@voltro/plugin-auth-social 0.87.0 → 0.88.0

package/dist/apple.js

@@ -1,6 +1,6 @@
 import { SocialConfigError as e } from "./errors.js";
 import { createPrivateKey as t, sign as n } from "node:crypto";
-//#region src/apple.ts
+// src/apple.ts
 var r = 15777e3, i = 900, a = "https://appleid.apple.com", o = (e) => (typeof e == "string" ? Buffer.from(e, "utf8") : e).toString("base64url"), s = /* @__PURE__ */ new Map(), c = (n) => {
 	let r = s.get(n);
 	if (r) return r;
@@ -60,5 +60,4 @@ var r = 15777e3, i = 900, a = "https://appleid.apple.com", o = (e) => (typeof e
 	};
 	return a.firstName === null && a.lastName === null && a.email === null ? null : a;
 }, p = (e) => e !== null && e.toLowerCase().endsWith("@privaterelay.appleid.com");
-//#endregion
 export { i as APPLE_CLIENT_SECRET_DEFAULT_TTL_S, r as APPLE_CLIENT_SECRET_MAX_TTL_S, u as _resetAppleSecretCache, d as appleClientSecret, p as isApplePrivateRelayEmail, f as parseAppleUserPayload };

package/dist/callback.js

@@ -6,7 +6,7 @@ import { fetchDiscordIdentity as u } from "./discord.js";
 import { fetchEpicIdentity as d } from "./epic.js";
 import { timingSafeStringEqual as f } from "@voltro/protocol/session";
 import { JwtVerifyError as p, verifyJwt as m } from "@voltro/protocol/jwt";
-//#region src/callback.ts
+// src/callback.ts
 var h = (e) => e === !0 || e === "true", g = (e) => typeof e == "string" && e.length > 0 ? e : null, _ = async (_) => {
 	let v = a(_.provider, _.endpoints ?? {});
 	if (!_.code) throw new e(400, "missing_code", "socialCompleteLogin: missing `code`");
@@ -125,5 +125,4 @@ var h = (e) => e === !0 || e === "true", g = (e) => typeof e == "string" && e.le
 		raw: w
 	};
 };
-//#endregion
 export { _ as socialCompleteLogin };

package/dist/discord.js

@@ -1,5 +1,5 @@
 import { SocialExchangeError as e } from "./errors.js";
-//#region src/discord.ts
+// src/discord.ts
 var t = async (t, n) => {
 	if (!t) throw new e("malformed_token_response", "discord: missing access token");
 	let r;
@@ -34,5 +34,4 @@ var t = async (t, n) => {
 		emailVerified: o !== null && a.verified === !0
 	};
 };
-//#endregion
 export { t as fetchDiscordIdentity };

package/dist/epic.js

@@ -1,5 +1,5 @@
 import { SocialExchangeError as e } from "./errors.js";
-//#region src/epic.ts
+// src/epic.ts
 var t = async (t, n) => {
 	if (!t || !n.clientId) throw new e("malformed_token_response", "epic: missing token/client binding");
 	let r;
@@ -35,5 +35,4 @@ var t = async (t, n) => {
 		emailVerified: !1
 	};
 };
-//#endregion
 export { t as fetchEpicIdentity };

package/dist/errors.js

@@ -1,4 +1,4 @@
-//#region src/errors.ts
+// src/errors.ts
 var e = class extends Error {
 	status;
 	code;
@@ -30,5 +30,4 @@ var e = class extends Error {
 		super(n, e, t), this.name = "SocialAccountLinkError";
 	}
 };
-//#endregion
 export { i as PlatformTicketError, o as SocialAccountLinkError, e as SocialAuthError, a as SocialConfigError, n as SocialExchangeError, r as SocialIdTokenError, t as SocialStateMismatchError };

package/dist/github.js

@@ -1,5 +1,5 @@
 import { SocialExchangeError as e } from "./errors.js";
-//#region src/github.ts
+// src/github.ts
 var t = (e) => ({
 	authorization: `Bearer ${e}`,
 	accept: "application/vnd.github+json",
@@ -33,5 +33,4 @@ var t = (e) => ({
 		emailVerified: c
 	};
 };
-//#endregion
 export { n as fetchGithubIdentity };

package/dist/guestHandoff.js

@@ -1,7 +1,7 @@
 import { SocialConfigError as e } from "./errors.js";
 import { isSocialProviderId as t } from "./providers.js";
 import { signAuthClaims as n, verifyAuthClaims as r } from "@voltro/plugin-auth";
-//#region src/guestHandoff.ts
+// src/guestHandoff.ts
 var i = (t, r) => {
 	let i = t.profile, a = n({
 		exp: t.exp,
@@ -57,5 +57,4 @@ var i = (t, r) => {
 		}
 	};
 };
-//#endregion
 export { s as decodeGuestUpgradeHandoff, i as encodeGuestUpgradeHandoff, o as guestIdentityOf };

package/dist/guestUpgrade.js

@@ -2,7 +2,7 @@ import { SOCIAL_IDENTITY_TABLE as e, dataStoreSocialIdentityStore as t } from ".
 import { Effect as n } from "effect";
 import { and as r, eq as i } from "@voltro/database";
 import { GuestAuthError as a, dataStoreGuestAuth as o, dataStoreSessionRegistry as s, issueUserSession as c, runSubjectGuards as l } from "@voltro/plugin-auth";
-//#region src/guestUpgrade.ts
+// src/guestUpgrade.ts
 var u = (e, t, n) => ({
 	table: e,
 	predicate: i(t, n),
@@ -93,5 +93,4 @@ var u = (e, t, n) => ({
 		message: e.code === "upgrade_conflict" ? "The provider or email belongs to an existing account. Confirm both accounts before merging." : e.code === "credential_rejected" ? "Guest upgrade was refused." : "Guest upgrade storage is unavailable."
 	})));
 };
-//#endregion
 export { d as completeGuestSocialUpgrade };

package/dist/identityStore.js

@@ -1,6 +1,6 @@
 import { Data as e, Effect as t } from "effect";
 import { and as n, boolean as r, classifyConstraintViolation as i, eq as a, extractDbCause as o, generateId as s, id as c, table as l, text as u, timestamp as d } from "@voltro/database";
-//#region src/identityStore.ts
+// src/identityStore.ts
 var f = "_voltro_oauth_identities", p = l(f, {
 	id: c({ prefix: "oauthid" }),
 	userId: u(),
@@ -120,5 +120,4 @@ var f = "_voltro_oauth_identities", p = l(f, {
 		userId: n
 	});
 });
-//#endregion
 export { f as SOCIAL_IDENTITY_TABLE, h as SocialIdentityConflict, x as dataStoreSocialIdentityStore, S as linkSocialIdentity, v as memorySocialIdentityStore, m as socialAuthTables, p as socialIdentitiesTable };

package/dist/linking.js

@@ -1,5 +1,5 @@
 import { SocialAccountLinkError as e } from "./errors.js";
-//#region src/linking.ts
+// src/linking.ts
 var t = (t) => {
 	let { profile: n, linkedUserId: r, existingUserIdByEmail: i, policy: a } = t;
 	return r === null ? n.email === null || i === null ? { kind: "create-user" } : a === "never" ? {
@@ -19,5 +19,4 @@ var t = (t) => {
 		userId: r
 	};
 };
-//#endregion
 export { t as decideSocialLink };

package/dist/login.js

@@ -1,7 +1,7 @@
 import { randomToken as e, s256 as t } from "./pkce.js";
 import { SocialConfigError as n } from "./errors.js";
 import { socialProvider as r } from "./providers.js";
-//#region src/login.ts
+// src/login.ts
 var i = (i) => {
 	if (!i.clientId) throw new n("socialBeginLogin: `clientId` is required");
 	if (!i.redirectUri) throw new n("socialBeginLogin: `redirectUri` is required");
@@ -28,5 +28,4 @@ var i = (i) => {
 		responseMode: a.responseMode
 	};
 };
-//#endregion
 export { i as socialBeginLogin };

package/dist/nativeGuestUpgrade.js

@@ -1,7 +1,7 @@
 import { guestIdentityOf as e } from "./guestHandoff.js";
 import { signAuthClaims as t, verifyAuthClaims as n } from "@voltro/plugin-auth";
 import { createCipheriv as r, createDecipheriv as i, createHash as a, hkdfSync as o, randomBytes as s, timingSafeEqual as c } from "node:crypto";
-//#region src/nativeGuestUpgrade.ts
+// src/nativeGuestUpgrade.ts
 var l = /^[A-Za-z0-9_-]{43}$/, u = /^[A-Za-z0-9._~-]{43,128}$/, d = /^[A-Za-z0-9._~-]{1,256}$/, f = (e, t) => {
 	if (!e || typeof e != "object" || Array.isArray(e)) return null;
 	let n = e;
@@ -62,5 +62,4 @@ var l = /^[A-Za-z0-9_-]{43}$/, u = /^[A-Za-z0-9._~-]{43,128}$/, d = /^[A-Za-z0-9
 	} catch {}
 	return null;
 };
-//#endregion
 export { p as isNativeVerifier, f as nativeUpgradeRequestOf, b as openNativeUpgradeCode, y as sealNativeUpgradeCode, g as signNativeUpgradeTicket, m as verifierMatches, _ as verifyNativeUpgradeTicket };

package/dist/pkce.js

@@ -1,5 +1,4 @@
 import { createHash as e, randomBytes as t } from "node:crypto";
-//#region src/pkce.ts
+// src/pkce.ts
 var n = () => t(32).toString("base64url"), r = (t) => e("sha256").update(t, "ascii").digest().toString("base64url");
-//#endregion
 export { n as randomToken, r as s256 };

package/dist/platform.js

@@ -2,7 +2,7 @@ import { PlatformTicketError as e, SocialAuthError as t, SocialConfigError as n,
 import { isSocialProviderId as i } from "./providers.js";
 import { verifySteamWebApiTicket as a } from "./steam.js";
 import { JwtVerifyError as o, verifyJwt as s } from "@voltro/protocol/jwt";
-//#region src/platform.ts
+// src/platform.ts
 var c = /^[a-z][a-z0-9-]{1,31}$/, l = /^[\x21-\x7e]{1,255}$/, u = (e) => {
 	if (!c.test(e.id) || i(e.id)) throw new n("definePlatformLogin: id must be 2–32 lowercase letters, digits or hyphens and not a social provider id");
 	let t = e.verify;
@@ -111,5 +111,4 @@ var c = /^[a-z][a-z0-9-]{1,31}$/, l = /^[\x21-\x7e]{1,255}$/, u = (e) => {
 		throw n instanceof t ? n : new r("exchange_failed", `${e.id}: ticket verification failed`, 503);
 	}
 };
-//#endregion
 export { u as definePlatformLogin, h as eosPlatformLogin, d as steamPlatformLogin, g as verifyPlatformTicket };

package/dist/plugin.js

@@ -13,7 +13,7 @@ import { and as b, eq as x } from "@voltro/database";
 import { definePlugin as re } from "@voltro/protocol";
 import { SESSION_HEADER_NAME as S, buildSetCookie as C, readCookie as w } from "@voltro/protocol/session";
 import { CSRF_COOKIE_NAME as T, CSRF_HEADER_NAME as ie, configSessionSecrets as E, dataStoreGuestAuth as ae, dataStoreSessionRegistry as oe, issueCsrfToken as se, parseGuestCredential as D, readSessionFromHeaders as O, signAuthClaims as ce, verifyAuthClaims as k, verifyCsrf as le } from "@voltro/plugin-auth";
-//#region src/plugin.ts
+// src/plugin.ts
 var ue = "/auth/social", de = 600, fe = "voltro:oauth", A = {
 	google: [{
 		name: "VOLTRO_GOOGLE_CLIENT_ID",
@@ -737,5 +737,4 @@ var ue = "/auth/social", de = 600, fe = "voltro:oauth", A = {
 		onDeactivate: () => v.void
 	});
 };
-//#endregion
 export { P as socialAuthPlugin };

package/dist/providers.js

@@ -1,5 +1,5 @@
 import { SocialConfigError as e } from "./errors.js";
-//#region src/providers.ts
+// src/providers.ts
 var t = {
 	id: "google",
 	label: "Google",
@@ -126,5 +126,4 @@ var t = {
 		...n.apiBase === void 0 ? {} : { apiBase: n.apiBase }
 	};
 };
-//#endregion
 export { l as SOCIAL_PROVIDERS, u as SOCIAL_PROVIDER_IDS, d as isSocialProviderId, f as socialProvider };

package/dist/signIn.js

@@ -2,7 +2,7 @@ import { SocialAccountLinkError as e } from "./errors.js";
 import { decideSocialLink as t } from "./linking.js";
 import { Effect as n } from "effect";
 import { issueUserSession as r, newAuthId as i, runSubjectGuards as a } from "@voltro/plugin-auth";
-//#region src/signIn.ts
+// src/signIn.ts
 var o = (e) => ({
 	kind: "refused",
 	status: e.status,
@@ -80,5 +80,4 @@ var o = (e) => ({
 		} : null
 	};
 });
-//#endregion
 export { s as completeSocialSignIn };

package/dist/steam.js

@@ -3,7 +3,7 @@ import { PlatformTicketError as t, SocialAuthError as n, SocialConfigError as r,
 import { Effect as o } from "effect";
 import { timingSafeStringEqual as s } from "@voltro/protocol/session";
 import { createHash as c } from "node:crypto";
-//#region src/steam.ts
+// src/steam.ts
 var l = "http://specs.openid.net/auth/2.0", u = "https://steamcommunity.com/openid/", d = `${l}/identifier_select`, f = (e) => typeof e == "string" && /^[0-9]{17,20}$/.test(e) && BigInt(e) > 0n && BigInt(e) <= 18446744073709551615n, p = 65536, m = 5e3, h = async (e) => {
 	let t = e.body?.getReader();
 	if (!t) return "";
@@ -148,5 +148,4 @@ var l = "http://specs.openid.net/auth/2.0", u = "https://steamcommunity.com/open
 	if (u.publisherbanned === !0 && e.allowPublisherBanned !== !0) throw new n(403, "guard_rejected", "steam: the publisher banned this account");
 	return g(u.steamid);
 };
-//#endregion
 export { v as steamBeginOpenId, y as steamCompleteOpenId, b as verifySteamWebApiTicket };

package/dist/web/guestUpgradeClient.js

@@ -1,6 +1,6 @@
 import { isSocialProviderId as e } from "../providers.js";
 import { parseGuestCredential as t } from "@voltro/plugin-auth/guest";
-//#region src/web/guestUpgradeClient.ts
+// src/web/guestUpgradeClient.ts
 var n = class extends Error {
 	code;
 	status;
@@ -105,5 +105,4 @@ var n = class extends Error {
 		}))
 	};
 };
-//#endregion
 export { n as GuestUpgradeClientError, i as createGuestUpgradeClient };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-auth-social",
-  "version": "0.87.0",
+  "version": "0.88.0",
   "description": "First-party social login with state, S256, provider identity verification, explicit account linking and shared Auth sessions.",
   "keywords": [
     "voltro",
@@ -38,13 +38,13 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.87.0",
-    "@voltro/plugin-auth": "0.87.0",
-    "@voltro/protocol": "0.87.0",
-    "@voltro/kv": "0.87.0"
+    "@voltro/database": "0.88.0",
+    "@voltro/plugin-auth": "0.88.0",
+    "@voltro/protocol": "0.88.0",
+    "@voltro/kv": "0.88.0"
   },
   "peerDependencies": {
-    "effect": "4.0.1"
+    "effect": "4.1.0"
   },
   "publishConfig": {
     "access": "public"