"confirm\" },\n        });\n      }\n    },\n\n    verify: async (opts: { code: string; verifier: string }): Promise<void> => {\n      const params: Record<string, any> = {\n        flow: \"verify\",\n        code: opts.code,\n      };\n\n      if (proxy) {\n        const result = await proxyFetch({\n          action: \"auth:signIn\",\n          args: { provider: \"totp\", params, verifier: opts.verifier },\n        });\n        if (result.tokens) {\n          await setTokenAndMaybeWait({\n            shouldStore: false,\n            tokens:\n              result.tokens === null ? null : { token: result.tokens.token },\n            waitForHandshake: true,\n            context: { provider: \"totp\", flow: \"verify\" },\n          });\n        }\n        return;\n      }\n\n      const result = await convex.action(requireApiRefs().signIn, {\n        provider: \"totp\",\n        params,\n        verifier: opts.verifier,\n      });\n      if (result.tokens) {\n        await setTokenAndMaybeWait({\n          shouldStore: true,\n          tokens: (result.tokens as AuthSession | null) ?? null,\n          waitForHandshake: true,\n          context: { provider: \"totp\", flow: \"verify\" },\n        });\n      }\n    },\n  };\n}\n"],"mappings":";;AAyBA,SAAgB,iBAAiB,MAA4B;CAC3D,MAAM,EAAE,OAAO,QAAQ,gBAAgB,YAAY,yBACjD;AAEF,QAAO;EACL,OAAO,OAAO,SAQR;GACJ,MAAM,SAA8B,EAAE,MAAM,SAAS;AACrD,OAAI,MAAM,KAAM,QAAO,OAAO,KAAK;AACnC,OAAI,MAAM,YAAa,QAAO,cAAc,KAAK;AAEjD,OAAI,OAAO;IACT,MAAMA,WAAS,MAAM,WAAW;KAC9B,QAAQ;KACR,MAAM;MAAE,UAAU;MAAQ;MAAQ;KACnC,CAAC;AACF,WAAO;KACL,KAAKA,SAAO,UAAU;KACtB,QAAQA,SAAO,UAAU;KACzB,UAAUA,SAAO;KACjB,QAAQA,SAAO,UAAU;KAC1B;;GAGH,MAAM,SAAS,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC1D,UAAU;IACV;IACD,CAAC;AACF,UAAO;IACL,KAAK,OAAO,UAAU;IACtB,QAAQ,OAAO,UAAU;IACzB,UAAU,OAAO;IACjB,QAAQ,OAAO,UAAU;IAC1B;;EAGH,SAAS,OAAO,SAIK;GACnB,MAAM,SAA8B;IAClC,MAAM;IACN,MAAM,KAAK;IACX,QAAQ,KAAK;IACd;AAED,OAAI,OAAO;IACT,MAAMA,WAAS,MAAM,WAAW;KAC9B,QAAQ;KACR,MAAM;MAAE,UAAU;MAAQ;MAAQ,UAAU,KAAK;MAAU;KAC5D,CAAC;AACF,QAAIA,SAAO,OACT,OAAM,qBAAqB;KACzB,aAAa;KACb,QACEA,SAAO,WAAW,OAAO,OAAO,EAAE,OAAOA,SAAO,OAAO,OAAO;KAChE,kBAAkB;KAClB,SAAS;MAAE,UAAU;MAAQ,MAAM;MAAW;KAC/C,CAAC;AAEJ;;GAGF,MAAM,SAAS,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC1D,UAAU;IACV;IACA,UAAU,KAAK;IAChB,CAAC;AACF,OAAI,OAAO,OACT,OAAM,qBAAqB;IACzB,aAAa;IACb,QAAS,OAAO,UAAiC;IACjD,kBAAkB;IAClB,SAAS;KAAE,UAAU;KAAQ,MAAM;KAAW;IAC/C,CAAC;;EAIN,QAAQ,OAAO,SAA4D;GACzE,MAAM,SAA8B;IAClC,MAAM;IACN,MAAM,KAAK;IACZ;AAED,OAAI,OAAO;IACT,MAAMA,WAAS,MAAM,WAAW;KAC9B,QAAQ;KACR,MAAM;MAAE,UAAU;MAAQ;MAAQ,UAAU,KAAK;MAAU;KAC5D,CAAC;AACF,QAAIA,SAAO,OACT,OAAM,qBAAqB;KACzB,aAAa;KACb,QACEA,SAAO,WAAW,OAAO,OAAO,EAAE,OAAOA,SAAO,OAAO,OAAO;KAChE,kBAAkB;KAClB,SAAS;MAAE,UAAU;MAAQ,MAAM;MAAU;KAC9C,CAAC;AAEJ;;GAGF,MAAM,SAAS,MAAM,OAAO,OAAO,gBAAgB,CAAC,QAAQ;IAC1D,UAAU;IACV;IACA,UAAU,KAAK;IAChB,CAAC;AACF,OAAI,OAAO,OACT,OAAM,qBAAqB;IACzB,aAAa;IACb,QAAS,OAAO,UAAiC;IACjD,kBAAkB;IAClB,SAAS;KAAE,UAAU;KAAQ,MAAM;KAAU;IAC9C,CAAC;;EAGP"}

package/dist/providers/credentials.d.ts

@@ -5,6 +5,8 @@ import { GenericId, Value } from "convex/values";
 //#region src/providers/credentials.d.ts
 /**
  * Configuration for the Credentials provider.
+ *
+ * @typeParam DataModel - The Convex data model.
  */
 interface CredentialsConfig<DataModel extends GenericDataModel = GenericDataModel> {
   /** Uniquely identifies the provider. Defaults to `"credentials"`. */
@@ -37,6 +39,8 @@ interface CredentialsConfig<DataModel extends GenericDataModel = GenericDataMode
  * This is the escape hatch for fully custom auth logic. For email/password
  * flows, use the `Password` class instead.
  *
+ * @typeParam DataModel - The Convex data model.
+ *
  * @example
  * ```ts
  * import { Credentials } from "@robelest/convex-auth/providers";
@@ -55,7 +59,6 @@ declare class Credentials<DataModel extends GenericDataModel = GenericDataModel>
   readonly config: CredentialsConfig<DataModel>;
   constructor(config: CredentialsConfig<DataModel>);
 }
-type CredentialsUserConfig<DataModel extends GenericDataModel = GenericDataModel> = CredentialsConfig<DataModel>;
 //#endregion
-export { Credentials, CredentialsConfig, CredentialsUserConfig };
+export { Credentials, CredentialsConfig };
 //# sourceMappingURL=credentials.d.ts.map

package/dist/providers/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","names":[],"sources":["../../src/providers/credentials.ts"],"mappings":";;;;;;;;UA4BiB,iBAAA,mBACG,gBAAA,GAAmB,gBAAA;EA2BD;EAxBpC,EAAA;EAHkB;;;;;EASlB,SAAA,GACE,WAAA,EAAa,OAAA,CAAQ,MAAA,SAAe,KAAA,gBACpC,GAAA,EAAK,8BAAA,CAA+B,SAAA,MACjC,OAAA;IACH,MAAA,EAAQ,SAAA;IACR,SAAA,GAAY,SAAA;EAAA;EAHwB;;;EAQtC,MAAA;IACE,UAAA,GAAa,MAAA,aAAmB,OAAA;IAChC,YAAA,GAAe,MAAA,UAAgB,IAAA,aAAiB,OAAA;EAAA;EAFlD;;;;EAQA,cAAA,IAAkB,kBAAA;AAAA;;;;;;;AAqBpB;;;;;;;;;;;;cAAa,WAAA,mBACO,gBAAA,GAAmB,gBAAA;EAAA,SAE5B,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,iBAAA,CAAkB,SAAA;cAEvB,MAAA,EAAQ,iBAAA,CAAkB,SAAA;AAAA;AAAA,KAgB5B,qBAAA,mBACQ,gBAAA,GAAmB,gBAAA,IACnC,iBAAA,CAAkB,SAAA"}
+{"version":3,"file":"credentials.d.ts","names":[],"sources":["../../src/providers/credentials.ts"],"mappings":";;;;;;;;;;UA8BiB,iBAAA,mBACG,gBAAA,GAAmB,gBAAA;EAAnB;EAGlB,EAAA;EAAA;;;;;EAMA,SAAA,GACE,WAAA,EAAa,OAAA,CAAQ,MAAA,SAAe,KAAA,gBACpC,GAAA,EAAK,8BAAA,CAA+B,SAAA,MACjC,OAAA;IACH,MAAA,EAAQ,SAAA;IACR,SAAA,GAAY,SAAA;EAAA;EAFT;;;EAOL,MAAA;IACE,UAAA,GAAa,MAAA,aAAmB,OAAA;IAChC,YAAA,GAAe,MAAA,UAAgB,IAAA,aAAiB,OAAA;EAAA;EADnC;;;;EAOf,cAAA,IAAkB,kBAAA;AAAA;;;;;AAuBpB;;;;;;;;;;;;;;;;cAAa,WAAA,mBACO,gBAAA,GAAmB,gBAAA;EAAA,SAE5B,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,iBAAA,CAAkB,SAAA;cAEvB,MAAA,EAAQ,iBAAA,CAAkB,SAAA;AAAA"}

package/dist/providers/credentials.js

@@ -5,6 +5,8 @@
 * This is the escape hatch for fully custom auth logic. For email/password
 * flows, use the `Password` class instead.
 *
+* @typeParam DataModel - The Convex data model.
+*
 * @example
 * ```ts
 * import { Credentials } from "@robelest/convex-auth/providers";

package/dist/providers/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","names":[],"sources":["../../src/providers/credentials.ts"],"sourcesContent":["/**\n * Credentials provider for custom authentication flows.\n *\n * ```ts\n * import { Credentials } from \"@robelest/convex-auth/providers\";\n *\n * new Credentials({\n *   authorize: async (credentials, ctx) => {\n *     // Your custom logic here...\n *   },\n * })\n * ```\n *\n * @module\n */\n\nimport { GenericDataModel } from \"convex/server\";\nimport { GenericId, Value } from \"convex/values\";\n\nimport type {\n  AuthProviderConfig,\n  ConvexCredentialsConfig,\n  GenericActionCtxWithAuthConfig,\n} from \"../server/types\";\n\n/**\n * Configuration for the Credentials provider.\n */\nexport interface CredentialsConfig<\n  DataModel extends GenericDataModel = GenericDataModel,\n> {\n  /** Uniquely identifies the provider. Defaults to `\"credentials\"`. */\n  id?: string;\n  /**\n   * Handle credentials received from the client-side `signIn` call.\n   *\n   * @returns A user ID for successful login, or `null` to reject.\n   */\n  authorize: (\n    credentials: Partial<Record<string, Value | undefined>>,\n    ctx: GenericActionCtxWithAuthConfig<DataModel>,\n  ) => Promise<{\n    userId: GenericId<\"User\">;\n    sessionId?: GenericId<\"Session\">;\n  } | null>;\n  /**\n   * Provide hashing and verification functions for account secrets.\n   */\n  crypto?: {\n    hashSecret: (secret: string) => Promise<string>;\n    verifySecret: (secret: string, hash: string) => Promise<boolean>;\n  };\n  /**\n   * Extra providers used internally (e.g. email verification in password flow).\n   * Not exposed to clients.\n   */\n  extraProviders?: (AuthProviderConfig | undefined)[];\n}\n\n/**\n * Credentials provider for custom authentication flows.\n *\n * This is the escape hatch for fully custom auth logic. For email/password\n * flows, use the `Password` class instead.\n *\n * @example\n * ```ts\n * import { Credentials } from \"@robelest/convex-auth/providers\";\n *\n * new Credentials({\n *   authorize: async (credentials, ctx) => {\n *     const user = await validateUser(credentials);\n *     return user ? { userId: user._id } : null;\n *   },\n * })\n * ```\n */\nexport class Credentials<\n  DataModel extends GenericDataModel = GenericDataModel,\n> {\n  readonly id: string;\n  readonly type = \"credentials\" as const;\n  readonly config: CredentialsConfig<DataModel>;\n\n  constructor(config: CredentialsConfig<DataModel>) {\n    this.id = config.id ?? \"credentials\";\n    this.config = config;\n  }\n\n  /** @internal Convert to the internal materialized config shape. */\n  _toMaterialized(): ConvexCredentialsConfig {\n    return {\n      ...this.config,\n      id: this.id,\n      type: \"credentials\",\n    } as ConvexCredentialsConfig;\n  }\n}\n\n// Re-export the old type name for backward compat\nexport type CredentialsUserConfig<\n  DataModel extends GenericDataModel = GenericDataModel,\n> = CredentialsConfig<DataModel>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6EA,IAAa,cAAb,MAEE;CACA,AAAS;CACT,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,QAAsC;AAChD,OAAK,KAAK,OAAO,MAAM;AACvB,OAAK,SAAS;;;CAIhB,kBAA2C;AACzC,SAAO;GACL,GAAG,KAAK;GACR,IAAI,KAAK;GACT,MAAM;GACP"}
+{"version":3,"file":"credentials.js","names":[],"sources":["../../src/providers/credentials.ts"],"sourcesContent":["/**\n * Credentials provider for custom authentication flows.\n *\n * ```ts\n * import { Credentials } from \"@robelest/convex-auth/providers\";\n *\n * new Credentials({\n *   authorize: async (credentials, ctx) => {\n *     // Your custom logic here...\n *   },\n * })\n * ```\n *\n * @module\n */\n\nimport { GenericDataModel } from \"convex/server\";\nimport { GenericId, Value } from \"convex/values\";\n\nimport type {\n  AuthProviderConfig,\n  ConvexCredentialsConfig,\n  GenericActionCtxWithAuthConfig,\n} from \"../server/types\";\n\n/**\n * Configuration for the Credentials provider.\n *\n * @typeParam DataModel - The Convex data model.\n */\nexport interface CredentialsConfig<\n  DataModel extends GenericDataModel = GenericDataModel,\n> {\n  /** Uniquely identifies the provider. Defaults to `\"credentials\"`. */\n  id?: string;\n  /**\n   * Handle credentials received from the client-side `signIn` call.\n   *\n   * @returns A user ID for successful login, or `null` to reject.\n   */\n  authorize: (\n    credentials: Partial<Record<string, Value | undefined>>,\n    ctx: GenericActionCtxWithAuthConfig<DataModel>,\n  ) => Promise<{\n    userId: GenericId<\"User\">;\n    sessionId?: GenericId<\"Session\">;\n  } | null>;\n  /**\n   * Provide hashing and verification functions for account secrets.\n   */\n  crypto?: {\n    hashSecret: (secret: string) => Promise<string>;\n    verifySecret: (secret: string, hash: string) => Promise<boolean>;\n  };\n  /**\n   * Extra providers used internally (e.g. email verification in password flow).\n   * Not exposed to clients.\n   */\n  extraProviders?: (AuthProviderConfig | undefined)[];\n}\n\n/**\n * Credentials provider for custom authentication flows.\n *\n * This is the escape hatch for fully custom auth logic. For email/password\n * flows, use the `Password` class instead.\n *\n * @typeParam DataModel - The Convex data model.\n *\n * @example\n * ```ts\n * import { Credentials } from \"@robelest/convex-auth/providers\";\n *\n * new Credentials({\n *   authorize: async (credentials, ctx) => {\n *     const user = await validateUser(credentials);\n *     return user ? { userId: user._id } : null;\n *   },\n * })\n * ```\n */\nexport class Credentials<\n  DataModel extends GenericDataModel = GenericDataModel,\n> {\n  readonly id: string;\n  readonly type = \"credentials\" as const;\n  readonly config: CredentialsConfig<DataModel>;\n\n  constructor(config: CredentialsConfig<DataModel>) {\n    this.id = config.id ?? \"credentials\";\n    this.config = config;\n  }\n\n  /** @internal Convert to the internal materialized config shape. */\n  _toMaterialized(): ConvexCredentialsConfig {\n    return {\n      ...this.config,\n      id: this.id,\n      type: \"credentials\",\n    } as ConvexCredentialsConfig;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiFA,IAAa,cAAb,MAEE;CACA,AAAS;CACT,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,QAAsC;AAChD,OAAK,KAAK,OAAO,MAAM;AACvB,OAAK,SAAS;;;CAIhB,kBAA2C;AACzC,SAAO;GACL,GAAG,KAAK;GACR,IAAI,KAAK;GACT,MAAM;GACP"}

package/dist/providers/email.d.ts

@@ -4,6 +4,12 @@
  *
  * @module
  */
+/**
+ * User-facing configuration for the {@link Email} provider.
+ *
+ * Use this to wire your email delivery service into Convex Auth's magic-link
+ * or OTP flow.
+ */
 interface EmailProviderConfig {
   /** Sender address (e.g. "My App <noreply@example.com>"). */
   from: string;
@@ -21,10 +27,34 @@ interface EmailProviderConfig {
   /** Token expiration in seconds. Defaults to 86400 (24 hours). */
   maxAge?: number;
 }
+/**
+ * Email provider for magic-link or one-time-code sign-in.
+ *
+ * Sends verification emails through your `send()` implementation and converts
+ * the result into Convex Auth's internal email-provider runtime shape.
+ *
+ * @example
+ * ```ts
+ * import { Email } from "@robelest/convex-auth/providers";
+ *
+ * const email = new Email({
+ *   from: "My App <noreply@example.com>",
+ *   send: async (_ctx, { to, subject, html }) => {
+ *     await resend.emails.send({ from: "noreply@example.com", to, subject, html });
+ *   },
+ * });
+ * ```
+ */
 declare class Email {
   readonly config: EmailProviderConfig;
   readonly id: string;
   readonly type: "email";
+  /**
+   * Create an email provider instance.
+   *
+   * @param config - Email transport and provider settings.
+   * @throws {Error} When `config.from` is empty or whitespace-only.
+   */
   constructor(config: EmailProviderConfig);
 }
 //#endregion

package/dist/providers/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","names":[],"sources":["../../src/providers/email.ts"],"mappings":";;AASA;;;;UAAiB,mBAAA;EAIf;EAFA,IAAA;EAIU;EAFV,IAAA,GACE,GAAA,OACA,IAAA;IAAQ,IAAA;IAAc,EAAA;IAAY,OAAA;IAAiB,IAAA;EAAA,MAChD,OAAA;EAE6B;EAAlC,yBAAA,SAAkC,OAAA;EAIlC;EAFA,EAAA;EAEM;EAAN,MAAA;AAAA;AAAA,cAGW,KAAA;EAAA,SAIiB,MAAA,EAAQ,mBAAA;EAAA,SAH3B,EAAA;EAAA,SACA,IAAA;cAEmB,MAAA,EAAQ,mBAAA;AAAA"}
+{"version":3,"file":"email.d.ts","names":[],"sources":["../../src/providers/email.ts"],"mappings":";;AAeA;;;;;;;;;;UAAiB,mBAAA;EAMb;EAJF,IAAA;EAOA;EALA,IAAA,GACE,GAAA,OACA,IAAA;IAAQ,IAAA;IAAc,EAAA;IAAY,OAAA;IAAiB,IAAA;EAAA,MAChD,OAAA;EA2BW;EAzBhB,yBAAA,SAAkC,OAAA;EAmCqB;EAjCvD,EAAA;EAiCoC;EA/BpC,MAAA;AAAA;;;;;;;;;;;;;;;;;;;cAqBW,KAAA;EAAA,SAUiB,MAAA,EAAQ,mBAAA;EAAA,SAT3B,EAAA;EAAA,SACA,IAAA;;;;;;;cAQmB,MAAA,EAAQ,mBAAA;AAAA"}

package/dist/providers/email.js

@@ -6,9 +6,33 @@ import { defaultMagicLinkEmail } from "../server/templates.js";
 *
 * @module
 */
+/**
+* Email provider for magic-link or one-time-code sign-in.
+*
+* Sends verification emails through your `send()` implementation and converts
+* the result into Convex Auth's internal email-provider runtime shape.
+*
+* @example
+* ```ts
+* import { Email } from "@robelest/convex-auth/providers";
+*
+* const email = new Email({
+*   from: "My App <noreply@example.com>",
+*   send: async (_ctx, { to, subject, html }) => {
+*     await resend.emails.send({ from: "noreply@example.com", to, subject, html });
+*   },
+* });
+* ```
+*/
 var Email = class {
 	id;
 	type = "email";
+	/**
+	* Create an email provider instance.
+	*
+	* @param config - Email transport and provider settings.
+	* @throws {Error} When `config.from` is empty or whitespace-only.
+	*/
 	constructor(config) {
 		this.config = config;
 		if (config.from.trim().length === 0) throw new Error("Email provider requires a non-empty `from` address (for example, `\"My App <noreply@example.com>\"`).");

package/dist/providers/email.js.map

@@ -1 +1 @@
-{"version":3,"file":"email.js","names":[],"sources":["../../src/providers/email.ts"],"sourcesContent":["/**\n * Email (magic link / OTP) authentication provider.\n *\n * @module\n */\n\nimport { defaultMagicLinkEmail } from \"../server/templates\";\nimport type { EmailConfig } from \"../server/types\";\n\nexport interface EmailProviderConfig {\n  /** Sender address (e.g. \"My App <noreply@example.com>\"). */\n  from: string;\n  /** Send the verification email. Receives the Convex action context. */\n  send: (\n    ctx: any,\n    opts: { from: string; to: string; subject: string; html: string },\n  ) => Promise<void>;\n  /** Override to generate a custom verification token. */\n  generateVerificationToken?: () => Promise<string>;\n  /** Provider ID override. Defaults to \"email\". */\n  id?: string;\n  /** Token expiration in seconds. Defaults to 86400 (24 hours). */\n  maxAge?: number;\n}\n\nexport class Email {\n  readonly id: string;\n  readonly type = \"email\" as const;\n\n  constructor(public readonly config: EmailProviderConfig) {\n    const from = config.from.trim();\n    if (from.length === 0) {\n      throw new Error(\n        \"Email provider requires a non-empty `from` address \" +\n          '(for example, `\"My App <noreply@example.com>\"`).',\n      );\n    }\n    this.id = config.id ?? \"email\";\n  }\n\n  /** @internal */\n  _toMaterialized(): EmailConfig {\n    const from = this.config.from.trim();\n    const { send } = this.config;\n    const { generateVerificationToken } = this.config;\n    return {\n      id: this.id,\n      type: \"email\",\n      name: \"Email\",\n      from,\n      maxAge: this.config.maxAge ?? 60 * 60 * 24,\n      authorize: undefined,\n      sendVerificationRequest: async ({ identifier, url }, ctx) => {\n        if (!ctx) {\n          throw new Error(\"Email provider requires a Convex action context.\");\n        }\n        const { host } = new URL(url);\n        await send(ctx, {\n          from,\n          to: identifier,\n          subject: `Sign in to ${host}`,\n          html: defaultMagicLinkEmail(url, host),\n        });\n      },\n      generateVerificationToken,\n      options: { from } as any,\n    };\n  }\n}\n"],"mappings":";;;;;;;;AAyBA,IAAa,QAAb,MAAmB;CACjB,AAAS;CACT,AAAS,OAAO;CAEhB,YAAY,AAAgB,QAA6B;EAA7B;AAE1B,MADa,OAAO,KAAK,MAAM,CACtB,WAAW,EAClB,OAAM,IAAI,MACR,wGAED;AAEH,OAAK,KAAK,OAAO,MAAM;;;CAIzB,kBAA+B;EAC7B,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM;EACpC,MAAM,EAAE,SAAS,KAAK;EACtB,MAAM,EAAE,8BAA8B,KAAK;AAC3C,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,MAAM;GACN;GACA,QAAQ,KAAK,OAAO,UAAU,OAAU;GACxC,WAAW;GACX,yBAAyB,OAAO,EAAE,YAAY,OAAO,QAAQ;AAC3D,QAAI,CAAC,IACH,OAAM,IAAI,MAAM,mDAAmD;IAErE,MAAM,EAAE,SAAS,IAAI,IAAI,IAAI;AAC7B,UAAM,KAAK,KAAK;KACd;KACA,IAAI;KACJ,SAAS,cAAc;KACvB,MAAM,sBAAsB,KAAK,KAAK;KACvC,CAAC;;GAEJ;GACA,SAAS,EAAE,MAAM;GAClB"}
+{"version":3,"file":"email.js","names":[],"sources":["../../src/providers/email.ts"],"sourcesContent":["/**\n * Email (magic link / OTP) authentication provider.\n *\n * @module\n */\n\nimport { defaultMagicLinkEmail } from \"../server/templates\";\nimport type { EmailConfig } from \"../server/types\";\n\n/**\n * User-facing configuration for the {@link Email} provider.\n *\n * Use this to wire your email delivery service into Convex Auth's magic-link\n * or OTP flow.\n */\nexport interface EmailProviderConfig {\n  /** Sender address (e.g. \"My App <noreply@example.com>\"). */\n  from: string;\n  /** Send the verification email. Receives the Convex action context. */\n  send: (\n    ctx: any,\n    opts: { from: string; to: string; subject: string; html: string },\n  ) => Promise<void>;\n  /** Override to generate a custom verification token. */\n  generateVerificationToken?: () => Promise<string>;\n  /** Provider ID override. Defaults to \"email\". */\n  id?: string;\n  /** Token expiration in seconds. Defaults to 86400 (24 hours). */\n  maxAge?: number;\n}\n\n/**\n * Email provider for magic-link or one-time-code sign-in.\n *\n * Sends verification emails through your `send()` implementation and converts\n * the result into Convex Auth's internal email-provider runtime shape.\n *\n * @example\n * ```ts\n * import { Email } from \"@robelest/convex-auth/providers\";\n *\n * const email = new Email({\n *   from: \"My App <noreply@example.com>\",\n *   send: async (_ctx, { to, subject, html }) => {\n *     await resend.emails.send({ from: \"noreply@example.com\", to, subject, html });\n *   },\n * });\n * ```\n */\nexport class Email {\n  readonly id: string;\n  readonly type = \"email\" as const;\n\n  /**\n   * Create an email provider instance.\n   *\n   * @param config - Email transport and provider settings.\n   * @throws {Error} When `config.from` is empty or whitespace-only.\n   */\n  constructor(public readonly config: EmailProviderConfig) {\n    const from = config.from.trim();\n    if (from.length === 0) {\n      throw new Error(\n        \"Email provider requires a non-empty `from` address \" +\n          '(for example, `\"My App <noreply@example.com>\"`).',\n      );\n    }\n    this.id = config.id ?? \"email\";\n  }\n\n  /** @internal */\n  _toMaterialized(): EmailConfig {\n    const from = this.config.from.trim();\n    const { send } = this.config;\n    const { generateVerificationToken } = this.config;\n    return {\n      id: this.id,\n      type: \"email\",\n      name: \"Email\",\n      from,\n      maxAge: this.config.maxAge ?? 60 * 60 * 24,\n      authorize: undefined,\n      sendVerificationRequest: async ({ identifier, url }, ctx) => {\n        if (!ctx) {\n          throw new Error(\"Email provider requires a Convex action context.\");\n        }\n        const { host } = new URL(url);\n        await send(ctx, {\n          from,\n          to: identifier,\n          subject: `Sign in to ${host}`,\n          html: defaultMagicLinkEmail(url, host),\n        });\n      },\n      generateVerificationToken,\n      options: { from } as any,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAa,QAAb,MAAmB;CACjB,AAAS;CACT,AAAS,OAAO;;;;;;;CAQhB,YAAY,AAAgB,QAA6B;EAA7B;AAE1B,MADa,OAAO,KAAK,MAAM,CACtB,WAAW,EAClB,OAAM,IAAI,MACR,wGAED;AAEH,OAAK,KAAK,OAAO,MAAM;;;CAIzB,kBAA+B;EAC7B,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM;EACpC,MAAM,EAAE,SAAS,KAAK;EACtB,MAAM,EAAE,8BAA8B,KAAK;AAC3C,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,MAAM;GACN;GACA,QAAQ,KAAK,OAAO,UAAU,OAAU;GACxC,WAAW;GACX,yBAAyB,OAAO,EAAE,YAAY,OAAO,QAAQ;AAC3D,QAAI,CAAC,IACH,OAAM,IAAI,MAAM,mDAAmD;IAErE,MAAM,EAAE,SAAS,IAAI,IAAI,IAAI;AAC7B,UAAM,KAAK,KAAK;KACd;KACA,IAAI;KACJ,SAAS,cAAc;KACvB,MAAM,sBAAsB,KAAK,KAAK;KACvC,CAAC;;GAEJ;GACA,SAAS,EAAE,MAAM;GAClB"}

package/dist/providers/phone.d.ts

@@ -1,6 +1,12 @@
 import { PhoneConfig } from "../server/types.js";
 
 //#region src/providers/phone.d.ts
+/**
+ * User-facing configuration for the {@link Phone} provider.
+ *
+ * Use this to send SMS or other phone-based verification messages during
+ * sign-in.
+ */
 interface PhoneProviderConfig {
   /** Send the verification code to the user's phone. */
   send: PhoneConfig["sendVerificationRequest"];
@@ -9,10 +15,32 @@ interface PhoneProviderConfig {
   /** Token expiration in seconds. Defaults to 1200 (20 minutes). */
   maxAge?: number;
 }
+/**
+ * Phone provider for SMS or phone-number verification flows.
+ *
+ * Wraps your `send()` implementation and materializes the runtime behavior
+ * Convex Auth needs for short-code or magic-link-style phone verification.
+ *
+ * @example
+ * ```ts
+ * import { Phone } from "@robelest/convex-auth/providers";
+ *
+ * const phone = new Phone({
+ *   send: async ({ identifier, token }) => {
+ *     await sms.send({ to: identifier, body: `Your sign-in code is ${token}` });
+ *   },
+ * });
+ * ```
+ */
 declare class Phone {
   readonly config: PhoneProviderConfig;
   readonly id: string;
   readonly type: "phone";
+  /**
+   * Create a phone provider instance.
+   *
+   * @param config - Phone delivery and provider settings.
+   */
   constructor(config: PhoneProviderConfig);
 }
 //#endregion

package/dist/providers/phone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"phone.d.ts","names":[],"sources":["../../src/providers/phone.ts"],"mappings":";;;UAUiB,mBAAA;EAEf;EAAA,IAAA,EAAM,WAAA;EAEN;EAAA,EAAA;EAEM;EAAN,MAAA;AAAA;AAAA,cAGW,KAAA;EAAA,SAIiB,MAAA,EAAQ,mBAAA;EAAA,SAH3B,EAAA;EAAA,SACA,IAAA;cAEmB,MAAA,EAAQ,mBAAA;AAAA"}
+{"version":3,"file":"phone.d.ts","names":[],"sources":["../../src/providers/phone.ts"],"mappings":";;;;;;;;;UAgBiB,mBAAA;EA0BJ;EAxBX,IAAA,EAAM,WAAA;;EAEN,EAAA;EA+B4B;EA7B5B,MAAA;AAAA;;;;;;;;;;;;;;;;;;cAoBW,KAAA;EAAA,SASiB,MAAA,EAAQ,mBAAA;EAAA,SAR3B,EAAA;EAAA,SACA,IAAA;;;;;;cAOmB,MAAA,EAAQ,mBAAA;AAAA"}

package/dist/providers/phone.js

@@ -6,9 +6,31 @@ import { Fx } from "@robelest/fx";
 *
 * @module
 */
+/**
+* Phone provider for SMS or phone-number verification flows.
+*
+* Wraps your `send()` implementation and materializes the runtime behavior
+* Convex Auth needs for short-code or magic-link-style phone verification.
+*
+* @example
+* ```ts
+* import { Phone } from "@robelest/convex-auth/providers";
+*
+* const phone = new Phone({
+*   send: async ({ identifier, token }) => {
+*     await sms.send({ to: identifier, body: `Your sign-in code is ${token}` });
+*   },
+* });
+* ```
+*/
 var Phone = class {
 	id;
 	type = "phone";
+	/**
+	* Create a phone provider instance.
+	*
+	* @param config - Phone delivery and provider settings.
+	*/
 	constructor(config) {
 		this.config = config;
 		this.id = config.id ?? "phone";

package/dist/providers/phone.js.map

@@ -1 +1 @@
-{"version":3,"file":"phone.js","names":[],"sources":["../../src/providers/phone.ts"],"sourcesContent":["/**\n * Phone / SMS authentication provider.\n *\n * @module\n */\n\nimport { Fx } from \"@robelest/fx\";\n\nimport type { PhoneConfig } from \"../server/types\";\n\nexport interface PhoneProviderConfig {\n  /** Send the verification code to the user's phone. */\n  send: PhoneConfig[\"sendVerificationRequest\"];\n  /** Provider ID override. Defaults to \"phone\". */\n  id?: string;\n  /** Token expiration in seconds. Defaults to 1200 (20 minutes). */\n  maxAge?: number;\n}\n\nexport class Phone {\n  readonly id: string;\n  readonly type = \"phone\" as const;\n\n  constructor(public readonly config: PhoneProviderConfig) {\n    this.id = config.id ?? \"phone\";\n  }\n\n  /** @internal */\n  _toMaterialized(): PhoneConfig {\n    return {\n      id: this.id,\n      type: \"phone\",\n      maxAge: this.config.maxAge ?? 60 * 20,\n      authorize: async (params, account) => {\n        const dispatch =\n          typeof params.phone !== \"string\"\n            ? ({ tag: \"missingPhone\" } as const)\n            : account.providerAccountId !== params.phone\n              ? ({ tag: \"mismatch\" } as const)\n              : ({ tag: \"ok\" } as const);\n\n        return await Fx.run(\n          Fx.match(dispatch, dispatch.tag, {\n            missingPhone: () =>\n              Fx.fatal(\n                new Error(\n                  \"Token verification requires a `phone` in params of `signIn`.\",\n                ),\n              ),\n            mismatch: () =>\n              Fx.fatal(\n                new Error(\n                  \"Short verification code requires a matching `phone` \" +\n                    \"in params of `signIn`.\",\n                ),\n              ),\n            ok: () => Fx.succeed(undefined),\n          }),\n        );\n      },\n      sendVerificationRequest: this.config.send,\n      options: {} as any,\n    };\n  }\n}\n"],"mappings":";;;;;;;;AAmBA,IAAa,QAAb,MAAmB;CACjB,AAAS;CACT,AAAS,OAAO;CAEhB,YAAY,AAAgB,QAA6B;EAA7B;AAC1B,OAAK,KAAK,OAAO,MAAM;;;CAIzB,kBAA+B;AAC7B,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,QAAQ,KAAK,OAAO,UAAU;GAC9B,WAAW,OAAO,QAAQ,YAAY;IACpC,MAAM,WACJ,OAAO,OAAO,UAAU,WACnB,EAAE,KAAK,gBAAgB,GACxB,QAAQ,sBAAsB,OAAO,QAClC,EAAE,KAAK,YAAY,GACnB,EAAE,KAAK,MAAM;AAEtB,WAAO,MAAM,GAAG,IACd,GAAG,MAAM,UAAU,SAAS,KAAK;KAC/B,oBACE,GAAG,sBACD,IAAI,MACF,+DACD,CACF;KACH,gBACE,GAAG,sBACD,IAAI,MACF,6EAED,CACF;KACH,UAAU,GAAG,QAAQ,OAAU;KAChC,CAAC,CACH;;GAEH,yBAAyB,KAAK,OAAO;GACrC,SAAS,EAAE;GACZ"}
+{"version":3,"file":"phone.js","names":[],"sources":["../../src/providers/phone.ts"],"sourcesContent":["/**\n * Phone / SMS authentication provider.\n *\n * @module\n */\n\nimport { Fx } from \"@robelest/fx\";\n\nimport type { PhoneConfig } from \"../server/types\";\n\n/**\n * User-facing configuration for the {@link Phone} provider.\n *\n * Use this to send SMS or other phone-based verification messages during\n * sign-in.\n */\nexport interface PhoneProviderConfig {\n  /** Send the verification code to the user's phone. */\n  send: PhoneConfig[\"sendVerificationRequest\"];\n  /** Provider ID override. Defaults to \"phone\". */\n  id?: string;\n  /** Token expiration in seconds. Defaults to 1200 (20 minutes). */\n  maxAge?: number;\n}\n\n/**\n * Phone provider for SMS or phone-number verification flows.\n *\n * Wraps your `send()` implementation and materializes the runtime behavior\n * Convex Auth needs for short-code or magic-link-style phone verification.\n *\n * @example\n * ```ts\n * import { Phone } from \"@robelest/convex-auth/providers\";\n *\n * const phone = new Phone({\n *   send: async ({ identifier, token }) => {\n *     await sms.send({ to: identifier, body: `Your sign-in code is ${token}` });\n *   },\n * });\n * ```\n */\nexport class Phone {\n  readonly id: string;\n  readonly type = \"phone\" as const;\n\n  /**\n   * Create a phone provider instance.\n   *\n   * @param config - Phone delivery and provider settings.\n   */\n  constructor(public readonly config: PhoneProviderConfig) {\n    this.id = config.id ?? \"phone\";\n  }\n\n  /** @internal */\n  _toMaterialized(): PhoneConfig {\n    return {\n      id: this.id,\n      type: \"phone\",\n      maxAge: this.config.maxAge ?? 60 * 20,\n      authorize: async (params, account) => {\n        const dispatch =\n          typeof params.phone !== \"string\"\n            ? ({ tag: \"missingPhone\" } as const)\n            : account.providerAccountId !== params.phone\n              ? ({ tag: \"mismatch\" } as const)\n              : ({ tag: \"ok\" } as const);\n\n        return await Fx.run(\n          Fx.match(dispatch, dispatch.tag, {\n            missingPhone: () =>\n              Fx.fatal(\n                new Error(\n                  \"Token verification requires a `phone` in params of `signIn`.\",\n                ),\n              ),\n            mismatch: () =>\n              Fx.fatal(\n                new Error(\n                  \"Short verification code requires a matching `phone` \" +\n                    \"in params of `signIn`.\",\n                ),\n              ),\n            ok: () => Fx.succeed(undefined),\n          }),\n        );\n      },\n      sendVerificationRequest: this.config.send,\n      options: {} as any,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAa,QAAb,MAAmB;CACjB,AAAS;CACT,AAAS,OAAO;;;;;;CAOhB,YAAY,AAAgB,QAA6B;EAA7B;AAC1B,OAAK,KAAK,OAAO,MAAM;;;CAIzB,kBAA+B;AAC7B,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,QAAQ,KAAK,OAAO,UAAU;GAC9B,WAAW,OAAO,QAAQ,YAAY;IACpC,MAAM,WACJ,OAAO,OAAO,UAAU,WACnB,EAAE,KAAK,gBAAgB,GACxB,QAAQ,sBAAsB,OAAO,QAClC,EAAE,KAAK,YAAY,GACnB,EAAE,KAAK,MAAM;AAEtB,WAAO,MAAM,GAAG,IACd,GAAG,MAAM,UAAU,SAAS,KAAK;KAC/B,oBACE,GAAG,sBACD,IAAI,MACF,+DACD,CACF;KACH,gBACE,GAAG,sBACD,IAAI,MACF,6EAED,CACF;KACH,UAAU,GAAG,QAAQ,OAAU;KAChC,CAAC,CACH;;GAEH,yBAAyB,KAAK,OAAO;GACrC,SAAS,EAAE;GACZ"}

package/dist/runtime/browser.js

@@ -0,0 +1,68 @@
+import { Fx } from "@robelest/fx";
+
+//#region src/client/runtime/browser.ts
+/** @internal */
+function base64urlEncode(buffer) {
+	const bytes = new Uint8Array(buffer);
+	let binary = "";
+	for (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i]);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+/** @internal */
+function base64urlDecode(str) {
+	const padded = str.replace(/-/g, "+").replace(/_/g, "/");
+	const binary = atob(padded);
+	const bytes = new Uint8Array(binary.length);
+	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+	return bytes;
+}
+/** @internal */
+async function browserMutex(key, callback) {
+	const lockManager = globalThis?.navigator?.locks;
+	return lockManager !== void 0 ? await lockManager.request(key, callback) : await manualMutex(key, callback);
+}
+/** @internal */
+function getStorageListenerRegistry() {
+	const globalAny = globalThis;
+	if (globalAny.__convexAuthStorageListeners === void 0) globalAny.__convexAuthStorageListeners = {};
+	return globalAny.__convexAuthStorageListeners;
+}
+function getManualMutexTails() {
+	const globalAny = globalThis;
+	if (globalAny.__convexAuthMutexTails === void 0) globalAny.__convexAuthMutexTails = {};
+	return globalAny.__convexAuthMutexTails;
+}
+async function manualMutex(key, callback) {
+	const mutexTails = getManualMutexTails();
+	const previousTail = mutexTails[key] ?? Promise.resolve();
+	let releaseCurrent;
+	const currentTail = new Promise((resolve) => {
+		releaseCurrent = resolve;
+	});
+	mutexTails[key] = previousTail.then(() => currentTail, () => currentTail);
+	await Fx.run(Fx.from({
+		ok: () => previousTail,
+		err: () => void 0
+	}).pipe(Fx.recover(() => Fx.succeed(void 0))));
+	let result;
+	let threw = false;
+	let thrownError;
+	await Fx.run(Fx.from({
+		ok: async () => {
+			result = await callback();
+		},
+		err: (e) => e
+	}).pipe(Fx.recover((e) => {
+		threw = true;
+		thrownError = e;
+		return Fx.succeed(void 0);
+	})));
+	releaseCurrent?.();
+	if (mutexTails[key] === currentTail) delete mutexTails[key];
+	if (threw) throw thrownError;
+	return result;
+}
+
+//#endregion
+export { base64urlDecode, base64urlEncode, browserMutex, getStorageListenerRegistry };
+//# sourceMappingURL=browser.js.map

package/dist/runtime/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","names":[],"sources":["../../src/client/runtime/browser.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\n\n/** @internal */\nexport function base64urlEncode(buffer: ArrayBuffer): string {\n  const bytes = new Uint8Array(buffer);\n  let binary = \"\";\n  for (let i = 0; i < bytes.byteLength; i++) {\n    binary += String.fromCharCode(bytes[i]!);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\n/** @internal */\nexport function base64urlDecode(str: string): Uint8Array {\n  const padded = str.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const binary = atob(padded);\n  const bytes = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/** @internal */\nexport async function browserMutex<T>(\n  key: string,\n  callback: () => Promise<T>,\n): Promise<T> {\n  const lockManager = (globalThis as any)?.navigator?.locks;\n  return lockManager !== undefined\n    ? await lockManager.request(key, callback)\n    : await manualMutex(key, callback);\n}\n\n/** @internal */\nexport function getStorageListenerRegistry(): Record<\n  string,\n  (event: StorageEvent) => void\n> {\n  const globalAny = globalThis as any;\n  if (globalAny.__convexAuthStorageListeners === undefined) {\n    globalAny.__convexAuthStorageListeners = {} as Record<\n      string,\n      (event: StorageEvent) => void\n    >;\n  }\n  return globalAny.__convexAuthStorageListeners as Record<\n    string,\n    (event: StorageEvent) => void\n  >;\n}\n\nfunction getManualMutexTails(): Record<string, Promise<void>> {\n  const globalAny = globalThis as any;\n  if (globalAny.__convexAuthMutexTails === undefined) {\n    globalAny.__convexAuthMutexTails = {} as Record<string, Promise<void>>;\n  }\n  return globalAny.__convexAuthMutexTails as Record<string, Promise<void>>;\n}\n\nasync function manualMutex<T>(\n  key: string,\n  callback: () => Promise<T>,\n): Promise<T> {\n  const mutexTails = getManualMutexTails();\n  const previousTail = mutexTails[key] ?? Promise.resolve();\n\n  let releaseCurrent: (() => void) | undefined;\n  const currentTail = new Promise<void>((resolve) => {\n    releaseCurrent = resolve;\n  });\n\n  mutexTails[key] = previousTail.then(\n    () => currentTail,\n    () => currentTail,\n  );\n\n  await Fx.run(\n    Fx.from({\n      ok: () => previousTail,\n      err: () => undefined,\n    }).pipe(Fx.recover(() => Fx.succeed(undefined))),\n  );\n  let result: T;\n  let threw = false;\n  let thrownError: unknown;\n  await Fx.run(\n    Fx.from({\n      ok: async () => {\n        result = await callback();\n      },\n      err: (e) => e,\n    }).pipe(\n      Fx.recover((e) => {\n        threw = true;\n        thrownError = e;\n        return Fx.succeed(undefined);\n      }),\n    ),\n  );\n  releaseCurrent?.();\n  if (mutexTails[key] === currentTail) {\n    delete mutexTails[key];\n  }\n  if (threw) {\n    throw thrownError;\n  }\n  return result!;\n}\n"],"mappings":";;;;AAGA,SAAgB,gBAAgB,QAA6B;CAC3D,MAAM,QAAQ,IAAI,WAAW,OAAO;CACpC,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,YAAY,IACpC,WAAU,OAAO,aAAa,MAAM,GAAI;AAE1C,QAAO,KAAK,OAAO,CAChB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,GAAG;;;AAIvB,SAAgB,gBAAgB,KAAyB;CACvD,MAAM,SAAS,IAAI,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI;CACxD,MAAM,SAAS,KAAK,OAAO;CAC3B,MAAM,QAAQ,IAAI,WAAW,OAAO,OAAO;AAC3C,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,IACjC,OAAM,KAAK,OAAO,WAAW,EAAE;AAEjC,QAAO;;;AAIT,eAAsB,aACpB,KACA,UACY;CACZ,MAAM,cAAe,YAAoB,WAAW;AACpD,QAAO,gBAAgB,SACnB,MAAM,YAAY,QAAQ,KAAK,SAAS,GACxC,MAAM,YAAY,KAAK,SAAS;;;AAItC,SAAgB,6BAGd;CACA,MAAM,YAAY;AAClB,KAAI,UAAU,iCAAiC,OAC7C,WAAU,+BAA+B,EAAE;AAK7C,QAAO,UAAU;;AAMnB,SAAS,sBAAqD;CAC5D,MAAM,YAAY;AAClB,KAAI,UAAU,2BAA2B,OACvC,WAAU,yBAAyB,EAAE;AAEvC,QAAO,UAAU;;AAGnB,eAAe,YACb,KACA,UACY;CACZ,MAAM,aAAa,qBAAqB;CACxC,MAAM,eAAe,WAAW,QAAQ,QAAQ,SAAS;CAEzD,IAAI;CACJ,MAAM,cAAc,IAAI,SAAe,YAAY;AACjD,mBAAiB;GACjB;AAEF,YAAW,OAAO,aAAa,WACvB,mBACA,YACP;AAED,OAAM,GAAG,IACP,GAAG,KAAK;EACN,UAAU;EACV,WAAW;EACZ,CAAC,CAAC,KAAK,GAAG,cAAc,GAAG,QAAQ,OAAU,CAAC,CAAC,CACjD;CACD,IAAI;CACJ,IAAI,QAAQ;CACZ,IAAI;AACJ,OAAM,GAAG,IACP,GAAG,KAAK;EACN,IAAI,YAAY;AACd,YAAS,MAAM,UAAU;;EAE3B,MAAM,MAAM;EACb,CAAC,CAAC,KACD,GAAG,SAAS,MAAM;AAChB,UAAQ;AACR,gBAAc;AACd,SAAO,GAAG,QAAQ,OAAU;GAC5B,CACH,CACF;AACD,mBAAkB;AAClB,KAAI,WAAW,SAAS,YACtB,QAAO,WAAW;AAEpB,KAAI,MACF,OAAM;AAER,QAAO"}

package/dist/runtime/invite.js

@@ -0,0 +1,51 @@
+//#region src/client/runtime/invite.ts
+/** @internal */
+function createInviteManager(args) {
+	const { param, storageGet, storageSet, storageRemove, cleanUrlParams, tokenKey, emailKey } = args;
+	let pendingInvite = null;
+	const urlInviteToken = param("invite");
+	if (urlInviteToken) pendingInvite = {
+		token: urlInviteToken,
+		email: param("email")
+	};
+	else (async () => {
+		const storedToken = await storageGet(tokenKey);
+		if (storedToken && !pendingInvite) {
+			pendingInvite = {
+				token: storedToken,
+				email: await storageGet(emailKey) ?? null
+			};
+			storageRemove(tokenKey);
+			storageRemove(emailKey);
+		}
+	})();
+	return {
+		getPendingInvite() {
+			return pendingInvite;
+		},
+		async persistInvite() {
+			if (!pendingInvite) return;
+			await storageSet(tokenKey, pendingInvite.token);
+			if (pendingInvite.email) await storageSet(emailKey, pendingInvite.email);
+		},
+		async acceptInvite() {
+			if (!pendingInvite) return {
+				ok: false,
+				message: "No pending invite"
+			};
+			const { token } = pendingInvite;
+			pendingInvite = null;
+			storageRemove(tokenKey);
+			storageRemove(emailKey);
+			cleanUrlParams(["invite", "email"]);
+			return {
+				ok: true,
+				token
+			};
+		}
+	};
+}
+
+//#endregion
+export { createInviteManager };
+//# sourceMappingURL=invite.js.map

package/dist/runtime/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","names":[],"sources":["../../src/client/runtime/invite.ts"],"sourcesContent":["/** @internal */\nexport function createInviteManager(args: {\n  param: (name: string) => string | null;\n  storageGet: (name: string) => Promise<string | null>;\n  storageSet: (name: string, value: string) => Promise<void>;\n  storageRemove: (name: string) => Promise<void>;\n  cleanUrlParams: (params: string[]) => void;\n  tokenKey: string;\n  emailKey: string;\n}) {\n  const {\n    param,\n    storageGet,\n    storageSet,\n    storageRemove,\n    cleanUrlParams,\n    tokenKey,\n    emailKey,\n  } = args;\n\n  let pendingInvite: { token: string; email: string | null } | null = null;\n\n  const urlInviteToken = param(\"invite\");\n  if (urlInviteToken) {\n    pendingInvite = { token: urlInviteToken, email: param(\"email\") };\n  } else {\n    void (async () => {\n      const storedToken = await storageGet(tokenKey);\n      if (storedToken && !pendingInvite) {\n        pendingInvite = {\n          token: storedToken,\n          email: (await storageGet(emailKey)) ?? null,\n        };\n        void storageRemove(tokenKey);\n        void storageRemove(emailKey);\n      }\n    })();\n  }\n\n  return {\n    getPendingInvite() {\n      return pendingInvite;\n    },\n    async persistInvite() {\n      if (!pendingInvite) return;\n      await storageSet(tokenKey, pendingInvite.token);\n      if (pendingInvite.email) {\n        await storageSet(emailKey, pendingInvite.email);\n      }\n    },\n    async acceptInvite(): Promise<{\n      ok: boolean;\n      token?: string;\n      message?: string;\n    }> {\n      if (!pendingInvite) return { ok: false, message: \"No pending invite\" };\n      const { token } = pendingInvite;\n      pendingInvite = null;\n      void storageRemove(tokenKey);\n      void storageRemove(emailKey);\n      cleanUrlParams([\"invite\", \"email\"]);\n      return { ok: true, token };\n    },\n  };\n}\n"],"mappings":";;AACA,SAAgB,oBAAoB,MAQjC;CACD,MAAM,EACJ,OACA,YACA,YACA,eACA,gBACA,UACA,aACE;CAEJ,IAAI,gBAAgE;CAEpE,MAAM,iBAAiB,MAAM,SAAS;AACtC,KAAI,eACF,iBAAgB;EAAE,OAAO;EAAgB,OAAO,MAAM,QAAQ;EAAE;KAEhE,EAAM,YAAY;EAChB,MAAM,cAAc,MAAM,WAAW,SAAS;AAC9C,MAAI,eAAe,CAAC,eAAe;AACjC,mBAAgB;IACd,OAAO;IACP,OAAQ,MAAM,WAAW,SAAS,IAAK;IACxC;AACD,GAAK,cAAc,SAAS;AAC5B,GAAK,cAAc,SAAS;;KAE5B;AAGN,QAAO;EACL,mBAAmB;AACjB,UAAO;;EAET,MAAM,gBAAgB;AACpB,OAAI,CAAC,cAAe;AACpB,SAAM,WAAW,UAAU,cAAc,MAAM;AAC/C,OAAI,cAAc,MAChB,OAAM,WAAW,UAAU,cAAc,MAAM;;EAGnD,MAAM,eAIH;AACD,OAAI,CAAC,cAAe,QAAO;IAAE,IAAI;IAAO,SAAS;IAAqB;GACtE,MAAM,EAAE,UAAU;AAClB,mBAAgB;AAChB,GAAK,cAAc,SAAS;AAC5B,GAAK,cAAc,SAAS;AAC5B,kBAAe,CAAC,UAAU,QAAQ,CAAC;AACnC,UAAO;IAAE,IAAI;IAAM;IAAO;;EAE7B"}