@htlkg/astro 0.0.13 → 0.0.17

package/README.md

@@ -103,8 +103,8 @@ await requireAdminAccess(Astro);
 │   └── Topbar.astro
 ├── htlkg/            # Astro integration
 │   ├── index.ts      # Main integration
-│   ├── config.ts     # Configuration types
-│   └── virtual-modules.ts
+│   └── config.ts     # Configuration types
+├── runtime-config.ts # Runtime configuration storage
 ├── layouts/          # Page layouts
 │   ├── AdminLayout.astro
 │   ├── BrandLayout.astro

package/dist/{chunk-IA7L6IR5.js → chunk-QWEHFUIH.js}

@@ -1,62 +1,65 @@
 // src/htlkg/index.ts
 import tailwind from "@astrojs/tailwind";
 import vue from "@astrojs/vue";
-
-// src/htlkg/virtual-modules.ts
-function serializePattern(pattern) {
-  if (pattern instanceof RegExp) {
-    return `new RegExp(${JSON.stringify(pattern.source)}, ${JSON.stringify(pattern.flags)})`;
-  }
-  return JSON.stringify(pattern);
-}
-function serializePatterns(patterns) {
-  if (!patterns || patterns.length === 0) return "[]";
-  return `[${patterns.map(serializePattern).join(", ")}]`;
-}
-function createVirtualModulePlugin(authConfig, loginPageConfig, amplifyConfig) {
-  const virtualModuleId = "virtual:htlkg-config";
-  const resolvedVirtualModuleId = "\0" + virtualModuleId;
+import inoxToolsRequestNanostores from "@inox-tools/request-nanostores";
+var DEFAULT_ENV_VARS = [
+  "PUBLIC_COGNITO_USER_POOL_ID",
+  "PUBLIC_COGNITO_USER_POOL_CLIENT_ID"
+];
+var VIRTUAL_MODULE_ID = "virtual:htlkg";
+var RESOLVED_VIRTUAL_MODULE_ID = "\0" + VIRTUAL_MODULE_ID;
+function createVirtualConfigPlugin(config) {
   return {
-    name: "htlkg-config",
-    enforce: "pre",
+    name: "htlkg-virtual-config",
     resolveId(id) {
-      if (id === virtualModuleId) {
-        return resolvedVirtualModuleId;
+      if (id === VIRTUAL_MODULE_ID) {
+        return RESOLVED_VIRTUAL_MODULE_ID;
       }
     },
     load(id) {
-      if (id === resolvedVirtualModuleId) {
-        const serializedAuthConfig = `{
-					publicRoutes: ${serializePatterns(authConfig.publicRoutes || [])},
-					authenticatedRoutes: ${serializePatterns(authConfig.authenticatedRoutes || [])},
-					adminRoutes: ${serializePatterns(authConfig.adminRoutes || [])},
-					brandRoutes: ${JSON.stringify(authConfig.brandRoutes || [])},
-					loginUrl: ${JSON.stringify(authConfig.loginUrl || "/login")}
-				}`;
-        const serializedAmplifyConfig = amplifyConfig ? JSON.stringify(amplifyConfig) : "null";
-        const serializedLoginPageConfig = loginPageConfig !== false && loginPageConfig !== null ? JSON.stringify(loginPageConfig) : "null";
-        return `export const routeGuardConfig = ${serializedAuthConfig};
-export const loginPageConfig = ${serializedLoginPageConfig};
-export const amplifyConfig = ${serializedAmplifyConfig};`;
+      if (id === RESOLVED_VIRTUAL_MODULE_ID) {
+        const serializedConfig = serializeConfig(config);
+        return `export const htlkgConfig = ${serializedConfig};`;
       }
     }
   };
 }
-var virtualModuleTypes = `
-declare module 'virtual:htlkg-config' {
-  import type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';
-  
-  export const routeGuardConfig: RouteGuardConfig;
-  export const loginPageConfig: LoginPageConfig | null;
-  export const amplifyConfig: Record<string, unknown> | null;
+function serializeConfig(config) {
+  const routeGuard = config.routeGuard || {};
+  const routeGuardParts = [];
+  if (routeGuard.publicRoutes) {
+    routeGuardParts.push(`publicRoutes: ${serializePatterns(routeGuard.publicRoutes)}`);
+  }
+  if (routeGuard.authenticatedRoutes) {
+    routeGuardParts.push(`authenticatedRoutes: ${serializePatterns(routeGuard.authenticatedRoutes)}`);
+  }
+  if (routeGuard.adminRoutes) {
+    routeGuardParts.push(`adminRoutes: ${serializePatterns(routeGuard.adminRoutes)}`);
+  }
+  if (routeGuard.brandRoutes && routeGuard.brandRoutes.length > 0) {
+    const brandRoutesStr = routeGuard.brandRoutes.map(
+      (br) => `{ pattern: ${br.pattern.toString()}, brandIdParam: ${br.brandIdParam} }`
+    ).join(", ");
+    routeGuardParts.push(`brandRoutes: [${brandRoutesStr}]`);
+  }
+  if (routeGuard.loginUrl) {
+    routeGuardParts.push(`loginUrl: ${JSON.stringify(routeGuard.loginUrl)}`);
+  }
+  return `{
+	routeGuardConfig: { ${routeGuardParts.join(", ")} },
+	loginPageConfig: ${JSON.stringify(config.loginPage)},
+	amplifyConfig: ${JSON.stringify(config.amplify)}
+}`;
+}
+function serializePatterns(patterns) {
+  const serialized = patterns.map((p) => {
+    if (typeof p === "string") {
+      return JSON.stringify(p);
+    }
+    return p.toString();
+  });
+  return `[${serialized.join(", ")}]`;
 }
-`;
-
-// src/htlkg/index.ts
-var DEFAULT_ENV_VARS = [
-  "PUBLIC_COGNITO_USER_POOL_ID",
-  "PUBLIC_COGNITO_USER_POOL_CLIENT_ID"
-];
 function htlkg(options = {}) {
   const {
     auth = {},
@@ -80,6 +83,12 @@ function htlkg(options = {}) {
   } else {
     integrations.push(vue());
   }
+  integrations.push(inoxToolsRequestNanostores());
+  const htlkgVirtualConfig = {
+    routeGuard: auth,
+    loginPage: loginPage || null,
+    amplify: amplify || null
+  };
   integrations.push({
     name: "@htlkg/astro",
     hooks: {
@@ -95,8 +104,9 @@ function htlkg(options = {}) {
               logger.warn(`Missing env vars: ${missing.join(", ")}`);
             }
           }
-          const virtualModulePlugin = createVirtualModulePlugin(auth, loginPage, amplify || null);
-          const vitePlugins = [virtualModulePlugin];
+          const vitePlugins = [
+            createVirtualConfigPlugin(htlkgVirtualConfig)
+          ];
           const isDev = process.env.NODE_ENV !== "production";
           if (isDev) {
             try {
@@ -106,7 +116,12 @@ function htlkg(options = {}) {
             } catch {
             }
           }
-          updateConfig({ vite: { plugins: vitePlugins } });
+          updateConfig({
+            vite: {
+              plugins: vitePlugins
+            }
+          });
+          logger.info("virtual:htlkg module configured");
           if (useFullVueSetup) {
             addMiddleware({ entrypoint: "@htlkg/astro/middleware", order: "pre" });
             logger.info("Authentication middleware injected");
@@ -132,6 +147,15 @@ function htlkg(options = {}) {
           filename: "htlkg.d.ts",
           content: `
 import type { AuthUser } from '@htlkg/core/types';
+import type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';
+
+declare module 'virtual:htlkg' {
+  export const htlkgConfig: {
+    routeGuardConfig: RouteGuardConfig | null;
+    loginPageConfig: LoginPageConfig | null;
+    amplifyConfig: Record<string, unknown> | null;
+  };
+}
 
 declare global {
   namespace App {
@@ -141,8 +165,6 @@ declare global {
   }
 }
 
-${virtualModuleTypes}
-
 export {};
 `
         });
@@ -155,4 +177,4 @@ export {};
 export {
   htlkg
 };
-//# sourceMappingURL=chunk-IA7L6IR5.js.map
+//# sourceMappingURL=chunk-QWEHFUIH.js.map

package/dist/chunk-QWEHFUIH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/htlkg/index.ts"],"sourcesContent":["/**\n * htlkg Astro Integration\n *\n * Supports static, hybrid, and full SSR output modes.\n * Uses a virtual Vite module (virtual:htlkg) to provide configuration\n * to middleware and Vue app setup.\n */\n\nimport tailwind from '@astrojs/tailwind';\nimport vue from '@astrojs/vue';\nimport inoxToolsRequestNanostores from '@inox-tools/request-nanostores';\nimport type { AstroIntegration } from 'astro';\nimport type { Plugin } from 'vite';\nimport type { HtlkgIntegrationOptions, RouteGuardConfig, LoginPageConfig } from './config.js';\n\nconst DEFAULT_ENV_VARS = [\n\t'PUBLIC_COGNITO_USER_POOL_ID',\n\t'PUBLIC_COGNITO_USER_POOL_CLIENT_ID'\n];\n\nconst VIRTUAL_MODULE_ID = 'virtual:htlkg';\nconst RESOLVED_VIRTUAL_MODULE_ID = '\\0' + VIRTUAL_MODULE_ID;\n\n/**\n * Create Vite plugin that provides the virtual:htlkg module\n */\nfunction createVirtualConfigPlugin(config: {\n\trouteGuard: RouteGuardConfig;\n\tloginPage: LoginPageConfig | null;\n\tamplify: Record<string, unknown> | null;\n}): Plugin {\n\treturn {\n\t\tname: 'htlkg-virtual-config',\n\t\tresolveId(id) {\n\t\t\tif (id === VIRTUAL_MODULE_ID) {\n\t\t\t\treturn RESOLVED_VIRTUAL_MODULE_ID;\n\t\t\t}\n\t\t},\n\t\tload(id) {\n\t\t\tif (id === RESOLVED_VIRTUAL_MODULE_ID) {\n\t\t\t\t// Serialize the config to be loaded as a module\n\t\t\t\t// We need to handle RegExp serialization for route patterns\n\t\t\t\tconst serializedConfig = serializeConfig(config);\n\t\t\t\treturn `export const htlkgConfig = ${serializedConfig};`;\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Serialize config object to JavaScript code\n * Handles RegExp patterns which can't be JSON.stringify'd\n */\nfunction serializeConfig(config: {\n\trouteGuard: RouteGuardConfig;\n\tloginPage: LoginPageConfig | null;\n\tamplify: Record<string, unknown> | null;\n}): string {\n\tconst routeGuard = config.routeGuard || {};\n\n\t// Build route guard config with proper RegExp handling\n\tconst routeGuardParts: string[] = [];\n\n\tif (routeGuard.publicRoutes) {\n\t\trouteGuardParts.push(`publicRoutes: ${serializePatterns(routeGuard.publicRoutes)}`);\n\t}\n\tif (routeGuard.authenticatedRoutes) {\n\t\trouteGuardParts.push(`authenticatedRoutes: ${serializePatterns(routeGuard.authenticatedRoutes)}`);\n\t}\n\tif (routeGuard.adminRoutes) {\n\t\trouteGuardParts.push(`adminRoutes: ${serializePatterns(routeGuard.adminRoutes)}`);\n\t}\n\tif (routeGuard.brandRoutes && routeGuard.brandRoutes.length > 0) {\n\t\tconst brandRoutesStr = routeGuard.brandRoutes.map(br =>\n\t\t\t`{ pattern: ${br.pattern.toString()}, brandIdParam: ${br.brandIdParam} }`\n\t\t).join(', ');\n\t\trouteGuardParts.push(`brandRoutes: [${brandRoutesStr}]`);\n\t}\n\tif (routeGuard.loginUrl) {\n\t\trouteGuardParts.push(`loginUrl: ${JSON.stringify(routeGuard.loginUrl)}`);\n\t}\n\n\treturn `{\n\trouteGuardConfig: { ${routeGuardParts.join(', ')} },\n\tloginPageConfig: ${JSON.stringify(config.loginPage)},\n\tamplifyConfig: ${JSON.stringify(config.amplify)}\n}`;\n}\n\n/**\n * Serialize an array of route patterns (strings or RegExp)\n */\nfunction serializePatterns(patterns: (string | RegExp)[]): string {\n\tconst serialized = patterns.map(p => {\n\t\tif (typeof p === 'string') {\n\t\t\treturn JSON.stringify(p);\n\t\t}\n\t\t// RegExp - output as literal\n\t\treturn p.toString();\n\t});\n\treturn `[${serialized.join(', ')}]`;\n}\n\nexport function htlkg(\n\toptions: HtlkgIntegrationOptions = {},\n): AstroIntegration | AstroIntegration[] {\n\tconst {\n\t\tauth = {},\n\t\tloginPage = { path: '/login', title: 'Sign In', redirectUrl: '/admin' },\n\t\tvalidateEnv = true,\n\t\trequiredEnvVars = DEFAULT_ENV_VARS,\n\t\ttailwind: tailwindOptions,\n\t\tamplify,\n\t\tvueAppSetup = 'auto',\n\t} = options;\n\n\tconst integrations: AstroIntegration[] = [];\n\n\t// Add Tailwind integration (enabled by default)\n\tif (tailwindOptions !== false) {\n\t\tconst tailwindConfig =\n\t\t\ttypeof tailwindOptions === 'object' ? tailwindOptions : undefined;\n\t\tintegrations.push(\n\t\t\ttailwind(tailwindConfig as Parameters<typeof tailwind>[0]),\n\t\t);\n\t}\n\n\t// Determine Vue setup mode:\n\t// - 'full': Use Amplify app entrypoint (requires SSR)\n\t// - 'basic': Basic Vue without app entrypoint (works with static)\n\t// - 'auto': Default to 'basic' for compatibility with static builds\n\tconst useFullVueSetup = vueAppSetup === 'full';\n\n\t// Add Vue integration\n\tif (useFullVueSetup) {\n\t\tintegrations.push(vue({ appEntrypoint: '@htlkg/astro/vue-app-setup' }));\n\t} else {\n\t\tintegrations.push(vue());\n\t}\n\n\t// Add request nanostores integration (for SSR-safe nanostores)\n\tintegrations.push(inoxToolsRequestNanostores());\n\n\t// Prepare configuration for virtual module\n\tconst htlkgVirtualConfig = {\n\t\trouteGuard: auth,\n\t\tloginPage: loginPage || null,\n\t\tamplify: amplify || null,\n\t};\n\n\t// Add the main htlkg integration\n\tintegrations.push({\n\t\tname: '@htlkg/astro',\n\t\thooks: {\n\t\t\t'astro:config:setup': async ({ updateConfig, addMiddleware, injectRoute, logger }) => {\n\t\t\t\ttry {\n\t\t\t\t\tlogger.info(useFullVueSetup\n\t\t\t\t\t\t? 'Vue configured with Amplify app setup'\n\t\t\t\t\t\t: 'Vue configured (basic mode)');\n\n\t\t\t\t\tif (amplify) {\n\t\t\t\t\t\tlogger.info('Amplify configuration provided');\n\t\t\t\t\t}\n\n\t\t\t\t\t// Validate env vars (only for full setup)\n\t\t\t\t\tif (validateEnv && !amplify && useFullVueSetup) {\n\t\t\t\t\t\tconst missing = requiredEnvVars.filter(v => !process.env[v]);\n\t\t\t\t\t\tif (missing.length > 0) {\n\t\t\t\t\t\t\tlogger.warn(`Missing env vars: ${missing.join(', ')}`);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// Create virtual module plugin for config\n\t\t\t\t\tconst vitePlugins: Plugin[] = [\n\t\t\t\t\t\tcreateVirtualConfigPlugin(htlkgVirtualConfig),\n\t\t\t\t\t];\n\n\t\t\t\t\t// Only load Vue DevTools during development\n\t\t\t\t\tconst isDev = process.env.NODE_ENV !== 'production';\n\t\t\t\t\tif (isDev) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst vueDevTools = (await import('vite-plugin-vue-devtools')).default;\n\t\t\t\t\t\t\tvitePlugins.push(vueDevTools());\n\t\t\t\t\t\t\tlogger.info('Vue DevTools enabled');\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// DevTools not available, skip silently\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// Update Vite config with plugins\n\t\t\t\t\tupdateConfig({\n\t\t\t\t\t\tvite: {\n\t\t\t\t\t\t\tplugins: vitePlugins\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\n\t\t\t\t\tlogger.info('virtual:htlkg module configured');\n\n\t\t\t\t\t// Inject middleware (only for full setup)\n\t\t\t\t\tif (useFullVueSetup) {\n\t\t\t\t\t\taddMiddleware({ entrypoint: '@htlkg/astro/middleware', order: 'pre' });\n\t\t\t\t\t\tlogger.info('Authentication middleware injected');\n\t\t\t\t\t}\n\n\t\t\t\t\t// Inject login page (only for full setup)\n\t\t\t\t\tif (loginPage !== false && useFullVueSetup) {\n\t\t\t\t\t\tconst loginPath = loginPage.path || '/login';\n\t\t\t\t\t\tinjectRoute({\n\t\t\t\t\t\t\tpattern: loginPath,\n\t\t\t\t\t\t\tentrypoint: '@htlkg/astro/auth/LoginPage.astro',\n\t\t\t\t\t\t\tprerender: false,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tlogger.info(`Login page injected at ${loginPath}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tlogger.info('htlkg integration configured');\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconst msg = error instanceof Error ? error.message : 'Unknown error';\n\t\t\t\t\tlogger.error(`htlkg configuration failed: ${msg}`);\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t\t'astro:config:done': ({ injectTypes }) => {\n\t\t\t\tinjectTypes({\n\t\t\t\t\tfilename: 'htlkg.d.ts',\n\t\t\t\t\tcontent: `\nimport type { AuthUser } from '@htlkg/core/types';\nimport type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';\n\ndeclare module 'virtual:htlkg' {\n  export const htlkgConfig: {\n    routeGuardConfig: RouteGuardConfig | null;\n    loginPageConfig: LoginPageConfig | null;\n    amplifyConfig: Record<string, unknown> | null;\n  };\n}\n\ndeclare global {\n  namespace App {\n    interface Locals {\n      user: AuthUser | null;\n    }\n  }\n}\n\nexport {};\n`,\n\t\t\t\t});\n\t\t\t},\n\t\t},\n\t});\n\n\treturn integrations;\n}\n"],"mappings":";AAQA,OAAO,cAAc;AACrB,OAAO,SAAS;AAChB,OAAO,gCAAgC;AAKvC,IAAM,mBAAmB;AAAA,EACxB;AAAA,EACA;AACD;AAEA,IAAM,oBAAoB;AAC1B,IAAM,6BAA6B,OAAO;AAK1C,SAAS,0BAA0B,QAIxB;AACV,SAAO;AAAA,IACN,MAAM;AAAA,IACN,UAAU,IAAI;AACb,UAAI,OAAO,mBAAmB;AAC7B,eAAO;AAAA,MACR;AAAA,IACD;AAAA,IACA,KAAK,IAAI;AACR,UAAI,OAAO,4BAA4B;AAGtC,cAAM,mBAAmB,gBAAgB,MAAM;AAC/C,eAAO,8BAA8B,gBAAgB;AAAA,MACtD;AAAA,IACD;AAAA,EACD;AACD;AAMA,SAAS,gBAAgB,QAId;AACV,QAAM,aAAa,OAAO,cAAc,CAAC;AAGzC,QAAM,kBAA4B,CAAC;AAEnC,MAAI,WAAW,cAAc;AAC5B,oBAAgB,KAAK,iBAAiB,kBAAkB,WAAW,YAAY,CAAC,EAAE;AAAA,EACnF;AACA,MAAI,WAAW,qBAAqB;AACnC,oBAAgB,KAAK,wBAAwB,kBAAkB,WAAW,mBAAmB,CAAC,EAAE;AAAA,EACjG;AACA,MAAI,WAAW,aAAa;AAC3B,oBAAgB,KAAK,gBAAgB,kBAAkB,WAAW,WAAW,CAAC,EAAE;AAAA,EACjF;AACA,MAAI,WAAW,eAAe,WAAW,YAAY,SAAS,GAAG;AAChE,UAAM,iBAAiB,WAAW,YAAY;AAAA,MAAI,QACjD,cAAc,GAAG,QAAQ,SAAS,CAAC,mBAAmB,GAAG,YAAY;AAAA,IACtE,EAAE,KAAK,IAAI;AACX,oBAAgB,KAAK,iBAAiB,cAAc,GAAG;AAAA,EACxD;AACA,MAAI,WAAW,UAAU;AACxB,oBAAgB,KAAK,aAAa,KAAK,UAAU,WAAW,QAAQ,CAAC,EAAE;AAAA,EACxE;AAEA,SAAO;AAAA,uBACe,gBAAgB,KAAK,IAAI,CAAC;AAAA,oBAC7B,KAAK,UAAU,OAAO,SAAS,CAAC;AAAA,kBAClC,KAAK,UAAU,OAAO,OAAO,CAAC;AAAA;AAEhD;AAKA,SAAS,kBAAkB,UAAuC;AACjE,QAAM,aAAa,SAAS,IAAI,OAAK;AACpC,QAAI,OAAO,MAAM,UAAU;AAC1B,aAAO,KAAK,UAAU,CAAC;AAAA,IACxB;AAEA,WAAO,EAAE,SAAS;AAAA,EACnB,CAAC;AACD,SAAO,IAAI,WAAW,KAAK,IAAI,CAAC;AACjC;AAEO,SAAS,MACf,UAAmC,CAAC,GACI;AACxC,QAAM;AAAA,IACL,OAAO,CAAC;AAAA,IACR,YAAY,EAAE,MAAM,UAAU,OAAO,WAAW,aAAa,SAAS;AAAA,IACtE,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,UAAU;AAAA,IACV;AAAA,IACA,cAAc;AAAA,EACf,IAAI;AAEJ,QAAM,eAAmC,CAAC;AAG1C,MAAI,oBAAoB,OAAO;AAC9B,UAAM,iBACL,OAAO,oBAAoB,WAAW,kBAAkB;AACzD,iBAAa;AAAA,MACZ,SAAS,cAAgD;AAAA,IAC1D;AAAA,EACD;AAMA,QAAM,kBAAkB,gBAAgB;AAGxC,MAAI,iBAAiB;AACpB,iBAAa,KAAK,IAAI,EAAE,eAAe,6BAA6B,CAAC,CAAC;AAAA,EACvE,OAAO;AACN,iBAAa,KAAK,IAAI,CAAC;AAAA,EACxB;AAGA,eAAa,KAAK,2BAA2B,CAAC;AAG9C,QAAM,qBAAqB;AAAA,IAC1B,YAAY;AAAA,IACZ,WAAW,aAAa;AAAA,IACxB,SAAS,WAAW;AAAA,EACrB;AAGA,eAAa,KAAK;AAAA,IACjB,MAAM;AAAA,IACN,OAAO;AAAA,MACN,sBAAsB,OAAO,EAAE,cAAc,eAAe,aAAa,OAAO,MAAM;AACrF,YAAI;AACH,iBAAO,KAAK,kBACT,0CACA,6BAA6B;AAEhC,cAAI,SAAS;AACZ,mBAAO,KAAK,gCAAgC;AAAA,UAC7C;AAGA,cAAI,eAAe,CAAC,WAAW,iBAAiB;AAC/C,kBAAM,UAAU,gBAAgB,OAAO,OAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC3D,gBAAI,QAAQ,SAAS,GAAG;AACvB,qBAAO,KAAK,qBAAqB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,YACtD;AAAA,UACD;AAGA,gBAAM,cAAwB;AAAA,YAC7B,0BAA0B,kBAAkB;AAAA,UAC7C;AAGA,gBAAM,QAAQ,QAAQ,IAAI,aAAa;AACvC,cAAI,OAAO;AACV,gBAAI;AACH,oBAAM,eAAe,MAAM,OAAO,0BAA0B,GAAG;AAC/D,0BAAY,KAAK,YAAY,CAAC;AAC9B,qBAAO,KAAK,sBAAsB;AAAA,YACnC,QAAQ;AAAA,YAER;AAAA,UACD;AAGA,uBAAa;AAAA,YACZ,MAAM;AAAA,cACL,SAAS;AAAA,YACV;AAAA,UACD,CAAC;AAED,iBAAO,KAAK,iCAAiC;AAG7C,cAAI,iBAAiB;AACpB,0BAAc,EAAE,YAAY,2BAA2B,OAAO,MAAM,CAAC;AACrE,mBAAO,KAAK,oCAAoC;AAAA,UACjD;AAGA,cAAI,cAAc,SAAS,iBAAiB;AAC3C,kBAAM,YAAY,UAAU,QAAQ;AACpC,wBAAY;AAAA,cACX,SAAS;AAAA,cACT,YAAY;AAAA,cACZ,WAAW;AAAA,YACZ,CAAC;AACD,mBAAO,KAAK,0BAA0B,SAAS,EAAE;AAAA,UAClD;AAEA,iBAAO,KAAK,8BAA8B;AAAA,QAC3C,SAAS,OAAO;AACf,gBAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU;AACrD,iBAAO,MAAM,+BAA+B,GAAG,EAAE;AACjD,gBAAM;AAAA,QACP;AAAA,MACD;AAAA,MACA,qBAAqB,CAAC,EAAE,YAAY,MAAM;AACzC,oBAAY;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAsBV,CAAC;AAAA,MACF;AAAA,IACD;AAAA,EACD,CAAC;AAED,SAAO;AACR;","names":[]}

package/dist/htlkg/index.js

@@ -1,6 +1,6 @@
 import {
   htlkg
-} from "../chunk-IA7L6IR5.js";
+} from "../chunk-QWEHFUIH.js";
 export {
   htlkg
 };

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   htlkg
-} from "./chunk-IA7L6IR5.js";
+} from "./chunk-QWEHFUIH.js";
 import {
   isAuthenticatedUser
 } from "./chunk-UBF5F2RG.js";
@@ -17,6 +17,16 @@ import {
   processListData,
   sortItems
 } from "./chunk-2GML443T.js";
+import {
+  getClientIP,
+  getQueryParams,
+  getRequestHeaders,
+  getServerData,
+  isMobileDevice,
+  isServerSide,
+  setCacheControl,
+  setResponseHeaders
+} from "./chunk-WNMPTDCR.js";
 import {
   chunkArray,
   filterItems,
@@ -35,16 +45,6 @@ import {
   serializeForHydration,
   shouldHydrate
 } from "./chunk-64USRLVP.js";
-import {
-  getClientIP,
-  getQueryParams,
-  getRequestHeaders,
-  getServerData,
-  isMobileDevice,
-  isServerSide,
-  setCacheControl,
-  setResponseHeaders
-} from "./chunk-WNMPTDCR.js";
 
 // src/factories/createListPage.ts
 function generateBreadcrumbs(pageId, title) {

package/dist/middleware/index.js

@@ -5,11 +5,12 @@ import { sequence } from "astro:middleware";
 import { Amplify } from "aws-amplify";
 import { getUser } from "@htlkg/core/auth";
 import { globalSettings } from "@htlkg/core/amplify-astro-adapter";
-import { amplifyConfig } from "virtual:htlkg-config";
+import { htlkgConfig } from "virtual:htlkg";
 var amplifyConfigured = false;
 function ensureAmplifyConfigured() {
   if (amplifyConfigured) return;
   try {
+    const { amplifyConfig } = htlkgConfig;
     if (!amplifyConfig) {
       console.warn("[htlkg Auth] No Amplify configuration provided");
       return;
@@ -44,8 +45,7 @@ var authMiddleware = async (context, next) => {
 };
 
 // src/middleware/route-guards.ts
-import { routeGuardConfig } from "virtual:htlkg-config";
-var config = routeGuardConfig;
+import { htlkgConfig as htlkgConfig2 } from "virtual:htlkg";
 function matchesPattern(pathname, patterns) {
   return patterns.some((pattern) => {
     try {
@@ -68,13 +68,14 @@ function matchesPattern(pathname, patterns) {
 var routeGuard = async (context, next) => {
   const { locals, url, redirect } = context;
   const pathname = url.pathname;
+  const { routeGuardConfig } = htlkgConfig2;
   const {
     publicRoutes = [],
     authenticatedRoutes = [],
     adminRoutes = [],
     brandRoutes = [],
     loginUrl = "/login"
-  } = config;
+  } = routeGuardConfig || {};
   try {
     if (matchesPattern(pathname, publicRoutes)) {
       return next();

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/middleware/index.ts","../../src/middleware/auth.ts","../../src/middleware/route-guards.ts"],"sourcesContent":["/**\n * Middleware for @htlkg/astro\n * \n * This module exports:\n * - authMiddleware: Retrieves authenticated user and injects into locals\n * - routeGuard: Enforces access control based on route configuration\n * - onRequest: Composed middleware chain (auth + route guard)\n * - Helper functions: requireAuth, requireAdminAccess, requireBrandAccess\n */\n\nimport { sequence } from 'astro:middleware';\nimport { authMiddleware } from './auth.js';\nimport { routeGuard } from './route-guards.js';\n\n// Export individual middleware\nexport { authMiddleware } from './auth.js';\nexport {\n\trouteGuard,\n\trequireAuth,\n\trequireAdminAccess,\n\trequireBrandAccess,\n} from './route-guards.js';\n\n/**\n * Export composed middleware chain\n * Auth middleware runs first to populate locals.user\n * Route guard middleware runs second to enforce access control\n * \n * This is the default export that gets injected by the htlkg integration\n */\nexport const onRequest = sequence(authMiddleware, routeGuard);\n","/**\n * Authentication middleware for htlkg integration\n * \n * This middleware:\n * - Configures AWS Amplify for server-side auth\n * - Retrieves the authenticated user from AWS Amplify\n * - Injects the user into Astro.locals for use in pages and API routes\n * - Handles authentication errors gracefully\n */\n\nimport type { MiddlewareHandler } from 'astro';\nimport { Amplify } from 'aws-amplify';\nimport { getUser } from '@htlkg/core/auth';\nimport { globalSettings } from '@htlkg/core/amplify-astro-adapter';\nimport { amplifyConfig } from 'virtual:htlkg-config';\n\n// Track if Amplify has been configured\nlet amplifyConfigured = false;\n\n/**\n * Configure Amplify on first request\n */\nfunction ensureAmplifyConfigured(): void {\n\tif (amplifyConfigured) return;\n\n\ttry {\n\t\tif (!amplifyConfig) {\n\t\t\tconsole.warn('[htlkg Auth] No Amplify configuration provided');\n\t\t\treturn;\n\t\t}\n\n\t\t// Configure Amplify with SSR support\n\t\tAmplify.configure(amplifyConfig as any, { ssr: true });\n\t\t\n\t\t// Enable server-side auth in the adapter\n\t\tglobalSettings.enableServerSideAuth();\n\t\t\n\t\t// Check if we're on HTTPS (for secure cookies)\n\t\tconst isSSL = typeof window !== 'undefined' \n\t\t\t? window.location.protocol === 'https:' \n\t\t\t: process.env.NODE_ENV === 'production';\n\t\tglobalSettings.setIsSSLOrigin(isSSL);\n\t\t\n\t\tamplifyConfigured = true;\n\t\tconsole.info('[htlkg Auth] Amplify configured for server-side auth');\n\t} catch (error) {\n\t\tconst errorMsg = error instanceof Error ? error.message : 'Unknown error';\n\t\tconsole.error(`[htlkg Auth] Failed to configure Amplify: ${errorMsg}`);\n\t}\n}\n\n/**\n * Auth middleware - retrieves authenticated user and injects into locals\n * \n * This middleware runs on every request and attempts to get the current\n * authenticated user from AWS Amplify. If successful, the user is injected\n * into context.locals.user. If authentication fails, locals.user is set to null.\n * \n * @example\n * // In an Astro page\n * const { user } = Astro.locals;\n * if (user) {\n *   console.log('Authenticated user:', user.email);\n * }\n */\nexport const authMiddleware: MiddlewareHandler = async (context, next) => {\n\tconst { locals } = context;\n\n\t// Ensure Amplify is configured before attempting auth\n\tensureAmplifyConfigured();\n\n\ttry {\n\t\tconst user = await getUser(context);\n\t\tlocals.user = user;\n\t} catch (error) {\n\t\t// Set user to null on any authentication error\n\t\tlocals.user = null;\n\n\t\t// Log error without exposing sensitive information\n\t\tif (error instanceof Error) {\n\t\t\t// Filter out sensitive data from error messages\n\t\t\tconst safeMessage = error.message\n\t\t\t\t.replace(/token[=:]\\s*[^\\s,}]+/gi, 'token=***')\n\t\t\t\t.replace(/key[=:]\\s*[^\\s,}]+/gi, 'key=***')\n\t\t\t\t.replace(/secret[=:]\\s*[^\\s,}]+/gi, 'secret=***')\n\t\t\t\t.replace(/password[=:]\\s*[^\\s,}]+/gi, 'password=***');\n\n\t\t\tconsole.error('[htlkg Auth] Authentication failed:', safeMessage);\n\t\t} else {\n\t\t\tconsole.error('[htlkg Auth] Authentication failed: Unknown error');\n\t\t}\n\t}\n\n\treturn next();\n};\n","/**\n * Route guard middleware for htlkg integration\n * \n * This middleware enforces access control based on route configuration:\n * - Public routes: accessible to everyone\n * - Authenticated routes: require any logged-in user\n * - Admin routes: require admin privileges\n * - Brand routes: require brand-specific access or admin privileges\n */\n\nimport type { MiddlewareHandler } from 'astro';\nimport type { RoutePattern, RouteGuardConfig } from '../htlkg/config.js';\n\n// Import configuration from virtual module\nimport { routeGuardConfig } from 'virtual:htlkg-config';\n\n// Type assertion for the imported config\nconst config = routeGuardConfig as RouteGuardConfig;\n\n/**\n * Helper: Check if pathname matches any of the provided patterns\n */\nfunction matchesPattern(pathname: string, patterns: RoutePattern[]): boolean {\n\treturn patterns.some((pattern) => {\n\t\ttry {\n\t\t\tif (typeof pattern === 'string') {\n\t\t\t\t// Special case: \"/\" only matches exactly\n\t\t\t\tif (pattern === '/') {\n\t\t\t\t\treturn pathname === '/';\n\t\t\t\t}\n\t\t\t\t// String pattern: exact match or starts with (for sub-routes)\n\t\t\t\treturn pathname === pattern || pathname.startsWith(pattern + '/');\n\t\t\t}\n\t\t\t// RegExp pattern: test against pathname\n\t\t\treturn pattern.test(pathname);\n\t\t} catch (error) {\n\t\t\t// Log pattern matching errors but don't block the request\n\t\t\tconsole.error(\n\t\t\t\t'[htlkg] Error matching route pattern:',\n\t\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t});\n}\n\n/**\n * Route guard middleware - protects routes based on configuration\n * \n * This middleware runs after authMiddleware and enforces access control\n * based on the route configuration provided to the htlkg integration.\n * \n * @example\n * // In astro.config.mjs\n * htlkg({\n *   auth: {\n *     publicRoutes: ['/login', '/'],\n *     adminRoutes: [/^\\/admin/],\n *     brandRoutes: [\n *       { pattern: /^\\/brands\\/(\\d+)/, brandIdParam: 1 }\n *     ],\n *     loginUrl: '/login'\n *   }\n * })\n */\nexport const routeGuard: MiddlewareHandler = async (context, next) => {\n\tconst { locals, url, redirect } = context;\n\tconst pathname = url.pathname;\n\n\tconst {\n\t\tpublicRoutes = [],\n\t\tauthenticatedRoutes = [],\n\t\tadminRoutes = [],\n\t\tbrandRoutes = [],\n\t\tloginUrl = '/login',\n\t} = config;\n\n\ttry {\n\t\t// Public routes - no auth required\n\t\tif (matchesPattern(pathname, publicRoutes)) {\n\t\t\treturn next();\n\t\t}\n\n\t\tconst user = locals.user;\n\n\t\t// Admin routes - require admin role\n\t\tif (matchesPattern(pathname, adminRoutes)) {\n\t\t\tif (!user || !user.isAdmin) {\n\t\t\t\treturn redirect(`${loginUrl}?error=admin_required`);\n\t\t\t}\n\t\t\treturn next();\n\t\t}\n\n\t\t// Brand routes - require brand access or admin\n\t\tfor (const brandRoute of brandRoutes) {\n\t\t\ttry {\n\t\t\t\tconst match = pathname.match(brandRoute.pattern);\n\t\t\t\tif (match) {\n\t\t\t\t\tconst brandId = Number.parseInt(match[brandRoute.brandIdParam], 10);\n\n\t\t\t\t\tif (Number.isNaN(brandId)) {\n\t\t\t\t\t\tconsole.warn(`[htlkg] Invalid brandId extracted from ${pathname}`);\n\t\t\t\t\t\treturn redirect(`${loginUrl}?error=invalid_brand`);\n\t\t\t\t\t}\n\n\t\t\t\t\tif (!user || (!user.isAdmin && !user.brandIds.includes(brandId))) {\n\t\t\t\t\t\treturn redirect(`${loginUrl}?error=access_denied`);\n\t\t\t\t\t}\n\t\t\t\t\treturn next();\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t`[htlkg] Error processing brand route for ${pathname}:`,\n\t\t\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t\t\t);\n\t\t\t\t// Fail-safe: deny access on error\n\t\t\t\treturn redirect(`${loginUrl}?error=access_denied`);\n\t\t\t}\n\t\t}\n\n\t\t// Authenticated routes - require any logged-in user\n\t\tif (matchesPattern(pathname, authenticatedRoutes)) {\n\t\t\tif (!user) {\n\t\t\t\tconst returnUrl = encodeURIComponent(pathname + url.search);\n\t\t\t\treturn redirect(`${loginUrl}?redirect=${returnUrl}`);\n\t\t\t}\n\t\t\treturn next();\n\t\t}\n\n\t\t// Default: allow access\n\t\treturn next();\n\t} catch (error) {\n\t\t// Catch-all error handler for route guard\n\t\tconsole.error(\n\t\t\t'[htlkg] Unexpected error in route guard:',\n\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t);\n\t\t// Fail-safe: deny access and redirect to login\n\t\treturn redirect(`${loginUrl}?error=server_error`);\n\t}\n};\n\n/**\n * Helper functions for programmatic route protection in pages\n * These can be used in Astro pages for more fine-grained control\n */\n\n/**\n * Require authentication for a page\n * Redirects to login if user is not authenticated\n */\nexport async function requireAuth(context: any, loginUrl = '/login') {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\tconst currentUrl = context.url.pathname + context.url.search;\n\t\tconst encodedReturnUrl = encodeURIComponent(currentUrl);\n\t\treturn context.redirect(`${loginUrl}?redirect=${encodedReturnUrl}`);\n\t}\n\treturn user;\n}\n\n/**\n * Require admin access for a page\n * Redirects to login if user is not an admin\n */\nexport async function requireAdminAccess(context: any, loginUrl = '/login') {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\treturn context.redirect(`${loginUrl}?error=not_authenticated`);\n\t}\n\tif (!user.isAdmin) {\n\t\treturn context.redirect(`${loginUrl}?error=admin_required`);\n\t}\n\treturn user;\n}\n\n/**\n * Require brand access for a page\n * Redirects to login if user doesn't have access to the specified brand\n */\nexport async function requireBrandAccess(\n\tcontext: any,\n\tbrandId: number,\n\tloginUrl = '/login'\n) {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\treturn context.redirect(`${loginUrl}?error=not_authenticated`);\n\t}\n\tif (!user.isAdmin && !user.brandIds.includes(brandId)) {\n\t\treturn context.redirect(`${loginUrl}?error=access_denied`);\n\t}\n\treturn user;\n}\n"],"mappings":";AAUA,SAAS,gBAAgB;;;ACCzB,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAG9B,IAAI,oBAAoB;AAKxB,SAAS,0BAAgC;AACxC,MAAI,kBAAmB;AAEvB,MAAI;AACH,QAAI,CAAC,eAAe;AACnB,cAAQ,KAAK,gDAAgD;AAC7D;AAAA,IACD;AAGA,YAAQ,UAAU,eAAsB,EAAE,KAAK,KAAK,CAAC;AAGrD,mBAAe,qBAAqB;AAGpC,UAAM,QAAQ,OAAO,WAAW,cAC7B,OAAO,SAAS,aAAa,WAC7B,QAAQ,IAAI,aAAa;AAC5B,mBAAe,eAAe,KAAK;AAEnC,wBAAoB;AACpB,YAAQ,KAAK,sDAAsD;AAAA,EACpE,SAAS,OAAO;AACf,UAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU;AAC1D,YAAQ,MAAM,6CAA6C,QAAQ,EAAE;AAAA,EACtE;AACD;AAgBO,IAAM,iBAAoC,OAAO,SAAS,SAAS;AACzE,QAAM,EAAE,OAAO,IAAI;AAGnB,0BAAwB;AAExB,MAAI;AACH,UAAM,OAAO,MAAM,QAAQ,OAAO;AAClC,WAAO,OAAO;AAAA,EACf,SAAS,OAAO;AAEf,WAAO,OAAO;AAGd,QAAI,iBAAiB,OAAO;AAE3B,YAAM,cAAc,MAAM,QACxB,QAAQ,0BAA0B,WAAW,EAC7C,QAAQ,wBAAwB,SAAS,EACzC,QAAQ,2BAA2B,YAAY,EAC/C,QAAQ,6BAA6B,cAAc;AAErD,cAAQ,MAAM,uCAAuC,WAAW;AAAA,IACjE,OAAO;AACN,cAAQ,MAAM,mDAAmD;AAAA,IAClE;AAAA,EACD;AAEA,SAAO,KAAK;AACb;;;AChFA,SAAS,wBAAwB;AAGjC,IAAM,SAAS;AAKf,SAAS,eAAe,UAAkB,UAAmC;AAC5E,SAAO,SAAS,KAAK,CAAC,YAAY;AACjC,QAAI;AACH,UAAI,OAAO,YAAY,UAAU;AAEhC,YAAI,YAAY,KAAK;AACpB,iBAAO,aAAa;AAAA,QACrB;AAEA,eAAO,aAAa,WAAW,SAAS,WAAW,UAAU,GAAG;AAAA,MACjE;AAEA,aAAO,QAAQ,KAAK,QAAQ;AAAA,IAC7B,SAAS,OAAO;AAEf,cAAQ;AAAA,QACP;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC1C;AACA,aAAO;AAAA,IACR;AAAA,EACD,CAAC;AACF;AAqBO,IAAM,aAAgC,OAAO,SAAS,SAAS;AACrE,QAAM,EAAE,QAAQ,KAAK,SAAS,IAAI;AAClC,QAAM,WAAW,IAAI;AAErB,QAAM;AAAA,IACL,eAAe,CAAC;AAAA,IAChB,sBAAsB,CAAC;AAAA,IACvB,cAAc,CAAC;AAAA,IACf,cAAc,CAAC;AAAA,IACf,WAAW;AAAA,EACZ,IAAI;AAEJ,MAAI;AAEH,QAAI,eAAe,UAAU,YAAY,GAAG;AAC3C,aAAO,KAAK;AAAA,IACb;AAEA,UAAM,OAAO,OAAO;AAGpB,QAAI,eAAe,UAAU,WAAW,GAAG;AAC1C,UAAI,CAAC,QAAQ,CAAC,KAAK,SAAS;AAC3B,eAAO,SAAS,GAAG,QAAQ,uBAAuB;AAAA,MACnD;AACA,aAAO,KAAK;AAAA,IACb;AAGA,eAAW,cAAc,aAAa;AACrC,UAAI;AACH,cAAM,QAAQ,SAAS,MAAM,WAAW,OAAO;AAC/C,YAAI,OAAO;AACV,gBAAM,UAAU,OAAO,SAAS,MAAM,WAAW,YAAY,GAAG,EAAE;AAElE,cAAI,OAAO,MAAM,OAAO,GAAG;AAC1B,oBAAQ,KAAK,0CAA0C,QAAQ,EAAE;AACjE,mBAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,UAClD;AAEA,cAAI,CAAC,QAAS,CAAC,KAAK,WAAW,CAAC,KAAK,SAAS,SAAS,OAAO,GAAI;AACjE,mBAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,UAClD;AACA,iBAAO,KAAK;AAAA,QACb;AAAA,MACD,SAAS,OAAO;AACf,gBAAQ;AAAA,UACP,4CAA4C,QAAQ;AAAA,UACpD,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAC1C;AAEA,eAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,MAClD;AAAA,IACD;AAGA,QAAI,eAAe,UAAU,mBAAmB,GAAG;AAClD,UAAI,CAAC,MAAM;AACV,cAAM,YAAY,mBAAmB,WAAW,IAAI,MAAM;AAC1D,eAAO,SAAS,GAAG,QAAQ,aAAa,SAAS,EAAE;AAAA,MACpD;AACA,aAAO,KAAK;AAAA,IACb;AAGA,WAAO,KAAK;AAAA,EACb,SAAS,OAAO;AAEf,YAAQ;AAAA,MACP;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC1C;AAEA,WAAO,SAAS,GAAG,QAAQ,qBAAqB;AAAA,EACjD;AACD;AAWA,eAAsB,YAAY,SAAc,WAAW,UAAU;AACpE,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,UAAM,aAAa,QAAQ,IAAI,WAAW,QAAQ,IAAI;AACtD,UAAM,mBAAmB,mBAAmB,UAAU;AACtD,WAAO,QAAQ,SAAS,GAAG,QAAQ,aAAa,gBAAgB,EAAE;AAAA,EACnE;AACA,SAAO;AACR;AAMA,eAAsB,mBAAmB,SAAc,WAAW,UAAU;AAC3E,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,WAAO,QAAQ,SAAS,GAAG,QAAQ,0BAA0B;AAAA,EAC9D;AACA,MAAI,CAAC,KAAK,SAAS;AAClB,WAAO,QAAQ,SAAS,GAAG,QAAQ,uBAAuB;AAAA,EAC3D;AACA,SAAO;AACR;AAMA,eAAsB,mBACrB,SACA,SACA,WAAW,UACV;AACD,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,WAAO,QAAQ,SAAS,GAAG,QAAQ,0BAA0B;AAAA,EAC9D;AACA,MAAI,CAAC,KAAK,WAAW,CAAC,KAAK,SAAS,SAAS,OAAO,GAAG;AACtD,WAAO,QAAQ,SAAS,GAAG,QAAQ,sBAAsB;AAAA,EAC1D;AACA,SAAO;AACR;;;AFnKO,IAAM,YAAY,SAAS,gBAAgB,UAAU;","names":[]}
+{"version":3,"sources":["../../src/middleware/index.ts","../../src/middleware/auth.ts","../../src/middleware/route-guards.ts"],"sourcesContent":["/**\n * Middleware for @htlkg/astro\n * \n * This module exports:\n * - authMiddleware: Retrieves authenticated user and injects into locals\n * - routeGuard: Enforces access control based on route configuration\n * - onRequest: Composed middleware chain (auth + route guard)\n * - Helper functions: requireAuth, requireAdminAccess, requireBrandAccess\n */\n\nimport { sequence } from 'astro:middleware';\nimport { authMiddleware } from './auth.js';\nimport { routeGuard } from './route-guards.js';\n\n// Export individual middleware\nexport { authMiddleware } from './auth.js';\nexport {\n\trouteGuard,\n\trequireAuth,\n\trequireAdminAccess,\n\trequireBrandAccess,\n} from './route-guards.js';\n\n/**\n * Export composed middleware chain\n * Auth middleware runs first to populate locals.user\n * Route guard middleware runs second to enforce access control\n * \n * This is the default export that gets injected by the htlkg integration\n */\nexport const onRequest = sequence(authMiddleware, routeGuard);\n","/**\n * Authentication middleware for htlkg integration\n *\n * This middleware:\n * - Configures AWS Amplify for server-side auth\n * - Retrieves the authenticated user from AWS Amplify\n * - Injects the user into Astro.locals for use in pages and API routes\n * - Handles authentication errors gracefully\n */\n\nimport type { MiddlewareHandler } from 'astro';\nimport { Amplify } from 'aws-amplify';\nimport { getUser } from '@htlkg/core/auth';\nimport { globalSettings } from '@htlkg/core/amplify-astro-adapter';\nimport { htlkgConfig } from 'virtual:htlkg';\n\n// Track if Amplify has been configured\nlet amplifyConfigured = false;\n\n/**\n * Configure Amplify on first request\n */\nfunction ensureAmplifyConfigured(): void {\n\tif (amplifyConfigured) return;\n\n\ttry {\n\t\tconst { amplifyConfig } = htlkgConfig;\n\t\tif (!amplifyConfig) {\n\t\t\tconsole.warn('[htlkg Auth] No Amplify configuration provided');\n\t\t\treturn;\n\t\t}\n\n\t\t// Configure Amplify with SSR support\n\t\tAmplify.configure(amplifyConfig as any, { ssr: true });\n\t\t\n\t\t// Enable server-side auth in the adapter\n\t\tglobalSettings.enableServerSideAuth();\n\t\t\n\t\t// Check if we're on HTTPS (for secure cookies)\n\t\tconst isSSL = typeof window !== 'undefined' \n\t\t\t? window.location.protocol === 'https:' \n\t\t\t: process.env.NODE_ENV === 'production';\n\t\tglobalSettings.setIsSSLOrigin(isSSL);\n\t\t\n\t\tamplifyConfigured = true;\n\t\tconsole.info('[htlkg Auth] Amplify configured for server-side auth');\n\t} catch (error) {\n\t\tconst errorMsg = error instanceof Error ? error.message : 'Unknown error';\n\t\tconsole.error(`[htlkg Auth] Failed to configure Amplify: ${errorMsg}`);\n\t}\n}\n\n/**\n * Auth middleware - retrieves authenticated user and injects into locals\n * \n * This middleware runs on every request and attempts to get the current\n * authenticated user from AWS Amplify. If successful, the user is injected\n * into context.locals.user. If authentication fails, locals.user is set to null.\n * \n * @example\n * // In an Astro page\n * const { user } = Astro.locals;\n * if (user) {\n *   console.log('Authenticated user:', user.email);\n * }\n */\nexport const authMiddleware: MiddlewareHandler = async (context, next) => {\n\tconst { locals } = context;\n\n\t// Ensure Amplify is configured before attempting auth\n\tensureAmplifyConfigured();\n\n\ttry {\n\t\tconst user = await getUser(context);\n\t\tlocals.user = user;\n\t} catch (error) {\n\t\t// Set user to null on any authentication error\n\t\tlocals.user = null;\n\n\t\t// Log error without exposing sensitive information\n\t\tif (error instanceof Error) {\n\t\t\t// Filter out sensitive data from error messages\n\t\t\tconst safeMessage = error.message\n\t\t\t\t.replace(/token[=:]\\s*[^\\s,}]+/gi, 'token=***')\n\t\t\t\t.replace(/key[=:]\\s*[^\\s,}]+/gi, 'key=***')\n\t\t\t\t.replace(/secret[=:]\\s*[^\\s,}]+/gi, 'secret=***')\n\t\t\t\t.replace(/password[=:]\\s*[^\\s,}]+/gi, 'password=***');\n\n\t\t\tconsole.error('[htlkg Auth] Authentication failed:', safeMessage);\n\t\t} else {\n\t\t\tconsole.error('[htlkg Auth] Authentication failed: Unknown error');\n\t\t}\n\t}\n\n\treturn next();\n};\n","/**\n * Route guard middleware for htlkg integration\n *\n * This middleware enforces access control based on route configuration:\n * - Public routes: accessible to everyone\n * - Authenticated routes: require any logged-in user\n * - Admin routes: require admin privileges\n * - Brand routes: require brand-specific access or admin privileges\n */\n\nimport type { MiddlewareHandler } from 'astro';\nimport type { RoutePattern } from '../htlkg/config.js';\nimport { htlkgConfig } from 'virtual:htlkg';\n\n/**\n * Helper: Check if pathname matches any of the provided patterns\n */\nfunction matchesPattern(pathname: string, patterns: RoutePattern[]): boolean {\n\treturn patterns.some((pattern) => {\n\t\ttry {\n\t\t\tif (typeof pattern === 'string') {\n\t\t\t\t// Special case: \"/\" only matches exactly\n\t\t\t\tif (pattern === '/') {\n\t\t\t\t\treturn pathname === '/';\n\t\t\t\t}\n\t\t\t\t// String pattern: exact match or starts with (for sub-routes)\n\t\t\t\treturn pathname === pattern || pathname.startsWith(pattern + '/');\n\t\t\t}\n\t\t\t// RegExp pattern: test against pathname\n\t\t\treturn pattern.test(pathname);\n\t\t} catch (error) {\n\t\t\t// Log pattern matching errors but don't block the request\n\t\t\tconsole.error(\n\t\t\t\t'[htlkg] Error matching route pattern:',\n\t\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t});\n}\n\n/**\n * Route guard middleware - protects routes based on configuration\n * \n * This middleware runs after authMiddleware and enforces access control\n * based on the route configuration provided to the htlkg integration.\n * \n * @example\n * // In astro.config.mjs\n * htlkg({\n *   auth: {\n *     publicRoutes: ['/login', '/'],\n *     adminRoutes: [/^\\/admin/],\n *     brandRoutes: [\n *       { pattern: /^\\/brands\\/(\\d+)/, brandIdParam: 1 }\n *     ],\n *     loginUrl: '/login'\n *   }\n * })\n */\nexport const routeGuard: MiddlewareHandler = async (context, next) => {\n\tconst { locals, url, redirect } = context;\n\tconst pathname = url.pathname;\n\n\tconst { routeGuardConfig } = htlkgConfig;\n\tconst {\n\t\tpublicRoutes = [],\n\t\tauthenticatedRoutes = [],\n\t\tadminRoutes = [],\n\t\tbrandRoutes = [],\n\t\tloginUrl = '/login',\n\t} = routeGuardConfig || {};\n\n\ttry {\n\t\t// Public routes - no auth required\n\t\tif (matchesPattern(pathname, publicRoutes)) {\n\t\t\treturn next();\n\t\t}\n\n\t\tconst user = locals.user;\n\n\t\t// Admin routes - require admin role\n\t\tif (matchesPattern(pathname, adminRoutes)) {\n\t\t\tif (!user || !user.isAdmin) {\n\t\t\t\treturn redirect(`${loginUrl}?error=admin_required`);\n\t\t\t}\n\t\t\treturn next();\n\t\t}\n\n\t\t// Brand routes - require brand access or admin\n\t\tfor (const brandRoute of brandRoutes) {\n\t\t\ttry {\n\t\t\t\tconst match = pathname.match(brandRoute.pattern);\n\t\t\t\tif (match) {\n\t\t\t\t\tconst brandId = Number.parseInt(match[brandRoute.brandIdParam], 10);\n\n\t\t\t\t\tif (Number.isNaN(brandId)) {\n\t\t\t\t\t\tconsole.warn(`[htlkg] Invalid brandId extracted from ${pathname}`);\n\t\t\t\t\t\treturn redirect(`${loginUrl}?error=invalid_brand`);\n\t\t\t\t\t}\n\n\t\t\t\t\tif (!user || (!user.isAdmin && !user.brandIds.includes(brandId))) {\n\t\t\t\t\t\treturn redirect(`${loginUrl}?error=access_denied`);\n\t\t\t\t\t}\n\t\t\t\t\treturn next();\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t`[htlkg] Error processing brand route for ${pathname}:`,\n\t\t\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t\t\t);\n\t\t\t\t// Fail-safe: deny access on error\n\t\t\t\treturn redirect(`${loginUrl}?error=access_denied`);\n\t\t\t}\n\t\t}\n\n\t\t// Authenticated routes - require any logged-in user\n\t\tif (matchesPattern(pathname, authenticatedRoutes)) {\n\t\t\tif (!user) {\n\t\t\t\tconst returnUrl = encodeURIComponent(pathname + url.search);\n\t\t\t\treturn redirect(`${loginUrl}?redirect=${returnUrl}`);\n\t\t\t}\n\t\t\treturn next();\n\t\t}\n\n\t\t// Default: allow access\n\t\treturn next();\n\t} catch (error) {\n\t\t// Catch-all error handler for route guard\n\t\tconsole.error(\n\t\t\t'[htlkg] Unexpected error in route guard:',\n\t\t\terror instanceof Error ? error.message : 'Unknown error',\n\t\t);\n\t\t// Fail-safe: deny access and redirect to login\n\t\treturn redirect(`${loginUrl}?error=server_error`);\n\t}\n};\n\n/**\n * Helper functions for programmatic route protection in pages\n * These can be used in Astro pages for more fine-grained control\n */\n\n/**\n * Require authentication for a page\n * Redirects to login if user is not authenticated\n */\nexport async function requireAuth(context: any, loginUrl = '/login') {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\tconst currentUrl = context.url.pathname + context.url.search;\n\t\tconst encodedReturnUrl = encodeURIComponent(currentUrl);\n\t\treturn context.redirect(`${loginUrl}?redirect=${encodedReturnUrl}`);\n\t}\n\treturn user;\n}\n\n/**\n * Require admin access for a page\n * Redirects to login if user is not an admin\n */\nexport async function requireAdminAccess(context: any, loginUrl = '/login') {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\treturn context.redirect(`${loginUrl}?error=not_authenticated`);\n\t}\n\tif (!user.isAdmin) {\n\t\treturn context.redirect(`${loginUrl}?error=admin_required`);\n\t}\n\treturn user;\n}\n\n/**\n * Require brand access for a page\n * Redirects to login if user doesn't have access to the specified brand\n */\nexport async function requireBrandAccess(\n\tcontext: any,\n\tbrandId: number,\n\tloginUrl = '/login'\n) {\n\tconst user = context.locals.user;\n\tif (!user) {\n\t\treturn context.redirect(`${loginUrl}?error=not_authenticated`);\n\t}\n\tif (!user.isAdmin && !user.brandIds.includes(brandId)) {\n\t\treturn context.redirect(`${loginUrl}?error=access_denied`);\n\t}\n\treturn user;\n}\n"],"mappings":";AAUA,SAAS,gBAAgB;;;ACCzB,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,mBAAmB;AAG5B,IAAI,oBAAoB;AAKxB,SAAS,0BAAgC;AACxC,MAAI,kBAAmB;AAEvB,MAAI;AACH,UAAM,EAAE,cAAc,IAAI;AAC1B,QAAI,CAAC,eAAe;AACnB,cAAQ,KAAK,gDAAgD;AAC7D;AAAA,IACD;AAGA,YAAQ,UAAU,eAAsB,EAAE,KAAK,KAAK,CAAC;AAGrD,mBAAe,qBAAqB;AAGpC,UAAM,QAAQ,OAAO,WAAW,cAC7B,OAAO,SAAS,aAAa,WAC7B,QAAQ,IAAI,aAAa;AAC5B,mBAAe,eAAe,KAAK;AAEnC,wBAAoB;AACpB,YAAQ,KAAK,sDAAsD;AAAA,EACpE,SAAS,OAAO;AACf,UAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU;AAC1D,YAAQ,MAAM,6CAA6C,QAAQ,EAAE;AAAA,EACtE;AACD;AAgBO,IAAM,iBAAoC,OAAO,SAAS,SAAS;AACzE,QAAM,EAAE,OAAO,IAAI;AAGnB,0BAAwB;AAExB,MAAI;AACH,UAAM,OAAO,MAAM,QAAQ,OAAO;AAClC,WAAO,OAAO;AAAA,EACf,SAAS,OAAO;AAEf,WAAO,OAAO;AAGd,QAAI,iBAAiB,OAAO;AAE3B,YAAM,cAAc,MAAM,QACxB,QAAQ,0BAA0B,WAAW,EAC7C,QAAQ,wBAAwB,SAAS,EACzC,QAAQ,2BAA2B,YAAY,EAC/C,QAAQ,6BAA6B,cAAc;AAErD,cAAQ,MAAM,uCAAuC,WAAW;AAAA,IACjE,OAAO;AACN,cAAQ,MAAM,mDAAmD;AAAA,IAClE;AAAA,EACD;AAEA,SAAO,KAAK;AACb;;;ACnFA,SAAS,eAAAA,oBAAmB;AAK5B,SAAS,eAAe,UAAkB,UAAmC;AAC5E,SAAO,SAAS,KAAK,CAAC,YAAY;AACjC,QAAI;AACH,UAAI,OAAO,YAAY,UAAU;AAEhC,YAAI,YAAY,KAAK;AACpB,iBAAO,aAAa;AAAA,QACrB;AAEA,eAAO,aAAa,WAAW,SAAS,WAAW,UAAU,GAAG;AAAA,MACjE;AAEA,aAAO,QAAQ,KAAK,QAAQ;AAAA,IAC7B,SAAS,OAAO;AAEf,cAAQ;AAAA,QACP;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC1C;AACA,aAAO;AAAA,IACR;AAAA,EACD,CAAC;AACF;AAqBO,IAAM,aAAgC,OAAO,SAAS,SAAS;AACrE,QAAM,EAAE,QAAQ,KAAK,SAAS,IAAI;AAClC,QAAM,WAAW,IAAI;AAErB,QAAM,EAAE,iBAAiB,IAAIA;AAC7B,QAAM;AAAA,IACL,eAAe,CAAC;AAAA,IAChB,sBAAsB,CAAC;AAAA,IACvB,cAAc,CAAC;AAAA,IACf,cAAc,CAAC;AAAA,IACf,WAAW;AAAA,EACZ,IAAI,oBAAoB,CAAC;AAEzB,MAAI;AAEH,QAAI,eAAe,UAAU,YAAY,GAAG;AAC3C,aAAO,KAAK;AAAA,IACb;AAEA,UAAM,OAAO,OAAO;AAGpB,QAAI,eAAe,UAAU,WAAW,GAAG;AAC1C,UAAI,CAAC,QAAQ,CAAC,KAAK,SAAS;AAC3B,eAAO,SAAS,GAAG,QAAQ,uBAAuB;AAAA,MACnD;AACA,aAAO,KAAK;AAAA,IACb;AAGA,eAAW,cAAc,aAAa;AACrC,UAAI;AACH,cAAM,QAAQ,SAAS,MAAM,WAAW,OAAO;AAC/C,YAAI,OAAO;AACV,gBAAM,UAAU,OAAO,SAAS,MAAM,WAAW,YAAY,GAAG,EAAE;AAElE,cAAI,OAAO,MAAM,OAAO,GAAG;AAC1B,oBAAQ,KAAK,0CAA0C,QAAQ,EAAE;AACjE,mBAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,UAClD;AAEA,cAAI,CAAC,QAAS,CAAC,KAAK,WAAW,CAAC,KAAK,SAAS,SAAS,OAAO,GAAI;AACjE,mBAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,UAClD;AACA,iBAAO,KAAK;AAAA,QACb;AAAA,MACD,SAAS,OAAO;AACf,gBAAQ;AAAA,UACP,4CAA4C,QAAQ;AAAA,UACpD,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAC1C;AAEA,eAAO,SAAS,GAAG,QAAQ,sBAAsB;AAAA,MAClD;AAAA,IACD;AAGA,QAAI,eAAe,UAAU,mBAAmB,GAAG;AAClD,UAAI,CAAC,MAAM;AACV,cAAM,YAAY,mBAAmB,WAAW,IAAI,MAAM;AAC1D,eAAO,SAAS,GAAG,QAAQ,aAAa,SAAS,EAAE;AAAA,MACpD;AACA,aAAO,KAAK;AAAA,IACb;AAGA,WAAO,KAAK;AAAA,EACb,SAAS,OAAO;AAEf,YAAQ;AAAA,MACP;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAC1C;AAEA,WAAO,SAAS,GAAG,QAAQ,qBAAqB;AAAA,EACjD;AACD;AAWA,eAAsB,YAAY,SAAc,WAAW,UAAU;AACpE,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,UAAM,aAAa,QAAQ,IAAI,WAAW,QAAQ,IAAI;AACtD,UAAM,mBAAmB,mBAAmB,UAAU;AACtD,WAAO,QAAQ,SAAS,GAAG,QAAQ,aAAa,gBAAgB,EAAE;AAAA,EACnE;AACA,SAAO;AACR;AAMA,eAAsB,mBAAmB,SAAc,WAAW,UAAU;AAC3E,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,WAAO,QAAQ,SAAS,GAAG,QAAQ,0BAA0B;AAAA,EAC9D;AACA,MAAI,CAAC,KAAK,SAAS;AAClB,WAAO,QAAQ,SAAS,GAAG,QAAQ,uBAAuB;AAAA,EAC3D;AACA,SAAO;AACR;AAMA,eAAsB,mBACrB,SACA,SACA,WAAW,UACV;AACD,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI,CAAC,MAAM;AACV,WAAO,QAAQ,SAAS,GAAG,QAAQ,0BAA0B;AAAA,EAC9D;AACA,MAAI,CAAC,KAAK,WAAW,CAAC,KAAK,SAAS,SAAS,OAAO,GAAG;AACtD,WAAO,QAAQ,SAAS,GAAG,QAAQ,sBAAsB;AAAA,EAC1D;AACA,SAAO;AACR;;;AF/JO,IAAM,YAAY,SAAS,gBAAgB,UAAU;","names":["htlkgConfig"]}

package/dist/runtime-config.js

@@ -0,0 +1,10 @@
+// src/runtime-config.ts
+import {
+  htlkgConfig,
+  htlkgConfig as htlkgConfig2
+} from "virtual:htlkg";
+export {
+  htlkgConfig2 as getHtlkgConfig,
+  htlkgConfig
+};
+//# sourceMappingURL=runtime-config.js.map

package/dist/runtime-config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime-config.ts"],"sourcesContent":["/**\n * Runtime Configuration for @htlkg/astro\n *\n * @deprecated This module is deprecated. Import from 'virtual:htlkg' instead.\n *\n * @example\n * // OLD (deprecated)\n * import { getHtlkgConfig } from '@htlkg/astro/runtime-config';\n * const config = getHtlkgConfig();\n *\n * // NEW\n * import { htlkgConfig } from 'virtual:htlkg';\n * const { routeGuardConfig, loginPageConfig, amplifyConfig } = htlkgConfig;\n */\n\nexport {\n\thtlkgConfig,\n\thtlkgConfig as getHtlkgConfig,\n} from 'virtual:htlkg';\n"],"mappings":";AAeA;AAAA,EACC;AAAA,EACe,eAAfA;AAAA,OACM;","names":["htlkgConfig"]}

package/dist/utils/index.js

@@ -10,6 +10,16 @@ import {
   parseListParams,
   processListData
 } from "../chunk-2GML443T.js";
+import {
+  getClientIP,
+  getQueryParams,
+  getRequestHeaders,
+  getServerData,
+  isMobileDevice,
+  isServerSide,
+  setCacheControl,
+  setResponseHeaders
+} from "../chunk-WNMPTDCR.js";
 import {
   chunkArray,
   filterItems,
@@ -28,16 +38,6 @@ import {
   serializeForHydration,
   shouldHydrate
 } from "../chunk-64USRLVP.js";
-import {
-  getClientIP,
-  getQueryParams,
-  getRequestHeaders,
-  getServerData,
-  isMobileDevice,
-  isServerSide,
-  setCacheControl,
-  setResponseHeaders
-} from "../chunk-WNMPTDCR.js";
 export {
   applyClientFilters,
   buildGraphQLFilter,

package/dist/vue-app-setup.js

@@ -1,6 +1,6 @@
 // src/vue-app-setup.ts
-import { amplifyConfig } from "virtual:htlkg-config";
 import { Amplify } from "aws-amplify";
+import { htlkgConfig } from "virtual:htlkg";
 function setupVueApp(app) {
   if (import.meta.env.DEV && typeof window !== "undefined") {
     try {
@@ -12,6 +12,7 @@ function setupVueApp(app) {
     }
   }
   try {
+    const { amplifyConfig } = htlkgConfig;
     if (!amplifyConfig) {
       console.warn("[htlkg] No Amplify configuration provided");
       return;

package/dist/vue-app-setup.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/vue-app-setup.ts"],"sourcesContent":["/**\n * Vue App Setup for htlkg Integration\n * \n * This file is automatically loaded by the Vue integration when vueAppSetup is enabled.\n * It configures AWS Amplify for client-side authentication in all Vue components.\n * It also sets up nanostores devtools integration for Vue DevTools.\n */\n\n/// <reference types=\"vite/client\" />\n\nimport { amplifyConfig } from \"virtual:htlkg-config\";\nimport type { App } from \"vue\";\nimport type { ResourcesConfig } from \"aws-amplify\";\nimport { Amplify } from \"aws-amplify\";\n\n/**\n * Setup function called by Astro's Vue integration\n * Configures Amplify for client-side authentication and nanostores devtools\n */\nexport default function setupVueApp(app: App): void {\n\t// Setup nanostores devtools in development\n\t// The devtools plugin will automatically detect stores used in components\n\tif (import.meta.env.DEV && typeof window !== 'undefined') {\n\t\ttry {\n\t\t\t// Dynamically import devtools plugin (only in browser)\n\t\t\timport('@nanostores/vue/devtools').then(({ devtools }) => {\n\t\t\t\t// Install devtools plugin - it will detect stores automatically\n\t\t\t\tapp.use(devtools, {});\n\t\t\t}).catch(() => {\n\t\t\t\t// Silently ignore - devtools are optional\n\t\t\t});\n\t\t} catch {\n\t\t\t// Silently ignore - devtools are optional\n\t\t}\n\t}\n\t\n\t// Setup Amplify\n\ttry {\n\t\tif (!amplifyConfig) {\n\t\t\tconsole.warn(\"[htlkg] No Amplify configuration provided\");\n\t\t\treturn;\n\t\t}\n\n\t\t// Check if this is a full amplify_outputs.json config\n\t\tif (\n\t\t\t\"auth\" in amplifyConfig ||\n\t\t\t\"data\" in amplifyConfig ||\n\t\t\t\"storage\" in amplifyConfig\n\t\t) {\n\t\t\tAmplify.configure(amplifyConfig as ResourcesConfig, { ssr: true });\n\t\t} else {\n\t\t\t// Legacy individual config properties\n\t\t\tconst { userPoolId, userPoolClientId, region } = amplifyConfig as {\n\t\t\t\tuserPoolId?: string;\n\t\t\t\tuserPoolClientId?: string;\n\t\t\t\tregion?: string;\n\t\t\t};\n\n\t\t\tif (userPoolId && userPoolClientId) {\n\t\t\t\tconst config: ResourcesConfig = {\n\t\t\t\t\tAuth: {\n\t\t\t\t\t\tCognito: {\n\t\t\t\t\t\t\tuserPoolId,\n\t\t\t\t\t\t\tuserPoolClientId,\n\t\t\t\t\t\t\t...(region && { region }),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\tAmplify.configure(config, { ssr: true });\n\t\t\t} else {\n\t\t\t\tconsole.error(\n\t\t\t\t\t\"[htlkg] Missing required Amplify configuration (userPoolId, userPoolClientId)\",\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[htlkg] Failed to setup Vue app:\", error);\n\t\t// Don't throw - allow app to continue even if Amplify setup fails\n\t}\n}\n"],"mappings":";AAUA,SAAS,qBAAqB;AAG9B,SAAS,eAAe;AAMT,SAAR,YAA6B,KAAgB;AAGnD,MAAI,YAAY,IAAI,OAAO,OAAO,WAAW,aAAa;AACzD,QAAI;AAEH,aAAO,0BAA0B,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM;AAEzD,YAAI,IAAI,UAAU,CAAC,CAAC;AAAA,MACrB,CAAC,EAAE,MAAM,MAAM;AAAA,MAEf,CAAC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACD;AAGA,MAAI;AACH,QAAI,CAAC,eAAe;AACnB,cAAQ,KAAK,2CAA2C;AACxD;AAAA,IACD;AAGA,QACC,UAAU,iBACV,UAAU,iBACV,aAAa,eACZ;AACD,cAAQ,UAAU,eAAkC,EAAE,KAAK,KAAK,CAAC;AAAA,IAClE,OAAO;AAEN,YAAM,EAAE,YAAY,kBAAkB,OAAO,IAAI;AAMjD,UAAI,cAAc,kBAAkB;AACnC,cAAM,SAA0B;AAAA,UAC/B,MAAM;AAAA,YACL,SAAS;AAAA,cACR;AAAA,cACA;AAAA,cACA,GAAI,UAAU,EAAE,OAAO;AAAA,YACxB;AAAA,UACD;AAAA,QACD;AAEA,gBAAQ,UAAU,QAAQ,EAAE,KAAK,KAAK,CAAC;AAAA,MACxC,OAAO;AACN,gBAAQ;AAAA,UACP;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD,SAAS,OAAO;AACf,YAAQ,MAAM,oCAAoC,KAAK;AAAA,EAExD;AACD;","names":[]}
+{"version":3,"sources":["../src/vue-app-setup.ts"],"sourcesContent":["/**\n * Vue App Setup for htlkg Integration\n *\n * This file is automatically loaded by the Vue integration when vueAppSetup is enabled.\n * It configures AWS Amplify for client-side authentication in all Vue components.\n * It also sets up nanostores devtools integration for Vue DevTools.\n */\n\n/// <reference types=\"vite/client\" />\n\nimport type { App } from \"vue\";\nimport type { ResourcesConfig } from \"aws-amplify\";\nimport { Amplify } from \"aws-amplify\";\nimport { htlkgConfig } from \"virtual:htlkg\";\n\n/**\n * Setup function called by Astro's Vue integration\n * Configures Amplify for client-side authentication and nanostores devtools\n */\nexport default function setupVueApp(app: App): void {\n\t// Setup nanostores devtools in development\n\t// The devtools plugin will automatically detect stores used in components\n\tif (import.meta.env.DEV && typeof window !== 'undefined') {\n\t\ttry {\n\t\t\t// Dynamically import devtools plugin (only in browser)\n\t\t\timport('@nanostores/vue/devtools').then(({ devtools }) => {\n\t\t\t\t// Install devtools plugin - it will detect stores automatically\n\t\t\t\tapp.use(devtools, {});\n\t\t\t}).catch(() => {\n\t\t\t\t// Silently ignore - devtools are optional\n\t\t\t});\n\t\t} catch {\n\t\t\t// Silently ignore - devtools are optional\n\t\t}\n\t}\n\n\t// Setup Amplify\n\ttry {\n\t\tconst { amplifyConfig } = htlkgConfig;\n\t\tif (!amplifyConfig) {\n\t\t\tconsole.warn(\"[htlkg] No Amplify configuration provided\");\n\t\t\treturn;\n\t\t}\n\n\t\t// Check if this is a full amplify_outputs.json config\n\t\tif (\n\t\t\t\"auth\" in amplifyConfig ||\n\t\t\t\"data\" in amplifyConfig ||\n\t\t\t\"storage\" in amplifyConfig\n\t\t) {\n\t\t\tAmplify.configure(amplifyConfig as ResourcesConfig, { ssr: true });\n\t\t} else {\n\t\t\t// Legacy individual config properties\n\t\t\tconst { userPoolId, userPoolClientId, region } = amplifyConfig as {\n\t\t\t\tuserPoolId?: string;\n\t\t\t\tuserPoolClientId?: string;\n\t\t\t\tregion?: string;\n\t\t\t};\n\n\t\t\tif (userPoolId && userPoolClientId) {\n\t\t\t\tconst config: ResourcesConfig = {\n\t\t\t\t\tAuth: {\n\t\t\t\t\t\tCognito: {\n\t\t\t\t\t\t\tuserPoolId,\n\t\t\t\t\t\t\tuserPoolClientId,\n\t\t\t\t\t\t\t...(region && { region }),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\tAmplify.configure(config, { ssr: true });\n\t\t\t} else {\n\t\t\t\tconsole.error(\n\t\t\t\t\t\"[htlkg] Missing required Amplify configuration (userPoolId, userPoolClientId)\",\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[htlkg] Failed to setup Vue app:\", error);\n\t\t// Don't throw - allow app to continue even if Amplify setup fails\n\t}\n}\n"],"mappings":";AAYA,SAAS,eAAe;AACxB,SAAS,mBAAmB;AAMb,SAAR,YAA6B,KAAgB;AAGnD,MAAI,YAAY,IAAI,OAAO,OAAO,WAAW,aAAa;AACzD,QAAI;AAEH,aAAO,0BAA0B,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM;AAEzD,YAAI,IAAI,UAAU,CAAC,CAAC;AAAA,MACrB,CAAC,EAAE,MAAM,MAAM;AAAA,MAEf,CAAC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACD;AAGA,MAAI;AACH,UAAM,EAAE,cAAc,IAAI;AAC1B,QAAI,CAAC,eAAe;AACnB,cAAQ,KAAK,2CAA2C;AACxD;AAAA,IACD;AAGA,QACC,UAAU,iBACV,UAAU,iBACV,aAAa,eACZ;AACD,cAAQ,UAAU,eAAkC,EAAE,KAAK,KAAK,CAAC;AAAA,IAClE,OAAO;AAEN,YAAM,EAAE,YAAY,kBAAkB,OAAO,IAAI;AAMjD,UAAI,cAAc,kBAAkB;AACnC,cAAM,SAA0B;AAAA,UAC/B,MAAM;AAAA,YACL,SAAS;AAAA,cACR;AAAA,cACA;AAAA,cACA,GAAI,UAAU,EAAE,OAAO;AAAA,YACxB;AAAA,UACD;AAAA,QACD;AAEA,gBAAQ,UAAU,QAAQ,EAAE,KAAK,KAAK,CAAC;AAAA,MACxC,OAAO;AACN,gBAAQ;AAAA,UACP;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD,SAAS,OAAO;AACf,YAAQ,MAAM,oCAAoC,KAAK;AAAA,EAExD;AACD;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@htlkg/astro",
-  "version": "0.0.13",
+  "version": "0.0.17",
   "type": "module",
   "exports": {
     ".": {
@@ -23,6 +23,10 @@
       "import": "./dist/vue-app-setup.js",
       "types": "./src/vue-app-setup.ts"
     },
+    "./runtime-config": {
+      "import": "./dist/runtime-config.js",
+      "types": "./src/runtime-config.ts"
+    },
     "./auth/LoginPage.astro": "./src/auth/LoginPage.astro",
     "./layouts": "./src/layouts/index.ts",
     "./layouts/*.astro": "./src/layouts/*.astro",
@@ -54,52 +58,43 @@
     "dist",
     "src"
   ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "prepublishOnly": "pnpm build",
-    "version:patch": "pnpm version patch --no-git-tag-version",
-    "version:minor": "pnpm version minor --no-git-tag-version",
-    "version:major": "pnpm version major --no-git-tag-version"
-  },
   "dependencies": {
-    "@htlkg/core": "^0.0.9",
-    "@htlkg/components": "^0.0.9",
-    "@hotelinking/ui": "^16.49.16"
-  },
-  "peerDependencies": {
-    "@astrojs/tailwind": "^6.0.0",
+    "@hotelinking/ui": "^16.49.16",
+    "@astrojs/tailwind": "^6.0.2",
     "@astrojs/vue": "^5.0.0",
     "@inox-tools/request-nanostores": "^0.6.0",
     "@nanostores/logger": "^1.0.0",
-    "@nanostores/vue": "^0.10.0 || ^1.0.0",
-    "@vue/devtools-api": "^6.0.0 || ^7.0.0 || ^8.0.0",
+    "@nanostores/vue": "^1.0.1",
+    "@vue/devtools-api": "^8.0.5",
+    "nanostores": "^0.11.3",
+    "tailwindcss": "^3.4.18",
+    "vue": "^3.5.22",
+    "vite-plugin-vue-devtools": "^7.6.10",
+    "@htlkg/components": "0.0.11",
+    "@htlkg/core": "0.0.10"
+  },
+  "peerDependencies": {
     "astro": "^5.0.0",
-    "aws-amplify": "^6.0.0",
-    "nanostores": "^0.11.0 || ^1.0.0",
-    "tailwindcss": "^3.0.0",
-    "vue": "^3.5.0"
+    "aws-amplify": "^6.0.0"
   },
   "devDependencies": {
-    "@astrojs/tailwind": "^6.0.2",
-    "@astrojs/vue": "^5.0.0",
-    "@inox-tools/request-nanostores": "^0.6.0",
-    "@nanostores/logger": "^1.0.0",
-    "@nanostores/vue": "^0.10.0",
-    "@vue/devtools-api": "^6.6.4",
     "astro": "^5.14.7",
     "aws-amplify": "^6.11.3",
-    "nanostores": "^0.11.3",
-    "tailwindcss": "^3.4.18",
     "tsup": "^8.0.0",
     "typescript": "^5.9.2",
-    "vite-plugin-vue-devtools": "^7.6.10",
-    "vitest": "^3.2.4",
-    "vue": "^3.5.22"
+    "vite": "^6.0.0",
+    "vitest": "^3.2.4"
   },
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "version:patch": "pnpm version patch --no-git-tag-version",
+    "version:minor": "pnpm version minor --no-git-tag-version",
+    "version:major": "pnpm version major --no-git-tag-version"
   }
-}
+}

package/src/auth/LoginPage.astro

@@ -16,18 +16,14 @@
 
 import DefaultLayout from "../layouts/DefaultLayout.astro";
 import LoginForm from "./LoginForm.vue";
+import { htlkgConfig } from "virtual:htlkg";
 
 export const prerender = false;
 
-// Lazy load configuration to avoid build-time evaluation
-let loginPageConfig;
-try {
-  const config = await import("virtual:htlkg-config");
-  loginPageConfig = config.loginPageConfig;
-} catch (e) {
-  // During build analysis, virtual modules may not be available
-  loginPageConfig = null;
-}
+// Get login page configuration from virtual module
+const { loginPageConfig } = htlkgConfig;
+
+console.log(loginPageConfig);
 
 const {
   logo = "https://images.hotelinking.com/ui/WiFiBot.svg",

package/src/htlkg/htlkg.md

@@ -32,32 +32,31 @@ export default defineConfig({
 - Route guard configuration
 - Login page injection
 - Brand route handling
-- Virtual module configuration
+- Runtime configuration
 
 ## Options
 
 ```typescript
 interface HtlkgIntegrationOptions {
   auth?: {
-    enabled: boolean;
-    loginPage?: string;
     publicRoutes?: RoutePattern[];
-    protectedRoutes?: RoutePattern[];
-  };
-  brandRoutes?: {
-    enabled: boolean;
-    pattern?: string;
+    authenticatedRoutes?: RoutePattern[];
+    adminRoutes?: RoutePattern[];
+    brandRoutes?: BrandRouteConfig[];
+    loginUrl?: string;
   };
+  loginPage?: {
+    path?: string;
+    logo?: string;
+    title?: string;
+    redirectUrl?: string;
+  } | false;
+  amplify?: Record<string, unknown>;
+  vueAppSetup?: 'auto' | 'basic' | 'full';
 }
 ```
 
-## Virtual Modules
-
-The integration provides virtual modules for configuration:
+## Configuration
 
-```typescript
-// Access config in your code
-import config from 'virtual:htlkg-config';
-
-console.log(config.auth.loginPage);
-```
+Configuration is passed to the integration and made available to middleware
+and pages at runtime via the internal `runtime-config` module.

package/src/htlkg/index.ts

@@ -1,20 +1,106 @@
 /**
  * htlkg Astro Integration
- * 
+ *
  * Supports static, hybrid, and full SSR output modes.
+ * Uses a virtual Vite module (virtual:htlkg) to provide configuration
+ * to middleware and Vue app setup.
  */
 
 import tailwind from '@astrojs/tailwind';
 import vue from '@astrojs/vue';
+import inoxToolsRequestNanostores from '@inox-tools/request-nanostores';
 import type { AstroIntegration } from 'astro';
-import type { HtlkgIntegrationOptions } from './config.js';
-import { createVirtualModulePlugin, virtualModuleTypes } from './virtual-modules.js';
+import type { Plugin } from 'vite';
+import type { HtlkgIntegrationOptions, RouteGuardConfig, LoginPageConfig } from './config.js';
 
 const DEFAULT_ENV_VARS = [
 	'PUBLIC_COGNITO_USER_POOL_ID',
 	'PUBLIC_COGNITO_USER_POOL_CLIENT_ID'
 ];
 
+const VIRTUAL_MODULE_ID = 'virtual:htlkg';
+const RESOLVED_VIRTUAL_MODULE_ID = '\0' + VIRTUAL_MODULE_ID;
+
+/**
+ * Create Vite plugin that provides the virtual:htlkg module
+ */
+function createVirtualConfigPlugin(config: {
+	routeGuard: RouteGuardConfig;
+	loginPage: LoginPageConfig | null;
+	amplify: Record<string, unknown> | null;
+}): Plugin {
+	return {
+		name: 'htlkg-virtual-config',
+		resolveId(id) {
+			if (id === VIRTUAL_MODULE_ID) {
+				return RESOLVED_VIRTUAL_MODULE_ID;
+			}
+		},
+		load(id) {
+			if (id === RESOLVED_VIRTUAL_MODULE_ID) {
+				// Serialize the config to be loaded as a module
+				// We need to handle RegExp serialization for route patterns
+				const serializedConfig = serializeConfig(config);
+				return `export const htlkgConfig = ${serializedConfig};`;
+			}
+		},
+	};
+}
+
+/**
+ * Serialize config object to JavaScript code
+ * Handles RegExp patterns which can't be JSON.stringify'd
+ */
+function serializeConfig(config: {
+	routeGuard: RouteGuardConfig;
+	loginPage: LoginPageConfig | null;
+	amplify: Record<string, unknown> | null;
+}): string {
+	const routeGuard = config.routeGuard || {};
+
+	// Build route guard config with proper RegExp handling
+	const routeGuardParts: string[] = [];
+
+	if (routeGuard.publicRoutes) {
+		routeGuardParts.push(`publicRoutes: ${serializePatterns(routeGuard.publicRoutes)}`);
+	}
+	if (routeGuard.authenticatedRoutes) {
+		routeGuardParts.push(`authenticatedRoutes: ${serializePatterns(routeGuard.authenticatedRoutes)}`);
+	}
+	if (routeGuard.adminRoutes) {
+		routeGuardParts.push(`adminRoutes: ${serializePatterns(routeGuard.adminRoutes)}`);
+	}
+	if (routeGuard.brandRoutes && routeGuard.brandRoutes.length > 0) {
+		const brandRoutesStr = routeGuard.brandRoutes.map(br =>
+			`{ pattern: ${br.pattern.toString()}, brandIdParam: ${br.brandIdParam} }`
+		).join(', ');
+		routeGuardParts.push(`brandRoutes: [${brandRoutesStr}]`);
+	}
+	if (routeGuard.loginUrl) {
+		routeGuardParts.push(`loginUrl: ${JSON.stringify(routeGuard.loginUrl)}`);
+	}
+
+	return `{
+	routeGuardConfig: { ${routeGuardParts.join(', ')} },
+	loginPageConfig: ${JSON.stringify(config.loginPage)},
+	amplifyConfig: ${JSON.stringify(config.amplify)}
+}`;
+}
+
+/**
+ * Serialize an array of route patterns (strings or RegExp)
+ */
+function serializePatterns(patterns: (string | RegExp)[]): string {
+	const serialized = patterns.map(p => {
+		if (typeof p === 'string') {
+			return JSON.stringify(p);
+		}
+		// RegExp - output as literal
+		return p.toString();
+	});
+	return `[${serialized.join(', ')}]`;
+}
+
 export function htlkg(
 	options: HtlkgIntegrationOptions = {},
 ): AstroIntegration | AstroIntegration[] {
@@ -52,14 +138,24 @@ export function htlkg(
 		integrations.push(vue());
 	}
 
+	// Add request nanostores integration (for SSR-safe nanostores)
+	integrations.push(inoxToolsRequestNanostores());
+
+	// Prepare configuration for virtual module
+	const htlkgVirtualConfig = {
+		routeGuard: auth,
+		loginPage: loginPage || null,
+		amplify: amplify || null,
+	};
+
 	// Add the main htlkg integration
 	integrations.push({
 		name: '@htlkg/astro',
 		hooks: {
 			'astro:config:setup': async ({ updateConfig, addMiddleware, injectRoute, logger }) => {
 				try {
-					logger.info(useFullVueSetup 
-						? 'Vue configured with Amplify app setup' 
+					logger.info(useFullVueSetup
+						? 'Vue configured with Amplify app setup'
 						: 'Vue configured (basic mode)');
 
 					if (amplify) {
@@ -74,11 +170,12 @@ export function htlkg(
 						}
 					}
 
-					// Create Vite virtual module plugin
-					const virtualModulePlugin = createVirtualModulePlugin(auth, loginPage, amplify || null);
-					const vitePlugins: any[] = [virtualModulePlugin];
+					// Create virtual module plugin for config
+					const vitePlugins: Plugin[] = [
+						createVirtualConfigPlugin(htlkgVirtualConfig),
+					];
 
-					// Only load Vue DevTools during development (dynamic import to avoid bundling in production)
+					// Only load Vue DevTools during development
 					const isDev = process.env.NODE_ENV !== 'production';
 					if (isDev) {
 						try {
@@ -90,7 +187,14 @@ export function htlkg(
 						}
 					}
 
-					updateConfig({ vite: { plugins: vitePlugins } });
+					// Update Vite config with plugins
+					updateConfig({
+						vite: {
+							plugins: vitePlugins
+						}
+					});
+
+					logger.info('virtual:htlkg module configured');
 
 					// Inject middleware (only for full setup)
 					if (useFullVueSetup) {
@@ -121,6 +225,15 @@ export function htlkg(
 					filename: 'htlkg.d.ts',
 					content: `
 import type { AuthUser } from '@htlkg/core/types';
+import type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';
+
+declare module 'virtual:htlkg' {
+  export const htlkgConfig: {
+    routeGuardConfig: RouteGuardConfig | null;
+    loginPageConfig: LoginPageConfig | null;
+    amplifyConfig: Record<string, unknown> | null;
+  };
+}
 
 declare global {
   namespace App {
@@ -130,8 +243,6 @@ declare global {
   }
 }
 
-${virtualModuleTypes}
-
 export {};
 `,
 				});

package/src/middleware/auth.ts

@@ -1,6 +1,6 @@
 /**
  * Authentication middleware for htlkg integration
- * 
+ *
  * This middleware:
  * - Configures AWS Amplify for server-side auth
  * - Retrieves the authenticated user from AWS Amplify
@@ -12,7 +12,7 @@ import type { MiddlewareHandler } from 'astro';
 import { Amplify } from 'aws-amplify';
 import { getUser } from '@htlkg/core/auth';
 import { globalSettings } from '@htlkg/core/amplify-astro-adapter';
-import { amplifyConfig } from 'virtual:htlkg-config';
+import { htlkgConfig } from 'virtual:htlkg';
 
 // Track if Amplify has been configured
 let amplifyConfigured = false;
@@ -24,6 +24,7 @@ function ensureAmplifyConfigured(): void {
 	if (amplifyConfigured) return;
 
 	try {
+		const { amplifyConfig } = htlkgConfig;
 		if (!amplifyConfig) {
 			console.warn('[htlkg Auth] No Amplify configuration provided');
 			return;

package/src/middleware/route-guards.test.ts

@@ -1,18 +1,12 @@
 /**
  * Unit tests for route guard helper functions
  *
- * Note: The routeGuard middleware itself cannot be tested in isolation because it
- * depends on the virtual:htlkg-config module which is generated at build time by Vite.
- * These tests focus on the exported helper functions that don't depend on the virtual module.
+ * These tests focus on the exported helper functions logic.
+ * The tests recreate the function logic to ensure isolation.
  */
 
 import { describe, it, expect, vi } from 'vitest';
 
-// Since the module imports from 'virtual:htlkg-config' at the top level,
-// we need to test the helper functions by recreating their logic here.
-// The actual helper functions (requireAuth, requireAdminAccess, requireBrandAccess)
-// have their implementation logic tested below.
-
 describe('Route Guard Helper Functions Logic', () => {
 	/**
 	 * requireAuth implementation logic test

package/src/middleware/route-guards.ts

@@ -1,6 +1,6 @@
 /**
  * Route guard middleware for htlkg integration
- * 
+ *
  * This middleware enforces access control based on route configuration:
  * - Public routes: accessible to everyone
  * - Authenticated routes: require any logged-in user
@@ -9,13 +9,8 @@
  */
 
 import type { MiddlewareHandler } from 'astro';
-import type { RoutePattern, RouteGuardConfig } from '../htlkg/config.js';
-
-// Import configuration from virtual module
-import { routeGuardConfig } from 'virtual:htlkg-config';
-
-// Type assertion for the imported config
-const config = routeGuardConfig as RouteGuardConfig;
+import type { RoutePattern } from '../htlkg/config.js';
+import { htlkgConfig } from 'virtual:htlkg';
 
 /**
  * Helper: Check if pathname matches any of the provided patterns
@@ -67,13 +62,14 @@ export const routeGuard: MiddlewareHandler = async (context, next) => {
 	const { locals, url, redirect } = context;
 	const pathname = url.pathname;
 
+	const { routeGuardConfig } = htlkgConfig;
 	const {
 		publicRoutes = [],
 		authenticatedRoutes = [],
 		adminRoutes = [],
 		brandRoutes = [],
 		loginUrl = '/login',
-	} = config;
+	} = routeGuardConfig || {};
 
 	try {
 		// Public routes - no auth required

package/src/runtime-config.ts

@@ -0,0 +1,19 @@
+/**
+ * Runtime Configuration for @htlkg/astro
+ *
+ * @deprecated This module is deprecated. Import from 'virtual:htlkg' instead.
+ *
+ * @example
+ * // OLD (deprecated)
+ * import { getHtlkgConfig } from '@htlkg/astro/runtime-config';
+ * const config = getHtlkgConfig();
+ *
+ * // NEW
+ * import { htlkgConfig } from 'virtual:htlkg';
+ * const { routeGuardConfig, loginPageConfig, amplifyConfig } = htlkgConfig;
+ */
+
+export {
+	htlkgConfig,
+	htlkgConfig as getHtlkgConfig,
+} from 'virtual:htlkg';

package/src/vue-app-setup.ts

@@ -1,6 +1,6 @@
 /**
  * Vue App Setup for htlkg Integration
- * 
+ *
  * This file is automatically loaded by the Vue integration when vueAppSetup is enabled.
  * It configures AWS Amplify for client-side authentication in all Vue components.
  * It also sets up nanostores devtools integration for Vue DevTools.
@@ -8,10 +8,10 @@
 
 /// <reference types="vite/client" />
 
-import { amplifyConfig } from "virtual:htlkg-config";
 import type { App } from "vue";
 import type { ResourcesConfig } from "aws-amplify";
 import { Amplify } from "aws-amplify";
+import { htlkgConfig } from "virtual:htlkg";
 
 /**
  * Setup function called by Astro's Vue integration
@@ -33,9 +33,10 @@ export default function setupVueApp(app: App): void {
 			// Silently ignore - devtools are optional
 		}
 	}
-	
+
 	// Setup Amplify
 	try {
+		const { amplifyConfig } = htlkgConfig;
 		if (!amplifyConfig) {
 			console.warn("[htlkg] No Amplify configuration provided");
 			return;

package/dist/chunk-IA7L6IR5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/htlkg/index.ts","../src/htlkg/virtual-modules.ts"],"sourcesContent":["/**\n * htlkg Astro Integration\n * \n * Supports static, hybrid, and full SSR output modes.\n */\n\nimport tailwind from '@astrojs/tailwind';\nimport vue from '@astrojs/vue';\nimport type { AstroIntegration } from 'astro';\nimport type { HtlkgIntegrationOptions } from './config.js';\nimport { createVirtualModulePlugin, virtualModuleTypes } from './virtual-modules.js';\n\nconst DEFAULT_ENV_VARS = [\n\t'PUBLIC_COGNITO_USER_POOL_ID',\n\t'PUBLIC_COGNITO_USER_POOL_CLIENT_ID'\n];\n\nexport function htlkg(\n\toptions: HtlkgIntegrationOptions = {},\n): AstroIntegration | AstroIntegration[] {\n\tconst {\n\t\tauth = {},\n\t\tloginPage = { path: '/login', title: 'Sign In', redirectUrl: '/admin' },\n\t\tvalidateEnv = true,\n\t\trequiredEnvVars = DEFAULT_ENV_VARS,\n\t\ttailwind: tailwindOptions,\n\t\tamplify,\n\t\tvueAppSetup = 'auto',\n\t} = options;\n\n\tconst integrations: AstroIntegration[] = [];\n\n\t// Add Tailwind integration (enabled by default)\n\tif (tailwindOptions !== false) {\n\t\tconst tailwindConfig =\n\t\t\ttypeof tailwindOptions === 'object' ? tailwindOptions : undefined;\n\t\tintegrations.push(\n\t\t\ttailwind(tailwindConfig as Parameters<typeof tailwind>[0]),\n\t\t);\n\t}\n\n\t// Determine Vue setup mode:\n\t// - 'full': Use Amplify app entrypoint (requires SSR)\n\t// - 'basic': Basic Vue without app entrypoint (works with static)\n\t// - 'auto': Default to 'basic' for compatibility with static builds\n\tconst useFullVueSetup = vueAppSetup === 'full';\n\n\t// Add Vue integration\n\tif (useFullVueSetup) {\n\t\tintegrations.push(vue({ appEntrypoint: '@htlkg/astro/vue-app-setup' }));\n\t} else {\n\t\tintegrations.push(vue());\n\t}\n\n\t// Add the main htlkg integration\n\tintegrations.push({\n\t\tname: '@htlkg/astro',\n\t\thooks: {\n\t\t\t'astro:config:setup': async ({ updateConfig, addMiddleware, injectRoute, logger }) => {\n\t\t\t\ttry {\n\t\t\t\t\tlogger.info(useFullVueSetup \n\t\t\t\t\t\t? 'Vue configured with Amplify app setup' \n\t\t\t\t\t\t: 'Vue configured (basic mode)');\n\n\t\t\t\t\tif (amplify) {\n\t\t\t\t\t\tlogger.info('Amplify configuration provided');\n\t\t\t\t\t}\n\n\t\t\t\t\t// Validate env vars (only for full setup)\n\t\t\t\t\tif (validateEnv && !amplify && useFullVueSetup) {\n\t\t\t\t\t\tconst missing = requiredEnvVars.filter(v => !process.env[v]);\n\t\t\t\t\t\tif (missing.length > 0) {\n\t\t\t\t\t\t\tlogger.warn(`Missing env vars: ${missing.join(', ')}`);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// Create Vite virtual module plugin\n\t\t\t\t\tconst virtualModulePlugin = createVirtualModulePlugin(auth, loginPage, amplify || null);\n\t\t\t\t\tconst vitePlugins: any[] = [virtualModulePlugin];\n\n\t\t\t\t\t// Only load Vue DevTools during development (dynamic import to avoid bundling in production)\n\t\t\t\t\tconst isDev = process.env.NODE_ENV !== 'production';\n\t\t\t\t\tif (isDev) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst vueDevTools = (await import('vite-plugin-vue-devtools')).default;\n\t\t\t\t\t\t\tvitePlugins.push(vueDevTools());\n\t\t\t\t\t\t\tlogger.info('Vue DevTools enabled');\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// DevTools not available, skip silently\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tupdateConfig({ vite: { plugins: vitePlugins } });\n\n\t\t\t\t\t// Inject middleware (only for full setup)\n\t\t\t\t\tif (useFullVueSetup) {\n\t\t\t\t\t\taddMiddleware({ entrypoint: '@htlkg/astro/middleware', order: 'pre' });\n\t\t\t\t\t\tlogger.info('Authentication middleware injected');\n\t\t\t\t\t}\n\n\t\t\t\t\t// Inject login page (only for full setup)\n\t\t\t\t\tif (loginPage !== false && useFullVueSetup) {\n\t\t\t\t\t\tconst loginPath = loginPage.path || '/login';\n\t\t\t\t\t\tinjectRoute({\n\t\t\t\t\t\t\tpattern: loginPath,\n\t\t\t\t\t\t\tentrypoint: '@htlkg/astro/auth/LoginPage.astro',\n\t\t\t\t\t\t\tprerender: false,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tlogger.info(`Login page injected at ${loginPath}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tlogger.info('htlkg integration configured');\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconst msg = error instanceof Error ? error.message : 'Unknown error';\n\t\t\t\t\tlogger.error(`htlkg configuration failed: ${msg}`);\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t\t'astro:config:done': ({ injectTypes }) => {\n\t\t\t\tinjectTypes({\n\t\t\t\t\tfilename: 'htlkg.d.ts',\n\t\t\t\t\tcontent: `\nimport type { AuthUser } from '@htlkg/core/types';\n\ndeclare global {\n  namespace App {\n    interface Locals {\n      user: AuthUser | null;\n    }\n  }\n}\n\n${virtualModuleTypes}\n\nexport {};\n`,\n\t\t\t\t});\n\t\t\t},\n\t\t},\n\t});\n\n\treturn integrations;\n}\n","/**\n * Virtual module setup for htlkg integration\n * Creates Vite virtual modules to pass configuration to middleware and pages\n */\n\nimport type { RouteGuardConfig, LoginPageConfig, RoutePattern } from './config.js';\n\n/**\n * Serialize a route pattern (RegExp or string) to JavaScript code\n */\nfunction serializePattern(pattern: RegExp | string): string {\n\tif (pattern instanceof RegExp) {\n\t\treturn `new RegExp(${JSON.stringify(pattern.source)}, ${JSON.stringify(pattern.flags)})`;\n\t}\n\treturn JSON.stringify(pattern);\n}\n\n/**\n * Serialize an array of route patterns to JavaScript code\n */\nfunction serializePatterns(patterns: RoutePattern[]): string {\n\tif (!patterns || patterns.length === 0) return '[]';\n\treturn `[${patterns.map(serializePattern).join(', ')}]`;\n}\n\n/**\n * Create the virtual module plugin for Vite\n * This plugin provides configuration to middleware and pages at runtime\n */\nexport function createVirtualModulePlugin(\n\tauthConfig: RouteGuardConfig,\n\tloginPageConfig: LoginPageConfig | false | null,\n\tamplifyConfig: Record<string, unknown> | null\n) {\n\tconst virtualModuleId = 'virtual:htlkg-config';\n\tconst resolvedVirtualModuleId = '\\0' + virtualModuleId;\n\n\treturn {\n\t\tname: 'htlkg-config',\n\t\tenforce: 'pre' as const,\n\t\tresolveId(id: string) {\n\t\t\tif (id === virtualModuleId) {\n\t\t\t\treturn resolvedVirtualModuleId;\n\t\t\t}\n\t\t},\n\t\tload(id: string) {\n\t\t\tif (id === resolvedVirtualModuleId) {\n\t\t\t\t// Serialize auth configuration with RegExp support\n\t\t\t\tconst serializedAuthConfig = `{\n\t\t\t\t\tpublicRoutes: ${serializePatterns(authConfig.publicRoutes || [])},\n\t\t\t\t\tauthenticatedRoutes: ${serializePatterns(authConfig.authenticatedRoutes || [])},\n\t\t\t\t\tadminRoutes: ${serializePatterns(authConfig.adminRoutes || [])},\n\t\t\t\t\tbrandRoutes: ${JSON.stringify(authConfig.brandRoutes || [])},\n\t\t\t\t\tloginUrl: ${JSON.stringify(authConfig.loginUrl || '/login')}\n\t\t\t\t}`;\n\n\t\t\t\tconst serializedAmplifyConfig = amplifyConfig\n\t\t\t\t\t? JSON.stringify(amplifyConfig)\n\t\t\t\t\t: 'null';\n\n\t\t\t\tconst serializedLoginPageConfig = loginPageConfig !== false && loginPageConfig !== null\n\t\t\t\t\t? JSON.stringify(loginPageConfig)\n\t\t\t\t\t: 'null';\n\n\t\t\t\treturn `export const routeGuardConfig = ${serializedAuthConfig};\nexport const loginPageConfig = ${serializedLoginPageConfig};\nexport const amplifyConfig = ${serializedAmplifyConfig};`;\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Type definitions for the virtual module\n * This should be injected into the project's type definitions\n */\nexport const virtualModuleTypes = `\ndeclare module 'virtual:htlkg-config' {\n  import type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';\n  \n  export const routeGuardConfig: RouteGuardConfig;\n  export const loginPageConfig: LoginPageConfig | null;\n  export const amplifyConfig: Record<string, unknown> | null;\n}\n`;\n"],"mappings":";AAMA,OAAO,cAAc;AACrB,OAAO,SAAS;;;ACGhB,SAAS,iBAAiB,SAAkC;AAC3D,MAAI,mBAAmB,QAAQ;AAC9B,WAAO,cAAc,KAAK,UAAU,QAAQ,MAAM,CAAC,KAAK,KAAK,UAAU,QAAQ,KAAK,CAAC;AAAA,EACtF;AACA,SAAO,KAAK,UAAU,OAAO;AAC9B;AAKA,SAAS,kBAAkB,UAAkC;AAC5D,MAAI,CAAC,YAAY,SAAS,WAAW,EAAG,QAAO;AAC/C,SAAO,IAAI,SAAS,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC;AACrD;AAMO,SAAS,0BACf,YACA,iBACA,eACC;AACD,QAAM,kBAAkB;AACxB,QAAM,0BAA0B,OAAO;AAEvC,SAAO;AAAA,IACN,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU,IAAY;AACrB,UAAI,OAAO,iBAAiB;AAC3B,eAAO;AAAA,MACR;AAAA,IACD;AAAA,IACA,KAAK,IAAY;AAChB,UAAI,OAAO,yBAAyB;AAEnC,cAAM,uBAAuB;AAAA,qBACZ,kBAAkB,WAAW,gBAAgB,CAAC,CAAC,CAAC;AAAA,4BACzC,kBAAkB,WAAW,uBAAuB,CAAC,CAAC,CAAC;AAAA,oBAC/D,kBAAkB,WAAW,eAAe,CAAC,CAAC,CAAC;AAAA,oBAC/C,KAAK,UAAU,WAAW,eAAe,CAAC,CAAC,CAAC;AAAA,iBAC/C,KAAK,UAAU,WAAW,YAAY,QAAQ,CAAC;AAAA;AAG5D,cAAM,0BAA0B,gBAC7B,KAAK,UAAU,aAAa,IAC5B;AAEH,cAAM,4BAA4B,oBAAoB,SAAS,oBAAoB,OAChF,KAAK,UAAU,eAAe,IAC9B;AAEH,eAAO,mCAAmC,oBAAoB;AAAA,iCACjC,yBAAyB;AAAA,+BAC3B,uBAAuB;AAAA,MACnD;AAAA,IACD;AAAA,EACD;AACD;AAMO,IAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ADhElC,IAAM,mBAAmB;AAAA,EACxB;AAAA,EACA;AACD;AAEO,SAAS,MACf,UAAmC,CAAC,GACI;AACxC,QAAM;AAAA,IACL,OAAO,CAAC;AAAA,IACR,YAAY,EAAE,MAAM,UAAU,OAAO,WAAW,aAAa,SAAS;AAAA,IACtE,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,UAAU;AAAA,IACV;AAAA,IACA,cAAc;AAAA,EACf,IAAI;AAEJ,QAAM,eAAmC,CAAC;AAG1C,MAAI,oBAAoB,OAAO;AAC9B,UAAM,iBACL,OAAO,oBAAoB,WAAW,kBAAkB;AACzD,iBAAa;AAAA,MACZ,SAAS,cAAgD;AAAA,IAC1D;AAAA,EACD;AAMA,QAAM,kBAAkB,gBAAgB;AAGxC,MAAI,iBAAiB;AACpB,iBAAa,KAAK,IAAI,EAAE,eAAe,6BAA6B,CAAC,CAAC;AAAA,EACvE,OAAO;AACN,iBAAa,KAAK,IAAI,CAAC;AAAA,EACxB;AAGA,eAAa,KAAK;AAAA,IACjB,MAAM;AAAA,IACN,OAAO;AAAA,MACN,sBAAsB,OAAO,EAAE,cAAc,eAAe,aAAa,OAAO,MAAM;AACrF,YAAI;AACH,iBAAO,KAAK,kBACT,0CACA,6BAA6B;AAEhC,cAAI,SAAS;AACZ,mBAAO,KAAK,gCAAgC;AAAA,UAC7C;AAGA,cAAI,eAAe,CAAC,WAAW,iBAAiB;AAC/C,kBAAM,UAAU,gBAAgB,OAAO,OAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC3D,gBAAI,QAAQ,SAAS,GAAG;AACvB,qBAAO,KAAK,qBAAqB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,YACtD;AAAA,UACD;AAGA,gBAAM,sBAAsB,0BAA0B,MAAM,WAAW,WAAW,IAAI;AACtF,gBAAM,cAAqB,CAAC,mBAAmB;AAG/C,gBAAM,QAAQ,QAAQ,IAAI,aAAa;AACvC,cAAI,OAAO;AACV,gBAAI;AACH,oBAAM,eAAe,MAAM,OAAO,0BAA0B,GAAG;AAC/D,0BAAY,KAAK,YAAY,CAAC;AAC9B,qBAAO,KAAK,sBAAsB;AAAA,YACnC,QAAQ;AAAA,YAER;AAAA,UACD;AAEA,uBAAa,EAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;AAG/C,cAAI,iBAAiB;AACpB,0BAAc,EAAE,YAAY,2BAA2B,OAAO,MAAM,CAAC;AACrE,mBAAO,KAAK,oCAAoC;AAAA,UACjD;AAGA,cAAI,cAAc,SAAS,iBAAiB;AAC3C,kBAAM,YAAY,UAAU,QAAQ;AACpC,wBAAY;AAAA,cACX,SAAS;AAAA,cACT,YAAY;AAAA,cACZ,WAAW;AAAA,YACZ,CAAC;AACD,mBAAO,KAAK,0BAA0B,SAAS,EAAE;AAAA,UAClD;AAEA,iBAAO,KAAK,8BAA8B;AAAA,QAC3C,SAAS,OAAO;AACf,gBAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU;AACrD,iBAAO,MAAM,+BAA+B,GAAG,EAAE;AACjD,gBAAM;AAAA,QACP;AAAA,MACD;AAAA,MACA,qBAAqB,CAAC,EAAE,YAAY,MAAM;AACzC,oBAAY;AAAA,UACX,UAAU;AAAA,UACV,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWZ,kBAAkB;AAAA;AAAA;AAAA;AAAA,QAIhB,CAAC;AAAA,MACF;AAAA,IACD;AAAA,EACD,CAAC;AAED,SAAO;AACR;","names":[]}

package/src/__mocks__/virtual-htlkg-config.ts

@@ -1,14 +0,0 @@
-/**
- * Mock for virtual:htlkg-config module used in tests
- */
-
-export const routeGuardConfig = {
-	publicRoutes: [],
-	authenticatedRoutes: [],
-	adminRoutes: [],
-	brandRoutes: [],
-	loginUrl: '/login',
-};
-
-export const loginPageConfig = null;
-export const amplifyConfig = null;

package/src/htlkg/virtual-modules.test.ts

@@ -1,158 +0,0 @@
-/**
- * Unit tests for virtual module setup
- */
-
-import { describe, it, expect } from 'vitest';
-import { createVirtualModulePlugin } from './virtual-modules.js';
-
-describe('Virtual Module Plugin', () => {
-	it('should create a valid Vite plugin', () => {
-		const authConfig = {
-			publicRoutes: ['/login', '/'],
-			authenticatedRoutes: ['/dashboard'],
-			adminRoutes: [/^\/admin/],
-			brandRoutes: [],
-			loginUrl: '/login',
-		};
-
-		const plugin = createVirtualModulePlugin(authConfig, null, null);
-
-		expect(plugin).toBeDefined();
-		expect(plugin.name).toBe('htlkg-config');
-		expect(typeof plugin.resolveId).toBe('function');
-		expect(typeof plugin.load).toBe('function');
-	});
-
-	it('should resolve virtual module ID', () => {
-		const plugin = createVirtualModulePlugin({}, null, null);
-		
-		const resolved = plugin.resolveId('virtual:htlkg-config');
-		expect(resolved).toBe('\0virtual:htlkg-config');
-	});
-
-	it('should not resolve non-virtual module IDs', () => {
-		const plugin = createVirtualModulePlugin({}, null, null);
-		
-		const resolved = plugin.resolveId('some-other-module');
-		expect(resolved).toBeUndefined();
-	});
-
-	it('should generate module code with string patterns', () => {
-		const authConfig = {
-			publicRoutes: ['/login', '/register'],
-			authenticatedRoutes: ['/dashboard'],
-			adminRoutes: [],
-			brandRoutes: [],
-			loginUrl: '/login',
-		};
-
-		const plugin = createVirtualModulePlugin(authConfig, null, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('publicRoutes: ["/login", "/register"]');
-		expect(code).toContain('authenticatedRoutes: ["/dashboard"]');
-		expect(code).toContain('loginUrl: "/login"');
-	});
-
-	it('should generate module code with RegExp patterns', () => {
-		const authConfig = {
-			publicRoutes: [],
-			authenticatedRoutes: [],
-			adminRoutes: [/^\/admin/],
-			brandRoutes: [],
-			loginUrl: '/login',
-		};
-
-		const plugin = createVirtualModulePlugin(authConfig, null, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('new RegExp');
-		// The pattern is serialized as a string, so we check for the pattern source
-		expect(code).toContain('adminRoutes: [new RegExp(');
-	});
-
-	it('should generate module code with mixed patterns', () => {
-		const authConfig = {
-			publicRoutes: ['/login', /^\/public/],
-			authenticatedRoutes: ['/dashboard', /^\/app/],
-			adminRoutes: [],
-			brandRoutes: [],
-			loginUrl: '/login',
-		};
-
-		const plugin = createVirtualModulePlugin(authConfig, null, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('"/login"');
-		expect(code).toContain('new RegExp');
-		expect(code).toContain('"/dashboard"');
-	});
-
-	it('should handle empty route arrays', () => {
-		const authConfig = {
-			publicRoutes: [],
-			authenticatedRoutes: [],
-			adminRoutes: [],
-			brandRoutes: [],
-			loginUrl: '/login',
-		};
-
-		const plugin = createVirtualModulePlugin(authConfig, null, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('publicRoutes: []');
-		expect(code).toContain('authenticatedRoutes: []');
-		expect(code).toContain('adminRoutes: []');
-	});
-
-	it('should serialize amplify config when provided', () => {
-		const amplifyConfig = {
-			userPoolId: 'us-east-1_abc123',
-			userPoolClientId: 'abc123def456',
-			region: 'us-east-1',
-		};
-
-		const plugin = createVirtualModulePlugin({}, null, amplifyConfig);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('amplifyConfig');
-		expect(code).toContain('userPoolId');
-		expect(code).toContain('us-east-1_abc123');
-	});
-
-	it('should set amplify config to null when not provided', () => {
-		const plugin = createVirtualModulePlugin({}, null, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('amplifyConfig = null');
-	});
-
-	it('should serialize login page config when provided', () => {
-		const loginPageConfig = {
-			path: '/custom-login',
-			title: 'Custom Login',
-			redirectUrl: '/dashboard',
-		};
-
-		const plugin = createVirtualModulePlugin({}, loginPageConfig, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('loginPageConfig');
-		expect(code).toContain('custom-login');
-		expect(code).toContain('Custom Login');
-	});
-
-	it('should set login page config to null when disabled', () => {
-		const plugin = createVirtualModulePlugin({}, false, null);
-		const code = plugin.load('\0virtual:htlkg-config');
-
-		expect(code).toContain('loginPageConfig = null');
-	});
-
-	it('should not load non-virtual module IDs', () => {
-		const plugin = createVirtualModulePlugin({}, null, null);
-		const code = plugin.load('some-other-module');
-
-		expect(code).toBeUndefined();
-	});
-});

package/src/htlkg/virtual-modules.ts

@@ -1,85 +0,0 @@
-/**
- * Virtual module setup for htlkg integration
- * Creates Vite virtual modules to pass configuration to middleware and pages
- */
-
-import type { RouteGuardConfig, LoginPageConfig, RoutePattern } from './config.js';
-
-/**
- * Serialize a route pattern (RegExp or string) to JavaScript code
- */
-function serializePattern(pattern: RegExp | string): string {
-	if (pattern instanceof RegExp) {
-		return `new RegExp(${JSON.stringify(pattern.source)}, ${JSON.stringify(pattern.flags)})`;
-	}
-	return JSON.stringify(pattern);
-}
-
-/**
- * Serialize an array of route patterns to JavaScript code
- */
-function serializePatterns(patterns: RoutePattern[]): string {
-	if (!patterns || patterns.length === 0) return '[]';
-	return `[${patterns.map(serializePattern).join(', ')}]`;
-}
-
-/**
- * Create the virtual module plugin for Vite
- * This plugin provides configuration to middleware and pages at runtime
- */
-export function createVirtualModulePlugin(
-	authConfig: RouteGuardConfig,
-	loginPageConfig: LoginPageConfig | false | null,
-	amplifyConfig: Record<string, unknown> | null
-) {
-	const virtualModuleId = 'virtual:htlkg-config';
-	const resolvedVirtualModuleId = '\0' + virtualModuleId;
-
-	return {
-		name: 'htlkg-config',
-		enforce: 'pre' as const,
-		resolveId(id: string) {
-			if (id === virtualModuleId) {
-				return resolvedVirtualModuleId;
-			}
-		},
-		load(id: string) {
-			if (id === resolvedVirtualModuleId) {
-				// Serialize auth configuration with RegExp support
-				const serializedAuthConfig = `{
-					publicRoutes: ${serializePatterns(authConfig.publicRoutes || [])},
-					authenticatedRoutes: ${serializePatterns(authConfig.authenticatedRoutes || [])},
-					adminRoutes: ${serializePatterns(authConfig.adminRoutes || [])},
-					brandRoutes: ${JSON.stringify(authConfig.brandRoutes || [])},
-					loginUrl: ${JSON.stringify(authConfig.loginUrl || '/login')}
-				}`;
-
-				const serializedAmplifyConfig = amplifyConfig
-					? JSON.stringify(amplifyConfig)
-					: 'null';
-
-				const serializedLoginPageConfig = loginPageConfig !== false && loginPageConfig !== null
-					? JSON.stringify(loginPageConfig)
-					: 'null';
-
-				return `export const routeGuardConfig = ${serializedAuthConfig};
-export const loginPageConfig = ${serializedLoginPageConfig};
-export const amplifyConfig = ${serializedAmplifyConfig};`;
-			}
-		},
-	};
-}
-
-/**
- * Type definitions for the virtual module
- * This should be injected into the project's type definitions
- */
-export const virtualModuleTypes = `
-declare module 'virtual:htlkg-config' {
-  import type { RouteGuardConfig, LoginPageConfig } from '@htlkg/astro/htlkg/config';
-  
-  export const routeGuardConfig: RouteGuardConfig;
-  export const loginPageConfig: LoginPageConfig | null;
-  export const amplifyConfig: Record<string, unknown> | null;
-}
-`;