@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.4

package/dist/providers/builtin/known-providers.js

@@ -0,0 +1,243 @@
+/**
+ * Known Auth Provider Metadata
+ *
+ * Metadata for the built-in social providers supported by the host auth
+ * implementation. The host supplies the runtime provider list.
+ *
+ * @see better-auth/core/src/social-providers/index.ts
+ */
+/**
+ * Metadata for all known built-in social providers.
+ *
+ * Keep this in sync with the host auth implementation's supported providers.
+ * Run `bun run check:auth-providers` to verify.
+ *
+ */
+export const KNOWN_PROVIDERS = {
+    apple: {
+        displayName: 'Apple',
+        icon: 'apple',
+        defaultScopes: ['name', 'email'],
+        description: 'Sign in with Apple'
+    },
+    atlassian: {
+        displayName: 'Atlassian',
+        icon: 'atlassian',
+        defaultScopes: ['read:me', 'read:account'],
+        description: 'Atlassian account'
+    },
+    cognito: {
+        displayName: 'AWS Cognito',
+        icon: 'aws',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Amazon Cognito user pool'
+    },
+    discord: {
+        displayName: 'Discord',
+        icon: 'discord',
+        defaultScopes: ['identify', 'email'],
+        description: 'Discord account'
+    },
+    dropbox: {
+        displayName: 'Dropbox',
+        icon: 'dropbox',
+        defaultScopes: ['account_info.read'],
+        description: 'Dropbox account'
+    },
+    facebook: {
+        displayName: 'Facebook',
+        icon: 'facebook',
+        defaultScopes: ['email', 'public_profile'],
+        description: 'Facebook account'
+    },
+    figma: {
+        displayName: 'Figma',
+        icon: 'figma',
+        defaultScopes: ['files_read'],
+        description: 'Figma account'
+    },
+    github: {
+        displayName: 'GitHub',
+        icon: 'github',
+        defaultScopes: ['read:user', 'user:email'],
+        description: 'GitHub account'
+    },
+    gitlab: {
+        displayName: 'GitLab',
+        icon: 'gitlab',
+        defaultScopes: ['read_user'],
+        description: 'GitLab account'
+    },
+    google: {
+        displayName: 'Google',
+        icon: 'google',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Google account'
+    },
+    huggingface: {
+        displayName: 'Hugging Face',
+        icon: 'huggingface',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Hugging Face account'
+    },
+    kakao: {
+        displayName: 'Kakao',
+        icon: 'kakao',
+        defaultScopes: ['profile_nickname', 'account_email'],
+        description: 'Kakao account'
+    },
+    kick: {
+        displayName: 'Kick',
+        icon: 'kick',
+        defaultScopes: ['user.read'],
+        description: 'Kick account'
+    },
+    line: {
+        displayName: 'LINE',
+        icon: 'line',
+        defaultScopes: ['profile', 'openid', 'email'],
+        description: 'LINE account'
+    },
+    linear: {
+        displayName: 'Linear',
+        icon: 'linear',
+        defaultScopes: ['read', 'email'],
+        description: 'Linear workspace'
+    },
+    linkedin: {
+        displayName: 'LinkedIn',
+        icon: 'linkedin',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'LinkedIn account'
+    },
+    microsoft: {
+        displayName: 'Microsoft',
+        icon: 'microsoft',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Microsoft account'
+    },
+    naver: {
+        displayName: 'Naver',
+        icon: 'naver',
+        defaultScopes: ['name', 'email', 'profile'],
+        description: 'Naver account'
+    },
+    notion: {
+        displayName: 'Notion',
+        icon: 'notion',
+        defaultScopes: ['user', 'email'],
+        description: 'Notion workspace'
+    },
+    paybin: {
+        displayName: 'Paybin',
+        icon: 'paybin',
+        defaultScopes: ['account.read'],
+        description: 'Paybin account'
+    },
+    paypal: {
+        displayName: 'PayPal',
+        icon: 'paypal',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'PayPal account'
+    },
+    polar: {
+        displayName: 'Polar',
+        icon: 'polar',
+        defaultScopes: ['openid', 'email'],
+        description: 'Polar account'
+    },
+    railway: {
+        displayName: 'Railway',
+        icon: 'railway',
+        defaultScopes: ['read'],
+        description: 'Railway account'
+    },
+    reddit: {
+        displayName: 'Reddit',
+        icon: 'reddit',
+        defaultScopes: ['identity'],
+        description: 'Reddit account'
+    },
+    roblox: {
+        displayName: 'Roblox',
+        icon: 'roblox',
+        defaultScopes: ['openid', 'email'],
+        description: 'Roblox account'
+    },
+    salesforce: {
+        displayName: 'Salesforce',
+        icon: 'salesforce',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Salesforce account'
+    },
+    slack: {
+        displayName: 'Slack',
+        icon: 'slack',
+        defaultScopes: ['openid', 'email', 'profile'],
+        description: 'Slack workspace'
+    },
+    spotify: {
+        displayName: 'Spotify',
+        icon: 'spotify',
+        defaultScopes: ['user-read-email', 'user-read-private'],
+        description: 'Spotify account'
+    },
+    tiktok: {
+        displayName: 'TikTok',
+        icon: 'tiktok',
+        defaultScopes: ['user.info.basic'],
+        description: 'TikTok account'
+    },
+    twitch: {
+        displayName: 'Twitch',
+        icon: 'twitch',
+        defaultScopes: ['user:read:email'],
+        description: 'Twitch account'
+    },
+    twitter: {
+        displayName: 'X (Twitter)',
+        icon: 'twitter',
+        defaultScopes: ['tweet.read', 'users.read', 'email'],
+        description: 'X (Twitter) account'
+    },
+    vercel: {
+        displayName: 'Vercel',
+        icon: 'vercel',
+        defaultScopes: ['profile', 'email'],
+        description: 'Vercel account'
+    },
+    vk: {
+        displayName: 'VK',
+        icon: 'vk',
+        defaultScopes: ['email'],
+        description: 'VK account'
+    },
+    wechat: {
+        displayName: 'WeChat',
+        icon: 'wechat',
+        defaultScopes: ['snsapi_userinfo'],
+        description: 'WeChat account'
+    },
+    zoom: {
+        displayName: 'Zoom',
+        icon: 'zoom',
+        defaultScopes: ['user:read:email', 'user:read'],
+        description: 'Zoom account'
+    }
+};
+const KNOWN_PROVIDER_LOOKUP = new Map(Object.entries(KNOWN_PROVIDERS));
+/**
+ * Get metadata for a known provider.
+ * Falls back to sensible defaults if not found.
+ */
+export function getProviderMetadata(providerId) {
+    return (KNOWN_PROVIDER_LOOKUP.get(providerId) ?? {
+        displayName: capitalize(providerId),
+        icon: providerId,
+        description: `${capitalize(providerId)} account`
+    });
+}
+function capitalize(str) {
+    return str.charAt(0).toUpperCase() + str.slice(1);
+}
+//# sourceMappingURL=known-providers.js.map

package/dist/providers/builtin/known-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-providers.js","sourceRoot":"","sources":["../../../src/providers/builtin/known-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAChC,WAAW,EAAE,oBAAoB;KACjC;IACD,SAAS,EAAE;QACV,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;QAC1C,WAAW,EAAE,mBAAmB;KAChC;IACD,OAAO,EAAE;QACR,WAAW,EAAE,aAAa;QAC1B,IAAI,EAAE,KAAK;QACX,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,0BAA0B;KACvC;IACD,OAAO,EAAE;QACR,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;QACpC,WAAW,EAAE,iBAAiB;KAC9B;IACD,OAAO,EAAE;QACR,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC,mBAAmB,CAAC;QACpC,WAAW,EAAE,iBAAiB;KAC9B;IACD,QAAQ,EAAE;QACT,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,UAAU;QAChB,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAC1C,WAAW,EAAE,kBAAkB;KAC/B;IACD,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,YAAY,CAAC;QAC7B,WAAW,EAAE,eAAe;KAC5B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QAC1C,WAAW,EAAE,gBAAgB;KAC7B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,WAAW,CAAC;QAC5B,WAAW,EAAE,gBAAgB;KAC7B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,gBAAgB;KAC7B;IACD,WAAW,EAAE;QACZ,WAAW,EAAE,cAAc;QAC3B,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,sBAAsB;KACnC;IACD,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;QACpD,WAAW,EAAE,eAAe;KAC5B;IACD,IAAI,EAAE;QACL,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,CAAC,WAAW,CAAC;QAC5B,WAAW,EAAE,cAAc;KAC3B;IACD,IAAI,EAAE;QACL,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC7C,WAAW,EAAE,cAAc;KAC3B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB;KAC/B;IACD,QAAQ,EAAE;QACT,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,UAAU;QAChB,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,kBAAkB;KAC/B;IACD,SAAS,EAAE;QACV,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,mBAAmB;KAChC;IACD,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QAC3C,WAAW,EAAE,eAAe;KAC5B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB;KAC/B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,cAAc,CAAC;QAC/B,WAAW,EAAE,gBAAgB;KAC7B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,gBAAgB;KAC7B;IACD,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClC,WAAW,EAAE,eAAe;KAC5B;IACD,OAAO,EAAE;QACR,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC,MAAM,CAAC;QACvB,WAAW,EAAE,iBAAiB;KAC9B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,UAAU,CAAC;QAC3B,WAAW,EAAE,gBAAgB;KAC7B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClC,WAAW,EAAE,gBAAgB;KAC7B;IACD,UAAU,EAAE;QACX,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,YAAY;QAClB,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,oBAAoB;KACjC;IACD,KAAK,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7C,WAAW,EAAE,iBAAiB;KAC9B;IACD,OAAO,EAAE;QACR,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QACvD,WAAW,EAAE,iBAAiB;KAC9B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,iBAAiB,CAAC;QAClC,WAAW,EAAE,gBAAgB;KAC7B;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,iBAAiB,CAAC;QAClC,WAAW,EAAE,gBAAgB;KAC7B;IACD,OAAO,EAAE;QACR,WAAW,EAAE,aAAa;QAC1B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC;QACpD,WAAW,EAAE,qBAAqB;KAClC;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;QACnC,WAAW,EAAE,gBAAgB;KAC7B;IACD,EAAE,EAAE;QACH,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,YAAY;KACzB;IACD,MAAM,EAAE;QACP,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,CAAC,iBAAiB,CAAC;QAClC,WAAW,EAAE,gBAAgB;KAC7B;IACD,IAAI,EAAE;QACL,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC;QAC/C,WAAW,EAAE,cAAc;KAC3B;CAC+C,CAAC;AAElD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAgC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAEtG;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACrD,OAAO,CACN,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI;QACxC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC;QACnC,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU;KAChD,CACD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/qrcode-wrapper.d.ts

@@ -0,0 +1,3 @@
+import QRCode from 'qrcode';
+export default QRCode;
+//# sourceMappingURL=qrcode-wrapper.d.ts.map

package/dist/qrcode-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode-wrapper.d.ts","sourceRoot":"","sources":["../src/qrcode-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,eAAe,MAAM,CAAC"}

package/dist/qrcode-wrapper.js

@@ -0,0 +1,3 @@
+import QRCode from 'qrcode';
+export default QRCode;
+//# sourceMappingURL=qrcode-wrapper.js.map

package/dist/qrcode-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrcode-wrapper.js","sourceRoot":"","sources":["../src/qrcode-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,eAAe,MAAM,CAAC"}

package/dist/resolvers/auth-provider.resolver.descriptor.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Auth Provider Resolver Descriptor
+ *
+ * Registers a runtime/resolver that lazily fetches auth/provider descriptors
+ * by merging:
+ * 1. Builtin providers supplied by the host auth implementation
+ * 2. Config overrides from auth.providers config manifest
+ * 3. Custom providers from auth.custom-providers storage manifest
+ *
+ * The resolver targets the 'auth/provider' kind, so consumers can query:
+ *   const providers = await runtime.query('auth/provider').resolve();
+ */
+export declare const authProviderResolverDescriptor: {
+    id: string;
+    kind: "runtime/resolver";
+    targetKind: string;
+    manifestKind: "storage/manifest" | "config/manifest";
+    manifestId: string;
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    config?: unknown;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+};
+export default authProviderResolverDescriptor;
+//# sourceMappingURL=auth-provider.resolver.descriptor.d.ts.map

package/dist/resolvers/auth-provider.resolver.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.resolver.descriptor.d.ts","sourceRoot":"","sources":["../../src/resolvers/auth-provider.resolver.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;CAUzC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/resolvers/auth-provider.resolver.descriptor.js

@@ -0,0 +1,26 @@
+/**
+ * Auth Provider Resolver Descriptor
+ *
+ * Registers a runtime/resolver that lazily fetches auth/provider descriptors
+ * by merging:
+ * 1. Builtin providers supplied by the host auth implementation
+ * 2. Config overrides from auth.providers config manifest
+ * 3. Custom providers from auth.custom-providers storage manifest
+ *
+ * The resolver targets the 'auth/provider' kind, so consumers can query:
+ *   const providers = await runtime.query('auth/provider').resolve();
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory/asset';
+export const authProviderResolverDescriptor = createRuntimeAsset({
+    id: 'resolver.auth-provider',
+    kind: 'runtime/resolver',
+    name: 'Auth Provider Resolver',
+    description: 'Lazily resolves auth/provider descriptors by merging builtin, overrides, and custom providers',
+    targetKind: 'auth/provider',
+    manifestKind: 'config/manifest',
+    manifestId: 'auth.providers',
+    enabled: true,
+    tags: ['auth', 'resolver', 'providers']
+});
+export default authProviderResolverDescriptor;
+//# sourceMappingURL=auth-provider.resolver.descriptor.js.map

package/dist/resolvers/auth-provider.resolver.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.resolver.descriptor.js","sourceRoot":"","sources":["../../src/resolvers/auth-provider.resolver.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAAkB,CAA4B;IAC3F,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,+FAA+F;IAC5G,UAAU,EAAE,eAAe;IAC3B,YAAY,EAAE,iBAAiB;IAC/B,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC;CACvC,CAAC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/resolvers/auth-provider.resolver.impl.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Auth Provider Resolver Implementation
+ *
+ * Resolves auth/provider descriptors by merging:
+ * 1. Builtin providers supplied by the host auth implementation
+ * 2. Config overrides from auth.providers config manifest
+ * 3. Custom providers from auth.custom-providers storage manifest
+ *
+ * This resolver lives in auth but imports the extraction helper
+ * which is passed by the app layer via context.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import { type AuthProviderDescriptor } from '../schemas/auth-provider.ts';
+/**
+ * Merge all provider sources into unified list
+ */
+type ProviderResolverContext = {
+    builtinProviders?: AuthProviderDescriptor[];
+};
+/**
+ * Auth provider resolver implementation
+ */
+export declare const authProviderResolverImpl: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<{
+    /**
+     * Resolve all auth providers
+     */
+    resolve(_descriptor: RuntimeDescriptor, context: ProviderResolverContext, runtime: VibesRuntime): Promise<{
+        id: string;
+        type: "oauth" | "oidc" | "saml";
+        enabled: boolean;
+        displayName: string;
+        icon: string;
+        sourceType: "custom" | "builtin";
+        description?: string | undefined;
+        defaultScopes?: string[] | undefined;
+        callbackPath?: string | undefined;
+        config?: {
+            clientId?: string | undefined;
+            scopes?: string[] | undefined;
+            issuer?: string | undefined;
+            authorizationEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+            jwksUri?: string | undefined;
+            metadataUrl?: string | undefined;
+        } | undefined;
+        tags?: string[] | undefined;
+        hardware?: ("consumer" | "cloud")[] | undefined;
+        surfaces?: string[] | undefined;
+    }[]>;
+    /**
+     * Resolve a single provider by ID
+     */
+    resolveOne(_descriptor: RuntimeDescriptor, context: ProviderResolverContext, runtime: VibesRuntime, providerId: string): Promise<{
+        id: string;
+        type: "oauth" | "oidc" | "saml";
+        enabled: boolean;
+        displayName: string;
+        icon: string;
+        sourceType: "custom" | "builtin";
+        description?: string | undefined;
+        defaultScopes?: string[] | undefined;
+        callbackPath?: string | undefined;
+        config?: {
+            clientId?: string | undefined;
+            scopes?: string[] | undefined;
+            issuer?: string | undefined;
+            authorizationEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+            jwksUri?: string | undefined;
+            metadataUrl?: string | undefined;
+        } | undefined;
+        tags?: string[] | undefined;
+        hardware?: ("consumer" | "cloud")[] | undefined;
+        surfaces?: string[] | undefined;
+    } | null>;
+    /**
+     * Get enabled providers only
+     */
+    resolveEnabled(_descriptor: RuntimeDescriptor, context: ProviderResolverContext, runtime: VibesRuntime): Promise<{
+        id: string;
+        type: "oauth" | "oidc" | "saml";
+        enabled: boolean;
+        displayName: string;
+        icon: string;
+        sourceType: "custom" | "builtin";
+        description?: string | undefined;
+        defaultScopes?: string[] | undefined;
+        callbackPath?: string | undefined;
+        config?: {
+            clientId?: string | undefined;
+            scopes?: string[] | undefined;
+            issuer?: string | undefined;
+            authorizationEndpoint?: string | undefined;
+            tokenEndpoint?: string | undefined;
+            userInfoEndpoint?: string | undefined;
+            jwksUri?: string | undefined;
+            metadataUrl?: string | undefined;
+        } | undefined;
+        tags?: string[] | undefined;
+        hardware?: ("consumer" | "cloud")[] | undefined;
+        surfaces?: string[] | undefined;
+    }[]>;
+}>;
+export default authProviderResolverImpl;
+//# sourceMappingURL=auth-provider.resolver.impl.d.ts.map

package/dist/resolvers/auth-provider.resolver.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.resolver.impl.d.ts","sourceRoot":"","sources":["../../src/resolvers/auth-provider.resolver.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAGN,KAAK,sBAAsB,EAE3B,MAAM,6BAA6B,CAAC;AAwBrC;;GAEG;AACH,KAAK,uBAAuB,GAAG;IAC9B,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;CAC5C,CAAC;AAkEF;;GAEG;AACH,eAAO,MAAM,wBAAwB;IAInC;;OAEG;yBACwB,iBAAiB,WAAW,uBAAuB,WAAW,YAAY;;;;;;;;;;;;;;;;;;;;;;;;IAIrG;;OAEG;4BAEW,iBAAiB,WACrB,uBAAuB,WACvB,YAAY,cACT,MAAM;;;;;;;;;;;;;;;;;;;;;;;;IAMnB;;OAEG;gCAEW,iBAAiB,WACrB,uBAAuB,WACvB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,eAAe,wBAAwB,CAAC"}

package/dist/resolvers/auth-provider.resolver.impl.js

@@ -0,0 +1,123 @@
+/**
+ * Auth Provider Resolver Implementation
+ *
+ * Resolves auth/provider descriptors by merging:
+ * 1. Builtin providers supplied by the host auth implementation
+ * 2. Config overrides from auth.providers config manifest
+ * 3. Custom providers from auth.custom-providers storage manifest
+ *
+ * This resolver lives in auth but imports the extraction helper
+ * which is passed by the app layer via context.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeImplementation } from '@vibesdotdev/kernel/factory/implementation';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { AuthProviderDescriptorSchema, AuthProvidersConfigSchema } from "../schemas/auth-provider.js";
+import { attempt, isAbsentFailure, rethrowFailure } from "../features/utils/attempt.js";
+/**
+ * Merge builtin providers with config overrides
+ */
+function applyOverrides(builtin, overrides) {
+    return builtin.map((provider) => {
+        const override = overrides[provider.id];
+        if (!override)
+            return provider;
+        return {
+            ...provider,
+            displayName: override.displayName ?? provider.displayName,
+            icon: override.icon ?? provider.icon,
+            description: override.description ?? provider.description,
+            defaultScopes: override.defaultScopes ?? provider.defaultScopes
+        };
+    });
+}
+/** A source that is configured but reads back a shape this resolver does not accept: a defect, never "no overrides". */
+function invalidSource(reason, cause) {
+    return new CapabilityError('An auth provider source is not valid.', 'INVALID_INPUT', {
+        reason,
+        retryable: false,
+        cause
+    });
+}
+async function mergeAllProviders(runtime, context) {
+    const log = getLogger('auth.provider.resolver', runtime);
+    // 1. Builtin providers come from the context (passed from the app layer)
+    const builtin = context.builtinProviders ?? [];
+    log.debug(`Got ${builtin.length} builtin providers from context`);
+    // 2. Config overrides: no `auth.providers` manifest registered means no overrides; any other failure is real.
+    let overrides = {};
+    const manifest = await attempt(() => runtime
+        .query('config/manifest')
+        .withId('auth.providers')
+        .resolve());
+    if (manifest.ok) {
+        const config = AuthProvidersConfigSchema.safeParse((await manifest.value.load()) ?? {});
+        if (!config.success)
+            throw invalidSource('auth-providers-config-invalid', config.error);
+        overrides = config.data.overrides ?? {};
+        log.debug(`Loaded overrides for ${Object.keys(overrides).length} providers`);
+    }
+    else if (isAbsentFailure(manifest.failure)) {
+        log.debug('No config overrides found');
+    }
+    else {
+        rethrowFailure(manifest.failure);
+    }
+    // 3. Custom providers: no `auth/provider-custom` kind or provider means none; any other failure is real.
+    let custom = [];
+    const customSource = await attempt(() => runtime.query('auth/provider-custom').resolve());
+    if (customSource.ok) {
+        const list = z.array(AuthProviderDescriptorSchema).safeParse(customSource.value);
+        if (!list.success)
+            throw invalidSource('auth-custom-providers-invalid', list.error);
+        custom = list.data;
+        log.debug(`Loaded ${custom.length} custom providers`);
+    }
+    else if (isAbsentFailure(customSource.failure)) {
+        log.debug('No custom providers found');
+    }
+    else {
+        rethrowFailure(customSource.failure);
+    }
+    // 4. Merge: builtin + overrides + custom
+    const withOverrides = applyOverrides(builtin, overrides);
+    const all = [...withOverrides, ...custom];
+    log.info(`Resolved ${all.length} auth providers`, {
+        builtin: builtin.length,
+        withOverrides: withOverrides.length,
+        custom: custom.length
+    });
+    return all;
+}
+/**
+ * Auth provider resolver implementation
+ */
+export const authProviderResolverImpl = createRuntimeImplementation({
+    id: 'resolver.auth-provider',
+    kind: 'runtime/resolver',
+    implementation: {
+        /**
+         * Resolve all auth providers
+         */
+        async resolve(_descriptor, context, runtime) {
+            return mergeAllProviders(runtime, context);
+        },
+        /**
+         * Resolve a single provider by ID
+         */
+        async resolveOne(_descriptor, context, runtime, providerId) {
+            const all = await mergeAllProviders(runtime, context);
+            return all.find((p) => p.id === providerId) ?? null;
+        },
+        /**
+         * Get enabled providers only
+         */
+        async resolveEnabled(_descriptor, context, runtime) {
+            const all = await mergeAllProviders(runtime, context);
+            return all.filter((p) => p.enabled !== false);
+        }
+    }
+});
+export default authProviderResolverImpl;
+//# sourceMappingURL=auth-provider.resolver.impl.js.map

package/dist/resolvers/auth-provider.resolver.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.resolver.impl.js","sourceRoot":"","sources":["../../src/resolvers/auth-provider.resolver.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACN,4BAA4B,EAC5B,yBAAyB,EAGzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAExF;;GAEG;AACH,SAAS,cAAc,CACtB,OAAiC,EACjC,SAA+C;IAE/C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE/B,OAAO;YACN,GAAG,QAAQ;YACX,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACzD,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;YACpC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACzD,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;SAC/D,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AASD,wHAAwH;AACxH,SAAS,aAAa,CAAC,MAAc,EAAE,KAAiB;IACvD,OAAO,IAAI,eAAe,CAAC,uCAAuC,EAAE,eAAe,EAAE;QACpF,MAAM;QACN,SAAS,EAAE,KAAK;QAChB,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,OAAqB,EACrB,OAAgC;IAEhC,MAAM,GAAG,GAAG,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACzD,yEAAyE;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC/C,GAAG,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,MAAM,iCAAiC,CAAC,CAAC;IAElE,8GAA8G;IAC9G,IAAI,SAAS,GAAyC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CACnC,OAAO;SACL,KAAK,CAAuG,iBAAiB,CAAC;SAC9H,MAAM,CAAC,gBAAgB,CAAC;SACxB,OAAO,EAAE,CACX,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,aAAa,CAAC,+BAA+B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxF,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACP,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,yGAAyG;IACzG,IAAI,MAAM,GAA6B,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAA6B,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtH,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,aAAa,CAAC,+BAA+B,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACpF,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,UAAU,MAAM,CAAC,MAAM,mBAAmB,CAAC,CAAC;IACvD,CAAC;SAAM,IAAI,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACP,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,yCAAyC;IACzC,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC,CAAC;IAE1C,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,MAAM,iBAAiB,EAAE;QACjD,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,aAAa,EAAE,aAAa,CAAC,MAAM;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;IACnE,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,cAAc,EAAE;QACf;;WAEG;QACH,KAAK,CAAC,OAAO,CAAC,WAA8B,EAAE,OAAgC,EAAE,OAAqB;YACpG,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,UAAU,CACf,WAA8B,EAC9B,OAAgC,EAChC,OAAqB,EACrB,UAAkB;YAElB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;QACrD,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,cAAc,CACnB,WAA8B,EAC9B,OAAgC,EAChC,OAAqB;YAErB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;QAC/C,CAAC;KACD;CACD,CAAC,CAAC;AAEH,eAAe,wBAAwB,CAAC"}

package/dist/runtime/auth.browser.plugin.d.ts

@@ -0,0 +1,3 @@
+declare const defaultExport: import("@vibesdotdev/kernel").RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=auth.browser.plugin.d.ts.map

package/dist/runtime/auth.browser.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.browser.plugin.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.browser.plugin.ts"],"names":[],"mappings":"AAcA,QAAA,MAAM,aAAa,6CAOjB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/runtime/auth.browser.plugin.js

@@ -0,0 +1,19 @@
+/**
+ * Browser-safe auth composition.
+ *
+ * This root intentionally registers only the shared auth/device-session kind
+ * and descriptor. The trusted consumer worker owns the implementation and
+ * remote exposure; a renderer receives that body only through the runtime
+ * projection policy.
+ */
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { authDeviceSessionCapabilityDescriptor, authDeviceSessionCapabilityKind } from "../device-session/auth-device-session.capability.js";
+const defaultExport = createRuntimePlugin({
+    id: 'auth',
+    name: 'Authentication (Browser)',
+    description: 'Browser-safe auth/device-session contract registration with no credential-bearing implementation',
+    kinds: [authDeviceSessionCapabilityKind],
+    descriptors: [authDeviceSessionCapabilityDescriptor]
+});
+export default defaultExport;
+//# sourceMappingURL=auth.browser.plugin.js.map

package/dist/runtime/auth.browser.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.browser.plugin.js","sourceRoot":"","sources":["../../src/runtime/auth.browser.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACN,qCAAqC,EACrC,+BAA+B,EAC/B,MAAM,qDAAqD,CAAC;AAE7D,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,0BAA0B;IAChC,WAAW,EACV,kGAAkG;IACnG,KAAK,EAAE,CAAC,+BAA+B,CAAC;IACxC,WAAW,EAAE,CAAC,qCAAqC,CAAC;CACpD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/runtime/auth.config.descriptor.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Auth Config Manifest Descriptor
+ *
+ * Declares the authentication credentials schema for runtime resolution.
+ * The auth provider (auth/kinds/provider.default.ts) queries this manifest
+ * via runtime.query('config/manifest').withId('auth') to load credentials.
+ *
+ * Auto-discovered by the runtime.
+ */
+import type { ConfigManifestDescriptor } from '@vibesdotdev/config/schemas/config-manifest-descriptor';
+/**
+ * Schema for stored authentication credentials.
+ *
+ * The API auth provider reads `credentials.token` by default
+ * (configured via api.descriptor.ts configKey: 'credentials.token').
+ *
+ * Login stores apiKey here; the auth provider resolves it as a bearer token.
+ * User metadata (userId, email, name) is stored alongside credentials.
+ */
+declare const descriptor: ConfigManifestDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.config.descriptor.d.ts.map

package/dist/runtime/auth.config.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.config.descriptor.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.config.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAGvG;;;;;;;;GAQG;AACH,QAAA,MAAM,UAAU,EAAE,wBAmEjB,CAAC;AAEF,eAAe,UAAU,CAAC"}