@inai-dev/astro 0.1.0

package/README.md

@@ -0,0 +1,61 @@
+# @inai-dev/astro
+
+Astro integration for InAI Auth. Provides middleware, server-side helpers, and Astro components for authentication.
+
+## Installation
+
+```bash
+npm install @inai-dev/astro
+```
+
+## Setup
+
+### 1. Add Integration
+
+```ts
+// astro.config.mjs
+import { defineConfig } from "astro/config";
+import inaiAuth from "@inai-dev/astro";
+
+export default defineConfig({
+  integrations: [
+    inaiAuth({
+      publishableKey: import.meta.env.INAI_PUBLISHABLE_KEY,
+    }),
+  ],
+});
+```
+
+### 2. Use in Pages
+
+```astro
+---
+// src/pages/dashboard.astro
+const auth = Astro.locals.auth;
+if (!auth?.userId) return Astro.redirect("/sign-in");
+---
+<p>Welcome {auth.user.email}</p>
+```
+
+### 3. API Endpoints
+
+```ts
+// src/pages/api/auth/[...path].ts
+import { handleAuthRoutes } from "@inai-dev/astro/server";
+export const ALL = handleAuthRoutes();
+```
+
+## Exports
+
+- `@inai-dev/astro` — Astro integration function
+- `@inai-dev/astro/middleware` — Auth middleware
+- `@inai-dev/astro/server` — Server-side helpers and API route handlers
+
+## Documentation
+
+- [Astro Integration](https://github.com/inai-dev/sdk/blob/main/docs/astro-integration.md)
+- [API Reference](https://github.com/inai-dev/sdk/blob/main/docs/api-reference.md)
+
+## License
+
+[MIT](../../LICENSE)

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import { AstroIntegration } from 'astro';
+export { InAIAstroMiddlewareConfig, inaiAstroMiddleware } from './middleware.js';
+export { auth, currentUser } from './server.js';
+export { AuthObject, OrganizationResource, UserResource } from '@inai-dev/types';
+
+interface InAIAstroConfig {
+    apiUrl: string;
+    publishableKey?: string;
+}
+declare function inaiAuth(config: InAIAstroConfig): AstroIntegration;
+
+export { type InAIAstroConfig, inaiAuth };

package/dist/index.js

@@ -0,0 +1,127 @@
+// src/integration.ts
+function inaiAuth(config) {
+  return {
+    name: "@inai-dev/astro",
+    hooks: {
+      "astro:config:setup": ({ updateConfig }) => {
+        updateConfig({
+          vite: {
+            define: {
+              "import.meta.env.INAI_API_URL": JSON.stringify(config.apiUrl),
+              "import.meta.env.INAI_PUBLISHABLE_KEY": JSON.stringify(
+                config.publishableKey ?? ""
+              )
+            }
+          }
+        });
+      }
+    }
+  };
+}
+
+// src/middleware.ts
+import {
+  COOKIE_AUTH_TOKEN,
+  getClaimsFromToken,
+  isTokenExpired
+} from "@inai-dev/shared";
+function inaiAstroMiddleware(config = {}) {
+  const { publicRoutes = [], signInUrl = "/login" } = config;
+  return async (context, next) => {
+    const { pathname } = context.url;
+    const isPublic = publicRoutes.some((route) => {
+      if (route.endsWith("*")) {
+        return pathname.startsWith(route.slice(0, -1));
+      }
+      return pathname === route;
+    }) || pathname === signInUrl || pathname.startsWith("/_") || pathname.startsWith("/api/");
+    if (isPublic) {
+      return next();
+    }
+    const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;
+    if (!token || isTokenExpired(token)) {
+      return context.redirect(
+        `${signInUrl}?returnTo=${encodeURIComponent(pathname)}`
+      );
+    }
+    const claims = getClaimsFromToken(token);
+    if (!claims) {
+      return context.redirect(signInUrl);
+    }
+    const roles = claims.roles ?? [];
+    const permissions = claims.permissions ?? [];
+    const authObject = {
+      userId: claims.sub,
+      tenantId: claims.tenant_id,
+      appId: claims.app_id ?? null,
+      envId: claims.env_id ?? null,
+      orgId: claims.org_id ?? null,
+      orgRole: claims.org_role ?? null,
+      sessionId: null,
+      getToken: async () => token,
+      has: (params) => {
+        if (params.role && roles.includes(params.role)) return true;
+        if (params.permission && permissions.includes(params.permission))
+          return true;
+        return false;
+      }
+    };
+    context.locals.auth = authObject;
+    return next();
+  };
+}
+
+// src/server.ts
+import { InAIAuthClient } from "@inai-dev/backend";
+import {
+  COOKIE_AUTH_TOKEN as COOKIE_AUTH_TOKEN2,
+  getClaimsFromToken as getClaimsFromToken2,
+  isTokenExpired as isTokenExpired2
+} from "@inai-dev/shared";
+function auth(context) {
+  const existing = context.locals.auth;
+  if (existing) return existing;
+  const token = context.cookies.get(COOKIE_AUTH_TOKEN2)?.value;
+  if (!token || isTokenExpired2(token)) return null;
+  const claims = getClaimsFromToken2(token);
+  if (!claims) return null;
+  const roles = claims.roles ?? [];
+  const permissions = claims.permissions ?? [];
+  return {
+    userId: claims.sub,
+    tenantId: claims.tenant_id,
+    appId: claims.app_id ?? null,
+    envId: claims.env_id ?? null,
+    orgId: claims.org_id ?? null,
+    orgRole: claims.org_role ?? null,
+    sessionId: null,
+    getToken: async () => token,
+    has: (params) => {
+      if (params.role && roles.includes(params.role)) return true;
+      if (params.permission && permissions.includes(params.permission))
+        return true;
+      return false;
+    }
+  };
+}
+async function currentUser(context, config) {
+  const token = context.cookies.get(COOKIE_AUTH_TOKEN2)?.value;
+  if (!token || isTokenExpired2(token)) return null;
+  const client = new InAIAuthClient({
+    apiUrl: config.apiUrl,
+    publishableKey: config.publishableKey
+  });
+  try {
+    const { data } = await client.getMe(token);
+    return data;
+  } catch {
+    return null;
+  }
+}
+export {
+  auth,
+  currentUser,
+  inaiAstroMiddleware,
+  inaiAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/integration.ts","../src/middleware.ts","../src/server.ts"],"sourcesContent":["import type { AstroIntegration } from \"astro\";\n\nexport interface InAIAstroConfig {\n  apiUrl: string;\n  publishableKey?: string;\n}\n\nexport function inaiAuth(config: InAIAstroConfig): AstroIntegration {\n  return {\n    name: \"@inai-dev/astro\",\n    hooks: {\n      \"astro:config:setup\": ({ updateConfig }) => {\n        updateConfig({\n          vite: {\n            define: {\n              \"import.meta.env.INAI_API_URL\": JSON.stringify(config.apiUrl),\n              \"import.meta.env.INAI_PUBLISHABLE_KEY\": JSON.stringify(\n                config.publishableKey ?? \"\",\n              ),\n            },\n          },\n        });\n      },\n    },\n  };\n}\n","import type { MiddlewareHandler } from \"astro\";\nimport type { AuthObject } from \"@inai-dev/types\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  getClaimsFromToken,\n  isTokenExpired,\n} from \"@inai-dev/shared\";\n\nexport interface InAIAstroMiddlewareConfig {\n  publicRoutes?: string[];\n  signInUrl?: string;\n}\n\nexport function inaiAstroMiddleware(\n  config: InAIAstroMiddlewareConfig = {},\n): MiddlewareHandler {\n  const { publicRoutes = [], signInUrl = \"/login\" } = config;\n\n  return async (context, next) => {\n    const { pathname } = context.url;\n\n    const isPublic =\n      publicRoutes.some((route) => {\n        if (route.endsWith(\"*\")) {\n          return pathname.startsWith(route.slice(0, -1));\n        }\n        return pathname === route;\n      }) ||\n      pathname === signInUrl ||\n      pathname.startsWith(\"/_\") ||\n      pathname.startsWith(\"/api/\");\n\n    if (isPublic) {\n      return next();\n    }\n\n    const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n\n    if (!token || isTokenExpired(token)) {\n      return context.redirect(\n        `${signInUrl}?returnTo=${encodeURIComponent(pathname)}`,\n      );\n    }\n\n    const claims = getClaimsFromToken(token);\n    if (!claims) {\n      return context.redirect(signInUrl);\n    }\n\n    const roles = claims.roles ?? [];\n    const permissions = claims.permissions ?? [];\n\n    const authObject: AuthObject = {\n      userId: claims.sub,\n      tenantId: claims.tenant_id,\n      appId: claims.app_id ?? null,\n      envId: claims.env_id ?? null,\n      orgId: claims.org_id ?? null,\n      orgRole: claims.org_role ?? null,\n      sessionId: null,\n      getToken: async () => token,\n      has: (params: { role?: string; permission?: string }) => {\n        if (params.role && roles.includes(params.role)) return true;\n        if (params.permission && permissions.includes(params.permission))\n          return true;\n        return false;\n      },\n    };\n\n    (context.locals as Record<string, unknown>).auth = authObject;\n\n    return next();\n  };\n}\n","import type { AuthObject, UserResource } from \"@inai-dev/types\";\nimport { InAIAuthClient } from \"@inai-dev/backend\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  getClaimsFromToken,\n  isTokenExpired,\n} from \"@inai-dev/shared\";\n\ninterface AstroContext {\n  cookies: {\n    get(name: string): { value: string } | undefined;\n  };\n  locals: Record<string, unknown>;\n}\n\nexport function auth(context: AstroContext): AuthObject | null {\n  const existing = (context.locals as Record<string, unknown>).auth as AuthObject | undefined;\n  if (existing) return existing;\n\n  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n  if (!token || isTokenExpired(token)) return null;\n\n  const claims = getClaimsFromToken(token);\n  if (!claims) return null;\n\n  const roles = claims.roles ?? [];\n  const permissions = claims.permissions ?? [];\n\n  return {\n    userId: claims.sub,\n    tenantId: claims.tenant_id,\n    appId: claims.app_id ?? null,\n    envId: claims.env_id ?? null,\n    orgId: claims.org_id ?? null,\n    orgRole: claims.org_role ?? null,\n    sessionId: null,\n    getToken: async () => token,\n    has: (params: { role?: string; permission?: string }) => {\n      if (params.role && roles.includes(params.role)) return true;\n      if (params.permission && permissions.includes(params.permission))\n        return true;\n      return false;\n    },\n  };\n}\n\nexport async function currentUser(\n  context: AstroContext,\n  config: { apiUrl: string; publishableKey?: string },\n): Promise<UserResource | null> {\n  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n  if (!token || isTokenExpired(token)) return null;\n\n  const client = new InAIAuthClient({\n    apiUrl: config.apiUrl,\n    publishableKey: config.publishableKey,\n  });\n\n  try {\n    const { data } = await client.getMe(token);\n    return data;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAOO,SAAS,SAAS,QAA2C;AAClE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,sBAAsB,CAAC,EAAE,aAAa,MAAM;AAC1C,qBAAa;AAAA,UACX,MAAM;AAAA,YACJ,QAAQ;AAAA,cACN,gCAAgC,KAAK,UAAU,OAAO,MAAM;AAAA,cAC5D,wCAAwC,KAAK;AAAA,gBAC3C,OAAO,kBAAkB;AAAA,cAC3B;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;;;ACvBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOA,SAAS,oBACd,SAAoC,CAAC,GAClB;AACnB,QAAM,EAAE,eAAe,CAAC,GAAG,YAAY,SAAS,IAAI;AAEpD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,EAAE,SAAS,IAAI,QAAQ;AAE7B,UAAM,WACJ,aAAa,KAAK,CAAC,UAAU;AAC3B,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa;AAAA,IACtB,CAAC,KACD,aAAa,aACb,SAAS,WAAW,IAAI,KACxB,SAAS,WAAW,OAAO;AAE7B,QAAI,UAAU;AACZ,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AAEtD,QAAI,CAAC,SAAS,eAAe,KAAK,GAAG;AACnC,aAAO,QAAQ;AAAA,QACb,GAAG,SAAS,aAAa,mBAAmB,QAAQ,CAAC;AAAA,MACvD;AAAA,IACF;AAEA,UAAM,SAAS,mBAAmB,KAAK;AACvC,QAAI,CAAC,QAAQ;AACX,aAAO,QAAQ,SAAS,SAAS;AAAA,IACnC;AAEA,UAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,UAAM,cAAc,OAAO,eAAe,CAAC;AAE3C,UAAM,aAAyB;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,OAAO,OAAO,UAAU;AAAA,MACxB,OAAO,OAAO,UAAU;AAAA,MACxB,OAAO,OAAO,UAAU;AAAA,MACxB,SAAS,OAAO,YAAY;AAAA,MAC5B,WAAW;AAAA,MACX,UAAU,YAAY;AAAA,MACtB,KAAK,CAAC,WAAmD;AACvD,YAAI,OAAO,QAAQ,MAAM,SAAS,OAAO,IAAI,EAAG,QAAO;AACvD,YAAI,OAAO,cAAc,YAAY,SAAS,OAAO,UAAU;AAC7D,iBAAO;AACT,eAAO;AAAA,MACT;AAAA,IACF;AAEA,IAAC,QAAQ,OAAmC,OAAO;AAEnD,WAAO,KAAK;AAAA,EACd;AACF;;;ACxEA,SAAS,sBAAsB;AAC/B;AAAA,EACE,qBAAAA;AAAA,EACA,sBAAAC;AAAA,EACA,kBAAAC;AAAA,OACK;AASA,SAAS,KAAK,SAA0C;AAC7D,QAAM,WAAY,QAAQ,OAAmC;AAC7D,MAAI,SAAU,QAAO;AAErB,QAAM,QAAQ,QAAQ,QAAQ,IAAIF,kBAAiB,GAAG;AACtD,MAAI,CAAC,SAASE,gBAAe,KAAK,EAAG,QAAO;AAE5C,QAAM,SAASD,oBAAmB,KAAK;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,QAAM,cAAc,OAAO,eAAe,CAAC;AAE3C,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,SAAS,OAAO,YAAY;AAAA,IAC5B,WAAW;AAAA,IACX,UAAU,YAAY;AAAA,IACtB,KAAK,CAAC,WAAmD;AACvD,UAAI,OAAO,QAAQ,MAAM,SAAS,OAAO,IAAI,EAAG,QAAO;AACvD,UAAI,OAAO,cAAc,YAAY,SAAS,OAAO,UAAU;AAC7D,eAAO;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAsB,YACpB,SACA,QAC8B;AAC9B,QAAM,QAAQ,QAAQ,QAAQ,IAAID,kBAAiB,GAAG;AACtD,MAAI,CAAC,SAASE,gBAAe,KAAK,EAAG,QAAO;AAE5C,QAAM,SAAS,IAAI,eAAe;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,gBAAgB,OAAO;AAAA,EACzB,CAAC;AAED,MAAI;AACF,UAAM,EAAE,KAAK,IAAI,MAAM,OAAO,MAAM,KAAK;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":["COOKIE_AUTH_TOKEN","getClaimsFromToken","isTokenExpired"]}

package/dist/middleware.d.ts

@@ -0,0 +1,9 @@
+import { MiddlewareHandler } from 'astro';
+
+interface InAIAstroMiddlewareConfig {
+    publicRoutes?: string[];
+    signInUrl?: string;
+}
+declare function inaiAstroMiddleware(config?: InAIAstroMiddlewareConfig): MiddlewareHandler;
+
+export { type InAIAstroMiddlewareConfig, inaiAstroMiddleware };

package/dist/middleware.js

@@ -0,0 +1,55 @@
+// src/middleware.ts
+import {
+  COOKIE_AUTH_TOKEN,
+  getClaimsFromToken,
+  isTokenExpired
+} from "@inai-dev/shared";
+function inaiAstroMiddleware(config = {}) {
+  const { publicRoutes = [], signInUrl = "/login" } = config;
+  return async (context, next) => {
+    const { pathname } = context.url;
+    const isPublic = publicRoutes.some((route) => {
+      if (route.endsWith("*")) {
+        return pathname.startsWith(route.slice(0, -1));
+      }
+      return pathname === route;
+    }) || pathname === signInUrl || pathname.startsWith("/_") || pathname.startsWith("/api/");
+    if (isPublic) {
+      return next();
+    }
+    const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;
+    if (!token || isTokenExpired(token)) {
+      return context.redirect(
+        `${signInUrl}?returnTo=${encodeURIComponent(pathname)}`
+      );
+    }
+    const claims = getClaimsFromToken(token);
+    if (!claims) {
+      return context.redirect(signInUrl);
+    }
+    const roles = claims.roles ?? [];
+    const permissions = claims.permissions ?? [];
+    const authObject = {
+      userId: claims.sub,
+      tenantId: claims.tenant_id,
+      appId: claims.app_id ?? null,
+      envId: claims.env_id ?? null,
+      orgId: claims.org_id ?? null,
+      orgRole: claims.org_role ?? null,
+      sessionId: null,
+      getToken: async () => token,
+      has: (params) => {
+        if (params.role && roles.includes(params.role)) return true;
+        if (params.permission && permissions.includes(params.permission))
+          return true;
+        return false;
+      }
+    };
+    context.locals.auth = authObject;
+    return next();
+  };
+}
+export {
+  inaiAstroMiddleware
+};
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"sourcesContent":["import type { MiddlewareHandler } from \"astro\";\nimport type { AuthObject } from \"@inai-dev/types\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  getClaimsFromToken,\n  isTokenExpired,\n} from \"@inai-dev/shared\";\n\nexport interface InAIAstroMiddlewareConfig {\n  publicRoutes?: string[];\n  signInUrl?: string;\n}\n\nexport function inaiAstroMiddleware(\n  config: InAIAstroMiddlewareConfig = {},\n): MiddlewareHandler {\n  const { publicRoutes = [], signInUrl = \"/login\" } = config;\n\n  return async (context, next) => {\n    const { pathname } = context.url;\n\n    const isPublic =\n      publicRoutes.some((route) => {\n        if (route.endsWith(\"*\")) {\n          return pathname.startsWith(route.slice(0, -1));\n        }\n        return pathname === route;\n      }) ||\n      pathname === signInUrl ||\n      pathname.startsWith(\"/_\") ||\n      pathname.startsWith(\"/api/\");\n\n    if (isPublic) {\n      return next();\n    }\n\n    const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n\n    if (!token || isTokenExpired(token)) {\n      return context.redirect(\n        `${signInUrl}?returnTo=${encodeURIComponent(pathname)}`,\n      );\n    }\n\n    const claims = getClaimsFromToken(token);\n    if (!claims) {\n      return context.redirect(signInUrl);\n    }\n\n    const roles = claims.roles ?? [];\n    const permissions = claims.permissions ?? [];\n\n    const authObject: AuthObject = {\n      userId: claims.sub,\n      tenantId: claims.tenant_id,\n      appId: claims.app_id ?? null,\n      envId: claims.env_id ?? null,\n      orgId: claims.org_id ?? null,\n      orgRole: claims.org_role ?? null,\n      sessionId: null,\n      getToken: async () => token,\n      has: (params: { role?: string; permission?: string }) => {\n        if (params.role && roles.includes(params.role)) return true;\n        if (params.permission && permissions.includes(params.permission))\n          return true;\n        return false;\n      },\n    };\n\n    (context.locals as Record<string, unknown>).auth = authObject;\n\n    return next();\n  };\n}\n"],"mappings":";AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOA,SAAS,oBACd,SAAoC,CAAC,GAClB;AACnB,QAAM,EAAE,eAAe,CAAC,GAAG,YAAY,SAAS,IAAI;AAEpD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,EAAE,SAAS,IAAI,QAAQ;AAE7B,UAAM,WACJ,aAAa,KAAK,CAAC,UAAU;AAC3B,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa;AAAA,IACtB,CAAC,KACD,aAAa,aACb,SAAS,WAAW,IAAI,KACxB,SAAS,WAAW,OAAO;AAE7B,QAAI,UAAU;AACZ,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AAEtD,QAAI,CAAC,SAAS,eAAe,KAAK,GAAG;AACnC,aAAO,QAAQ;AAAA,QACb,GAAG,SAAS,aAAa,mBAAmB,QAAQ,CAAC;AAAA,MACvD;AAAA,IACF;AAEA,UAAM,SAAS,mBAAmB,KAAK;AACvC,QAAI,CAAC,QAAQ;AACX,aAAO,QAAQ,SAAS,SAAS;AAAA,IACnC;AAEA,UAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,UAAM,cAAc,OAAO,eAAe,CAAC;AAE3C,UAAM,aAAyB;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,OAAO,OAAO,UAAU;AAAA,MACxB,OAAO,OAAO,UAAU;AAAA,MACxB,OAAO,OAAO,UAAU;AAAA,MACxB,SAAS,OAAO,YAAY;AAAA,MAC5B,WAAW;AAAA,MACX,UAAU,YAAY;AAAA,MACtB,KAAK,CAAC,WAAmD;AACvD,YAAI,OAAO,QAAQ,MAAM,SAAS,OAAO,IAAI,EAAG,QAAO;AACvD,YAAI,OAAO,cAAc,YAAY,SAAS,OAAO,UAAU;AAC7D,iBAAO;AACT,eAAO;AAAA,MACT;AAAA,IACF;AAEA,IAAC,QAAQ,OAAmC,OAAO;AAEnD,WAAO,KAAK;AAAA,EACd;AACF;","names":[]}

package/dist/server.d.ts

@@ -0,0 +1,17 @@
+import { AuthObject, UserResource } from '@inai-dev/types';
+
+interface AstroContext {
+    cookies: {
+        get(name: string): {
+            value: string;
+        } | undefined;
+    };
+    locals: Record<string, unknown>;
+}
+declare function auth(context: AstroContext): AuthObject | null;
+declare function currentUser(context: AstroContext, config: {
+    apiUrl: string;
+    publishableKey?: string;
+}): Promise<UserResource | null>;
+
+export { auth, currentUser };

package/dist/server.js

@@ -0,0 +1,52 @@
+// src/server.ts
+import { InAIAuthClient } from "@inai-dev/backend";
+import {
+  COOKIE_AUTH_TOKEN,
+  getClaimsFromToken,
+  isTokenExpired
+} from "@inai-dev/shared";
+function auth(context) {
+  const existing = context.locals.auth;
+  if (existing) return existing;
+  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;
+  if (!token || isTokenExpired(token)) return null;
+  const claims = getClaimsFromToken(token);
+  if (!claims) return null;
+  const roles = claims.roles ?? [];
+  const permissions = claims.permissions ?? [];
+  return {
+    userId: claims.sub,
+    tenantId: claims.tenant_id,
+    appId: claims.app_id ?? null,
+    envId: claims.env_id ?? null,
+    orgId: claims.org_id ?? null,
+    orgRole: claims.org_role ?? null,
+    sessionId: null,
+    getToken: async () => token,
+    has: (params) => {
+      if (params.role && roles.includes(params.role)) return true;
+      if (params.permission && permissions.includes(params.permission))
+        return true;
+      return false;
+    }
+  };
+}
+async function currentUser(context, config) {
+  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;
+  if (!token || isTokenExpired(token)) return null;
+  const client = new InAIAuthClient({
+    apiUrl: config.apiUrl,
+    publishableKey: config.publishableKey
+  });
+  try {
+    const { data } = await client.getMe(token);
+    return data;
+  } catch {
+    return null;
+  }
+}
+export {
+  auth,
+  currentUser
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AuthObject, UserResource } from \"@inai-dev/types\";\nimport { InAIAuthClient } from \"@inai-dev/backend\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  getClaimsFromToken,\n  isTokenExpired,\n} from \"@inai-dev/shared\";\n\ninterface AstroContext {\n  cookies: {\n    get(name: string): { value: string } | undefined;\n  };\n  locals: Record<string, unknown>;\n}\n\nexport function auth(context: AstroContext): AuthObject | null {\n  const existing = (context.locals as Record<string, unknown>).auth as AuthObject | undefined;\n  if (existing) return existing;\n\n  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n  if (!token || isTokenExpired(token)) return null;\n\n  const claims = getClaimsFromToken(token);\n  if (!claims) return null;\n\n  const roles = claims.roles ?? [];\n  const permissions = claims.permissions ?? [];\n\n  return {\n    userId: claims.sub,\n    tenantId: claims.tenant_id,\n    appId: claims.app_id ?? null,\n    envId: claims.env_id ?? null,\n    orgId: claims.org_id ?? null,\n    orgRole: claims.org_role ?? null,\n    sessionId: null,\n    getToken: async () => token,\n    has: (params: { role?: string; permission?: string }) => {\n      if (params.role && roles.includes(params.role)) return true;\n      if (params.permission && permissions.includes(params.permission))\n        return true;\n      return false;\n    },\n  };\n}\n\nexport async function currentUser(\n  context: AstroContext,\n  config: { apiUrl: string; publishableKey?: string },\n): Promise<UserResource | null> {\n  const token = context.cookies.get(COOKIE_AUTH_TOKEN)?.value;\n  if (!token || isTokenExpired(token)) return null;\n\n  const client = new InAIAuthClient({\n    apiUrl: config.apiUrl,\n    publishableKey: config.publishableKey,\n  });\n\n  try {\n    const { data } = await client.getMe(token);\n    return data;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AACA,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASA,SAAS,KAAK,SAA0C;AAC7D,QAAM,WAAY,QAAQ,OAAmC;AAC7D,MAAI,SAAU,QAAO;AAErB,QAAM,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AACtD,MAAI,CAAC,SAAS,eAAe,KAAK,EAAG,QAAO;AAE5C,QAAM,SAAS,mBAAmB,KAAK;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,QAAM,cAAc,OAAO,eAAe,CAAC;AAE3C,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,SAAS,OAAO,YAAY;AAAA,IAC5B,WAAW;AAAA,IACX,UAAU,YAAY;AAAA,IACtB,KAAK,CAAC,WAAmD;AACvD,UAAI,OAAO,QAAQ,MAAM,SAAS,OAAO,IAAI,EAAG,QAAO;AACvD,UAAI,OAAO,cAAc,YAAY,SAAS,OAAO,UAAU;AAC7D,eAAO;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAsB,YACpB,SACA,QAC8B;AAC9B,QAAM,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AACtD,MAAI,CAAC,SAAS,eAAe,KAAK,EAAG,QAAO;AAE5C,QAAM,SAAS,IAAI,eAAe;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,gBAAgB,OAAO;AAAA,EACzB,CAAC;AAED,MAAI;AACF,UAAM,EAAE,KAAK,IAAI,MAAM,OAAO,MAAM,KAAK;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@inai-dev/astro",
+  "version": "0.1.0",
+  "description": "Astro integration for InAI Auth SDK",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "import": "./dist/middleware.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    }
+  },
+  "files": ["dist", "src/components"],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@inai-dev/types": "^0.1.0",
+    "@inai-dev/shared": "^0.1.0",
+    "@inai-dev/backend": "^0.1.0"
+  },
+  "peerDependencies": {
+    "astro": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "astro": {
+      "optional": false
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "InAI <contact@inai.dev>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/InAI-Team/inai-auth-sdk.git",
+    "directory": "packages/astro"
+  },
+  "homepage": "https://inai.dev/",
+  "bugs": "https://github.com/InAI-Team/inai-auth-sdk/issues",
+  "keywords": ["inai", "auth", "astro", "middleware", "multi-tenant", "ssg"]
+}

package/src/components/signed-in.astro

@@ -0,0 +1,6 @@
+---
+const auth = Astro.locals.auth;
+const isSignedIn = !!auth?.userId;
+---
+
+{isSignedIn && <slot />}

package/src/components/signed-out.astro

@@ -0,0 +1,6 @@
+---
+const auth = Astro.locals.auth;
+const isSignedIn = !!auth?.userId;
+---
+
+{!isSignedIn && <slot />}