@asteby/metacore-auth 2.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Asteby, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,101 @@
+# @asteby/metacore-auth
+
+Metacore auth kit: Zustand store, `createApiClient` factory, TanStack Router
+guard builder, and brand-less sign-in / sign-up / forgot-password / OTP pages.
+
+## Install
+
+```sh
+pnpm add @asteby/metacore-auth @asteby/metacore-ui zustand @tanstack/react-router
+```
+
+Peer deps required: `react`, `react-dom`, `@tanstack/react-router`, `zustand`.
+
+## Entry points
+
+| Import path                         | Exports                                                      |
+| ----------------------------------- | ------------------------------------------------------------ |
+| `@asteby/metacore-auth`             | Everything below (re-exported).                              |
+| `@asteby/metacore-auth/store`       | `useAuthStore`, `AuthUser`, `AuthState`, `AUTH_STORAGE_KEYS` |
+| `@asteby/metacore-auth/provider`    | `AuthProvider`, `useAuth`                                    |
+| `@asteby/metacore-auth/api-client`  | `createApiClient`, `ApiClient`                               |
+| `@asteby/metacore-auth/guards`      | `createAuthGuard`                                            |
+| `@asteby/metacore-auth/pages`       | `SignInPage`, `SignUpPage`, `ForgotPasswordPage`, `OtpPage`, `AuthLayout` |
+| `@asteby/metacore-auth/components`  | `PasswordInput`, `SignOutDialog`                             |
+
+## Quickstart
+
+### 1. Create the API client (once, at boot)
+
+```ts
+import { createApiClient, useAuthStore } from '@asteby/metacore-auth'
+import i18n from './i18n'
+
+export const api = createApiClient({
+  baseURL: import.meta.env.VITE_API_URL ?? '/api',
+  getToken: () => useAuthStore.getState().auth.accessToken,
+  getLanguage: () => i18n.language,
+  getBranchId: () => {
+    try {
+      const branch = JSON.parse(localStorage.getItem('current_branch') || '{}')
+      return branch?.id
+    } catch {
+      return null
+    }
+  },
+  onUnauthorized: () => {
+    useAuthStore.getState().auth.reset()
+    window.location.href = '/sign-in'
+  },
+})
+```
+
+### 2. Guard authenticated routes
+
+```tsx
+// src/routes/_authenticated/route.tsx
+import { createFileRoute } from '@tanstack/react-router'
+import { createAuthGuard } from '@asteby/metacore-auth/guards'
+import { AuthenticatedLayout } from '@/components/layout/authenticated-layout'
+
+export const Route = createFileRoute('/_authenticated')({
+  beforeLoad: createAuthGuard(),
+  component: AuthenticatedLayout,
+})
+```
+
+### 3. Render branded sign-in
+
+```tsx
+import { SignInPage } from '@asteby/metacore-auth/pages'
+import { useAuthStore } from '@asteby/metacore-auth/store'
+import { useNavigate, Link } from '@tanstack/react-router'
+import { Logo } from '@/assets/logo'
+import { api } from '@/lib/api'
+
+export function SignInRoute() {
+  const navigate = useNavigate()
+  const { auth } = useAuthStore()
+  return (
+    <SignInPage
+      brandName='MyApp'
+      logo={<Logo className='size-7' />}
+      showcase={<MyErpShowcase />}
+      forgotPasswordSlot={<Link to='/forgot-password'>¿Olvidaste tu contraseña?</Link>}
+      onSubmit={async ({ email, password, redirectTo }) => {
+        const { data } = await api.post('/auth/login', { email, password })
+        auth.setUser(data.data.user)
+        auth.setAccessToken(data.data.token)
+        navigate({ to: redirectTo || '/' })
+      }}
+    />
+  )
+}
+```
+
+## Design notes
+
+- **Zustand store is canonical** — matches the Ops frontend shape (user + token + reset). Persists to `localStorage` keys `auth_token` / `auth_user`.
+- **Factory, not singleton** — `createApiClient` avoids baking env vars into the library. The host app wires token / language / branch getters.
+- **Pages are brand-less** — accept `brandName`, `logo`, `showcase`, `headerSlot`, `footerSlot` so each app supplies its own identity.
+- **`onSubmit` delegated** — pages don't assume endpoints, toasts, or navigation. The caller owns the network layer.

package/dist/api-client.d.ts

@@ -0,0 +1,35 @@
+import type { AxiosInstance, AxiosRequestConfig } from 'axios';
+export interface CreateApiClientOptions {
+    /** Base URL for the axios instance. */
+    baseURL: string;
+    /**
+     * Synchronous token getter. Returning an empty string or `null` skips the
+     * Authorization header.
+     */
+    getToken?: () => string | null | undefined;
+    /**
+     * Synchronous getter for the `Accept-Language` header value (e.g. the
+     * current i18n language). Defaults to `'es'` if omitted.
+     */
+    getLanguage?: () => string | null | undefined;
+    /**
+     * Synchronous getter for the current branch id — sent as `X-Branch-ID`.
+     * Return `null` / `undefined` to skip the header.
+     */
+    getBranchId?: () => string | number | null | undefined;
+    /**
+     * Called when the server responds with 401. Use this to clear auth state and
+     * redirect to the sign-in page. The returned promise (if any) is awaited
+     * before the original error is rejected.
+     */
+    onUnauthorized?: () => void | Promise<void>;
+    /** Extra axios defaults (headers, timeout, etc). Merged into `axios.create`. */
+    axiosConfig?: Omit<AxiosRequestConfig, 'baseURL'>;
+}
+/**
+ * Factory for an axios instance wired with Metacore's auth + i18n + multi-branch
+ * conventions. Call once at app bootstrap, then share the returned instance.
+ */
+export declare function createApiClient(options: CreateApiClientOptions): AxiosInstance;
+export type ApiClient = ReturnType<typeof createApiClient>;
+//# sourceMappingURL=api-client.d.ts.map

package/dist/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAA;AAE9D,MAAM,WAAW,sBAAsB;IACrC,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAC1C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAC7C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IACtD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,gFAAgF;IAChF,WAAW,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAA;CAClD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,aAAa,CAuE9E;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAA"}

package/dist/api-client.js

@@ -0,0 +1,57 @@
+import axios from 'axios';
+/**
+ * Factory for an axios instance wired with Metacore's auth + i18n + multi-branch
+ * conventions. Call once at app bootstrap, then share the returned instance.
+ */
+export function createApiClient(options) {
+    const { baseURL, getToken, getLanguage, getBranchId, onUnauthorized, axiosConfig, } = options;
+    const instance = axios.create({
+        baseURL,
+        headers: {
+            'Content-Type': 'application/json',
+            ...axiosConfig?.headers,
+        },
+        ...axiosConfig,
+    });
+    instance.interceptors.request.use((config) => {
+        const token = getToken?.();
+        if (token) {
+            config.headers.set?.('Authorization', `Bearer ${token}`);
+            config.headers.Authorization = `Bearer ${token}`;
+        }
+        const language = getLanguage?.() || 'es';
+        config.headers['Accept-Language'] = language;
+        const branchId = getBranchId?.();
+        if (branchId !== undefined && branchId !== null && branchId !== '') {
+            ;
+            config.headers['X-Branch-ID'] = String(branchId);
+        }
+        // Let the browser set Content-Type (incl. boundary) for FormData uploads.
+        if (config.data instanceof FormData) {
+            delete config.headers['Content-Type'];
+        }
+        return config;
+    });
+    instance.interceptors.response.use((response) => response, async (error) => {
+        const status = error?.response?.status;
+        const data = error?.response?.data;
+        const url = (error?.config?.method?.toUpperCase?.() ?? 'REQ') +
+            ' ' +
+            (error?.config?.url ?? '');
+        const serverMessage = data?.message || data?.error || data?.title || error?.message;
+        // eslint-disable-next-line no-console
+        console.error(`[API Error] ${url} → ${status}: ${serverMessage}`, data);
+        if (status === 401 && onUnauthorized) {
+            try {
+                await onUnauthorized();
+            }
+            catch (handlerErr) {
+                // eslint-disable-next-line no-console
+                console.error('[API Error] onUnauthorized handler threw', handlerErr);
+            }
+        }
+        return Promise.reject(error);
+    });
+    return instance;
+}
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AA+BzB;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,EACJ,OAAO,EACP,QAAQ,EACR,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,GACZ,GAAG,OAAO,CAAA;IAEX,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,OAAO;QACP,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAI,WAAW,EAAE,OAA8C;SAChE;QACD,GAAG,WAAW;KACf,CAAC,CAAA;IAEF,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,QAAQ,EAAE,EAAE,CAAA;QAC1B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAEvD;YAAC,MAAM,CAAC,OAAmC,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAA;QAChF,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,EAAE,EAAE,IAAI,IAAI,CACvC;QAAC,MAAM,CAAC,OAAmC,CAAC,iBAAiB,CAAC,GAAG,QAAQ,CAAA;QAE1E,MAAM,QAAQ,GAAG,WAAW,EAAE,EAAE,CAAA;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC,OAAmC,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChF,CAAC;QAED,0EAA0E;QAC1E,IAAI,MAAM,CAAC,IAAI,YAAY,QAAQ,EAAE,CAAC;YACpC,OAAQ,MAAM,CAAC,OAAmC,CAAC,cAAc,CAAC,CAAA;QACpE,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAChC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EACtB,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAA;QACtC,MAAM,IAAI,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAA;QAClC,MAAM,GAAG,GACP,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,KAAK,CAAC;YACjD,GAAG;YACH,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;QAC5B,MAAM,aAAa,GACjB,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,KAAK,EAAE,OAAO,CAAA;QAC/D,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,MAAM,MAAM,KAAK,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QAEvE,IAAI,MAAM,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,cAAc,EAAE,CAAA;YACxB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,UAAU,CAAC,CAAA;YACvE,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC,CACF,CAAA;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/components/index.d.ts

@@ -0,0 +1,4 @@
+export { PasswordInput } from './password-input';
+export { SignOutDialog } from './sign-out-dialog';
+export type { SignOutDialogProps } from './sign-out-dialog';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/components/index.js

@@ -0,0 +1,3 @@
+export { PasswordInput } from './password-input';
+export { SignOutDialog } from './sign-out-dialog';
+//# sourceMappingURL=index.js.map

package/dist/components/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/components/password-input.d.ts

@@ -0,0 +1,7 @@
+import * as React from 'react';
+type PasswordInputProps = Omit<React.InputHTMLAttributes<HTMLInputElement>, 'type'> & {
+    ref?: React.Ref<HTMLInputElement>;
+};
+export declare function PasswordInput({ className, disabled, ref, ...props }: PasswordInputProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=password-input.d.ts.map

package/dist/components/password-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-input.d.ts","sourceRoot":"","sources":["../../src/components/password-input.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAK9B,KAAK,kBAAkB,GAAG,IAAI,CAC5B,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EAC3C,MAAM,CACP,GAAG;IACF,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;CAClC,CAAA;AAED,wBAAgB,aAAa,CAAC,EAC5B,SAAS,EACT,QAAQ,EACR,GAAG,EACH,GAAG,KAAK,EACT,EAAE,kBAAkB,2CAwBpB"}

package/dist/components/password-input.js

@@ -0,0 +1,10 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import * as React from 'react';
+import { Eye, EyeOff } from 'lucide-react';
+import { Button } from '@asteby/metacore-ui/primitives';
+import { cn } from '@asteby/metacore-ui/lib';
+export function PasswordInput({ className, disabled, ref, ...props }) {
+    const [showPassword, setShowPassword] = React.useState(false);
+    return (_jsxs("div", { className: cn('relative rounded-md', className), children: [_jsx("input", { type: showPassword ? 'text' : 'password', className: 'border-input placeholder:text-muted-foreground focus-visible:ring-ring flex h-9 w-full rounded-md border bg-transparent px-3 py-1 text-sm shadow-xs transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium focus-visible:ring-1 focus-visible:outline-hidden disabled:cursor-not-allowed disabled:opacity-50', ref: ref, disabled: disabled, ...props }), _jsx(Button, { type: 'button', size: 'icon', variant: 'ghost', disabled: disabled, className: 'text-muted-foreground absolute end-1 top-1/2 h-6 w-6 -translate-y-1/2 rounded-md', onClick: () => setShowPassword((prev) => !prev), children: showPassword ? _jsx(Eye, { size: 18 }) : _jsx(EyeOff, { size: 18 }) })] }));
+}
+//# sourceMappingURL=password-input.js.map

package/dist/components/password-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-input.js","sourceRoot":"","sources":["../../src/components/password-input.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AACvD,OAAO,EAAE,EAAE,EAAE,MAAM,yBAAyB,CAAA;AAS5C,MAAM,UAAU,aAAa,CAAC,EAC5B,SAAS,EACT,QAAQ,EACR,GAAG,EACH,GAAG,KAAK,EACW;IACnB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE7D,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,qBAAqB,EAAE,SAAS,CAAC,aAClD,gBACE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EACxC,SAAS,EAAC,yUAAyU,EACnV,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,QAAQ,KACd,KAAK,GACT,EACF,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,MAAM,EACX,OAAO,EAAC,OAAO,EACf,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAC,kFAAkF,EAC5F,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAE9C,YAAY,CAAC,CAAC,CAAC,KAAC,GAAG,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,IAAI,EAAE,EAAE,GAAI,GACjD,IACL,CACP,CAAA;AACH,CAAC"}

package/dist/components/sign-out-dialog.d.ts

@@ -0,0 +1,16 @@
+export interface SignOutDialogProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    /**
+     * Path to redirect to after sign-out. Default `/sign-in`.
+     */
+    signInPath?: string;
+    /** Dialog title. */
+    title?: string;
+    /** Dialog description. */
+    desc?: string;
+    /** Confirm button text. */
+    confirmText?: string;
+}
+export declare function SignOutDialog({ open, onOpenChange, signInPath, title, desc, confirmText, }: SignOutDialogProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=sign-out-dialog.d.ts.map

package/dist/components/sign-out-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-out-dialog.d.ts","sourceRoot":"","sources":["../../src/components/sign-out-dialog.tsx"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAA;IACb,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,aAAa,CAAC,EAC5B,IAAI,EACJ,YAAY,EACZ,UAAuB,EACvB,KAAuB,EACvB,IAAmH,EACnH,WAA6B,GAC9B,EAAE,kBAAkB,2CA2BpB"}

package/dist/components/sign-out-dialog.js

@@ -0,0 +1,20 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useNavigate, useLocation } from '@tanstack/react-router';
+import { ConfirmDialog } from '@asteby/metacore-ui/dialogs';
+import { useAuthStore } from '../store';
+export function SignOutDialog({ open, onOpenChange, signInPath = '/sign-in', title = 'Cerrar sesión', desc = '¿Estás seguro de que deseas cerrar sesión? Tendrás que iniciar sesión nuevamente para acceder a tu cuenta.', confirmText = 'Cerrar sesión', }) {
+    const navigate = useNavigate();
+    const location = useLocation();
+    const { auth } = useAuthStore();
+    const handleSignOut = () => {
+        auth.reset();
+        const currentPath = location.href;
+        navigate({
+            to: signInPath,
+            search: { redirect: currentPath },
+            replace: true,
+        });
+    };
+    return (_jsx(ConfirmDialog, { open: open, onOpenChange: onOpenChange, title: title, desc: desc, confirmText: confirmText, destructive: true, handleConfirm: handleSignOut, className: 'sm:max-w-sm' }));
+}
+//# sourceMappingURL=sign-out-dialog.js.map

package/dist/components/sign-out-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-out-dialog.js","sourceRoot":"","sources":["../../src/components/sign-out-dialog.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAiBvC,MAAM,UAAU,aAAa,CAAC,EAC5B,IAAI,EACJ,YAAY,EACZ,UAAU,GAAG,UAAU,EACvB,KAAK,GAAG,eAAe,EACvB,IAAI,GAAG,4GAA4G,EACnH,WAAW,GAAG,eAAe,GACV;IACnB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,CAAA;IAE/B,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAA;QACjC,QAAQ,CAAC;YACP,EAAE,EAAE,UAAmB;YACvB,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAW;YAC1C,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO,CACL,KAAC,aAAa,IACZ,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,WAAW,EACxB,WAAW,QACX,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAC,aAAa,GACvB,CACH,CAAA;AACH,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,28 @@
+export interface CreateAuthGuardOptions {
+    /**
+     * Route to redirect to when the user is not authenticated.
+     * Default: `/sign-in`.
+     */
+    signInPath?: string;
+    /**
+     * Optional hook that runs after the auth check passes. Useful for prefetching
+     * metadata or warming caches once the user is known. Exceptions are swallowed
+     * so they don't block navigation.
+     */
+    afterAuth?: () => void | Promise<void>;
+    /**
+     * Override how the current path is derived for the `redirect` search param.
+     * Defaults to `window.location.pathname`.
+     */
+    getCurrentPath?: () => string;
+}
+/**
+ * Creates a `beforeLoad` function for TanStack Router. Usage:
+ *
+ *   export const Route = createFileRoute('/_authenticated')({
+ *     beforeLoad: createAuthGuard({ afterAuth: () => useMetadataCache.getState().prefetchAll() }),
+ *     component: AuthenticatedLayout,
+ *   })
+ */
+export declare function createAuthGuard(options?: CreateAuthGuardOptions): () => void;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,cA2BnE"}

package/dist/guards.js

@@ -0,0 +1,33 @@
+import { redirect } from '@tanstack/react-router';
+import { useAuthStore } from './store';
+/**
+ * Creates a `beforeLoad` function for TanStack Router. Usage:
+ *
+ *   export const Route = createFileRoute('/_authenticated')({
+ *     beforeLoad: createAuthGuard({ afterAuth: () => useMetadataCache.getState().prefetchAll() }),
+ *     component: AuthenticatedLayout,
+ *   })
+ */
+export function createAuthGuard(options = {}) {
+    const { signInPath = '/sign-in', afterAuth, getCurrentPath = () => typeof window !== 'undefined' ? window.location.pathname : '/', } = options;
+    return function beforeLoad() {
+        const { auth } = useAuthStore.getState();
+        if (!auth.accessToken || !auth.user) {
+            throw redirect({
+                to: signInPath,
+                search: {
+                    redirect: getCurrentPath(),
+                },
+            });
+        }
+        if (afterAuth) {
+            try {
+                void afterAuth();
+            }
+            catch {
+                /* swallow — never block navigation */
+            }
+        }
+    };
+}
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAqBtC;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkC,EAAE;IAClE,MAAM,EACJ,UAAU,GAAG,UAAU,EACvB,SAAS,EACT,cAAc,GAAG,GAAG,EAAE,CACpB,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GACjE,GAAG,OAAO,CAAA;IAEX,OAAO,SAAS,UAAU;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC;gBACb,EAAE,EAAE,UAAU;gBACd,MAAM,EAAE;oBACN,QAAQ,EAAE,cAAc,EAAE;iBAC3B;aACF,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,KAAK,SAAS,EAAE,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { useAuthStore, AUTH_STORAGE_KEYS } from './store';
+export type { AuthUser, AuthState } from './store';
+export { AuthProvider, useAuth } from './provider';
+export type { AuthProviderProps } from './provider';
+export { createApiClient } from './api-client';
+export type { CreateApiClientOptions, ApiClient } from './api-client';
+export { createAuthGuard } from './guards';
+export type { CreateAuthGuardOptions } from './guards';
+export * from './pages';
+export * from './components';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAGlD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAClD,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,YAAY,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAGtD,cAAc,SAAS,CAAA;AAGvB,cAAc,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,13 @@
+// Store
+export { useAuthStore, AUTH_STORAGE_KEYS } from './store';
+// Provider
+export { AuthProvider, useAuth } from './provider';
+// API client factory
+export { createApiClient } from './api-client';
+// Route guards
+export { createAuthGuard } from './guards';
+// Pages
+export * from './pages';
+// Components
+export * from './components';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGzD,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGlD,qBAAqB;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,eAAe;AACf,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAG1C,QAAQ;AACR,cAAc,SAAS,CAAA;AAEvB,aAAa;AACb,cAAc,cAAc,CAAA"}

package/dist/pages/auth-layout.d.ts

@@ -0,0 +1,14 @@
+import type { ReactNode } from 'react';
+export interface AuthLayoutProps {
+    children: ReactNode;
+    /** Slot for the brand logo (rendered at the top, centered). */
+    logo?: ReactNode;
+    /** Brand name displayed next to the logo. */
+    brandName?: string;
+}
+/**
+ * Minimal centered auth layout — drop children in and optionally pass a logo
+ * slot + brand name. No hardcoded branding.
+ */
+export declare function AuthLayout({ children, logo, brandName }: AuthLayoutProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=auth-layout.d.ts.map

package/dist/pages/auth-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-layout.d.ts","sourceRoot":"","sources":["../../src/pages/auth-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEtC,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,SAAS,CAAA;IACnB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe,2CAcxE"}

package/dist/pages/auth-layout.js

@@ -0,0 +1,9 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Minimal centered auth layout — drop children in and optionally pass a logo
+ * slot + brand name. No hardcoded branding.
+ */
+export function AuthLayout({ children, logo, brandName }) {
+    return (_jsx("div", { className: 'container grid h-svh max-w-none items-center justify-center', children: _jsxs("div", { className: 'mx-auto flex w-full flex-col justify-center space-y-2 py-8 sm:w-[480px] sm:p-8', children: [(logo || brandName) && (_jsxs("div", { className: 'mb-4 flex items-center justify-center', children: [logo && _jsx("span", { className: 'me-2', children: logo }), brandName && _jsx("h1", { className: 'text-xl font-medium', children: brandName })] })), children] }) }));
+}
+//# sourceMappingURL=auth-layout.js.map