@inai-dev/shared 0.1.0 → 1.1.0

package/README.md

@@ -1,6 +1,6 @@
 # @inai-dev/shared
 
-Shared utilities for the InAI Auth SDK. Includes validators, error classes, JWT helpers, URL utilities, and constants.
+Shared utilities for the InAI Auth SDK. Includes error class, JWT helpers, validators, URL utilities, and constants.
 
 ## Installation
 
@@ -10,25 +10,82 @@ npm install @inai-dev/shared
 
 > **Note:** You typically don't need to install this directly. It's included as a dependency of higher-level packages.
 
-## Usage
+## Exports
+
+### Error Class
 
 ```ts
-import { InAIError, isInAIError } from "@inai-dev/shared";
-import { validateEmail, validatePassword } from "@inai-dev/shared";
-import { AUTH_COOKIE_NAME, REFRESH_COOKIE_NAME } from "@inai-dev/shared";
+import { InAIAuthError } from "@inai-dev/shared";
+
+try {
+  // ...
+} catch (err) {
+  if (err instanceof InAIAuthError) {
+    console.error(err.status, err.message, err.body);
+  }
+}
 ```
 
-## Exports
+### JWT Utilities
+
+```ts
+import { decodeJWTPayload, isTokenExpired, getClaimsFromToken } from "@inai-dev/shared";
+
+const payload = decodeJWTPayload(token);   // Raw JWT payload or null
+const expired = isTokenExpired(token);      // boolean
+const claims = getClaimsFromToken(token);   // JWTClaims or null
+```
+
+### Validators
+
+```ts
+import { isValidEmail, isStrongPassword } from "@inai-dev/shared";
+
+isValidEmail("user@example.com");  // true
+isStrongPassword("MyP@ss1234");    // true
+```
+
+### Constants
+
+```ts
+import {
+  COOKIE_AUTH_TOKEN,       // "auth_token"
+  COOKIE_REFRESH_TOKEN,    // "refresh_token"
+  COOKIE_AUTH_SESSION,     // "auth_session"
+  DEFAULT_SIGN_IN_URL,     // "/login"
+  DEFAULT_SIGN_UP_URL,     // "/register"
+  DEFAULT_AFTER_SIGN_IN_URL,  // "/"
+  DEFAULT_AFTER_SIGN_OUT_URL, // "/login"
+  HEADER_PUBLISHABLE_KEY,  // "X-Publishable-Key"
+  HEADER_AUTHORIZATION,    // "Authorization"
+  HEADER_INAI_AUTH,        // "x-inai-auth"
+  DEFAULT_API_URL,         // Internal — not for public use
+} from "@inai-dev/shared";
+```
+
+### URL Utilities
 
-- **Errors**: `InAIError`, `isInAIError`, error codes
-- **Validators**: Email, password, and input validation
-- **JWT**: Token decode and verification utilities
-- **URL**: API URL builder helpers
-- **Constants**: Cookie names, header names, default values
+```ts
+import { normalizeApiUrl, buildEndpoint } from "@inai-dev/shared";
+```
 
-## Documentation
+## Exports Reference
 
-See the full [API Reference](https://github.com/inai-dev/sdk/blob/main/docs/api-reference.md).
+| Export | Kind | Description |
+|---|---|---|
+| `InAIAuthError` | Class | Auth error with status and body |
+| `decodeJWTPayload` | Function | Decode JWT payload (no verification) |
+| `isTokenExpired` | Function | Check if JWT is expired |
+| `getClaimsFromToken` | Function | Extract typed JWTClaims from token |
+| `isValidEmail` | Function | Email format validation |
+| `isStrongPassword` | Function | Password strength validation |
+| `normalizeApiUrl` | Function | Normalize API URL (trailing slash) |
+| `buildEndpoint` | Function | Build full API endpoint URL |
+| `COOKIE_AUTH_TOKEN` | Constant | Auth token cookie name |
+| `COOKIE_REFRESH_TOKEN` | Constant | Refresh token cookie name |
+| `COOKIE_AUTH_SESSION` | Constant | Session cookie name |
+| `DEFAULT_API_URL` | Constant | Default API URL (internal) |
+| `HEADER_PUBLISHABLE_KEY` | Constant | Publishable key header name |
 
 ## License
 

package/dist/index.cjs

@@ -25,6 +25,7 @@ __export(index_exports, {
   COOKIE_REFRESH_TOKEN: () => COOKIE_REFRESH_TOKEN,
   DEFAULT_AFTER_SIGN_IN_URL: () => DEFAULT_AFTER_SIGN_IN_URL,
   DEFAULT_AFTER_SIGN_OUT_URL: () => DEFAULT_AFTER_SIGN_OUT_URL,
+  DEFAULT_API_URL: () => DEFAULT_API_URL,
   DEFAULT_SIGN_IN_URL: () => DEFAULT_SIGN_IN_URL,
   DEFAULT_SIGN_UP_URL: () => DEFAULT_SIGN_UP_URL,
   HEADER_AUTHORIZATION: () => HEADER_AUTHORIZATION,
@@ -92,6 +93,7 @@ var DEFAULT_AFTER_SIGN_OUT_URL = "/login";
 var HEADER_PUBLISHABLE_KEY = "X-Publishable-Key";
 var HEADER_AUTHORIZATION = "Authorization";
 var HEADER_INAI_AUTH = "x-inai-auth";
+var DEFAULT_API_URL = "https://apiauth.inai.dev";
 
 // src/url.ts
 function normalizeApiUrl(url) {
@@ -120,6 +122,7 @@ function isStrongPassword(password) {
   COOKIE_REFRESH_TOKEN,
   DEFAULT_AFTER_SIGN_IN_URL,
   DEFAULT_AFTER_SIGN_OUT_URL,
+  DEFAULT_API_URL,
   DEFAULT_SIGN_IN_URL,
   DEFAULT_SIGN_UP_URL,
   HEADER_AUTHORIZATION,

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/jwt.ts","../src/constants.ts","../src/url.ts","../src/validators.ts"],"sourcesContent":["export { InAIAuthError } from \"./errors\";\nexport {\n  decodeJWTPayload,\n  isTokenExpired,\n  getClaimsFromToken,\n} from \"./jwt\";\nexport {\n  COOKIE_AUTH_TOKEN,\n  COOKIE_REFRESH_TOKEN,\n  COOKIE_AUTH_SESSION,\n  DEFAULT_SIGN_IN_URL,\n  DEFAULT_SIGN_UP_URL,\n  DEFAULT_AFTER_SIGN_IN_URL,\n  DEFAULT_AFTER_SIGN_OUT_URL,\n  HEADER_PUBLISHABLE_KEY,\n  HEADER_AUTHORIZATION,\n  HEADER_INAI_AUTH,\n} from \"./constants\";\nexport { normalizeApiUrl, buildEndpoint } from \"./url\";\nexport { isValidEmail, isStrongPassword } from \"./validators\";\n","import type { InAIAuthErrorBody } from \"@inai-dev/types\";\n\nexport class InAIAuthError extends Error {\n  status: number;\n  body: InAIAuthErrorBody;\n  code: string;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"InAIAuthError\";\n    this.status = status;\n    const parsed = body as Record<string, unknown> | null;\n    this.body = {\n      code: (parsed?.code as string) ?? \"UNKNOWN_ERROR\",\n      detail: (parsed?.detail as string) ?? message,\n      field: (parsed?.field as string) ?? undefined,\n    };\n    this.code = this.body.code;\n  }\n}\n","import type { JWTClaims } from \"@inai-dev/types\";\n\nexport function decodeJWTPayload(token: string): JWTClaims | null {\n  try {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) return null;\n    const payload = parts[1].replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const decoded = atob(payload);\n    return JSON.parse(decoded);\n  } catch {\n    return null;\n  }\n}\n\nexport function isTokenExpired(token: string): boolean {\n  const claims = decodeJWTPayload(token);\n  if (!claims?.exp) return true;\n  return Date.now() >= claims.exp * 1000;\n}\n\nexport function getClaimsFromToken(token: string): JWTClaims | null {\n  return decodeJWTPayload(token);\n}\n","export const COOKIE_AUTH_TOKEN = \"auth_token\";\nexport const COOKIE_REFRESH_TOKEN = \"refresh_token\";\nexport const COOKIE_AUTH_SESSION = \"auth_session\";\n\nexport const DEFAULT_SIGN_IN_URL = \"/login\";\nexport const DEFAULT_SIGN_UP_URL = \"/register\";\nexport const DEFAULT_AFTER_SIGN_IN_URL = \"/\";\nexport const DEFAULT_AFTER_SIGN_OUT_URL = \"/login\";\n\nexport const HEADER_PUBLISHABLE_KEY = \"X-Publishable-Key\";\nexport const HEADER_AUTHORIZATION = \"Authorization\";\nexport const HEADER_INAI_AUTH = \"x-inai-auth\";\n","export function normalizeApiUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nexport function buildEndpoint(apiUrl: string, path: string): string {\n  return `${normalizeApiUrl(apiUrl)}${path}`;\n}\n","export function isValidEmail(email: string): boolean {\n  return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nexport function isStrongPassword(password: string): {\n  valid: boolean;\n  errors: string[];\n} {\n  const errors: string[] = [];\n  if (password.length < 8) errors.push(\"Password must be at least 8 characters\");\n  if (!/[A-Z]/.test(password)) errors.push(\"Password must contain an uppercase letter\");\n  if (!/[a-z]/.test(password)) errors.push(\"Password must contain a lowercase letter\");\n  if (!/[0-9]/.test(password)) errors.push(\"Password must contain a number\");\n  return { valid: errors.length === 0, errors };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,UAAM,SAAS;AACf,SAAK,OAAO;AAAA,MACV,MAAO,QAAQ,QAAmB;AAAA,MAClC,QAAS,QAAQ,UAAqB;AAAA,MACtC,OAAQ,QAAQ,SAAoB;AAAA,IACtC;AACA,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB;AACF;;;ACjBO,SAAS,iBAAiB,OAAiC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,UAAM,UAAU,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,UAAM,UAAU,KAAK,OAAO;AAC5B,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,OAAwB;AACrD,QAAM,SAAS,iBAAiB,KAAK;AACrC,MAAI,CAAC,QAAQ,IAAK,QAAO;AACzB,SAAO,KAAK,IAAI,KAAK,OAAO,MAAM;AACpC;AAEO,SAAS,mBAAmB,OAAiC;AAClE,SAAO,iBAAiB,KAAK;AAC/B;;;ACtBO,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAC7B,IAAM,sBAAsB;AAE5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;;;ACXzB,SAAS,gBAAgB,KAAqB;AACnD,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEO,SAAS,cAAc,QAAgB,MAAsB;AAClE,SAAO,GAAG,gBAAgB,MAAM,CAAC,GAAG,IAAI;AAC1C;;;ACNO,SAAS,aAAa,OAAwB;AACnD,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAEO,SAAS,iBAAiB,UAG/B;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS,SAAS,EAAG,QAAO,KAAK,wCAAwC;AAC7E,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,2CAA2C;AACpF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,0CAA0C;AACnF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,gCAAgC;AACzE,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/jwt.ts","../src/constants.ts","../src/url.ts","../src/validators.ts"],"sourcesContent":["export { InAIAuthError } from \"./errors\";\nexport {\n  decodeJWTPayload,\n  isTokenExpired,\n  getClaimsFromToken,\n} from \"./jwt\";\nexport {\n  COOKIE_AUTH_TOKEN,\n  COOKIE_REFRESH_TOKEN,\n  COOKIE_AUTH_SESSION,\n  DEFAULT_SIGN_IN_URL,\n  DEFAULT_SIGN_UP_URL,\n  DEFAULT_AFTER_SIGN_IN_URL,\n  DEFAULT_AFTER_SIGN_OUT_URL,\n  HEADER_PUBLISHABLE_KEY,\n  HEADER_AUTHORIZATION,\n  HEADER_INAI_AUTH,\n  DEFAULT_API_URL,\n} from \"./constants\";\nexport { normalizeApiUrl, buildEndpoint } from \"./url\";\nexport { isValidEmail, isStrongPassword } from \"./validators\";\n","import type { InAIAuthErrorBody } from \"@inai-dev/types\";\n\nexport class InAIAuthError extends Error {\n  status: number;\n  body: InAIAuthErrorBody;\n  code: string;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"InAIAuthError\";\n    this.status = status;\n    const parsed = body as Record<string, unknown> | null;\n    this.body = {\n      code: (parsed?.code as string) ?? \"UNKNOWN_ERROR\",\n      detail: (parsed?.detail as string) ?? message,\n      field: (parsed?.field as string) ?? undefined,\n    };\n    this.code = this.body.code;\n  }\n}\n","import type { JWTClaims } from \"@inai-dev/types\";\n\nexport function decodeJWTPayload(token: string): JWTClaims | null {\n  try {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) return null;\n    const payload = parts[1].replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const decoded = atob(payload);\n    return JSON.parse(decoded);\n  } catch {\n    return null;\n  }\n}\n\nexport function isTokenExpired(token: string): boolean {\n  const claims = decodeJWTPayload(token);\n  if (!claims?.exp) return true;\n  return Date.now() >= claims.exp * 1000;\n}\n\nexport function getClaimsFromToken(token: string): JWTClaims | null {\n  return decodeJWTPayload(token);\n}\n","export const COOKIE_AUTH_TOKEN = \"auth_token\";\nexport const COOKIE_REFRESH_TOKEN = \"refresh_token\";\nexport const COOKIE_AUTH_SESSION = \"auth_session\";\n\nexport const DEFAULT_SIGN_IN_URL = \"/login\";\nexport const DEFAULT_SIGN_UP_URL = \"/register\";\nexport const DEFAULT_AFTER_SIGN_IN_URL = \"/\";\nexport const DEFAULT_AFTER_SIGN_OUT_URL = \"/login\";\n\nexport const HEADER_PUBLISHABLE_KEY = \"X-Publishable-Key\";\nexport const HEADER_AUTHORIZATION = \"Authorization\";\nexport const HEADER_INAI_AUTH = \"x-inai-auth\";\n\nexport const DEFAULT_API_URL = \"https://apiauth.inai.dev\";\n","export function normalizeApiUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nexport function buildEndpoint(apiUrl: string, path: string): string {\n  return `${normalizeApiUrl(apiUrl)}${path}`;\n}\n","export function isValidEmail(email: string): boolean {\n  return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nexport function isStrongPassword(password: string): {\n  valid: boolean;\n  errors: string[];\n} {\n  const errors: string[] = [];\n  if (password.length < 8) errors.push(\"Password must be at least 8 characters\");\n  if (!/[A-Z]/.test(password)) errors.push(\"Password must contain an uppercase letter\");\n  if (!/[a-z]/.test(password)) errors.push(\"Password must contain a lowercase letter\");\n  if (!/[0-9]/.test(password)) errors.push(\"Password must contain a number\");\n  return { valid: errors.length === 0, errors };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,UAAM,SAAS;AACf,SAAK,OAAO;AAAA,MACV,MAAO,QAAQ,QAAmB;AAAA,MAClC,QAAS,QAAQ,UAAqB;AAAA,MACtC,OAAQ,QAAQ,SAAoB;AAAA,IACtC;AACA,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB;AACF;;;ACjBO,SAAS,iBAAiB,OAAiC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,UAAM,UAAU,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,UAAM,UAAU,KAAK,OAAO;AAC5B,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,OAAwB;AACrD,QAAM,SAAS,iBAAiB,KAAK;AACrC,MAAI,CAAC,QAAQ,IAAK,QAAO;AACzB,SAAO,KAAK,IAAI,KAAK,OAAO,MAAM;AACpC;AAEO,SAAS,mBAAmB,OAAiC;AAClE,SAAO,iBAAiB,KAAK;AAC/B;;;ACtBO,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAC7B,IAAM,sBAAsB;AAE5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAEzB,IAAM,kBAAkB;;;ACbxB,SAAS,gBAAgB,KAAqB;AACnD,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEO,SAAS,cAAc,QAAgB,MAAsB;AAClE,SAAO,GAAG,gBAAgB,MAAM,CAAC,GAAG,IAAI;AAC1C;;;ACNO,SAAS,aAAa,OAAwB;AACnD,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAEO,SAAS,iBAAiB,UAG/B;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS,SAAS,EAAG,QAAO,KAAK,wCAAwC;AAC7E,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,2CAA2C;AACpF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,0CAA0C;AACnF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,gCAAgC;AACzE,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;","names":[]}

package/dist/index.d.cts

@@ -21,6 +21,7 @@ declare const DEFAULT_AFTER_SIGN_OUT_URL = "/login";
 declare const HEADER_PUBLISHABLE_KEY = "X-Publishable-Key";
 declare const HEADER_AUTHORIZATION = "Authorization";
 declare const HEADER_INAI_AUTH = "x-inai-auth";
+declare const DEFAULT_API_URL = "https://apiauth.inai.dev";
 
 declare function normalizeApiUrl(url: string): string;
 declare function buildEndpoint(apiUrl: string, path: string): string;
@@ -31,4 +32,4 @@ declare function isStrongPassword(password: string): {
     errors: string[];
 };
 
-export { COOKIE_AUTH_SESSION, COOKIE_AUTH_TOKEN, COOKIE_REFRESH_TOKEN, DEFAULT_AFTER_SIGN_IN_URL, DEFAULT_AFTER_SIGN_OUT_URL, DEFAULT_SIGN_IN_URL, DEFAULT_SIGN_UP_URL, HEADER_AUTHORIZATION, HEADER_INAI_AUTH, HEADER_PUBLISHABLE_KEY, InAIAuthError, buildEndpoint, decodeJWTPayload, getClaimsFromToken, isStrongPassword, isTokenExpired, isValidEmail, normalizeApiUrl };
+export { COOKIE_AUTH_SESSION, COOKIE_AUTH_TOKEN, COOKIE_REFRESH_TOKEN, DEFAULT_AFTER_SIGN_IN_URL, DEFAULT_AFTER_SIGN_OUT_URL, DEFAULT_API_URL, DEFAULT_SIGN_IN_URL, DEFAULT_SIGN_UP_URL, HEADER_AUTHORIZATION, HEADER_INAI_AUTH, HEADER_PUBLISHABLE_KEY, InAIAuthError, buildEndpoint, decodeJWTPayload, getClaimsFromToken, isStrongPassword, isTokenExpired, isValidEmail, normalizeApiUrl };

package/dist/index.d.ts

@@ -21,6 +21,7 @@ declare const DEFAULT_AFTER_SIGN_OUT_URL = "/login";
 declare const HEADER_PUBLISHABLE_KEY = "X-Publishable-Key";
 declare const HEADER_AUTHORIZATION = "Authorization";
 declare const HEADER_INAI_AUTH = "x-inai-auth";
+declare const DEFAULT_API_URL = "https://apiauth.inai.dev";
 
 declare function normalizeApiUrl(url: string): string;
 declare function buildEndpoint(apiUrl: string, path: string): string;
@@ -31,4 +32,4 @@ declare function isStrongPassword(password: string): {
     errors: string[];
 };
 
-export { COOKIE_AUTH_SESSION, COOKIE_AUTH_TOKEN, COOKIE_REFRESH_TOKEN, DEFAULT_AFTER_SIGN_IN_URL, DEFAULT_AFTER_SIGN_OUT_URL, DEFAULT_SIGN_IN_URL, DEFAULT_SIGN_UP_URL, HEADER_AUTHORIZATION, HEADER_INAI_AUTH, HEADER_PUBLISHABLE_KEY, InAIAuthError, buildEndpoint, decodeJWTPayload, getClaimsFromToken, isStrongPassword, isTokenExpired, isValidEmail, normalizeApiUrl };
+export { COOKIE_AUTH_SESSION, COOKIE_AUTH_TOKEN, COOKIE_REFRESH_TOKEN, DEFAULT_AFTER_SIGN_IN_URL, DEFAULT_AFTER_SIGN_OUT_URL, DEFAULT_API_URL, DEFAULT_SIGN_IN_URL, DEFAULT_SIGN_UP_URL, HEADER_AUTHORIZATION, HEADER_INAI_AUTH, HEADER_PUBLISHABLE_KEY, InAIAuthError, buildEndpoint, decodeJWTPayload, getClaimsFromToken, isStrongPassword, isTokenExpired, isValidEmail, normalizeApiUrl };

package/dist/index.js

@@ -49,6 +49,7 @@ var DEFAULT_AFTER_SIGN_OUT_URL = "/login";
 var HEADER_PUBLISHABLE_KEY = "X-Publishable-Key";
 var HEADER_AUTHORIZATION = "Authorization";
 var HEADER_INAI_AUTH = "x-inai-auth";
+var DEFAULT_API_URL = "https://apiauth.inai.dev";
 
 // src/url.ts
 function normalizeApiUrl(url) {
@@ -76,6 +77,7 @@ export {
   COOKIE_REFRESH_TOKEN,
   DEFAULT_AFTER_SIGN_IN_URL,
   DEFAULT_AFTER_SIGN_OUT_URL,
+  DEFAULT_API_URL,
   DEFAULT_SIGN_IN_URL,
   DEFAULT_SIGN_UP_URL,
   HEADER_AUTHORIZATION,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/jwt.ts","../src/constants.ts","../src/url.ts","../src/validators.ts"],"sourcesContent":["import type { InAIAuthErrorBody } from \"@inai-dev/types\";\n\nexport class InAIAuthError extends Error {\n  status: number;\n  body: InAIAuthErrorBody;\n  code: string;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"InAIAuthError\";\n    this.status = status;\n    const parsed = body as Record<string, unknown> | null;\n    this.body = {\n      code: (parsed?.code as string) ?? \"UNKNOWN_ERROR\",\n      detail: (parsed?.detail as string) ?? message,\n      field: (parsed?.field as string) ?? undefined,\n    };\n    this.code = this.body.code;\n  }\n}\n","import type { JWTClaims } from \"@inai-dev/types\";\n\nexport function decodeJWTPayload(token: string): JWTClaims | null {\n  try {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) return null;\n    const payload = parts[1].replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const decoded = atob(payload);\n    return JSON.parse(decoded);\n  } catch {\n    return null;\n  }\n}\n\nexport function isTokenExpired(token: string): boolean {\n  const claims = decodeJWTPayload(token);\n  if (!claims?.exp) return true;\n  return Date.now() >= claims.exp * 1000;\n}\n\nexport function getClaimsFromToken(token: string): JWTClaims | null {\n  return decodeJWTPayload(token);\n}\n","export const COOKIE_AUTH_TOKEN = \"auth_token\";\nexport const COOKIE_REFRESH_TOKEN = \"refresh_token\";\nexport const COOKIE_AUTH_SESSION = \"auth_session\";\n\nexport const DEFAULT_SIGN_IN_URL = \"/login\";\nexport const DEFAULT_SIGN_UP_URL = \"/register\";\nexport const DEFAULT_AFTER_SIGN_IN_URL = \"/\";\nexport const DEFAULT_AFTER_SIGN_OUT_URL = \"/login\";\n\nexport const HEADER_PUBLISHABLE_KEY = \"X-Publishable-Key\";\nexport const HEADER_AUTHORIZATION = \"Authorization\";\nexport const HEADER_INAI_AUTH = \"x-inai-auth\";\n","export function normalizeApiUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nexport function buildEndpoint(apiUrl: string, path: string): string {\n  return `${normalizeApiUrl(apiUrl)}${path}`;\n}\n","export function isValidEmail(email: string): boolean {\n  return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nexport function isStrongPassword(password: string): {\n  valid: boolean;\n  errors: string[];\n} {\n  const errors: string[] = [];\n  if (password.length < 8) errors.push(\"Password must be at least 8 characters\");\n  if (!/[A-Z]/.test(password)) errors.push(\"Password must contain an uppercase letter\");\n  if (!/[a-z]/.test(password)) errors.push(\"Password must contain a lowercase letter\");\n  if (!/[0-9]/.test(password)) errors.push(\"Password must contain a number\");\n  return { valid: errors.length === 0, errors };\n}\n"],"mappings":";AAEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,UAAM,SAAS;AACf,SAAK,OAAO;AAAA,MACV,MAAO,QAAQ,QAAmB;AAAA,MAClC,QAAS,QAAQ,UAAqB;AAAA,MACtC,OAAQ,QAAQ,SAAoB;AAAA,IACtC;AACA,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB;AACF;;;ACjBO,SAAS,iBAAiB,OAAiC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,UAAM,UAAU,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,UAAM,UAAU,KAAK,OAAO;AAC5B,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,OAAwB;AACrD,QAAM,SAAS,iBAAiB,KAAK;AACrC,MAAI,CAAC,QAAQ,IAAK,QAAO;AACzB,SAAO,KAAK,IAAI,KAAK,OAAO,MAAM;AACpC;AAEO,SAAS,mBAAmB,OAAiC;AAClE,SAAO,iBAAiB,KAAK;AAC/B;;;ACtBO,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAC7B,IAAM,sBAAsB;AAE5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;;;ACXzB,SAAS,gBAAgB,KAAqB;AACnD,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEO,SAAS,cAAc,QAAgB,MAAsB;AAClE,SAAO,GAAG,gBAAgB,MAAM,CAAC,GAAG,IAAI;AAC1C;;;ACNO,SAAS,aAAa,OAAwB;AACnD,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAEO,SAAS,iBAAiB,UAG/B;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS,SAAS,EAAG,QAAO,KAAK,wCAAwC;AAC7E,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,2CAA2C;AACpF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,0CAA0C;AACnF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,gCAAgC;AACzE,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;","names":[]}
+{"version":3,"sources":["../src/errors.ts","../src/jwt.ts","../src/constants.ts","../src/url.ts","../src/validators.ts"],"sourcesContent":["import type { InAIAuthErrorBody } from \"@inai-dev/types\";\n\nexport class InAIAuthError extends Error {\n  status: number;\n  body: InAIAuthErrorBody;\n  code: string;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"InAIAuthError\";\n    this.status = status;\n    const parsed = body as Record<string, unknown> | null;\n    this.body = {\n      code: (parsed?.code as string) ?? \"UNKNOWN_ERROR\",\n      detail: (parsed?.detail as string) ?? message,\n      field: (parsed?.field as string) ?? undefined,\n    };\n    this.code = this.body.code;\n  }\n}\n","import type { JWTClaims } from \"@inai-dev/types\";\n\nexport function decodeJWTPayload(token: string): JWTClaims | null {\n  try {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) return null;\n    const payload = parts[1].replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const decoded = atob(payload);\n    return JSON.parse(decoded);\n  } catch {\n    return null;\n  }\n}\n\nexport function isTokenExpired(token: string): boolean {\n  const claims = decodeJWTPayload(token);\n  if (!claims?.exp) return true;\n  return Date.now() >= claims.exp * 1000;\n}\n\nexport function getClaimsFromToken(token: string): JWTClaims | null {\n  return decodeJWTPayload(token);\n}\n","export const COOKIE_AUTH_TOKEN = \"auth_token\";\nexport const COOKIE_REFRESH_TOKEN = \"refresh_token\";\nexport const COOKIE_AUTH_SESSION = \"auth_session\";\n\nexport const DEFAULT_SIGN_IN_URL = \"/login\";\nexport const DEFAULT_SIGN_UP_URL = \"/register\";\nexport const DEFAULT_AFTER_SIGN_IN_URL = \"/\";\nexport const DEFAULT_AFTER_SIGN_OUT_URL = \"/login\";\n\nexport const HEADER_PUBLISHABLE_KEY = \"X-Publishable-Key\";\nexport const HEADER_AUTHORIZATION = \"Authorization\";\nexport const HEADER_INAI_AUTH = \"x-inai-auth\";\n\nexport const DEFAULT_API_URL = \"https://apiauth.inai.dev\";\n","export function normalizeApiUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nexport function buildEndpoint(apiUrl: string, path: string): string {\n  return `${normalizeApiUrl(apiUrl)}${path}`;\n}\n","export function isValidEmail(email: string): boolean {\n  return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nexport function isStrongPassword(password: string): {\n  valid: boolean;\n  errors: string[];\n} {\n  const errors: string[] = [];\n  if (password.length < 8) errors.push(\"Password must be at least 8 characters\");\n  if (!/[A-Z]/.test(password)) errors.push(\"Password must contain an uppercase letter\");\n  if (!/[a-z]/.test(password)) errors.push(\"Password must contain a lowercase letter\");\n  if (!/[0-9]/.test(password)) errors.push(\"Password must contain a number\");\n  return { valid: errors.length === 0, errors };\n}\n"],"mappings":";AAEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,UAAM,SAAS;AACf,SAAK,OAAO;AAAA,MACV,MAAO,QAAQ,QAAmB;AAAA,MAClC,QAAS,QAAQ,UAAqB;AAAA,MACtC,OAAQ,QAAQ,SAAoB;AAAA,IACtC;AACA,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB;AACF;;;ACjBO,SAAS,iBAAiB,OAAiC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,UAAM,UAAU,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,UAAM,UAAU,KAAK,OAAO;AAC5B,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,OAAwB;AACrD,QAAM,SAAS,iBAAiB,KAAK;AACrC,MAAI,CAAC,QAAQ,IAAK,QAAO;AACzB,SAAO,KAAK,IAAI,KAAK,OAAO,MAAM;AACpC;AAEO,SAAS,mBAAmB,OAAiC;AAClE,SAAO,iBAAiB,KAAK;AAC/B;;;ACtBO,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAC7B,IAAM,sBAAsB;AAE5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAEzB,IAAM,kBAAkB;;;ACbxB,SAAS,gBAAgB,KAAqB;AACnD,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEO,SAAS,cAAc,QAAgB,MAAsB;AAClE,SAAO,GAAG,gBAAgB,MAAM,CAAC,GAAG,IAAI;AAC1C;;;ACNO,SAAS,aAAa,OAAwB;AACnD,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAEO,SAAS,iBAAiB,UAG/B;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS,SAAS,EAAG,QAAO,KAAK,wCAAwC;AAC7E,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,2CAA2C;AACpF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,0CAA0C;AACnF,MAAI,CAAC,QAAQ,KAAK,QAAQ,EAAG,QAAO,KAAK,gCAAgC;AACzE,SAAO,EAAE,OAAO,OAAO,WAAW,GAAG,OAAO;AAC9C;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inai-dev/shared",
-  "version": "0.1.0",
+  "version": "1.1.0",
   "description": "Shared utilities for the InAI Auth SDK",
   "type": "module",
   "main": "./dist/index.js",
@@ -12,7 +12,9 @@
       "require": "./dist/index.cjs"
     }
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
@@ -22,7 +24,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@inai-dev/types": "^0.1.0"
+    "@inai-dev/types": "^1.1.0"
   },
   "sideEffects": false,
   "publishConfig": {
@@ -37,5 +39,11 @@
   },
   "homepage": "https://inai.dev/",
   "bugs": "https://github.com/InAI-Team/inai-auth-sdk/issues",
-  "keywords": ["inai", "auth", "shared", "utilities", "validation"]
+  "keywords": [
+    "inai",
+    "auth",
+    "shared",
+    "utilities",
+    "validation"
+  ]
 }