@insforge/nextjs 0.6.8 → 0.7.0

package/dist/api.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/route-handlers.ts","../src/api/profile-handler.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\nimport { createClient } from '@insforge/sdk';\r\n\r\nexport interface AuthRouteConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Cookie max age in seconds (default: 7 days)\r\n   * @default 604800\r\n   */\r\n  cookieMaxAge?: number;\r\n\r\n  /**\r\n   * Whether to use secure cookies (HTTPS only)\r\n   * Auto-detected based on environment\r\n   */\r\n  secure?: boolean;\r\n}\r\n\r\n/**\r\n * Creates authentication route handlers for Next.js App Router\r\n * These handlers set HTTP-only cookies that can be read by middleware\r\n *\r\n * @example\r\n * ```ts\r\n * // app/api/auth/[...auth]/route.ts\r\n * import { createAuthRouteHandlers } from '@insforge/nextjs/api';\r\n *\r\n * const handlers = createAuthRouteHandlers({\r\n *   baseUrl: process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!,\r\n * });\r\n *\r\n * export const POST = handlers.POST;\r\n * export const GET = handlers.GET;\r\n * export const DELETE = handlers.DELETE;\r\n * ```\r\n */\r\nexport function createAuthRouteHandlers(config: AuthRouteConfig) {\r\n  const {\r\n    baseUrl,\r\n    cookieName = 'insforge_token',\r\n    cookieMaxAge = 7 * 24 * 60 * 60, // 7 days\r\n  } = config;\r\n\r\n  const insforge = createClient({ baseUrl });\r\n\r\n  /**\r\n   * Helper to set auth cookie\r\n   */\r\n  function setAuthCookie(response: NextResponse, token: string) {\r\n    // NODE_ENV is automatically set by Next.js runtime ('development' | 'production' | 'test')\r\n    // In production, cookies are sent over HTTPS only (secure flag)\r\n    const isProduction = process.env.NODE_ENV === 'production';\r\n    const secure = config.secure ?? isProduction;\r\n\r\n    response.cookies.set({\r\n      name: cookieName,\r\n      value: token,\r\n      httpOnly: true, // Cannot be accessed by JavaScript\r\n      secure, // Only sent over HTTPS in production\r\n      sameSite: 'lax',\r\n      maxAge: cookieMaxAge,\r\n      path: '/',\r\n    });\r\n\r\n    return response;\r\n  }\r\n\r\n  /**\r\n   * Helper to clear auth cookie\r\n   */\r\n  function clearAuthCookie(response: NextResponse) {\r\n    response.cookies.set({\r\n      name: cookieName,\r\n      value: '',\r\n      httpOnly: true,\r\n      secure: config.secure ?? (process.env.NODE_ENV === 'production'),\r\n      sameSite: 'lax',\r\n      maxAge: 0,\r\n      path: '/',\r\n    });\r\n\r\n    return response;\r\n  }\r\n\r\n  /**\r\n   * POST handler for authentication actions\r\n   * Supports: sign-in, sign-up\r\n   */\r\n  async function POST(request: NextRequest) {\r\n    try {\r\n      const body = await request.json();\r\n      const { action, email, password } = body;\r\n\r\n      if (!action) {\r\n        return NextResponse.json(\r\n          { error: 'Action is required' },\r\n          { status: 400 }\r\n        );\r\n      }\r\n\r\n      switch (action) {\r\n        case 'sign-in': {\r\n          if (!email || !password) {\r\n            return NextResponse.json(\r\n              { error: 'Email and password are required' },\r\n              { status: 400 }\r\n            );\r\n          }\r\n\r\n          const result = await insforge.auth.signInWithPassword({\r\n            email,\r\n            password,\r\n          });\r\n\r\n          if (result.error) {\r\n            return NextResponse.json(\r\n              { error: result.error.message },\r\n              { status: 401 }\r\n            );\r\n          }\r\n\r\n          if (!result.data) {\r\n            return NextResponse.json(\r\n              { error: 'Authentication failed' },\r\n              { status: 401 }\r\n            );\r\n          }\r\n\r\n          const response = NextResponse.json({\r\n            user: result.data.user,\r\n            session: {\r\n              userId: result.data.user.id,\r\n              expiresAt: '',\r\n              createdAt: new Date().toISOString(),\r\n            },\r\n          });\r\n\r\n          setAuthCookie(response, result.data.accessToken);\r\n\r\n          return response;\r\n        }\r\n\r\n        case 'sign-up': {\r\n          if (!email || !password) {\r\n            return NextResponse.json(\r\n              { error: 'Email and password are required' },\r\n              { status: 400 }\r\n            );\r\n          }\r\n\r\n          const result = await insforge.auth.signUp({ email, password });\r\n\r\n          if (result.error) {\r\n            return NextResponse.json(\r\n              { error: result.error.message },\r\n              { status: 400 }\r\n            );\r\n          }\r\n\r\n          if (!result.data) {\r\n            return NextResponse.json(\r\n              { error: 'Sign up failed' },\r\n              { status: 400 }\r\n            );\r\n          }\r\n\r\n          const response = NextResponse.json({\r\n            user: result.data.user,\r\n            session: {\r\n              userId: result.data.user.id,\r\n              expiresAt: '',\r\n              createdAt: new Date().toISOString(),\r\n            },\r\n          });\r\n\r\n          setAuthCookie(response, result.data.accessToken);\r\n\r\n          return response;\r\n        }\r\n\r\n        case 'sync-token': {\r\n          // Syncs a token from localStorage to HTTP-only cookie\r\n          const { token } = body;\r\n\r\n          if (!token) {\r\n            return NextResponse.json(\r\n              { error: 'Token is required' },\r\n              { status: 400 }\r\n            );\r\n          }\r\n\r\n          // Verify the token is valid by checking with backend\r\n          try {\r\n            const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\r\n              headers: {\r\n                Authorization: `Bearer ${token}`,\r\n                'Content-Type': 'application/json',\r\n              },\r\n            });\r\n\r\n            if (!response.ok) {\r\n              const errorText = await response.text();\r\n              console.error('[Auth API] Token validation failed:', errorText);\r\n              return NextResponse.json(\r\n                { error: 'Invalid token', details: errorText },\r\n                { status: 401 }\r\n              );\r\n            }\r\n\r\n            const session = await response.json();\r\n\r\n            const nextResponse = NextResponse.json({\r\n              user: session.user,\r\n              session: {\r\n                userId: session.user.id,\r\n                expiresAt: '',\r\n                createdAt: new Date().toISOString(),\r\n              },\r\n            });\r\n\r\n            setAuthCookie(nextResponse, token);\r\n\r\n            return nextResponse;\r\n          } catch (error) {\r\n            console.error('[Auth API] Token validation error:', error);\r\n            return NextResponse.json(\r\n              { error: 'Token validation failed', details: String(error) },\r\n              { status: 401 }\r\n            );\r\n          }\r\n        }\r\n\r\n        default:\r\n          return NextResponse.json(\r\n            { error: 'Invalid action' },\r\n            { status: 400 }\r\n          );\r\n      }\r\n    } catch (error) {\r\n      console.error('[Auth API Error]:', error);\r\n      return NextResponse.json(\r\n        { error: 'Internal server error' },\r\n        { status: 500 }\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * GET handler to check current session\r\n   */\r\n  async function GET(request: NextRequest) {\r\n    try {\r\n      const token = request.cookies.get(cookieName)?.value;\r\n\r\n      if (!token) {\r\n        return NextResponse.json({ user: null, session: null });\r\n      }\r\n\r\n      // Verify token with backend\r\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\r\n        headers: {\r\n          Authorization: `Bearer ${token}`,\r\n          'Content-Type': 'application/json',\r\n        },\r\n      });\r\n\r\n      if (!response.ok) {\r\n        const nextResponse = NextResponse.json({ user: null, session: null });\r\n        clearAuthCookie(nextResponse);\r\n        return nextResponse;\r\n      }\r\n\r\n      const session = await response.json();\r\n\r\n      return NextResponse.json({\r\n        user: session.user,\r\n        session: {\r\n          userId: session.user.id,\r\n          token,\r\n          expiresAt: '',\r\n          createdAt: new Date().toISOString(),\r\n        },\r\n      });\r\n    } catch (error) {\r\n      console.error('[Auth API Error]:', error);\r\n      return NextResponse.json({ user: null, session: null });\r\n    }\r\n  }\r\n\r\n  /**\r\n   * DELETE handler for sign out\r\n   */\r\n  async function DELETE(request: NextRequest) {\r\n    try {\r\n      const token = request.cookies.get(cookieName)?.value;\r\n\r\n      if (token) {\r\n        // Call backend sign out\r\n        try {\r\n          await fetch(`${baseUrl}/auth/sessions/current`, {\r\n            method: 'DELETE',\r\n            headers: {\r\n              Authorization: `Bearer ${token}`,\r\n              'Content-Type': 'application/json',\r\n            },\r\n          });\r\n        } catch (error) {\r\n          // Ignore backend errors during sign out\r\n          console.error('[Auth API] Sign out error:', error);\r\n        }\r\n      }\r\n\r\n      const response = NextResponse.json({ success: true });\r\n      clearAuthCookie(response);\r\n\r\n      return response;\r\n    } catch (error) {\r\n      console.error('[Auth API Error]:', error);\r\n      return NextResponse.json(\r\n        { error: 'Internal server error' },\r\n        { status: 500 }\r\n      );\r\n    }\r\n  }\r\n\r\n  return {\r\n    POST,\r\n    GET,\r\n    DELETE,\r\n  };\r\n}\r\n","import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface ProfileHandlerConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   */\r\n  baseUrl: string;\r\n}\r\n\r\n/**\r\n * Creates a profile fetcher API route that acts as a proxy to your Insforge backend\r\n * \r\n * This handler accepts a token and fetches the user profile from the backend,\r\n * acting as a secure server-side proxy to avoid exposing backend URLs to clients.\r\n * \r\n * @param config - Configuration for the profile handler\r\n * @returns Next.js API route handler (POST method)\r\n * \r\n * @example\r\n * ```ts\r\n * // app/api/auth/profile/route.ts\r\n * import { createProfileHandler } from '@insforge/nextjs/api';\r\n * \r\n * export const POST = createProfileHandler({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n * });\r\n * ```\r\n * \r\n * @example\r\n * ```tsx\r\n * // Usage in callback page (client-side)\r\n * const response = await fetch('/api/auth/profile', {\r\n *   method: 'POST',\r\n *   headers: { 'Content-Type': 'application/json' },\r\n *   body: JSON.stringify({ token: accessToken }),\r\n * });\r\n * \r\n * const result = await response.json();\r\n * if (result.success) {\r\n *   // Store user profile\r\n *   localStorage.setItem('insforge-user-profile', JSON.stringify(result.user));\r\n * }\r\n * ```\r\n */\r\nexport function createProfileHandler(config: ProfileHandlerConfig) {\r\n  const { baseUrl } = config;\r\n\r\n  return async function POST(request: NextRequest) {\r\n    try {\r\n      const body = await request.json();\r\n      const { token } = body;\r\n\r\n      if (!token) {\r\n        return NextResponse.json(\r\n          { success: false, error: 'Token is required' },\r\n          { status: 400 }\r\n        );\r\n      }\r\n\r\n      console.log('[Profile Handler] Fetching user profile from backend');\r\n\r\n      // Call Insforge backend to get user profile (proxy)\r\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\r\n        headers: {\r\n          Authorization: `Bearer ${token}`,\r\n          'Content-Type': 'application/json',\r\n        },\r\n      });\r\n\r\n      if (!response.ok) {\r\n        const errorText = await response.text();\r\n        console.error('[Profile Handler] Backend error:', {\r\n          status: response.status,\r\n          error: errorText,\r\n        });\r\n        \r\n        return NextResponse.json(\r\n          { \r\n            success: false, \r\n            error: `Failed to fetch profile: ${response.status} ${response.statusText}` \r\n          },\r\n          { status: response.status }\r\n        );\r\n      }\r\n\r\n      const userData = await response.json();\r\n      console.log('[Profile Handler] User profile fetched successfully');\r\n\r\n      return NextResponse.json({\r\n        success: true,\r\n        user: userData,\r\n      });\r\n    } catch (error) {\r\n      console.error('[Profile Handler] Error:', error);\r\n      return NextResponse.json(\r\n        { \r\n          success: false, \r\n          error: error instanceof Error ? error.message : 'Internal server error' \r\n        },\r\n        { status: 500 }\r\n      );\r\n    }\r\n  };\r\n}\r\n\r\n"],"mappings":";AAAA,SAAsB,oBAAoB;AAC1C,SAAS,oBAAoB;AA6CtB,SAAS,wBAAwB,QAAyB;AAC/D,QAAM;AAAA,IACJ;AAAA,IACA,aAAa;AAAA,IACb,eAAe,IAAI,KAAK,KAAK;AAAA;AAAA,EAC/B,IAAI;AAEJ,QAAM,WAAW,aAAa,EAAE,QAAQ,CAAC;AAKzC,WAAS,cAAc,UAAwB,OAAe;AAG5D,UAAM,eAAe,QAAQ,IAAI,aAAa;AAC9C,UAAM,SAAS,OAAO,UAAU;AAEhC,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA;AAAA,MACV;AAAA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAKA,WAAS,gBAAgB,UAAwB;AAC/C,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ,OAAO,UAAW,QAAQ,IAAI,aAAa;AAAA,MACnD,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAMA,iBAAe,KAAK,SAAsB;AACxC,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,EAAE,QAAQ,OAAO,SAAS,IAAI;AAEpC,UAAI,CAAC,QAAQ;AACX,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,qBAAqB;AAAA,UAC9B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,cAAQ,QAAQ;AAAA,QACd,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,mBAAmB;AAAA,YACpD;AAAA,YACA;AAAA,UACF,CAAC;AAED,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,wBAAwB;AAAA,cACjC,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAED,wBAAc,UAAU,OAAO,KAAK,WAAW;AAE/C,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,OAAO,EAAE,OAAO,SAAS,CAAC;AAE7D,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,iBAAiB;AAAA,cAC1B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAED,wBAAc,UAAU,OAAO,KAAK,WAAW;AAE/C,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,cAAc;AAEjB,gBAAM,EAAE,MAAM,IAAI;AAElB,cAAI,CAAC,OAAO;AACV,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,oBAAoB;AAAA,cAC7B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAGA,cAAI;AACF,kBAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,cACnE,SAAS;AAAA,gBACP,eAAe,UAAU,KAAK;AAAA,gBAC9B,gBAAgB;AAAA,cAClB;AAAA,YACF,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,YAAY,MAAM,SAAS,KAAK;AACtC,sBAAQ,MAAM,uCAAuC,SAAS;AAC9D,qBAAO,aAAa;AAAA,gBAClB,EAAE,OAAO,iBAAiB,SAAS,UAAU;AAAA,gBAC7C,EAAE,QAAQ,IAAI;AAAA,cAChB;AAAA,YACF;AAEA,kBAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,kBAAM,eAAe,aAAa,KAAK;AAAA,cACrC,MAAM,QAAQ;AAAA,cACd,SAAS;AAAA,gBACP,QAAQ,QAAQ,KAAK;AAAA,gBACrB,WAAW;AAAA,gBACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,cACpC;AAAA,YACF,CAAC;AAED,0BAAc,cAAc,KAAK;AAEjC,mBAAO;AAAA,UACT,SAAS,OAAO;AACd,oBAAQ,MAAM,sCAAsC,KAAK;AACzD,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,2BAA2B,SAAS,OAAO,KAAK,EAAE;AAAA,cAC3D,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAAA,QACF;AAAA,QAEA;AACE,iBAAO,aAAa;AAAA,YAClB,EAAE,OAAO,iBAAiB;AAAA,YAC1B,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,MACJ;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,iBAAe,IAAI,SAAsB;AACvC,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,CAAC,OAAO;AACV,eAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,MACxD;AAGA,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,eAAe,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AACpE,wBAAgB,YAAY;AAC5B,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,UACP,QAAQ,QAAQ,KAAK;AAAA,UACrB;AAAA,UACA,WAAW;AAAA,UACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,IACxD;AAAA,EACF;AAKA,iBAAe,OAAO,SAAsB;AAC1C,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,OAAO;AAET,YAAI;AACF,gBAAM,MAAM,GAAG,OAAO,0BAA0B;AAAA,YAC9C,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,eAAe,UAAU,KAAK;AAAA,cAC9B,gBAAgB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,OAAO;AAEd,kBAAQ,MAAM,8BAA8B,KAAK;AAAA,QACnD;AAAA,MACF;AAEA,YAAM,WAAW,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AACpD,sBAAgB,QAAQ;AAExB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ACpVA,SAAsB,gBAAAA,qBAAoB;AA4CnC,SAAS,qBAAqB,QAA8B;AACjE,QAAM,EAAE,QAAQ,IAAI;AAEpB,SAAO,eAAe,KAAK,SAAsB;AAC/C,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,EAAE,MAAM,IAAI;AAElB,UAAI,CAAC,OAAO;AACV,eAAOA,cAAa;AAAA,UAClB,EAAE,SAAS,OAAO,OAAO,oBAAoB;AAAA,UAC7C,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,cAAQ,IAAI,sDAAsD;AAGlE,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAK;AACtC,gBAAQ,MAAM,oCAAoC;AAAA,UAChD,QAAQ,SAAS;AAAA,UACjB,OAAO;AAAA,QACT,CAAC;AAED,eAAOA,cAAa;AAAA,UAClB;AAAA,YACE,SAAS;AAAA,YACT,OAAO,4BAA4B,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,UAC3E;AAAA,UACA,EAAE,QAAQ,SAAS,OAAO;AAAA,QAC5B;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,SAAS,KAAK;AACrC,cAAQ,IAAI,qDAAqD;AAEjE,aAAOA,cAAa,KAAK;AAAA,QACvB,SAAS;AAAA,QACT,MAAM;AAAA,MACR,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,4BAA4B,KAAK;AAC/C,aAAOA,cAAa;AAAA,QAClB;AAAA,UACE,SAAS;AAAA,UACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;","names":["NextResponse"]}
+{"version":3,"sources":["../src/api/route-handlers.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\nimport { createClient } from '@insforge/sdk';\n\nexport interface AuthRouteConfig {\n  /**\n   * Base URL of your Insforge backend\n   */\n  baseUrl: string;\n\n  /**\n   * Cookie name for the auth token\n   * @default 'insforge_token'\n   */\n  cookieName?: string;\n\n  /**\n   * Cookie max age in seconds (default: 7 days)\n   * @default 604800\n   */\n  cookieMaxAge?: number;\n\n  /**\n   * Whether to use secure cookies (HTTPS only)\n   * Auto-detected based on environment\n   */\n  secure?: boolean;\n}\n\n/**\n * Creates authentication route handlers for Next.js App Router\n * These handlers set HTTP-only cookies that can be read by middleware\n *\n * @example\n * ```ts\n * // app/api/auth/[...auth]/route.ts\n * import { createAuthRouteHandlers } from '@insforge/nextjs/api';\n *\n * const handlers = createAuthRouteHandlers({\n *   baseUrl: process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!,\n * });\n *\n * export const POST = handlers.POST;\n * export const GET = handlers.GET;\n * export const DELETE = handlers.DELETE;\n * ```\n */\nexport function createAuthRouteHandlers(config: AuthRouteConfig) {\n  const {\n    baseUrl,\n    cookieName = 'insforge_token',\n    cookieMaxAge = 7 * 24 * 60 * 60, // 7 days\n  } = config;\n\n  const insforge = createClient({ baseUrl });\n\n  /**\n   * Helper to set auth cookie\n   */\n  function setAuthCookie(response: NextResponse, token: string) {\n    // NODE_ENV is automatically set by Next.js runtime ('development' | 'production' | 'test')\n    // In production, cookies are sent over HTTPS only (secure flag)\n    const isProduction = process.env.NODE_ENV === 'production';\n    const secure = config.secure ?? isProduction;\n\n    response.cookies.set({\n      name: cookieName,\n      value: token,\n      httpOnly: true, // Cannot be accessed by JavaScript\n      secure, // Only sent over HTTPS in production\n      sameSite: 'lax',\n      maxAge: cookieMaxAge,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * Helper to clear auth cookie\n   */\n  function clearAuthCookie(response: NextResponse) {\n    response.cookies.set({\n      name: cookieName,\n      value: '',\n      httpOnly: true,\n      secure: config.secure ?? (process.env.NODE_ENV === 'production'),\n      sameSite: 'lax',\n      maxAge: 0,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * POST handler for authentication actions\n   * Supports: sign-in, sign-up\n   */\n  async function POST(request: NextRequest) {\n    try {\n      const body = await request.json();\n      const { action, email, password } = body;\n\n      if (!action) {\n        return NextResponse.json(\n          { error: 'Action is required' },\n          { status: 400 }\n        );\n      }\n\n      switch (action) {\n        case 'sign-in': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signInWithPassword({\n            email,\n            password,\n          });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 401 }\n            );\n          }\n\n          if (!result.data) {\n            return NextResponse.json(\n              { error: 'Authentication failed' },\n              { status: 401 }\n            );\n          }\n\n          const response = NextResponse.json({\n            user: result.data.user,\n            session: {\n              userId: result.data.user.id,\n              expiresAt: '',\n              createdAt: new Date().toISOString(),\n            },\n          });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sign-up': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signUp({ email, password });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 400 }\n            );\n          }\n\n          if (!result.data) {\n            return NextResponse.json(\n              { error: 'Sign up failed' },\n              { status: 400 }\n            );\n          }\n\n          const response = NextResponse.json({\n            user: result.data.user,\n            session: {\n              userId: result.data.user.id,\n              expiresAt: '',\n              createdAt: new Date().toISOString(),\n            },\n          });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sync-token': {\n          // Syncs a token from localStorage to HTTP-only cookie\n          const { token } = body;\n\n          if (!token) {\n            return NextResponse.json(\n              { error: 'Token is required' },\n              { status: 400 }\n            );\n          }\n\n          // Verify the token is valid by checking with backend\n          try {\n            const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n              headers: {\n                Authorization: `Bearer ${token}`,\n                'Content-Type': 'application/json',\n              },\n            });\n\n            if (!response.ok) {\n              const errorText = await response.text();\n              console.error('[Auth API] Token validation failed:', errorText);\n              return NextResponse.json(\n                { error: 'Invalid token', details: errorText },\n                { status: 401 }\n              );\n            }\n\n            const session = await response.json();\n\n            const nextResponse = NextResponse.json({\n              user: session.user,\n              session: {\n                userId: session.user.id,\n                expiresAt: '',\n                createdAt: new Date().toISOString(),\n              },\n            });\n\n            setAuthCookie(nextResponse, token);\n\n            return nextResponse;\n          } catch (error) {\n            console.error('[Auth API] Token validation error:', error);\n            return NextResponse.json(\n              { error: 'Token validation failed', details: String(error) },\n              { status: 401 }\n            );\n          }\n        }\n\n        default:\n          return NextResponse.json(\n            { error: 'Invalid action' },\n            { status: 400 }\n          );\n      }\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  /**\n   * GET handler to check current session\n   */\n  async function GET(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (!token) {\n        return NextResponse.json({ user: null, session: null });\n      }\n\n      // Verify token with backend\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n        headers: {\n          Authorization: `Bearer ${token}`,\n          'Content-Type': 'application/json',\n        },\n      });\n\n      if (!response.ok) {\n        const nextResponse = NextResponse.json({ user: null, session: null });\n        clearAuthCookie(nextResponse);\n        return nextResponse;\n      }\n\n      const session = await response.json();\n\n      return NextResponse.json({\n        user: session.user,\n        session: {\n          userId: session.user.id,\n          token,\n          expiresAt: '',\n          createdAt: new Date().toISOString(),\n        },\n      });\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json({ user: null, session: null });\n    }\n  }\n\n  /**\n   * DELETE handler for sign out\n   */\n  async function DELETE(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (token) {\n        // Call backend sign out\n        try {\n          await fetch(`${baseUrl}/auth/sessions/current`, {\n            method: 'DELETE',\n            headers: {\n              Authorization: `Bearer ${token}`,\n              'Content-Type': 'application/json',\n            },\n          });\n        } catch (error) {\n          // Ignore backend errors during sign out\n          console.error('[Auth API] Sign out error:', error);\n        }\n      }\n\n      const response = NextResponse.json({ success: true });\n      clearAuthCookie(response);\n\n      return response;\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  return {\n    POST,\n    GET,\n    DELETE,\n  };\n}\n"],"mappings":";AAAA,SAAsB,oBAAoB;AAC1C,SAAS,oBAAoB;AA6CtB,SAAS,wBAAwB,QAAyB;AAC/D,QAAM;AAAA,IACJ;AAAA,IACA,aAAa;AAAA,IACb,eAAe,IAAI,KAAK,KAAK;AAAA;AAAA,EAC/B,IAAI;AAEJ,QAAM,WAAW,aAAa,EAAE,QAAQ,CAAC;AAKzC,WAAS,cAAc,UAAwB,OAAe;AAG5D,UAAM,eAAe,QAAQ,IAAI,aAAa;AAC9C,UAAM,SAAS,OAAO,UAAU;AAEhC,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA;AAAA,MACV;AAAA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAKA,WAAS,gBAAgB,UAAwB;AAC/C,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ,OAAO,UAAW,QAAQ,IAAI,aAAa;AAAA,MACnD,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAMA,iBAAe,KAAK,SAAsB;AACxC,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,EAAE,QAAQ,OAAO,SAAS,IAAI;AAEpC,UAAI,CAAC,QAAQ;AACX,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,qBAAqB;AAAA,UAC9B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,cAAQ,QAAQ;AAAA,QACd,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,mBAAmB;AAAA,YACpD;AAAA,YACA;AAAA,UACF,CAAC;AAED,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,wBAAwB;AAAA,cACjC,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAED,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,OAAO,EAAE,OAAO,SAAS,CAAC;AAE7D,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,iBAAiB;AAAA,cAC1B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAED,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,cAAc;AAEjB,gBAAM,EAAE,MAAM,IAAI;AAElB,cAAI,CAAC,OAAO;AACV,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,oBAAoB;AAAA,cAC7B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAGA,cAAI;AACF,kBAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,cACnE,SAAS;AAAA,gBACP,eAAe,UAAU,KAAK;AAAA,gBAC9B,gBAAgB;AAAA,cAClB;AAAA,YACF,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,YAAY,MAAM,SAAS,KAAK;AACtC,sBAAQ,MAAM,uCAAuC,SAAS;AAC9D,qBAAO,aAAa;AAAA,gBAClB,EAAE,OAAO,iBAAiB,SAAS,UAAU;AAAA,gBAC7C,EAAE,QAAQ,IAAI;AAAA,cAChB;AAAA,YACF;AAEA,kBAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,kBAAM,eAAe,aAAa,KAAK;AAAA,cACrC,MAAM,QAAQ;AAAA,cACd,SAAS;AAAA,gBACP,QAAQ,QAAQ,KAAK;AAAA,gBACrB,WAAW;AAAA,gBACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,cACpC;AAAA,YACF,CAAC;AAED,0BAAc,cAAc,KAAK;AAEjC,mBAAO;AAAA,UACT,SAAS,OAAO;AACd,oBAAQ,MAAM,sCAAsC,KAAK;AACzD,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,2BAA2B,SAAS,OAAO,KAAK,EAAE;AAAA,cAC3D,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAAA,QACF;AAAA,QAEA;AACE,iBAAO,aAAa;AAAA,YAClB,EAAE,OAAO,iBAAiB;AAAA,YAC1B,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,MACJ;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,iBAAe,IAAI,SAAsB;AACvC,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,CAAC,OAAO;AACV,eAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,MACxD;AAGA,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,eAAe,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AACpE,wBAAgB,YAAY;AAC5B,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,UACP,QAAQ,QAAQ,KAAK;AAAA,UACrB;AAAA,UACA,WAAW;AAAA,UACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,IACxD;AAAA,EACF;AAKA,iBAAe,OAAO,SAAsB;AAC1C,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,OAAO;AAET,YAAI;AACF,gBAAM,MAAM,GAAG,OAAO,0BAA0B;AAAA,YAC9C,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,eAAe,UAAU,KAAK;AAAA,cAC9B,gBAAgB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,OAAO;AAEd,kBAAQ,MAAM,8BAA8B,KAAK;AAAA,QACnD;AAAA,MACF;AAEA,YAAM,WAAW,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AACpD,sBAAgB,QAAQ;AAExB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.mts

@@ -0,0 +1,245 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
+import { ReactNode, CSSProperties, InputHTMLAttributes } from 'react';
+
+interface InsforgeUser {
+    id: string;
+    email: string;
+    avatar_url?: string;
+    nickname?: string;
+    bio?: string;
+    birthday?: string;
+    createdAt: string;
+    updatedAt: string;
+    [key: string]: any;
+}
+interface InsforgeSession {
+    userId: string;
+    token: string;
+    expiresAt: string;
+    createdAt: string;
+}
+interface SignInProps {
+    afterSignInUrl?: string;
+    appearance?: {
+        container?: React.CSSProperties;
+        form?: React.CSSProperties;
+        button?: React.CSSProperties;
+    };
+    title?: string;
+    subtitle?: string;
+    emailLabel?: string;
+    emailPlaceholder?: string;
+    passwordLabel?: string;
+    passwordPlaceholder?: string;
+    forgotPasswordText?: string;
+    submitButtonText?: string;
+    loadingButtonText?: string;
+    signUpText?: string;
+    signUpLinkText?: string;
+    signUpUrl?: string;
+    dividerText?: string;
+    onSuccess?: (user: InsforgeUser) => void;
+    onError?: (error: Error) => void;
+}
+interface SignUpProps {
+    afterSignUpUrl?: string;
+    appearance?: {
+        container?: React.CSSProperties;
+        form?: React.CSSProperties;
+        button?: React.CSSProperties;
+    };
+    title?: string;
+    subtitle?: string;
+    emailLabel?: string;
+    emailPlaceholder?: string;
+    passwordLabel?: string;
+    passwordPlaceholder?: string;
+    submitButtonText?: string;
+    loadingButtonText?: string;
+    signInText?: string;
+    signInLinkText?: string;
+    signInUrl?: string;
+    dividerText?: string;
+    onSuccess?: (user: InsforgeUser) => void;
+    onError?: (error: Error) => void;
+}
+interface UserButtonProps {
+    afterSignOutUrl?: string;
+    mode?: 'detailed' | 'simple';
+    appearance?: {
+        button?: React.CSSProperties;
+        dropdown?: React.CSSProperties;
+    };
+}
+interface ProtectProps {
+    children: ReactNode;
+    fallback?: ReactNode;
+    redirectTo?: string;
+    condition?: (user: InsforgeUser) => boolean;
+}
+interface ConditionalProps {
+    children: ReactNode;
+}
+type OAuthProvider = 'google' | 'github' | 'discord' | 'facebook' | 'linkedin' | 'instagram' | 'tiktok' | 'apple' | 'x' | 'spotify' | 'microsoft';
+interface OAuthProviderConfig {
+    name: string;
+    svg: React.ReactElement;
+    className: string;
+}
+
+interface InsforgeContextValue {
+    user: InsforgeUser | null;
+    session: InsforgeSession | null;
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    setUser: (user: InsforgeUser | null) => void;
+    signIn: (email: string, password: string) => Promise<void>;
+    signUp: (email: string, password: string) => Promise<void>;
+    signOut: () => Promise<void>;
+    updateUser: (data: Partial<InsforgeUser>) => Promise<void>;
+    baseUrl: string;
+}
+interface InsforgeProviderProps {
+    children: ReactNode;
+    baseUrl: string;
+    frontendUrl?: string;
+    onAuthChange?: (user: InsforgeUser | null) => void;
+    useBuiltInAuth?: boolean;
+}
+declare function InsforgeProvider({ children, baseUrl, frontendUrl, onAuthChange, useBuiltInAuth }: InsforgeProviderProps): react_jsx_runtime.JSX.Element;
+declare function useInsforge(): InsforgeContextValue;
+
+declare function useAuth(): {
+    signIn: (email: string, password: string) => Promise<void>;
+    signUp: (email: string, password: string) => Promise<void>;
+    signOut: () => Promise<void>;
+    isLoaded: boolean;
+    isSignedIn: boolean;
+};
+
+declare function useUser(): {
+    user: InsforgeUser | null;
+    isLoaded: boolean;
+    updateUser: (data: Partial<InsforgeUser>) => Promise<void>;
+    setUser: (user: InsforgeUser | null) => void;
+};
+
+declare function useSession(): {
+    session: InsforgeSession | null;
+    isLoaded: boolean;
+};
+
+declare function SignIn({ afterSignInUrl, appearance, title, subtitle, emailLabel, emailPlaceholder, passwordLabel, passwordPlaceholder, forgotPasswordText, submitButtonText, loadingButtonText, signUpText, signUpLinkText, signUpUrl, dividerText, onSuccess, onError, }: SignInProps): react_jsx_runtime.JSX.Element;
+
+declare function SignUp({ afterSignUpUrl, appearance, title, subtitle, emailLabel, emailPlaceholder, passwordLabel, passwordPlaceholder, submitButtonText, loadingButtonText, signInText, signInLinkText, signInUrl, dividerText, onSuccess, onError, }: SignUpProps): react_jsx_runtime.JSX.Element;
+
+declare function UserButton({ afterSignOutUrl, mode, appearance, }: UserButtonProps): react_jsx_runtime.JSX.Element | null;
+
+declare function SignedIn({ children }: ConditionalProps): react_jsx_runtime.JSX.Element | null;
+
+declare function SignedOut({ children }: ConditionalProps): react_jsx_runtime.JSX.Element | null;
+
+declare function Protect({ children, fallback, redirectTo, condition, }: ProtectProps): string | number | bigint | true | Iterable<react.ReactNode> | Promise<string | number | bigint | boolean | react.ReactPortal | react.ReactElement<unknown, string | react.JSXElementConstructor<any>> | Iterable<react.ReactNode> | null | undefined> | react_jsx_runtime.JSX.Element | null;
+
+interface AuthContainerProps {
+    children: ReactNode;
+    style?: CSSProperties;
+}
+declare function AuthContainer({ children, style }: AuthContainerProps): react_jsx_runtime.JSX.Element;
+
+interface AuthHeaderProps {
+    title: string;
+    subtitle?: string;
+}
+declare function AuthHeader({ title, subtitle }: AuthHeaderProps): react_jsx_runtime.JSX.Element;
+
+interface AuthErrorBannerProps {
+    error: string;
+}
+declare function AuthErrorBanner({ error }: AuthErrorBannerProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthFormFieldProps extends InputHTMLAttributes<HTMLInputElement> {
+    label: string;
+    id: string;
+}
+declare function AuthFormField({ label, id, className, ...props }: AuthFormFieldProps): react_jsx_runtime.JSX.Element;
+
+interface AuthPasswordFieldProps extends Omit<InputHTMLAttributes<HTMLInputElement>, 'type'> {
+    label: string;
+    id: string;
+    showStrengthIndicator?: boolean;
+    forgotPasswordLink?: {
+        href: string;
+        text?: string;
+    };
+}
+declare function AuthPasswordField({ label, id, showStrengthIndicator, forgotPasswordLink, value, className, onFocus, ...props }: AuthPasswordFieldProps): react_jsx_runtime.JSX.Element;
+
+interface AuthSubmitButtonProps {
+    children: ReactNode;
+    isLoading?: boolean;
+    confirmed?: boolean;
+    disabled?: boolean;
+    style?: CSSProperties;
+}
+declare function AuthSubmitButton({ children, isLoading, confirmed, disabled, style, }: AuthSubmitButtonProps): react_jsx_runtime.JSX.Element;
+
+interface AuthDividerProps {
+    text?: string;
+}
+declare function AuthDivider({ text }: AuthDividerProps): react_jsx_runtime.JSX.Element;
+
+interface AuthLinkProps {
+    text: string;
+    linkText: string;
+    href: string;
+}
+declare function AuthLink({ text, linkText, href }: AuthLinkProps): react_jsx_runtime.JSX.Element;
+
+interface AuthOAuthProvidersProps {
+    providers: OAuthProvider[];
+    onClick: (provider: OAuthProvider) => void;
+    disabled?: boolean;
+    loading: OAuthProvider | null;
+}
+declare function AuthOAuthProviders({ providers, onClick, disabled, loading, }: AuthOAuthProvidersProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthBrandingProps {
+    text?: string;
+    href?: string;
+}
+declare function AuthBranding({ text, href }: AuthBrandingProps): react_jsx_runtime.JSX.Element;
+
+type DisplayMode = 'full' | 'short' | 'icon';
+interface AuthOAuthButtonProps {
+    provider: OAuthProvider;
+    onClick: (provider: OAuthProvider) => void;
+    disabled?: boolean;
+    loading?: boolean;
+    displayMode?: DisplayMode;
+    style?: React.CSSProperties;
+}
+declare function AuthOAuthButton({ provider, onClick, disabled, loading, displayMode, style }: AuthOAuthButtonProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthPasswordStrengthIndicatorProps {
+    password: string;
+}
+declare function validatePasswordStrength(password: string): boolean;
+declare function AuthPasswordStrengthIndicator({ password }: AuthPasswordStrengthIndicatorProps): react_jsx_runtime.JSX.Element;
+
+interface AuthVerificationCodeInputProps {
+    length?: number;
+    value: string;
+    email: string;
+    onChange: (value: string) => void;
+    disabled?: boolean;
+}
+declare function AuthVerificationCodeInput({ length, value, email, onChange, disabled, }: AuthVerificationCodeInputProps): react_jsx_runtime.JSX.Element;
+
+declare const OAUTH_PROVIDER_CONFIG: Record<OAuthProvider, OAuthProviderConfig>;
+declare function getProviderConfig(provider: OAuthProvider): OAuthProviderConfig | null;
+declare function getProviderName(provider: OAuthProvider): string;
+declare function isProviderSupported(provider: string): provider is OAuthProvider;
+
+export { AuthBranding, AuthContainer, AuthDivider, AuthErrorBanner, AuthFormField, AuthHeader, AuthLink, AuthOAuthButton, AuthOAuthProviders, AuthPasswordField, AuthPasswordStrengthIndicator, AuthSubmitButton, AuthVerificationCodeInput, type ConditionalProps, InsforgeProvider, type InsforgeSession, type InsforgeUser, OAUTH_PROVIDER_CONFIG, type OAuthProvider, type OAuthProviderConfig, Protect, type ProtectProps, SignIn, type SignInProps, SignUp, type SignUpProps, SignedIn, SignedOut, UserButton, type UserButtonProps, getProviderConfig, getProviderName, isProviderSupported, useAuth, useInsforge, useSession, useUser, validatePasswordStrength };

package/dist/index.d.ts

@@ -0,0 +1,245 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
+import { ReactNode, CSSProperties, InputHTMLAttributes } from 'react';
+
+interface InsforgeUser {
+    id: string;
+    email: string;
+    avatar_url?: string;
+    nickname?: string;
+    bio?: string;
+    birthday?: string;
+    createdAt: string;
+    updatedAt: string;
+    [key: string]: any;
+}
+interface InsforgeSession {
+    userId: string;
+    token: string;
+    expiresAt: string;
+    createdAt: string;
+}
+interface SignInProps {
+    afterSignInUrl?: string;
+    appearance?: {
+        container?: React.CSSProperties;
+        form?: React.CSSProperties;
+        button?: React.CSSProperties;
+    };
+    title?: string;
+    subtitle?: string;
+    emailLabel?: string;
+    emailPlaceholder?: string;
+    passwordLabel?: string;
+    passwordPlaceholder?: string;
+    forgotPasswordText?: string;
+    submitButtonText?: string;
+    loadingButtonText?: string;
+    signUpText?: string;
+    signUpLinkText?: string;
+    signUpUrl?: string;
+    dividerText?: string;
+    onSuccess?: (user: InsforgeUser) => void;
+    onError?: (error: Error) => void;
+}
+interface SignUpProps {
+    afterSignUpUrl?: string;
+    appearance?: {
+        container?: React.CSSProperties;
+        form?: React.CSSProperties;
+        button?: React.CSSProperties;
+    };
+    title?: string;
+    subtitle?: string;
+    emailLabel?: string;
+    emailPlaceholder?: string;
+    passwordLabel?: string;
+    passwordPlaceholder?: string;
+    submitButtonText?: string;
+    loadingButtonText?: string;
+    signInText?: string;
+    signInLinkText?: string;
+    signInUrl?: string;
+    dividerText?: string;
+    onSuccess?: (user: InsforgeUser) => void;
+    onError?: (error: Error) => void;
+}
+interface UserButtonProps {
+    afterSignOutUrl?: string;
+    mode?: 'detailed' | 'simple';
+    appearance?: {
+        button?: React.CSSProperties;
+        dropdown?: React.CSSProperties;
+    };
+}
+interface ProtectProps {
+    children: ReactNode;
+    fallback?: ReactNode;
+    redirectTo?: string;
+    condition?: (user: InsforgeUser) => boolean;
+}
+interface ConditionalProps {
+    children: ReactNode;
+}
+type OAuthProvider = 'google' | 'github' | 'discord' | 'facebook' | 'linkedin' | 'instagram' | 'tiktok' | 'apple' | 'x' | 'spotify' | 'microsoft';
+interface OAuthProviderConfig {
+    name: string;
+    svg: React.ReactElement;
+    className: string;
+}
+
+interface InsforgeContextValue {
+    user: InsforgeUser | null;
+    session: InsforgeSession | null;
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    setUser: (user: InsforgeUser | null) => void;
+    signIn: (email: string, password: string) => Promise<void>;
+    signUp: (email: string, password: string) => Promise<void>;
+    signOut: () => Promise<void>;
+    updateUser: (data: Partial<InsforgeUser>) => Promise<void>;
+    baseUrl: string;
+}
+interface InsforgeProviderProps {
+    children: ReactNode;
+    baseUrl: string;
+    frontendUrl?: string;
+    onAuthChange?: (user: InsforgeUser | null) => void;
+    useBuiltInAuth?: boolean;
+}
+declare function InsforgeProvider({ children, baseUrl, frontendUrl, onAuthChange, useBuiltInAuth }: InsforgeProviderProps): react_jsx_runtime.JSX.Element;
+declare function useInsforge(): InsforgeContextValue;
+
+declare function useAuth(): {
+    signIn: (email: string, password: string) => Promise<void>;
+    signUp: (email: string, password: string) => Promise<void>;
+    signOut: () => Promise<void>;
+    isLoaded: boolean;
+    isSignedIn: boolean;
+};
+
+declare function useUser(): {
+    user: InsforgeUser | null;
+    isLoaded: boolean;
+    updateUser: (data: Partial<InsforgeUser>) => Promise<void>;
+    setUser: (user: InsforgeUser | null) => void;
+};
+
+declare function useSession(): {
+    session: InsforgeSession | null;
+    isLoaded: boolean;
+};
+
+declare function SignIn({ afterSignInUrl, appearance, title, subtitle, emailLabel, emailPlaceholder, passwordLabel, passwordPlaceholder, forgotPasswordText, submitButtonText, loadingButtonText, signUpText, signUpLinkText, signUpUrl, dividerText, onSuccess, onError, }: SignInProps): react_jsx_runtime.JSX.Element;
+
+declare function SignUp({ afterSignUpUrl, appearance, title, subtitle, emailLabel, emailPlaceholder, passwordLabel, passwordPlaceholder, submitButtonText, loadingButtonText, signInText, signInLinkText, signInUrl, dividerText, onSuccess, onError, }: SignUpProps): react_jsx_runtime.JSX.Element;
+
+declare function UserButton({ afterSignOutUrl, mode, appearance, }: UserButtonProps): react_jsx_runtime.JSX.Element | null;
+
+declare function SignedIn({ children }: ConditionalProps): react_jsx_runtime.JSX.Element | null;
+
+declare function SignedOut({ children }: ConditionalProps): react_jsx_runtime.JSX.Element | null;
+
+declare function Protect({ children, fallback, redirectTo, condition, }: ProtectProps): string | number | bigint | true | Iterable<react.ReactNode> | Promise<string | number | bigint | boolean | react.ReactPortal | react.ReactElement<unknown, string | react.JSXElementConstructor<any>> | Iterable<react.ReactNode> | null | undefined> | react_jsx_runtime.JSX.Element | null;
+
+interface AuthContainerProps {
+    children: ReactNode;
+    style?: CSSProperties;
+}
+declare function AuthContainer({ children, style }: AuthContainerProps): react_jsx_runtime.JSX.Element;
+
+interface AuthHeaderProps {
+    title: string;
+    subtitle?: string;
+}
+declare function AuthHeader({ title, subtitle }: AuthHeaderProps): react_jsx_runtime.JSX.Element;
+
+interface AuthErrorBannerProps {
+    error: string;
+}
+declare function AuthErrorBanner({ error }: AuthErrorBannerProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthFormFieldProps extends InputHTMLAttributes<HTMLInputElement> {
+    label: string;
+    id: string;
+}
+declare function AuthFormField({ label, id, className, ...props }: AuthFormFieldProps): react_jsx_runtime.JSX.Element;
+
+interface AuthPasswordFieldProps extends Omit<InputHTMLAttributes<HTMLInputElement>, 'type'> {
+    label: string;
+    id: string;
+    showStrengthIndicator?: boolean;
+    forgotPasswordLink?: {
+        href: string;
+        text?: string;
+    };
+}
+declare function AuthPasswordField({ label, id, showStrengthIndicator, forgotPasswordLink, value, className, onFocus, ...props }: AuthPasswordFieldProps): react_jsx_runtime.JSX.Element;
+
+interface AuthSubmitButtonProps {
+    children: ReactNode;
+    isLoading?: boolean;
+    confirmed?: boolean;
+    disabled?: boolean;
+    style?: CSSProperties;
+}
+declare function AuthSubmitButton({ children, isLoading, confirmed, disabled, style, }: AuthSubmitButtonProps): react_jsx_runtime.JSX.Element;
+
+interface AuthDividerProps {
+    text?: string;
+}
+declare function AuthDivider({ text }: AuthDividerProps): react_jsx_runtime.JSX.Element;
+
+interface AuthLinkProps {
+    text: string;
+    linkText: string;
+    href: string;
+}
+declare function AuthLink({ text, linkText, href }: AuthLinkProps): react_jsx_runtime.JSX.Element;
+
+interface AuthOAuthProvidersProps {
+    providers: OAuthProvider[];
+    onClick: (provider: OAuthProvider) => void;
+    disabled?: boolean;
+    loading: OAuthProvider | null;
+}
+declare function AuthOAuthProviders({ providers, onClick, disabled, loading, }: AuthOAuthProvidersProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthBrandingProps {
+    text?: string;
+    href?: string;
+}
+declare function AuthBranding({ text, href }: AuthBrandingProps): react_jsx_runtime.JSX.Element;
+
+type DisplayMode = 'full' | 'short' | 'icon';
+interface AuthOAuthButtonProps {
+    provider: OAuthProvider;
+    onClick: (provider: OAuthProvider) => void;
+    disabled?: boolean;
+    loading?: boolean;
+    displayMode?: DisplayMode;
+    style?: React.CSSProperties;
+}
+declare function AuthOAuthButton({ provider, onClick, disabled, loading, displayMode, style }: AuthOAuthButtonProps): react_jsx_runtime.JSX.Element | null;
+
+interface AuthPasswordStrengthIndicatorProps {
+    password: string;
+}
+declare function validatePasswordStrength(password: string): boolean;
+declare function AuthPasswordStrengthIndicator({ password }: AuthPasswordStrengthIndicatorProps): react_jsx_runtime.JSX.Element;
+
+interface AuthVerificationCodeInputProps {
+    length?: number;
+    value: string;
+    email: string;
+    onChange: (value: string) => void;
+    disabled?: boolean;
+}
+declare function AuthVerificationCodeInput({ length, value, email, onChange, disabled, }: AuthVerificationCodeInputProps): react_jsx_runtime.JSX.Element;
+
+declare const OAUTH_PROVIDER_CONFIG: Record<OAuthProvider, OAuthProviderConfig>;
+declare function getProviderConfig(provider: OAuthProvider): OAuthProviderConfig | null;
+declare function getProviderName(provider: OAuthProvider): string;
+declare function isProviderSupported(provider: string): provider is OAuthProvider;
+
+export { AuthBranding, AuthContainer, AuthDivider, AuthErrorBanner, AuthFormField, AuthHeader, AuthLink, AuthOAuthButton, AuthOAuthProviders, AuthPasswordField, AuthPasswordStrengthIndicator, AuthSubmitButton, AuthVerificationCodeInput, type ConditionalProps, InsforgeProvider, type InsforgeSession, type InsforgeUser, OAUTH_PROVIDER_CONFIG, type OAuthProvider, type OAuthProviderConfig, Protect, type ProtectProps, SignIn, type SignInProps, SignUp, type SignUpProps, SignedIn, SignedOut, UserButton, type UserButtonProps, getProviderConfig, getProviderName, isProviderSupported, useAuth, useInsforge, useSession, useUser, validatePasswordStrength };