@coduckai/sdk 0.1.0

package/dist/ai/index.cjs

@@ -0,0 +1,32 @@
+'use strict';
+
+// src/internal/env.ts
+function isServer() {
+  return typeof window === "undefined";
+}
+function assertServer(moduleName) {
+  if (!isServer()) {
+    throw new Error(
+      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`
+    );
+  }
+}
+
+// src/ai/index.ts
+assertServer("ai");
+var ai = {
+  chat: notImplemented("ai.chat"),
+  streamChat: notImplemented("ai.streamChat"),
+  streamToSSE: notImplemented("ai.streamToSSE"),
+  generateImage: notImplemented("ai.generateImage"),
+  getProvider: notImplemented("ai.getProvider")
+};
+function notImplemented(name) {
+  return () => {
+    throw new Error(`@coduckai/sdk: ${name}() is not yet implemented. Coming in v0.2.0.`);
+  };
+}
+
+exports.ai = ai;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/ai/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/internal/env.ts","../../src/ai/index.ts"],"names":[],"mappings":";;;AAgBO,SAAS,QAAA,GAAoB;AAClC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA;AAC3B;AAEO,SAAS,aAAa,UAAA,EAA0B;AACrD,EAAA,IAAI,CAAC,UAAS,EAAG;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iBAAiB,UAAU,CAAA,2DAAA;AAAA,KAC7B;AAAA,EACF;AACF;;;ACnBA,YAAA,CAAa,IAAI,CAAA;AAEV,IAAM,EAAA,GAAK;AAAA,EAChB,IAAA,EAAM,eAAe,SAAS,CAAA;AAAA,EAC9B,UAAA,EAAY,eAAe,eAAe,CAAA;AAAA,EAC1C,WAAA,EAAa,eAAe,gBAAgB,CAAA;AAAA,EAC5C,aAAA,EAAe,eAAe,kBAAkB,CAAA;AAAA,EAChD,WAAA,EAAa,eAAe,gBAAgB;AAC9C;AAEA,SAAS,eAAe,IAAA,EAAc;AACpC,EAAA,OAAO,MAAM;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,4CAAA,CAA8C,CAAA;AAAA,EACtF,CAAA;AACF","file":"index.cjs","sourcesContent":["/**\n * Environment variable helpers\n */\n\nexport function getEnv(key: string, fallback?: string): string | undefined {\n  return process.env[key] || fallback;\n}\n\nexport function requireEnv(key: string): string {\n  const val = process.env[key];\n  if (!val) {\n    throw new Error(`@coduckai/sdk: Missing required environment variable: ${key}`);\n  }\n  return val;\n}\n\nexport function isServer(): boolean {\n  return typeof window === 'undefined';\n}\n\nexport function assertServer(moduleName: string): void {\n  if (!isServer()) {\n    throw new Error(\n      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`\n    );\n  }\n}\n","/**\n * @coduckai/sdk/ai — AI Providers (server-only)\n *\n * Coming in v0.2.0. Unified interface for OpenAI + Anthropic.\n */\n\nimport { assertServer } from '../internal/env';\nassertServer('ai');\n\nexport const ai = {\n  chat: notImplemented('ai.chat'),\n  streamChat: notImplemented('ai.streamChat'),\n  streamToSSE: notImplemented('ai.streamToSSE'),\n  generateImage: notImplemented('ai.generateImage'),\n  getProvider: notImplemented('ai.getProvider'),\n};\n\nfunction notImplemented(name: string) {\n  return () => {\n    throw new Error(`@coduckai/sdk: ${name}() is not yet implemented. Coming in v0.2.0.`);\n  };\n}\n"]}

package/dist/ai/index.d.cts

@@ -0,0 +1,14 @@
+/**
+ * @coduckai/sdk/ai — AI Providers (server-only)
+ *
+ * Coming in v0.2.0. Unified interface for OpenAI + Anthropic.
+ */
+declare const ai: {
+    chat: () => never;
+    streamChat: () => never;
+    streamToSSE: () => never;
+    generateImage: () => never;
+    getProvider: () => never;
+};
+
+export { ai };

package/dist/ai/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @coduckai/sdk/ai — AI Providers (server-only)
+ *
+ * Coming in v0.2.0. Unified interface for OpenAI + Anthropic.
+ */
+declare const ai: {
+    chat: () => never;
+    streamChat: () => never;
+    streamToSSE: () => never;
+    generateImage: () => never;
+    getProvider: () => never;
+};
+
+export { ai };

package/dist/ai/index.js

@@ -0,0 +1,30 @@
+// src/internal/env.ts
+function isServer() {
+  return typeof window === "undefined";
+}
+function assertServer(moduleName) {
+  if (!isServer()) {
+    throw new Error(
+      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`
+    );
+  }
+}
+
+// src/ai/index.ts
+assertServer("ai");
+var ai = {
+  chat: notImplemented("ai.chat"),
+  streamChat: notImplemented("ai.streamChat"),
+  streamToSSE: notImplemented("ai.streamToSSE"),
+  generateImage: notImplemented("ai.generateImage"),
+  getProvider: notImplemented("ai.getProvider")
+};
+function notImplemented(name) {
+  return () => {
+    throw new Error(`@coduckai/sdk: ${name}() is not yet implemented. Coming in v0.2.0.`);
+  };
+}
+
+export { ai };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/ai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/internal/env.ts","../../src/ai/index.ts"],"names":[],"mappings":";AAgBO,SAAS,QAAA,GAAoB;AAClC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA;AAC3B;AAEO,SAAS,aAAa,UAAA,EAA0B;AACrD,EAAA,IAAI,CAAC,UAAS,EAAG;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iBAAiB,UAAU,CAAA,2DAAA;AAAA,KAC7B;AAAA,EACF;AACF;;;ACnBA,YAAA,CAAa,IAAI,CAAA;AAEV,IAAM,EAAA,GAAK;AAAA,EAChB,IAAA,EAAM,eAAe,SAAS,CAAA;AAAA,EAC9B,UAAA,EAAY,eAAe,eAAe,CAAA;AAAA,EAC1C,WAAA,EAAa,eAAe,gBAAgB,CAAA;AAAA,EAC5C,aAAA,EAAe,eAAe,kBAAkB,CAAA;AAAA,EAChD,WAAA,EAAa,eAAe,gBAAgB;AAC9C;AAEA,SAAS,eAAe,IAAA,EAAc;AACpC,EAAA,OAAO,MAAM;AACX,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,4CAAA,CAA8C,CAAA;AAAA,EACtF,CAAA;AACF","file":"index.js","sourcesContent":["/**\n * Environment variable helpers\n */\n\nexport function getEnv(key: string, fallback?: string): string | undefined {\n  return process.env[key] || fallback;\n}\n\nexport function requireEnv(key: string): string {\n  const val = process.env[key];\n  if (!val) {\n    throw new Error(`@coduckai/sdk: Missing required environment variable: ${key}`);\n  }\n  return val;\n}\n\nexport function isServer(): boolean {\n  return typeof window === 'undefined';\n}\n\nexport function assertServer(moduleName: string): void {\n  if (!isServer()) {\n    throw new Error(\n      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`\n    );\n  }\n}\n","/**\n * @coduckai/sdk/ai — AI Providers (server-only)\n *\n * Coming in v0.2.0. Unified interface for OpenAI + Anthropic.\n */\n\nimport { assertServer } from '../internal/env';\nassertServer('ai');\n\nexport const ai = {\n  chat: notImplemented('ai.chat'),\n  streamChat: notImplemented('ai.streamChat'),\n  streamToSSE: notImplemented('ai.streamToSSE'),\n  generateImage: notImplemented('ai.generateImage'),\n  getProvider: notImplemented('ai.getProvider'),\n};\n\nfunction notImplemented(name: string) {\n  return () => {\n    throw new Error(`@coduckai/sdk: ${name}() is not yet implemented. Coming in v0.2.0.`);\n  };\n}\n"]}

package/dist/auth/index.cjs

@@ -0,0 +1,139 @@
+'use strict';
+
+var bcrypt = require('bcrypt');
+var jwt = require('jsonwebtoken');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var bcrypt__default = /*#__PURE__*/_interopDefault(bcrypt);
+var jwt__default = /*#__PURE__*/_interopDefault(jwt);
+
+// src/internal/env.ts
+function getEnv(key, fallback) {
+  return process.env[key] || fallback;
+}
+function isServer() {
+  return typeof window === "undefined";
+}
+function assertServer(moduleName) {
+  if (!isServer()) {
+    throw new Error(
+      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`
+    );
+  }
+}
+
+// src/internal/config.ts
+var globalConfig = {};
+function getConfig() {
+  return globalConfig;
+}
+assertServer("auth");
+function getSecret() {
+  const config = getConfig();
+  const secret = config.auth?.jwtSecret || getEnv("JWT_SECRET");
+  if (!secret) {
+    throw new Error("@coduckai/sdk/auth: JWT_SECRET environment variable is required");
+  }
+  return secret;
+}
+function getExpiresIn() {
+  const config = getConfig();
+  return config.auth?.jwtExpiresIn || getEnv("JWT_EXPIRES_IN") || "7d";
+}
+function getRounds() {
+  const config = getConfig();
+  return config.auth?.bcryptRounds || 12;
+}
+var auth = {
+  /**
+   * Hash a plaintext password
+   */
+  async hashPassword(plaintext) {
+    return bcrypt__default.default.hash(plaintext, getRounds());
+  },
+  /**
+   * Verify a plaintext password against a hash
+   */
+  async verifyPassword(plaintext, hash) {
+    return bcrypt__default.default.compare(plaintext, hash);
+  },
+  /**
+   * Generate a signed JWT token
+   */
+  generateToken(payload, expiresIn) {
+    const secret = getSecret();
+    const options = {};
+    const exp = expiresIn || getExpiresIn();
+    if (typeof exp === "number") {
+      options.expiresIn = exp;
+    } else {
+      options.expiresIn = exp;
+    }
+    return jwt__default.default.sign(payload, secret, options);
+  },
+  /**
+   * Verify and decode a JWT token
+   */
+  verifyToken(token) {
+    return jwt__default.default.verify(token, getSecret());
+  },
+  /**
+   * Refresh a token — verifies the old one, issues a new one
+   */
+  refreshToken(token) {
+    const payload = auth.verifyToken(token);
+    const { iat, exp, ...data } = payload;
+    return auth.generateToken(data);
+  },
+  /**
+   * Express middleware — verifies Bearer token, sets req.user
+   * Responds with 401 if token is missing or invalid
+   */
+  authenticate() {
+    return (req, res, next) => {
+      const header = req.headers.authorization;
+      if (!header || !header.startsWith("Bearer ")) {
+        res.status(401).json({ error: "Authentication required" });
+        return;
+      }
+      try {
+        const token = header.slice(7);
+        req.user = auth.verifyToken(token);
+        next();
+      } catch {
+        res.status(401).json({ error: "Invalid or expired token" });
+      }
+    };
+  },
+  /**
+   * Express middleware — sets req.user if token present, continues regardless
+   */
+  optionalAuth() {
+    return (req, _res, next) => {
+      const header = req.headers.authorization;
+      if (header && header.startsWith("Bearer ")) {
+        try {
+          const token = header.slice(7);
+          req.user = auth.verifyToken(token);
+        } catch {
+        }
+      }
+      next();
+    };
+  },
+  /**
+   * Get the authenticated user from the request (throws if not present)
+   */
+  getUser(req) {
+    const user = req.user;
+    if (!user) {
+      throw new Error("No authenticated user on request. Use auth.authenticate() middleware first.");
+    }
+    return user;
+  }
+};
+
+exports.auth = auth;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/auth/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/internal/env.ts","../../src/internal/config.ts","../../src/auth/index.ts"],"names":["bcrypt","jwt"],"mappings":";;;;;;;;;;;AAIO,SAAS,MAAA,CAAO,KAAa,QAAA,EAAuC;AACzE,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,IAAK,QAAA;AAC7B;AAUO,SAAS,QAAA,GAAoB;AAClC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA;AAC3B;AAEO,SAAS,aAAa,UAAA,EAA0B;AACrD,EAAA,IAAI,CAAC,UAAS,EAAG;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iBAAiB,UAAU,CAAA,2DAAA;AAAA,KAC7B;AAAA,EACF;AACF;;;ACJA,IAAI,eAA0B,EAAC;AAMxB,SAAS,SAAA,GAAuB;AACrC,EAAA,OAAO,YAAA;AACT;ACfA,YAAA,CAAa,MAAM,CAAA;AAoBnB,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,EAAM,SAAA,IAAa,OAAO,YAAY,CAAA;AAC5D,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,MAAA,CAAO,IAAA,EAAM,YAAA,IAAgB,MAAA,CAAO,gBAAgB,CAAA,IAAK,IAAA;AAClE;AAEA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,MAAA,CAAO,MAAM,YAAA,IAAgB,EAAA;AACtC;AAIO,IAAM,IAAA,GAAO;AAAA;AAAA;AAAA;AAAA,EAIlB,MAAM,aAAa,SAAA,EAAoC;AACrD,IAAA,OAAOA,uBAAA,CAAO,IAAA,CAAK,SAAA,EAAW,SAAA,EAAW,CAAA;AAAA,EAC3C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAA,CAAe,SAAA,EAAmB,IAAA,EAAgC;AACtE,IAAA,OAAOA,uBAAA,CAAO,OAAA,CAAQ,SAAA,EAAW,IAAI,CAAA;AAAA,EACvC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,CAAc,SAAuB,SAAA,EAAqC;AACxE,IAAA,MAAM,SAAS,SAAA,EAAU;AACzB,IAAA,MAAM,UAA2B,EAAC;AAClC,IAAA,MAAM,GAAA,GAAM,aAAa,YAAA,EAAa;AACtC,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,MAAA,OAAA,CAAQ,SAAA,GAAY,GAAA;AAAA,IACtB,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,SAAA,GAAY,GAAA;AAAA,IACtB;AACA,IAAA,OAAOC,oBAAA,CAAI,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC1C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,KAAA,EAA6B;AACvC,IAAA,OAAOA,oBAAA,CAAI,MAAA,CAAO,KAAA,EAAO,SAAA,EAAW,CAAA;AAAA,EACtC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,KAAA,EAAuB;AAClC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAEtC,IAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAK,GAAG,MAAK,GAAI,OAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,cAAc,IAAoB,CAAA;AAAA,EAChD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAA,GAA+B;AAC7B,IAAA,OAAO,CAAC,GAAA,EAAc,GAAA,EAAe,IAAA,KAA6B;AAChE,MAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,aAAA;AAC3B,MAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC5C,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC5B,QAAC,GAAA,CAA6B,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAC3D,QAAA,IAAA,EAAK;AAAA,MACP,CAAA,CAAA,MAAQ;AACN,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,4BAA4B,CAAA;AAAA,MAC5D;AAAA,IACF,CAAA;AAAA,EACF,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA,GAA+B;AAC7B,IAAA,OAAO,CAAC,GAAA,EAAc,IAAA,EAAgB,IAAA,KAA6B;AACjE,MAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,aAAA;AAC3B,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC1C,QAAA,IAAI;AACF,UAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC5B,UAAC,GAAA,CAA6B,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAAA,QAC7D,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,EACF,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,GAAA,EAA4B;AAClC,IAAA,MAAM,OAAQ,GAAA,CAA6B,IAAA;AAC3C,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAI,MAAM,6EAA6E,CAAA;AAAA,IAC/F;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.cjs","sourcesContent":["/**\n * Environment variable helpers\n */\n\nexport function getEnv(key: string, fallback?: string): string | undefined {\n  return process.env[key] || fallback;\n}\n\nexport function requireEnv(key: string): string {\n  const val = process.env[key];\n  if (!val) {\n    throw new Error(`@coduckai/sdk: Missing required environment variable: ${key}`);\n  }\n  return val;\n}\n\nexport function isServer(): boolean {\n  return typeof window === 'undefined';\n}\n\nexport function assertServer(moduleName: string): void {\n  if (!isServer()) {\n    throw new Error(\n      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`\n    );\n  }\n}\n","/**\n * Global SDK configuration\n *\n * CoDuck apps use env vars automatically — no configure() needed.\n * Standalone usage can call configure() to override.\n */\n\nexport interface SDKConfig {\n  auth?: {\n    jwtSecret?: string;\n    jwtExpiresIn?: string;\n    bcryptRounds?: number;\n  };\n  db?: {\n    connectionString?: string;\n  };\n  client?: {\n    baseUrl?: string;\n    tokenKey?: string;\n  };\n}\n\nlet globalConfig: SDKConfig = {};\n\nexport function setConfig(config: SDKConfig): void {\n  globalConfig = { ...globalConfig, ...config };\n}\n\nexport function getConfig(): SDKConfig {\n  return globalConfig;\n}\n","/**\n * @coduckai/sdk/auth — Authentication module (server-only)\n *\n * Wraps bcrypt + jsonwebtoken. Drop-in replacement for hand-rolled auth.\n *\n * Usage:\n *   import { auth } from '@coduckai/sdk/auth';\n *   const hash = await auth.hashPassword('secret');\n *   const token = auth.generateToken({ id: 1, email: 'user@test.com' });\n *   router.get('/me', auth.authenticate(), handler);\n */\n\nimport { assertServer, getEnv } from '../internal/env';\nimport { getConfig } from '../internal/config';\n\nassertServer('auth');\n\nimport bcrypt from 'bcrypt';\nimport jwt from 'jsonwebtoken';\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\n\n// ── Types ──────────────────────────────────────────────\n\nexport interface TokenPayload {\n  id: number;\n  email: string;\n  [key: string]: unknown;\n}\n\ninterface AuthenticatedRequest extends Request {\n  user?: TokenPayload;\n}\n\n// ── Internal helpers ───────────────────────────────────\n\nfunction getSecret(): string {\n  const config = getConfig();\n  const secret = config.auth?.jwtSecret || getEnv('JWT_SECRET');\n  if (!secret) {\n    throw new Error('@coduckai/sdk/auth: JWT_SECRET environment variable is required');\n  }\n  return secret;\n}\n\nfunction getExpiresIn(): string {\n  const config = getConfig();\n  return config.auth?.jwtExpiresIn || getEnv('JWT_EXPIRES_IN') || '7d';\n}\n\nfunction getRounds(): number {\n  const config = getConfig();\n  return config.auth?.bcryptRounds || 12;\n}\n\n// ── Auth API ───────────────────────────────────────────\n\nexport const auth = {\n  /**\n   * Hash a plaintext password\n   */\n  async hashPassword(plaintext: string): Promise<string> {\n    return bcrypt.hash(plaintext, getRounds());\n  },\n\n  /**\n   * Verify a plaintext password against a hash\n   */\n  async verifyPassword(plaintext: string, hash: string): Promise<boolean> {\n    return bcrypt.compare(plaintext, hash);\n  },\n\n  /**\n   * Generate a signed JWT token\n   */\n  generateToken(payload: TokenPayload, expiresIn?: string | number): string {\n    const secret = getSecret();\n    const options: jwt.SignOptions = {};\n    const exp = expiresIn || getExpiresIn();\n    if (typeof exp === 'number') {\n      options.expiresIn = exp;\n    } else {\n      options.expiresIn = exp as any;\n    }\n    return jwt.sign(payload, secret, options);\n  },\n\n  /**\n   * Verify and decode a JWT token\n   */\n  verifyToken(token: string): TokenPayload {\n    return jwt.verify(token, getSecret()) as TokenPayload;\n  },\n\n  /**\n   * Refresh a token — verifies the old one, issues a new one\n   */\n  refreshToken(token: string): string {\n    const payload = auth.verifyToken(token);\n    // Strip jwt metadata before re-signing\n    const { iat, exp, ...data } = payload as TokenPayload & { iat?: number; exp?: number };\n    return auth.generateToken(data as TokenPayload);\n  },\n\n  /**\n   * Express middleware — verifies Bearer token, sets req.user\n   * Responds with 401 if token is missing or invalid\n   */\n  authenticate(): RequestHandler {\n    return (req: Request, res: Response, next: NextFunction): void => {\n      const header = req.headers.authorization;\n      if (!header || !header.startsWith('Bearer ')) {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n\n      try {\n        const token = header.slice(7);\n        (req as AuthenticatedRequest).user = auth.verifyToken(token);\n        next();\n      } catch {\n        res.status(401).json({ error: 'Invalid or expired token' });\n      }\n    };\n  },\n\n  /**\n   * Express middleware — sets req.user if token present, continues regardless\n   */\n  optionalAuth(): RequestHandler {\n    return (req: Request, _res: Response, next: NextFunction): void => {\n      const header = req.headers.authorization;\n      if (header && header.startsWith('Bearer ')) {\n        try {\n          const token = header.slice(7);\n          (req as AuthenticatedRequest).user = auth.verifyToken(token);\n        } catch {\n          // Invalid token — proceed without user\n        }\n      }\n      next();\n    };\n  },\n\n  /**\n   * Get the authenticated user from the request (throws if not present)\n   */\n  getUser(req: Request): TokenPayload {\n    const user = (req as AuthenticatedRequest).user;\n    if (!user) {\n      throw new Error('No authenticated user on request. Use auth.authenticate() middleware first.');\n    }\n    return user;\n  },\n};\n"]}

package/dist/auth/index.d.cts

@@ -0,0 +1,56 @@
+import { RequestHandler, Request } from 'express';
+
+/**
+ * @coduckai/sdk/auth — Authentication module (server-only)
+ *
+ * Wraps bcrypt + jsonwebtoken. Drop-in replacement for hand-rolled auth.
+ *
+ * Usage:
+ *   import { auth } from '@coduckai/sdk/auth';
+ *   const hash = await auth.hashPassword('secret');
+ *   const token = auth.generateToken({ id: 1, email: 'user@test.com' });
+ *   router.get('/me', auth.authenticate(), handler);
+ */
+
+interface TokenPayload {
+    id: number;
+    email: string;
+    [key: string]: unknown;
+}
+declare const auth: {
+    /**
+     * Hash a plaintext password
+     */
+    hashPassword(plaintext: string): Promise<string>;
+    /**
+     * Verify a plaintext password against a hash
+     */
+    verifyPassword(plaintext: string, hash: string): Promise<boolean>;
+    /**
+     * Generate a signed JWT token
+     */
+    generateToken(payload: TokenPayload, expiresIn?: string | number): string;
+    /**
+     * Verify and decode a JWT token
+     */
+    verifyToken(token: string): TokenPayload;
+    /**
+     * Refresh a token — verifies the old one, issues a new one
+     */
+    refreshToken(token: string): string;
+    /**
+     * Express middleware — verifies Bearer token, sets req.user
+     * Responds with 401 if token is missing or invalid
+     */
+    authenticate(): RequestHandler;
+    /**
+     * Express middleware — sets req.user if token present, continues regardless
+     */
+    optionalAuth(): RequestHandler;
+    /**
+     * Get the authenticated user from the request (throws if not present)
+     */
+    getUser(req: Request): TokenPayload;
+};
+
+export { type TokenPayload, auth };

package/dist/auth/index.d.ts

@@ -0,0 +1,56 @@
+import { RequestHandler, Request } from 'express';
+
+/**
+ * @coduckai/sdk/auth — Authentication module (server-only)
+ *
+ * Wraps bcrypt + jsonwebtoken. Drop-in replacement for hand-rolled auth.
+ *
+ * Usage:
+ *   import { auth } from '@coduckai/sdk/auth';
+ *   const hash = await auth.hashPassword('secret');
+ *   const token = auth.generateToken({ id: 1, email: 'user@test.com' });
+ *   router.get('/me', auth.authenticate(), handler);
+ */
+
+interface TokenPayload {
+    id: number;
+    email: string;
+    [key: string]: unknown;
+}
+declare const auth: {
+    /**
+     * Hash a plaintext password
+     */
+    hashPassword(plaintext: string): Promise<string>;
+    /**
+     * Verify a plaintext password against a hash
+     */
+    verifyPassword(plaintext: string, hash: string): Promise<boolean>;
+    /**
+     * Generate a signed JWT token
+     */
+    generateToken(payload: TokenPayload, expiresIn?: string | number): string;
+    /**
+     * Verify and decode a JWT token
+     */
+    verifyToken(token: string): TokenPayload;
+    /**
+     * Refresh a token — verifies the old one, issues a new one
+     */
+    refreshToken(token: string): string;
+    /**
+     * Express middleware — verifies Bearer token, sets req.user
+     * Responds with 401 if token is missing or invalid
+     */
+    authenticate(): RequestHandler;
+    /**
+     * Express middleware — sets req.user if token present, continues regardless
+     */
+    optionalAuth(): RequestHandler;
+    /**
+     * Get the authenticated user from the request (throws if not present)
+     */
+    getUser(req: Request): TokenPayload;
+};
+
+export { type TokenPayload, auth };

package/dist/auth/index.js

@@ -0,0 +1,132 @@
+import bcrypt from 'bcrypt';
+import jwt from 'jsonwebtoken';
+
+// src/internal/env.ts
+function getEnv(key, fallback) {
+  return process.env[key] || fallback;
+}
+function isServer() {
+  return typeof window === "undefined";
+}
+function assertServer(moduleName) {
+  if (!isServer()) {
+    throw new Error(
+      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`
+    );
+  }
+}
+
+// src/internal/config.ts
+var globalConfig = {};
+function getConfig() {
+  return globalConfig;
+}
+assertServer("auth");
+function getSecret() {
+  const config = getConfig();
+  const secret = config.auth?.jwtSecret || getEnv("JWT_SECRET");
+  if (!secret) {
+    throw new Error("@coduckai/sdk/auth: JWT_SECRET environment variable is required");
+  }
+  return secret;
+}
+function getExpiresIn() {
+  const config = getConfig();
+  return config.auth?.jwtExpiresIn || getEnv("JWT_EXPIRES_IN") || "7d";
+}
+function getRounds() {
+  const config = getConfig();
+  return config.auth?.bcryptRounds || 12;
+}
+var auth = {
+  /**
+   * Hash a plaintext password
+   */
+  async hashPassword(plaintext) {
+    return bcrypt.hash(plaintext, getRounds());
+  },
+  /**
+   * Verify a plaintext password against a hash
+   */
+  async verifyPassword(plaintext, hash) {
+    return bcrypt.compare(plaintext, hash);
+  },
+  /**
+   * Generate a signed JWT token
+   */
+  generateToken(payload, expiresIn) {
+    const secret = getSecret();
+    const options = {};
+    const exp = expiresIn || getExpiresIn();
+    if (typeof exp === "number") {
+      options.expiresIn = exp;
+    } else {
+      options.expiresIn = exp;
+    }
+    return jwt.sign(payload, secret, options);
+  },
+  /**
+   * Verify and decode a JWT token
+   */
+  verifyToken(token) {
+    return jwt.verify(token, getSecret());
+  },
+  /**
+   * Refresh a token — verifies the old one, issues a new one
+   */
+  refreshToken(token) {
+    const payload = auth.verifyToken(token);
+    const { iat, exp, ...data } = payload;
+    return auth.generateToken(data);
+  },
+  /**
+   * Express middleware — verifies Bearer token, sets req.user
+   * Responds with 401 if token is missing or invalid
+   */
+  authenticate() {
+    return (req, res, next) => {
+      const header = req.headers.authorization;
+      if (!header || !header.startsWith("Bearer ")) {
+        res.status(401).json({ error: "Authentication required" });
+        return;
+      }
+      try {
+        const token = header.slice(7);
+        req.user = auth.verifyToken(token);
+        next();
+      } catch {
+        res.status(401).json({ error: "Invalid or expired token" });
+      }
+    };
+  },
+  /**
+   * Express middleware — sets req.user if token present, continues regardless
+   */
+  optionalAuth() {
+    return (req, _res, next) => {
+      const header = req.headers.authorization;
+      if (header && header.startsWith("Bearer ")) {
+        try {
+          const token = header.slice(7);
+          req.user = auth.verifyToken(token);
+        } catch {
+        }
+      }
+      next();
+    };
+  },
+  /**
+   * Get the authenticated user from the request (throws if not present)
+   */
+  getUser(req) {
+    const user = req.user;
+    if (!user) {
+      throw new Error("No authenticated user on request. Use auth.authenticate() middleware first.");
+    }
+    return user;
+  }
+};
+
+export { auth };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/internal/env.ts","../../src/internal/config.ts","../../src/auth/index.ts"],"names":[],"mappings":";;;;AAIO,SAAS,MAAA,CAAO,KAAa,QAAA,EAAuC;AACzE,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,IAAK,QAAA;AAC7B;AAUO,SAAS,QAAA,GAAoB;AAClC,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA;AAC3B;AAEO,SAAS,aAAa,UAAA,EAA0B;AACrD,EAAA,IAAI,CAAC,UAAS,EAAG;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iBAAiB,UAAU,CAAA,2DAAA;AAAA,KAC7B;AAAA,EACF;AACF;;;ACJA,IAAI,eAA0B,EAAC;AAMxB,SAAS,SAAA,GAAuB;AACrC,EAAA,OAAO,YAAA;AACT;ACfA,YAAA,CAAa,MAAM,CAAA;AAoBnB,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,EAAM,SAAA,IAAa,OAAO,YAAY,CAAA;AAC5D,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,MAAA,CAAO,IAAA,EAAM,YAAA,IAAgB,MAAA,CAAO,gBAAgB,CAAA,IAAK,IAAA;AAClE;AAEA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,MAAA,CAAO,MAAM,YAAA,IAAgB,EAAA;AACtC;AAIO,IAAM,IAAA,GAAO;AAAA;AAAA;AAAA;AAAA,EAIlB,MAAM,aAAa,SAAA,EAAoC;AACrD,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,SAAA,EAAW,CAAA;AAAA,EAC3C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAA,CAAe,SAAA,EAAmB,IAAA,EAAgC;AACtE,IAAA,OAAO,MAAA,CAAO,OAAA,CAAQ,SAAA,EAAW,IAAI,CAAA;AAAA,EACvC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,CAAc,SAAuB,SAAA,EAAqC;AACxE,IAAA,MAAM,SAAS,SAAA,EAAU;AACzB,IAAA,MAAM,UAA2B,EAAC;AAClC,IAAA,MAAM,GAAA,GAAM,aAAa,YAAA,EAAa;AACtC,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,MAAA,OAAA,CAAQ,SAAA,GAAY,GAAA;AAAA,IACtB,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,SAAA,GAAY,GAAA;AAAA,IACtB;AACA,IAAA,OAAO,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC1C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,KAAA,EAA6B;AACvC,IAAA,OAAO,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,SAAA,EAAW,CAAA;AAAA,EACtC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,KAAA,EAAuB;AAClC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAEtC,IAAA,MAAM,EAAE,GAAA,EAAK,GAAA,EAAK,GAAG,MAAK,GAAI,OAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,cAAc,IAAoB,CAAA;AAAA,EAChD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAA,GAA+B;AAC7B,IAAA,OAAO,CAAC,GAAA,EAAc,GAAA,EAAe,IAAA,KAA6B;AAChE,MAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,aAAA;AAC3B,MAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC5C,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC5B,QAAC,GAAA,CAA6B,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAC3D,QAAA,IAAA,EAAK;AAAA,MACP,CAAA,CAAA,MAAQ;AACN,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,4BAA4B,CAAA;AAAA,MAC5D;AAAA,IACF,CAAA;AAAA,EACF,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA,GAA+B;AAC7B,IAAA,OAAO,CAAC,GAAA,EAAc,IAAA,EAAgB,IAAA,KAA6B;AACjE,MAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,aAAA;AAC3B,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC1C,QAAA,IAAI;AACF,UAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC5B,UAAC,GAAA,CAA6B,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA;AAAA,QAC7D,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,EACF,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,GAAA,EAA4B;AAClC,IAAA,MAAM,OAAQ,GAAA,CAA6B,IAAA;AAC3C,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAI,MAAM,6EAA6E,CAAA;AAAA,IAC/F;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["/**\n * Environment variable helpers\n */\n\nexport function getEnv(key: string, fallback?: string): string | undefined {\n  return process.env[key] || fallback;\n}\n\nexport function requireEnv(key: string): string {\n  const val = process.env[key];\n  if (!val) {\n    throw new Error(`@coduckai/sdk: Missing required environment variable: ${key}`);\n  }\n  return val;\n}\n\nexport function isServer(): boolean {\n  return typeof window === 'undefined';\n}\n\nexport function assertServer(moduleName: string): void {\n  if (!isServer()) {\n    throw new Error(\n      `@coduckai/sdk/${moduleName} is server-only. Use @coduckai/sdk/client for browser code.`\n    );\n  }\n}\n","/**\n * Global SDK configuration\n *\n * CoDuck apps use env vars automatically — no configure() needed.\n * Standalone usage can call configure() to override.\n */\n\nexport interface SDKConfig {\n  auth?: {\n    jwtSecret?: string;\n    jwtExpiresIn?: string;\n    bcryptRounds?: number;\n  };\n  db?: {\n    connectionString?: string;\n  };\n  client?: {\n    baseUrl?: string;\n    tokenKey?: string;\n  };\n}\n\nlet globalConfig: SDKConfig = {};\n\nexport function setConfig(config: SDKConfig): void {\n  globalConfig = { ...globalConfig, ...config };\n}\n\nexport function getConfig(): SDKConfig {\n  return globalConfig;\n}\n","/**\n * @coduckai/sdk/auth — Authentication module (server-only)\n *\n * Wraps bcrypt + jsonwebtoken. Drop-in replacement for hand-rolled auth.\n *\n * Usage:\n *   import { auth } from '@coduckai/sdk/auth';\n *   const hash = await auth.hashPassword('secret');\n *   const token = auth.generateToken({ id: 1, email: 'user@test.com' });\n *   router.get('/me', auth.authenticate(), handler);\n */\n\nimport { assertServer, getEnv } from '../internal/env';\nimport { getConfig } from '../internal/config';\n\nassertServer('auth');\n\nimport bcrypt from 'bcrypt';\nimport jwt from 'jsonwebtoken';\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\n\n// ── Types ──────────────────────────────────────────────\n\nexport interface TokenPayload {\n  id: number;\n  email: string;\n  [key: string]: unknown;\n}\n\ninterface AuthenticatedRequest extends Request {\n  user?: TokenPayload;\n}\n\n// ── Internal helpers ───────────────────────────────────\n\nfunction getSecret(): string {\n  const config = getConfig();\n  const secret = config.auth?.jwtSecret || getEnv('JWT_SECRET');\n  if (!secret) {\n    throw new Error('@coduckai/sdk/auth: JWT_SECRET environment variable is required');\n  }\n  return secret;\n}\n\nfunction getExpiresIn(): string {\n  const config = getConfig();\n  return config.auth?.jwtExpiresIn || getEnv('JWT_EXPIRES_IN') || '7d';\n}\n\nfunction getRounds(): number {\n  const config = getConfig();\n  return config.auth?.bcryptRounds || 12;\n}\n\n// ── Auth API ───────────────────────────────────────────\n\nexport const auth = {\n  /**\n   * Hash a plaintext password\n   */\n  async hashPassword(plaintext: string): Promise<string> {\n    return bcrypt.hash(plaintext, getRounds());\n  },\n\n  /**\n   * Verify a plaintext password against a hash\n   */\n  async verifyPassword(plaintext: string, hash: string): Promise<boolean> {\n    return bcrypt.compare(plaintext, hash);\n  },\n\n  /**\n   * Generate a signed JWT token\n   */\n  generateToken(payload: TokenPayload, expiresIn?: string | number): string {\n    const secret = getSecret();\n    const options: jwt.SignOptions = {};\n    const exp = expiresIn || getExpiresIn();\n    if (typeof exp === 'number') {\n      options.expiresIn = exp;\n    } else {\n      options.expiresIn = exp as any;\n    }\n    return jwt.sign(payload, secret, options);\n  },\n\n  /**\n   * Verify and decode a JWT token\n   */\n  verifyToken(token: string): TokenPayload {\n    return jwt.verify(token, getSecret()) as TokenPayload;\n  },\n\n  /**\n   * Refresh a token — verifies the old one, issues a new one\n   */\n  refreshToken(token: string): string {\n    const payload = auth.verifyToken(token);\n    // Strip jwt metadata before re-signing\n    const { iat, exp, ...data } = payload as TokenPayload & { iat?: number; exp?: number };\n    return auth.generateToken(data as TokenPayload);\n  },\n\n  /**\n   * Express middleware — verifies Bearer token, sets req.user\n   * Responds with 401 if token is missing or invalid\n   */\n  authenticate(): RequestHandler {\n    return (req: Request, res: Response, next: NextFunction): void => {\n      const header = req.headers.authorization;\n      if (!header || !header.startsWith('Bearer ')) {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n\n      try {\n        const token = header.slice(7);\n        (req as AuthenticatedRequest).user = auth.verifyToken(token);\n        next();\n      } catch {\n        res.status(401).json({ error: 'Invalid or expired token' });\n      }\n    };\n  },\n\n  /**\n   * Express middleware — sets req.user if token present, continues regardless\n   */\n  optionalAuth(): RequestHandler {\n    return (req: Request, _res: Response, next: NextFunction): void => {\n      const header = req.headers.authorization;\n      if (header && header.startsWith('Bearer ')) {\n        try {\n          const token = header.slice(7);\n          (req as AuthenticatedRequest).user = auth.verifyToken(token);\n        } catch {\n          // Invalid token — proceed without user\n        }\n      }\n      next();\n    };\n  },\n\n  /**\n   * Get the authenticated user from the request (throws if not present)\n   */\n  getUser(req: Request): TokenPayload {\n    const user = (req as AuthenticatedRequest).user;\n    if (!user) {\n      throw new Error('No authenticated user on request. Use auth.authenticate() middleware first.');\n    }\n    return user;\n  },\n};\n"]}

package/dist/client/index.cjs

@@ -0,0 +1,70 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var axios = require('axios');
+
+var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var axios__default = /*#__PURE__*/_interopDefault(axios);
+
+// src/client/index.ts
+var TOKEN_KEY = "token";
+function setToken(token) {
+  if (typeof localStorage !== "undefined") {
+    localStorage.setItem(TOKEN_KEY, token);
+  }
+}
+function getToken() {
+  if (typeof localStorage !== "undefined") {
+    return localStorage.getItem(TOKEN_KEY);
+  }
+  return null;
+}
+function clearToken() {
+  if (typeof localStorage !== "undefined") {
+    localStorage.removeItem(TOKEN_KEY);
+  }
+}
+function isAuthenticated() {
+  return !!getToken();
+}
+function getBaseUrl() {
+  if (typeof ({ url: (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)) }) !== "undefined" && undefined?.VITE_API_URL) {
+    return undefined.VITE_API_URL;
+  }
+  return "/api";
+}
+var api = axios__default.default.create({
+  baseURL: getBaseUrl(),
+  headers: { "Content-Type": "application/json" }
+});
+api.interceptors.request.use((config) => {
+  const token = getToken();
+  if (token) {
+    config.headers.Authorization = `Bearer ${token}`;
+  }
+  return config;
+});
+api.interceptors.response.use(
+  (response) => response,
+  (error) => {
+    if (error.response?.status === 401) {
+      clearToken();
+      if (typeof window !== "undefined") {
+        window.location.href = "/login";
+      }
+    }
+    return Promise.reject(error);
+  }
+);
+var client_default = api;
+
+exports.clearToken = clearToken;
+exports.default = client_default;
+exports.getToken = getToken;
+exports.isAuthenticated = isAuthenticated;
+exports.setToken = setToken;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/client/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/index.ts"],"names":["axios"],"mappings":";;;;;;;;;;;;AAeA,IAAM,SAAA,GAAY,OAAA;AAEX,SAAS,SAAS,KAAA,EAAqB;AAC5C,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACvC,IAAA,YAAA,CAAa,OAAA,CAAQ,WAAW,KAAK,CAAA;AAAA,EACvC;AACF;AAEO,SAAS,QAAA,GAA0B;AACxC,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACvC,IAAA,OAAO,YAAA,CAAa,QAAQ,SAAS,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,UAAA,GAAmB;AACjC,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACvC,IAAA,YAAA,CAAa,WAAW,SAAS,CAAA;AAAA,EACnC;AACF;AAEO,SAAS,eAAA,GAA2B;AACzC,EAAA,OAAO,CAAC,CAAC,QAAA,EAAS;AACpB;AAIA,SAAS,UAAA,GAAqB;AAE5B,EAAA,IAAI,OAAO,sQAAA,KAAgB,WAAA,IAAgB,WAAyB,YAAA,EAAc;AAChF,IAAA,OAAQ,SAAoB,CAAI,YAAA;AAAA,EAClC;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,GAAA,GAAqBA,uBAAM,MAAA,CAAO;AAAA,EACtC,SAAS,UAAA,EAAW;AAAA,EACpB,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAC7B,CAAC,CAAA;AAGD,GAAA,CAAI,YAAA,CAAa,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW;AACvC,EAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,MAAA;AACT,CAAC,CAAA;AAGD,GAAA,CAAI,aAAa,QAAA,CAAS,GAAA;AAAA,EACxB,CAAC,QAAA,KAAa,QAAA;AAAA,EACd,CAAC,KAAA,KAAU;AACT,IAAA,IAAI,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,EAAK;AAClC,MAAA,UAAA,EAAW;AACX,MAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,QAAA,MAAA,CAAO,SAAS,IAAA,GAAO,QAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,EAC7B;AACF,CAAA;AAEA,IAAO,cAAA,GAAQ","file":"index.cjs","sourcesContent":["/**\n * @coduckai/sdk/client — Frontend API Client (browser-only)\n *\n * Pre-configured Axios instance with auth interceptor.\n *\n * Usage:\n *   import api, { setToken, clearToken } from '@coduckai/sdk/client';\n *   const { data } = await api.get('/recipes');\n *   setToken(loginData.token);\n */\n\nimport axios, { type AxiosInstance } from 'axios';\n\n// ── Token Management ───────────────────────────────────\n\nconst TOKEN_KEY = 'token';\n\nexport function setToken(token: string): void {\n  if (typeof localStorage !== 'undefined') {\n    localStorage.setItem(TOKEN_KEY, token);\n  }\n}\n\nexport function getToken(): string | null {\n  if (typeof localStorage !== 'undefined') {\n    return localStorage.getItem(TOKEN_KEY);\n  }\n  return null;\n}\n\nexport function clearToken(): void {\n  if (typeof localStorage !== 'undefined') {\n    localStorage.removeItem(TOKEN_KEY);\n  }\n}\n\nexport function isAuthenticated(): boolean {\n  return !!getToken();\n}\n\n// ── Axios Instance ─────────────────────────────────────\n\nfunction getBaseUrl(): string {\n  // Vite: VITE_API_URL\n  if (typeof import.meta !== 'undefined' && (import.meta as any).env?.VITE_API_URL) {\n    return (import.meta as any).env.VITE_API_URL;\n  }\n  // Fallback: relative /api\n  return '/api';\n}\n\nconst api: AxiosInstance = axios.create({\n  baseURL: getBaseUrl(),\n  headers: { 'Content-Type': 'application/json' },\n});\n\n// Request interceptor — attach Bearer token\napi.interceptors.request.use((config) => {\n  const token = getToken();\n  if (token) {\n    config.headers.Authorization = `Bearer ${token}`;\n  }\n  return config;\n});\n\n// Response interceptor — handle 401\napi.interceptors.response.use(\n  (response) => response,\n  (error) => {\n    if (error.response?.status === 401) {\n      clearToken();\n      if (typeof window !== 'undefined') {\n        window.location.href = '/login';\n      }\n    }\n    return Promise.reject(error);\n  }\n);\n\nexport default api;\n"]}

package/dist/client/index.d.cts

@@ -0,0 +1,20 @@
+import { AxiosInstance } from 'axios';
+
+/**
+ * @coduckai/sdk/client — Frontend API Client (browser-only)
+ *
+ * Pre-configured Axios instance with auth interceptor.
+ *
+ * Usage:
+ *   import api, { setToken, clearToken } from '@coduckai/sdk/client';
+ *   const { data } = await api.get('/recipes');
+ *   setToken(loginData.token);
+ */
+
+declare function setToken(token: string): void;
+declare function getToken(): string | null;
+declare function clearToken(): void;
+declare function isAuthenticated(): boolean;
+declare const api: AxiosInstance;
+
+export { clearToken, api as default, getToken, isAuthenticated, setToken };

package/dist/client/index.d.ts

@@ -0,0 +1,20 @@
+import { AxiosInstance } from 'axios';
+
+/**
+ * @coduckai/sdk/client — Frontend API Client (browser-only)
+ *
+ * Pre-configured Axios instance with auth interceptor.
+ *
+ * Usage:
+ *   import api, { setToken, clearToken } from '@coduckai/sdk/client';
+ *   const { data } = await api.get('/recipes');
+ *   setToken(loginData.token);
+ */
+
+declare function setToken(token: string): void;
+declare function getToken(): string | null;
+declare function clearToken(): void;
+declare function isAuthenticated(): boolean;
+declare const api: AxiosInstance;
+
+export { clearToken, api as default, getToken, isAuthenticated, setToken };