@theholocron/holocron-plugin-clerk 2.0.0-alpha.20 → 2.0.0-alpha.22

package/dist/index.d.mts

@@ -1,59 +1,14 @@
-import { Auth, AuthDescription, AuthEvent, AuthIdentity, AuthUser, CreateAuthUserInput, ParseWebhookInput, WebhookDashboardInfo } from "@theholocron/cli";
+import { Auth, AuthDescription, AuthError, AuthEvent, AuthIdentity, AuthUser, CreateAuthUserInput, ParseWebhookInput, ResolveTokenInput, RestClient, RestClient as RestClient$1, WebhookDashboardInfo } from "@theholocron/cli";
 
 //#region src/auth.d.ts
-/**
- * Token resolution for the Clerk plugin.
- *
- * Resolution order (matches the standard 4-step precedence set by
- * `.notes/tech-auth-bootstrap.spec.md`):
- *   1. explicit `cliToken` argument (from `--token` flag)
- *   2. HOLOCRON_CLERK_SECRET_KEY env var (preferred — explicit intent)
- *   3. CLERK_SECRET_KEY env var (the default Clerk's docs reference)
- *   4. keyring (com.theholocron.cli / "clerk")
- *   5. AuthError naming all four options + the bootstrap hint
- *
- * The key (sk_test_* / sk_live_*) determines which Clerk instance —
- * Development or Production — every call hits.
- */
-declare class AuthError extends Error {
-  name: string;
-}
-interface ResolveTokenInput {
-  /** From `--token` CLI flag. */
-  cliToken?: string;
-  /** Env vars; passed in for testability. Defaults to `process.env`. */
-  env?: NodeJS.ProcessEnv;
-  /** Keyring lookup fn; passed in for testability. Defaults to `getToken(provider)`. */
-  keyring?: (provider: string) => string | null;
-}
-declare function resolveToken(input?: ResolveTokenInput): string;
+declare const resolveToken: (input?: import("@theholocron/http-client").ResolveTokenInput) => string;
 //#endregion
 //#region src/rest.d.ts
-/**
- * Thin REST wrapper around api.clerk.com/v1.
- *
- * Same pattern as the github/vercel/neon REST clients — bearer auth,
- * JSON-only bodies, transport-failure wrapping with `status: 0` so the
- * orchestrator's soft-skip path sees a clear "Clerk GET /path failed"
- * message instead of a generic `TypeError: fetch failed`.
- */
-interface RestClientOptions {
+declare function createClerkRestClient(opts: {
   token: string;
-  fetch?: typeof fetch;
   baseUrl?: string;
-}
-interface RequestOptions {
-  method?: "GET" | "POST" | "PATCH" | "PUT" | "DELETE";
-  body?: unknown;
-  query?: Record<string, string>;
-}
-declare class ClerkRestClient {
-  private readonly token;
-  private readonly fetchImpl;
-  readonly baseUrl: string;
-  constructor(opts: RestClientOptions);
-  request<T>(path: string, opts?: RequestOptions): Promise<T>;
-}
+  fetch?: typeof fetch;
+}): RestClient$1;
 //#endregion
 //#region src/capabilities/auth.d.ts
 type ClerkAuthOptions = Record<string, never>;
@@ -61,7 +16,7 @@ declare class ClerkAuth implements Auth {
   private readonly rest;
   readonly key: "auth";
   readonly providerName = "clerk";
-  constructor(rest: ClerkRestClient, _opts?: ClerkAuthOptions);
+  constructor(rest: RestClient, _opts?: ClerkAuthOptions);
   describe(): Promise<AuthDescription>;
   whoami(): Promise<AuthIdentity>;
   ensureWebhookApp(): Promise<{
@@ -109,7 +64,7 @@ interface ClerkPluginOptions extends ResolveTokenInput {
 }
 interface PluginContext {
   options: ClerkPluginOptions;
-  rest: ClerkRestClient;
+  rest: RestClient;
 }
 declare function createContext(options?: ClerkPluginOptions): PluginContext;
 declare function auth(ctx: PluginContext): Auth;
@@ -127,4 +82,4 @@ declare function createPlugin(options?: ClerkPluginOptions): {
  */
 declare const AUTH_HINT: string;
 //#endregion
-export { AUTH_HINT, AuthError, ClerkAuth, ClerkPluginOptions, ClerkRestClient, PluginContext, ResolveTokenInput, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, auth, createContext, createPlugin, parseWebhook, resolveToken, verifyToken };
+export { AUTH_HINT, AuthError, ClerkAuth, ClerkPluginOptions, PluginContext, type ResolveTokenInput, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, auth, createClerkRestClient, createContext, createPlugin, parseWebhook, resolveToken, verifyToken };

package/dist/index.mjs

@@ -1,29 +1,11 @@
-import { ProviderApiError, WebhookVerificationError, getToken } from "@theholocron/cli";
+import { AuthError, ProviderApiError, WebhookVerificationError, createResolveToken, createRestClient } from "@theholocron/cli";
 //#region src/auth.ts
-/**
-* Token resolution for the Clerk plugin.
-*
-* Resolution order (matches the standard 4-step precedence set by
-* `.notes/tech-auth-bootstrap.spec.md`):
-*   1. explicit `cliToken` argument (from `--token` flag)
-*   2. HOLOCRON_CLERK_SECRET_KEY env var (preferred — explicit intent)
-*   3. CLERK_SECRET_KEY env var (the default Clerk's docs reference)
-*   4. keyring (com.theholocron.cli / "clerk")
-*   5. AuthError naming all four options + the bootstrap hint
-*
-* The key (sk_test_* / sk_live_*) determines which Clerk instance —
-* Development or Production — every call hits.
-*/
-var AuthError = class extends Error {
-	name = "AuthError";
-};
-function resolveToken(input = {}) {
-	const env = input.env ?? process.env;
-	const keyring = input.keyring ?? getToken;
-	const token = input.cliToken || env["HOLOCRON_CLERK_SECRET_KEY"] || env["CLERK_SECRET_KEY"] || keyring("clerk");
-	if (!token) throw new AuthError("no Clerk secret key found. Pass --token <KEY>, set HOLOCRON_CLERK_SECRET_KEY / CLERK_SECRET_KEY, or run: holocron auth set clerk <KEY>");
-	return token;
-}
+const resolveToken = createResolveToken({
+	envName: "HOLOCRON_CLERK_SECRET_KEY",
+	vendorEnvName: "CLERK_SECRET_KEY",
+	keyringService: "clerk",
+	errorMessage: "no Clerk secret key found. Pass --token <KEY>, set HOLOCRON_CLERK_SECRET_KEY / CLERK_SECRET_KEY, or run: holocron auth set clerk <KEY>"
+});
 //#endregion
 //#region src/capabilities/auth.ts
 /**
@@ -116,58 +98,14 @@ function isAlreadyExistsError(err) {
 }
 //#endregion
 //#region src/rest.ts
-/**
-* Thin REST wrapper around api.clerk.com/v1.
-*
-* Same pattern as the github/vercel/neon REST clients — bearer auth,
-* JSON-only bodies, transport-failure wrapping with `status: 0` so the
-* orchestrator's soft-skip path sees a clear "Clerk GET /path failed"
-* message instead of a generic `TypeError: fetch failed`.
-*/
-var ClerkRestClient = class {
-	token;
-	fetchImpl;
-	baseUrl;
-	constructor(opts) {
-		this.token = opts.token;
-		this.fetchImpl = opts.fetch ?? globalThis.fetch;
-		let url = opts.baseUrl ?? "https://api.clerk.com/v1";
-		while (url.endsWith("/")) url = url.slice(0, -1);
-		this.baseUrl = url;
-	}
-	async request(path, opts = {}) {
-		const url = new URL(`${this.baseUrl}${path.startsWith("/") ? path : "/" + path}`);
-		for (const [k, v] of Object.entries(opts.query ?? {})) url.searchParams.set(k, v);
-		const fullUrl = url.toString();
-		const headers = {
-			authorization: `Bearer ${this.token}`,
-			accept: "application/json"
-		};
-		const init = {
-			method: opts.method ?? "GET",
-			headers
-		};
-		if (opts.body !== void 0) {
-			headers["content-type"] = "application/json";
-			init.body = JSON.stringify(opts.body);
-		}
-		let res;
-		try {
-			res = await this.fetchImpl(fullUrl, init);
-		} catch (err) {
-			const detail = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
-			throw new ProviderApiError(`Clerk ${init.method} ${path} failed: ${detail}`, 0, void 0);
-		}
-		if (!res.ok) {
-			const body = await res.text().catch(() => "");
-			throw new ProviderApiError(`Clerk ${init.method} ${path} → ${res.status}`, res.status, body);
-		}
-		if (res.status === 204) return void 0;
-		const text = await res.text();
-		if (!text) return void 0;
-		return JSON.parse(text);
-	}
-};
+function createClerkRestClient(opts) {
+	return createRestClient({
+		baseUrl: opts.baseUrl ?? "https://api.clerk.com/v1",
+		token: opts.token,
+		vendor: "Clerk",
+		fetch: opts.fetch
+	});
+}
 //#endregion
 //#region src/parse-webhook.ts
 /**
@@ -248,10 +186,11 @@ async function verifySignature(input) {
 * canonical "is this secret key valid?" endpoint.
 */
 async function verifyToken(token, opts = {}) {
-	const restOpts = { token };
-	if (opts.baseUrl !== void 0) restOpts.baseUrl = opts.baseUrl;
-	if (opts.fetch !== void 0) restOpts.fetch = opts.fetch;
-	const rest = new ClerkRestClient(restOpts);
+	const rest = createClerkRestClient({
+		token,
+		baseUrl: opts.baseUrl,
+		fetch: opts.fetch
+	});
 	try {
 		const instance = await rest.request("/instance");
 		return {
@@ -268,12 +207,13 @@ async function verifyToken(token, opts = {}) {
 //#endregion
 //#region src/index.ts
 function createContext(options = {}) {
-	const restOpts = { token: resolveToken(options) };
-	if (options.baseUrl !== void 0) restOpts.baseUrl = options.baseUrl;
-	if (options.fetch !== void 0) restOpts.fetch = options.fetch;
 	return {
 		options,
-		rest: new ClerkRestClient(restOpts)
+		rest: createClerkRestClient({
+			token: resolveToken(options),
+			baseUrl: options.baseUrl,
+			fetch: options.fetch
+		})
 	};
 }
 function auth(ctx) {
@@ -294,4 +234,4 @@ function createPlugin(options = {}) {
 */
 const AUTH_HINT = "grab your SECRET key (sk_test_* / sk_live_*) at https://dashboard.clerk.com → API Keys, then run: holocron auth set clerk <KEY>. Do NOT use the publishable key.";
 //#endregion
-export { AUTH_HINT, AuthError, ClerkAuth, ClerkRestClient, auth, createContext, createPlugin, parseWebhook, resolveToken, verifyToken };
+export { AUTH_HINT, AuthError, ClerkAuth, auth, createClerkRestClient, createContext, createPlugin, parseWebhook, resolveToken, verifyToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/holocron-plugin-clerk",
-  "version": "2.0.0-alpha.20",
+  "version": "2.0.0-alpha.22",
   "description": "Holocron plugin for Clerk. Implements the auth capability against Clerk's Backend REST API.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/holocron-plugin-clerk#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",
@@ -21,13 +21,14 @@
     }
   },
   "peerDependencies": {
-    "@theholocron/cli": "2.0.0-alpha.20"
+    "@theholocron/cli": "2.0.0-alpha.22"
   },
   "devDependencies": {
-    "@theholocron/eslint-config": "^5.1.2",
-    "@theholocron/tsconfig": "^5.1.2",
-    "@tsconfig/node-lts": "^24.0.0",
-    "@vitest/coverage-v8": "^3.2.6",
+    "@types/node": "^26",
+    "@theholocron/eslint-config": "^5.2.0",
+    "@theholocron/tsconfig": "^6.0.0",
+    "@theholocron/tsdown-config": "^5.1.2",
+    "@theholocron/vitest-config": "^5.2.0",
     "@vitest/eslint-plugin": "^1.6.23",
     "eslint": "^10.7.0",
     "eslint-plugin-n": "^18.2.2",
@@ -35,8 +36,8 @@
     "tsdown": "^0.22.3",
     "tsx": "^4.22.4",
     "typescript": "^5.9.3",
-    "vitest": "^3.2.6",
-    "@theholocron/cli": "2.0.0-alpha.20"
+    "vitest": "^4.1.10",
+    "@theholocron/cli": "2.0.0-alpha.22"
   },
   "publishConfig": {
     "access": "public"