@dailyautomations/auth 1.0.0 → 1.1.0

package/dist/nextjs/cookies.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @daily/auth/nextjs Cookie Utilities
+ * Helpers for Supabase SSR cookie handling
+ */
+import type { CookieMethods, CookieOptions } from './types.js';
+/**
+ * Parse cookies from a cookie header string
+ */
+export declare function parseCookies(cookieHeader: string | null): Map<string, string>;
+/**
+ * Serialize a cookie to a Set-Cookie header value
+ */
+export declare function serializeCookie(options: CookieOptions): string;
+/**
+ * Create cookie methods adapter for Next.js cookies() function
+ * Works with the ReadonlyRequestCookies from next/headers
+ */
+export declare function createCookieAdapter(getCookie: (name: string) => {
+    name: string;
+    value: string;
+} | undefined, setCookie: (name: string, value: string, options?: Record<string, unknown>) => void, deleteCookie: (name: string, options?: Record<string, unknown>) => void): CookieMethods;
+/**
+ * Default cookie options for auth tokens
+ */
+export declare const DEFAULT_COOKIE_OPTIONS: Partial<CookieOptions>;
+//# sourceMappingURL=cookies.d.ts.map

package/dist/nextjs/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/nextjs/cookies.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE/D;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAY7E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAuB9D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACxE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EACnF,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACtE,aAAa,CAYf;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,aAAa,CAMzD,CAAC"}

package/dist/nextjs/cookies.js

@@ -0,0 +1,78 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Cookie Utilities
+ * Helpers for Supabase SSR cookie handling
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_COOKIE_OPTIONS = void 0;
+exports.parseCookies = parseCookies;
+exports.serializeCookie = serializeCookie;
+exports.createCookieAdapter = createCookieAdapter;
+/**
+ * Parse cookies from a cookie header string
+ */
+function parseCookies(cookieHeader) {
+    const cookies = new Map();
+    if (!cookieHeader)
+        return cookies;
+    cookieHeader.split(';').forEach((cookie) => {
+        const [name, ...rest] = cookie.trim().split('=');
+        if (name && rest.length > 0) {
+            cookies.set(name, rest.join('='));
+        }
+    });
+    return cookies;
+}
+/**
+ * Serialize a cookie to a Set-Cookie header value
+ */
+function serializeCookie(options) {
+    let cookie = `${options.name}=${options.value}`;
+    if (options.maxAge !== undefined) {
+        cookie += `; Max-Age=${options.maxAge}`;
+    }
+    if (options.path) {
+        cookie += `; Path=${options.path}`;
+    }
+    if (options.domain) {
+        cookie += `; Domain=${options.domain}`;
+    }
+    if (options.secure) {
+        cookie += '; Secure';
+    }
+    if (options.httpOnly) {
+        cookie += '; HttpOnly';
+    }
+    if (options.sameSite) {
+        cookie += `; SameSite=${options.sameSite}`;
+    }
+    return cookie;
+}
+/**
+ * Create cookie methods adapter for Next.js cookies() function
+ * Works with the ReadonlyRequestCookies from next/headers
+ */
+function createCookieAdapter(getCookie, setCookie, deleteCookie) {
+    return {
+        get(name) {
+            return getCookie(name);
+        },
+        set(name, value, options) {
+            setCookie(name, value, options);
+        },
+        remove(name, options) {
+            deleteCookie(name, options);
+        },
+    };
+}
+/**
+ * Default cookie options for auth tokens
+ */
+exports.DEFAULT_COOKIE_OPTIONS = {
+    path: '/',
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    maxAge: 60 * 60 * 24 * 7, // 7 days
+};
+//# sourceMappingURL=cookies.js.map

package/dist/nextjs/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/nextjs/cookies.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAOH,oCAYC;AAKD,0CAuBC;AAMD,kDAgBC;AAjED;;GAEG;AACH,SAAgB,YAAY,CAAC,YAA2B;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC;IAElC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACzC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAsB;IACpD,IAAI,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,SAAwE,EACxE,SAAmF,EACnF,YAAuE;IAEvE,OAAO;QACL,GAAG,CAAC,IAAY;YACd,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAA+C;YAC9E,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,CAAC,IAAY,EAAE,OAA0D;YAC7E,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACU,QAAA,sBAAsB,GAA2B;IAC5D,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAC7C,QAAQ,EAAE,KAAK;IACf,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS;CACpC,CAAC"}

package/dist/nextjs/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * @daily/auth/nextjs
+ * Next.js SSR authentication for Daily applications
+ *
+ * @example
+ * // Server Component
+ * import { cookies } from 'next/headers';
+ * import { getServerSession } from '@dailyautomations/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const session = await getServerSession(authOptions, cookieStore);
+ *   if (!session) redirect('/login');
+ *   return <div>Hello {session.user.email}</div>;
+ * }
+ *
+ * @example
+ * // Middleware
+ * import { createDailyMiddleware } from '@dailyautomations/auth/nextjs';
+ *
+ * export const middleware = createDailyMiddleware({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   publicPaths: ['/login', '/signup'],
+ *   loginUrl: '/login',
+ * });
+ *
+ * @example
+ * // Route Handler
+ * import { withAuth, ApiResponse } from '@dailyautomations/auth/nextjs';
+ *
+ * export const GET = withAuth(authOptions, async (request, { user }) => {
+ *   return ApiResponse.ok({ email: user.email });
+ * });
+ */
+export { createDailyServerClient, createDailyAdminClient, extractProjectRef, } from './server.js';
+export { createDailyMiddleware, createMiddlewareMatcher, } from './middleware.js';
+export { getServerSession, requireServerSession, isAuthenticated, } from './session.js';
+export { withAuth, createAuthHandler, ApiResponse, } from './route.js';
+export { parseCookies, serializeCookie, createCookieAdapter, DEFAULT_COOKIE_OPTIONS, } from './cookies.js';
+export type { ServerAuthContext, ServerSessionResult, DailyServerClientOptions, DailyMiddlewareOptions, AuthenticatedHandler, WithAuthOptions, CookieOptions, CookieMethods, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/nextjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nextjs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC"}

package/dist/nextjs/index.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * @daily/auth/nextjs
+ * Next.js SSR authentication for Daily applications
+ *
+ * @example
+ * // Server Component
+ * import { cookies } from 'next/headers';
+ * import { getServerSession } from '@dailyautomations/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const session = await getServerSession(authOptions, cookieStore);
+ *   if (!session) redirect('/login');
+ *   return <div>Hello {session.user.email}</div>;
+ * }
+ *
+ * @example
+ * // Middleware
+ * import { createDailyMiddleware } from '@dailyautomations/auth/nextjs';
+ *
+ * export const middleware = createDailyMiddleware({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   publicPaths: ['/login', '/signup'],
+ *   loginUrl: '/login',
+ * });
+ *
+ * @example
+ * // Route Handler
+ * import { withAuth, ApiResponse } from '@dailyautomations/auth/nextjs';
+ *
+ * export const GET = withAuth(authOptions, async (request, { user }) => {
+ *   return ApiResponse.ok({ email: user.email });
+ * });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_COOKIE_OPTIONS = exports.createCookieAdapter = exports.serializeCookie = exports.parseCookies = exports.ApiResponse = exports.createAuthHandler = exports.withAuth = exports.isAuthenticated = exports.requireServerSession = exports.getServerSession = exports.createMiddlewareMatcher = exports.createDailyMiddleware = exports.extractProjectRef = exports.createDailyAdminClient = exports.createDailyServerClient = void 0;
+// Server client
+var server_js_1 = require("./server.js");
+Object.defineProperty(exports, "createDailyServerClient", { enumerable: true, get: function () { return server_js_1.createDailyServerClient; } });
+Object.defineProperty(exports, "createDailyAdminClient", { enumerable: true, get: function () { return server_js_1.createDailyAdminClient; } });
+Object.defineProperty(exports, "extractProjectRef", { enumerable: true, get: function () { return server_js_1.extractProjectRef; } });
+// Middleware
+var middleware_js_1 = require("./middleware.js");
+Object.defineProperty(exports, "createDailyMiddleware", { enumerable: true, get: function () { return middleware_js_1.createDailyMiddleware; } });
+Object.defineProperty(exports, "createMiddlewareMatcher", { enumerable: true, get: function () { return middleware_js_1.createMiddlewareMatcher; } });
+// Session
+var session_js_1 = require("./session.js");
+Object.defineProperty(exports, "getServerSession", { enumerable: true, get: function () { return session_js_1.getServerSession; } });
+Object.defineProperty(exports, "requireServerSession", { enumerable: true, get: function () { return session_js_1.requireServerSession; } });
+Object.defineProperty(exports, "isAuthenticated", { enumerable: true, get: function () { return session_js_1.isAuthenticated; } });
+// Route handlers
+var route_js_1 = require("./route.js");
+Object.defineProperty(exports, "withAuth", { enumerable: true, get: function () { return route_js_1.withAuth; } });
+Object.defineProperty(exports, "createAuthHandler", { enumerable: true, get: function () { return route_js_1.createAuthHandler; } });
+Object.defineProperty(exports, "ApiResponse", { enumerable: true, get: function () { return route_js_1.ApiResponse; } });
+// Cookie utilities
+var cookies_js_1 = require("./cookies.js");
+Object.defineProperty(exports, "parseCookies", { enumerable: true, get: function () { return cookies_js_1.parseCookies; } });
+Object.defineProperty(exports, "serializeCookie", { enumerable: true, get: function () { return cookies_js_1.serializeCookie; } });
+Object.defineProperty(exports, "createCookieAdapter", { enumerable: true, get: function () { return cookies_js_1.createCookieAdapter; } });
+Object.defineProperty(exports, "DEFAULT_COOKIE_OPTIONS", { enumerable: true, get: function () { return cookies_js_1.DEFAULT_COOKIE_OPTIONS; } });
+//# sourceMappingURL=index.js.map

package/dist/nextjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nextjs/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,gBAAgB;AAChB,yCAIqB;AAHnB,oHAAA,uBAAuB,OAAA;AACvB,mHAAA,sBAAsB,OAAA;AACtB,8GAAA,iBAAiB,OAAA;AAGnB,aAAa;AACb,iDAGyB;AAFvB,sHAAA,qBAAqB,OAAA;AACrB,wHAAA,uBAAuB,OAAA;AAGzB,UAAU;AACV,2CAIsB;AAHpB,8GAAA,gBAAgB,OAAA;AAChB,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAGjB,iBAAiB;AACjB,uCAIoB;AAHlB,oGAAA,QAAQ,OAAA;AACR,6GAAA,iBAAiB,OAAA;AACjB,uGAAA,WAAW,OAAA;AAGb,mBAAmB;AACnB,2CAKsB;AAJpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,iHAAA,mBAAmB,OAAA;AACnB,oHAAA,sBAAsB,OAAA"}

package/dist/nextjs/middleware.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @daily/auth/nextjs Middleware
+ * Next.js middleware for route protection
+ */
+import type { NextRequest } from 'next/server';
+import { NextResponse } from 'next/server';
+import type { DailyMiddlewareOptions } from './types.js';
+/**
+ * Create Next.js middleware for route protection
+ *
+ * @example
+ * // middleware.ts
+ * import { createDailyMiddleware } from '@daily/auth/nextjs';
+ *
+ * export const middleware = createDailyMiddleware({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   publicPaths: ['/login', '/signup', '/api/health'],
+ *   loginUrl: '/login',
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
+ * };
+ */
+export declare function createDailyMiddleware(options: DailyMiddlewareOptions): (request: NextRequest) => Promise<NextResponse>;
+/**
+ * Utility to create a matcher config for Next.js middleware
+ * Excludes static files and images by default
+ */
+export declare function createMiddlewareMatcher(additionalExclusions?: string[]): string[];
+//# sourceMappingURL=middleware.d.ts.map

package/dist/nextjs/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/nextjs/middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,IAQlC,SAAS,WAAW,KAAG,OAAO,CAAC,YAAY,CAAC,CA0D9E;AA4BD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,oBAAoB,GAAE,MAAM,EAAO,GAClC,MAAM,EAAE,CAWV"}

package/dist/nextjs/middleware.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Middleware
+ * Next.js middleware for route protection
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDailyMiddleware = createDailyMiddleware;
+exports.createMiddlewareMatcher = createMiddlewareMatcher;
+const ssr_1 = require("@supabase/ssr");
+const server_1 = require("next/server");
+/**
+ * Create Next.js middleware for route protection
+ *
+ * @example
+ * // middleware.ts
+ * import { createDailyMiddleware } from '@daily/auth/nextjs';
+ *
+ * export const middleware = createDailyMiddleware({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   publicPaths: ['/login', '/signup', '/api/health'],
+ *   loginUrl: '/login',
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
+ * };
+ */
+function createDailyMiddleware(options) {
+    const { supabaseUrl, supabaseAnonKey, publicPaths = [], loginUrl = '/login', } = options;
+    return async function middleware(request) {
+        // Create response to pass to supabase client
+        let response = server_1.NextResponse.next({
+            request: {
+                headers: request.headers,
+            },
+        });
+        const supabase = (0, ssr_1.createServerClient)(supabaseUrl, supabaseAnonKey, {
+            cookies: {
+                getAll() {
+                    return request.cookies.getAll();
+                },
+                setAll(cookiesToSet) {
+                    // Update request cookies
+                    cookiesToSet.forEach(({ name, value }) => {
+                        request.cookies.set(name, value);
+                    });
+                    // Create new response with updated cookies
+                    response = server_1.NextResponse.next({
+                        request: {
+                            headers: request.headers,
+                        },
+                    });
+                    // Set cookies on response
+                    cookiesToSet.forEach(({ name, value, options: cookieOptions }) => {
+                        response.cookies.set(name, value, cookieOptions);
+                    });
+                },
+            },
+        });
+        // Check if path is public
+        const pathname = request.nextUrl.pathname;
+        const isPublic = isPublicPath(pathname, publicPaths);
+        if (isPublic) {
+            // Refresh session even on public paths (keeps tokens fresh)
+            await supabase.auth.getUser();
+            return response;
+        }
+        // Protected path - verify authentication
+        const { data: { user }, error } = await supabase.auth.getUser();
+        if (error || !user) {
+            // Store the original URL to redirect back after login
+            const redirectUrl = new URL(loginUrl, request.url);
+            redirectUrl.searchParams.set('redirectTo', pathname);
+            return server_1.NextResponse.redirect(redirectUrl);
+        }
+        // User is authenticated, continue
+        return response;
+    };
+}
+/**
+ * Check if a path matches any public path patterns
+ */
+function isPublicPath(pathname, publicPaths) {
+    return publicPaths.some((pattern) => {
+        // Exact match
+        if (pattern === pathname) {
+            return true;
+        }
+        // Wildcard match: /api/* matches /api/anything
+        if (pattern.endsWith('*')) {
+            const prefix = pattern.slice(0, -1);
+            return pathname.startsWith(prefix);
+        }
+        // Wildcard match: /api/** matches /api/anything/nested
+        if (pattern.endsWith('**')) {
+            const prefix = pattern.slice(0, -2);
+            return pathname.startsWith(prefix);
+        }
+        return false;
+    });
+}
+/**
+ * Utility to create a matcher config for Next.js middleware
+ * Excludes static files and images by default
+ */
+function createMiddlewareMatcher(additionalExclusions = []) {
+    const defaultExclusions = [
+        '_next/static',
+        '_next/image',
+        'favicon.ico',
+        '.*\\.(?:svg|png|jpg|jpeg|gif|webp)$',
+        ...additionalExclusions,
+    ];
+    const exclusionPattern = defaultExclusions.join('|');
+    return [`/((?!${exclusionPattern}).*)`];
+}
+//# sourceMappingURL=middleware.js.map

package/dist/nextjs/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/nextjs/middleware.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA0BH,sDAkEC;AAgCD,0DAaC;AAvID,uCAAiF;AAEjF,wCAA2C;AAI3C;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EACJ,WAAW,EACX,eAAe,EACf,WAAW,GAAG,EAAE,EAChB,QAAQ,GAAG,QAAQ,GACpB,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,UAAU,UAAU,CAAC,OAAoB;QACnD,6CAA6C;QAC7C,IAAI,QAAQ,GAAG,qBAAY,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAA,wBAA0B,EAAC,WAAW,EAAE,eAAe,EAAE;YACxE,OAAO,EAAE;gBACP,MAAM;oBACJ,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAClC,CAAC;gBACD,MAAM,CAAC,YAAkF;oBACvF,yBAAyB;oBACzB,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAmC,EAAE,EAAE;wBACxE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACnC,CAAC,CAAC,CAAC;oBAEH,2CAA2C;oBAC3C,QAAQ,GAAG,qBAAY,CAAC,IAAI,CAAC;wBAC3B,OAAO,EAAE;4BACP,OAAO,EAAE,OAAO,CAAC,OAAO;yBACzB;qBACF,CAAC,CAAC;oBAEH,0BAA0B;oBAC1B,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAsE,EAAE,EAAE;wBACnI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,aAA2D,CAAC,CAAC;oBACjG,CAAC,CAAC,CAAC;gBACL,CAAC;aACF;SACF,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,IAAI,QAAQ,EAAE,CAAC;YACb,4DAA4D;YAC5D,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,yCAAyC;QACzC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAEhE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,sDAAsD;YACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACnD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAErD,OAAO,qBAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QAED,kCAAkC;QAClC,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,WAAqB;IAC3D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAClC,cAAc;QACd,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,uDAAuD;QACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,uBAAiC,EAAE;IAEnC,MAAM,iBAAiB,GAAG;QACxB,cAAc;QACd,aAAa;QACb,aAAa;QACb,qCAAqC;QACrC,GAAG,oBAAoB;KACxB,CAAC;IAEF,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,gBAAgB,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/nextjs/route.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @daily/auth/nextjs Route Handlers
+ * Utilities for protected API routes
+ */
+import type { DailyServerClientOptions, AuthenticatedHandler, WithAuthOptions } from './types.js';
+/**
+ * Wrap a route handler to require authentication
+ *
+ * @example
+ * // app/api/user/route.ts
+ * import { cookies } from 'next/headers';
+ * import { withAuth } from '@daily/auth/nextjs';
+ *
+ * const authOptions = {
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ * };
+ *
+ * export const GET = withAuth(authOptions, async (request, { user, workspace }) => {
+ *   return Response.json({ email: user.email, workspace: workspace?.name });
+ * });
+ */
+export declare function withAuth(options: DailyServerClientOptions, handler: AuthenticatedHandler, handlerOptions?: WithAuthOptions): (request: Request) => Promise<Response>;
+/**
+ * Create a higher-order function that pre-configures auth options
+ *
+ * @example
+ * // lib/auth.ts
+ * import { createAuthHandler } from '@daily/auth/nextjs';
+ *
+ * export const withAuth = createAuthHandler({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ * });
+ *
+ * // app/api/user/route.ts
+ * import { withAuth } from '@/lib/auth';
+ *
+ * export const GET = withAuth(async (request, { user }) => {
+ *   return { email: user.email };
+ * });
+ */
+export declare function createAuthHandler(options: DailyServerClientOptions): (handler: AuthenticatedHandler, handlerOptions?: WithAuthOptions) => (request: Request) => Promise<Response>;
+/**
+ * Standard API response helpers for consistency across routes
+ */
+export declare const ApiResponse: {
+    ok<T>(data: T, init?: ResponseInit): Response;
+    created<T>(data: T, init?: ResponseInit): Response;
+    noContent(init?: ResponseInit): Response;
+    badRequest(message: string, code?: string, details?: unknown): Response;
+    unauthorized(message?: string, code?: string): Response;
+    forbidden(message?: string, code?: string): Response;
+    notFound(message?: string, code?: string): Response;
+    conflict(message: string, code?: string): Response;
+    serverError(message?: string, code?: string): Response;
+};
+//# sourceMappingURL=route.d.ts.map

package/dist/nextjs/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/nextjs/route.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAEV,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EAEhB,MAAM,YAAY,CAAC;AAGpB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,oBAAoB,EAC7B,cAAc,CAAC,EAAE,eAAe,GAC/B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAkCzC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,IAE/D,SAAS,oBAAoB,EAC7B,iBAAiB,eAAe,KAC/B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAG3C;AAoCD;;GAEG;AACH,eAAO,MAAM,WAAW;OACnB,CAAC,QAAQ,CAAC,SAAS,YAAY,GAAG,QAAQ;YAIrC,CAAC,QAAQ,CAAC,SAAS,YAAY,GAAG,QAAQ;qBAIjC,YAAY,GAAG,QAAQ;wBAIpB,MAAM,2BAAkC,OAAO,GAAG,QAAQ;mDAIf,QAAQ;gDAIjB,QAAQ;+CAIT,QAAQ;sBAI3C,MAAM,kBAAsB,QAAQ;kDAImB,QAAQ;CAGlF,CAAC"}

package/dist/nextjs/route.js

@@ -0,0 +1,143 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Route Handlers
+ * Utilities for protected API routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiResponse = void 0;
+exports.withAuth = withAuth;
+exports.createAuthHandler = createAuthHandler;
+const session_js_1 = require("./session.js");
+/**
+ * Wrap a route handler to require authentication
+ *
+ * @example
+ * // app/api/user/route.ts
+ * import { cookies } from 'next/headers';
+ * import { withAuth } from '@daily/auth/nextjs';
+ *
+ * const authOptions = {
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ * };
+ *
+ * export const GET = withAuth(authOptions, async (request, { user, workspace }) => {
+ *   return Response.json({ email: user.email, workspace: workspace?.name });
+ * });
+ */
+function withAuth(options, handler, handlerOptions) {
+    return async (request) => {
+        // Get cookies from request headers
+        const cookieHeader = request.headers.get('cookie');
+        const cookieStore = createRequestCookieStore(cookieHeader);
+        const session = await (0, session_js_1.getServerSession)(options, cookieStore);
+        if (!session) {
+            if (handlerOptions?.onUnauthorized) {
+                return handlerOptions.onUnauthorized(request);
+            }
+            return Response.json({ error: 'Unauthorized', code: 'UNAUTHORIZED' }, { status: 401 });
+        }
+        try {
+            const result = await handler(request, session);
+            // If handler returns a Response, use it directly
+            if (result instanceof Response) {
+                return result;
+            }
+            // Otherwise, assume it's JSON-serializable
+            return Response.json(result);
+        }
+        catch (error) {
+            // Let errors bubble up for Next.js error handling
+            throw error;
+        }
+    };
+}
+/**
+ * Create a higher-order function that pre-configures auth options
+ *
+ * @example
+ * // lib/auth.ts
+ * import { createAuthHandler } from '@daily/auth/nextjs';
+ *
+ * export const withAuth = createAuthHandler({
+ *   supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *   supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ * });
+ *
+ * // app/api/user/route.ts
+ * import { withAuth } from '@/lib/auth';
+ *
+ * export const GET = withAuth(async (request, { user }) => {
+ *   return { email: user.email };
+ * });
+ */
+function createAuthHandler(options) {
+    return function configuredWithAuth(handler, handlerOptions) {
+        return withAuth(options, handler, handlerOptions);
+    };
+}
+/**
+ * Create a simple cookie store from request cookie header
+ * For use in route handlers where next/headers cookies() isn't available
+ */
+function createRequestCookieStore(cookieHeader) {
+    const cookies = new Map();
+    if (cookieHeader) {
+        cookieHeader.split(';').forEach((cookie) => {
+            const [name, ...rest] = cookie.trim().split('=');
+            if (name && rest.length > 0) {
+                cookies.set(name, rest.join('='));
+            }
+        });
+    }
+    return {
+        get(name) {
+            const value = cookies.get(name);
+            return value ? { name, value } : undefined;
+        },
+        set() {
+            // Can't set cookies on request, this is handled by response
+        },
+        remove() {
+            // Can't remove cookies on request
+        },
+    };
+}
+// =============================================================================
+// RESPONSE HELPERS
+// =============================================================================
+/**
+ * Standard API response helpers for consistency across routes
+ */
+exports.ApiResponse = {
+    ok(data, init) {
+        return Response.json(data, { status: 200, ...init });
+    },
+    created(data, init) {
+        return Response.json(data, { status: 201, ...init });
+    },
+    noContent(init) {
+        return new Response(null, { status: 204, ...init });
+    },
+    badRequest(message, code = 'BAD_REQUEST', details) {
+        return Response.json({ error: message, code, details }, { status: 400 });
+    },
+    unauthorized(message = 'Unauthorized', code = 'UNAUTHORIZED') {
+        return Response.json({ error: message, code }, { status: 401 });
+    },
+    forbidden(message = 'Forbidden', code = 'FORBIDDEN') {
+        return Response.json({ error: message, code }, { status: 403 });
+    },
+    notFound(message = 'Not found', code = 'NOT_FOUND') {
+        return Response.json({ error: message, code }, { status: 404 });
+    },
+    conflict(message, code = 'CONFLICT') {
+        return Response.json({ error: message, code }, { status: 409 });
+    },
+    serverError(message = 'Internal server error', code = 'INTERNAL_ERROR') {
+        return Response.json({ error: message, code }, { status: 500 });
+    },
+};
+//# sourceMappingURL=route.js.map

package/dist/nextjs/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/nextjs/route.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA6BH,4BAsCC;AAsBD,8CAOC;AAvFD,6CAAgD;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,QAAQ,CACtB,OAAiC,EACjC,OAA6B,EAC7B,cAAgC;IAEhC,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,mCAAmC;QACnC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAgB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,cAAc,EAAE,cAAc,EAAE,CAAC;gBACnC,OAAO,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/C,iDAAiD;YACjD,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,2CAA2C;YAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,iBAAiB,CAAC,OAAiC;IACjE,OAAO,SAAS,kBAAkB,CAChC,OAA6B,EAC7B,cAAgC;QAEhC,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,YAA2B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACzC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,GAAG,CAAC,IAAY;YACd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7C,CAAC;QACD,GAAG;YACD,4DAA4D;QAC9D,CAAC;QACD,MAAM;YACJ,kCAAkC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,EAAE,CAAI,IAAO,EAAE,IAAmB;QAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,CAAI,IAAO,EAAE,IAAmB;QACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,CAAC,IAAmB;QAC3B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,IAAI,GAAG,aAAa,EAAE,OAAiB;QACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,YAAY,CAAC,OAAO,GAAG,cAAc,EAAE,IAAI,GAAG,cAAc;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,IAAI,GAAG,WAAW;QACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,OAAO,GAAG,WAAW,EAAE,IAAI,GAAG,WAAW;QAChD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,OAAe,EAAE,IAAI,GAAG,UAAU;QACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,WAAW,CAAC,OAAO,GAAG,uBAAuB,EAAE,IAAI,GAAG,gBAAgB;QACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;CACF,CAAC"}

package/dist/nextjs/server.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @daily/auth/nextjs Server Client
+ * Create Supabase client for Next.js server components and route handlers
+ */
+import { type SupabaseClient } from '@supabase/supabase-js';
+import type { DailyServerClientOptions, CookieMethods } from './types.js';
+/**
+ * Create a Supabase client for server components using cookies
+ *
+ * @example
+ * // In a server component or route handler
+ * import { cookies } from 'next/headers';
+ * import { createDailyServerClient } from '@daily/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const supabase = createDailyServerClient({
+ *     supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *     supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   }, cookieStore);
+ *
+ *   const { data: { user } } = await supabase.auth.getUser();
+ * }
+ */
+export declare function createDailyServerClient(options: DailyServerClientOptions, cookieStore: CookieMethods): SupabaseClient;
+/**
+ * Create an admin Supabase client (bypasses RLS)
+ * Use this for server-side operations that need elevated privileges
+ */
+export declare function createDailyAdminClient(options: DailyServerClientOptions): SupabaseClient;
+/**
+ * Extract project reference from Supabase URL
+ * https://abc123.supabase.co -> abc123
+ */
+export declare function extractProjectRef(supabaseUrl: string): string;
+//# sourceMappingURL=server.d.ts.map

package/dist/nextjs/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/nextjs/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,EACjC,WAAW,EAAE,aAAa,GACzB,cAAc,CA4ChB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,GAAG,cAAc,CAaxF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAuB7D"}

package/dist/nextjs/server.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Server Client
+ * Create Supabase client for Next.js server components and route handlers
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDailyServerClient = createDailyServerClient;
+exports.createDailyAdminClient = createDailyAdminClient;
+exports.extractProjectRef = extractProjectRef;
+const ssr_1 = require("@supabase/ssr");
+const supabase_js_1 = require("@supabase/supabase-js");
+/**
+ * Create a Supabase client for server components using cookies
+ *
+ * @example
+ * // In a server component or route handler
+ * import { cookies } from 'next/headers';
+ * import { createDailyServerClient } from '@daily/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const supabase = createDailyServerClient({
+ *     supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *     supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *   }, cookieStore);
+ *
+ *   const { data: { user } } = await supabase.auth.getUser();
+ * }
+ */
+function createDailyServerClient(options, cookieStore) {
+    const { supabaseUrl, supabaseAnonKey } = options;
+    return (0, ssr_1.createServerClient)(supabaseUrl, supabaseAnonKey, {
+        cookies: {
+            getAll() {
+                // @supabase/ssr expects getAll to return array of {name, value}
+                // We need to get all auth-related cookies
+                const allCookies = [];
+                // Get the main auth token cookie
+                // Supabase uses: sb-{project-ref}-auth-token
+                const projectRef = extractProjectRef(supabaseUrl);
+                const authCookieName = `sb-${projectRef}-auth-token`;
+                const authCookie = cookieStore.get(authCookieName);
+                if (authCookie) {
+                    allCookies.push(authCookie);
+                }
+                // Also check for chunked cookies (large tokens are split)
+                for (let i = 0; i < 10; i++) {
+                    const chunkCookie = cookieStore.get(`${authCookieName}.${i}`);
+                    if (chunkCookie) {
+                        allCookies.push(chunkCookie);
+                    }
+                    else {
+                        break;
+                    }
+                }
+                return allCookies;
+            },
+            setAll(cookiesToSet) {
+                try {
+                    cookiesToSet.forEach(({ name, value, options: cookieOptions }) => {
+                        cookieStore.set(name, value, cookieOptions);
+                    });
+                }
+                catch {
+                    // In server components, cookies can't be set (read-only)
+                    // This is expected behavior, silently ignore
+                }
+            },
+        },
+    });
+}
+/**
+ * Create an admin Supabase client (bypasses RLS)
+ * Use this for server-side operations that need elevated privileges
+ */
+function createDailyAdminClient(options) {
+    const { supabaseUrl, serviceKey } = options;
+    if (!serviceKey) {
+        throw new Error('serviceKey is required for admin client');
+    }
+    return (0, supabase_js_1.createClient)(supabaseUrl, serviceKey, {
+        auth: {
+            autoRefreshToken: false,
+            persistSession: false,
+        },
+    });
+}
+/**
+ * Extract project reference from Supabase URL
+ * https://abc123.supabase.co -> abc123
+ */
+function extractProjectRef(supabaseUrl) {
+    try {
+        const url = new URL(supabaseUrl);
+        const hostname = url.hostname;
+        // Handle custom domains
+        if (!hostname.includes('supabase.co') && !hostname.includes('supabase.com')) {
+            // For custom domains, use the full hostname as the ref
+            return hostname.replace(/\./g, '-');
+        }
+        // Standard Supabase URL: https://project-ref.supabase.co
+        const parts = hostname.split('.');
+        if (parts.length >= 3) {
+            return parts[0];
+        }
+        // Fallback: use the hostname without TLD
+        return parts[0] || 'default';
+    }
+    catch {
+        // If URL parsing fails, generate a fallback
+        return 'default';
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/nextjs/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/nextjs/server.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAwBH,0DA+CC;AAMD,wDAaC;AAMD,8CAuBC;AArHD,uCAAiF;AACjF,uDAA0E;AAG1E;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,uBAAuB,CACrC,OAAiC,EACjC,WAA0B;IAE1B,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAEjD,OAAO,IAAA,wBAA0B,EAAC,WAAW,EAAE,eAAe,EAAE;QAC9D,OAAO,EAAE;YACP,MAAM;gBACJ,gEAAgE;gBAChE,0CAA0C;gBAC1C,MAAM,UAAU,GAAsC,EAAE,CAAC;gBAEzD,iCAAiC;gBACjC,6CAA6C;gBAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,cAAc,GAAG,MAAM,UAAU,aAAa,CAAC;gBAErD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACnD,IAAI,UAAU,EAAE,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9B,CAAC;gBAED,0DAA0D;gBAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,cAAc,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9D,IAAI,WAAW,EAAE,CAAC;wBAChB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/B,CAAC;yBAAM,CAAC;wBACN,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,MAAM,CAAC,YAAkF;gBACvF,IAAI,CAAC;oBACH,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE;wBAC/D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;oBAC9C,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;oBACzD,6CAA6C;gBAC/C,CAAC;YACH,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAAiC;IACtE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,IAAA,0BAAY,EAAC,WAAW,EAAE,UAAU,EAAE;QAC3C,IAAI,EAAE;YACJ,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE,KAAK;SACtB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,WAAmB;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE9B,wBAAwB;QACxB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5E,uDAAuD;YACvD,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,yDAAyD;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,yCAAyC;QACzC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/nextjs/session.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @daily/auth/nextjs Session
+ * Server-side session retrieval for Next.js
+ */
+import type { ServerAuthContext, ServerSessionResult, DailyServerClientOptions, CookieMethods } from './types.js';
+/**
+ * Get the current user session in a server component or route handler
+ *
+ * @example
+ * // In a server component
+ * import { cookies } from 'next/headers';
+ * import { getServerSession } from '@daily/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const session = await getServerSession({
+ *     supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *     supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *     serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ *   }, cookieStore);
+ *
+ *   if (!session) {
+ *     redirect('/login');
+ *   }
+ *
+ *   return <div>Hello {session.user.email}</div>;
+ * }
+ */
+export declare function getServerSession(options: DailyServerClientOptions, cookieStore: CookieMethods): Promise<ServerSessionResult>;
+/**
+ * Get session or throw - useful when you expect the user to be authenticated
+ *
+ * @throws Error if not authenticated
+ */
+export declare function requireServerSession(options: DailyServerClientOptions, cookieStore: CookieMethods): Promise<ServerAuthContext>;
+/**
+ * Check if user is authenticated without fetching full session
+ */
+export declare function isAuthenticated(options: DailyServerClientOptions, cookieStore: CookieMethods): Promise<boolean>;
+//# sourceMappingURL=session.d.ts.map

package/dist/nextjs/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/nextjs/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,EACd,MAAM,YAAY,CAAC;AAIpB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,wBAAwB,EACjC,WAAW,EAAE,aAAa,GACzB,OAAO,CAAC,mBAAmB,CAAC,CA6B9B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,wBAAwB,EACjC,WAAW,EAAE,aAAa,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAQ5B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,wBAAwB,EACjC,WAAW,EAAE,aAAa,GACzB,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/dist/nextjs/session.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Session
+ * Server-side session retrieval for Next.js
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getServerSession = getServerSession;
+exports.requireServerSession = requireServerSession;
+exports.isAuthenticated = isAuthenticated;
+const supabase_js_1 = require("@supabase/supabase-js");
+const server_js_1 = require("./server.js");
+/**
+ * Get the current user session in a server component or route handler
+ *
+ * @example
+ * // In a server component
+ * import { cookies } from 'next/headers';
+ * import { getServerSession } from '@daily/auth/nextjs';
+ *
+ * export default async function Page() {
+ *   const cookieStore = await cookies();
+ *   const session = await getServerSession({
+ *     supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL!,
+ *     supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+ *     serviceKey: process.env.SUPABASE_SERVICE_ROLE_KEY,
+ *   }, cookieStore);
+ *
+ *   if (!session) {
+ *     redirect('/login');
+ *   }
+ *
+ *   return <div>Hello {session.user.email}</div>;
+ * }
+ */
+async function getServerSession(options, cookieStore) {
+    const supabase = (0, server_js_1.createDailyServerClient)(options, cookieStore);
+    // Get user (validates JWT server-side)
+    const { data: { user }, error: userError } = await supabase.auth.getUser();
+    if (userError || !user) {
+        return null;
+    }
+    // Get session for token info
+    const { data: { session }, error: sessionError } = await supabase.auth.getSession();
+    if (sessionError || !session) {
+        return null;
+    }
+    // Fetch workspaces if service key provided
+    let workspaces = [];
+    if (options.serviceKey) {
+        workspaces = await fetchUserWorkspaces(options, user.id);
+    }
+    return {
+        user,
+        session,
+        workspaces,
+        workspace: workspaces[0] || null,
+    };
+}
+/**
+ * Get session or throw - useful when you expect the user to be authenticated
+ *
+ * @throws Error if not authenticated
+ */
+async function requireServerSession(options, cookieStore) {
+    const session = await getServerSession(options, cookieStore);
+    if (!session) {
+        throw new Error('Not authenticated');
+    }
+    return session;
+}
+/**
+ * Check if user is authenticated without fetching full session
+ */
+async function isAuthenticated(options, cookieStore) {
+    const supabase = (0, server_js_1.createDailyServerClient)(options, cookieStore);
+    const { data: { user }, error } = await supabase.auth.getUser();
+    return !error && !!user;
+}
+/**
+ * Fetch user's workspaces using admin client
+ */
+async function fetchUserWorkspaces(options, userId) {
+    if (!options.serviceKey) {
+        return [];
+    }
+    const adminClient = (0, supabase_js_1.createClient)(options.supabaseUrl, options.serviceKey, {
+        auth: { autoRefreshToken: false, persistSession: false },
+    });
+    try {
+        const { data, error } = await adminClient
+            .from('workspace_members')
+            .select(`
+        role,
+        workspace:workspaces (
+          id,
+          name,
+          slug
+        )
+      `)
+            .eq('user_id', userId)
+            .order('created_at', { ascending: true });
+        if (error || !data) {
+            return [];
+        }
+        return data
+            .filter((row) => row.workspace)
+            .map((row) => {
+            const ws = row.workspace;
+            return {
+                id: ws.id,
+                name: ws.name,
+                slug: ws.slug,
+                role: row.role,
+            };
+        });
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/nextjs/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/nextjs/session.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAmCH,4CAgCC;AAOD,oDAWC;AAKD,0CAOC;AA/FD,uDAA0E;AAQ1E,2CAAsD;AAEtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAiC,EACjC,WAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAA,mCAAuB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE/D,uCAAuC;IACvC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAE3E,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAEpF,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAU,GAAoB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO;QACP,UAAU;QACV,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAAiC,EACjC,WAA0B;IAE1B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CACnC,OAAiC,EACjC,WAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAA,mCAAuB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAAiC,EACjC,MAAc;IAEd,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,0BAAY,EAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE;QACxE,IAAI,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE;KACzD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW;aACtC,IAAI,CAAC,mBAAmB,CAAC;aACzB,MAAM,CAAC;;;;;;;OAOP,CAAC;aACD,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;aACrB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;aAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,EAAE,GAAG,GAAG,CAAC,SAAkE,CAAC;YAClF,OAAO;gBACL,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,GAAG,CAAC,IAA6B;aACxC,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/nextjs/types.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @daily/auth/nextjs Types
+ * Next.js SSR authentication types
+ */
+import type { User, Session, SupabaseClient } from '@supabase/supabase-js';
+import type { WorkspaceInfo } from '../types.js';
+/**
+ * Auth context available in server components and route handlers
+ */
+export interface ServerAuthContext {
+    user: User;
+    session: Session;
+    workspaces: WorkspaceInfo[];
+    /** Primary workspace (first in list) */
+    workspace: WorkspaceInfo | null;
+}
+/**
+ * Result from getServerSession - may be null if not authenticated
+ */
+export type ServerSessionResult = ServerAuthContext | null;
+export interface DailyServerClientOptions {
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    /** Service key for fetching workspaces (optional) */
+    serviceKey?: string;
+}
+export interface DailyMiddlewareOptions extends DailyServerClientOptions {
+    /** Routes that don't require authentication (supports wildcards) */
+    publicPaths?: string[];
+    /** URL to redirect unauthenticated users */
+    loginUrl?: string;
+    /** URL to redirect after login (default: original URL) */
+    afterLoginUrl?: string;
+}
+/**
+ * Authenticated route handler function
+ */
+export type AuthenticatedHandler<T = Response> = (request: Request, context: ServerAuthContext) => Promise<T> | T;
+/**
+ * Options for withAuth wrapper
+ */
+export interface WithAuthOptions {
+    /** Custom unauthorized response (default: 401 JSON) */
+    onUnauthorized?: (request: Request) => Response | Promise<Response>;
+}
+export interface CookieOptions {
+    name: string;
+    value: string;
+    maxAge?: number;
+    path?: string;
+    domain?: string;
+    secure?: boolean;
+    httpOnly?: boolean;
+    sameSite?: 'strict' | 'lax' | 'none';
+}
+export interface CookieMethods {
+    get(name: string): {
+        name: string;
+        value: string;
+    } | undefined;
+    set(name: string, value: string, options?: Omit<CookieOptions, 'name' | 'value'>): void;
+    remove(name: string, options?: Omit<CookieOptions, 'name' | 'value' | 'maxAge'>): void;
+}
+export interface CreateClientResult {
+    supabase: SupabaseClient;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/nextjs/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/nextjs/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAMjD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,wCAAwC;IACxC,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,IAAI,CAAC;AAM3D,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,wBAAwB;IACtE,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,GAAG,QAAQ,IAAI,CAC/C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACrE;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC/D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IACxF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;CACxF;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;CAC1B"}

package/dist/nextjs/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * @daily/auth/nextjs Types
+ * Next.js SSR authentication types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/nextjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/nextjs/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dailyautomations/auth",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Unified SSO authentication for Daily applications",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,6 +28,10 @@
     "./types": {
       "types": "./dist/types.d.ts",
       "default": "./dist/types.js"
+    },
+    "./nextjs": {
+      "types": "./dist/nextjs/index.d.ts",
+      "default": "./dist/nextjs/index.js"
     }
   },
   "files": [
@@ -55,21 +59,31 @@
     "@supabase/supabase-js": "^2.0.0"
   },
   "devDependencies": {
+    "@supabase/ssr": "^0.5.0",
     "@types/node": "^20.11.0",
     "@types/react": "^18.2.0",
     "@typescript-eslint/eslint-plugin": "^6.19.0",
     "@typescript-eslint/parser": "^6.19.0",
     "eslint": "^8.56.0",
+    "next": "^14.0.0",
     "typescript": "^5.3.3",
     "vitest": "^1.2.0"
   },
   "peerDependencies": {
     "@supabase/supabase-js": "^2.0.0",
+    "@supabase/ssr": "^0.5.0",
+    "next": ">=14.0.0",
     "react": ">=18.0.0"
   },
   "peerDependenciesMeta": {
     "react": {
       "optional": true
+    },
+    "@supabase/ssr": {
+      "optional": true
+    },
+    "next": {
+      "optional": true
     }
   }
 }