supakeys 0.1.0

package/dist/index.cjs

@@ -0,0 +1,394 @@
+'use strict';
+
+var browser = require('@simplewebauthn/browser');
+
+// src/lib/passkey-auth.ts
+
+// src/lib/errors.ts
+function createError(code, message, cause) {
+  return { code, message, cause };
+}
+function mapWebAuthnError(error) {
+  if (error instanceof Error) {
+    const name = error.name;
+    const message = error.message;
+    switch (name) {
+      case "NotSupportedError":
+        return createError(
+          "NOT_SUPPORTED",
+          "WebAuthn is not supported in this browser or context.",
+          error
+        );
+      case "NotAllowedError":
+        if (message.toLowerCase().includes("timeout")) {
+          return createError("TIMEOUT", "The operation timed out. Please try again.", error);
+        }
+        return createError("CANCELLED", "The operation was cancelled.", error);
+      case "InvalidStateError":
+        return createError(
+          "INVALID_STATE",
+          "A passkey for this account already exists on this device.",
+          error
+        );
+      case "SecurityError":
+        return createError(
+          "SECURITY_ERROR",
+          "The operation was blocked due to security restrictions.",
+          error
+        );
+      case "AbortError":
+        return createError("CANCELLED", "The operation was aborted.", error);
+      case "TypeError":
+        if (message.toLowerCase().includes("fetch")) {
+          return createError(
+            "NETWORK_ERROR",
+            "Network request failed. Please check your connection.",
+            error
+          );
+        }
+        break;
+    }
+  }
+  return createError(
+    "UNKNOWN_ERROR",
+    error instanceof Error ? error.message : "An unknown error occurred.",
+    error
+  );
+}
+function getErrorMessage(code) {
+  const messages = {
+    NOT_SUPPORTED: "Passkeys are not supported on this device or browser.",
+    CANCELLED: "The operation was cancelled.",
+    TIMEOUT: "The operation timed out. Please try again.",
+    INVALID_STATE: "A passkey for this account already exists on this device.",
+    SECURITY_ERROR: "The operation was blocked due to security restrictions.",
+    CHALLENGE_EXPIRED: "Your session has expired. Please try again.",
+    CHALLENGE_MISMATCH: "Verification failed. Please try again.",
+    VERIFICATION_FAILED: "Authentication failed. Please try again.",
+    CREDENTIAL_NOT_FOUND: "Passkey not found. It may have been removed.",
+    USER_NOT_FOUND: "Account not found.",
+    CREDENTIAL_EXISTS: "This passkey is already registered.",
+    RATE_LIMITED: "Too many attempts. Please wait a moment and try again.",
+    NETWORK_ERROR: "Network error. Please check your connection.",
+    UNKNOWN_ERROR: "An unexpected error occurred. Please try again."
+  };
+  return messages[code] || messages.UNKNOWN_ERROR;
+}
+function isPasskeyError(error) {
+  return typeof error === "object" && error !== null && "code" in error && "message" in error && typeof error.code === "string" && typeof error.message === "string";
+}
+
+// src/lib/support.ts
+function isWebAuthnSupported() {
+  return typeof window !== "undefined" && typeof window.PublicKeyCredential !== "undefined" && typeof window.navigator !== "undefined" && typeof window.navigator.credentials !== "undefined";
+}
+async function isPlatformAuthenticatorAvailable() {
+  if (!isWebAuthnSupported()) {
+    return false;
+  }
+  try {
+    return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();
+  } catch {
+    return false;
+  }
+}
+async function isConditionalUISupported() {
+  if (!isWebAuthnSupported()) {
+    return false;
+  }
+  try {
+    const pubKeyCred = PublicKeyCredential;
+    if (typeof pubKeyCred.isConditionalMediationAvailable === "function") {
+      return await pubKeyCred.isConditionalMediationAvailable();
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+async function getPasskeySupport() {
+  const webauthn = isWebAuthnSupported();
+  if (!webauthn) {
+    return {
+      webauthn: false,
+      platformAuthenticator: false,
+      conditionalUI: false
+    };
+  }
+  const [platformAuthenticator, conditionalUI] = await Promise.all([
+    isPlatformAuthenticatorAvailable(),
+    isConditionalUISupported()
+  ]);
+  return {
+    webauthn,
+    platformAuthenticator,
+    conditionalUI
+  };
+}
+function isSecureContext() {
+  if (typeof window === "undefined") {
+    return false;
+  }
+  return window.isSecureContext === true;
+}
+function getUnsupportedReason() {
+  if (typeof window === "undefined") {
+    return "Passkeys are only available in browser environments.";
+  }
+  if (!isSecureContext()) {
+    return "Passkeys require a secure connection (HTTPS).";
+  }
+  if (!isWebAuthnSupported()) {
+    return "Your browser does not support passkeys. Please update to a modern browser.";
+  }
+  return null;
+}
+
+// src/lib/passkey-auth.ts
+var DEFAULT_CONFIG = {
+  functionName: "passkey-auth",
+  rpId: typeof window !== "undefined" ? window.location.hostname : "localhost",
+  rpName: "My App",
+  timeout: 6e4
+};
+var PasskeyAuth = class {
+  supabase;
+  config;
+  constructor(supabase, config = {}) {
+    this.supabase = supabase;
+    this.config = { ...DEFAULT_CONFIG, ...config };
+  }
+  async isSupported() {
+    return getPasskeySupport();
+  }
+  async register(options) {
+    const unsupportedReason = getUnsupportedReason();
+    if (unsupportedReason) {
+      return { success: false, error: createError("NOT_SUPPORTED", unsupportedReason) };
+    }
+    try {
+      const startResponse = await this.callEdgeFunction(
+        "/register/start",
+        {
+          email: options.email,
+          displayName: options.displayName || options.email,
+          authenticatorName: options.authenticatorName
+        }
+      );
+      if (!startResponse.success || !startResponse.data) {
+        return {
+          success: false,
+          error: startResponse.error ? createError(startResponse.error.code, startResponse.error.message) : createError("UNKNOWN_ERROR", "Failed to start registration")
+        };
+      }
+      let registrationResponse;
+      try {
+        registrationResponse = await browser.startRegistration({
+          optionsJSON: startResponse.data.options
+        });
+      } catch (error) {
+        return { success: false, error: mapWebAuthnError(error) };
+      }
+      const finishResponse = await this.callEdgeFunction(
+        "/register/finish",
+        {
+          challengeId: startResponse.data.challengeId,
+          response: registrationResponse,
+          authenticatorName: options.authenticatorName
+        }
+      );
+      if (!finishResponse.success || !finishResponse.data?.verified) {
+        return {
+          success: false,
+          error: finishResponse.error ? createError(finishResponse.error.code, finishResponse.error.message) : createError("VERIFICATION_FAILED", "Failed to verify registration")
+        };
+      }
+      return { success: true, passkey: finishResponse.data.passkey };
+    } catch (error) {
+      if (isPasskeyError(error)) return { success: false, error };
+      return { success: false, error: mapWebAuthnError(error) };
+    }
+  }
+  async signIn(options = {}) {
+    const unsupportedReason = getUnsupportedReason();
+    if (unsupportedReason) {
+      return { success: false, error: createError("NOT_SUPPORTED", unsupportedReason) };
+    }
+    try {
+      const startResponse = await this.callEdgeFunction(
+        "/login/start",
+        { email: options.email }
+      );
+      if (!startResponse.success || !startResponse.data) {
+        return {
+          success: false,
+          error: startResponse.error ? createError(startResponse.error.code, startResponse.error.message) : createError("UNKNOWN_ERROR", "Failed to start authentication")
+        };
+      }
+      let authenticationResponse;
+      try {
+        authenticationResponse = await browser.startAuthentication({
+          optionsJSON: startResponse.data.options
+        });
+      } catch (error) {
+        return { success: false, error: mapWebAuthnError(error) };
+      }
+      const finishResponse = await this.callEdgeFunction(
+        "/login/finish",
+        {
+          challengeId: startResponse.data.challengeId,
+          response: authenticationResponse
+        }
+      );
+      if (!finishResponse.success || !finishResponse.data?.verified) {
+        return {
+          success: false,
+          error: finishResponse.error ? createError(finishResponse.error.code, finishResponse.error.message) : createError("VERIFICATION_FAILED", "Authentication failed")
+        };
+      }
+      const { tokenHash, email } = finishResponse.data;
+      if (!tokenHash || !email) {
+        return {
+          success: false,
+          error: createError("VERIFICATION_FAILED", "Missing session token")
+        };
+      }
+      const { data: sessionData, error: sessionError } = await this.supabase.auth.verifyOtp({
+        token_hash: tokenHash,
+        type: "email"
+      });
+      if (sessionError || !sessionData.session) {
+        return {
+          success: false,
+          error: createError(
+            "VERIFICATION_FAILED",
+            sessionError?.message || "Failed to create session"
+          )
+        };
+      }
+      return { success: true, session: sessionData.session };
+    } catch (error) {
+      if (isPasskeyError(error)) return { success: false, error };
+      return { success: false, error: mapWebAuthnError(error) };
+    }
+  }
+  async linkPasskey(options = {}) {
+    const unsupportedReason = getUnsupportedReason();
+    if (unsupportedReason) {
+      return { success: false, error: createError("NOT_SUPPORTED", unsupportedReason) };
+    }
+    const {
+      data: { user }
+    } = await this.supabase.auth.getUser();
+    if (!user?.email) {
+      return {
+        success: false,
+        error: createError("USER_NOT_FOUND", "You must be logged in to link a passkey")
+      };
+    }
+    return this.register({
+      email: user.email,
+      authenticatorName: options.authenticatorName
+    });
+  }
+  async listPasskeys() {
+    try {
+      const response = await this.callEdgeFunction("/passkeys/list", {});
+      if (!response.success || !response.data) {
+        return {
+          success: false,
+          error: response.error ? createError(response.error.code, response.error.message) : createError("UNKNOWN_ERROR", "Failed to list passkeys")
+        };
+      }
+      return { success: true, passkeys: response.data.passkeys };
+    } catch (error) {
+      return { success: false, error: mapWebAuthnError(error) };
+    }
+  }
+  async removePasskey(options) {
+    try {
+      const response = await this.callEdgeFunction("/passkeys/remove", {
+        credentialId: options.credentialId
+      });
+      if (!response.success) {
+        return {
+          success: false,
+          error: response.error ? createError(response.error.code, response.error.message) : createError("UNKNOWN_ERROR", "Failed to remove passkey")
+        };
+      }
+      return { success: true };
+    } catch (error) {
+      return { success: false, error: mapWebAuthnError(error) };
+    }
+  }
+  async updatePasskey(options) {
+    try {
+      const response = await this.callEdgeFunction("/passkeys/update", {
+        credentialId: options.credentialId,
+        authenticatorName: options.authenticatorName
+      });
+      if (!response.success || !response.data) {
+        return {
+          success: false,
+          error: response.error ? createError(response.error.code, response.error.message) : createError("UNKNOWN_ERROR", "Failed to update passkey")
+        };
+      }
+      return { success: true, passkey: response.data.passkey };
+    } catch (error) {
+      return { success: false, error: mapWebAuthnError(error) };
+    }
+  }
+  async callEdgeFunction(endpoint, data) {
+    try {
+      const { data: responseData, error } = await this.supabase.functions.invoke(
+        this.config.functionName,
+        {
+          body: {
+            endpoint,
+            data: {
+              ...data,
+              rpId: this.config.rpId,
+              rpName: this.config.rpName
+            }
+          }
+        }
+      );
+      if (error) {
+        return {
+          success: false,
+          error: {
+            code: "NETWORK_ERROR",
+            message: error.message || "Edge function request failed"
+          }
+        };
+      }
+      return responseData;
+    } catch (error) {
+      return {
+        success: false,
+        error: {
+          code: "NETWORK_ERROR",
+          message: error instanceof Error ? error.message : "Network request failed"
+        }
+      };
+    }
+  }
+};
+function createPasskeyAuth(supabase, config = {}) {
+  return new PasskeyAuth(supabase, config);
+}
+
+exports.PasskeyAuth = PasskeyAuth;
+exports.createError = createError;
+exports.createPasskeyAuth = createPasskeyAuth;
+exports.getErrorMessage = getErrorMessage;
+exports.getPasskeySupport = getPasskeySupport;
+exports.getUnsupportedReason = getUnsupportedReason;
+exports.isConditionalUISupported = isConditionalUISupported;
+exports.isPasskeyError = isPasskeyError;
+exports.isPlatformAuthenticatorAvailable = isPlatformAuthenticatorAvailable;
+exports.isSecureContext = isSecureContext;
+exports.isWebAuthnSupported = isWebAuthnSupported;
+exports.mapWebAuthnError = mapWebAuthnError;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/errors.ts","../src/lib/support.ts","../src/lib/passkey-auth.ts"],"names":["startRegistration","startAuthentication"],"mappings":";;;;;;;AAEO,SAAS,WAAA,CACd,IAAA,EACA,OAAA,EACA,KAAA,EACc;AACd,EAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAM;AAChC;AAEO,SAAS,iBAAiB,KAAA,EAA8B;AAC7D,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,IAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AAEtB,IAAA,QAAQ,IAAA;AAAM,MACZ,KAAK,mBAAA;AACH,QAAA,OAAO,WAAA;AAAA,UACL,eAAA;AAAA,UACA,uDAAA;AAAA,UACA;AAAA,SACF;AAAA,MAEF,KAAK,iBAAA;AACH,QAAA,IAAI,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,SAAS,CAAA,EAAG;AAC7C,UAAA,OAAO,WAAA,CAAY,SAAA,EAAW,4CAAA,EAA8C,KAAK,CAAA;AAAA,QACnF;AACA,QAAA,OAAO,WAAA,CAAY,WAAA,EAAa,8BAAA,EAAgC,KAAK,CAAA;AAAA,MAEvE,KAAK,mBAAA;AACH,QAAA,OAAO,WAAA;AAAA,UACL,eAAA;AAAA,UACA,2DAAA;AAAA,UACA;AAAA,SACF;AAAA,MAEF,KAAK,eAAA;AACH,QAAA,OAAO,WAAA;AAAA,UACL,gBAAA;AAAA,UACA,yDAAA;AAAA,UACA;AAAA,SACF;AAAA,MAEF,KAAK,YAAA;AACH,QAAA,OAAO,WAAA,CAAY,WAAA,EAAa,4BAAA,EAA8B,KAAK,CAAA;AAAA,MAErE,KAAK,WAAA;AACH,QAAA,IAAI,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,OAAO,CAAA,EAAG;AAC3C,UAAA,OAAO,WAAA;AAAA,YACL,eAAA;AAAA,YACA,uDAAA;AAAA,YACA;AAAA,WACF;AAAA,QACF;AACA,QAAA;AAAA;AACJ,EACF;AAEA,EAAA,OAAO,WAAA;AAAA,IACL,eAAA;AAAA,IACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,4BAAA;AAAA,IACzC;AAAA,GACF;AACF;AAEO,SAAS,gBAAgB,IAAA,EAAgC;AAC9D,EAAA,MAAM,QAAA,GAA6C;AAAA,IACjD,aAAA,EAAe,uDAAA;AAAA,IACf,SAAA,EAAW,8BAAA;AAAA,IACX,OAAA,EAAS,4CAAA;AAAA,IACT,aAAA,EAAe,2DAAA;AAAA,IACf,cAAA,EAAgB,yDAAA;AAAA,IAChB,iBAAA,EAAmB,6CAAA;AAAA,IACnB,kBAAA,EAAoB,wCAAA;AAAA,IACpB,mBAAA,EAAqB,0CAAA;AAAA,IACrB,oBAAA,EAAsB,8CAAA;AAAA,IACtB,cAAA,EAAgB,oBAAA;AAAA,IAChB,iBAAA,EAAmB,qCAAA;AAAA,IACnB,YAAA,EAAc,wDAAA;AAAA,IACd,aAAA,EAAe,8CAAA;AAAA,IACf,aAAA,EAAe;AAAA,GACjB;AAEA,EAAA,OAAO,QAAA,CAAS,IAAI,CAAA,IAAK,QAAA,CAAS,aAAA;AACpC;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACV,SAAA,IAAa,KAAA,IACb,OAAQ,KAAA,CAAuB,IAAA,KAAS,QAAA,IACxC,OAAQ,MAAuB,OAAA,KAAY,QAAA;AAE/C;;;AC7FO,SAAS,mBAAA,GAA+B;AAC7C,EAAA,OACE,OAAO,MAAA,KAAW,WAAA,IAClB,OAAO,OAAO,mBAAA,KAAwB,WAAA,IACtC,OAAO,MAAA,CAAO,SAAA,KAAc,WAAA,IAC5B,OAAO,MAAA,CAAO,UAAU,WAAA,KAAgB,WAAA;AAE5C;AAEA,eAAsB,gCAAA,GAAqD;AACzE,EAAA,IAAI,CAAC,qBAAoB,EAAG;AAC1B,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,oBAAoB,6CAAA,EAA8C;AAAA,EACjF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,wBAAA,GAA6C;AACjE,EAAA,IAAI,CAAC,qBAAoB,EAAG;AAC1B,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,mBAAA;AAInB,IAAA,IAAI,OAAO,UAAA,CAAW,+BAAA,KAAoC,UAAA,EAAY;AACpE,MAAA,OAAO,MAAM,WAAW,+BAAA,EAAgC;AAAA,IAC1D;AACA,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,iBAAA,GAA6C;AACjE,EAAA,MAAM,WAAW,mBAAA,EAAoB;AAErC,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,KAAA;AAAA,MACV,qBAAA,EAAuB,KAAA;AAAA,MACvB,aAAA,EAAe;AAAA,KACjB;AAAA,EACF;AAEA,EAAA,MAAM,CAAC,qBAAA,EAAuB,aAAa,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IAC/D,gCAAA,EAAiC;AAAA,IACjC,wBAAA;AAAyB,GAC1B,CAAA;AAED,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,eAAA,GAA2B;AACzC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,eAAA,KAAoB,IAAA;AACpC;AAEO,SAAS,oBAAA,GAAsC;AACpD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,sDAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,iBAAgB,EAAG;AACtB,IAAA,OAAO,+CAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,qBAAoB,EAAG;AAC1B,IAAA,OAAO,4EAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;;;ACtDA,IAAM,cAAA,GAA4C;AAAA,EAChD,YAAA,EAAc,cAAA;AAAA,EACd,MAAM,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,SAAS,QAAA,GAAW,WAAA;AAAA,EACjE,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAEO,IAAM,cAAN,MAAkB;AAAA,EACf,QAAA;AAAA,EACA,MAAA;AAAA,EAER,WAAA,CAAY,QAAA,EAA6B,MAAA,GAA4B,EAAC,EAAG;AACvE,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,GAAG,cAAA,EAAgB,GAAG,MAAA,EAAO;AAAA,EAC/C;AAAA,EAEA,MAAM,WAAA,GAAuC;AAC3C,IAAA,OAAO,iBAAA,EAAkB;AAAA,EAC3B;AAAA,EAEA,MAAM,SAAS,OAAA,EAAiE;AAC9E,IAAA,MAAM,oBAAoB,oBAAA,EAAqB;AAC/C,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,WAAA,CAAY,eAAA,EAAiB,iBAAiB,CAAA,EAAE;AAAA,IAClF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAAgB,MAAM,IAAA,CAAK,gBAAA;AAAA,QAC/B,iBAAA;AAAA,QACA;AAAA,UACE,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,WAAA,EAAa,OAAA,CAAQ,WAAA,IAAe,OAAA,CAAQ,KAAA;AAAA,UAC5C,mBAAmB,OAAA,CAAQ;AAAA;AAC7B,OACF;AAEA,MAAA,IAAI,CAAC,aAAA,CAAc,OAAA,IAAW,CAAC,cAAc,IAAA,EAAM;AACjD,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,aAAA,CAAc,KAAA,GACjB,WAAA,CAAY,aAAA,CAAc,KAAA,CAAM,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA,GACjE,WAAA,CAAY,iBAAiB,8BAA8B;AAAA,SACjE;AAAA,MACF;AAEA,MAAA,IAAI,oBAAA;AACJ,MAAA,IAAI;AACF,QAAA,oBAAA,GAAwB,MAAMA,yBAAA,CAAkB;AAAA,UAC9C,WAAA,EAAa,cAAc,IAAA,CAAK;AAAA,SACjC,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,MAC1D;AAEA,MAAA,MAAM,cAAA,GAAiB,MAAM,IAAA,CAAK,gBAAA;AAAA,QAChC,kBAAA;AAAA,QACA;AAAA,UACE,WAAA,EAAa,cAAc,IAAA,CAAK,WAAA;AAAA,UAChC,QAAA,EAAU,oBAAA;AAAA,UACV,mBAAmB,OAAA,CAAQ;AAAA;AAC7B,OACF;AAEA,MAAA,IAAI,CAAC,cAAA,CAAe,OAAA,IAAW,CAAC,cAAA,CAAe,MAAM,QAAA,EAAU;AAC7D,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,cAAA,CAAe,KAAA,GAClB,WAAA,CAAY,cAAA,CAAe,KAAA,CAAM,IAAA,EAAM,cAAA,CAAe,KAAA,CAAM,OAAO,CAAA,GACnE,WAAA,CAAY,uBAAuB,+BAA+B;AAAA,SACxE;AAAA,MACF;AAEA,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,cAAA,CAAe,KAAK,OAAA,EAAQ;AAAA,IAC/D,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,eAAe,KAAK,CAAA,SAAU,EAAE,OAAA,EAAS,OAAO,KAAA,EAAM;AAC1D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,CAAO,OAAA,GAAoC,EAAC,EAAqC;AACrF,IAAA,MAAM,oBAAoB,oBAAA,EAAqB;AAC/C,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,WAAA,CAAY,eAAA,EAAiB,iBAAiB,CAAA,EAAE;AAAA,IAClF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,aAAA,GAAgB,MAAM,IAAA,CAAK,gBAAA;AAAA,QAC/B,cAAA;AAAA,QACA,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA;AAAM,OACzB;AAEA,MAAA,IAAI,CAAC,aAAA,CAAc,OAAA,IAAW,CAAC,cAAc,IAAA,EAAM;AACjD,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,aAAA,CAAc,KAAA,GACjB,WAAA,CAAY,aAAA,CAAc,KAAA,CAAM,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA,GACjE,WAAA,CAAY,iBAAiB,gCAAgC;AAAA,SACnE;AAAA,MACF;AAEA,MAAA,IAAI,sBAAA;AACJ,MAAA,IAAI;AACF,QAAA,sBAAA,GAA0B,MAAMC,2BAAA,CAAoB;AAAA,UAClD,WAAA,EAAa,cAAc,IAAA,CAAK;AAAA,SACjC,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,MAC1D;AAEA,MAAA,MAAM,cAAA,GAAiB,MAAM,IAAA,CAAK,gBAAA;AAAA,QAChC,eAAA;AAAA,QACA;AAAA,UACE,WAAA,EAAa,cAAc,IAAA,CAAK,WAAA;AAAA,UAChC,QAAA,EAAU;AAAA;AACZ,OACF;AAEA,MAAA,IAAI,CAAC,cAAA,CAAe,OAAA,IAAW,CAAC,cAAA,CAAe,MAAM,QAAA,EAAU;AAC7D,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,cAAA,CAAe,KAAA,GAClB,WAAA,CAAY,cAAA,CAAe,KAAA,CAAM,IAAA,EAAM,cAAA,CAAe,KAAA,CAAM,OAAO,CAAA,GACnE,WAAA,CAAY,uBAAuB,uBAAuB;AAAA,SAChE;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,SAAA,EAAW,KAAA,EAAM,GAAI,cAAA,CAAe,IAAA;AAC5C,MAAA,IAAI,CAAC,SAAA,IAAa,CAAC,KAAA,EAAO;AACxB,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,WAAA,CAAY,qBAAA,EAAuB,uBAAuB;AAAA,SACnE;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,YAAA,KAAiB,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU;AAAA,QACpF,UAAA,EAAY,SAAA;AAAA,QACZ,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,IAAI,YAAA,IAAgB,CAAC,WAAA,CAAY,OAAA,EAAS;AACxC,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,WAAA;AAAA,YACL,qBAAA;AAAA,YACA,cAAc,OAAA,IAAW;AAAA;AAC3B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,YAAY,OAAA,EAAQ;AAAA,IACvD,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,eAAe,KAAK,CAAA,SAAU,EAAE,OAAA,EAAS,OAAO,KAAA,EAAM;AAC1D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EAEA,MAAM,WAAA,CAAY,OAAA,GAA8B,EAAC,EAA+B;AAC9E,IAAA,MAAM,oBAAoB,oBAAA,EAAqB;AAC/C,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,WAAA,CAAY,eAAA,EAAiB,iBAAiB,CAAA,EAAE;AAAA,IAClF;AAEA,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,IAAA;AAAK,KACf,GAAI,MAAM,IAAA,CAAK,QAAA,CAAS,KAAK,OAAA,EAAQ;AACrC,IAAA,IAAI,CAAC,MAAM,KAAA,EAAO;AAChB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,WAAA,CAAY,gBAAA,EAAkB,yCAAyC;AAAA,OAChF;AAAA,IACF;AAEA,IAAA,OAAO,KAAK,QAAA,CAAS;AAAA,MACnB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,mBAAmB,OAAA,CAAQ;AAAA,KAC5B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,YAAA,GAA4C;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,WAAW,MAAM,IAAA,CAAK,gBAAA,CAA0C,gBAAA,EAAkB,EAAE,CAAA;AAE1F,MAAA,IAAI,CAAC,QAAA,CAAS,OAAA,IAAW,CAAC,SAAS,IAAA,EAAM;AACvC,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,QAAA,CAAS,KAAA,GACZ,WAAA,CAAY,QAAA,CAAS,KAAA,CAAM,IAAA,EAAM,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,GACvD,WAAA,CAAY,iBAAiB,yBAAyB;AAAA,SAC5D;AAAA,MACF;AAEA,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,QAAA,CAAS,KAAK,QAAA,EAAS;AAAA,IAC3D,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,OAAA,EAA6D;AAC/E,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,gBAAA,CAAuC,kBAAA,EAAoB;AAAA,QACrF,cAAc,OAAA,CAAQ;AAAA,OACvB,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,OAAA,EAAS;AACrB,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,QAAA,CAAS,KAAA,GACZ,WAAA,CAAY,QAAA,CAAS,KAAA,CAAM,IAAA,EAAM,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,GACvD,WAAA,CAAY,iBAAiB,0BAA0B;AAAA,SAC7D;AAAA,MACF;AAEA,MAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,IACzB,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,OAAA,EAA6D;AAC/E,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,gBAAA,CAAuC,kBAAA,EAAoB;AAAA,QACrF,cAAc,OAAA,CAAQ,YAAA;AAAA,QACtB,mBAAmB,OAAA,CAAQ;AAAA,OAC5B,CAAA;AAED,MAAA,IAAI,CAAC,QAAA,CAAS,OAAA,IAAW,CAAC,SAAS,IAAA,EAAM;AACvC,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,QAAA,CAAS,KAAA,GACZ,WAAA,CAAY,QAAA,CAAS,KAAA,CAAM,IAAA,EAAM,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,GACvD,WAAA,CAAY,iBAAiB,0BAA0B;AAAA,SAC7D;AAAA,MACF;AAEA,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,QAAA,CAAS,KAAK,OAAA,EAAQ;AAAA,IACzD,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,CAAiB,KAAK,CAAA,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EAEA,MAAc,gBAAA,CACZ,QAAA,EACA,IAAA,EACkC;AAClC,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,MAAM,YAAA,EAAc,KAAA,KAAU,MAAM,IAAA,CAAK,SAAS,SAAA,CAAU,MAAA;AAAA,QAClE,KAAK,MAAA,CAAO,YAAA;AAAA,QACZ;AAAA,UACE,IAAA,EAAM;AAAA,YACJ,QAAA;AAAA,YACA,IAAA,EAAM;AAAA,cACJ,GAAG,IAAA;AAAA,cACH,IAAA,EAAM,KAAK,MAAA,CAAO,IAAA;AAAA,cAClB,MAAA,EAAQ,KAAK,MAAA,CAAO;AAAA;AACtB;AACF;AACF,OACF;AAEA,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,eAAA;AAAA,YACN,OAAA,EAAS,MAAM,OAAA,IAAW;AAAA;AAC5B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,YAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,eAAA;AAAA,UACN,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA;AACpD,OACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,iBAAA,CACd,QAAA,EACA,MAAA,GAA4B,EAAC,EAChB;AACb,EAAA,OAAO,IAAI,WAAA,CAAY,QAAA,EAAU,MAAM,CAAA;AACzC","file":"index.cjs","sourcesContent":["import type { PasskeyError, PasskeyErrorCode } from '../types';\n\nexport function createError(\n  code: PasskeyErrorCode,\n  message: string,\n  cause?: unknown\n): PasskeyError {\n  return { code, message, cause };\n}\n\nexport function mapWebAuthnError(error: unknown): PasskeyError {\n  if (error instanceof Error) {\n    const name = error.name;\n    const message = error.message;\n\n    switch (name) {\n      case 'NotSupportedError':\n        return createError(\n          'NOT_SUPPORTED',\n          'WebAuthn is not supported in this browser or context.',\n          error\n        );\n\n      case 'NotAllowedError':\n        if (message.toLowerCase().includes('timeout')) {\n          return createError('TIMEOUT', 'The operation timed out. Please try again.', error);\n        }\n        return createError('CANCELLED', 'The operation was cancelled.', error);\n\n      case 'InvalidStateError':\n        return createError(\n          'INVALID_STATE',\n          'A passkey for this account already exists on this device.',\n          error\n        );\n\n      case 'SecurityError':\n        return createError(\n          'SECURITY_ERROR',\n          'The operation was blocked due to security restrictions.',\n          error\n        );\n\n      case 'AbortError':\n        return createError('CANCELLED', 'The operation was aborted.', error);\n\n      case 'TypeError':\n        if (message.toLowerCase().includes('fetch')) {\n          return createError(\n            'NETWORK_ERROR',\n            'Network request failed. Please check your connection.',\n            error\n          );\n        }\n        break;\n    }\n  }\n\n  return createError(\n    'UNKNOWN_ERROR',\n    error instanceof Error ? error.message : 'An unknown error occurred.',\n    error\n  );\n}\n\nexport function getErrorMessage(code: PasskeyErrorCode): string {\n  const messages: Record<PasskeyErrorCode, string> = {\n    NOT_SUPPORTED: 'Passkeys are not supported on this device or browser.',\n    CANCELLED: 'The operation was cancelled.',\n    TIMEOUT: 'The operation timed out. Please try again.',\n    INVALID_STATE: 'A passkey for this account already exists on this device.',\n    SECURITY_ERROR: 'The operation was blocked due to security restrictions.',\n    CHALLENGE_EXPIRED: 'Your session has expired. Please try again.',\n    CHALLENGE_MISMATCH: 'Verification failed. Please try again.',\n    VERIFICATION_FAILED: 'Authentication failed. Please try again.',\n    CREDENTIAL_NOT_FOUND: 'Passkey not found. It may have been removed.',\n    USER_NOT_FOUND: 'Account not found.',\n    CREDENTIAL_EXISTS: 'This passkey is already registered.',\n    RATE_LIMITED: 'Too many attempts. Please wait a moment and try again.',\n    NETWORK_ERROR: 'Network error. Please check your connection.',\n    UNKNOWN_ERROR: 'An unexpected error occurred. Please try again.',\n  };\n\n  return messages[code] || messages.UNKNOWN_ERROR;\n}\n\nexport function isPasskeyError(error: unknown): error is PasskeyError {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'code' in error &&\n    'message' in error &&\n    typeof (error as PasskeyError).code === 'string' &&\n    typeof (error as PasskeyError).message === 'string'\n  );\n}\n","import type { PasskeySupport } from '../types';\n\nexport function isWebAuthnSupported(): boolean {\n  return (\n    typeof window !== 'undefined' &&\n    typeof window.PublicKeyCredential !== 'undefined' &&\n    typeof window.navigator !== 'undefined' &&\n    typeof window.navigator.credentials !== 'undefined'\n  );\n}\n\nexport async function isPlatformAuthenticatorAvailable(): Promise<boolean> {\n  if (!isWebAuthnSupported()) {\n    return false;\n  }\n\n  try {\n    return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();\n  } catch {\n    return false;\n  }\n}\n\nexport async function isConditionalUISupported(): Promise<boolean> {\n  if (!isWebAuthnSupported()) {\n    return false;\n  }\n\n  try {\n    const pubKeyCred = PublicKeyCredential as typeof PublicKeyCredential & {\n      isConditionalMediationAvailable?: () => Promise<boolean>;\n    };\n\n    if (typeof pubKeyCred.isConditionalMediationAvailable === 'function') {\n      return await pubKeyCred.isConditionalMediationAvailable();\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\nexport async function getPasskeySupport(): Promise<PasskeySupport> {\n  const webauthn = isWebAuthnSupported();\n\n  if (!webauthn) {\n    return {\n      webauthn: false,\n      platformAuthenticator: false,\n      conditionalUI: false,\n    };\n  }\n\n  const [platformAuthenticator, conditionalUI] = await Promise.all([\n    isPlatformAuthenticatorAvailable(),\n    isConditionalUISupported(),\n  ]);\n\n  return {\n    webauthn,\n    platformAuthenticator,\n    conditionalUI,\n  };\n}\n\nexport function isSecureContext(): boolean {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n  return window.isSecureContext === true;\n}\n\nexport function getUnsupportedReason(): string | null {\n  if (typeof window === 'undefined') {\n    return 'Passkeys are only available in browser environments.';\n  }\n\n  if (!isSecureContext()) {\n    return 'Passkeys require a secure connection (HTTPS).';\n  }\n\n  if (!isWebAuthnSupported()) {\n    return 'Your browser does not support passkeys. Please update to a modern browser.';\n  }\n\n  return null;\n}\n","import { startRegistration, startAuthentication } from '@simplewebauthn/browser';\n\nimport type {\n  AnySupabaseClient,\n  PasskeyAuthConfig,\n  ResolvedPasskeyAuthConfig,\n  RegisterPasskeyOptions,\n  RegisterPasskeyResult,\n  SignInWithPasskeyOptions,\n  SignInWithPasskeyResult,\n  LinkPasskeyOptions,\n  LinkPasskeyResult,\n  RemovePasskeyOptions,\n  RemovePasskeyResult,\n  UpdatePasskeyOptions,\n  UpdatePasskeyResult,\n  ListPasskeysResult,\n  PasskeySupport,\n  StartRegistrationResponse,\n  FinishRegistrationResponse,\n  StartAuthenticationResponse,\n  FinishAuthenticationResponse,\n  PasskeyEndpoint,\n  EdgeFunctionResponse,\n  Passkey,\n  RegistrationResponseJSON,\n  AuthenticationResponseJSON,\n} from '../types';\n\nimport { createError, mapWebAuthnError, isPasskeyError } from './errors';\nimport { getPasskeySupport, getUnsupportedReason } from './support';\n\nconst DEFAULT_CONFIG: ResolvedPasskeyAuthConfig = {\n  functionName: 'passkey-auth',\n  rpId: typeof window !== 'undefined' ? window.location.hostname : 'localhost',\n  rpName: 'My App',\n  timeout: 60000,\n};\n\nexport class PasskeyAuth {\n  private supabase: AnySupabaseClient;\n  private config: ResolvedPasskeyAuthConfig;\n\n  constructor(supabase: AnySupabaseClient, config: PasskeyAuthConfig = {}) {\n    this.supabase = supabase;\n    this.config = { ...DEFAULT_CONFIG, ...config };\n  }\n\n  async isSupported(): Promise<PasskeySupport> {\n    return getPasskeySupport();\n  }\n\n  async register(options: RegisterPasskeyOptions): Promise<RegisterPasskeyResult> {\n    const unsupportedReason = getUnsupportedReason();\n    if (unsupportedReason) {\n      return { success: false, error: createError('NOT_SUPPORTED', unsupportedReason) };\n    }\n\n    try {\n      const startResponse = await this.callEdgeFunction<StartRegistrationResponse>(\n        '/register/start',\n        {\n          email: options.email,\n          displayName: options.displayName || options.email,\n          authenticatorName: options.authenticatorName,\n        }\n      );\n\n      if (!startResponse.success || !startResponse.data) {\n        return {\n          success: false,\n          error: startResponse.error\n            ? createError(startResponse.error.code, startResponse.error.message)\n            : createError('UNKNOWN_ERROR', 'Failed to start registration'),\n        };\n      }\n\n      let registrationResponse: RegistrationResponseJSON;\n      try {\n        registrationResponse = (await startRegistration({\n          optionsJSON: startResponse.data.options,\n        })) as unknown as RegistrationResponseJSON;\n      } catch (error) {\n        return { success: false, error: mapWebAuthnError(error) };\n      }\n\n      const finishResponse = await this.callEdgeFunction<FinishRegistrationResponse>(\n        '/register/finish',\n        {\n          challengeId: startResponse.data.challengeId,\n          response: registrationResponse,\n          authenticatorName: options.authenticatorName,\n        }\n      );\n\n      if (!finishResponse.success || !finishResponse.data?.verified) {\n        return {\n          success: false,\n          error: finishResponse.error\n            ? createError(finishResponse.error.code, finishResponse.error.message)\n            : createError('VERIFICATION_FAILED', 'Failed to verify registration'),\n        };\n      }\n\n      return { success: true, passkey: finishResponse.data.passkey };\n    } catch (error) {\n      if (isPasskeyError(error)) return { success: false, error };\n      return { success: false, error: mapWebAuthnError(error) };\n    }\n  }\n\n  async signIn(options: SignInWithPasskeyOptions = {}): Promise<SignInWithPasskeyResult> {\n    const unsupportedReason = getUnsupportedReason();\n    if (unsupportedReason) {\n      return { success: false, error: createError('NOT_SUPPORTED', unsupportedReason) };\n    }\n\n    try {\n      const startResponse = await this.callEdgeFunction<StartAuthenticationResponse>(\n        '/login/start',\n        { email: options.email }\n      );\n\n      if (!startResponse.success || !startResponse.data) {\n        return {\n          success: false,\n          error: startResponse.error\n            ? createError(startResponse.error.code, startResponse.error.message)\n            : createError('UNKNOWN_ERROR', 'Failed to start authentication'),\n        };\n      }\n\n      let authenticationResponse: AuthenticationResponseJSON;\n      try {\n        authenticationResponse = (await startAuthentication({\n          optionsJSON: startResponse.data.options,\n        })) as unknown as AuthenticationResponseJSON;\n      } catch (error) {\n        return { success: false, error: mapWebAuthnError(error) };\n      }\n\n      const finishResponse = await this.callEdgeFunction<FinishAuthenticationResponse>(\n        '/login/finish',\n        {\n          challengeId: startResponse.data.challengeId,\n          response: authenticationResponse,\n        }\n      );\n\n      if (!finishResponse.success || !finishResponse.data?.verified) {\n        return {\n          success: false,\n          error: finishResponse.error\n            ? createError(finishResponse.error.code, finishResponse.error.message)\n            : createError('VERIFICATION_FAILED', 'Authentication failed'),\n        };\n      }\n\n      const { tokenHash, email } = finishResponse.data;\n      if (!tokenHash || !email) {\n        return {\n          success: false,\n          error: createError('VERIFICATION_FAILED', 'Missing session token'),\n        };\n      }\n\n      const { data: sessionData, error: sessionError } = await this.supabase.auth.verifyOtp({\n        token_hash: tokenHash,\n        type: 'email',\n      });\n\n      if (sessionError || !sessionData.session) {\n        return {\n          success: false,\n          error: createError(\n            'VERIFICATION_FAILED',\n            sessionError?.message || 'Failed to create session'\n          ),\n        };\n      }\n\n      return { success: true, session: sessionData.session };\n    } catch (error) {\n      if (isPasskeyError(error)) return { success: false, error };\n      return { success: false, error: mapWebAuthnError(error) };\n    }\n  }\n\n  async linkPasskey(options: LinkPasskeyOptions = {}): Promise<LinkPasskeyResult> {\n    const unsupportedReason = getUnsupportedReason();\n    if (unsupportedReason) {\n      return { success: false, error: createError('NOT_SUPPORTED', unsupportedReason) };\n    }\n\n    const {\n      data: { user },\n    } = await this.supabase.auth.getUser();\n    if (!user?.email) {\n      return {\n        success: false,\n        error: createError('USER_NOT_FOUND', 'You must be logged in to link a passkey'),\n      };\n    }\n\n    return this.register({\n      email: user.email,\n      authenticatorName: options.authenticatorName,\n    });\n  }\n\n  async listPasskeys(): Promise<ListPasskeysResult> {\n    try {\n      const response = await this.callEdgeFunction<{ passkeys: Passkey[] }>('/passkeys/list', {});\n\n      if (!response.success || !response.data) {\n        return {\n          success: false,\n          error: response.error\n            ? createError(response.error.code, response.error.message)\n            : createError('UNKNOWN_ERROR', 'Failed to list passkeys'),\n        };\n      }\n\n      return { success: true, passkeys: response.data.passkeys };\n    } catch (error) {\n      return { success: false, error: mapWebAuthnError(error) };\n    }\n  }\n\n  async removePasskey(options: RemovePasskeyOptions): Promise<RemovePasskeyResult> {\n    try {\n      const response = await this.callEdgeFunction<{ removed: boolean }>('/passkeys/remove', {\n        credentialId: options.credentialId,\n      });\n\n      if (!response.success) {\n        return {\n          success: false,\n          error: response.error\n            ? createError(response.error.code, response.error.message)\n            : createError('UNKNOWN_ERROR', 'Failed to remove passkey'),\n        };\n      }\n\n      return { success: true };\n    } catch (error) {\n      return { success: false, error: mapWebAuthnError(error) };\n    }\n  }\n\n  async updatePasskey(options: UpdatePasskeyOptions): Promise<UpdatePasskeyResult> {\n    try {\n      const response = await this.callEdgeFunction<{ passkey: Passkey }>('/passkeys/update', {\n        credentialId: options.credentialId,\n        authenticatorName: options.authenticatorName,\n      });\n\n      if (!response.success || !response.data) {\n        return {\n          success: false,\n          error: response.error\n            ? createError(response.error.code, response.error.message)\n            : createError('UNKNOWN_ERROR', 'Failed to update passkey'),\n        };\n      }\n\n      return { success: true, passkey: response.data.passkey };\n    } catch (error) {\n      return { success: false, error: mapWebAuthnError(error) };\n    }\n  }\n\n  private async callEdgeFunction<T>(\n    endpoint: PasskeyEndpoint,\n    data: Record<string, unknown>\n  ): Promise<EdgeFunctionResponse<T>> {\n    try {\n      const { data: responseData, error } = await this.supabase.functions.invoke(\n        this.config.functionName,\n        {\n          body: {\n            endpoint,\n            data: {\n              ...data,\n              rpId: this.config.rpId,\n              rpName: this.config.rpName,\n            },\n          },\n        }\n      );\n\n      if (error) {\n        return {\n          success: false,\n          error: {\n            code: 'NETWORK_ERROR',\n            message: error.message || 'Edge function request failed',\n          },\n        };\n      }\n\n      return responseData as EdgeFunctionResponse<T>;\n    } catch (error) {\n      return {\n        success: false,\n        error: {\n          code: 'NETWORK_ERROR',\n          message: error instanceof Error ? error.message : 'Network request failed',\n        },\n      };\n    }\n  }\n}\n\nexport function createPasskeyAuth(\n  supabase: AnySupabaseClient,\n  config: PasskeyAuthConfig = {}\n): PasskeyAuth {\n  return new PasskeyAuth(supabase, config);\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,181 @@
+import { SupabaseClient, Session } from '@supabase/supabase-js';
+export { Session } from '@supabase/supabase-js';
+
+type AuthenticatorTransport = 'ble' | 'cable' | 'hybrid' | 'internal' | 'nfc' | 'smart-card' | 'usb';
+interface PublicKeyCredentialCreationOptionsJSON {
+    rp: {
+        name: string;
+        id?: string;
+    };
+    user: {
+        id: string;
+        name: string;
+        displayName: string;
+    };
+    challenge: string;
+    pubKeyCredParams: Array<{
+        type: 'public-key';
+        alg: number;
+    }>;
+    timeout?: number;
+    excludeCredentials?: Array<{
+        type: 'public-key';
+        id: string;
+        transports?: AuthenticatorTransport[];
+    }>;
+    authenticatorSelection?: {
+        authenticatorAttachment?: 'platform' | 'cross-platform';
+        residentKey?: 'discouraged' | 'preferred' | 'required';
+        requireResidentKey?: boolean;
+        userVerification?: 'required' | 'preferred' | 'discouraged';
+    };
+    attestation?: 'none' | 'indirect' | 'direct' | 'enterprise';
+    extensions?: Record<string, unknown>;
+}
+interface PublicKeyCredentialRequestOptionsJSON {
+    challenge: string;
+    timeout?: number;
+    rpId?: string;
+    allowCredentials?: Array<{
+        type: 'public-key';
+        id: string;
+        transports?: AuthenticatorTransport[];
+    }>;
+    userVerification?: 'required' | 'preferred' | 'discouraged';
+    extensions?: Record<string, unknown>;
+}
+interface RegistrationResponseJSON {
+    id: string;
+    rawId: string;
+    response: {
+        clientDataJSON: string;
+        attestationObject: string;
+        transports?: AuthenticatorTransport[];
+        publicKeyAlgorithm?: number;
+        publicKey?: string;
+        authenticatorData?: string;
+    };
+    authenticatorAttachment?: 'platform' | 'cross-platform';
+    clientExtensionResults: Record<string, unknown>;
+    type: 'public-key';
+}
+interface AuthenticationResponseJSON {
+    id: string;
+    rawId: string;
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle?: string;
+    };
+    authenticatorAttachment?: 'platform' | 'cross-platform';
+    clientExtensionResults: Record<string, unknown>;
+    type: 'public-key';
+}
+interface PasskeyAuthConfig {
+    functionName?: string;
+    rpId?: string;
+    rpName?: string;
+    timeout?: number;
+}
+interface Passkey {
+    id: string;
+    userId: string;
+    webauthnUserId: string;
+    authenticatorName: string | null;
+    deviceType: 'singleDevice' | 'multiDevice';
+    backedUp: boolean;
+    transports: AuthenticatorTransport[];
+    aaguid: string | null;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+interface RegisterPasskeyOptions {
+    email: string;
+    displayName?: string;
+    authenticatorName?: string;
+}
+interface RegisterPasskeyResult {
+    success: boolean;
+    passkey?: Passkey;
+    error?: PasskeyError;
+}
+interface SignInWithPasskeyOptions {
+    email?: string;
+}
+interface SignInWithPasskeyResult {
+    success: boolean;
+    session?: Session;
+    error?: PasskeyError;
+}
+interface LinkPasskeyOptions {
+    authenticatorName?: string;
+}
+interface LinkPasskeyResult {
+    success: boolean;
+    passkey?: Passkey;
+    error?: PasskeyError;
+}
+interface RemovePasskeyOptions {
+    credentialId: string;
+}
+interface RemovePasskeyResult {
+    success: boolean;
+    error?: PasskeyError;
+}
+interface UpdatePasskeyOptions {
+    credentialId: string;
+    authenticatorName: string;
+}
+interface UpdatePasskeyResult {
+    success: boolean;
+    passkey?: Passkey;
+    error?: PasskeyError;
+}
+interface ListPasskeysResult {
+    success: boolean;
+    passkeys?: Passkey[];
+    error?: PasskeyError;
+}
+type PasskeyErrorCode = 'NOT_SUPPORTED' | 'CANCELLED' | 'TIMEOUT' | 'INVALID_STATE' | 'SECURITY_ERROR' | 'CHALLENGE_EXPIRED' | 'CHALLENGE_MISMATCH' | 'VERIFICATION_FAILED' | 'CREDENTIAL_NOT_FOUND' | 'USER_NOT_FOUND' | 'CREDENTIAL_EXISTS' | 'RATE_LIMITED' | 'NETWORK_ERROR' | 'UNKNOWN_ERROR';
+interface PasskeyError {
+    code: PasskeyErrorCode;
+    message: string;
+    cause?: unknown;
+}
+interface PasskeySupport {
+    webauthn: boolean;
+    platformAuthenticator: boolean;
+    conditionalUI: boolean;
+}
+
+type AnySupabaseClient = SupabaseClient<any, any, any>;
+
+declare class PasskeyAuth {
+    private supabase;
+    private config;
+    constructor(supabase: AnySupabaseClient, config?: PasskeyAuthConfig);
+    isSupported(): Promise<PasskeySupport>;
+    register(options: RegisterPasskeyOptions): Promise<RegisterPasskeyResult>;
+    signIn(options?: SignInWithPasskeyOptions): Promise<SignInWithPasskeyResult>;
+    linkPasskey(options?: LinkPasskeyOptions): Promise<LinkPasskeyResult>;
+    listPasskeys(): Promise<ListPasskeysResult>;
+    removePasskey(options: RemovePasskeyOptions): Promise<RemovePasskeyResult>;
+    updatePasskey(options: UpdatePasskeyOptions): Promise<UpdatePasskeyResult>;
+    private callEdgeFunction;
+}
+declare function createPasskeyAuth(supabase: AnySupabaseClient, config?: PasskeyAuthConfig): PasskeyAuth;
+
+declare function isWebAuthnSupported(): boolean;
+declare function isPlatformAuthenticatorAvailable(): Promise<boolean>;
+declare function isConditionalUISupported(): Promise<boolean>;
+declare function getPasskeySupport(): Promise<PasskeySupport>;
+declare function isSecureContext(): boolean;
+declare function getUnsupportedReason(): string | null;
+
+declare function createError(code: PasskeyErrorCode, message: string, cause?: unknown): PasskeyError;
+declare function mapWebAuthnError(error: unknown): PasskeyError;
+declare function getErrorMessage(code: PasskeyErrorCode): string;
+declare function isPasskeyError(error: unknown): error is PasskeyError;
+
+export { type AuthenticationResponseJSON, type AuthenticatorTransport, type LinkPasskeyOptions, type LinkPasskeyResult, type ListPasskeysResult, type Passkey, PasskeyAuth, type PasskeyAuthConfig, type PasskeyError, type PasskeyErrorCode, type PasskeySupport, type PublicKeyCredentialCreationOptionsJSON, type PublicKeyCredentialRequestOptionsJSON, type RegisterPasskeyOptions, type RegisterPasskeyResult, type RegistrationResponseJSON, type RemovePasskeyOptions, type RemovePasskeyResult, type SignInWithPasskeyOptions, type SignInWithPasskeyResult, type UpdatePasskeyOptions, type UpdatePasskeyResult, createError, createPasskeyAuth, getErrorMessage, getPasskeySupport, getUnsupportedReason, isConditionalUISupported, isPasskeyError, isPlatformAuthenticatorAvailable, isSecureContext, isWebAuthnSupported, mapWebAuthnError };