@robelest/convex-auth 0.0.4-preview.2 → 0.0.4-preview.21

package/dist/providers/email.js

@@ -1,47 +1,71 @@
+import { defaultMagicLinkEmail } from "../server/templates.js";
+
 //#region src/providers/email.ts
 /**
-* Email providers send a token to the user's email address
-* for sign-in.
+* Email (magic link / OTP) authentication provider.
 *
-* When you use this function to create your config, by default it
-* checks that there is an `email` field during token verification
-* that matches the `email` used during the initial `signIn` call.
+* @module
+*/
+/**
+* Email provider for magic-link or one-time-code sign-in.
 *
-* If you want the "magic link behavior", where only the token is needed,
-* you can override the `authorize` method to skip the check:
+* Sends verification emails through your `send()` implementation and converts
+* the result into Convex Auth's internal email-provider runtime shape.
 *
+* @example
 * ```ts
-* import email from "@robelest/convex-auth/providers/email";
-* import { Auth } from "@robelest/convex-auth/component";
+* import { Email } from "@robelest/convex-auth/providers";
 *
-* export const { auth, signIn, signOut, store } = Auth({
-*   providers: [
-*     email({ authorize: undefined }),
-*   ],
+* const email = new Email({
+*   from: "My App <noreply@example.com>",
+*   send: async (_ctx, { to, subject, html }) => {
+*     await resend.emails.send({ from: "noreply@example.com", to, subject, html });
+*   },
 * });
 * ```
-*
-* Make sure the token has high enough entropy to be secure.
-*
-* @param config - Email provider options including `sendVerificationRequest`.
-* @returns An `EmailConfig` to include in your `providers` array.
 */
-function email(config) {
-	return {
-		id: "email",
-		type: "email",
-		name: "Email",
-		from: "Auth.js <no-reply@authjs.dev>",
-		maxAge: 3600,
-		authorize: async (params, account) => {
-			if (typeof params.email !== "string") throw new Error("Token verification requires an `email` in params of `signIn`.");
-			if (account.providerAccountId !== params.email) throw new Error("Short verification code requires a matching `email` in params of `signIn`.");
-		},
-		sendVerificationRequest: config.sendVerificationRequest,
-		options: config
-	};
-}
+var Email = class {
+	id;
+	type = "email";
+	/**
+	* Create an email provider instance.
+	*
+	* @param config - Email transport and provider settings.
+	* @throws {Error} When `config.from` is empty or whitespace-only.
+	*/
+	constructor(config) {
+		this.config = config;
+		if (config.from.trim().length === 0) throw new Error("Email provider requires a non-empty `from` address (for example, `\"My App <noreply@example.com>\"`).");
+		this.id = config.id ?? "email";
+	}
+	/** @internal */
+	_toMaterialized() {
+		const from = this.config.from.trim();
+		const { send } = this.config;
+		const { generateVerificationToken } = this.config;
+		return {
+			id: this.id,
+			type: "email",
+			name: "Email",
+			from,
+			maxAge: this.config.maxAge ?? 3600 * 24,
+			authorize: void 0,
+			sendVerificationRequest: async ({ identifier, url }, ctx) => {
+				if (!ctx) throw new Error("Email provider requires a Convex action context.");
+				const { host } = new URL(url);
+				await send(ctx, {
+					from,
+					to: identifier,
+					subject: `Sign in to ${host}`,
+					html: defaultMagicLinkEmail(url, host)
+				});
+			},
+			generateVerificationToken,
+			options: { from }
+		};
+	}
+};
 
 //#endregion
-export { email as default };
+export { Email };
 //# sourceMappingURL=email.js.map

package/dist/providers/email.js.map

@@ -1 +1 @@
-{"version":3,"file":"email.js","names":[],"sources":["../../src/providers/email.ts"],"sourcesContent":["/**\n * Simplifies creating custom email providers, such as for sending OTPs.\n *\n * @module\n */\n\nimport { GenericDataModel } from \"convex/server\";\nimport { EmailConfig, EmailUserConfig } from \"../server/types\";\n\n/**\n * Email providers send a token to the user's email address\n * for sign-in.\n *\n * When you use this function to create your config, by default it\n * checks that there is an `email` field during token verification\n * that matches the `email` used during the initial `signIn` call.\n *\n * If you want the \"magic link behavior\", where only the token is needed,\n * you can override the `authorize` method to skip the check:\n *\n * ```ts\n * import email from \"@robelest/convex-auth/providers/email\";\n * import { Auth } from \"@robelest/convex-auth/component\";\n *\n * export const { auth, signIn, signOut, store } = Auth({\n *   providers: [\n *     email({ authorize: undefined }),\n *   ],\n * });\n * ```\n *\n * Make sure the token has high enough entropy to be secure.\n *\n * @param config - Email provider options including `sendVerificationRequest`.\n * @returns An `EmailConfig` to include in your `providers` array.\n */\nexport default function email<DataModel extends GenericDataModel>(\n  config: EmailUserConfig<DataModel> &\n    Pick<EmailConfig, \"sendVerificationRequest\">,\n): EmailConfig<DataModel> {\n  return {\n    id: \"email\",\n    type: \"email\",\n    name: \"Email\",\n    from: \"Auth.js <no-reply@authjs.dev>\",\n    maxAge: 60 * 60, // 1 hour\n    authorize: async (params, account) => {\n      if (typeof params.email !== \"string\") {\n        throw new Error(\n          \"Token verification requires an `email` in params of `signIn`.\",\n        );\n      }\n      if (account.providerAccountId !== params.email) {\n        throw new Error(\n          \"Short verification code requires a matching `email` \" +\n            \"in params of `signIn`.\",\n        );\n      }\n    },\n    sendVerificationRequest: config.sendVerificationRequest,\n    options: config,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,SAAwB,MACtB,QAEwB;AACxB,QAAO;EACL,IAAI;EACJ,MAAM;EACN,MAAM;EACN,MAAM;EACN,QAAQ;EACR,WAAW,OAAO,QAAQ,YAAY;AACpC,OAAI,OAAO,OAAO,UAAU,SAC1B,OAAM,IAAI,MACR,gEACD;AAEH,OAAI,QAAQ,sBAAsB,OAAO,MACvC,OAAM,IAAI,MACR,6EAED;;EAGL,yBAAyB,OAAO;EAChC,SAAS;EACV"}
+{"version":3,"file":"email.js","names":[],"sources":["../../src/providers/email.ts"],"sourcesContent":["/**\n * Email (magic link / OTP) authentication provider.\n *\n * @module\n */\n\nimport { defaultMagicLinkEmail } from \"../server/templates\";\nimport type { EmailConfig } from \"../server/types\";\n\n/**\n * User-facing configuration for the {@link Email} provider.\n *\n * Use this to wire your email delivery service into Convex Auth's magic-link\n * or OTP flow.\n */\nexport interface EmailProviderConfig {\n  /** Sender address (e.g. \"My App <noreply@example.com>\"). */\n  from: string;\n  /** Send the verification email. Receives the Convex action context. */\n  send: (\n    ctx: any,\n    opts: { from: string; to: string; subject: string; html: string },\n  ) => Promise<void>;\n  /** Override to generate a custom verification token. */\n  generateVerificationToken?: () => Promise<string>;\n  /** Provider ID override. Defaults to \"email\". */\n  id?: string;\n  /** Token expiration in seconds. Defaults to 86400 (24 hours). */\n  maxAge?: number;\n}\n\n/**\n * Email provider for magic-link or one-time-code sign-in.\n *\n * Sends verification emails through your `send()` implementation and converts\n * the result into Convex Auth's internal email-provider runtime shape.\n *\n * @example\n * ```ts\n * import { Email } from \"@robelest/convex-auth/providers\";\n *\n * const email = new Email({\n *   from: \"My App <noreply@example.com>\",\n *   send: async (_ctx, { to, subject, html }) => {\n *     await resend.emails.send({ from: \"noreply@example.com\", to, subject, html });\n *   },\n * });\n * ```\n */\nexport class Email {\n  readonly id: string;\n  readonly type = \"email\" as const;\n\n  /**\n   * Create an email provider instance.\n   *\n   * @param config - Email transport and provider settings.\n   * @throws {Error} When `config.from` is empty or whitespace-only.\n   */\n  constructor(public readonly config: EmailProviderConfig) {\n    const from = config.from.trim();\n    if (from.length === 0) {\n      throw new Error(\n        \"Email provider requires a non-empty `from` address \" +\n          '(for example, `\"My App <noreply@example.com>\"`).',\n      );\n    }\n    this.id = config.id ?? \"email\";\n  }\n\n  /** @internal */\n  _toMaterialized(): EmailConfig {\n    const from = this.config.from.trim();\n    const { send } = this.config;\n    const { generateVerificationToken } = this.config;\n    return {\n      id: this.id,\n      type: \"email\",\n      name: \"Email\",\n      from,\n      maxAge: this.config.maxAge ?? 60 * 60 * 24,\n      authorize: undefined,\n      sendVerificationRequest: async ({ identifier, url }, ctx) => {\n        if (!ctx) {\n          throw new Error(\"Email provider requires a Convex action context.\");\n        }\n        const { host } = new URL(url);\n        await send(ctx, {\n          from,\n          to: identifier,\n          subject: `Sign in to ${host}`,\n          html: defaultMagicLinkEmail(url, host),\n        });\n      },\n      generateVerificationToken,\n      options: { from } as any,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAa,QAAb,MAAmB;CACjB,AAAS;CACT,AAAS,OAAO;;;;;;;CAQhB,YAAY,AAAgB,QAA6B;EAA7B;AAE1B,MADa,OAAO,KAAK,MAAM,CACtB,WAAW,EAClB,OAAM,IAAI,MACR,wGAED;AAEH,OAAK,KAAK,OAAO,MAAM;;;CAIzB,kBAA+B;EAC7B,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM;EACpC,MAAM,EAAE,SAAS,KAAK;EACtB,MAAM,EAAE,8BAA8B,KAAK;AAC3C,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,MAAM;GACN;GACA,QAAQ,KAAK,OAAO,UAAU,OAAU;GACxC,WAAW;GACX,yBAAyB,OAAO,EAAE,YAAY,OAAO,QAAQ;AAC3D,QAAI,CAAC,IACH,OAAM,IAAI,MAAM,mDAAmD;IAErE,MAAM,EAAE,SAAS,IAAI,IAAI,IAAI;AAC7B,UAAM,KAAK,KAAK;KACd;KACA,IAAI;KACJ,SAAS,cAAc;KACvB,MAAM,sBAAsB,KAAK,KAAK;KACvC,CAAC;;GAEJ;GACA,SAAS,EAAE,MAAM;GAClB"}

package/dist/providers/index.d.ts

@@ -1,8 +1,12 @@
 import { OAuth, OAuthConfig } from "./oauth.js";
 import { Credentials, CredentialsConfig } from "./credentials.js";
-import { Anonymous, AnonymousConfig } from "./anonymous.js";
-import { Device, DeviceConfig } from "./device.js";
 import { Password, PasswordConfig } from "./password.js";
 import { Passkey, PasskeyConfig } from "./passkey.js";
 import { Totp, TotpConfig } from "./totp.js";
-export { Anonymous, type AnonymousConfig, Credentials, type CredentialsConfig, Device, type DeviceConfig, OAuth, type OAuthConfig, Passkey, type PasskeyConfig, Password, type PasswordConfig, Totp, type TotpConfig };
+import { Device, DeviceConfig } from "./device.js";
+import { SSO } from "./sso.js";
+import { Email, EmailProviderConfig } from "./email.js";
+import { Phone, PhoneProviderConfig } from "./phone.js";
+import { EmailConfig, PhoneConfig } from "../server/types.js";
+import { Anonymous, AnonymousConfig } from "./anonymous.js";
+export { Anonymous, type AnonymousConfig, Credentials, type CredentialsConfig, Device, type DeviceConfig, Email, type EmailConfig, type EmailProviderConfig, OAuth, type OAuthConfig, Passkey, type PasskeyConfig, Password, type PasswordConfig, Phone, type PhoneConfig, type PhoneProviderConfig, SSO, Totp, type TotpConfig };

package/dist/providers/index.js

@@ -1,9 +1,12 @@
 import { Credentials } from "./credentials.js";
 import { Anonymous } from "./anonymous.js";
 import { Device } from "./device.js";
+import { Email } from "./email.js";
 import { OAuth } from "./oauth.js";
 import { Password } from "./password.js";
 import { Passkey } from "./passkey.js";
 import { Totp } from "./totp.js";
+import { SSO } from "./sso.js";
+import { Phone } from "./phone.js";
 
-export { Anonymous, Credentials, Device, OAuth, Passkey, Password, Totp };
+export { Anonymous, Credentials, Device, Email, OAuth, Passkey, Password, Phone, SSO, Totp };

package/dist/providers/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","names":[],"sources":["../../src/providers/oauth.ts"],"mappings":";;;;;;;UAqBiB,WAAA;EAcb;EAZF,MAAA;EAgByD;;;;AAO3D;;EAhBE,OAAA,IAAW,MAAA,EAAQ,YAAA,KAAiB,OAAA,CAAQ,YAAA;EAiBtB;;;;EAZtB,EAAA;AAAA;;cAIW,kBAAA;;;;;;UAOI,qBAAA;EAAA,SACN,IAAA,SAAa,kBAAA;EAQ+B;EAAA,SAN5C,EAAA;EAMwD;EAAA,SAJxD,QAAA;EA2BU;EAAA,SAzBV,MAAA;EA4Ba;EAAA,SA1Bb,OAAA,IAAW,MAAA,EAAQ,YAAA,KAAiB,OAAA,CAAQ,YAAA;AAAA;;;;;AAoDvD;;;;;;;;;;;;;;;;iBA7BgB,KAAA,CACd,QAAA,OACA,MAAA,GAAS,WAAA,GACR,qBAAA;;;;iBA0Ba,eAAA,CAAgB,KAAA,YAAiB,KAAA,IAAS,qBAAA"}
+{"version":3,"file":"oauth.d.ts","names":[],"sources":["../../src/providers/oauth.ts"],"mappings":";;;;;;;UAsBiB,WAAA;EAcb;EAZF,MAAA;EAgByD;;;;AAO3D;;EAhBE,OAAA,IAAW,MAAA,EAAQ,YAAA,KAAiB,OAAA,CAAQ,YAAA;EAiBtB;;;;EAZtB,EAAA;AAAA;;cAIW,kBAAA;;;;;;UAOI,qBAAA;EAAA,SACN,IAAA,SAAa,kBAAA;EAQ+B;EAAA,SAN5C,EAAA;EAMwD;EAAA,SAJxD,QAAA;EA2BU;EAAA,SAzBV,MAAA;EA4Ba;EAAA,SA1Bb,OAAA,IAAW,MAAA,EAAQ,YAAA,KAAiB,OAAA,CAAQ,YAAA;AAAA;;;;;AAmDvD;;;;;;;;;;;;;;;;iBA5BgB,KAAA,CACd,QAAA,OACA,MAAA,GAAS,WAAA,GACR,qBAAA;;;;iBAyBa,eAAA,CACd,KAAA,YACC,KAAA,IAAS,qBAAA"}

package/dist/providers/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","names":[],"sources":["../../src/providers/oauth.ts"],"sourcesContent":["/**\n * OAuth provider factory for wrapping Arctic provider instances.\n *\n * ```ts\n * import { Google, GitHub } from \"arctic\";\n * import { OAuth } from \"@robelest/convex-auth/providers\";\n *\n * OAuth(new Google(clientId, clientSecret, redirectURI), {\n *   scopes: [\"openid\", \"profile\", \"email\"],\n * })\n * ```\n *\n * @module\n */\n\nimport type { OAuth2Tokens } from \"arctic\";\nimport type { OAuthProfile } from \"../server/types\";\n\n/**\n * Configuration for an OAuth provider.\n */\nexport interface OAuthConfig {\n  /** OAuth scopes to request during authorization. */\n  scopes?: string[];\n  /**\n   * Extract user profile from tokens.\n   *\n   * Required for non-OIDC providers (e.g. GitHub) that don't return an ID token.\n   * For OIDC providers, defaults to decoding the ID token claims.\n   */\n  profile?: (tokens: OAuth2Tokens) => Promise<OAuthProfile>;\n  /**\n   * Override the provider ID derived from the class name.\n   * Used for route matching (`/api/auth/signin/{id}`).\n   */\n  id?: string;\n}\n\n/** The internal tag for identifying OAuth provider configs. */\nexport const OAUTH_PROVIDER_TAG = \"__convex_oauth\" as const;\n\n/**\n * An OAuth provider instance with config attached.\n *\n * Created by the `OAuth()` factory. The runtime detects these via the `_tag` field.\n */\nexport interface OAuthProviderInstance {\n  readonly _tag: typeof OAUTH_PROVIDER_TAG;\n  /** The provider ID (e.g. \"google\", \"github\"). */\n  readonly id: string;\n  /** The Arctic provider instance. */\n  readonly provider: any;\n  /** OAuth scopes. */\n  readonly scopes: string[];\n  /** Optional profile extraction callback. */\n  readonly profile?: (tokens: OAuth2Tokens) => Promise<OAuthProfile>;\n}\n\n/**\n * Wrap an Arctic provider instance with scopes and profile config.\n *\n * The provider ID is derived from `provider.constructor.name.toLowerCase()`\n * unless overridden via `config.id`.\n *\n * @param provider - An Arctic provider instance (e.g. `new Google(...)`)\n * @param config - Optional scopes, profile callback, and ID override\n * @returns A tagged OAuth provider config for the `providers` array\n *\n * @example\n * ```ts\n * import { Google } from \"arctic\";\n * import { OAuth } from \"@robelest/convex-auth/providers\";\n *\n * OAuth(new Google(clientId, clientSecret, redirectURI), {\n *   scopes: [\"openid\", \"profile\", \"email\"],\n * })\n * ```\n */\nexport function OAuth(\n  provider: any,\n  config?: OAuthConfig,\n): OAuthProviderInstance {\n  if (\n    !provider ||\n    typeof provider.createAuthorizationURL !== \"function\" ||\n    typeof provider.validateAuthorizationCode !== \"function\"\n  ) {\n    throw new Error(\n      \"OAuth() expects an Arctic provider instance with createAuthorizationURL and validateAuthorizationCode methods.\",\n    );\n  }\n\n  const id =\n    config?.id ?? provider.constructor?.name?.toLowerCase() ?? \"oauth\";\n\n  return {\n    _tag: OAUTH_PROVIDER_TAG,\n    id,\n    provider,\n    scopes: config?.scopes ?? [],\n    profile: config?.profile,\n  };\n}\n\n/**\n * Type guard to check if a provider config is an OAuth provider.\n */\nexport function isOAuthProvider(value: unknown): value is OAuthProviderInstance {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    \"_tag\" in value &&\n    (value as any)._tag === OAUTH_PROVIDER_TAG\n  );\n}\n"],"mappings":";;AAuCA,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;AAuClC,SAAgB,MACd,UACA,QACuB;AACvB,KACE,CAAC,YACD,OAAO,SAAS,2BAA2B,cAC3C,OAAO,SAAS,8BAA8B,WAE9C,OAAM,IAAI,MACR,iHACD;AAMH,QAAO;EACL,MAAM;EACN,IAJA,QAAQ,MAAM,SAAS,aAAa,MAAM,aAAa,IAAI;EAK3D;EACA,QAAQ,QAAQ,UAAU,EAAE;EAC5B,SAAS,QAAQ;EAClB;;;;;AAMH,SAAgB,gBAAgB,OAAgD;AAC9E,QACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAAc,SAAS"}
+{"version":3,"file":"oauth.js","names":[],"sources":["../../src/providers/oauth.ts"],"sourcesContent":["/**\n * OAuth provider factory for wrapping Arctic provider instances.\n *\n * ```ts\n * import { Google, GitHub } from \"arctic\";\n * import { OAuth } from \"@robelest/convex-auth/providers\";\n *\n * OAuth(new Google(clientId, clientSecret, redirectURI), {\n *   scopes: [\"openid\", \"profile\", \"email\"],\n * })\n * ```\n *\n * @module\n */\n\nimport type { OAuth2Tokens } from \"arctic\";\n\nimport type { OAuthProfile } from \"../server/types\";\n\n/**\n * Configuration for an OAuth provider.\n */\nexport interface OAuthConfig {\n  /** OAuth scopes to request during authorization. */\n  scopes?: string[];\n  /**\n   * Extract user profile from tokens.\n   *\n   * Required for non-OIDC providers (e.g. GitHub) that don't return an ID token.\n   * For OIDC providers, defaults to decoding the ID token claims.\n   */\n  profile?: (tokens: OAuth2Tokens) => Promise<OAuthProfile>;\n  /**\n   * Override the provider ID derived from the class name.\n   * Used for route matching (`/api/auth/signin/{id}`).\n   */\n  id?: string;\n}\n\n/** The internal tag for identifying OAuth provider configs. */\nexport const OAUTH_PROVIDER_TAG = \"__convex_oauth\" as const;\n\n/**\n * An OAuth provider instance with config attached.\n *\n * Created by the `OAuth()` factory. The runtime detects these via the `_tag` field.\n */\nexport interface OAuthProviderInstance {\n  readonly _tag: typeof OAUTH_PROVIDER_TAG;\n  /** The provider ID (e.g. \"google\", \"github\"). */\n  readonly id: string;\n  /** The Arctic provider instance. */\n  readonly provider: any;\n  /** OAuth scopes. */\n  readonly scopes: string[];\n  /** Optional profile extraction callback. */\n  readonly profile?: (tokens: OAuth2Tokens) => Promise<OAuthProfile>;\n}\n\n/**\n * Wrap an Arctic provider instance with scopes and profile config.\n *\n * The provider ID is derived from `provider.constructor.name.toLowerCase()`\n * unless overridden via `config.id`.\n *\n * @param provider - An Arctic provider instance (e.g. `new Google(...)`)\n * @param config - Optional scopes, profile callback, and ID override\n * @returns A tagged OAuth provider config for the `providers` array\n *\n * @example\n * ```ts\n * import { Google } from \"arctic\";\n * import { OAuth } from \"@robelest/convex-auth/providers\";\n *\n * OAuth(new Google(clientId, clientSecret, redirectURI), {\n *   scopes: [\"openid\", \"profile\", \"email\"],\n * })\n * ```\n */\nexport function OAuth(\n  provider: any,\n  config?: OAuthConfig,\n): OAuthProviderInstance {\n  if (\n    !provider ||\n    typeof provider.createAuthorizationURL !== \"function\" ||\n    typeof provider.validateAuthorizationCode !== \"function\"\n  ) {\n    throw new Error(\n      \"OAuth() expects an Arctic provider instance with createAuthorizationURL and validateAuthorizationCode methods.\",\n    );\n  }\n\n  const id = config?.id ?? provider.constructor?.name?.toLowerCase() ?? \"oauth\";\n\n  return {\n    _tag: OAUTH_PROVIDER_TAG,\n    id,\n    provider,\n    scopes: config?.scopes ?? [],\n    profile: config?.profile,\n  };\n}\n\n/**\n * Type guard to check if a provider config is an OAuth provider.\n */\nexport function isOAuthProvider(\n  value: unknown,\n): value is OAuthProviderInstance {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    \"_tag\" in value &&\n    (value as any)._tag === OAUTH_PROVIDER_TAG\n  );\n}\n"],"mappings":";;AAwCA,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;AAuClC,SAAgB,MACd,UACA,QACuB;AACvB,KACE,CAAC,YACD,OAAO,SAAS,2BAA2B,cAC3C,OAAO,SAAS,8BAA8B,WAE9C,OAAM,IAAI,MACR,iHACD;AAKH,QAAO;EACL,MAAM;EACN,IAJS,QAAQ,MAAM,SAAS,aAAa,MAAM,aAAa,IAAI;EAKpE;EACA,QAAQ,QAAQ,UAAU,EAAE;EAC5B,SAAS,QAAQ;EAClB;;;;;AAMH,SAAgB,gBACd,OACgC;AAChC,QACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAAc,SAAS"}

package/dist/providers/passkey.d.ts

@@ -1,6 +1,15 @@
-import { PasskeyProviderConfig } from "../server/types.js";
-
 //#region src/providers/passkey.d.ts
+/**
+ * Passkey (WebAuthn) authentication provider.
+ *
+ * ```ts
+ * import { Passkey } from "@robelest/convex-auth/providers";
+ *
+ * new Passkey({ rpName: "My App" })
+ * ```
+ *
+ * @module
+ */
 /**
  * Configuration for the Passkey provider.
  */
@@ -42,13 +51,7 @@ declare class Passkey {
   readonly type: "passkey";
   readonly config: PasskeyConfig;
   constructor(config?: PasskeyConfig);
-  /** @internal Convert to the internal materialized config shape. */
-  _toMaterialized(): PasskeyProviderConfig;
 }
-/**
- * @deprecated Use `new Passkey(config)` instead.
- */
-declare function passkey(config?: PasskeyConfig): PasskeyProviderConfig;
 //#endregion
-export { Passkey, PasskeyConfig, passkey as default };
+export { Passkey, PasskeyConfig };
 //# sourceMappingURL=passkey.d.ts.map

package/dist/providers/passkey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkey.d.ts","names":[],"sources":["../../src/providers/passkey.ts"],"mappings":";;;;;;UAiBiB,aAAA;EAkBM;EAhBrB,MAAA;EAgCW;EA9BX,IAAA;;EAEA,MAAA;EAiCoB;EA/BpB,WAAA;EAqCwC;EAnCxC,gBAAA;EAyBS;EAvBT,WAAA;EAyBS;EAvBT,uBAAA;;EAEA,UAAA;EAuBY;EArBZ,qBAAA;AAAA;;;AAyCD;;;;;;;;;;;cAzBY,OAAA;EAAA,SACF,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,aAAA;cAEL,MAAA,GAAQ,aAAA;;EAMpB,eAAA,CAAA,GAAmB,qBAAA;AAAA;;;;iBAuBG,OAAA,CACtB,MAAA,GAAS,aAAA,GACR,qBAAA"}
+{"version":3,"file":"passkey.d.ts","names":[],"sources":["../../src/providers/passkey.ts"],"mappings":";;AAiBA;;;;;;;;;;;;;UAAiB,aAAA;EAkBM;EAhBrB,MAAA;EAgCkB;EA9BlB,IAAA;EAmCsC;EAjCtC,MAAA;EA8BS;EA5BT,WAAA;EA6BiB;EA3BjB,gBAAA;EA6BoB;EA3BpB,WAAA;EA2BsC;EAzBtC,uBAAA;;EAEA,UAAA;;EAEA,qBAAA;AAAA;;;;;;;;;;;;;;cAgBW,OAAA;EAAA,SACF,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,aAAA;cAEL,MAAA,GAAQ,aAAA;AAAA"}

package/dist/providers/passkey.js

@@ -36,13 +36,7 @@ var Passkey = class {
 		};
 	}
 };
-/**
-* @deprecated Use `new Passkey(config)` instead.
-*/
-function passkey(config) {
-	return new Passkey(config)._toMaterialized();
-}
 
 //#endregion
-export { Passkey, passkey as default };
+export { Passkey };
 //# sourceMappingURL=passkey.js.map

package/dist/providers/passkey.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkey.js","names":[],"sources":["../../src/providers/passkey.ts"],"sourcesContent":["/**\n * Passkey (WebAuthn) authentication provider.\n *\n * ```ts\n * import { Passkey } from \"@robelest/convex-auth/providers\";\n *\n * new Passkey({ rpName: \"My App\" })\n * ```\n *\n * @module\n */\n\nimport type { PasskeyProviderConfig } from \"../server/types\";\n\n/**\n * Configuration for the Passkey provider.\n */\nexport interface PasskeyConfig {\n  /** Relying Party display name. Defaults to SITE_URL hostname. */\n  rpName?: string;\n  /** Relying Party ID (hostname). Defaults to SITE_URL hostname. */\n  rpId?: string;\n  /** Allowed origins for credential verification. Defaults to SITE_URL. */\n  origin?: string | string[];\n  /** Attestation conveyance preference. Defaults to \"none\". */\n  attestation?: \"none\" | \"direct\";\n  /** User verification requirement. Defaults to \"required\". */\n  userVerification?: \"required\" | \"preferred\" | \"discouraged\";\n  /** Resident key (discoverable credential) preference. Defaults to \"preferred\". */\n  residentKey?: \"required\" | \"preferred\" | \"discouraged\";\n  /** Restrict to platform or cross-platform authenticators. */\n  authenticatorAttachment?: \"platform\" | \"cross-platform\";\n  /** Supported COSE algorithms. Defaults to [-7 (ES256), -257 (RS256)]. */\n  algorithms?: number[];\n  /** Challenge expiration in ms. Defaults to 300_000 (5 minutes). */\n  challengeExpirationMs?: number;\n}\n\n/**\n * Passkey (WebAuthn) authentication provider.\n *\n * Enables passwordless authentication via biometrics, security keys,\n * and synced passkeys using the Web Authentication API.\n *\n * @example\n * ```ts\n * import { Passkey } from \"@robelest/convex-auth/providers\";\n *\n * new Passkey({ rpName: \"My App\" })\n * ```\n */\nexport class Passkey {\n  readonly id: string;\n  readonly type = \"passkey\" as const;\n  readonly config: PasskeyConfig;\n\n  constructor(config: PasskeyConfig = {}) {\n    this.id = \"passkey\";\n    this.config = config;\n  }\n\n  /** @internal Convert to the internal materialized config shape. */\n  _toMaterialized(): PasskeyProviderConfig {\n    return {\n      id: this.id,\n      type: \"passkey\",\n      options: {\n        attestation: \"none\",\n        userVerification: \"required\",\n        residentKey: \"preferred\",\n        algorithms: [-7, -257], // ES256, RS256\n        challengeExpirationMs: 300_000, // 5 minutes\n        ...this.config,\n      },\n    };\n  }\n}\n\n// ============================================================================\n// Backward-compatible default export\n// ============================================================================\n\n/**\n * @deprecated Use `new Passkey(config)` instead.\n */\nexport default function passkey(\n  config?: PasskeyConfig,\n): PasskeyProviderConfig {\n  return new Passkey(config)._toMaterialized();\n}\n"],"mappings":";;;;;;;;;;;;;;AAmDA,IAAa,UAAb,MAAqB;CACnB,AAAS;CACT,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,SAAwB,EAAE,EAAE;AACtC,OAAK,KAAK;AACV,OAAK,SAAS;;;CAIhB,kBAAyC;AACvC,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,SAAS;IACP,aAAa;IACb,kBAAkB;IAClB,aAAa;IACb,YAAY,CAAC,IAAI,KAAK;IACtB,uBAAuB;IACvB,GAAG,KAAK;IACT;GACF;;;;;;AAWL,SAAwB,QACtB,QACuB;AACvB,QAAO,IAAI,QAAQ,OAAO,CAAC,iBAAiB"}
+{"version":3,"file":"passkey.js","names":[],"sources":["../../src/providers/passkey.ts"],"sourcesContent":["/**\n * Passkey (WebAuthn) authentication provider.\n *\n * ```ts\n * import { Passkey } from \"@robelest/convex-auth/providers\";\n *\n * new Passkey({ rpName: \"My App\" })\n * ```\n *\n * @module\n */\n\nimport type { PasskeyProviderConfig } from \"../server/types\";\n\n/**\n * Configuration for the Passkey provider.\n */\nexport interface PasskeyConfig {\n  /** Relying Party display name. Defaults to SITE_URL hostname. */\n  rpName?: string;\n  /** Relying Party ID (hostname). Defaults to SITE_URL hostname. */\n  rpId?: string;\n  /** Allowed origins for credential verification. Defaults to SITE_URL. */\n  origin?: string | string[];\n  /** Attestation conveyance preference. Defaults to \"none\". */\n  attestation?: \"none\" | \"direct\";\n  /** User verification requirement. Defaults to \"required\". */\n  userVerification?: \"required\" | \"preferred\" | \"discouraged\";\n  /** Resident key (discoverable credential) preference. Defaults to \"preferred\". */\n  residentKey?: \"required\" | \"preferred\" | \"discouraged\";\n  /** Restrict to platform or cross-platform authenticators. */\n  authenticatorAttachment?: \"platform\" | \"cross-platform\";\n  /** Supported COSE algorithms. Defaults to [-7 (ES256), -257 (RS256)]. */\n  algorithms?: number[];\n  /** Challenge expiration in ms. Defaults to 300_000 (5 minutes). */\n  challengeExpirationMs?: number;\n}\n\n/**\n * Passkey (WebAuthn) authentication provider.\n *\n * Enables passwordless authentication via biometrics, security keys,\n * and synced passkeys using the Web Authentication API.\n *\n * @example\n * ```ts\n * import { Passkey } from \"@robelest/convex-auth/providers\";\n *\n * new Passkey({ rpName: \"My App\" })\n * ```\n */\nexport class Passkey {\n  readonly id: string;\n  readonly type = \"passkey\" as const;\n  readonly config: PasskeyConfig;\n\n  constructor(config: PasskeyConfig = {}) {\n    this.id = \"passkey\";\n    this.config = config;\n  }\n\n  /** @internal Convert to the internal materialized config shape. */\n  _toMaterialized(): PasskeyProviderConfig {\n    return {\n      id: this.id,\n      type: \"passkey\",\n      options: {\n        attestation: \"none\",\n        userVerification: \"required\",\n        residentKey: \"preferred\",\n        algorithms: [-7, -257], // ES256, RS256\n        challengeExpirationMs: 300_000, // 5 minutes\n        ...this.config,\n      },\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAmDA,IAAa,UAAb,MAAqB;CACnB,AAAS;CACT,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,SAAwB,EAAE,EAAE;AACtC,OAAK,KAAK;AACV,OAAK,SAAS;;;CAIhB,kBAAyC;AACvC,SAAO;GACL,IAAI,KAAK;GACT,MAAM;GACN,SAAS;IACP,aAAa;IACb,kBAAkB;IAClB,aAAa;IACb,YAAY,CAAC,IAAI,KAAK;IACtB,uBAAuB;IACvB,GAAG,KAAK;IACT;GACF"}

package/dist/providers/password.d.ts

@@ -1,5 +1,5 @@
 import { CredentialsConfig } from "./credentials.js";
-import { ConvexCredentialsConfig, EmailConfig, GenericActionCtxWithAuthConfig } from "../server/types.js";
+import { EmailConfig, GenericActionCtxWithAuthConfig } from "../server/types.js";
 import { DocumentByName, GenericDataModel, WithoutSystemFields } from "convex/server";
 import { Value } from "convex/values";
 
@@ -29,7 +29,7 @@ interface PasswordConfig<DataModel extends GenericDataModel> {
    * Convex ActionCtx in case you want to read from or write to
    * the database.
    */
-  ctx: GenericActionCtxWithAuthConfig<DataModel>) => WithoutSystemFields<DocumentByName<DataModel, "user">> & {
+  ctx: GenericActionCtxWithAuthConfig<DataModel>) => WithoutSystemFields<DocumentByName<DataModel, "User">> & {
     email: string;
   };
   /**
@@ -50,12 +50,12 @@ interface PasswordConfig<DataModel extends GenericDataModel> {
    */
   crypto?: CredentialsConfig["crypto"];
   /**
-   * An Auth.js email provider used to require verification
+   * An email provider used to require verification
    * before password reset.
    */
   reset?: EmailConfig | ((...args: any) => EmailConfig);
   /**
-   * An Auth.js email provider used to require verification
+   * An email provider used to require verification
    * before sign up / sign in.
    */
   verify?: EmailConfig | ((...args: any) => EmailConfig);
@@ -63,7 +63,7 @@ interface PasswordConfig<DataModel extends GenericDataModel> {
 /**
  * Email and password authentication provider.
  *
- * Passwords are by default hashed using Scrypt from Lucia.
+ * Passwords are by default hashed using scrypt.
  * You can customize the hashing via the `crypto` option.
  *
  * Email verification is not required unless you pass
@@ -82,13 +82,7 @@ declare class Password<DataModel extends GenericDataModel = GenericDataModel> {
   readonly type: "credentials";
   readonly config: PasswordConfig<DataModel>;
   constructor(config?: PasswordConfig<DataModel>);
-  /** @internal Convert to the internal materialized config shape. */
-  _toMaterialized(): ConvexCredentialsConfig;
 }
-/**
- * @deprecated Use `new Password(config)` instead.
- */
-declare function password<DataModel extends GenericDataModel>(config?: PasswordConfig<DataModel>): ConvexCredentialsConfig;
 //#endregion
-export { Password, PasswordConfig, password as default };
+export { Password, PasswordConfig };
 //# sourceMappingURL=password.d.ts.map

package/dist/providers/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","names":[],"sources":["../../src/providers/password.ts"],"mappings":";;;;;;;;;UAyCiB,cAAA,mBAAiC,gBAAA;EAiBvB;;;;EAZzB,EAAA;EAkBK;;;;;;;EAVL,OAAA;EAkCA;;;EA9BE,MAAA,EAAQ,MAAA,SAAe,KAAA;EAmCzB;;;;EA9BE,GAAA,EAAK,8BAAA,CAA+B,SAAA,MACjC,mBAAA,CAAoB,cAAA,CAAe,SAAA;IACtC,KAAA;EAAA;EAgDiB;;;;;;;;;;;EAnCnB,4BAAA,IAAgC,QAAA;EAmCM;;;;EA9BtC,MAAA,GAAS,iBAAA;EAiCQ;;;;EA5BjB,KAAA,GAAQ,WAAA,QAAmB,IAAA,UAAc,WAAA;EA8B7B;;;;EAzBZ,MAAA,GAAS,WAAA,QAAmB,IAAA,UAAc,WAAA;AAAA;;;;;;;;;;;;;;;;;;cAoB/B,QAAA,mBAA2B,gBAAA,GAAmB,gBAAA;EAAA,SAChD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,cAAA,CAAe,SAAA;cAEpB,MAAA,GAAQ,cAAA,CAAe,SAAA;;EAMnC,eAAA,CAAA,GAAmB,uBAAA;AAAA;;;;iBA4IG,QAAA,mBAA2B,gBAAA,CAAA,CACjD,MAAA,GAAQ,cAAA,CAAe,SAAA,IACtB,uBAAA"}
+{"version":3,"file":"password.d.ts","names":[],"sources":["../../src/providers/password.ts"],"mappings":";;;;;;;;;UA4CiB,cAAA,mBAAiC,gBAAA;EAiBvB;;;;EAZzB,EAAA;EAkBK;;;;;;;EAVL,OAAA;EAkCA;;;EA9BE,MAAA,EAAQ,MAAA,SAAe,KAAA;EAmCzB;;;;EA9BE,GAAA,EAAK,8BAAA,CAA+B,SAAA,MACjC,mBAAA,CAAoB,cAAA,CAAe,SAAA;IACtC,KAAA;EAAA;EA2EiB;;;;;;;;;;;EA9DnB,4BAAA,IAAgC,QAAA;EA8DyB;;;;EAzDzD,MAAA,GAAS,iBAAA;EA4DuB;;;;EAvDhC,KAAA,GAAQ,WAAA,QAAmB,IAAA,UAAc,WAAA;EA0D4B;;;;EArDrE,MAAA,GAAS,WAAA,QAAmB,IAAA,UAAc,WAAA;AAAA;;;;;;;;;;;;;;;;;;cA+C/B,QAAA,mBAA2B,gBAAA,GAAmB,gBAAA;EAAA,SAChD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,cAAA,CAAe,SAAA;cAG9B,MAAA,GAAQ,cAAA,CAAe,SAAA;AAAA"}