@insforge/react 0.4.12 → 0.5.1

package/dist/hooks.cjs

@@ -5,11 +5,37 @@ require('@insforge/sdk');
 require('react/jsx-runtime');
 
 // src/provider/InsforgeProvider.tsx
+react.createContext(null);
 var InsforgeContext = react.createContext(void 0);
 function useInsforge() {
   const context = react.useContext(InsforgeContext);
   if (!context) {
-    throw new Error("useInsforge must be used within InsforgeProvider");
+    if (typeof window !== "undefined") {
+      throw new Error("useInsforge must be used within InsforgeProvider");
+    }
+    return {
+      user: null,
+      isLoaded: false,
+      isSignedIn: false,
+      setUser: () => {
+      },
+      signIn: async () => ({ error: "SSR mode" }),
+      signUp: async () => ({ error: "SSR mode" }),
+      signOut: async () => {
+      },
+      updateUser: async () => {
+      },
+      reloadAuth: async () => ({ success: false, error: "SSR mode" }),
+      sendVerificationEmail: async () => null,
+      sendResetPasswordEmail: async () => null,
+      resetPassword: async () => null,
+      verifyEmail: async () => null,
+      exchangeResetPasswordToken: async () => ({ error: { message: "SSR mode" } }),
+      loginWithOAuth: async () => {
+      },
+      getPublicAuthConfig: async () => null,
+      baseUrl: ""
+    };
   }
   return context;
 }

package/dist/hooks.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["createContext","useContext","useState","useEffect"],"mappings":";;;;;;;AA8DA,IAAM,eAAA,GAAkBA,oBAAgD,MAAS,CAAA;AA8f1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,iBAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;AC9hBO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACCO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIC,eAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,eAAS,KAAK,CAAA;AAE9C,EAAAC,gBAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,aAAA,CAAc,MAAM,CAAA;AAAA,MACtB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,aAAA,CAAc,IAAI,CAAA;AAAA,MACpB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,YAAY,QAAA,EAAS;AAChC","file":"hooks.cjs","sourcesContent":["import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={process.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        throw new Error('No user signed in');\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <InsforgeContext.Provider\n      value={{\n        user,\n        isLoaded,\n        isSignedIn: !!user,\n        setUser,\n        signIn,\n        signUp,\n        signOut,\n        updateUser,\n        reloadAuth: loadAuthState,\n        baseUrl,\n        sendVerificationEmail,\n        sendResetPasswordEmail,\n        resetPassword,\n        verifyEmail,\n        exchangeResetPasswordToken,\n        getPublicAuthConfig,\n        loginWithOAuth,\n      }}\n    >\n      {children}\n    </InsforgeContext.Provider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n  if (!context) {\n    throw new Error('useInsforge must be used within InsforgeProvider');\n  }\n  return context;\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access authentication methods\n *\n * @returns Object containing:\n *   - `signIn`: Function to sign in with email and password\n *   - `signUp`: Function to sign up with email and password\n *   - `signOut`: Function to sign out the current user\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\n *\n * @example\n * ```tsx\n * function LoginForm() {\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\n *\n *   async function handleLogin(email: string, password: string) {\n *     try {\n *       await signIn(email, password);\n *       // User is now signed in\n *     } catch (error) {\n *       console.error('Sign in failed:', error);\n *     }\n *   }\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\n *       {/* form fields *\\/}\n *     </form>\n *   );\n * }\n * ```\n */\nexport function useAuth() {\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access current user data\n *\n * @returns Object containing:\n *   - `user`: Current user object (InsforgeUser | null)\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `updateUser`: Function to update user profile data\n *   - `setUser`: Internal function to manually set user state\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { user, isLoaded, updateUser } = useUser();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *   if (!user) return <div>Not signed in</div>;\n *\n *   async function handleUpdate(name: string) {\n *     await updateUser({ name });\n *   }\n *\n *   return (\n *     <div>\n *       <p>Email: {user.email}</p>\n *       {user.name && <p>Name: {user.name}</p>}\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useUser() {\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\n  return { user, isLoaded, updateUser, setUser };\n}\n","import { useState, useEffect } from 'react';\nimport type { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\n *\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\n *\n * This hook lazily fetches all public authentication configuration from the backend\n * only when the component mounts. Using it in other components will cause unnecessary\n * API calls on every page load.\n *\n * @returns Object containing OAuth providers, email auth config, and loading state\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\n * - `authConfig`: Email authentication configuration object with password rules\n * - `isLoaded`: Boolean indicating if the config has been fetched\n *\n * @example\n * ```tsx\n * // ✅ Correct usage - only in SignIn/SignUp components\n * function SignUp() {\n *   const { oauthProviders, authConfig, isLoaded } = usePublicAuthConfig();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <div>\n *       <p>OAuth providers: {oauthProviders.length}</p>\n *       <p>Password min length: {authConfig?.passwordMinLength}</p>\n *     </div>\n *   );\n * }\n * ```\n *\n * @requires Must be used within InsforgeProvider\n */\nexport function usePublicAuthConfig(): {\n  authConfig: GetPublicAuthConfigResponse | null;\n  isLoaded: boolean;\n} {\n  const { getPublicAuthConfig } = useInsforge();\n  const [authConfig, setAuthConfig] = useState<GetPublicAuthConfigResponse | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  useEffect(() => {\n    async function fetchConfig() {\n      const result = await getPublicAuthConfig();\n      if (result) {\n        setAuthConfig(result);\n      } else {\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\n        setAuthConfig(null);\n      }\n      setIsLoaded(true);\n    }\n\n    fetchConfig();\n  }, [getPublicAuthConfig]);\n\n  return { authConfig, isLoaded };\n}\n"]}
+{"version":3,"sources":["../src/navigation/NavigationContext.tsx","../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["createContext","useContext","useState","useEffect"],"mappings":";;;;;;;AAG0BA,oBAAwC,IAAI;AC4DtE,IAAM,eAAA,GAAkBA,oBAAgD,MAAS,CAAA;AAggB1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,iBAAW,eAAe,CAAA;AAI1C,EAAA,IAAI,CAAC,OAAA,EAAS;AAEZ,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEjC,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AAIA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA;AAAA,MACN,QAAA,EAAU,KAAA;AAAA,MACV,UAAA,EAAY,KAAA;AAAA,MACZ,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,SAAS,YAAY;AAAA,MAAC,CAAA;AAAA,MACtB,YAAY,YAAY;AAAA,MAAC,CAAA;AAAA,MACzB,YAAY,aAAa,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,UAAA,EAAW,CAAA;AAAA,MAC7D,uBAAuB,YAAY,IAAA;AAAA,MACnC,wBAAwB,YAAY,IAAA;AAAA,MACpC,eAAe,YAAY,IAAA;AAAA,MAC3B,aAAa,YAAY,IAAA;AAAA,MACzB,4BAA4B,aAAa,EAAE,OAAO,EAAE,OAAA,EAAS,YAAW,EAAE,CAAA;AAAA,MAC1E,gBAAgB,YAAY;AAAA,MAAC,CAAA;AAAA,MAC7B,qBAAqB,YAAY,IAAA;AAAA,MACjC,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;;;AC/jBO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACCO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIC,eAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,eAAS,KAAK,CAAA;AAE9C,EAAAC,gBAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,aAAA,CAAc,MAAM,CAAA;AAAA,MACtB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,aAAA,CAAc,IAAI,CAAA;AAAA,MACpB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,YAAY,QAAA,EAAS;AAChC","file":"hooks.cjs","sourcesContent":["import { createContext, useContext, ReactNode } from 'react';\nimport type { NavigationAdapter } from './types';\n\nconst NavigationContext = createContext<NavigationAdapter | null>(null);\n\nexport interface NavigationProviderProps {\n  adapter: NavigationAdapter;\n  children: ReactNode;\n}\n\n/**\n * Navigation Provider\n * Injects navigation adapter into the component tree\n */\nexport function NavigationProvider({ adapter, children }: NavigationProviderProps) {\n  return <NavigationContext.Provider value={adapter}>{children}</NavigationContext.Provider>;\n}\n\n/**\n * Hook to access navigation adapter\n * @throws Error if used outside NavigationProvider\n */\nexport function useNavigationAdapter(): NavigationAdapter {\n  const adapter = useContext(NavigationContext);\n\n  if (!adapter) {\n    throw new Error('useNavigationAdapter must be used within NavigationProvider');\n  }\n\n  return adapter;\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\nimport { NavigationProvider, BrowserNavigationAdapter } from '../navigation';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={process.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        throw new Error('No user signed in');\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <NavigationProvider adapter={BrowserNavigationAdapter}>\n      <InsforgeContext.Provider\n        value={{\n          user,\n          isLoaded,\n          isSignedIn: !!user,\n          setUser,\n          signIn,\n          signUp,\n          signOut,\n          updateUser,\n          reloadAuth: loadAuthState,\n          baseUrl,\n          sendVerificationEmail,\n          sendResetPasswordEmail,\n          resetPassword,\n          verifyEmail,\n          exchangeResetPasswordToken,\n          getPublicAuthConfig,\n          loginWithOAuth,\n        }}\n      >\n        {children}\n      </InsforgeContext.Provider>\n    </NavigationProvider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n\n  // During SSR in Next.js, context might be undefined temporarily\n  // Return a safe default that won't break SSR rendering\n  if (!context) {\n    // Check if we're in a browser environment\n    if (typeof window !== 'undefined') {\n      // Client-side but no provider - this is an error\n      throw new Error('useInsforge must be used within InsforgeProvider');\n    }\n\n    // SSR - return safe defaults that make components render nothing\n    // SignedIn/SignedOut will both return null when isLoaded = false\n    return {\n      user: null,\n      isLoaded: false,\n      isSignedIn: false,\n      setUser: () => {},\n      signIn: async () => ({ error: 'SSR mode' }),\n      signUp: async () => ({ error: 'SSR mode' }),\n      signOut: async () => {},\n      updateUser: async () => {},\n      reloadAuth: async () => ({ success: false, error: 'SSR mode' }),\n      sendVerificationEmail: async () => null,\n      sendResetPasswordEmail: async () => null,\n      resetPassword: async () => null,\n      verifyEmail: async () => null,\n      exchangeResetPasswordToken: async () => ({ error: { message: 'SSR mode' } }),\n      loginWithOAuth: async () => {},\n      getPublicAuthConfig: async () => null,\n      baseUrl: '',\n    } as InsforgeContextValue;\n  }\n\n  return context;\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access authentication methods\n *\n * @returns Object containing:\n *   - `signIn`: Function to sign in with email and password\n *   - `signUp`: Function to sign up with email and password\n *   - `signOut`: Function to sign out the current user\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\n *\n * @example\n * ```tsx\n * function LoginForm() {\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\n *\n *   async function handleLogin(email: string, password: string) {\n *     try {\n *       await signIn(email, password);\n *       // User is now signed in\n *     } catch (error) {\n *       console.error('Sign in failed:', error);\n *     }\n *   }\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\n *       {/* form fields *\\/}\n *     </form>\n *   );\n * }\n * ```\n */\nexport function useAuth() {\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access current user data\n *\n * @returns Object containing:\n *   - `user`: Current user object (InsforgeUser | null)\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `updateUser`: Function to update user profile data\n *   - `setUser`: Internal function to manually set user state\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { user, isLoaded, updateUser } = useUser();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *   if (!user) return <div>Not signed in</div>;\n *\n *   async function handleUpdate(name: string) {\n *     await updateUser({ name });\n *   }\n *\n *   return (\n *     <div>\n *       <p>Email: {user.email}</p>\n *       {user.name && <p>Name: {user.name}</p>}\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useUser() {\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\n  return { user, isLoaded, updateUser, setUser };\n}\n","import { useState, useEffect } from 'react';\nimport type { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\n *\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\n *\n * This hook lazily fetches all public authentication configuration from the backend\n * only when the component mounts. Using it in other components will cause unnecessary\n * API calls on every page load.\n *\n * @returns Object containing OAuth providers, email auth config, and loading state\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\n * - `authConfig`: Email authentication configuration object with password rules\n * - `isLoaded`: Boolean indicating if the config has been fetched\n *\n * @example\n * ```tsx\n * // ✅ Correct usage - only in SignIn/SignUp components\n * function SignUp() {\n *   const { oauthProviders, authConfig, isLoaded } = usePublicAuthConfig();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <div>\n *       <p>OAuth providers: {oauthProviders.length}</p>\n *       <p>Password min length: {authConfig?.passwordMinLength}</p>\n *     </div>\n *   );\n * }\n * ```\n *\n * @requires Must be used within InsforgeProvider\n */\nexport function usePublicAuthConfig(): {\n  authConfig: GetPublicAuthConfigResponse | null;\n  isLoaded: boolean;\n} {\n  const { getPublicAuthConfig } = useInsforge();\n  const [authConfig, setAuthConfig] = useState<GetPublicAuthConfigResponse | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  useEffect(() => {\n    async function fetchConfig() {\n      const result = await getPublicAuthConfig();\n      if (result) {\n        setAuthConfig(result);\n      } else {\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\n        setAuthConfig(null);\n      }\n      setIsLoaded(true);\n    }\n\n    fetchConfig();\n  }, [getPublicAuthConfig]);\n\n  return { authConfig, isLoaded };\n}\n"]}

package/dist/hooks.js

@@ -3,11 +3,37 @@ import '@insforge/sdk';
 import 'react/jsx-runtime';
 
 // src/provider/InsforgeProvider.tsx
+createContext(null);
 var InsforgeContext = createContext(void 0);
 function useInsforge() {
   const context = useContext(InsforgeContext);
   if (!context) {
-    throw new Error("useInsforge must be used within InsforgeProvider");
+    if (typeof window !== "undefined") {
+      throw new Error("useInsforge must be used within InsforgeProvider");
+    }
+    return {
+      user: null,
+      isLoaded: false,
+      isSignedIn: false,
+      setUser: () => {
+      },
+      signIn: async () => ({ error: "SSR mode" }),
+      signUp: async () => ({ error: "SSR mode" }),
+      signOut: async () => {
+      },
+      updateUser: async () => {
+      },
+      reloadAuth: async () => ({ success: false, error: "SSR mode" }),
+      sendVerificationEmail: async () => null,
+      sendResetPasswordEmail: async () => null,
+      resetPassword: async () => null,
+      verifyEmail: async () => null,
+      exchangeResetPasswordToken: async () => ({ error: { message: "SSR mode" } }),
+      loginWithOAuth: async () => {
+      },
+      getPublicAuthConfig: async () => null,
+      baseUrl: ""
+    };
   }
   return context;
 }

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["useState","useEffect"],"mappings":";;;;;AA8DA,IAAM,eAAA,GAAkB,cAAgD,MAAS,CAAA;AA8f1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAU,WAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAA;AACT;;;AC9hBO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACCO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIA,SAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,SAAS,KAAK,CAAA;AAE9C,EAAAC,UAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,aAAA,CAAc,MAAM,CAAA;AAAA,MACtB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,aAAA,CAAc,IAAI,CAAA;AAAA,MACpB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,YAAY,QAAA,EAAS;AAChC","file":"hooks.js","sourcesContent":["import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={process.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        throw new Error('No user signed in');\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <InsforgeContext.Provider\n      value={{\n        user,\n        isLoaded,\n        isSignedIn: !!user,\n        setUser,\n        signIn,\n        signUp,\n        signOut,\n        updateUser,\n        reloadAuth: loadAuthState,\n        baseUrl,\n        sendVerificationEmail,\n        sendResetPasswordEmail,\n        resetPassword,\n        verifyEmail,\n        exchangeResetPasswordToken,\n        getPublicAuthConfig,\n        loginWithOAuth,\n      }}\n    >\n      {children}\n    </InsforgeContext.Provider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n  if (!context) {\n    throw new Error('useInsforge must be used within InsforgeProvider');\n  }\n  return context;\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access authentication methods\n *\n * @returns Object containing:\n *   - `signIn`: Function to sign in with email and password\n *   - `signUp`: Function to sign up with email and password\n *   - `signOut`: Function to sign out the current user\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\n *\n * @example\n * ```tsx\n * function LoginForm() {\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\n *\n *   async function handleLogin(email: string, password: string) {\n *     try {\n *       await signIn(email, password);\n *       // User is now signed in\n *     } catch (error) {\n *       console.error('Sign in failed:', error);\n *     }\n *   }\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\n *       {/* form fields *\\/}\n *     </form>\n *   );\n * }\n * ```\n */\nexport function useAuth() {\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access current user data\n *\n * @returns Object containing:\n *   - `user`: Current user object (InsforgeUser | null)\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `updateUser`: Function to update user profile data\n *   - `setUser`: Internal function to manually set user state\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { user, isLoaded, updateUser } = useUser();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *   if (!user) return <div>Not signed in</div>;\n *\n *   async function handleUpdate(name: string) {\n *     await updateUser({ name });\n *   }\n *\n *   return (\n *     <div>\n *       <p>Email: {user.email}</p>\n *       {user.name && <p>Name: {user.name}</p>}\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useUser() {\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\n  return { user, isLoaded, updateUser, setUser };\n}\n","import { useState, useEffect } from 'react';\nimport type { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\n *\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\n *\n * This hook lazily fetches all public authentication configuration from the backend\n * only when the component mounts. Using it in other components will cause unnecessary\n * API calls on every page load.\n *\n * @returns Object containing OAuth providers, email auth config, and loading state\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\n * - `authConfig`: Email authentication configuration object with password rules\n * - `isLoaded`: Boolean indicating if the config has been fetched\n *\n * @example\n * ```tsx\n * // ✅ Correct usage - only in SignIn/SignUp components\n * function SignUp() {\n *   const { oauthProviders, authConfig, isLoaded } = usePublicAuthConfig();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <div>\n *       <p>OAuth providers: {oauthProviders.length}</p>\n *       <p>Password min length: {authConfig?.passwordMinLength}</p>\n *     </div>\n *   );\n * }\n * ```\n *\n * @requires Must be used within InsforgeProvider\n */\nexport function usePublicAuthConfig(): {\n  authConfig: GetPublicAuthConfigResponse | null;\n  isLoaded: boolean;\n} {\n  const { getPublicAuthConfig } = useInsforge();\n  const [authConfig, setAuthConfig] = useState<GetPublicAuthConfigResponse | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  useEffect(() => {\n    async function fetchConfig() {\n      const result = await getPublicAuthConfig();\n      if (result) {\n        setAuthConfig(result);\n      } else {\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\n        setAuthConfig(null);\n      }\n      setIsLoaded(true);\n    }\n\n    fetchConfig();\n  }, [getPublicAuthConfig]);\n\n  return { authConfig, isLoaded };\n}\n"]}
+{"version":3,"sources":["../src/navigation/NavigationContext.tsx","../src/provider/InsforgeProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useUser.ts","../src/hooks/usePublicAuthConfig.ts"],"names":["createContext","useContext","useState","useEffect"],"mappings":";;;;;AAG0B,cAAwC,IAAI;AC4DtE,IAAM,eAAA,GAAkBA,cAAgD,MAAS,CAAA;AAggB1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,WAAW,eAAe,CAAA;AAI1C,EAAA,IAAI,CAAC,OAAA,EAAS;AAEZ,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEjC,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AAIA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA;AAAA,MACN,QAAA,EAAU,KAAA;AAAA,MACV,UAAA,EAAY,KAAA;AAAA,MACZ,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,SAAS,YAAY;AAAA,MAAC,CAAA;AAAA,MACtB,YAAY,YAAY;AAAA,MAAC,CAAA;AAAA,MACzB,YAAY,aAAa,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,UAAA,EAAW,CAAA;AAAA,MAC7D,uBAAuB,YAAY,IAAA;AAAA,MACnC,wBAAwB,YAAY,IAAA;AAAA,MACpC,eAAe,YAAY,IAAA;AAAA,MAC3B,aAAa,YAAY,IAAA;AAAA,MACzB,4BAA4B,aAAa,EAAE,OAAO,EAAE,OAAA,EAAS,YAAW,EAAE,CAAA;AAAA,MAC1E,gBAAgB,YAAY;AAAA,MAAC,CAAA;AAAA,MAC7B,qBAAqB,YAAY,IAAA;AAAA,MACjC,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;;;AC/jBO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,QAAA,EAAU,UAAA,KAAe,WAAA,EAAY;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,UAAU,UAAA,EAAW;AACzD;;;ACNO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,KAAY,WAAA,EAAY;AAC5D,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,OAAA,EAAQ;AAC/C;ACCO,SAAS,mBAAA,GAGd;AACA,EAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,WAAA,EAAY;AAC5C,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIC,SAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,SAAS,KAAK,CAAA;AAE9C,EAAAC,UAAU,MAAM;AACd,IAAA,eAAe,WAAA,GAAc;AAC3B,MAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,EAAoB;AACzC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,aAAA,CAAc,MAAM,CAAA;AAAA,MACtB,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,wDAAwD,CAAA;AACtE,QAAA,aAAA,CAAc,IAAI,CAAA;AAAA,MACpB;AACA,MAAA,WAAA,CAAY,IAAI,CAAA;AAAA,IAClB;AAEA,IAAA,WAAA,EAAY;AAAA,EACd,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,OAAO,EAAE,YAAY,QAAA,EAAS;AAChC","file":"hooks.js","sourcesContent":["import { createContext, useContext, ReactNode } from 'react';\nimport type { NavigationAdapter } from './types';\n\nconst NavigationContext = createContext<NavigationAdapter | null>(null);\n\nexport interface NavigationProviderProps {\n  adapter: NavigationAdapter;\n  children: ReactNode;\n}\n\n/**\n * Navigation Provider\n * Injects navigation adapter into the component tree\n */\nexport function NavigationProvider({ adapter, children }: NavigationProviderProps) {\n  return <NavigationContext.Provider value={adapter}>{children}</NavigationContext.Provider>;\n}\n\n/**\n * Hook to access navigation adapter\n * @throws Error if used outside NavigationProvider\n */\nexport function useNavigationAdapter(): NavigationAdapter {\n  const adapter = useContext(NavigationContext);\n\n  if (!adapter) {\n    throw new Error('useNavigationAdapter must be used within NavigationProvider');\n  }\n\n  return adapter;\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\nimport { NavigationProvider, BrowserNavigationAdapter } from '../navigation';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<void>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={process.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        throw new Error('No user signed in');\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <NavigationProvider adapter={BrowserNavigationAdapter}>\n      <InsforgeContext.Provider\n        value={{\n          user,\n          isLoaded,\n          isSignedIn: !!user,\n          setUser,\n          signIn,\n          signUp,\n          signOut,\n          updateUser,\n          reloadAuth: loadAuthState,\n          baseUrl,\n          sendVerificationEmail,\n          sendResetPasswordEmail,\n          resetPassword,\n          verifyEmail,\n          exchangeResetPasswordToken,\n          getPublicAuthConfig,\n          loginWithOAuth,\n        }}\n      >\n        {children}\n      </InsforgeContext.Provider>\n    </NavigationProvider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n\n  // During SSR in Next.js, context might be undefined temporarily\n  // Return a safe default that won't break SSR rendering\n  if (!context) {\n    // Check if we're in a browser environment\n    if (typeof window !== 'undefined') {\n      // Client-side but no provider - this is an error\n      throw new Error('useInsforge must be used within InsforgeProvider');\n    }\n\n    // SSR - return safe defaults that make components render nothing\n    // SignedIn/SignedOut will both return null when isLoaded = false\n    return {\n      user: null,\n      isLoaded: false,\n      isSignedIn: false,\n      setUser: () => {},\n      signIn: async () => ({ error: 'SSR mode' }),\n      signUp: async () => ({ error: 'SSR mode' }),\n      signOut: async () => {},\n      updateUser: async () => {},\n      reloadAuth: async () => ({ success: false, error: 'SSR mode' }),\n      sendVerificationEmail: async () => null,\n      sendResetPasswordEmail: async () => null,\n      resetPassword: async () => null,\n      verifyEmail: async () => null,\n      exchangeResetPasswordToken: async () => ({ error: { message: 'SSR mode' } }),\n      loginWithOAuth: async () => {},\n      getPublicAuthConfig: async () => null,\n      baseUrl: '',\n    } as InsforgeContextValue;\n  }\n\n  return context;\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access authentication methods\n *\n * @returns Object containing:\n *   - `signIn`: Function to sign in with email and password\n *   - `signUp`: Function to sign up with email and password\n *   - `signOut`: Function to sign out the current user\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `isSignedIn`: Boolean indicating if user is currently signed in\n *\n * @example\n * ```tsx\n * function LoginForm() {\n *   const { signIn, signUp, signOut, isLoaded, isSignedIn } = useAuth();\n *\n *   async function handleLogin(email: string, password: string) {\n *     try {\n *       await signIn(email, password);\n *       // User is now signed in\n *     } catch (error) {\n *       console.error('Sign in failed:', error);\n *     }\n *   }\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <form onSubmit={(e) => { e.preventDefault(); handleLogin(email, password); }}>\n *       {/* form fields *\\/}\n *     </form>\n *   );\n * }\n * ```\n */\nexport function useAuth() {\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\n}\n","import { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to access current user data\n *\n * @returns Object containing:\n *   - `user`: Current user object (InsforgeUser | null)\n *   - `isLoaded`: Boolean indicating if auth state has been loaded\n *   - `updateUser`: Function to update user profile data\n *   - `setUser`: Internal function to manually set user state\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { user, isLoaded, updateUser } = useUser();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *   if (!user) return <div>Not signed in</div>;\n *\n *   async function handleUpdate(name: string) {\n *     await updateUser({ name });\n *   }\n *\n *   return (\n *     <div>\n *       <p>Email: {user.email}</p>\n *       {user.name && <p>Name: {user.name}</p>}\n *       {user.avatarUrl && <img src={user.avatarUrl} alt=\"Avatar\" />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useUser() {\n  const { user, isLoaded, updateUser, setUser } = useInsforge();\n  return { user, isLoaded, updateUser, setUser };\n}\n","import { useState, useEffect } from 'react';\nimport type { GetPublicAuthConfigResponse } from '@insforge/shared-schemas';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\n/**\n * Hook to get all public authentication configuration (OAuth + Email) from Insforge backend\n *\n * **IMPORTANT: This hook should ONLY be used in SignIn and SignUp components.**\n *\n * This hook lazily fetches all public authentication configuration from the backend\n * only when the component mounts. Using it in other components will cause unnecessary\n * API calls on every page load.\n *\n * @returns Object containing OAuth providers, email auth config, and loading state\n * - `oauthProviders`: Array of enabled OAuth provider names (e.g., ['google', 'github'])\n * - `authConfig`: Email authentication configuration object with password rules\n * - `isLoaded`: Boolean indicating if the config has been fetched\n *\n * @example\n * ```tsx\n * // ✅ Correct usage - only in SignIn/SignUp components\n * function SignUp() {\n *   const { oauthProviders, authConfig, isLoaded } = usePublicAuthConfig();\n *\n *   if (!isLoaded) return <div>Loading...</div>;\n *\n *   return (\n *     <div>\n *       <p>OAuth providers: {oauthProviders.length}</p>\n *       <p>Password min length: {authConfig?.passwordMinLength}</p>\n *     </div>\n *   );\n * }\n * ```\n *\n * @requires Must be used within InsforgeProvider\n */\nexport function usePublicAuthConfig(): {\n  authConfig: GetPublicAuthConfigResponse | null;\n  isLoaded: boolean;\n} {\n  const { getPublicAuthConfig } = useInsforge();\n  const [authConfig, setAuthConfig] = useState<GetPublicAuthConfigResponse | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  useEffect(() => {\n    async function fetchConfig() {\n      const result = await getPublicAuthConfig();\n      if (result) {\n        setAuthConfig(result);\n      } else {\n        console.error('[usePublicAuthConfig] Failed to get public auth config');\n        setAuthConfig(null);\n      }\n      setIsLoaded(true);\n    }\n\n    fetchConfig();\n  }, [getPublicAuthConfig]);\n\n  return { authConfig, isLoaded };\n}\n"]}

package/dist/index.cjs

@@ -15,13 +15,52 @@ if (typeof document !== 'undefined' && typeof window !== 'undefined') {
 'use strict';
 
 var react = require('react');
-var reactRouterDom = require('react-router-dom');
-var sdk = require('@insforge/sdk');
 var jsxRuntime = require('react/jsx-runtime');
+var sdk = require('@insforge/sdk');
 var lucideReact = require('lucide-react');
 var zod = require('zod');
 
 // src/components/SignIn.tsx
+var NavigationContext = react.createContext(null);
+function NavigationProvider({ adapter, children }) {
+  return /* @__PURE__ */ jsxRuntime.jsx(NavigationContext.Provider, { value: adapter, children });
+}
+function useNavigationAdapter() {
+  const adapter = react.useContext(NavigationContext);
+  if (!adapter) {
+    throw new Error("useNavigationAdapter must be used within NavigationProvider");
+  }
+  return adapter;
+}
+var BrowserNavigationAdapter = {
+  /**
+   * Returns URLSearchParams from current window.location.search
+   * Note: Not reactive - reads once on component mount
+   * This is sufficient for auth flows where we read initial URL params
+   */
+  useSearchParams() {
+    const [searchParams] = react.useState(() => {
+      if (typeof window === "undefined") {
+        return new URLSearchParams();
+      }
+      return new URLSearchParams(window.location.search);
+    });
+    return searchParams;
+  },
+  /**
+   * Native <a> tag for navigation
+   * Uses full page reload
+   */
+  Link({ href, className, children }) {
+    return /* @__PURE__ */ jsxRuntime.jsx("a", { href, className, children });
+  }
+};
+
+// src/navigation/useSearchParams.ts
+function useSearchParams() {
+  const adapter = useNavigationAdapter();
+  return adapter.useSearchParams();
+}
 var InsforgeContext = react.createContext(void 0);
 function InsforgeProvider({
   children,
@@ -349,7 +388,7 @@ function InsforgeProvider({
     },
     [insforge, afterSignInUrl]
   );
-  return /* @__PURE__ */ jsxRuntime.jsx(
+  return /* @__PURE__ */ jsxRuntime.jsx(NavigationProvider, { adapter: BrowserNavigationAdapter, children: /* @__PURE__ */ jsxRuntime.jsx(
     InsforgeContext.Provider,
     {
       value: {
@@ -373,12 +412,37 @@ function InsforgeProvider({
       },
       children
     }
-  );
+  ) });
 }
 function useInsforge() {
   const context = react.useContext(InsforgeContext);
   if (!context) {
-    throw new Error("useInsforge must be used within InsforgeProvider");
+    if (typeof window !== "undefined") {
+      throw new Error("useInsforge must be used within InsforgeProvider");
+    }
+    return {
+      user: null,
+      isLoaded: false,
+      isSignedIn: false,
+      setUser: () => {
+      },
+      signIn: async () => ({ error: "SSR mode" }),
+      signUp: async () => ({ error: "SSR mode" }),
+      signOut: async () => {
+      },
+      updateUser: async () => {
+      },
+      reloadAuth: async () => ({ success: false, error: "SSR mode" }),
+      sendVerificationEmail: async () => null,
+      sendResetPasswordEmail: async () => null,
+      resetPassword: async () => null,
+      verifyEmail: async () => null,
+      exchangeResetPasswordToken: async () => ({ error: { message: "SSR mode" } }),
+      loginWithOAuth: async () => {
+      },
+      getPublicAuthConfig: async () => null,
+      baseUrl: ""
+    };
   }
   return context;
 }
@@ -591,7 +655,8 @@ function AuthPasswordField({
   onFocus,
   ...props
 }) {
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
+  const { Link } = useNavigationAdapter();
   const [showPassword, setShowPassword] = react.useState(false);
   const [showStrength, setShowStrength] = react.useState(false);
   const resolvedForgotPasswordHref = react.useMemo(
@@ -607,7 +672,7 @@ function AuthPasswordField({
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "if-passwordField if-internal-p5w9m7", children: [
     (label || forgotPasswordLink) && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "if-passwordField-labelRow", children: [
       /* @__PURE__ */ jsxRuntime.jsx("label", { htmlFor: id, className: "if-passwordField-label", children: label }),
-      forgotPasswordLink && resolvedForgotPasswordHref && /* @__PURE__ */ jsxRuntime.jsx("a", { href: resolvedForgotPasswordHref, className: "if-passwordField-forgotLink", children: forgotPasswordLink.text || "Forget Password?" })
+      forgotPasswordLink && resolvedForgotPasswordHref && /* @__PURE__ */ jsxRuntime.jsx(Link, { href: resolvedForgotPasswordHref, className: "if-passwordField-forgotLink", children: forgotPasswordLink.text || "Forget Password?" })
     ] }),
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "if-passwordField-inputWrapper", children: [
       /* @__PURE__ */ jsxRuntime.jsx(
@@ -659,12 +724,13 @@ function AuthSubmitButton({
   );
 }
 function AuthLink({ text, linkText, href }) {
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
+  const { Link } = useNavigationAdapter();
   const finalHref = resolveAuthUrl(href, searchParams);
   return /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "if-authLink if-internal-al5w9p", children: [
     text && /* @__PURE__ */ jsxRuntime.jsx("span", { className: "if-authLink-text", children: text }),
     text && " ",
-    /* @__PURE__ */ jsxRuntime.jsx("a", { href: finalHref, className: "if-authLink-link", children: linkText })
+    /* @__PURE__ */ jsxRuntime.jsx(Link, { href: finalHref, className: "if-authLink-link", children: linkText })
   ] });
 }
 function AuthDivider({ text = "or" }) {
@@ -1307,7 +1373,7 @@ function SignIn({ onError, ...uiProps }) {
   const [loading, setLoading] = react.useState(false);
   const [step, setStep] = react.useState("form");
   const [oauthLoading] = react.useState(null);
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
   const redirectUrl = searchParams.get("redirect");
   async function handleSubmit(e) {
     e.preventDefault();
@@ -1559,7 +1625,7 @@ function SignUp({ onError, ...uiProps }) {
   const [loading, setLoading] = react.useState(false);
   const [step, setStep] = react.useState("form");
   const [oauthLoading] = react.useState(null);
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
   const redirectUrl = searchParams.get("redirect");
   async function handleSubmit(e) {
     e.preventDefault();
@@ -1824,7 +1890,7 @@ function ResetPasswordForm({
 function ForgotPassword({ onError, ...uiProps }) {
   const { sendResetPasswordEmail, exchangeResetPasswordToken, resetPassword } = useInsforge();
   const { authConfig } = usePublicAuthConfig();
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
   const [step, setStep] = react.useState("email");
   const [email, setEmail] = react.useState("");
   const [resetToken, setResetToken] = react.useState("");
@@ -1980,7 +2046,7 @@ function ForgotPassword({ onError, ...uiProps }) {
   );
 }
 function ResetPassword({ onError, ...uiProps }) {
-  const [searchParams] = reactRouterDom.useSearchParams();
+  const searchParams = useSearchParams();
   const token = searchParams.get("token");
   const { resetPassword } = useInsforge();
   const { authConfig } = usePublicAuthConfig();
@@ -2401,41 +2467,6 @@ function useUser() {
   const { user, isLoaded, updateUser, setUser } = useInsforge();
   return { user, isLoaded, updateUser, setUser };
 }
-function RedirectToAuth({
-  baseUrl,
-  path,
-  afterSignInUrl
-}) {
-  react.useEffect(() => {
-    const currentUrl = window.location.origin + afterSignInUrl;
-    const authUrl = new URL(path, baseUrl);
-    authUrl.searchParams.set("redirect", currentUrl);
-    window.location.replace(authUrl.toString());
-  }, [baseUrl, path, afterSignInUrl]);
-  return null;
-}
-function getInsforgeRoutes(config) {
-  const { baseUrl, builtInAuth = true, paths = {}, afterSignInUrl = "/" } = config;
-  const { signIn = "/sign-in", signUp = "/sign-up", forgotPassword = "/forgot-password" } = paths;
-  const routes = [];
-  if (builtInAuth) {
-    routes.push(
-      {
-        path: signIn,
-        element: /* @__PURE__ */ jsxRuntime.jsx(RedirectToAuth, { baseUrl, path: "/auth/sign-in", afterSignInUrl })
-      },
-      {
-        path: signUp,
-        element: /* @__PURE__ */ jsxRuntime.jsx(RedirectToAuth, { baseUrl, path: "/auth/sign-up", afterSignInUrl })
-      },
-      {
-        path: forgotPassword,
-        element: /* @__PURE__ */ jsxRuntime.jsx(RedirectToAuth, { baseUrl, path: "/auth/forgot-password" })
-      }
-    );
-  }
-  return routes;
-}
 
 exports.AuthBranding = AuthBranding;
 exports.AuthContainer = AuthContainer;
@@ -2452,9 +2483,11 @@ exports.AuthPasswordStrengthIndicator = AuthPasswordStrengthIndicator;
 exports.AuthResetPasswordVerificationStep = AuthResetPasswordVerificationStep;
 exports.AuthSubmitButton = AuthSubmitButton;
 exports.AuthVerificationCodeInput = AuthVerificationCodeInput;
+exports.BrowserNavigationAdapter = BrowserNavigationAdapter;
 exports.ForgotPassword = ForgotPassword;
 exports.ForgotPasswordForm = ForgotPasswordForm;
 exports.InsforgeProvider = InsforgeProvider;
+exports.NavigationProvider = NavigationProvider;
 exports.OAUTH_PROVIDER_CONFIG = OAUTH_PROVIDER_CONFIG;
 exports.Protect = Protect;
 exports.ResetPassword = ResetPassword;
@@ -2472,14 +2505,15 @@ exports.checkPasswordStrength = checkPasswordStrength;
 exports.createPasswordSchema = createPasswordSchema;
 exports.emailSchema = emailSchema;
 exports.getAllProviderConfigs = getAllProviderConfigs;
-exports.getInsforgeRoutes = getInsforgeRoutes;
 exports.getProviderConfig = getProviderConfig;
 exports.passwordSchema = passwordSchema;
 exports.resolveAuthPath = resolveAuthPath;
 exports.resolveAuthUrl = resolveAuthUrl;
 exports.useAuth = useAuth;
 exports.useInsforge = useInsforge;
+exports.useNavigationAdapter = useNavigationAdapter;
 exports.usePublicAuthConfig = usePublicAuthConfig;
+exports.useSearchParams = useSearchParams;
 exports.useUser = useUser;
 exports.validateEmail = validateEmail;
 exports.validatePassword = validatePassword;