@sentropic/auth-hono 0.2.1

package/dist/magic-link.js

@@ -0,0 +1,94 @@
+export const createAuthMagicLinkService = (options) => {
+    const tokenBytes = options.tokenBytes ?? 32;
+    const ttlSeconds = options.ttlSeconds ?? 10 * 60;
+    return {
+        async requestMagicLink(input) {
+            const email = options.ports.accountPolicy.normalizeEmail(input.email);
+            const now = options.ports.clock.now();
+            const token = options.ports.random.token(tokenBytes);
+            const tokenHash = await options.ports.tokens.hashSecret(token);
+            const expiresAt = options.ports.clock.addSeconds(now, ttlSeconds);
+            const url = buildMagicLinkUrl(options.baseUrl, token);
+            await options.ports.magicLinks.create({
+                email,
+                expiresAt,
+                now,
+                tokenHash,
+                userId: input.userId ?? null,
+            });
+            await options.ports.emailDelivery.sendMagicLink({ email, expiresAt, token, url });
+            return {
+                expiresAt,
+                success: true,
+            };
+        },
+        async verifyMagicLink(input) {
+            const tokenHash = await options.ports.tokens.hashSecret(input.token);
+            const now = options.ports.clock.now();
+            const link = await options.ports.magicLinks.findValidByTokenHash(tokenHash, now);
+            if (!link || link.used || link.expiresAt <= now) {
+                return invalidMagicLink();
+            }
+            const email = options.ports.accountPolicy.normalizeEmail(link.email);
+            const user = await resolveMagicLinkUser(options.ports, {
+                email,
+                now,
+                userId: link.userId,
+            });
+            if (!user) {
+                return invalidMagicLink();
+            }
+            await options.ports.magicLinks.markUsed(link.id, user.id);
+            return {
+                email,
+                user,
+                valid: true,
+            };
+        },
+    };
+};
+const resolveMagicLinkUser = async (ports, input) => {
+    const existingUser = input.userId
+        ? await ports.users.findById(input.userId)
+        : await ports.users.findByEmail(input.email);
+    if (existingUser) {
+        if (!existingUser.emailVerified || existingUser.email !== input.email || !existingUser.displayName) {
+            return ((await ports.users.update(existingUser.id, {
+                displayName: existingUser.displayName ?? ports.accountPolicy.deriveDisplayName(input.email),
+                email: existingUser.email ?? input.email,
+                emailVerified: true,
+                updatedAt: input.now,
+            })) ?? existingUser);
+        }
+        return existingUser;
+    }
+    const isFirstUser = (await ports.users.count()) === 0;
+    const status = await ports.accountPolicy.statusForNewUser({
+        email: input.email,
+        isFirstUser,
+        now: input.now,
+    });
+    const user = await ports.users.create({
+        accountStatus: status.accountStatus,
+        approvalDueAt: status.approvalDueAt,
+        displayName: ports.accountPolicy.deriveDisplayName(input.email),
+        email: input.email,
+        emailVerified: true,
+        role: await ports.accountPolicy.roleForNewUser({ email: input.email, isFirstUser }),
+    });
+    await ports.accountPolicy.afterUserCreated?.(user);
+    return user;
+};
+const invalidMagicLink = () => ({
+    error: {
+        code: 'invalid_or_expired_magic_link',
+        message: 'Magic link is invalid or expired.',
+        status: 400,
+    },
+    valid: false,
+});
+const buildMagicLinkUrl = (baseUrl, token) => {
+    const normalizedBaseUrl = baseUrl.replace(/\/+$/g, '');
+    return `${normalizedBaseUrl}/auth/magic-link/verify?token=${encodeURIComponent(token)}`;
+};
+//# sourceMappingURL=magic-link.js.map

package/dist/magic-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-link.js","sourceRoot":"","sources":["../src/magic-link.ts"],"names":[],"mappings":"AAkDA,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAA0C,EAChB,EAAE;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,GAAG,EAAE,CAAC;IAEjD,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,KAAK;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAEtD,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpC,KAAK;gBACL,SAAS;gBACT,GAAG;gBACH,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;aAC7B,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAElF,OAAO;gBACL,SAAS;gBACT,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEjF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAChD,OAAO,gBAAgB,EAAE,CAAC;YAC5B,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE;gBACrD,KAAK;gBACL,GAAG;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,gBAAgB,EAAE,CAAC;YAC5B,CAAC;YAED,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAE1D,OAAO;gBACL,KAAK;gBACL,IAAI;gBACJ,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAChC,KAAoB,EACpB,KAA0D,EACtB,EAAE;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,YAAY,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YACnG,OAAO,CACL,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE;gBACzC,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3F,KAAK,EAAE,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;gBACxC,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,KAAK,CAAC,GAAG;aACrB,CAAC,CAAC,IAAI,YAAY,CACpB,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACxD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW;QACX,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;KACpF,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;IAEnD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,GAAkC,EAAE,CAAC,CAAC;IAC7D,KAAK,EAAE;QACL,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,mCAAmC;QAC5C,MAAM,EAAE,GAAG;KACZ;IACD,KAAK,EAAE,KAAK;CACb,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE;IACnE,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,GAAG,iBAAiB,iCAAiC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1F,CAAC,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,25 @@
+import type { MiddlewareHandler } from 'hono';
+import type { AuthHonoPorts, AuthHonoSessionClaims, AuthHonoSessionRecord, AuthHonoUserRecord } from './ports.js';
+export interface AuthHonoAuthContext {
+    role: string;
+    session: AuthHonoSessionClaims;
+    sessionRecord: AuthHonoSessionRecord;
+    token: string;
+    user: AuthHonoUserRecord;
+}
+export interface AuthHonoMiddlewareVariables {
+    auth: AuthHonoAuthContext;
+    session: AuthHonoSessionClaims;
+    user: AuthHonoUserRecord;
+}
+export interface AuthHonoMiddlewareEnv {
+    Variables: AuthHonoMiddlewareVariables;
+}
+export interface CreateAuthMiddlewareOptions {
+    ports: AuthHonoPorts;
+    unauthorizedCode?: string;
+    unauthorizedMessage?: string;
+}
+export declare const createRequireAuth: (options: CreateAuthMiddlewareOptions) => MiddlewareHandler;
+export declare const createOptionalAuth: (options: CreateAuthMiddlewareOptions) => MiddlewareHandler;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAE7D,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,qBAAqB,CAAC;IAC/B,aAAa,EAAE,qBAAqB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,2BAA2B,CAAC;CACxC;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,aAAa,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAOD,eAAO,MAAM,iBAAiB,YAAa,2BAA2B,KAAG,iBAmBxE,CAAC;AAEF,eAAO,MAAM,kBAAkB,YAAa,2BAA2B,KAAG,iBAczE,CAAC"}

package/dist/middleware.js

@@ -0,0 +1,104 @@
+export const createRequireAuth = (options) => {
+    return async (c, next) => {
+        const result = await authenticateRequest(c, options);
+        if (result.kind === 'missing') {
+            return authError(c, {
+                code: options.unauthorizedCode ?? 'unauthorized',
+                message: options.unauthorizedMessage ?? 'Authentication required.',
+                status: 401,
+            });
+        }
+        if (result.kind === 'rejected') {
+            return authError(c, result);
+        }
+        setAuthContext(c, result.auth);
+        await next();
+    };
+};
+export const createOptionalAuth = (options) => {
+    return async (c, next) => {
+        const result = await authenticateRequest(c, options);
+        if (result.kind === 'rejected') {
+            return authError(c, result);
+        }
+        if (result.kind === 'authenticated') {
+            setAuthContext(c, result.auth);
+        }
+        await next();
+    };
+};
+const authenticateRequest = async (c, options) => {
+    const token = readBearerToken(c.req.raw) ?? options.ports.cookies.readSessionToken(c.req.raw);
+    if (!token) {
+        return { kind: 'missing' };
+    }
+    const now = options.ports.clock.now();
+    const claims = await options.ports.tokens.verifySessionToken(token);
+    if (!claims) {
+        return invalidSession();
+    }
+    const tokenHash = await options.ports.tokens.hashSecret(token);
+    const sessionRecord = await options.ports.sessions.findByTokenHash(tokenHash);
+    if (!sessionRecord ||
+        sessionRecord.id !== claims.sessionId ||
+        sessionRecord.userId !== claims.userId ||
+        sessionRecord.revokedAt ||
+        sessionRecord.expiresAt <= now) {
+        return invalidSession();
+    }
+    const user = await options.ports.users.findById(claims.userId);
+    if (!user) {
+        return invalidSession();
+    }
+    const decision = await options.ports.accountPolicy.canAuthenticate(user, now);
+    if (!decision.allowed) {
+        return {
+            kind: 'rejected',
+            code: decision.code ?? 'forbidden',
+            message: decision.message ?? 'Authentication is not allowed for this account.',
+            status: decision.status === 401 ? 401 : 403,
+        };
+    }
+    const role = await options.ports.accountPolicy.resolveSessionRole(user, now);
+    const session = { ...claims, role };
+    await options.ports.sessions.touch(sessionRecord.id, now);
+    return {
+        kind: 'authenticated',
+        auth: {
+            role,
+            session,
+            sessionRecord,
+            token,
+            user,
+        },
+    };
+};
+const invalidSession = () => ({
+    kind: 'rejected',
+    code: 'invalid_session',
+    message: 'Session is invalid or expired.',
+    status: 401,
+});
+const readBearerToken = (request) => {
+    const header = request.headers.get('Authorization');
+    if (!header) {
+        return null;
+    }
+    const match = /^Bearer\s+(.+)$/i.exec(header);
+    return match?.[1]?.trim() || null;
+};
+const setAuthContext = (c, auth) => {
+    const typedContext = c;
+    typedContext.set('auth', auth);
+    typedContext.set('session', auth.session);
+    typedContext.set('user', auth.user);
+};
+const authError = (c, error) => {
+    return c.json({
+        error: {
+            code: error.code,
+            message: error.message,
+        },
+    }, error.status);
+};
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAsCA,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAoC,EAAqB,EAAE;IAC3F,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,EAAE;gBAClB,IAAI,EAAE,OAAO,CAAC,gBAAgB,IAAI,cAAc;gBAChD,OAAO,EAAE,OAAO,CAAC,mBAAmB,IAAI,0BAA0B;gBAClE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAoC,EAAqB,EAAE;IAC5F,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACpC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,KAAK,EAC/B,CAAU,EACV,OAAoC,EACf,EAAE;IACvB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAE9E,IACE,CAAC,aAAa;QACd,aAAa,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS;QACrC,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QACtC,aAAa,CAAC,SAAS;QACvB,aAAa,CAAC,SAAS,IAAI,GAAG,EAC9B,CAAC;QACD,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE9E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,WAAW;YAClC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iDAAiD;YAC9E,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;SAC5C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IAEpC,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE;YACJ,IAAI;YACJ,OAAO;YACP,aAAa;YACb,KAAK;YACL,IAAI;SACL;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,GAAe,EAAE,CAAC,CAAC;IACxC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,gCAAgC;IACzC,MAAM,EAAE,GAAG;CACZ,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAiB,EAAE;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAU,EAAE,IAAyB,EAAQ,EAAE;IACrE,MAAM,YAAY,GAAG,CAAmC,CAAC;IACzD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,CAAU,EACV,KAA2D,EACjD,EAAE;IACZ,OAAO,CAAC,CAAC,IAAI,CACX;QACE,KAAK,EAAE;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;KACF,EACD,KAAK,CAAC,MAAM,CACb,CAAC;AACJ,CAAC,CAAC"}

package/dist/ports.d.ts

@@ -0,0 +1,279 @@
+export type AuthHonoAccountStatus = 'active' | 'pending_admin_approval' | 'approval_expired_readonly' | 'disabled_by_user' | 'disabled_by_admin' | (string & {});
+export type AuthHonoChallengeType = 'registration' | 'authentication';
+export interface AuthHonoDeviceInfo {
+    name?: string;
+    ipAddress?: string;
+    userAgent?: string;
+}
+export interface AuthHonoUserRecord {
+    id: string;
+    email: string | null;
+    displayName: string | null;
+    role: string;
+    emailVerified: boolean;
+    accountStatus: AuthHonoAccountStatus;
+    approvalDueAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface AuthHonoCreateUserInput {
+    email: string;
+    displayName?: string | null;
+    role: string;
+    emailVerified?: boolean;
+    accountStatus?: AuthHonoAccountStatus;
+    approvalDueAt?: Date | null;
+}
+export interface AuthHonoUpdateUserInput {
+    email?: string | null;
+    displayName?: string | null;
+    role?: string;
+    emailVerified?: boolean;
+    accountStatus?: AuthHonoAccountStatus;
+    approvalDueAt?: Date | null;
+    updatedAt?: Date;
+}
+export interface AuthHonoUserPort {
+    findById(userId: string): Promise<AuthHonoUserRecord | null>;
+    findByEmail(email: string): Promise<AuthHonoUserRecord | null>;
+    create(input: AuthHonoCreateUserInput): Promise<AuthHonoUserRecord>;
+    update(userId: string, input: AuthHonoUpdateUserInput): Promise<AuthHonoUserRecord | null>;
+    count(): Promise<number>;
+}
+export interface AuthHonoCredentialRecord {
+    id: string;
+    userId: string;
+    credentialId: string;
+    publicKey: Uint8Array | ArrayBuffer | string;
+    counter: number;
+    transports: string[] | null;
+    name: string | null;
+    deviceType: string | null;
+    backedUp: boolean | null;
+    lastUsedAt: Date | null;
+    createdAt: Date;
+    revokedAt: Date | null;
+}
+export interface AuthHonoCreateCredentialInput {
+    userId: string;
+    credentialId: string;
+    publicKey: Uint8Array | ArrayBuffer | string;
+    counter: number;
+    transports?: string[] | null;
+    name?: string | null;
+    deviceType?: string | null;
+    backedUp?: boolean | null;
+}
+export interface AuthHonoCredentialPort {
+    findById(credentialRecordId: string): Promise<AuthHonoCredentialRecord | null>;
+    findByCredentialId(credentialId: string): Promise<AuthHonoCredentialRecord | null>;
+    listForUser(userId: string): Promise<AuthHonoCredentialRecord[]>;
+    create(input: AuthHonoCreateCredentialInput): Promise<AuthHonoCredentialRecord>;
+    updateCounter(credentialId: string, counter: number, lastUsedAt?: Date): Promise<void>;
+    rename(credentialRecordId: string, userId: string, name: string): Promise<AuthHonoCredentialRecord | null>;
+    revoke(credentialRecordId: string, userId: string): Promise<boolean>;
+}
+export interface AuthHonoChallengeRecord {
+    id: string;
+    challenge: string;
+    userId: string | null;
+    type: AuthHonoChallengeType;
+    expiresAt: Date;
+    used: boolean;
+    createdAt: Date;
+}
+export interface AuthHonoCreateChallengeInput {
+    challenge: string;
+    userId?: string | null;
+    type: AuthHonoChallengeType;
+    expiresAt: Date;
+}
+export interface AuthHonoChallengePort {
+    create(input: AuthHonoCreateChallengeInput): Promise<AuthHonoChallengeRecord>;
+    findValid(challenge: string, type: AuthHonoChallengeType): Promise<AuthHonoChallengeRecord | null>;
+    markUsed(challenge: string): Promise<void>;
+    purgeExpired(now: Date): Promise<number>;
+}
+export interface AuthHonoSessionRecord {
+    id: string;
+    userId: string;
+    sessionTokenHash: string;
+    refreshTokenHash: string | null;
+    deviceName: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    mfaVerified: boolean;
+    expiresAt: Date;
+    createdAt: Date;
+    lastActivityAt: Date;
+    revokedAt: Date | null;
+}
+export interface AuthHonoCreateSessionInput {
+    id: string;
+    userId: string;
+    sessionTokenHash: string;
+    refreshTokenHash?: string | null;
+    deviceInfo?: AuthHonoDeviceInfo;
+    mfaVerified?: boolean;
+    expiresAt: Date;
+    now: Date;
+}
+export interface AuthHonoSessionPort {
+    create(input: AuthHonoCreateSessionInput): Promise<AuthHonoSessionRecord>;
+    findById(sessionId: string): Promise<AuthHonoSessionRecord | null>;
+    findByTokenHash(sessionTokenHash: string): Promise<AuthHonoSessionRecord | null>;
+    findByRefreshTokenHash(refreshTokenHash: string): Promise<AuthHonoSessionRecord | null>;
+    touch(sessionId: string, now: Date): Promise<void>;
+    updateTokens(input: {
+        expiresAt: Date;
+        refreshTokenHash: string;
+        sessionId: string;
+        sessionTokenHash: string;
+    }): Promise<AuthHonoSessionRecord | null>;
+    revoke(sessionId: string): Promise<boolean>;
+    revokeAllForUser(userId: string): Promise<number>;
+    listForUser(userId: string): Promise<AuthHonoSessionRecord[]>;
+}
+export interface AuthHonoEmailVerificationRecord {
+    id: string;
+    email: string;
+    codeHash: string;
+    verificationToken: string | null;
+    expiresAt: Date;
+    used: boolean;
+    createdAt: Date;
+}
+export interface AuthHonoEmailVerificationPort {
+    countRecent(email: string, since: Date): Promise<number>;
+    createCode(input: {
+        email: string;
+        codeHash: string;
+        expiresAt: Date;
+        now: Date;
+    }): Promise<AuthHonoEmailVerificationRecord>;
+    findLatestValidCode(email: string, codeHash: string, now: Date): Promise<AuthHonoEmailVerificationRecord | null>;
+    markUsedWithVerificationToken(id: string, verificationToken: string): Promise<void>;
+    verifyToken(email: string, verificationToken: string, now: Date): Promise<boolean>;
+}
+export interface AuthHonoMagicLinkRecord {
+    id: string;
+    tokenHash: string;
+    email: string;
+    userId: string | null;
+    expiresAt: Date;
+    used: boolean;
+    createdAt: Date;
+}
+export interface AuthHonoMagicLinkPort {
+    create(input: {
+        email: string;
+        tokenHash: string;
+        userId?: string | null;
+        expiresAt: Date;
+        now: Date;
+    }): Promise<AuthHonoMagicLinkRecord>;
+    findValidByTokenHash(tokenHash: string, now: Date): Promise<AuthHonoMagicLinkRecord | null>;
+    markUsed(id: string, userId?: string | null): Promise<void>;
+}
+export interface AuthHonoEmailDeliveryPort {
+    sendVerificationCode(input: {
+        email: string;
+        code: string;
+        expiresAt: Date;
+    }): Promise<void>;
+    sendMagicLink(input: {
+        email: string;
+        token: string;
+        expiresAt: Date;
+        url: string;
+    }): Promise<void>;
+}
+export interface AuthHonoCookiePort {
+    readSessionToken(request: Request): string | null;
+    readRefreshToken(request: Request): string | null;
+    serializeSessionCookie(input: {
+        token: string;
+        expiresAt: Date;
+    }): string;
+    serializeRefreshCookie(input: {
+        token: string;
+        expiresAt: Date;
+    }): string;
+    serializeClearedSessionCookie(): string;
+    serializeClearedRefreshCookie(): string;
+}
+export interface AuthHonoSessionClaims {
+    userId: string;
+    sessionId: string;
+    role: string;
+    email?: string | null;
+    displayName?: string | null;
+}
+export interface AuthHonoTokenPort {
+    hashSecret(secret: string): Promise<string> | string;
+    signSessionToken(claims: AuthHonoSessionClaims, expiresAt: Date): Promise<string>;
+    verifySessionToken(token: string): Promise<AuthHonoSessionClaims | null>;
+    signVerificationToken(input: {
+        email: string;
+        expiresAt: Date;
+    }): Promise<string>;
+}
+export type AuthHonoAuditLevel = 'debug' | 'info' | 'warn' | 'error';
+export interface AuthHonoAuditLogPort {
+    record(level: AuthHonoAuditLevel, event: string, fields?: Record<string, unknown>): Promise<void> | void;
+}
+export interface AuthHonoClockPort {
+    now(): Date;
+    addSeconds(date: Date, seconds: number): Date;
+}
+export interface AuthHonoRandomPort {
+    uuid(): string;
+    bytes(length: number): Uint8Array;
+    numericCode(length: number): string;
+    token(bytes: number): string;
+}
+export interface AuthHonoAccountPolicyDecision {
+    allowed: boolean;
+    status?: number;
+    code?: string;
+    message?: string;
+}
+export interface AuthHonoAccountPolicyPort {
+    normalizeEmail(email: string): string;
+    deriveDisplayName(email: string): string;
+    resolveUserVerification?(user: AuthHonoUserRecord): 'discouraged' | 'preferred' | 'required';
+    roleForNewUser(input: {
+        email: string;
+        isFirstUser: boolean;
+    }): Promise<string> | string;
+    statusForNewUser(input: {
+        email: string;
+        isFirstUser: boolean;
+        now: Date;
+    }): Promise<{
+        accountStatus: AuthHonoAccountStatus;
+        approvalDueAt: Date | null;
+    }> | {
+        accountStatus: AuthHonoAccountStatus;
+        approvalDueAt: Date | null;
+    };
+    canAuthenticate(user: AuthHonoUserRecord, now: Date): Promise<AuthHonoAccountPolicyDecision> | AuthHonoAccountPolicyDecision;
+    resolveSessionRole(user: AuthHonoUserRecord, now: Date): Promise<string> | string;
+    afterUserCreated?(user: AuthHonoUserRecord): Promise<void> | void;
+}
+export interface AuthHonoPorts {
+    users: AuthHonoUserPort;
+    credentials: AuthHonoCredentialPort;
+    challenges: AuthHonoChallengePort;
+    sessions: AuthHonoSessionPort;
+    emailVerification: AuthHonoEmailVerificationPort;
+    magicLinks: AuthHonoMagicLinkPort;
+    emailDelivery: AuthHonoEmailDeliveryPort;
+    cookies: AuthHonoCookiePort;
+    tokens: AuthHonoTokenPort;
+    auditLog: AuthHonoAuditLogPort;
+    clock: AuthHonoClockPort;
+    random: AuthHonoRandomPort;
+    accountPolicy: AuthHonoAccountPolicyPort;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAC7B,QAAQ,GACR,wBAAwB,GACxB,2BAA2B,GAC3B,kBAAkB,GAClB,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEtE,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,qBAAqB,CAAC;IACrC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC7D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC3F,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC/E,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IACnF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChF,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC3G,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9E,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACnG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,YAAY,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,IAAI,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,GAAG,EAAE,IAAI,CAAC;CACX;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnE,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACjF,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,YAAY,CAAC,KAAK,EAAE;QAClB,SAAS,EAAE,IAAI,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,UAAU,CAAC,KAAK,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,IAAI,CAAC;QAChB,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7C,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAAC;IACjH,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,KAAK,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC;QAChB,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC5F,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,yBAAyB;IACxC,oBAAoB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7F,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrG;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;IAClD,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;IAClD,sBAAsB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,MAAM,CAAC;IAC1E,sBAAsB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,MAAM,CAAC;IAC1E,6BAA6B,IAAI,MAAM,CAAC;IACxC,6BAA6B,IAAI,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACrD,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACzE,qBAAqB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1G;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,IAAI,IAAI,CAAC;IACZ,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,MAAM,CAAC;IACf,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAClC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACzC,uBAAuB,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;IAC7F,cAAc,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACzF,gBAAgB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;QACnF,aAAa,EAAE,qBAAqB,CAAC;QACrC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;KAC5B,CAAC,GAAG;QACH,aAAa,EAAE,qBAAqB,CAAC;QACrC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,eAAe,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,6BAA6B,CAAC,GAAG,6BAA6B,CAAC;IAC7H,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAClF,gBAAgB,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACnE;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,sBAAsB,CAAC;IACpC,UAAU,EAAE,qBAAqB,CAAC;IAClC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,iBAAiB,EAAE,6BAA6B,CAAC;IACjD,UAAU,EAAE,qBAAqB,CAAC;IAClC,aAAa,EAAE,yBAAyB,CAAC;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,yBAAyB,CAAC;CAC1C"}

package/dist/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":""}

package/dist/route-handlers.d.ts

@@ -0,0 +1,19 @@
+import type { AuthHonoEmailVerificationService } from './email-verification.js';
+import type { AuthHonoMagicLinkService, AuthHonoRequestMagicLinkResult } from './magic-link.js';
+import type { AuthHonoRouteHandlers } from './router.js';
+export interface CreateAuthEmailRouteHandlersOptions {
+    service: AuthHonoEmailVerificationService;
+}
+export interface CreateAuthMagicLinkRouteHandlersOptions {
+    formatRequestMagicLinkSuccess?: (result: Extract<AuthHonoRequestMagicLinkResult, {
+        success: true;
+    }>) => AuthHonoMagicLinkRequestSuccessResponse;
+    service: AuthHonoMagicLinkService;
+}
+export interface AuthHonoMagicLinkRequestSuccessResponse {
+    success: true;
+    [key: string]: unknown;
+}
+export declare const createAuthEmailRouteHandlers: (options: CreateAuthEmailRouteHandlersOptions) => AuthHonoRouteHandlers;
+export declare const createAuthMagicLinkRouteHandlers: (options: CreateAuthMagicLinkRouteHandlersOptions) => AuthHonoRouteHandlers;
+//# sourceMappingURL=route-handlers.d.ts.map

package/dist/route-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-handlers.d.ts","sourceRoot":"","sources":["../src/route-handlers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,KAAK,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,gCAAgC,CAAC;CAC3C;AAED,MAAM,WAAW,uCAAuC;IACtD,6BAA6B,CAAC,EAAE,CAC9B,MAAM,EAAE,OAAO,CAAC,8BAA8B,EAAE;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,KAC/D,uCAAuC,CAAC;IAC7C,OAAO,EAAE,wBAAwB,CAAC;CACnC;AAED,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,IAAI,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAyBD,eAAO,MAAM,4BAA4B,YAC9B,mCAAmC,KAC3C,qBAuCD,CAAC;AAEH,eAAO,MAAM,gCAAgC,YAClC,uCAAuC,KAC/C,qBAwCD,CAAC"}