@inai-dev/nextjs 0.1.0

package/dist/server.d.ts

@@ -0,0 +1,81 @@
+import { InAIAuthConfig, UserResource, PlatformUserResource, InAIAuthSDKConfig, ServerAuthObject } from '@inai-dev/types';
+import { NextRequest, NextResponse } from 'next/server';
+
+declare function createAuthRoutes(config: InAIAuthConfig): {
+    GET: (req: NextRequest, context: {
+        params: Promise<{
+            inai: string[];
+        }>;
+    }) => Promise<NextResponse<{
+        mfa_required: boolean;
+        mfa_token: string | undefined;
+    }> | NextResponse<{
+        user: UserResource;
+    }> | NextResponse<{
+        error: string;
+    }> | NextResponse<{
+        needs_email_verification: boolean;
+        user: UserResource | undefined;
+    }> | NextResponse<{
+        success: boolean;
+    }>>;
+    POST: (req: NextRequest, context: {
+        params: Promise<{
+            inai: string[];
+        }>;
+    }) => Promise<NextResponse<{
+        mfa_required: boolean;
+        mfa_token: string | undefined;
+    }> | NextResponse<{
+        user: UserResource;
+    }> | NextResponse<{
+        error: string;
+    }> | NextResponse<{
+        needs_email_verification: boolean;
+        user: UserResource | undefined;
+    }> | NextResponse<{
+        success: boolean;
+    }>>;
+};
+
+declare function createPlatformAuthRoutes(config: InAIAuthConfig): {
+    GET: (req: NextRequest, context: {
+        params: Promise<{
+            inai: string[];
+        }>;
+    }) => Promise<NextResponse<{
+        mfa_required: boolean;
+        mfa_token: string | undefined;
+    }> | NextResponse<{
+        user: PlatformUserResource | undefined;
+    }> | NextResponse<{
+        error: string;
+    }> | NextResponse<{
+        success: boolean;
+    }>>;
+    POST: (req: NextRequest, context: {
+        params: Promise<{
+            inai: string[];
+        }>;
+    }) => Promise<NextResponse<{
+        mfa_required: boolean;
+        mfa_token: string | undefined;
+    }> | NextResponse<{
+        user: PlatformUserResource | undefined;
+    }> | NextResponse<{
+        error: string;
+    }> | NextResponse<{
+        success: boolean;
+    }>>;
+};
+
+type ResolvedConfig = Required<InAIAuthSDKConfig>;
+declare function configureAuth(config: InAIAuthSDKConfig): void;
+declare function getAuthConfig(): ResolvedConfig;
+
+declare function auth(): Promise<ServerAuthObject>;
+declare function currentUser(opts?: {
+    fresh?: boolean;
+}): Promise<UserResource | null>;
+
+export { auth, configureAuth, createAuthRoutes, createPlatformAuthRoutes, currentUser, getAuthConfig };

package/dist/server.js

@@ -0,0 +1,511 @@
+// src/server.ts
+import { cookies as cookies3 } from "next/headers";
+import { redirect } from "next/navigation";
+import { InAIAuthClient as InAIAuthClient3 } from "@inai-dev/backend";
+import { isTokenExpired as isTokenExpired2, getClaimsFromToken as getClaimsFromToken2 } from "@inai-dev/shared";
+
+// src/cookies.ts
+import {
+  COOKIE_AUTH_TOKEN,
+  COOKIE_REFRESH_TOKEN,
+  COOKIE_AUTH_SESSION,
+  decodeJWTPayload
+} from "@inai-dev/shared";
+import {
+  COOKIE_AUTH_TOKEN as COOKIE_AUTH_TOKEN2,
+  COOKIE_REFRESH_TOKEN as COOKIE_REFRESH_TOKEN2,
+  COOKIE_AUTH_SESSION as COOKIE_AUTH_SESSION2
+} from "@inai-dev/shared";
+import { isTokenExpired, getClaimsFromToken } from "@inai-dev/shared";
+function setAuthCookies(cookieStore, tokens, user) {
+  const isProduction = process.env.NODE_ENV === "production";
+  const claims = decodeJWTPayload(tokens.access_token);
+  const expiresAt = claims ? new Date(claims.exp * 1e3).toISOString() : new Date(Date.now() + tokens.expires_in * 1e3).toISOString();
+  cookieStore.set(COOKIE_AUTH_TOKEN, tokens.access_token, {
+    httpOnly: true,
+    secure: isProduction,
+    sameSite: "lax",
+    path: "/",
+    maxAge: tokens.expires_in
+  });
+  cookieStore.set(COOKIE_REFRESH_TOKEN, tokens.refresh_token, {
+    httpOnly: true,
+    secure: isProduction,
+    sameSite: "strict",
+    path: "/api/auth",
+    maxAge: 7 * 24 * 60 * 60
+  });
+  const sessionData = {
+    user,
+    expiresAt,
+    permissions: claims?.permissions ?? [],
+    orgId: claims?.org_id,
+    orgRole: claims?.org_role,
+    appId: claims?.app_id,
+    envId: claims?.env_id
+  };
+  cookieStore.set(COOKIE_AUTH_SESSION, JSON.stringify(sessionData), {
+    httpOnly: false,
+    secure: isProduction,
+    sameSite: "lax",
+    path: "/",
+    maxAge: tokens.expires_in
+  });
+}
+function clearAuthCookies(cookieStore) {
+  const opts = { path: "/", maxAge: 0 };
+  cookieStore.set(COOKIE_AUTH_TOKEN, "", opts);
+  cookieStore.set(COOKIE_REFRESH_TOKEN, "", { ...opts, path: "/api/auth" });
+  cookieStore.set(COOKIE_AUTH_SESSION, "", opts);
+}
+function getAuthTokenFromCookies(cookieStore) {
+  return cookieStore.get(COOKIE_AUTH_TOKEN)?.value ?? null;
+}
+function getRefreshTokenFromCookies(cookieStore) {
+  return cookieStore.get(COOKIE_REFRESH_TOKEN)?.value ?? null;
+}
+function getSessionFromCookies(cookieStore) {
+  const raw = cookieStore.get(COOKIE_AUTH_SESSION)?.value;
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+// src/config.ts
+var defaults = {
+  signInUrl: "/login",
+  signUpUrl: "/register",
+  afterSignInUrl: "/",
+  afterSignOutUrl: "/login",
+  apiUrl: "",
+  publishableKey: ""
+};
+var userConfig = {};
+function configureAuth(config) {
+  userConfig = config;
+}
+function getAuthConfig() {
+  return {
+    signInUrl: userConfig.signInUrl ?? defaults.signInUrl,
+    signUpUrl: userConfig.signUpUrl ?? defaults.signUpUrl,
+    afterSignInUrl: userConfig.afterSignInUrl ?? defaults.afterSignInUrl,
+    afterSignOutUrl: userConfig.afterSignOutUrl ?? defaults.afterSignOutUrl,
+    apiUrl: userConfig.apiUrl ?? process.env.INAI_API_URL ?? process.env.NEXT_PUBLIC_INAI_API_URL ?? defaults.apiUrl,
+    publishableKey: userConfig.publishableKey ?? process.env.NEXT_PUBLIC_INAI_PUBLISHABLE_KEY ?? defaults.publishableKey
+  };
+}
+
+// src/api-routes.ts
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+import { InAIAuthClient } from "@inai-dev/backend";
+function createAuthRoutes(config) {
+  const client = new InAIAuthClient(config);
+  async function handleLogin(req) {
+    try {
+      const body = await req.json();
+      const result = await client.login({
+        email: body.email,
+        password: body.password
+      });
+      if (result.mfa_required) {
+        return NextResponse.json({
+          mfa_required: true,
+          mfa_token: result.mfa_token
+        });
+      }
+      const tokens = result;
+      const loginUser = result.user;
+      const user = loginUser ?? (await client.getMe(tokens.access_token)).data;
+      const cookieStore = await cookies();
+      setAuthCookies(cookieStore, tokens, user);
+      return NextResponse.json({ user });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Login failed";
+      return NextResponse.json({ error: message }, { status: 401 });
+    }
+  }
+  async function handleMFAChallenge(req) {
+    try {
+      const body = await req.json();
+      const tokens = await client.mfaChallenge({
+        mfa_token: body.mfa_token,
+        code: body.code
+      });
+      const { data: user } = await client.getMe(tokens.access_token);
+      const cookieStore = await cookies();
+      setAuthCookies(cookieStore, tokens, user);
+      return NextResponse.json({ user });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "MFA verification failed";
+      return NextResponse.json({ error: message }, { status: 401 });
+    }
+  }
+  async function handleRefresh() {
+    try {
+      const cookieStore = await cookies();
+      const refreshToken = getRefreshTokenFromCookies(cookieStore);
+      if (!refreshToken) {
+        clearAuthCookies(cookieStore);
+        return NextResponse.json(
+          { error: "No refresh token" },
+          { status: 401 }
+        );
+      }
+      const tokens = await client.refresh(refreshToken);
+      const { data: user } = await client.getMe(tokens.access_token);
+      setAuthCookies(cookieStore, tokens, user);
+      return NextResponse.json({ user });
+    } catch {
+      const cookieStore = await cookies();
+      clearAuthCookies(cookieStore);
+      return NextResponse.json(
+        { error: "Refresh failed" },
+        { status: 401 }
+      );
+    }
+  }
+  async function handleRegister(req) {
+    try {
+      const body = await req.json();
+      const result = await client.register({
+        email: body.email,
+        password: body.password,
+        firstName: body.firstName,
+        lastName: body.lastName
+      });
+      if (!result.access_token) {
+        return NextResponse.json({
+          needs_email_verification: true,
+          user: result.user
+        });
+      }
+      const tokens = result;
+      const loginUser = result.user;
+      const user = loginUser ?? (await client.getMe(tokens.access_token)).data;
+      const cookieStore = await cookies();
+      setAuthCookies(cookieStore, tokens, user);
+      return NextResponse.json({ user });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Registration failed";
+      return NextResponse.json({ error: message }, { status: 400 });
+    }
+  }
+  async function handleLogout() {
+    try {
+      const cookieStore = await cookies();
+      const refreshToken = getRefreshTokenFromCookies(cookieStore);
+      if (refreshToken) {
+        await client.logout(refreshToken).catch(() => {
+        });
+      }
+      clearAuthCookies(cookieStore);
+      return NextResponse.json({ success: true });
+    } catch {
+      const cookieStore = await cookies();
+      clearAuthCookies(cookieStore);
+      return NextResponse.json({ success: true });
+    }
+  }
+  async function handler(req, context) {
+    const params = await context.params;
+    const path = params.inai?.join("/") ?? "";
+    if (req.method === "POST") {
+      switch (path) {
+        case "login":
+          return handleLogin(req);
+        case "register":
+          return handleRegister(req);
+        case "mfa-challenge":
+          return handleMFAChallenge(req);
+        case "refresh":
+          return handleRefresh();
+        case "logout":
+          return handleLogout();
+      }
+    }
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+  return {
+    GET: handler,
+    POST: handler
+  };
+}
+
+// src/platform-api-routes.ts
+import { cookies as cookies2 } from "next/headers";
+import { NextResponse as NextResponse2 } from "next/server";
+import { InAIAuthClient as InAIAuthClient2 } from "@inai-dev/backend";
+import {
+  COOKIE_AUTH_TOKEN as COOKIE_AUTH_TOKEN3,
+  COOKIE_AUTH_SESSION as COOKIE_AUTH_SESSION3,
+  COOKIE_REFRESH_TOKEN as COOKIE_REFRESH_TOKEN3
+} from "@inai-dev/shared";
+function createPlatformAuthRoutes(config) {
+  const client = new InAIAuthClient2(config);
+  const isProduction = process.env.NODE_ENV === "production";
+  function setPlatformCookies(cookieStore, tokens, user) {
+    cookieStore.set(COOKIE_AUTH_TOKEN3, tokens.access_token, {
+      httpOnly: true,
+      secure: isProduction,
+      sameSite: "lax",
+      path: "/",
+      maxAge: tokens.expires_in
+    });
+    cookieStore.set(COOKIE_REFRESH_TOKEN3, tokens.refresh_token, {
+      httpOnly: true,
+      secure: isProduction,
+      sameSite: "strict",
+      path: "/api/auth",
+      maxAge: 7 * 24 * 60 * 60
+    });
+    if (user) {
+      const expiresAt = Date.now() + tokens.expires_in * 1e3;
+      cookieStore.set(
+        COOKIE_AUTH_SESSION3,
+        JSON.stringify({ user, expiresAt }),
+        {
+          httpOnly: false,
+          secure: isProduction,
+          sameSite: "lax",
+          path: "/",
+          maxAge: tokens.expires_in
+        }
+      );
+    }
+  }
+  function clearPlatformCookies(cookieStore) {
+    cookieStore.set(COOKIE_AUTH_TOKEN3, "", { path: "/", maxAge: 0 });
+    cookieStore.set(COOKIE_REFRESH_TOKEN3, "", {
+      path: "/api/auth",
+      maxAge: 0
+    });
+    cookieStore.set(COOKIE_AUTH_SESSION3, "", { path: "/", maxAge: 0 });
+  }
+  async function handleLogin(req) {
+    try {
+      const body = await req.json();
+      const result = await client.platformLogin({
+        email: body.email,
+        password: body.password
+      });
+      if (result.mfa_required) {
+        return NextResponse2.json({
+          mfa_required: true,
+          mfa_token: result.mfa_token
+        });
+      }
+      const tokens = result;
+      const user = result.user;
+      const cookieStore = await cookies2();
+      setPlatformCookies(cookieStore, tokens, user);
+      return NextResponse2.json({ user });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Login failed";
+      return NextResponse2.json({ error: message }, { status: 401 });
+    }
+  }
+  async function handleMFAChallenge(req) {
+    try {
+      const body = await req.json();
+      const result = await client.platformMfaChallenge({
+        mfa_token: body.mfa_token,
+        code: body.code
+      });
+      const tokens = result;
+      const user = result.user;
+      const cookieStore = await cookies2();
+      setPlatformCookies(cookieStore, tokens, user);
+      return NextResponse2.json({ user });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "MFA verification failed";
+      return NextResponse2.json({ error: message }, { status: 401 });
+    }
+  }
+  async function handleRefresh() {
+    try {
+      const cookieStore = await cookies2();
+      const refreshToken = cookieStore.get(COOKIE_REFRESH_TOKEN3)?.value;
+      if (!refreshToken) {
+        clearPlatformCookies(cookieStore);
+        return NextResponse2.json(
+          { error: "No refresh token" },
+          { status: 401 }
+        );
+      }
+      const tokens = await client.platformRefresh(refreshToken);
+      const { data: user } = await client.platformGetMe(
+        tokens.access_token
+      );
+      setPlatformCookies(cookieStore, tokens, user);
+      return NextResponse2.json({ user });
+    } catch {
+      const cookieStore = await cookies2();
+      clearPlatformCookies(cookieStore);
+      return NextResponse2.json(
+        { error: "Refresh failed" },
+        { status: 401 }
+      );
+    }
+  }
+  async function handleLogout() {
+    try {
+      const cookieStore = await cookies2();
+      const refreshToken = cookieStore.get(COOKIE_REFRESH_TOKEN3)?.value;
+      if (refreshToken) {
+        await client.platformLogout(refreshToken).catch(() => {
+        });
+      }
+      clearPlatformCookies(cookieStore);
+      return NextResponse2.json({ success: true });
+    } catch {
+      const cookieStore = await cookies2();
+      clearPlatformCookies(cookieStore);
+      return NextResponse2.json({ success: true });
+    }
+  }
+  async function handler(req, context) {
+    const params = await context.params;
+    const path = params.inai?.join("/") ?? "";
+    if (req.method === "POST") {
+      switch (path) {
+        case "login":
+          return handleLogin(req);
+        case "mfa-challenge":
+          return handleMFAChallenge(req);
+        case "refresh":
+          return handleRefresh();
+        case "logout":
+          return handleLogout();
+      }
+    }
+    return NextResponse2.json({ error: "Not found" }, { status: 404 });
+  }
+  return {
+    GET: handler,
+    POST: handler
+  };
+}
+
+// src/server.ts
+async function auth() {
+  const cookieStore = await cookies3();
+  const token = getAuthTokenFromCookies(cookieStore);
+  const config = getAuthConfig();
+  function redirectToSignIn(opts) {
+    const returnTo = opts?.returnTo;
+    const url = returnTo ? `${config.signInUrl}?returnTo=${encodeURIComponent(returnTo)}` : config.signInUrl;
+    redirect(url);
+  }
+  if (!token || isTokenExpired2(token)) {
+    return {
+      userId: null,
+      tenantId: null,
+      appId: null,
+      envId: null,
+      orgId: null,
+      orgRole: null,
+      sessionId: null,
+      getToken: async () => null,
+      has: () => false,
+      protect: () => {
+        redirectToSignIn();
+      },
+      redirectToSignIn
+    };
+  }
+  const claims = getClaimsFromToken2(token);
+  if (!claims) {
+    return {
+      userId: null,
+      tenantId: null,
+      appId: null,
+      envId: null,
+      orgId: null,
+      orgRole: null,
+      sessionId: null,
+      getToken: async () => null,
+      has: () => false,
+      protect: () => {
+        redirectToSignIn();
+      },
+      redirectToSignIn
+    };
+  }
+  const roles = claims.roles ?? [];
+  const permissions = claims.permissions ?? [];
+  const has = (params) => {
+    if (params.role && roles.includes(params.role)) return true;
+    if (params.permission && permissions.includes(params.permission))
+      return true;
+    return false;
+  };
+  const protectedObj = {
+    userId: claims.sub,
+    tenantId: claims.tenant_id,
+    appId: claims.app_id ?? null,
+    envId: claims.env_id ?? null,
+    orgId: claims.org_id ?? null,
+    orgRole: claims.org_role ?? null,
+    sessionId: null,
+    isSignedIn: true,
+    getToken: async () => token,
+    has
+  };
+  return {
+    userId: claims.sub,
+    tenantId: claims.tenant_id,
+    appId: claims.app_id ?? null,
+    envId: claims.env_id ?? null,
+    orgId: claims.org_id ?? null,
+    orgRole: claims.org_role ?? null,
+    sessionId: null,
+    getToken: async () => token,
+    has,
+    protect: (params) => {
+      if (params?.role || params?.permission) {
+        if (!has({ role: params.role, permission: params.permission })) {
+          redirect(params.redirectTo ?? "/unauthorized");
+        }
+      }
+      return protectedObj;
+    },
+    redirectToSignIn
+  };
+}
+async function currentUser(opts) {
+  const cookieStore = await cookies3();
+  if (opts?.fresh) {
+    const token = getAuthTokenFromCookies(cookieStore);
+    if (!token || isTokenExpired2(token)) return null;
+    const config = getAuthConfig();
+    if (!config.apiUrl || !config.publishableKey) {
+      const session2 = getSessionFromCookies(cookieStore);
+      return session2?.user ?? null;
+    }
+    const client = new InAIAuthClient3({
+      apiUrl: config.apiUrl,
+      publishableKey: config.publishableKey
+    });
+    try {
+      const { data } = await client.getMe(token);
+      return data;
+    } catch {
+      return null;
+    }
+  }
+  const session = getSessionFromCookies(cookieStore);
+  return session?.user ?? null;
+}
+export {
+  auth,
+  configureAuth,
+  createAuthRoutes,
+  createPlatformAuthRoutes,
+  currentUser,
+  getAuthConfig
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts","../src/cookies.ts","../src/config.ts","../src/api-routes.ts","../src/platform-api-routes.ts"],"sourcesContent":["import { cookies } from \"next/headers\";\nimport { redirect } from \"next/navigation\";\nimport type {\n  AuthObject,\n  ServerAuthObject,\n  ProtectedAuthObject,\n  UserResource,\n} from \"@inai-dev/types\";\nimport { InAIAuthClient } from \"@inai-dev/backend\";\nimport { isTokenExpired, getClaimsFromToken } from \"@inai-dev/shared\";\nimport {\n  getAuthTokenFromCookies,\n  getSessionFromCookies,\n} from \"./cookies\";\nimport { getAuthConfig } from \"./config\";\n\nexport { createAuthRoutes } from \"./api-routes\";\nexport { createPlatformAuthRoutes } from \"./platform-api-routes\";\nexport { configureAuth, getAuthConfig } from \"./config\";\n\nexport async function auth(): Promise<ServerAuthObject> {\n  const cookieStore = await cookies();\n  const token = getAuthTokenFromCookies(cookieStore);\n  const config = getAuthConfig();\n\n  function redirectToSignIn(opts?: { returnTo?: string }): never {\n    const returnTo = opts?.returnTo;\n    const url = returnTo\n      ? `${config.signInUrl}?returnTo=${encodeURIComponent(returnTo)}`\n      : config.signInUrl;\n    redirect(url);\n  }\n\n  if (!token || isTokenExpired(token)) {\n    return {\n      userId: null,\n      tenantId: null,\n      appId: null,\n      envId: null,\n      orgId: null,\n      orgRole: null,\n      sessionId: null,\n      getToken: async () => null,\n      has: () => false,\n      protect: () => {\n        redirectToSignIn();\n      },\n      redirectToSignIn,\n    };\n  }\n\n  const claims = getClaimsFromToken(token);\n  if (!claims) {\n    return {\n      userId: null,\n      tenantId: null,\n      appId: null,\n      envId: null,\n      orgId: null,\n      orgRole: null,\n      sessionId: null,\n      getToken: async () => null,\n      has: () => false,\n      protect: () => {\n        redirectToSignIn();\n      },\n      redirectToSignIn,\n    };\n  }\n\n  const roles = claims.roles ?? [];\n  const permissions = claims.permissions ?? [];\n\n  const has = (params: { role?: string; permission?: string }) => {\n    if (params.role && roles.includes(params.role)) return true;\n    if (params.permission && permissions.includes(params.permission))\n      return true;\n    return false;\n  };\n\n  const protectedObj: ProtectedAuthObject = {\n    userId: claims.sub,\n    tenantId: claims.tenant_id,\n    appId: claims.app_id ?? null,\n    envId: claims.env_id ?? null,\n    orgId: claims.org_id ?? null,\n    orgRole: claims.org_role ?? null,\n    sessionId: null,\n    isSignedIn: true,\n    getToken: async () => token,\n    has,\n  };\n\n  return {\n    userId: claims.sub,\n    tenantId: claims.tenant_id,\n    appId: claims.app_id ?? null,\n    envId: claims.env_id ?? null,\n    orgId: claims.org_id ?? null,\n    orgRole: claims.org_role ?? null,\n    sessionId: null,\n    getToken: async () => token,\n    has,\n    protect: (params?: {\n      role?: string;\n      permission?: string;\n      redirectTo?: string;\n    }) => {\n      if (params?.role || params?.permission) {\n        if (!has({ role: params.role, permission: params.permission })) {\n          redirect(params.redirectTo ?? \"/unauthorized\");\n        }\n      }\n      return protectedObj;\n    },\n    redirectToSignIn,\n  };\n}\n\nexport async function currentUser(\n  opts?: { fresh?: boolean },\n): Promise<UserResource | null> {\n  const cookieStore = await cookies();\n\n  if (opts?.fresh) {\n    const token = getAuthTokenFromCookies(cookieStore);\n    if (!token || isTokenExpired(token)) return null;\n\n    const config = getAuthConfig();\n    if (!config.apiUrl || !config.publishableKey) {\n      const session = getSessionFromCookies(cookieStore);\n      return session?.user ?? null;\n    }\n\n    const client = new InAIAuthClient({\n      apiUrl: config.apiUrl,\n      publishableKey: config.publishableKey,\n    });\n    try {\n      const { data } = await client.getMe(token);\n      return data;\n    } catch {\n      return null;\n    }\n  }\n\n  const session = getSessionFromCookies(cookieStore);\n  return session?.user ?? null;\n}\n","import type { UserResource, JWTClaims, TokenPair } from \"@inai-dev/types\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  COOKIE_REFRESH_TOKEN,\n  COOKIE_AUTH_SESSION,\n  decodeJWTPayload,\n} from \"@inai-dev/shared\";\n\nexport {\n  COOKIE_AUTH_TOKEN,\n  COOKIE_REFRESH_TOKEN,\n  COOKIE_AUTH_SESSION,\n} from \"@inai-dev/shared\";\n\nexport { isTokenExpired, getClaimsFromToken } from \"@inai-dev/shared\";\n\ninterface CookieStore {\n  get(name: string): { value: string } | undefined;\n  set(name: string, value: string, options?: Record<string, unknown>): void;\n}\n\ninterface SessionData {\n  user: UserResource;\n  expiresAt: string;\n  permissions?: string[];\n  orgId?: string;\n  orgRole?: string;\n  appId?: string;\n  envId?: string;\n}\n\nexport function setAuthCookies(\n  cookieStore: CookieStore,\n  tokens: TokenPair,\n  user: UserResource,\n): void {\n  const isProduction = process.env.NODE_ENV === \"production\";\n  const claims = decodeJWTPayload(tokens.access_token);\n  const expiresAt = claims\n    ? new Date(claims.exp * 1000).toISOString()\n    : new Date(Date.now() + tokens.expires_in * 1000).toISOString();\n\n  cookieStore.set(COOKIE_AUTH_TOKEN, tokens.access_token, {\n    httpOnly: true,\n    secure: isProduction,\n    sameSite: \"lax\",\n    path: \"/\",\n    maxAge: tokens.expires_in,\n  });\n\n  cookieStore.set(COOKIE_REFRESH_TOKEN, tokens.refresh_token, {\n    httpOnly: true,\n    secure: isProduction,\n    sameSite: \"strict\",\n    path: \"/api/auth\",\n    maxAge: 7 * 24 * 60 * 60,\n  });\n\n  const sessionData: SessionData = {\n    user,\n    expiresAt,\n    permissions: claims?.permissions ?? [],\n    orgId: claims?.org_id,\n    orgRole: claims?.org_role,\n    appId: claims?.app_id,\n    envId: claims?.env_id,\n  };\n  cookieStore.set(COOKIE_AUTH_SESSION, JSON.stringify(sessionData), {\n    httpOnly: false,\n    secure: isProduction,\n    sameSite: \"lax\",\n    path: \"/\",\n    maxAge: tokens.expires_in,\n  });\n}\n\nexport function clearAuthCookies(\n  cookieStore: CookieStore,\n): void {\n  const opts = { path: \"/\", maxAge: 0 };\n  cookieStore.set(COOKIE_AUTH_TOKEN, \"\", opts);\n  cookieStore.set(COOKIE_REFRESH_TOKEN, \"\", { ...opts, path: \"/api/auth\" });\n  cookieStore.set(COOKIE_AUTH_SESSION, \"\", opts);\n}\n\nexport function getAuthTokenFromCookies(\n  cookieStore: CookieStore,\n): string | null {\n  return cookieStore.get(COOKIE_AUTH_TOKEN)?.value ?? null;\n}\n\nexport function getRefreshTokenFromCookies(\n  cookieStore: CookieStore,\n): string | null {\n  return cookieStore.get(COOKIE_REFRESH_TOKEN)?.value ?? null;\n}\n\nexport function getSessionFromCookies(\n  cookieStore: CookieStore,\n): SessionData | null {\n  const raw = cookieStore.get(COOKIE_AUTH_SESSION)?.value;\n  if (!raw) return null;\n  try {\n    return JSON.parse(raw) as SessionData;\n  } catch {\n    return null;\n  }\n}\n","import type { InAIAuthSDKConfig } from \"@inai-dev/types\";\n\ntype ResolvedConfig = Required<InAIAuthSDKConfig>;\n\nconst defaults: ResolvedConfig = {\n  signInUrl: \"/login\",\n  signUpUrl: \"/register\",\n  afterSignInUrl: \"/\",\n  afterSignOutUrl: \"/login\",\n  apiUrl: \"\",\n  publishableKey: \"\",\n};\n\nlet userConfig: Partial<InAIAuthSDKConfig> = {};\n\nexport function configureAuth(config: InAIAuthSDKConfig): void {\n  userConfig = config;\n}\n\nexport function getAuthConfig(): ResolvedConfig {\n  return {\n    signInUrl: userConfig.signInUrl ?? defaults.signInUrl,\n    signUpUrl: userConfig.signUpUrl ?? defaults.signUpUrl,\n    afterSignInUrl: userConfig.afterSignInUrl ?? defaults.afterSignInUrl,\n    afterSignOutUrl: userConfig.afterSignOutUrl ?? defaults.afterSignOutUrl,\n    apiUrl:\n      userConfig.apiUrl ??\n      process.env.INAI_API_URL ??\n      process.env.NEXT_PUBLIC_INAI_API_URL ??\n      defaults.apiUrl,\n    publishableKey:\n      userConfig.publishableKey ??\n      process.env.NEXT_PUBLIC_INAI_PUBLISHABLE_KEY ??\n      defaults.publishableKey,\n  };\n}\n","import { cookies } from \"next/headers\";\nimport { NextResponse } from \"next/server\";\nimport type { NextRequest } from \"next/server\";\nimport { InAIAuthClient } from \"@inai-dev/backend\";\nimport type {\n  InAIAuthConfig,\n  TokenPair,\n  UserResource,\n  LoginResult,\n} from \"@inai-dev/types\";\nimport {\n  setAuthCookies,\n  clearAuthCookies,\n  getRefreshTokenFromCookies,\n} from \"./cookies\";\n\nexport function createAuthRoutes(config: InAIAuthConfig) {\n  const client = new InAIAuthClient(config);\n\n  async function handleLogin(req: NextRequest) {\n    try {\n      const body = (await req.json()) as Record<string, string>;\n      const result = (await client.login({\n        email: body.email,\n        password: body.password,\n      })) as LoginResult & { user?: UserResource };\n\n      if (result.mfa_required) {\n        return NextResponse.json({\n          mfa_required: true,\n          mfa_token: result.mfa_token,\n        });\n      }\n\n      const tokens = result as TokenPair;\n      const loginUser = (result as { user?: UserResource }).user;\n      const user =\n        loginUser ?? (await client.getMe(tokens.access_token)).data;\n      const cookieStore = await cookies();\n      setAuthCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : \"Login failed\";\n      return NextResponse.json({ error: message }, { status: 401 });\n    }\n  }\n\n  async function handleMFAChallenge(req: NextRequest) {\n    try {\n      const body = (await req.json()) as Record<string, string>;\n      const tokens = await client.mfaChallenge({\n        mfa_token: body.mfa_token,\n        code: body.code,\n      });\n\n      const { data: user } = await client.getMe(tokens.access_token);\n      const cookieStore = await cookies();\n      setAuthCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch (err) {\n      const message =\n        err instanceof Error ? err.message : \"MFA verification failed\";\n      return NextResponse.json({ error: message }, { status: 401 });\n    }\n  }\n\n  async function handleRefresh() {\n    try {\n      const cookieStore = await cookies();\n      const refreshToken = getRefreshTokenFromCookies(cookieStore);\n\n      if (!refreshToken) {\n        clearAuthCookies(cookieStore);\n        return NextResponse.json(\n          { error: \"No refresh token\" },\n          { status: 401 },\n        );\n      }\n\n      const tokens = await client.refresh(refreshToken);\n      const { data: user } = await client.getMe(tokens.access_token);\n      setAuthCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch {\n      const cookieStore = await cookies();\n      clearAuthCookies(cookieStore);\n      return NextResponse.json(\n        { error: \"Refresh failed\" },\n        { status: 401 },\n      );\n    }\n  }\n\n  async function handleRegister(req: NextRequest) {\n    try {\n      const body = (await req.json()) as Record<string, string>;\n      const result = await client.register({\n        email: body.email,\n        password: body.password,\n        firstName: body.firstName,\n        lastName: body.lastName,\n      });\n\n      if (!result.access_token) {\n        return NextResponse.json({\n          needs_email_verification: true,\n          user: result.user,\n        });\n      }\n\n      const tokens = result as TokenPair;\n      const loginUser = result.user;\n      const user =\n        loginUser ?? (await client.getMe(tokens.access_token)).data;\n      const cookieStore = await cookies();\n      setAuthCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch (err) {\n      const message =\n        err instanceof Error ? err.message : \"Registration failed\";\n      return NextResponse.json({ error: message }, { status: 400 });\n    }\n  }\n\n  async function handleLogout() {\n    try {\n      const cookieStore = await cookies();\n      const refreshToken = getRefreshTokenFromCookies(cookieStore);\n      if (refreshToken) {\n        await client.logout(refreshToken).catch(() => {});\n      }\n      clearAuthCookies(cookieStore);\n      return NextResponse.json({ success: true });\n    } catch {\n      const cookieStore = await cookies();\n      clearAuthCookies(cookieStore);\n      return NextResponse.json({ success: true });\n    }\n  }\n\n  async function handler(\n    req: NextRequest,\n    context: { params: Promise<{ inai: string[] }> },\n  ) {\n    const params = await context.params;\n    const path = params.inai?.join(\"/\") ?? \"\";\n\n    if (req.method === \"POST\") {\n      switch (path) {\n        case \"login\":\n          return handleLogin(req);\n        case \"register\":\n          return handleRegister(req);\n        case \"mfa-challenge\":\n          return handleMFAChallenge(req);\n        case \"refresh\":\n          return handleRefresh();\n        case \"logout\":\n          return handleLogout();\n      }\n    }\n\n    return NextResponse.json({ error: \"Not found\" }, { status: 404 });\n  }\n\n  return {\n    GET: handler,\n    POST: handler,\n  };\n}\n","import { cookies } from \"next/headers\";\nimport { NextResponse } from \"next/server\";\nimport type { NextRequest } from \"next/server\";\nimport { InAIAuthClient } from \"@inai-dev/backend\";\nimport type { InAIAuthConfig, TokenPair, PlatformUserResource } from \"@inai-dev/types\";\nimport {\n  COOKIE_AUTH_TOKEN,\n  COOKIE_AUTH_SESSION,\n  COOKIE_REFRESH_TOKEN,\n} from \"@inai-dev/shared\";\n\nexport function createPlatformAuthRoutes(config: InAIAuthConfig) {\n  const client = new InAIAuthClient(config);\n  const isProduction = process.env.NODE_ENV === \"production\";\n\n  function setPlatformCookies(\n    cookieStore: Awaited<ReturnType<typeof cookies>>,\n    tokens: TokenPair,\n    user?: PlatformUserResource,\n  ) {\n    cookieStore.set(COOKIE_AUTH_TOKEN, tokens.access_token, {\n      httpOnly: true,\n      secure: isProduction,\n      sameSite: \"lax\",\n      path: \"/\",\n      maxAge: tokens.expires_in,\n    });\n    cookieStore.set(COOKIE_REFRESH_TOKEN, tokens.refresh_token, {\n      httpOnly: true,\n      secure: isProduction,\n      sameSite: \"strict\",\n      path: \"/api/auth\",\n      maxAge: 7 * 24 * 60 * 60,\n    });\n    if (user) {\n      const expiresAt = Date.now() + tokens.expires_in * 1000;\n      cookieStore.set(\n        COOKIE_AUTH_SESSION,\n        JSON.stringify({ user, expiresAt }),\n        {\n          httpOnly: false,\n          secure: isProduction,\n          sameSite: \"lax\",\n          path: \"/\",\n          maxAge: tokens.expires_in,\n        },\n      );\n    }\n  }\n\n  function clearPlatformCookies(\n    cookieStore: Awaited<ReturnType<typeof cookies>>,\n  ) {\n    cookieStore.set(COOKIE_AUTH_TOKEN, \"\", { path: \"/\", maxAge: 0 });\n    cookieStore.set(COOKIE_REFRESH_TOKEN, \"\", {\n      path: \"/api/auth\",\n      maxAge: 0,\n    });\n    cookieStore.set(COOKIE_AUTH_SESSION, \"\", { path: \"/\", maxAge: 0 });\n  }\n\n  async function handleLogin(req: NextRequest) {\n    try {\n      const body = (await req.json()) as Record<string, string>;\n      const result = await client.platformLogin({\n        email: body.email,\n        password: body.password,\n      });\n\n      if (result.mfa_required) {\n        return NextResponse.json({\n          mfa_required: true,\n          mfa_token: result.mfa_token,\n        });\n      }\n\n      const tokens = result as TokenPair;\n      const user = result.user;\n      const cookieStore = await cookies();\n      setPlatformCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : \"Login failed\";\n      return NextResponse.json({ error: message }, { status: 401 });\n    }\n  }\n\n  async function handleMFAChallenge(req: NextRequest) {\n    try {\n      const body = (await req.json()) as Record<string, string>;\n      const result = await client.platformMfaChallenge({\n        mfa_token: body.mfa_token,\n        code: body.code,\n      });\n\n      const tokens = result as TokenPair;\n      const user = result.user;\n      const cookieStore = await cookies();\n      setPlatformCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch (err) {\n      const message =\n        err instanceof Error ? err.message : \"MFA verification failed\";\n      return NextResponse.json({ error: message }, { status: 401 });\n    }\n  }\n\n  async function handleRefresh() {\n    try {\n      const cookieStore = await cookies();\n      const refreshToken = cookieStore.get(COOKIE_REFRESH_TOKEN)?.value;\n\n      if (!refreshToken) {\n        clearPlatformCookies(cookieStore);\n        return NextResponse.json(\n          { error: \"No refresh token\" },\n          { status: 401 },\n        );\n      }\n\n      const tokens = await client.platformRefresh(refreshToken);\n      const { data: user } = await client.platformGetMe(\n        tokens.access_token,\n      );\n      setPlatformCookies(cookieStore, tokens, user);\n\n      return NextResponse.json({ user });\n    } catch {\n      const cookieStore = await cookies();\n      clearPlatformCookies(cookieStore);\n      return NextResponse.json(\n        { error: \"Refresh failed\" },\n        { status: 401 },\n      );\n    }\n  }\n\n  async function handleLogout() {\n    try {\n      const cookieStore = await cookies();\n      const refreshToken = cookieStore.get(COOKIE_REFRESH_TOKEN)?.value;\n      if (refreshToken) {\n        await client.platformLogout(refreshToken).catch(() => {});\n      }\n      clearPlatformCookies(cookieStore);\n      return NextResponse.json({ success: true });\n    } catch {\n      const cookieStore = await cookies();\n      clearPlatformCookies(cookieStore);\n      return NextResponse.json({ success: true });\n    }\n  }\n\n  async function handler(\n    req: NextRequest,\n    context: { params: Promise<{ inai: string[] }> },\n  ) {\n    const params = await context.params;\n    const path = params.inai?.join(\"/\") ?? \"\";\n\n    if (req.method === \"POST\") {\n      switch (path) {\n        case \"login\":\n          return handleLogin(req);\n        case \"mfa-challenge\":\n          return handleMFAChallenge(req);\n        case \"refresh\":\n          return handleRefresh();\n        case \"logout\":\n          return handleLogout();\n      }\n    }\n\n    return NextResponse.json({ error: \"Not found\" }, { status: 404 });\n  }\n\n  return {\n    GET: handler,\n    POST: handler,\n  };\n}\n"],"mappings":";AAAA,SAAS,WAAAA,gBAAe;AACxB,SAAS,gBAAgB;AAOzB,SAAS,kBAAAC,uBAAsB;AAC/B,SAAS,kBAAAC,iBAAgB,sBAAAC,2BAA0B;;;ACRnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE,qBAAAC;AAAA,EACA,wBAAAC;AAAA,EACA,uBAAAC;AAAA,OACK;AAEP,SAAS,gBAAgB,0BAA0B;AAiB5C,SAAS,eACd,aACA,QACA,MACM;AACN,QAAM,eAAe,QAAQ,IAAI,aAAa;AAC9C,QAAM,SAAS,iBAAiB,OAAO,YAAY;AACnD,QAAM,YAAY,SACd,IAAI,KAAK,OAAO,MAAM,GAAI,EAAE,YAAY,IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,aAAa,GAAI,EAAE,YAAY;AAEhE,cAAY,IAAI,mBAAmB,OAAO,cAAc;AAAA,IACtD,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,EACjB,CAAC;AAED,cAAY,IAAI,sBAAsB,OAAO,eAAe;AAAA,IAC1D,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,IAAI,KAAK,KAAK;AAAA,EACxB,CAAC;AAED,QAAM,cAA2B;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,aAAa,QAAQ,eAAe,CAAC;AAAA,IACrC,OAAO,QAAQ;AAAA,IACf,SAAS,QAAQ;AAAA,IACjB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,EACjB;AACA,cAAY,IAAI,qBAAqB,KAAK,UAAU,WAAW,GAAG;AAAA,IAChE,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,EACjB,CAAC;AACH;AAEO,SAAS,iBACd,aACM;AACN,QAAM,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE;AACpC,cAAY,IAAI,mBAAmB,IAAI,IAAI;AAC3C,cAAY,IAAI,sBAAsB,IAAI,EAAE,GAAG,MAAM,MAAM,YAAY,CAAC;AACxE,cAAY,IAAI,qBAAqB,IAAI,IAAI;AAC/C;AAEO,SAAS,wBACd,aACe;AACf,SAAO,YAAY,IAAI,iBAAiB,GAAG,SAAS;AACtD;AAEO,SAAS,2BACd,aACe;AACf,SAAO,YAAY,IAAI,oBAAoB,GAAG,SAAS;AACzD;AAEO,SAAS,sBACd,aACoB;AACpB,QAAM,MAAM,YAAY,IAAI,mBAAmB,GAAG;AAClD,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACvGA,IAAM,WAA2B;AAAA,EAC/B,WAAW;AAAA,EACX,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,QAAQ;AAAA,EACR,gBAAgB;AAClB;AAEA,IAAI,aAAyC,CAAC;AAEvC,SAAS,cAAc,QAAiC;AAC7D,eAAa;AACf;AAEO,SAAS,gBAAgC;AAC9C,SAAO;AAAA,IACL,WAAW,WAAW,aAAa,SAAS;AAAA,IAC5C,WAAW,WAAW,aAAa,SAAS;AAAA,IAC5C,gBAAgB,WAAW,kBAAkB,SAAS;AAAA,IACtD,iBAAiB,WAAW,mBAAmB,SAAS;AAAA,IACxD,QACE,WAAW,UACX,QAAQ,IAAI,gBACZ,QAAQ,IAAI,4BACZ,SAAS;AAAA,IACX,gBACE,WAAW,kBACX,QAAQ,IAAI,oCACZ,SAAS;AAAA,EACb;AACF;;;ACnCA,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAE7B,SAAS,sBAAsB;AAaxB,SAAS,iBAAiB,QAAwB;AACvD,QAAM,SAAS,IAAI,eAAe,MAAM;AAExC,iBAAe,YAAY,KAAkB;AAC3C,QAAI;AACF,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAM,SAAU,MAAM,OAAO,MAAM;AAAA,QACjC,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,MACjB,CAAC;AAED,UAAI,OAAO,cAAc;AACvB,eAAO,aAAa,KAAK;AAAA,UACvB,cAAc;AAAA,UACd,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAEA,YAAM,SAAS;AACf,YAAM,YAAa,OAAmC;AACtD,YAAM,OACJ,cAAc,MAAM,OAAO,MAAM,OAAO,YAAY,GAAG;AACzD,YAAM,cAAc,MAAM,QAAQ;AAClC,qBAAe,aAAa,QAAQ,IAAI;AAExC,aAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF;AAEA,iBAAe,mBAAmB,KAAkB;AAClD,QAAI;AACF,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAM,SAAS,MAAM,OAAO,aAAa;AAAA,QACvC,WAAW,KAAK;AAAA,QAChB,MAAM,KAAK;AAAA,MACb,CAAC;AAED,YAAM,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,MAAM,OAAO,YAAY;AAC7D,YAAM,cAAc,MAAM,QAAQ;AAClC,qBAAe,aAAa,QAAQ,IAAI;AAExC,aAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF;AAEA,iBAAe,gBAAgB;AAC7B,QAAI;AACF,YAAM,cAAc,MAAM,QAAQ;AAClC,YAAM,eAAe,2BAA2B,WAAW;AAE3D,UAAI,CAAC,cAAc;AACjB,yBAAiB,WAAW;AAC5B,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,mBAAmB;AAAA,UAC5B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,OAAO,QAAQ,YAAY;AAChD,YAAM,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,MAAM,OAAO,YAAY;AAC7D,qBAAe,aAAa,QAAQ,IAAI;AAExC,aAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,QAAQ;AACN,YAAM,cAAc,MAAM,QAAQ;AAClC,uBAAiB,WAAW;AAC5B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,iBAAiB;AAAA,QAC1B,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,eAAe,KAAkB;AAC9C,QAAI;AACF,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAM,SAAS,MAAM,OAAO,SAAS;AAAA,QACnC,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,QACf,WAAW,KAAK;AAAA,QAChB,UAAU,KAAK;AAAA,MACjB,CAAC;AAED,UAAI,CAAC,OAAO,cAAc;AACxB,eAAO,aAAa,KAAK;AAAA,UACvB,0BAA0B;AAAA,UAC1B,MAAM,OAAO;AAAA,QACf,CAAC;AAAA,MACH;AAEA,YAAM,SAAS;AACf,YAAM,YAAY,OAAO;AACzB,YAAM,OACJ,cAAc,MAAM,OAAO,MAAM,OAAO,YAAY,GAAG;AACzD,YAAM,cAAc,MAAM,QAAQ;AAClC,qBAAe,aAAa,QAAQ,IAAI;AAExC,aAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF;AAEA,iBAAe,eAAe;AAC5B,QAAI;AACF,YAAM,cAAc,MAAM,QAAQ;AAClC,YAAM,eAAe,2BAA2B,WAAW;AAC3D,UAAI,cAAc;AAChB,cAAM,OAAO,OAAO,YAAY,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAClD;AACA,uBAAiB,WAAW;AAC5B,aAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,IAC5C,QAAQ;AACN,YAAM,cAAc,MAAM,QAAQ;AAClC,uBAAiB,WAAW;AAC5B,aAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,EACF;AAEA,iBAAe,QACb,KACA,SACA;AACA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,OAAO,OAAO,MAAM,KAAK,GAAG,KAAK;AAEvC,QAAI,IAAI,WAAW,QAAQ;AACzB,cAAQ,MAAM;AAAA,QACZ,KAAK;AACH,iBAAO,YAAY,GAAG;AAAA,QACxB,KAAK;AACH,iBAAO,eAAe,GAAG;AAAA,QAC3B,KAAK;AACH,iBAAO,mBAAmB,GAAG;AAAA,QAC/B,KAAK;AACH,iBAAO,cAAc;AAAA,QACvB,KAAK;AACH,iBAAO,aAAa;AAAA,MACxB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;;;AC7KA,SAAS,WAAAC,gBAAe;AACxB,SAAS,gBAAAC,qBAAoB;AAE7B,SAAS,kBAAAC,uBAAsB;AAE/B;AAAA,EACE,qBAAAC;AAAA,EACA,uBAAAC;AAAA,EACA,wBAAAC;AAAA,OACK;AAEA,SAAS,yBAAyB,QAAwB;AAC/D,QAAM,SAAS,IAAIH,gBAAe,MAAM;AACxC,QAAM,eAAe,QAAQ,IAAI,aAAa;AAE9C,WAAS,mBACP,aACA,QACA,MACA;AACA,gBAAY,IAAIC,oBAAmB,OAAO,cAAc;AAAA,MACtD,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,MAAM;AAAA,MACN,QAAQ,OAAO;AAAA,IACjB,CAAC;AACD,gBAAY,IAAIE,uBAAsB,OAAO,eAAe;AAAA,MAC1D,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,MAAM;AAAA,MACN,QAAQ,IAAI,KAAK,KAAK;AAAA,IACxB,CAAC;AACD,QAAI,MAAM;AACR,YAAM,YAAY,KAAK,IAAI,IAAI,OAAO,aAAa;AACnD,kBAAY;AAAA,QACVD;AAAA,QACA,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAAA,QAClC;AAAA,UACE,UAAU;AAAA,UACV,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,MAAM;AAAA,UACN,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,qBACP,aACA;AACA,gBAAY,IAAID,oBAAmB,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;AAC/D,gBAAY,IAAIE,uBAAsB,IAAI;AAAA,MACxC,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,CAAC;AACD,gBAAY,IAAID,sBAAqB,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;AAAA,EACnE;AAEA,iBAAe,YAAY,KAAkB;AAC3C,QAAI;AACF,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAM,SAAS,MAAM,OAAO,cAAc;AAAA,QACxC,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA,MACjB,CAAC;AAED,UAAI,OAAO,cAAc;AACvB,eAAOH,cAAa,KAAK;AAAA,UACvB,cAAc;AAAA,UACd,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAEA,YAAM,SAAS;AACf,YAAM,OAAO,OAAO;AACpB,YAAM,cAAc,MAAMD,SAAQ;AAClC,yBAAmB,aAAa,QAAQ,IAAI;AAE5C,aAAOC,cAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,aAAOA,cAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF;AAEA,iBAAe,mBAAmB,KAAkB;AAClD,QAAI;AACF,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAM,SAAS,MAAM,OAAO,qBAAqB;AAAA,QAC/C,WAAW,KAAK;AAAA,QAChB,MAAM,KAAK;AAAA,MACb,CAAC;AAED,YAAM,SAAS;AACf,YAAM,OAAO,OAAO;AACpB,YAAM,cAAc,MAAMD,SAAQ;AAClC,yBAAmB,aAAa,QAAQ,IAAI;AAE5C,aAAOC,cAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAOA,cAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF;AAEA,iBAAe,gBAAgB;AAC7B,QAAI;AACF,YAAM,cAAc,MAAMD,SAAQ;AAClC,YAAM,eAAe,YAAY,IAAIK,qBAAoB,GAAG;AAE5D,UAAI,CAAC,cAAc;AACjB,6BAAqB,WAAW;AAChC,eAAOJ,cAAa;AAAA,UAClB,EAAE,OAAO,mBAAmB;AAAA,UAC5B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,OAAO,gBAAgB,YAAY;AACxD,YAAM,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO;AAAA,QAClC,OAAO;AAAA,MACT;AACA,yBAAmB,aAAa,QAAQ,IAAI;AAE5C,aAAOA,cAAa,KAAK,EAAE,KAAK,CAAC;AAAA,IACnC,QAAQ;AACN,YAAM,cAAc,MAAMD,SAAQ;AAClC,2BAAqB,WAAW;AAChC,aAAOC,cAAa;AAAA,QAClB,EAAE,OAAO,iBAAiB;AAAA,QAC1B,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,eAAe;AAC5B,QAAI;AACF,YAAM,cAAc,MAAMD,SAAQ;AAClC,YAAM,eAAe,YAAY,IAAIK,qBAAoB,GAAG;AAC5D,UAAI,cAAc;AAChB,cAAM,OAAO,eAAe,YAAY,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC1D;AACA,2BAAqB,WAAW;AAChC,aAAOJ,cAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,IAC5C,QAAQ;AACN,YAAM,cAAc,MAAMD,SAAQ;AAClC,2BAAqB,WAAW;AAChC,aAAOC,cAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,EACF;AAEA,iBAAe,QACb,KACA,SACA;AACA,UAAM,SAAS,MAAM,QAAQ;AAC7B,UAAM,OAAO,OAAO,MAAM,KAAK,GAAG,KAAK;AAEvC,QAAI,IAAI,WAAW,QAAQ;AACzB,cAAQ,MAAM;AAAA,QACZ,KAAK;AACH,iBAAO,YAAY,GAAG;AAAA,QACxB,KAAK;AACH,iBAAO,mBAAmB,GAAG;AAAA,QAC/B,KAAK;AACH,iBAAO,cAAc;AAAA,QACvB,KAAK;AACH,iBAAO,aAAa;AAAA,MACxB;AAAA,IACF;AAEA,WAAOA,cAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClE;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;;;AJlKA,eAAsB,OAAkC;AACtD,QAAM,cAAc,MAAMK,SAAQ;AAClC,QAAM,QAAQ,wBAAwB,WAAW;AACjD,QAAM,SAAS,cAAc;AAE7B,WAAS,iBAAiB,MAAqC;AAC7D,UAAM,WAAW,MAAM;AACvB,UAAM,MAAM,WACR,GAAG,OAAO,SAAS,aAAa,mBAAmB,QAAQ,CAAC,KAC5D,OAAO;AACX,aAAS,GAAG;AAAA,EACd;AAEA,MAAI,CAAC,SAASC,gBAAe,KAAK,GAAG;AACnC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,MACX,UAAU,YAAY;AAAA,MACtB,KAAK,MAAM;AAAA,MACX,SAAS,MAAM;AACb,yBAAiB;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAASC,oBAAmB,KAAK;AACvC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,MACX,UAAU,YAAY;AAAA,MACtB,KAAK,MAAM;AAAA,MACX,SAAS,MAAM;AACb,yBAAiB;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,QAAM,cAAc,OAAO,eAAe,CAAC;AAE3C,QAAM,MAAM,CAAC,WAAmD;AAC9D,QAAI,OAAO,QAAQ,MAAM,SAAS,OAAO,IAAI,EAAG,QAAO;AACvD,QAAI,OAAO,cAAc,YAAY,SAAS,OAAO,UAAU;AAC7D,aAAO;AACT,WAAO;AAAA,EACT;AAEA,QAAM,eAAoC;AAAA,IACxC,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,SAAS,OAAO,YAAY;AAAA,IAC5B,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,UAAU,YAAY;AAAA,IACtB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,OAAO,OAAO,UAAU;AAAA,IACxB,SAAS,OAAO,YAAY;AAAA,IAC5B,WAAW;AAAA,IACX,UAAU,YAAY;AAAA,IACtB;AAAA,IACA,SAAS,CAAC,WAIJ;AACJ,UAAI,QAAQ,QAAQ,QAAQ,YAAY;AACtC,YAAI,CAAC,IAAI,EAAE,MAAM,OAAO,MAAM,YAAY,OAAO,WAAW,CAAC,GAAG;AAC9D,mBAAS,OAAO,cAAc,eAAe;AAAA,QAC/C;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,YACpB,MAC8B;AAC9B,QAAM,cAAc,MAAMF,SAAQ;AAElC,MAAI,MAAM,OAAO;AACf,UAAM,QAAQ,wBAAwB,WAAW;AACjD,QAAI,CAAC,SAASC,gBAAe,KAAK,EAAG,QAAO;AAE5C,UAAM,SAAS,cAAc;AAC7B,QAAI,CAAC,OAAO,UAAU,CAAC,OAAO,gBAAgB;AAC5C,YAAME,WAAU,sBAAsB,WAAW;AACjD,aAAOA,UAAS,QAAQ;AAAA,IAC1B;AAEA,UAAM,SAAS,IAAIC,gBAAe;AAAA,MAChC,QAAQ,OAAO;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,QAAI;AACF,YAAM,EAAE,KAAK,IAAI,MAAM,OAAO,MAAM,KAAK;AACzC,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,sBAAsB,WAAW;AACjD,SAAO,SAAS,QAAQ;AAC1B;","names":["cookies","InAIAuthClient","isTokenExpired","getClaimsFromToken","COOKIE_AUTH_TOKEN","COOKIE_REFRESH_TOKEN","COOKIE_AUTH_SESSION","cookies","NextResponse","InAIAuthClient","COOKIE_AUTH_TOKEN","COOKIE_AUTH_SESSION","COOKIE_REFRESH_TOKEN","cookies","isTokenExpired","getClaimsFromToken","session","InAIAuthClient"]}