own-auth 0.1.0

package/dist/permissions.js

@@ -0,0 +1,31 @@
+const rolePermissions = {
+    owner: [
+        "manage_organisation",
+        "invite_members",
+        "remove_members",
+        "change_member_roles",
+        "view_members",
+        "view_audit_events",
+        "manage_sessions",
+        "manage_api_keys",
+        "manage_basic_settings"
+    ],
+    admin: [
+        "invite_members",
+        "remove_members",
+        "change_member_roles",
+        "view_members",
+        "view_audit_events",
+        "manage_sessions",
+        "manage_api_keys",
+        "manage_basic_settings"
+    ],
+    member: ["view_members"]
+};
+export function permissionsForRole(role) {
+    return [...rolePermissions[role]];
+}
+export function roleHasPermission(role, permission) {
+    return rolePermissions[role].includes(permission);
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAaA,MAAM,eAAe,GAA2C;IAC9D,KAAK,EAAE;QACL,qBAAqB;QACrB,gBAAgB;QAChB,gBAAgB;QAChB,qBAAqB;QACrB,cAAc;QACd,mBAAmB;QACnB,iBAAiB;QACjB,iBAAiB;QACjB,uBAAuB;KACxB;IACD,KAAK,EAAE;QACL,gBAAgB;QAChB,gBAAgB;QAChB,qBAAqB;QACrB,cAAc;QACd,mBAAmB;QACnB,iBAAiB;QACjB,iBAAiB;QACjB,uBAAuB;KACxB;IACD,MAAM,EAAE,CAAC,cAAc,CAAC;CACzB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAsB,EAAE,UAAsB;IAC9E,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,35 @@
+import type { TokenType } from "./types.js";
+export interface EmailMessage {
+    to: string;
+    type: Exclude<TokenType, "phone_verification">;
+    token: string;
+    url: string;
+    expiresAt: Date;
+}
+export interface EmailProvider {
+    send(message: EmailMessage): Promise<void>;
+}
+export interface SmsMessage {
+    to: string;
+    purpose: string;
+    code: string;
+    expiresAt: Date;
+}
+export interface SmsProvider {
+    send(message: SmsMessage): Promise<void>;
+}
+export declare class MemoryEmailProvider implements EmailProvider {
+    readonly messages: EmailMessage[];
+    send(message: EmailMessage): Promise<void>;
+}
+export declare class MemorySmsProvider implements SmsProvider {
+    readonly messages: SmsMessage[];
+    send(message: SmsMessage): Promise<void>;
+}
+export declare class ConsoleEmailProvider implements EmailProvider {
+    send(message: EmailMessage): Promise<void>;
+}
+export declare class ConsoleSmsProvider implements SmsProvider {
+    send(message: SmsMessage): Promise<void>;
+}
+//# sourceMappingURL=providers.d.ts.map

package/dist/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,qBAAa,mBAAoB,YAAW,aAAa;IACvD,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAM;IAEjC,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD;AAED,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAM;IAE/B,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C;AAED,qBAAa,oBAAqB,YAAW,aAAa;IAClD,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAOjD;AAED,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAO/C"}

package/dist/providers.js

@@ -0,0 +1,31 @@
+export class MemoryEmailProvider {
+    messages = [];
+    async send(message) {
+        this.messages.push(structuredClone(message));
+    }
+}
+export class MemorySmsProvider {
+    messages = [];
+    async send(message) {
+        this.messages.push(structuredClone(message));
+    }
+}
+export class ConsoleEmailProvider {
+    async send(message) {
+        console.info("[own-auth email]", {
+            to: message.to,
+            type: message.type,
+            expiresAt: message.expiresAt.toISOString()
+        });
+    }
+}
+export class ConsoleSmsProvider {
+    async send(message) {
+        console.info("[own-auth sms]", {
+            to: message.to,
+            purpose: message.purpose,
+            expiresAt: message.expiresAt.toISOString()
+        });
+    }
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAyBA,MAAM,OAAO,mBAAmB;IACrB,QAAQ,GAAmB,EAAE,CAAC;IAEvC,KAAK,CAAC,IAAI,CAAC,OAAqB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IACnB,QAAQ,GAAiB,EAAE,CAAC;IAErC,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAC/B,KAAK,CAAC,IAAI,CAAC,OAAqB;QAC9B,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC/B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC7B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,20 @@
+export interface RateLimitResult {
+    count: number;
+    resetAt: Date;
+    allowed: boolean;
+}
+export interface RateLimitStore {
+    hit(key: string, windowMs: number, limit: number): Promise<RateLimitResult>;
+    reset(key: string): Promise<void>;
+}
+export declare class InMemoryRateLimitStore implements RateLimitStore {
+    private readonly buckets;
+    hit(key: string, windowMs: number, limit: number): Promise<RateLimitResult>;
+    reset(key: string): Promise<void>;
+}
+export declare function enforceRateLimit(store: RateLimitStore, options: {
+    key: string;
+    limit: number;
+    windowMs: number;
+}): Promise<void>;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAOD,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAE/C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAuB3E,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/rate-limit.js

@@ -0,0 +1,33 @@
+import { AuthError } from "./errors.js";
+export class InMemoryRateLimitStore {
+    buckets = new Map();
+    async hit(key, windowMs, limit) {
+        const now = Date.now();
+        const existing = this.buckets.get(key);
+        if (!existing || existing.resetAt.getTime() <= now) {
+            const bucket = {
+                count: 1,
+                resetAt: new Date(now + windowMs)
+            };
+            this.buckets.set(key, bucket);
+            return { ...bucket, allowed: true };
+        }
+        existing.count += 1;
+        this.buckets.set(key, existing);
+        return {
+            count: existing.count,
+            resetAt: existing.resetAt,
+            allowed: existing.count <= limit
+        };
+    }
+    async reset(key) {
+        this.buckets.delete(key);
+    }
+}
+export async function enforceRateLimit(store, options) {
+    const result = await store.hit(options.key, options.windowMs, options.limit);
+    if (!result.allowed) {
+        throw new AuthError("rate_limited", "Too many attempts. Try again later.", 429);
+    }
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAkBxC,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAa;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;aAClC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEhC,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,KAAK,IAAI,KAAK;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAqB,EACrB,OAIC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,qCAAqC,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;AACH,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,43 @@
+import type { Account, ApiKey, AuditEvent, AuthToken, Invitation, Organisation, OrganisationMember, Session, SmsOtp, TokenType, User } from "./types.js";
+export interface AuthStorage {
+    createUser(user: User): Promise<User>;
+    updateUser(id: string, patch: Partial<User>): Promise<User | null>;
+    getUserById(id: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    getUserByPhone(phone: string): Promise<User | null>;
+    createAccount(account: Account): Promise<Account>;
+    getAccountByProvider(provider: string, providerAccountId: string): Promise<Account | null>;
+    createSession(session: Session): Promise<Session>;
+    getSessionByTokenHash(tokenHash: string): Promise<Session | null>;
+    updateSession(id: string, patch: Partial<Session>): Promise<Session | null>;
+    listSessionsByUserId(userId: string): Promise<Session[]>;
+    createToken(token: AuthToken): Promise<AuthToken>;
+    getTokenByHash(tokenHash: string, type?: TokenType): Promise<AuthToken | null>;
+    updateToken(id: string, patch: Partial<AuthToken>): Promise<AuthToken | null>;
+    createSmsOtp(otp: SmsOtp): Promise<SmsOtp>;
+    getLatestSmsOtp(phone: string, purpose: string): Promise<SmsOtp | null>;
+    updateSmsOtp(id: string, patch: Partial<SmsOtp>): Promise<SmsOtp | null>;
+    createApiKey(apiKey: ApiKey): Promise<ApiKey>;
+    getApiKeyByPrefix(keyPrefix: string): Promise<ApiKey | null>;
+    updateApiKey(id: string, patch: Partial<ApiKey>): Promise<ApiKey | null>;
+    createOrganisation(organisation: Organisation): Promise<Organisation>;
+    updateOrganisation(id: string, patch: Partial<Organisation>): Promise<Organisation | null>;
+    getOrganisationById(id: string): Promise<Organisation | null>;
+    getOrganisationBySlug(slug: string): Promise<Organisation | null>;
+    createOrganisationMember(member: OrganisationMember): Promise<OrganisationMember>;
+    updateOrganisationMember(id: string, patch: Partial<OrganisationMember>): Promise<OrganisationMember | null>;
+    getOrganisationMember(organisationId: string, userId: string): Promise<OrganisationMember | null>;
+    getOrganisationMemberById(id: string): Promise<OrganisationMember | null>;
+    listOrganisationMembers(organisationId: string): Promise<OrganisationMember[]>;
+    createInvitation(invitation: Invitation): Promise<Invitation>;
+    updateInvitation(id: string, patch: Partial<Invitation>): Promise<Invitation | null>;
+    getInvitationById(id: string): Promise<Invitation | null>;
+    getPendingInvitationByOrganisationAndEmail(organisationId: string, email: string): Promise<Invitation | null>;
+    createAuditEvent(event: AuditEvent): Promise<AuditEvent>;
+    listAuditEvents(filter?: {
+        userId?: string;
+        organisationId?: string;
+        apiKeyId?: string;
+    }): Promise<AuditEvent[]>;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,MAAM,EACN,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,SAAS,EACT,IAAI,EACL,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC9C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAEpD,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE3F,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5E,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAEzD,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC/E,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE9E,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEzE,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEzE,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3F,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC9D,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAElE,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClF,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC,qBAAqB,CACnB,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC1E,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE/E,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACrF,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1D,0CAA0C,CACxC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE9B,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,eAAe,CAAC,MAAM,CAAC,EAAE;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CAC3B"}

package/dist/storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":""}

package/dist/types.d.ts

@@ -0,0 +1,148 @@
+export type JsonRecord = Record<string, unknown>;
+export type AccountProvider = "password" | "magic_link" | "phone";
+export type TokenType = "email_verification" | "password_reset" | "magic_link" | "organisation_invite" | "phone_verification";
+export type SmsOtpPurpose = "phone_login" | "phone_verification" | "account_recovery";
+export type ApiKeyStatus = "active" | "revoked";
+export type OrganisationRole = "owner" | "admin" | "member";
+export type MemberStatus = "active" | "suspended" | "removed";
+export type InvitationStatus = "pending" | "accepted" | "expired" | "revoked";
+export type AuditEventType = "user.signed_up" | "user.signed_in" | "user.signed_out" | "user.disabled" | "user.re_enabled" | "session.created" | "session.revoked" | "session.revoked_all" | "magic_link.requested" | "magic_link.used" | "email_verification.requested" | "email.verified" | "sms_otp.sent" | "sms_otp.verified" | "phone.verified" | "password_reset.requested" | "password.changed" | "api_key.created" | "api_key.revoked" | "api_key.used" | "organisation.created" | "organisation.updated" | "member.invited" | "invite.accepted" | "invite.revoked" | "member.removed" | "member.role_changed";
+export interface RequestContext {
+    ipAddress?: string;
+    userAgent?: string;
+}
+export interface User {
+    id: string;
+    email: string | null;
+    emailVerifiedAt: Date | null;
+    phone: string | null;
+    phoneVerifiedAt: Date | null;
+    passwordHash: string | null;
+    name: string | null;
+    imageUrl: string | null;
+    disabledAt: Date | null;
+    metadata: JsonRecord;
+    createdAt: Date;
+    updatedAt: Date;
+    lastLoginAt: Date | null;
+}
+export interface Account {
+    id: string;
+    userId: string;
+    provider: AccountProvider;
+    providerAccountId: string;
+    providerEmail: string | null;
+    providerPhone: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface Session {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    createdAt: Date;
+    lastActiveAt: Date;
+    expiresAt: Date;
+    idleExpiresAt: Date;
+    ipAddress: string | null;
+    userAgent: string | null;
+    revokedAt: Date | null;
+    revokeReason: string | null;
+}
+export interface AuthToken {
+    id: string;
+    tokenHash: string;
+    type: TokenType;
+    userId: string | null;
+    email: string | null;
+    phone: string | null;
+    organisationId: string | null;
+    expiresAt: Date;
+    usedAt: Date | null;
+    createdAt: Date;
+}
+export interface SmsOtp {
+    id: string;
+    phone: string;
+    userId: string | null;
+    codeHash: string;
+    purpose: SmsOtpPurpose;
+    expiresAt: Date;
+    attempts: number;
+    maxAttempts: number;
+    consumedAt: Date | null;
+    createdAt: Date;
+    lastSentAt: Date;
+}
+export interface ApiKey {
+    id: string;
+    keyPrefix: string;
+    keyHash: string;
+    name: string;
+    userId: string | null;
+    organisationId: string | null;
+    scopes: string[];
+    status: ApiKeyStatus;
+    expiresAt: Date | null;
+    lastUsedAt: Date | null;
+    createdAt: Date;
+    revokedAt: Date | null;
+    revokedBy: string | null;
+    metadata: JsonRecord;
+}
+export interface Organisation {
+    id: string;
+    name: string;
+    slug: string;
+    ownerUserId: string;
+    metadata: JsonRecord;
+    createdAt: Date;
+    updatedAt: Date;
+    disabledAt: Date | null;
+}
+export interface OrganisationMember {
+    id: string;
+    organisationId: string;
+    userId: string;
+    role: OrganisationRole;
+    status: MemberStatus;
+    joinedAt: Date | null;
+    removedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface Invitation {
+    id: string;
+    organisationId: string;
+    email: string | null;
+    phone: string | null;
+    role: OrganisationRole;
+    invitedByUserId: string;
+    status: InvitationStatus;
+    expiresAt: Date;
+    acceptedAt: Date | null;
+    revokedAt: Date | null;
+    createdAt: Date;
+}
+export interface AuditEvent {
+    id: string;
+    eventType: AuditEventType;
+    actorUserId: string | null;
+    targetUserId: string | null;
+    organisationId: string | null;
+    apiKeyId: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    metadata: JsonRecord;
+    createdAt: Date;
+}
+export interface CurrentSession {
+    session: Session;
+    user: User;
+}
+export interface VerifiedApiKey {
+    apiKey: ApiKey;
+    user: User | null;
+    organisation: Organisation | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,SAAS,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,oBAAoB,GAAG,kBAAkB,CAAC;AAEtF,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,GACrB,sBAAsB,GACtB,iBAAiB,GACjB,8BAA8B,GAC9B,gBAAgB,GAChB,cAAc,GACd,kBAAkB,GAClB,gBAAgB,GAChB,0BAA0B,GAC1B,kBAAkB,GAClB,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,sBAAsB,GACtB,sBAAsB,GACtB,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,IAAI,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,EAAE,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,gBAAgB,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,cAAc,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;CACnC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "own-auth",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Framework-independent auth engine for Own Auth.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}