@infuro/cms-core 1.0.0

package/dist/auth.d.ts

@@ -0,0 +1,99 @@
+import { NextAuthOptions } from 'next-auth';
+
+interface SessionUser {
+    id?: string;
+    email?: string | null;
+    name?: string | null;
+    groupId?: number;
+    permissions?: string[];
+}
+type GetSession = () => Promise<{
+    user?: SessionUser;
+} | null>;
+declare const OPEN_ENDPOINTS: Array<Record<string, string[]>>;
+declare const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]>;
+declare function isOpenEndpoint(pathname: string): boolean;
+declare function getRequiredPermission(pathname: string): string[] | null;
+declare function isPublicMethod(pathname: string, method: string): boolean;
+interface AuthHelpers {
+    requireAuth(req: Request): Promise<Response | null>;
+    requirePermission(req: Request, permission: string): Promise<Response | null>;
+    getAuthenticatedUser(): Promise<SessionUser | null>;
+}
+declare function createAuthHelpers(getSession: GetSession, NextResponse: {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+}): AuthHelpers;
+
+interface CmsMiddlewareConfig {
+    publicAdminPaths?: string[];
+    publicApiPaths?: string[];
+    /** path -> allowed methods */
+    publicApiMethods?: Record<string, string[]>;
+    signInPath?: string;
+    getSessionToken?: (request: {
+        cookies: {
+            get: (name: string) => {
+                value?: string;
+            } | undefined;
+        };
+    }) => string | undefined;
+}
+/** Default public API paths (no auth). Sites should extend this with their own routes. */
+declare const defaultPublicApiMethods: Record<string, string[]>;
+/**
+ * Returns middleware logic. Use from Next.js middleware:
+ *   import { createCmsMiddleware } from '@infuro/cms-core';
+ *   export const middleware = createCmsMiddleware({ ... });
+ *   export const config = { matcher: ['/admin/:path*', '/api/:path*'] };
+ */
+declare function createCmsMiddleware(config?: CmsMiddlewareConfig): (request: {
+    nextUrl: {
+        pathname: string;
+    };
+    url: string;
+    method: string;
+    cookies: {
+        get: (name: string) => {
+            value?: string;
+        } | undefined;
+    };
+}) => {
+    type: "next";
+} | {
+    type: "redirect";
+    url: string;
+} | {
+    type: "json";
+    status: number;
+    body: unknown;
+};
+
+/**
+ * Build NextAuth options for credentials auth. App can extend/override via extend().
+ */
+
+interface NextAuthUser {
+    id: number;
+    email: string;
+    name: string | null;
+    password: string | null;
+    blocked?: boolean;
+    deleted?: boolean;
+    groupId?: number | null;
+    group?: {
+        permissions?: unknown[];
+    };
+}
+interface NextAuthOptionsConfig {
+    /** Resolve user by email (e.g. from TypeORM). Return null if not found. */
+    getUserByEmail: (email: string) => Promise<NextAuthUser | null>;
+    comparePassword: (plain: string, hash: string) => Promise<boolean>;
+    signInPage?: string;
+    secret?: string;
+    extend?: (options: NextAuthOptions) => NextAuthOptions;
+}
+declare function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions;
+
+export { type AuthHelpers, type CmsMiddlewareConfig, type GetSession, type NextAuthOptionsConfig, type NextAuthUser, OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, type SessionUser, createAuthHelpers, createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getRequiredPermission, isOpenEndpoint, isPublicMethod };

package/dist/auth.js

@@ -0,0 +1,181 @@
+// src/auth/helpers.ts
+var OPEN_ENDPOINTS = [
+  { "/api/contacts": ["POST"] },
+  { "/api/form-submissions": ["POST"] },
+  { "/api/blogs": ["GET"] }
+];
+var PERMISSION_REQUIRED_ENDPOINTS = {};
+function isOpenEndpoint(pathname) {
+  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
+}
+function getRequiredPermission(pathname) {
+  return null;
+}
+function isPublicMethod(pathname, method) {
+  for (const endpoint of OPEN_ENDPOINTS) {
+    const key = Object.keys(endpoint)[0];
+    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
+  }
+  return false;
+}
+function createAuthHelpers(getSession, NextResponse) {
+  return {
+    async requireAuth() {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+      }
+      return null;
+    },
+    async requirePermission() {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+      }
+      return null;
+    },
+    async getAuthenticatedUser() {
+      const session = await getSession();
+      return session?.user ?? null;
+    }
+  };
+}
+
+// src/auth/middleware.ts
+var defaultPublicApiMethods = {
+  "/api/contacts": ["POST"],
+  "/api/form-submissions": ["POST"],
+  "/api/blogs": ["GET"],
+  "/api/forms": ["GET"],
+  "/api/auth": ["GET", "POST"],
+  "/api/health": ["GET"],
+  "/api/users/forgot-password": ["POST"],
+  "/api/users/set-password": ["POST"],
+  "/api/users/invite": ["POST"]
+};
+function defaultGetSessionToken(request) {
+  return request.cookies.get("__Secure-next-auth.session-token")?.value ?? request.cookies.get("next-auth.session-token")?.value;
+}
+function isPublicMethod2(pathname, method, publicApiMethods) {
+  for (const [endpoint, methods] of Object.entries(publicApiMethods)) {
+    if (pathname.startsWith(endpoint) && methods.includes(method)) return true;
+  }
+  return false;
+}
+function createCmsMiddleware(config = {}) {
+  const {
+    publicAdminPaths = ["/admin/signin", "/admin/forgot-password", "/admin/reset-password", "/admin/invite"],
+    publicApiMethods = defaultPublicApiMethods,
+    signInPath = "/admin/signin",
+    getSessionToken = defaultGetSessionToken
+  } = config;
+  return function cmsMiddleware(request) {
+    const pathname = request.nextUrl.pathname;
+    const method = request.method;
+    if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + "/"))) {
+      return { type: "next" };
+    }
+    if (pathname.startsWith("/admin")) {
+      const token = getSessionToken(request);
+      if (!token) {
+        return { type: "redirect", url: new URL(signInPath, request.url).toString() };
+      }
+    }
+    if (pathname.startsWith("/api")) {
+      if (isPublicMethod2(pathname, method, publicApiMethods)) {
+        return { type: "next" };
+      }
+      const token = getSessionToken(request);
+      if (!token) {
+        return { type: "json", status: 401, body: { error: "Unauthorized" } };
+      }
+    }
+    return { type: "next" };
+  };
+}
+
+// src/auth/nextauth-options.ts
+import _CredentialsProvider from "next-auth/providers/credentials";
+var CredentialsProvider = _CredentialsProvider.default ?? _CredentialsProvider;
+function getNextAuthOptions(config) {
+  const { getUserByEmail, comparePassword, signInPage = "/admin/signin", secret, extend } = config;
+  const options = {
+    secret: secret ?? process.env.NEXTAUTH_SECRET,
+    providers: [
+      CredentialsProvider({
+        name: "credentials",
+        credentials: {
+          email: { label: "Email", type: "email" },
+          password: { label: "Password", type: "password" }
+        },
+        async authorize(credentials) {
+          if (!credentials?.email || !credentials?.password) return null;
+          try {
+            const user = await getUserByEmail(credentials.email);
+            if (!user || user.blocked || user.deleted || !user.password) return null;
+            const valid = await comparePassword(credentials.password, user.password);
+            if (!valid) return null;
+            return {
+              id: user.id.toString(),
+              email: user.email,
+              name: user.name,
+              groupId: user.groupId ?? void 0,
+              permissions: ["admin"]
+            };
+          } catch {
+            return null;
+          }
+        }
+      })
+    ],
+    session: { strategy: "jwt" },
+    pages: { signIn: signInPage },
+    cookies: process.env.NODE_ENV === "production" ? {
+      sessionToken: {
+        name: "__Secure-next-auth.session-token",
+        options: { httpOnly: true, sameSite: "lax", path: "/", secure: true }
+      }
+    } : {
+      sessionToken: {
+        name: "next-auth.session-token",
+        options: {
+          httpOnly: true,
+          sameSite: "lax",
+          path: "/",
+          secure: process.env.NEXTAUTH_URL?.startsWith("https") ?? false
+        }
+      }
+    },
+    callbacks: {
+      async jwt({ token, user }) {
+        if (user) {
+          token.id = user.id;
+          token.groupId = user.groupId;
+          token.permissions = user.permissions;
+        }
+        return token;
+      },
+      async session({ session, token }) {
+        if (session.user) {
+          session.user.id = token.id;
+          session.user.groupId = token.groupId;
+          session.user.permissions = token.permissions;
+        }
+        return session;
+      }
+    }
+  };
+  return extend ? extend(options) : options;
+}
+export {
+  OPEN_ENDPOINTS,
+  PERMISSION_REQUIRED_ENDPOINTS,
+  createAuthHelpers,
+  createCmsMiddleware,
+  defaultPublicApiMethods,
+  getNextAuthOptions,
+  getRequiredPermission,
+  isOpenEndpoint,
+  isPublicMethod
+};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/helpers.ts","../src/auth/middleware.ts","../src/auth/nextauth-options.ts"],"sourcesContent":["export interface SessionUser {\n  id?: string;\n  email?: string | null;\n  name?: string | null;\n  groupId?: number;\n  permissions?: string[];\n}\n\nexport type GetSession = () => Promise<{ user?: SessionUser } | null>;\n\nexport const OPEN_ENDPOINTS: Array<Record<string, string[]>> = [\n  { '/api/contacts': ['POST'] },\n  { '/api/form-submissions': ['POST'] },\n  { '/api/blogs': ['GET'] },\n];\n\nexport const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]> = {};\n\nexport function isOpenEndpoint(pathname: string): boolean {\n  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));\n}\n\nexport function getRequiredPermission(pathname: string): string[] | null {\n  return null;\n}\n\nexport function isPublicMethod(pathname: string, method: string): boolean {\n  for (const endpoint of OPEN_ENDPOINTS) {\n    const key = Object.keys(endpoint)[0];\n    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;\n  }\n  return false;\n}\n\nexport interface AuthHelpers {\n  requireAuth(req: Request): Promise<Response | null>;\n  requirePermission(req: Request, permission: string): Promise<Response | null>;\n  getAuthenticatedUser(): Promise<SessionUser | null>;\n}\n\nexport function createAuthHelpers(getSession: GetSession, NextResponse: { json: (body: unknown, init?: { status?: number }) => Response }): AuthHelpers {\n  return {\n    async requireAuth() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async requirePermission() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async getAuthenticatedUser() {\n      const session = await getSession();\n      return session?.user ?? null;\n    },\n  };\n}\n","export interface CmsMiddlewareConfig {\n  publicAdminPaths?: string[];\n  publicApiPaths?: string[];\n  /** path -> allowed methods */\n  publicApiMethods?: Record<string, string[]>;\n  signInPath?: string;\n  getSessionToken?: (request: { cookies: { get: (name: string) => { value?: string } | undefined } }) => string | undefined;\n}\n\n/** Default public API paths (no auth). Sites should extend this with their own routes. */\nexport const defaultPublicApiMethods: Record<string, string[]> = {\n  '/api/contacts': ['POST'],\n  '/api/form-submissions': ['POST'],\n  '/api/blogs': ['GET'],\n  '/api/forms': ['GET'],\n  '/api/auth': ['GET', 'POST'],\n  '/api/health': ['GET'],\n  '/api/users/forgot-password': ['POST'],\n  '/api/users/set-password': ['POST'],\n  '/api/users/invite': ['POST'],\n};\n\nfunction defaultGetSessionToken(request: { cookies: { get: (name: string) => { value?: string } | undefined } }): string | undefined {\n  return (\n    request.cookies.get('__Secure-next-auth.session-token')?.value ??\n    request.cookies.get('next-auth.session-token')?.value\n  );\n}\n\nfunction isPublicMethod(pathname: string, method: string, publicApiMethods: Record<string, string[]>): boolean {\n  for (const [endpoint, methods] of Object.entries(publicApiMethods)) {\n    if (pathname.startsWith(endpoint) && methods.includes(method)) return true;\n  }\n  return false;\n}\n\n/**\n * Returns middleware logic. Use from Next.js middleware:\n *   import { createCmsMiddleware } from '@infuro/cms-core';\n *   export const middleware = createCmsMiddleware({ ... });\n *   export const config = { matcher: ['/admin/:path*', '/api/:path*'] };\n */\nexport function createCmsMiddleware(config: CmsMiddlewareConfig = {}) {\n  const {\n    publicAdminPaths = ['/admin/signin', '/admin/forgot-password', '/admin/reset-password', '/admin/invite'],\n    publicApiMethods = defaultPublicApiMethods,\n    signInPath = '/admin/signin',\n    getSessionToken = defaultGetSessionToken,\n  } = config;\n\n  return function cmsMiddleware(request: {\n    nextUrl: { pathname: string };\n    url: string;\n    method: string;\n    cookies: { get: (name: string) => { value?: string } | undefined };\n  }): { type: 'next' } | { type: 'redirect'; url: string } | { type: 'json'; status: number; body: unknown } {\n    const pathname = request.nextUrl.pathname;\n    const method = request.method;\n\n    if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + '/'))) {\n      return { type: 'next' };\n    }\n\n    if (pathname.startsWith('/admin')) {\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'redirect', url: new URL(signInPath, request.url).toString() };\n      }\n    }\n\n    if (pathname.startsWith('/api')) {\n      if (isPublicMethod(pathname, method, publicApiMethods)) {\n        return { type: 'next' };\n      }\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'json', status: 401, body: { error: 'Unauthorized' } };\n      }\n    }\n\n    return { type: 'next' };\n  };\n}\n","/**\n * Build NextAuth options for credentials auth. App can extend/override via extend().\n */\nimport type { NextAuthOptions } from 'next-auth';\nimport _CredentialsProvider from 'next-auth/providers/credentials';\nconst CredentialsProvider = (_CredentialsProvider as unknown as { default: typeof _CredentialsProvider }).default ?? _CredentialsProvider;\n\nexport interface NextAuthUser {\n  id: number;\n  email: string;\n  name: string | null;\n  password: string | null;\n  blocked?: boolean;\n  deleted?: boolean;\n  groupId?: number | null;\n  group?: { permissions?: unknown[] };\n}\n\nexport interface NextAuthOptionsConfig {\n  /** Resolve user by email (e.g. from TypeORM). Return null if not found. */\n  getUserByEmail: (email: string) => Promise<NextAuthUser | null>;\n  comparePassword: (plain: string, hash: string) => Promise<boolean>;\n  signInPage?: string;\n  secret?: string;\n  extend?: (options: NextAuthOptions) => NextAuthOptions;\n}\n\nexport function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions {\n  const { getUserByEmail, comparePassword, signInPage = '/admin/signin', secret, extend } = config;\n\n  const options: NextAuthOptions = {\n    secret: secret ?? process.env.NEXTAUTH_SECRET,\n    providers: [\n      CredentialsProvider({\n        name: 'credentials',\n        credentials: {\n          email: { label: 'Email', type: 'email' },\n          password: { label: 'Password', type: 'password' },\n        },\n        async authorize(credentials) {\n          if (!credentials?.email || !credentials?.password) return null;\n          try {\n            const user = await getUserByEmail(credentials.email);\n            if (!user || user.blocked || (user as { deleted?: boolean }).deleted || !user.password) return null;\n            const valid = await comparePassword(credentials.password, user.password);\n            if (!valid) return null;\n            return {\n              id: user.id.toString(),\n              email: user.email,\n              name: user.name,\n              groupId: user.groupId ?? undefined,\n              permissions: ['admin'],\n            };\n          } catch {\n            return null;\n          }\n        },\n      }),\n    ],\n    session: { strategy: 'jwt' },\n    pages: { signIn: signInPage },\n    cookies:\n      process.env.NODE_ENV === 'production'\n        ? {\n            sessionToken: {\n              name: '__Secure-next-auth.session-token',\n              options: { httpOnly: true, sameSite: 'lax', path: '/', secure: true },\n            },\n          }\n        : {\n            sessionToken: {\n              name: 'next-auth.session-token',\n              options: {\n                httpOnly: true,\n                sameSite: 'lax',\n                path: '/',\n                secure: process.env.NEXTAUTH_URL?.startsWith('https') ?? false,\n              },\n            },\n          },\n    callbacks: {\n      async jwt({ token, user }) {\n        if (user) {\n          (token as Record<string, unknown>).id = user.id;\n          (token as Record<string, unknown>).groupId = (user as { groupId?: number }).groupId;\n          (token as Record<string, unknown>).permissions = (user as { permissions?: string[] }).permissions;\n        }\n        return token;\n      },\n      async session({ session, token }) {\n        if (session.user) {\n          (session.user as Record<string, unknown>).id = (token as Record<string, unknown>).id;\n          (session.user as Record<string, unknown>).groupId = (token as Record<string, unknown>).groupId;\n          (session.user as Record<string, unknown>).permissions = (token as Record<string, unknown>).permissions;\n        }\n        return session;\n      },\n    },\n  };\n\n  return extend ? extend(options) : options;\n}\n"],"mappings":";AAUO,IAAM,iBAAkD;AAAA,EAC7D,EAAE,iBAAiB,CAAC,MAAM,EAAE;AAAA,EAC5B,EAAE,yBAAyB,CAAC,MAAM,EAAE;AAAA,EACpC,EAAE,cAAc,CAAC,KAAK,EAAE;AAC1B;AAEO,IAAM,gCAA0D,CAAC;AAEjE,SAAS,eAAe,UAA2B;AACxD,SAAO,eAAe,KAAK,CAAC,aAAa,SAAS,WAAW,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;AACxF;AAEO,SAAS,sBAAsB,UAAmC;AACvE,SAAO;AACT;AAEO,SAAS,eAAe,UAAkB,QAAyB;AACxE,aAAW,YAAY,gBAAgB;AACrC,UAAM,MAAM,OAAO,KAAK,QAAQ,EAAE,CAAC;AACnC,QAAI,SAAS,WAAW,GAAG,KAAK,SAAS,GAAG,EAAE,SAAS,MAAM,EAAG,QAAO;AAAA,EACzE;AACA,SAAO;AACT;AAQO,SAAS,kBAAkB,YAAwB,cAA8F;AACtJ,SAAO;AAAA,IACL,MAAM,cAAc;AAClB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,oBAAoB;AACxB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,uBAAuB;AAC3B,YAAM,UAAU,MAAM,WAAW;AACjC,aAAO,SAAS,QAAQ;AAAA,IAC1B;AAAA,EACF;AACF;;;ACnDO,IAAM,0BAAoD;AAAA,EAC/D,iBAAiB,CAAC,MAAM;AAAA,EACxB,yBAAyB,CAAC,MAAM;AAAA,EAChC,cAAc,CAAC,KAAK;AAAA,EACpB,cAAc,CAAC,KAAK;AAAA,EACpB,aAAa,CAAC,OAAO,MAAM;AAAA,EAC3B,eAAe,CAAC,KAAK;AAAA,EACrB,8BAA8B,CAAC,MAAM;AAAA,EACrC,2BAA2B,CAAC,MAAM;AAAA,EAClC,qBAAqB,CAAC,MAAM;AAC9B;AAEA,SAAS,uBAAuB,SAAqG;AACnI,SACE,QAAQ,QAAQ,IAAI,kCAAkC,GAAG,SACzD,QAAQ,QAAQ,IAAI,yBAAyB,GAAG;AAEpD;AAEA,SAASA,gBAAe,UAAkB,QAAgB,kBAAqD;AAC7G,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,gBAAgB,GAAG;AAClE,QAAI,SAAS,WAAW,QAAQ,KAAK,QAAQ,SAAS,MAAM,EAAG,QAAO;AAAA,EACxE;AACA,SAAO;AACT;AAQO,SAAS,oBAAoB,SAA8B,CAAC,GAAG;AACpE,QAAM;AAAA,IACJ,mBAAmB,CAAC,iBAAiB,0BAA0B,yBAAyB,eAAe;AAAA,IACvG,mBAAmB;AAAA,IACnB,aAAa;AAAA,IACb,kBAAkB;AAAA,EACpB,IAAI;AAEJ,SAAO,SAAS,cAAc,SAK6E;AACzG,UAAM,WAAW,QAAQ,QAAQ;AACjC,UAAM,SAAS,QAAQ;AAEvB,QAAI,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,SAAS,WAAW,IAAI,GAAG,CAAC,GAAG;AAChF,aAAO,EAAE,MAAM,OAAO;AAAA,IACxB;AAEA,QAAI,SAAS,WAAW,QAAQ,GAAG;AACjC,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,YAAY,KAAK,IAAI,IAAI,YAAY,QAAQ,GAAG,EAAE,SAAS,EAAE;AAAA,MAC9E;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,MAAM,GAAG;AAC/B,UAAIA,gBAAe,UAAU,QAAQ,gBAAgB,GAAG;AACtD,eAAO,EAAE,MAAM,OAAO;AAAA,MACxB;AACA,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,EAAE;AAAA,MACtE;AAAA,IACF;AAEA,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AACF;;;AC9EA,OAAO,0BAA0B;AACjC,IAAM,sBAAuB,qBAA6E,WAAW;AAsB9G,SAAS,mBAAmB,QAAgD;AACjF,QAAM,EAAE,gBAAgB,iBAAiB,aAAa,iBAAiB,QAAQ,OAAO,IAAI;AAE1F,QAAM,UAA2B;AAAA,IAC/B,QAAQ,UAAU,QAAQ,IAAI;AAAA,IAC9B,WAAW;AAAA,MACT,oBAAoB;AAAA,QAClB,MAAM;AAAA,QACN,aAAa;AAAA,UACX,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ;AAAA,UACvC,UAAU,EAAE,OAAO,YAAY,MAAM,WAAW;AAAA,QAClD;AAAA,QACA,MAAM,UAAU,aAAa;AAC3B,cAAI,CAAC,aAAa,SAAS,CAAC,aAAa,SAAU,QAAO;AAC1D,cAAI;AACF,kBAAM,OAAO,MAAM,eAAe,YAAY,KAAK;AACnD,gBAAI,CAAC,QAAQ,KAAK,WAAY,KAA+B,WAAW,CAAC,KAAK,SAAU,QAAO;AAC/F,kBAAM,QAAQ,MAAM,gBAAgB,YAAY,UAAU,KAAK,QAAQ;AACvE,gBAAI,CAAC,MAAO,QAAO;AACnB,mBAAO;AAAA,cACL,IAAI,KAAK,GAAG,SAAS;AAAA,cACrB,OAAO,KAAK;AAAA,cACZ,MAAM,KAAK;AAAA,cACX,SAAS,KAAK,WAAW;AAAA,cACzB,aAAa,CAAC,OAAO;AAAA,YACvB;AAAA,UACF,QAAQ;AACN,mBAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,SAAS,EAAE,UAAU,MAAM;AAAA,IAC3B,OAAO,EAAE,QAAQ,WAAW;AAAA,IAC5B,SACE,QAAQ,IAAI,aAAa,eACrB;AAAA,MACE,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,SAAS,EAAE,UAAU,MAAM,UAAU,OAAO,MAAM,KAAK,QAAQ,KAAK;AAAA,MACtE;AAAA,IACF,IACA;AAAA,MACE,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA,UACV,MAAM;AAAA,UACN,QAAQ,QAAQ,IAAI,cAAc,WAAW,OAAO,KAAK;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACN,WAAW;AAAA,MACT,MAAM,IAAI,EAAE,OAAO,KAAK,GAAG;AACzB,YAAI,MAAM;AACR,UAAC,MAAkC,KAAK,KAAK;AAC7C,UAAC,MAAkC,UAAW,KAA8B;AAC5E,UAAC,MAAkC,cAAe,KAAoC;AAAA,QACxF;AACA,eAAO;AAAA,MACT;AAAA,MACA,MAAM,QAAQ,EAAE,SAAS,MAAM,GAAG;AAChC,YAAI,QAAQ,MAAM;AAChB,UAAC,QAAQ,KAAiC,KAAM,MAAkC;AAClF,UAAC,QAAQ,KAAiC,UAAW,MAAkC;AACvF,UAAC,QAAQ,KAAiC,cAAe,MAAkC;AAAA,QAC7F;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,SAAS,OAAO,OAAO,IAAI;AACpC;","names":["isPublicMethod"]}

package/dist/config-DJ5CmQvS.d.cts

@@ -0,0 +1,8 @@
+interface AdminNavItem {
+    href: string;
+    label: string;
+    icon?: string;
+}
+declare const DEFAULT_ADMIN_NAV: AdminNavItem[];
+
+export { type AdminNavItem as A, DEFAULT_ADMIN_NAV as D };

package/dist/config-DJ5CmQvS.d.ts

@@ -0,0 +1,8 @@
+interface AdminNavItem {
+    href: string;
+    label: string;
+    icon?: string;
+}
+declare const DEFAULT_ADMIN_NAV: AdminNavItem[];
+
+export { type AdminNavItem as A, DEFAULT_ADMIN_NAV as D };

package/dist/hooks.cjs

@@ -0,0 +1,94 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/hooks/index.ts
+var hooks_exports = {};
+__export(hooks_exports, {
+  PluginProvider: () => PluginProvider,
+  useAnalytics: () => useAnalytics,
+  useIsMobile: () => useIsMobile,
+  usePlugin: () => usePlugin
+});
+module.exports = __toCommonJS(hooks_exports);
+
+// src/hooks/use-mobile.ts
+var import_react = require("react");
+var MOBILE_BREAKPOINT = 768;
+function useIsMobile() {
+  const [isMobile, setIsMobile] = (0, import_react.useState)(void 0);
+  (0, import_react.useEffect)(() => {
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);
+    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    mql.addEventListener("change", onChange);
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    return () => mql.removeEventListener("change", onChange);
+  }, []);
+  return !!isMobile;
+}
+
+// src/hooks/use-analytics.ts
+var import_react2 = require("react");
+function useAnalytics(pathname) {
+  const isAdminRoute = pathname != null && pathname.startsWith("/admin");
+  (0, import_react2.useEffect)(() => {
+    if (isAdminRoute && typeof window !== "undefined") {
+      if (typeof window.gtag === "function") {
+        window.gtag = () => {
+        };
+      }
+      if (Array.isArray(window.dataLayer)) {
+        window.dataLayer = [];
+      }
+    }
+  }, [isAdminRoute]);
+  return { isAdminRoute, shouldTrack: !isAdminRoute };
+}
+
+// src/hooks/use-plugin.ts
+var import_react3 = __toESM(require("react"), 1);
+var PluginContext = (0, import_react3.createContext)(null);
+function PluginProvider({
+  getPlugin,
+  children
+}) {
+  return import_react3.default.createElement(PluginContext.Provider, { value: { getPlugin } }, children);
+}
+function usePlugin(name) {
+  const ctx = (0, import_react3.useContext)(PluginContext);
+  if (!ctx) return void 0;
+  return ctx.getPlugin(name);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PluginProvider,
+  useAnalytics,
+  useIsMobile,
+  usePlugin
+});
+//# sourceMappingURL=hooks.cjs.map

package/dist/hooks.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/index.ts","../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts"],"sourcesContent":["export { useIsMobile } from './use-mobile';\nexport { useAnalytics } from './use-analytics';\nexport { usePlugin, PluginProvider } from './use-plugin';\n","import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAoC;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,QAAI,uBAA8B,MAAS;AAEvE,8BAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,IAAAA,gBAA0B;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,+BAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,IAAAC,gBAAiE;AAEjE,IAAM,oBAAgB,6BAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,cAAAC,QAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,UAAM,0BAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;","names":["import_react","import_react","React"]}

package/dist/hooks.d.cts

@@ -0,0 +1,22 @@
+import React, { ReactNode } from 'react';
+
+declare function useIsMobile(): boolean;
+
+/**
+ * Call from app with pathname from usePathname() (next/navigation).
+ * Disables tracking on admin routes when pathname starts with /admin.
+ */
+declare function useAnalytics(pathname: string | null): {
+    isAdminRoute: boolean;
+    shouldTrack: boolean;
+};
+
+declare function PluginProvider({ getPlugin, children, }: {
+    getPlugin: <T>(name: string) => T | undefined;
+    children: ReactNode;
+}): React.FunctionComponentElement<React.ProviderProps<{
+    getPlugin: <T>(name: string) => T | undefined;
+} | null>>;
+declare function usePlugin<T = unknown>(name: string): T | undefined;
+
+export { PluginProvider, useAnalytics, useIsMobile, usePlugin };

package/dist/hooks.d.ts

@@ -0,0 +1,22 @@
+import React, { ReactNode } from 'react';
+
+declare function useIsMobile(): boolean;
+
+/**
+ * Call from app with pathname from usePathname() (next/navigation).
+ * Disables tracking on admin routes when pathname starts with /admin.
+ */
+declare function useAnalytics(pathname: string | null): {
+    isAdminRoute: boolean;
+    shouldTrack: boolean;
+};
+
+declare function PluginProvider({ getPlugin, children, }: {
+    getPlugin: <T>(name: string) => T | undefined;
+    children: ReactNode;
+}): React.FunctionComponentElement<React.ProviderProps<{
+    getPlugin: <T>(name: string) => T | undefined;
+} | null>>;
+declare function usePlugin<T = unknown>(name: string): T | undefined;
+
+export { PluginProvider, useAnalytics, useIsMobile, usePlugin };

package/dist/hooks.js

@@ -0,0 +1,54 @@
+// src/hooks/use-mobile.ts
+import { useState, useEffect } from "react";
+var MOBILE_BREAKPOINT = 768;
+function useIsMobile() {
+  const [isMobile, setIsMobile] = useState(void 0);
+  useEffect(() => {
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);
+    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    mql.addEventListener("change", onChange);
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    return () => mql.removeEventListener("change", onChange);
+  }, []);
+  return !!isMobile;
+}
+
+// src/hooks/use-analytics.ts
+import { useEffect as useEffect2 } from "react";
+function useAnalytics(pathname) {
+  const isAdminRoute = pathname != null && pathname.startsWith("/admin");
+  useEffect2(() => {
+    if (isAdminRoute && typeof window !== "undefined") {
+      if (typeof window.gtag === "function") {
+        window.gtag = () => {
+        };
+      }
+      if (Array.isArray(window.dataLayer)) {
+        window.dataLayer = [];
+      }
+    }
+  }, [isAdminRoute]);
+  return { isAdminRoute, shouldTrack: !isAdminRoute };
+}
+
+// src/hooks/use-plugin.ts
+import React, { createContext, useContext } from "react";
+var PluginContext = createContext(null);
+function PluginProvider({
+  getPlugin,
+  children
+}) {
+  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);
+}
+function usePlugin(name) {
+  const ctx = useContext(PluginContext);
+  if (!ctx) return void 0;
+  return ctx.getPlugin(name);
+}
+export {
+  PluginProvider,
+  useAnalytics,
+  useIsMobile,
+  usePlugin
+};
+//# sourceMappingURL=hooks.js.map

package/dist/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts"],"sourcesContent":["import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n"],"mappings":";AAAA,SAAS,UAAU,iBAAiB;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,MAAS;AAEvE,YAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,SAAS,aAAAA,kBAAiB;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,EAAAA,WAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,OAAO,SAAS,eAAe,kBAAkC;AAEjE,IAAM,gBAAgB,cAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,MAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,MAAM,WAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;","names":["useEffect"]}