@seamless-auth/core 0.5.1-beta.20260523222121 → 0.5.1

package/README.md

@@ -23,6 +23,7 @@ If you are building a custom adapter (Express, Fastify, Next.js, Hono, etc.), th
 - Core authentication state machine
 - Cookie validation and refresh logic
 - Service-token–based API ↔ Auth Server communication
+- Framework-agnostic OAuth provider discovery/start/callback helpers
 - Stateless, cryptographically verifiable flows
 
 This package **does not**:
@@ -87,6 +88,10 @@ Key exports include:
 - `refreshAccessToken(...)` – rotates expired access sessions
 - `verifyCookieJwt(...)` – verifies signed cookie payloads
 - `createServiceToken(...)` – creates short-lived M2M assertions
+- `hasScopedRole(...)` – checks scoped role grants such as `admin:read`
+- `listOAuthProvidersHandler(...)` – retrieves public OAuth provider metadata
+- `startOAuthLoginHandler(...)` – starts an OAuth authorization-code login
+- `finishOAuthLoginHandler(...)` – finishes OAuth login and returns cookie instructions
 
 These functions return **descriptive results**, not HTTP responses.
 
@@ -121,6 +126,70 @@ if (result.type === "error") {
 
 ---
 
+## OAuth Helper Flow
+
+The core OAuth helpers are designed for framework adapters. They do not redirect, set cookies, or
+read secrets. They proxy to the Seamless Auth API and return plain result objects that your adapter
+turns into HTTP responses.
+
+```ts
+const providers = await listOAuthProvidersHandler({
+  authServerUrl: "https://auth.example.com",
+});
+
+const started = await startOAuthLoginHandler(
+  {
+    providerId: "google",
+    body: {
+      redirectUri: "https://app.example.com/oauth/callback",
+      returnTo: "https://app.example.com/dashboard",
+    },
+  },
+  { authServerUrl: "https://auth.example.com" },
+);
+
+const finished = await finishOAuthLoginHandler(
+  {
+    providerId: "google",
+    body: {
+      code: "provider-code",
+      state: "signed-state-from-start",
+    },
+  },
+  {
+    authServerUrl: "https://auth.example.com",
+    accessCookieName: "seamless-access",
+    refreshCookieName: "seamless-refresh",
+  },
+);
+
+if (finished.setCookies) {
+  // adapter signs and applies access/refresh cookies
+}
+```
+
+The Seamless Auth API handles state validation, provider token exchange, userinfo lookup, and
+provider identity linking. Core and adapter code never store provider access tokens.
+
+---
+
+## Scoped Roles
+
+Core exports `hasScopedRole` and `roleGrantsAccess` for framework adapters and custom servers that
+need the same authorization semantics as `@seamless-auth/express`.
+
+```ts
+import { hasScopedRole } from "@seamless-auth/core";
+
+hasScopedRole(["admin:write"], "admin:read"); // true
+hasScopedRole(["admin:read"], "admin:write"); // false
+```
+
+Plain roles remain backwards compatible. `admin` grants `admin:read` and `admin:write`, while
+`admin:read` does not satisfy a plain `admin` check.
+
+---
+
 ## Testing
 
 All logic in this package is tested against compiled output (`dist/`),

package/dist/handlers/oauthHandlers.d.ts

@@ -0,0 +1,39 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface OAuthHandlerOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    refreshCookieName: string;
+}
+export interface OAuthRequestInput {
+    providerId?: string;
+    body?: unknown;
+    forwardedClientIp?: string;
+}
+export interface OAuthHandlerResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function listOAuthProvidersHandler(opts: Pick<OAuthHandlerOptions, "authServerUrl">): Promise<{
+    body: any;
+    status: number;
+} | {
+    error: any;
+    status: number;
+}>;
+export declare function startOAuthLoginHandler(input: OAuthRequestInput, opts: Pick<OAuthHandlerOptions, "authServerUrl">): Promise<{
+    body: any;
+    status: number;
+} | {
+    error: any;
+    status: number;
+}>;
+export declare function finishOAuthLoginHandler(input: OAuthRequestInput, opts: OAuthHandlerOptions): Promise<OAuthHandlerResult>;
+//# sourceMappingURL=oauthHandlers.d.ts.map

package/dist/handlers/oauthHandlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthHandlers.d.ts","sourceRoot":"","sources":["../../src/handlers/oauthHandlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC;;;;;;GAYjD;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC;;;;;;GAiBjD;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAiE7B"}

package/dist/handlers/oauthHandlers.js

@@ -0,0 +1,77 @@
+import { authFetch } from "../authFetch.js";
+import { verifySignedAuthResponse } from "../verifySignedAuthResponse.js";
+export async function listOAuthProvidersHandler(opts) {
+    const up = await authFetch(`${opts.authServerUrl}/oauth/providers`, {
+        method: "GET",
+    });
+    const data = await up.json();
+    return {
+        status: up.status,
+        ...(up.ok ? { body: data } : { error: data }),
+    };
+}
+export async function startOAuthLoginHandler(input, opts) {
+    const up = await authFetch(`${opts.authServerUrl}/oauth/${encodeURIComponent(input.providerId)}/start`, {
+        method: "POST",
+        body: input.body,
+        forwardedClientIp: input.forwardedClientIp,
+    });
+    const data = await up.json();
+    return {
+        status: up.status,
+        ...(up.ok ? { body: data } : { error: data }),
+    };
+}
+export async function finishOAuthLoginHandler(input, opts) {
+    const up = await authFetch(`${opts.authServerUrl}/oauth/${encodeURIComponent(input.providerId)}/callback`, {
+        method: "POST",
+        body: input.body,
+        forwardedClientIp: input.forwardedClientIp,
+    });
+    const data = await up.json();
+    if (!up.ok) {
+        return {
+            status: up.status,
+            error: data,
+        };
+    }
+    const verifiedAccessToken = await verifySignedAuthResponse(data.token, opts.authServerUrl);
+    if (!verifiedAccessToken) {
+        throw new Error("Invalid signed response from Auth Server");
+    }
+    if (verifiedAccessToken.sub !== data.sub) {
+        throw new Error("Signature mismatch with data payload");
+    }
+    const sessionId = typeof verifiedAccessToken.sid === "string"
+        ? verifiedAccessToken.sid
+        : undefined;
+    return {
+        status: up.status,
+        body: data,
+        setCookies: [
+            {
+                name: opts.accessCookieName,
+                value: {
+                    sub: data.sub,
+                    ...(sessionId === undefined ? {} : { sessionId }),
+                    roles: data.roles,
+                    email: data.email,
+                    phone: data.phone,
+                    organizationId: data.organizationId ?? null,
+                },
+                ttl: data.ttl,
+                domain: opts.cookieDomain,
+            },
+            {
+                name: opts.refreshCookieName,
+                value: {
+                    sub: data.sub,
+                    refreshToken: data.refreshToken,
+                },
+                ttl: data.refreshTtl,
+                domain: opts.cookieDomain,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=oauthHandlers.js.map

package/dist/handlers/oauthHandlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthHandlers.js","sourceRoot":"","sources":["../../src/handlers/oauthHandlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AA2B1E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAgD;IAEhD,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,aAAa,kBAAkB,EAAE;QAClE,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAE7B,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAwB,EACxB,IAAgD;IAEhD,MAAM,EAAE,GAAG,MAAM,SAAS,CACxB,GAAG,IAAI,CAAC,aAAa,UAAU,kBAAkB,CAAC,KAAK,CAAC,UAAW,CAAC,QAAQ,EAC5E;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAE7B,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAwB,EACxB,IAAyB;IAEzB,MAAM,EAAE,GAAG,MAAM,SAAS,CACxB,GAAG,IAAI,CAAC,aAAa,UAAU,kBAAkB,CAAC,KAAK,CAAC,UAAW,CAAC,WAAW,EAC/E;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,wBAAwB,CACxD,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,aAAa,CACnB,CAAC;IAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GACb,OAAO,mBAAmB,CAAC,GAAG,KAAK,QAAQ;QACzC,CAAC,CAAC,mBAAmB,CAAC,GAAG;QACzB,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,IAAI,CAAC,gBAAgB;gBAC3B,KAAK,EAAE;oBACL,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;oBACjD,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;iBAC5C;gBACD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM,EAAE,IAAI,CAAC,YAAY;aAC1B;YACD;gBACE,IAAI,EAAE,IAAI,CAAC,iBAAiB;gBAC5B,KAAK,EAAE;oBACL,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC;gBACD,GAAG,EAAE,IAAI,CAAC,UAAU;gBACpB,MAAM,EAAE,IAAI,CAAC,YAAY;aAC1B;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export * from "./verifyCookieJwt.js";
 export * from "./refreshAccessToken.js";
 export * from "./getSeamlessUser.js";
 export * from "./createServiceToken.js";
+export * from "./scopedRoles.js";
 export * from "./handlers/login.js";
 export * from "./handlers/finishLogin.js";
 export * from "./handlers/register.js";
@@ -17,4 +18,5 @@ export * from "./handlers/verifyMagicLinkHandler.js";
 export * from "./handlers/requestMagicLinkHandler.js";
 export * from "./handlers/pollMagicLinkConfirmationHandler.js";
 export * from "./handlers/switchOrganizationHandler.js";
+export * from "./handlers/oauthHandlers.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AAExC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC;AACxD,cAAc,6BAA6B,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@ export * from "./verifyCookieJwt.js";
 export * from "./refreshAccessToken.js";
 export * from "./getSeamlessUser.js";
 export * from "./createServiceToken.js";
+export * from "./scopedRoles.js";
 export * from "./handlers/login.js";
 export * from "./handlers/finishLogin.js";
 export * from "./handlers/register.js";
@@ -17,4 +18,5 @@ export * from "./handlers/verifyMagicLinkHandler.js";
 export * from "./handlers/requestMagicLinkHandler.js";
 export * from "./handlers/pollMagicLinkConfirmationHandler.js";
 export * from "./handlers/switchOrganizationHandler.js";
+export * from "./handlers/oauthHandlers.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AAExC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC;AACxD,cAAc,6BAA6B,CAAC"}

package/dist/scopedRoles.d.ts

@@ -0,0 +1,3 @@
+export declare function roleGrantsAccess(grantedRole: string, requiredRole: string): boolean;
+export declare function hasScopedRole(grantedRoles: unknown, requiredRoles: string | string[]): boolean;
+//# sourceMappingURL=scopedRoles.d.ts.map

package/dist/scopedRoles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedRoles.d.ts","sourceRoot":"","sources":["../src/scopedRoles.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAsCnF;AAED,wBAAgB,aAAa,CAC3B,YAAY,EAAE,OAAO,EACrB,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAC/B,OAAO,CAaT"}

package/dist/scopedRoles.js

@@ -0,0 +1,39 @@
+export function roleGrantsAccess(grantedRole, requiredRole) {
+    const granted = grantedRole.trim();
+    const required = requiredRole.trim();
+    if (!granted || !required) {
+        return false;
+    }
+    if (granted === required) {
+        return true;
+    }
+    if (granted.endsWith(":*")) {
+        const prefix = granted.slice(0, -2);
+        return required === prefix || required.startsWith(`${prefix}:`);
+    }
+    if (!required.includes(":")) {
+        return false;
+    }
+    if (!granted.includes(":")) {
+        return required.startsWith(`${granted}:`);
+    }
+    const grantedParts = granted.split(":");
+    const requiredParts = required.split(":");
+    const grantedAction = grantedParts.at(-1);
+    const requiredAction = requiredParts.at(-1);
+    const grantedPrefix = grantedParts.slice(0, -1);
+    const requiredPrefix = requiredParts.slice(0, -1);
+    return (grantedAction === "write" &&
+        requiredAction === "read" &&
+        grantedPrefix.length === requiredPrefix.length &&
+        grantedPrefix.every((part, index) => part === requiredPrefix[index]));
+}
+export function hasScopedRole(grantedRoles, requiredRoles) {
+    if (!Array.isArray(grantedRoles)) {
+        return false;
+    }
+    const granted = grantedRoles.filter((role) => typeof role === "string");
+    const required = Array.isArray(requiredRoles) ? requiredRoles : [requiredRoles];
+    return required.some((requiredRole) => granted.some((grantedRole) => roleGrantsAccess(grantedRole, requiredRole)));
+}
+//# sourceMappingURL=scopedRoles.js.map

package/dist/scopedRoles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedRoles.js","sourceRoot":"","sources":["../src/scopedRoles.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,YAAoB;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAErC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAElD,OAAO,CACL,aAAa,KAAK,OAAO;QACzB,cAAc,KAAK,MAAM;QACzB,aAAa,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC9C,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,YAAqB,EACrB,aAAgC;IAEhC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAEhF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CACpC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/core",
-  "version": "0.5.1-beta.20260523222121",
+  "version": "0.5.1",
   "description": "Framework-agnostic core authentication logic for SeamlessAuth",
   "license": "AGPL-3.0-only",
   "author": "Fells Code, LLC",