@insforge/react 0.5.7 → 0.5.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insforge/react",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "type": "module",
   "description": "Framework-agnostic React authentication UI components for Insforge - reusable across all frameworks",
   "main": "./dist/index.cjs",
@@ -47,11 +47,6 @@
       "import": "./dist/navigation.js",
       "require": "./dist/navigation.cjs"
     },
-    "./routes": {
-      "types": "./dist/routes.d.ts",
-      "import": "./dist/routes.js",
-      "require": "./dist/routes.cjs"
-    },
     "./provider": {
       "types": "./dist/provider.d.ts",
       "import": "./dist/provider.js",

package/dist/routes.cjs

@@ -1,132 +0,0 @@
-'use strict';
-
-var react = require('react');
-require('@insforge/sdk');
-var jsxRuntime = require('react/jsx-runtime');
-
-// src/routes/RouteGuard.tsx
-react.createContext(null);
-var InsforgeContext = react.createContext(void 0);
-function useInsforge() {
-  const context = react.useContext(InsforgeContext);
-  if (!context) {
-    return {
-      user: null,
-      isLoaded: false,
-      isSignedIn: false,
-      setUser: () => {
-      },
-      signIn: async () => ({ error: "SSR mode" }),
-      signUp: async () => ({ error: "SSR mode" }),
-      signOut: async () => {
-      },
-      updateUser: async () => ({ error: "SSR mode" }),
-      reloadAuth: async () => ({ success: false, error: "SSR mode" }),
-      sendVerificationEmail: async () => null,
-      sendResetPasswordEmail: async () => null,
-      resetPassword: async () => null,
-      verifyEmail: async () => null,
-      exchangeResetPasswordToken: async () => ({ error: { message: "SSR mode" } }),
-      loginWithOAuth: async () => {
-      },
-      getPublicAuthConfig: async () => null,
-      baseUrl: "",
-      afterSignInUrl: "/"
-    };
-  }
-  return context;
-}
-function RouteGuard({
-  children,
-  builtInAuth = true,
-  paths = {},
-  publicRoutes = [],
-  loadingFallback
-}) {
-  const { isSignedIn, isLoaded, afterSignInUrl, baseUrl } = useInsforge();
-  const { signIn = "/sign-in", signUp = "/sign-up", forgotPassword = "/forgot-password" } = paths;
-  const [currentPath, setCurrentPath] = react.useState("");
-  react.useEffect(() => {
-    const updatePath = () => {
-      const path = window.location.hash ? window.location.hash.slice(1) : window.location.pathname;
-      setCurrentPath(path || "/");
-    };
-    updatePath();
-    window.addEventListener("hashchange", updatePath);
-    window.addEventListener("popstate", updatePath);
-    return () => {
-      window.removeEventListener("hashchange", updatePath);
-      window.removeEventListener("popstate", updatePath);
-    };
-  }, []);
-  const isPublicRoute = publicRoutes.some((route) => {
-    if (route.endsWith("/*")) {
-      const prefix = route.slice(0, -2);
-      return currentPath.startsWith(prefix);
-    }
-    return currentPath === route || currentPath.startsWith(route + "?");
-  });
-  react.useEffect(() => {
-    if (!isLoaded) return;
-    if (isSignedIn) return;
-    if (!isSignedIn) {
-      if (builtInAuth) {
-        const isSignInPage = currentPath === signIn || currentPath.startsWith(signIn + "?");
-        const isSignUpPage = currentPath === signUp || currentPath.startsWith(signUp + "?");
-        const isForgotPasswordPage = currentPath === forgotPassword || currentPath.startsWith(forgotPassword + "?");
-        if (isSignInPage) {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-in", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isSignUpPage) {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-up", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isForgotPasswordPage) {
-          const authUrl = new URL("/auth/forgot-password", baseUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isPublicRoute) {
-          return;
-        } else {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-in", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-        }
-      } else {
-        if (isPublicRoute) {
-          return;
-        } else {
-          window.location.href = signIn + "?redirect=" + afterSignInUrl;
-        }
-      }
-    }
-  }, [
-    isLoaded,
-    isSignedIn,
-    currentPath,
-    isPublicRoute,
-    builtInAuth,
-    baseUrl,
-    signIn,
-    signUp,
-    forgotPassword,
-    afterSignInUrl
-  ]);
-  if (!isLoaded) {
-    return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: loadingFallback });
-  }
-  return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children });
-}
-
-exports.RouteGuard = RouteGuard;
-//# sourceMappingURL=routes.cjs.map
-//# sourceMappingURL=routes.cjs.map

package/dist/routes.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/navigation/NavigationContext.tsx","../src/provider/InsforgeProvider.tsx","../src/routes/RouteGuard.tsx"],"names":["createContext","useContext","useState","useEffect","jsx","Fragment"],"mappings":";;;;;;;AAG0BA,oBAAwC,IAAI;AC6DtE,IAAM,eAAA,GAAkBA,oBAAgD,MAAS,CAAA;AAogB1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,iBAAW,eAAe,CAAA;AAI1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA;AAAA,MACN,QAAA,EAAU,KAAA;AAAA,MACV,UAAA,EAAY,KAAA;AAAA,MACZ,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,SAAS,YAAY;AAAA,MAAC,CAAA;AAAA,MACtB,UAAA,EAAY,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MAC7C,YAAY,aAAa,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,UAAA,EAAW,CAAA;AAAA,MAC7D,uBAAuB,YAAY,IAAA;AAAA,MACnC,wBAAwB,YAAY,IAAA;AAAA,MACpC,eAAe,YAAY,IAAA;AAAA,MAC3B,aAAa,YAAY,IAAA;AAAA,MACzB,4BAA4B,aAAa,EAAE,OAAO,EAAE,OAAA,EAAS,YAAW,EAAE,CAAA;AAAA,MAC1E,gBAAgB,YAAY;AAAA,MAAC,CAAA;AAAA,MAC7B,qBAAqB,YAAY,IAAA;AAAA,MACjC,OAAA,EAAS,EAAA;AAAA,MACT,cAAA,EAAgB;AAAA,KAClB;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;ACjhBO,SAAS,UAAA,CAAW;AAAA,EACzB,QAAA;AAAA,EACA,WAAA,GAAc,IAAA;AAAA,EACd,QAAQ,EAAC;AAAA,EACT,eAAe,EAAC;AAAA,EAChB;AACF,CAAA,EAAoB;AAClB,EAAA,MAAM,EAAE,UAAA,EAAY,QAAA,EAAU,cAAA,EAAgB,OAAA,KAAY,WAAA,EAAY;AAEtE,EAAA,MAAM,EAAE,MAAA,GAAS,UAAA,EAAY,SAAS,UAAA,EAAY,cAAA,GAAiB,oBAAmB,GAAI,KAAA;AAG1F,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIC,eAAS,EAAE,CAAA;AAEjD,EAAAC,gBAAU,MAAM;AACd,IAAA,MAAM,aAAa,MAAM;AAEvB,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,QAAA,CAAS,QAAA;AACpF,MAAA,cAAA,CAAe,QAAQ,GAAG,CAAA;AAAA,IAC5B,CAAA;AAEA,IAAA,UAAA,EAAW;AAGX,IAAA,MAAA,CAAO,gBAAA,CAAiB,cAAc,UAAU,CAAA;AAChD,IAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,UAAU,CAAA;AAE9C,IAAA,OAAO,MAAM;AACX,MAAA,MAAA,CAAO,mBAAA,CAAoB,cAAc,UAAU,CAAA;AACnD,MAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,UAAU,CAAA;AAAA,IACnD,CAAA;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,IAAA,CAAK,CAAC,KAAA,KAAU;AAEjD,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACxB,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChC,MAAA,OAAO,WAAA,CAAY,WAAW,MAAM,CAAA;AAAA,IACtC;AAEA,IAAA,OAAO,WAAA,KAAgB,KAAA,IAAS,WAAA,CAAY,UAAA,CAAW,QAAQ,GAAG,CAAA;AAAA,EACpE,CAAC,CAAA;AAED,EAAAA,gBAAU,MAAM;AAEd,IAAA,IAAI,CAAC,QAAA,EAAU;AAGf,IAAA,IAAI,UAAA,EAAY;AAGhB,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,IAAI,WAAA,EAAa;AAIf,QAAA,MAAM,eAAe,WAAA,KAAgB,MAAA,IAAU,WAAA,CAAY,UAAA,CAAW,SAAS,GAAG,CAAA;AAClF,QAAA,MAAM,eAAe,WAAA,KAAgB,MAAA,IAAU,WAAA,CAAY,UAAA,CAAW,SAAS,GAAG,CAAA;AAClF,QAAA,MAAM,uBACJ,WAAA,KAAgB,cAAA,IAAkB,WAAA,CAAY,UAAA,CAAW,iBAAiB,GAAG,CAAA;AAE/E,QAAA,IAAI,YAAA,EAAc;AAEhB,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,YAAA,EAAc;AAEhB,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,oBAAA,EAAsB;AAExB,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,uBAAA,EAAyB,OAAO,CAAA;AACxD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAAA,QAC5C;AAAA,MACF,CAAA,MAAO;AAEL,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,GAAS,YAAA,GAAe,cAAA;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAA,EAAG;AAAA,IACD,QAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,aAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,uBAAOC,cAAAA,CAAAC,mBAAA,EAAA,EAAG,QAAA,EAAA,eAAA,EAAgB,CAAA;AAAA,EAC5B;AAGA,EAAA,uBAAOD,cAAAA,CAAAC,mBAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"routes.cjs","sourcesContent":["import { createContext, useContext, ReactNode } from 'react';\nimport type { NavigationAdapter } from './types';\n\nconst NavigationContext = createContext<NavigationAdapter | null>(null);\n\nexport interface NavigationProviderProps {\n  adapter: NavigationAdapter;\n  children: ReactNode;\n}\n\n/**\n * Navigation Provider\n * Injects navigation adapter into the component tree\n */\nexport function NavigationProvider({ adapter, children }: NavigationProviderProps) {\n  return <NavigationContext.Provider value={adapter}>{children}</NavigationContext.Provider>;\n}\n\n/**\n * Hook to access navigation adapter\n * @throws Error if used outside NavigationProvider\n */\nexport function useNavigationAdapter(): NavigationAdapter {\n  const adapter = useContext(NavigationContext);\n\n  if (!adapter) {\n    return {\n      useSearchParams: () => new URLSearchParams(),\n      Link: ({ href, children }) => <a href={href}>{children}</a>,\n    };\n  }\n\n  return adapter;\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\nimport { NavigationProvider, BrowserNavigationAdapter } from '../navigation';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<{ error: string } | null>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n  afterSignInUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        return { error: 'No user signed in' };\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n        return null;\n      } else {\n        return { error: result.error?.message || 'Failed to update user' };\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <NavigationProvider adapter={BrowserNavigationAdapter}>\n      <InsforgeContext.Provider\n        value={{\n          user,\n          isLoaded,\n          isSignedIn: !!user,\n          setUser,\n          signIn,\n          signUp,\n          signOut,\n          updateUser,\n          reloadAuth: loadAuthState,\n          sendVerificationEmail,\n          sendResetPasswordEmail,\n          resetPassword,\n          verifyEmail,\n          exchangeResetPasswordToken,\n          getPublicAuthConfig,\n          loginWithOAuth,\n          baseUrl,\n          afterSignInUrl,\n        }}\n      >\n        {children}\n      </InsforgeContext.Provider>\n    </NavigationProvider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n\n  // During SSR in Next.js, context might be undefined temporarily\n  // Return a safe default that won't break SSR rendering\n  if (!context) {\n    return {\n      user: null,\n      isLoaded: false,\n      isSignedIn: false,\n      setUser: () => {},\n      signIn: async () => ({ error: 'SSR mode' }),\n      signUp: async () => ({ error: 'SSR mode' }),\n      signOut: async () => {},\n      updateUser: async () => ({ error: 'SSR mode' }),\n      reloadAuth: async () => ({ success: false, error: 'SSR mode' }),\n      sendVerificationEmail: async () => null,\n      sendResetPasswordEmail: async () => null,\n      resetPassword: async () => null,\n      verifyEmail: async () => null,\n      exchangeResetPasswordToken: async () => ({ error: { message: 'SSR mode' } }),\n      loginWithOAuth: async () => {},\n      getPublicAuthConfig: async () => null,\n      baseUrl: '',\n      afterSignInUrl: '/',\n    } as InsforgeContextValue;\n  }\n\n  return context;\n}\n","import { useEffect, useState, type ReactNode } from 'react';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\nexport interface RouteGuardProps {\n  children: ReactNode;\n\n  /**\n   * Whether to use built-in auth (external deployed Insforge Auth)\n   * - true: redirects to baseUrl/auth/sign-in with redirect param\n   * - false: redirects to paths.signIn (your own login page)\n   * @default true\n   */\n  builtInAuth?: boolean;\n\n  /**\n   * Custom paths for auth pages (only used when builtInAuth is false)\n   * @default { signIn: '/sign-in', signUp: '/sign-up', forgotPassword: '/forgot-password' }\n   */\n  paths?: {\n    signIn?: string;\n    signUp?: string;\n    forgotPassword?: string;\n  };\n\n  /**\n   * List of public routes that don't require authentication\n   * These routes will be accessible even when not signed in\n   *\n   * Note: When builtInAuth=true, you DON'T need to include auth paths here\n   * (e.g., '/sign-in', '/sign-up') as they will be auto-redirected to external auth\n   *\n   * @example ['/', '/about', '/blog/*']\n   */\n  publicRoutes?: string[];\n\n  /**\n   * Loading fallback while checking auth (required)\n   * You must provide a loading component\n   */\n  loadingFallback: ReactNode;\n}\n\n/**\n * Route Guard for React apps\n *\n * Ensures user is authenticated before rendering protected routes.\n *\n * @example\n * ```tsx\n * // Using external built-in auth (deployed Insforge Auth)\n * // User visits /sign-up → redirects to baseUrl/auth/sign-up\n * // User visits /dashboard → redirects to baseUrl/auth/sign-in\n * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>\n *   <RouteGuard\n *     builtInAuth\n *     publicRoutes={['/', '/about']}\n *     loadingFallback={<div>Loading...</div>}\n *   >\n *     <App />\n *   </RouteGuard>\n * </InsforgeProvider>\n * ```\n *\n * @example\n * ```tsx\n * // Using custom login page (@insforge/react components)\n * // User visits /login → renders your <SignIn /> component (must be in publicRoutes)\n * // User visits /dashboard → redirects to /login\n * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>\n *   <RouteGuard\n *     builtInAuth={false}\n *     publicRoutes={['/login', '/register', '/forgot-password', '/']}\n *     paths={{ signIn: '/login', signUp: '/register' }}\n *     loadingFallback={<Spinner />}\n *   >\n *     <App />\n *   </RouteGuard>\n * </InsforgeProvider>\n * ```\n */\nexport function RouteGuard({\n  children,\n  builtInAuth = true,\n  paths = {},\n  publicRoutes = [],\n  loadingFallback,\n}: RouteGuardProps) {\n  const { isSignedIn, isLoaded, afterSignInUrl, baseUrl } = useInsforge();\n\n  const { signIn = '/sign-in', signUp = '/sign-up', forgotPassword = '/forgot-password' } = paths;\n\n  // Track current path (supports both pathname and hash routing)\n  const [currentPath, setCurrentPath] = useState('');\n\n  useEffect(() => {\n    const updatePath = () => {\n      // Support both hash routing (#/path) and pathname routing (/path)\n      const path = window.location.hash ? window.location.hash.slice(1) : window.location.pathname;\n      setCurrentPath(path || '/');\n    };\n\n    updatePath();\n\n    // Listen to both hash and path changes\n    window.addEventListener('hashchange', updatePath);\n    window.addEventListener('popstate', updatePath);\n\n    return () => {\n      window.removeEventListener('hashchange', updatePath);\n      window.removeEventListener('popstate', updatePath);\n    };\n  }, []);\n\n  // Check if current route is public\n  const isPublicRoute = publicRoutes.some((route) => {\n    // Support exact match and wildcard\n    if (route.endsWith('/*')) {\n      const prefix = route.slice(0, -2);\n      return currentPath.startsWith(prefix);\n    }\n    // Exact match or with query params\n    return currentPath === route || currentPath.startsWith(route + '?');\n  });\n\n  useEffect(() => {\n    // Still loading - don't do anything yet\n    if (!isLoaded) return;\n\n    // User is signed in - allow access to everything\n    if (isSignedIn) return;\n\n    // User is NOT signed in - check routing logic\n    if (!isSignedIn) {\n      if (builtInAuth) {\n        // Built-in auth mode: redirect to external auth pages\n\n        // Check if user is trying to access auth pages\n        const isSignInPage = currentPath === signIn || currentPath.startsWith(signIn + '?');\n        const isSignUpPage = currentPath === signUp || currentPath.startsWith(signUp + '?');\n        const isForgotPasswordPage =\n          currentPath === forgotPassword || currentPath.startsWith(forgotPassword + '?');\n\n        if (isSignInPage) {\n          // Redirect to external sign-in\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-in', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        if (isSignUpPage) {\n          // Redirect to external sign-up\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-up', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        if (isForgotPasswordPage) {\n          // Redirect to external forgot-password (no redirect param for password reset)\n          const authUrl = new URL('/auth/forgot-password', baseUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        // Not an auth page - check if it's public or protected\n        if (isPublicRoute) {\n          // Public route - allow access\n          return;\n        } else {\n          // Protected route - redirect to external sign-in\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-in', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n        }\n      } else {\n        // Custom auth mode: redirect to local auth pages\n        if (isPublicRoute) {\n          // Public route (including local auth pages) - allow access\n          return;\n        } else {\n          // Protected route - redirect to local sign-in\n          window.location.href = signIn + '?redirect=' + afterSignInUrl;\n        }\n      }\n    }\n  }, [\n    isLoaded,\n    isSignedIn,\n    currentPath,\n    isPublicRoute,\n    builtInAuth,\n    baseUrl,\n    signIn,\n    signUp,\n    forgotPassword,\n    afterSignInUrl,\n  ]);\n\n  // Show loading state\n  if (!isLoaded) {\n    return <>{loadingFallback}</>;\n  }\n\n  // Render children - either public route or signed in\n  return <>{children}</>;\n}\n"]}

package/dist/routes.d.cts

@@ -1,78 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-
-interface RouteGuardProps {
-    children: ReactNode;
-    /**
-     * Whether to use built-in auth (external deployed Insforge Auth)
-     * - true: redirects to baseUrl/auth/sign-in with redirect param
-     * - false: redirects to paths.signIn (your own login page)
-     * @default true
-     */
-    builtInAuth?: boolean;
-    /**
-     * Custom paths for auth pages (only used when builtInAuth is false)
-     * @default { signIn: '/sign-in', signUp: '/sign-up', forgotPassword: '/forgot-password' }
-     */
-    paths?: {
-        signIn?: string;
-        signUp?: string;
-        forgotPassword?: string;
-    };
-    /**
-     * List of public routes that don't require authentication
-     * These routes will be accessible even when not signed in
-     *
-     * Note: When builtInAuth=true, you DON'T need to include auth paths here
-     * (e.g., '/sign-in', '/sign-up') as they will be auto-redirected to external auth
-     *
-     * @example ['/', '/about', '/blog/*']
-     */
-    publicRoutes?: string[];
-    /**
-     * Loading fallback while checking auth (required)
-     * You must provide a loading component
-     */
-    loadingFallback: ReactNode;
-}
-/**
- * Route Guard for React apps
- *
- * Ensures user is authenticated before rendering protected routes.
- *
- * @example
- * ```tsx
- * // Using external built-in auth (deployed Insforge Auth)
- * // User visits /sign-up → redirects to baseUrl/auth/sign-up
- * // User visits /dashboard → redirects to baseUrl/auth/sign-in
- * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>
- *   <RouteGuard
- *     builtInAuth
- *     publicRoutes={['/', '/about']}
- *     loadingFallback={<div>Loading...</div>}
- *   >
- *     <App />
- *   </RouteGuard>
- * </InsforgeProvider>
- * ```
- *
- * @example
- * ```tsx
- * // Using custom login page (@insforge/react components)
- * // User visits /login → renders your <SignIn /> component (must be in publicRoutes)
- * // User visits /dashboard → redirects to /login
- * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>
- *   <RouteGuard
- *     builtInAuth={false}
- *     publicRoutes={['/login', '/register', '/forgot-password', '/']}
- *     paths={{ signIn: '/login', signUp: '/register' }}
- *     loadingFallback={<Spinner />}
- *   >
- *     <App />
- *   </RouteGuard>
- * </InsforgeProvider>
- * ```
- */
-declare function RouteGuard({ children, builtInAuth, paths, publicRoutes, loadingFallback, }: RouteGuardProps): react_jsx_runtime.JSX.Element;
-
-export { RouteGuard, type RouteGuardProps };

package/dist/routes.d.ts

@@ -1,78 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-
-interface RouteGuardProps {
-    children: ReactNode;
-    /**
-     * Whether to use built-in auth (external deployed Insforge Auth)
-     * - true: redirects to baseUrl/auth/sign-in with redirect param
-     * - false: redirects to paths.signIn (your own login page)
-     * @default true
-     */
-    builtInAuth?: boolean;
-    /**
-     * Custom paths for auth pages (only used when builtInAuth is false)
-     * @default { signIn: '/sign-in', signUp: '/sign-up', forgotPassword: '/forgot-password' }
-     */
-    paths?: {
-        signIn?: string;
-        signUp?: string;
-        forgotPassword?: string;
-    };
-    /**
-     * List of public routes that don't require authentication
-     * These routes will be accessible even when not signed in
-     *
-     * Note: When builtInAuth=true, you DON'T need to include auth paths here
-     * (e.g., '/sign-in', '/sign-up') as they will be auto-redirected to external auth
-     *
-     * @example ['/', '/about', '/blog/*']
-     */
-    publicRoutes?: string[];
-    /**
-     * Loading fallback while checking auth (required)
-     * You must provide a loading component
-     */
-    loadingFallback: ReactNode;
-}
-/**
- * Route Guard for React apps
- *
- * Ensures user is authenticated before rendering protected routes.
- *
- * @example
- * ```tsx
- * // Using external built-in auth (deployed Insforge Auth)
- * // User visits /sign-up → redirects to baseUrl/auth/sign-up
- * // User visits /dashboard → redirects to baseUrl/auth/sign-in
- * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>
- *   <RouteGuard
- *     builtInAuth
- *     publicRoutes={['/', '/about']}
- *     loadingFallback={<div>Loading...</div>}
- *   >
- *     <App />
- *   </RouteGuard>
- * </InsforgeProvider>
- * ```
- *
- * @example
- * ```tsx
- * // Using custom login page (@insforge/react components)
- * // User visits /login → renders your <SignIn /> component (must be in publicRoutes)
- * // User visits /dashboard → redirects to /login
- * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>
- *   <RouteGuard
- *     builtInAuth={false}
- *     publicRoutes={['/login', '/register', '/forgot-password', '/']}
- *     paths={{ signIn: '/login', signUp: '/register' }}
- *     loadingFallback={<Spinner />}
- *   >
- *     <App />
- *   </RouteGuard>
- * </InsforgeProvider>
- * ```
- */
-declare function RouteGuard({ children, builtInAuth, paths, publicRoutes, loadingFallback, }: RouteGuardProps): react_jsx_runtime.JSX.Element;
-
-export { RouteGuard, type RouteGuardProps };

package/dist/routes.js

@@ -1,130 +0,0 @@
-import { createContext, useState, useEffect, useContext } from 'react';
-import '@insforge/sdk';
-import { jsx, Fragment } from 'react/jsx-runtime';
-
-// src/routes/RouteGuard.tsx
-createContext(null);
-var InsforgeContext = createContext(void 0);
-function useInsforge() {
-  const context = useContext(InsforgeContext);
-  if (!context) {
-    return {
-      user: null,
-      isLoaded: false,
-      isSignedIn: false,
-      setUser: () => {
-      },
-      signIn: async () => ({ error: "SSR mode" }),
-      signUp: async () => ({ error: "SSR mode" }),
-      signOut: async () => {
-      },
-      updateUser: async () => ({ error: "SSR mode" }),
-      reloadAuth: async () => ({ success: false, error: "SSR mode" }),
-      sendVerificationEmail: async () => null,
-      sendResetPasswordEmail: async () => null,
-      resetPassword: async () => null,
-      verifyEmail: async () => null,
-      exchangeResetPasswordToken: async () => ({ error: { message: "SSR mode" } }),
-      loginWithOAuth: async () => {
-      },
-      getPublicAuthConfig: async () => null,
-      baseUrl: "",
-      afterSignInUrl: "/"
-    };
-  }
-  return context;
-}
-function RouteGuard({
-  children,
-  builtInAuth = true,
-  paths = {},
-  publicRoutes = [],
-  loadingFallback
-}) {
-  const { isSignedIn, isLoaded, afterSignInUrl, baseUrl } = useInsforge();
-  const { signIn = "/sign-in", signUp = "/sign-up", forgotPassword = "/forgot-password" } = paths;
-  const [currentPath, setCurrentPath] = useState("");
-  useEffect(() => {
-    const updatePath = () => {
-      const path = window.location.hash ? window.location.hash.slice(1) : window.location.pathname;
-      setCurrentPath(path || "/");
-    };
-    updatePath();
-    window.addEventListener("hashchange", updatePath);
-    window.addEventListener("popstate", updatePath);
-    return () => {
-      window.removeEventListener("hashchange", updatePath);
-      window.removeEventListener("popstate", updatePath);
-    };
-  }, []);
-  const isPublicRoute = publicRoutes.some((route) => {
-    if (route.endsWith("/*")) {
-      const prefix = route.slice(0, -2);
-      return currentPath.startsWith(prefix);
-    }
-    return currentPath === route || currentPath.startsWith(route + "?");
-  });
-  useEffect(() => {
-    if (!isLoaded) return;
-    if (isSignedIn) return;
-    if (!isSignedIn) {
-      if (builtInAuth) {
-        const isSignInPage = currentPath === signIn || currentPath.startsWith(signIn + "?");
-        const isSignUpPage = currentPath === signUp || currentPath.startsWith(signUp + "?");
-        const isForgotPasswordPage = currentPath === forgotPassword || currentPath.startsWith(forgotPassword + "?");
-        if (isSignInPage) {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-in", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isSignUpPage) {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-up", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isForgotPasswordPage) {
-          const authUrl = new URL("/auth/forgot-password", baseUrl);
-          window.location.replace(authUrl.toString());
-          return;
-        }
-        if (isPublicRoute) {
-          return;
-        } else {
-          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;
-          const authUrl = new URL("/auth/sign-in", baseUrl);
-          authUrl.searchParams.set("redirect", redirectUrl);
-          window.location.replace(authUrl.toString());
-        }
-      } else {
-        if (isPublicRoute) {
-          return;
-        } else {
-          window.location.href = signIn + "?redirect=" + afterSignInUrl;
-        }
-      }
-    }
-  }, [
-    isLoaded,
-    isSignedIn,
-    currentPath,
-    isPublicRoute,
-    builtInAuth,
-    baseUrl,
-    signIn,
-    signUp,
-    forgotPassword,
-    afterSignInUrl
-  ]);
-  if (!isLoaded) {
-    return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback });
-  }
-  return /* @__PURE__ */ jsx(Fragment, { children });
-}
-
-export { RouteGuard };
-//# sourceMappingURL=routes.js.map
-//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/navigation/NavigationContext.tsx","../src/provider/InsforgeProvider.tsx","../src/routes/RouteGuard.tsx"],"names":["createContext","useContext","useState","useEffect","jsx"],"mappings":";;;;;AAG0B,cAAwC,IAAI;AC6DtE,IAAM,eAAA,GAAkBA,cAAgD,MAAS,CAAA;AAogB1E,SAAS,WAAA,GAAoC;AAClD,EAAA,MAAM,OAAA,GAAUC,WAAW,eAAe,CAAA;AAI1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA;AAAA,MACN,QAAA,EAAU,KAAA;AAAA,MACV,UAAA,EAAY,KAAA;AAAA,MACZ,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,MAAA,EAAQ,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MACzC,SAAS,YAAY;AAAA,MAAC,CAAA;AAAA,MACtB,UAAA,EAAY,aAAa,EAAE,KAAA,EAAO,UAAA,EAAW,CAAA;AAAA,MAC7C,YAAY,aAAa,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,UAAA,EAAW,CAAA;AAAA,MAC7D,uBAAuB,YAAY,IAAA;AAAA,MACnC,wBAAwB,YAAY,IAAA;AAAA,MACpC,eAAe,YAAY,IAAA;AAAA,MAC3B,aAAa,YAAY,IAAA;AAAA,MACzB,4BAA4B,aAAa,EAAE,OAAO,EAAE,OAAA,EAAS,YAAW,EAAE,CAAA;AAAA,MAC1E,gBAAgB,YAAY;AAAA,MAAC,CAAA;AAAA,MAC7B,qBAAqB,YAAY,IAAA;AAAA,MACjC,OAAA,EAAS,EAAA;AAAA,MACT,cAAA,EAAgB;AAAA,KAClB;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;ACjhBO,SAAS,UAAA,CAAW;AAAA,EACzB,QAAA;AAAA,EACA,WAAA,GAAc,IAAA;AAAA,EACd,QAAQ,EAAC;AAAA,EACT,eAAe,EAAC;AAAA,EAChB;AACF,CAAA,EAAoB;AAClB,EAAA,MAAM,EAAE,UAAA,EAAY,QAAA,EAAU,cAAA,EAAgB,OAAA,KAAY,WAAA,EAAY;AAEtE,EAAA,MAAM,EAAE,MAAA,GAAS,UAAA,EAAY,SAAS,UAAA,EAAY,cAAA,GAAiB,oBAAmB,GAAI,KAAA;AAG1F,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIC,SAAS,EAAE,CAAA;AAEjD,EAAAC,UAAU,MAAM;AACd,IAAA,MAAM,aAAa,MAAM;AAEvB,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,QAAA,CAAS,QAAA;AACpF,MAAA,cAAA,CAAe,QAAQ,GAAG,CAAA;AAAA,IAC5B,CAAA;AAEA,IAAA,UAAA,EAAW;AAGX,IAAA,MAAA,CAAO,gBAAA,CAAiB,cAAc,UAAU,CAAA;AAChD,IAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,UAAU,CAAA;AAE9C,IAAA,OAAO,MAAM;AACX,MAAA,MAAA,CAAO,mBAAA,CAAoB,cAAc,UAAU,CAAA;AACnD,MAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,UAAU,CAAA;AAAA,IACnD,CAAA;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,IAAA,CAAK,CAAC,KAAA,KAAU;AAEjD,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACxB,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChC,MAAA,OAAO,WAAA,CAAY,WAAW,MAAM,CAAA;AAAA,IACtC;AAEA,IAAA,OAAO,WAAA,KAAgB,KAAA,IAAS,WAAA,CAAY,UAAA,CAAW,QAAQ,GAAG,CAAA;AAAA,EACpE,CAAC,CAAA;AAED,EAAAA,UAAU,MAAM;AAEd,IAAA,IAAI,CAAC,QAAA,EAAU;AAGf,IAAA,IAAI,UAAA,EAAY;AAGhB,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,IAAI,WAAA,EAAa;AAIf,QAAA,MAAM,eAAe,WAAA,KAAgB,MAAA,IAAU,WAAA,CAAY,UAAA,CAAW,SAAS,GAAG,CAAA;AAClF,QAAA,MAAM,eAAe,WAAA,KAAgB,MAAA,IAAU,WAAA,CAAY,UAAA,CAAW,SAAS,GAAG,CAAA;AAClF,QAAA,MAAM,uBACJ,WAAA,KAAgB,cAAA,IAAkB,WAAA,CAAY,UAAA,CAAW,iBAAiB,GAAG,CAAA;AAE/E,QAAA,IAAI,YAAA,EAAc;AAEhB,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,YAAA,EAAc;AAEhB,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,oBAAA,EAAsB;AAExB,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,uBAAA,EAAyB,OAAO,CAAA;AACxD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAC1C,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,MAAM,cAAc,IAAI,GAAA,CAAI,gBAAgB,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AACpE,UAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,CAAA;AAChD,UAAA,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,WAAW,CAAA;AAChD,UAAA,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,QAAA,EAAU,CAAA;AAAA,QAC5C;AAAA,MACF,CAAA,MAAO;AAEL,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,GAAS,YAAA,GAAe,cAAA;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAA,EAAG;AAAA,IACD,QAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,aAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,uBAAOC,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAA,eAAA,EAAgB,CAAA;AAAA,EAC5B;AAGA,EAAA,uBAAOA,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"routes.js","sourcesContent":["import { createContext, useContext, ReactNode } from 'react';\nimport type { NavigationAdapter } from './types';\n\nconst NavigationContext = createContext<NavigationAdapter | null>(null);\n\nexport interface NavigationProviderProps {\n  adapter: NavigationAdapter;\n  children: ReactNode;\n}\n\n/**\n * Navigation Provider\n * Injects navigation adapter into the component tree\n */\nexport function NavigationProvider({ adapter, children }: NavigationProviderProps) {\n  return <NavigationContext.Provider value={adapter}>{children}</NavigationContext.Provider>;\n}\n\n/**\n * Hook to access navigation adapter\n * @throws Error if used outside NavigationProvider\n */\nexport function useNavigationAdapter(): NavigationAdapter {\n  const adapter = useContext(NavigationContext);\n\n  if (!adapter) {\n    return {\n      useSearchParams: () => new URLSearchParams(),\n      Link: ({ href, children }) => <a href={href}>{children}</a>,\n    };\n  }\n\n  return adapter;\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useState,\n  useCallback,\n  useRef,\n  type ReactNode,\n} from 'react';\nimport { UserSchema, createClient } from '@insforge/sdk';\nimport type { InsforgeUser, OAuthProvider } from '../types';\nimport {\n  CreateSessionResponse,\n  CreateUserResponse,\n  GetPublicAuthConfigResponse,\n  ResetPasswordResponse,\n} from '@insforge/shared-schemas';\nimport { NavigationProvider, BrowserNavigationAdapter } from '../navigation';\n\ninterface InsforgeContextValue {\n  // Auth state\n  user: InsforgeUser | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n\n  // Auth methods\n  setUser: (user: InsforgeUser | null) => void;\n  signIn: (\n    email: string,\n    password: string\n  ) => Promise<CreateSessionResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signUp: (\n    email: string,\n    password: string\n  ) => Promise<CreateUserResponse | { error: string; statusCode?: number; errorCode?: string }>;\n  signOut: () => Promise<void>;\n  updateUser: (data: Partial<InsforgeUser>) => Promise<{ error: string } | null>;\n  reloadAuth: () => Promise<{ success: boolean; error?: string }>;\n\n  // Email verification methods\n  sendVerificationEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  sendResetPasswordEmail: (email: string) => Promise<{ success: boolean; message: string } | null>;\n  resetPassword: (token: string, newPassword: string) => Promise<ResetPasswordResponse | null>;\n  verifyEmail: (\n    otp: string,\n    email?: string\n  ) => Promise<{\n    accessToken: string;\n    user?: UserSchema;\n    redirectTo?: string;\n    error?: { message: string };\n  } | null>;\n  exchangeResetPasswordToken: (\n    email: string,\n    code: string\n  ) => Promise<{ token: string; expiresAt?: string } | { error: { message: string } }>;\n  loginWithOAuth: (provider: OAuthProvider, redirectTo: string) => Promise<void>;\n  // Public auth config\n  getPublicAuthConfig: () => Promise<GetPublicAuthConfigResponse | null>;\n  // Base config\n  baseUrl: string;\n  afterSignInUrl: string;\n}\n\nconst InsforgeContext = createContext<InsforgeContextValue | undefined>(undefined);\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n/**\n * Unified Insforge Provider - manages authentication state and configuration\n *\n * Manages user authentication state and provides all necessary context to child components.\n * Works with any React framework (Next.js, Vite, Remix, etc.).\n *\n * @example\n * ```tsx\n * // Basic usage (React/Vite)\n * import { InsforgeProvider } from '@insforge/react';\n *\n * export default function App() {\n *   return (\n *     <InsforgeProvider\n *       baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n *\n * @example\n * ```tsx\n * // With cookie sync (Next.js optimization)\n * <InsforgeProvider\n *   baseUrl={baseUrl}\n *   onSignIn={async (authToken) => {\n *     await signIn(authToken);\n *   }}\n *   onSignOut={async () => {\n *     await signOut();\n *   }}\n * >\n *   {children}\n * </InsforgeProvider>\n * ```\n */\nexport function InsforgeProvider({\n  children,\n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n  onSignIn,\n  onSignOut,\n}: InsforgeProviderProps) {\n  // Auth state\n  const [user, setUser] = useState<InsforgeUser | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const hasProcessedCallbackRef = useRef(false);\n\n  // Initialize SDK client with lazy initialization - only runs once\n  const [insforge] = useState(() => createClient({ baseUrl }));\n\n  // Load auth state - returns explicit success/error status\n  const loadAuthState = useCallback(async (): Promise<{\n    success: boolean;\n    error?: string;\n  }> => {\n    try {\n      // Use SDK's getCurrentSession() to check for existing session\n      const sessionResult = insforge.auth.getCurrentSession();\n      const session = sessionResult.data?.session;\n      const token = session?.accessToken || null;\n\n      if (!token) {\n        // No token, user is not authenticated\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'no_session' };\n      }\n\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        // Token is valid, update user state with fresh data\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n        setIsLoaded(true);\n        return { success: true };\n      } else {\n        // Token invalid or expired\n        await insforge.auth.signOut();\n\n        // Clear cookie if function provided\n        if (onSignOut) {\n          try {\n            await onSignOut();\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n            }\n          }\n        }\n\n        setUser(null);\n        if (onAuthChange) {\n          onAuthChange(null);\n        }\n        setIsLoaded(true);\n        return { success: false, error: 'invalid_token' };\n      }\n    } catch (error) {\n      // Token validation failed\n      console.error('[InsforgeProvider] Token validation failed:', error);\n\n      await insforge.auth.signOut();\n\n      // Clear cookie if function provided\n      if (onSignOut) {\n        try {\n          await onSignOut();\n        } catch (error: unknown) {\n          if (error instanceof Error) {\n            console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n          }\n        }\n      }\n\n      setUser(null);\n      if (onAuthChange) {\n        onAuthChange(null);\n      }\n      setIsLoaded(true);\n\n      return {\n        success: false,\n        error: error instanceof Error ? error.message : 'Authentication failed',\n      };\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  useEffect(() => {\n    // Run loadAuthState only once on mount\n    loadAuthState();\n\n    // Capture the ref value when effect runs\n    const intervalId = refreshIntervalRef.current;\n\n    return () => {\n      // Use the captured value in cleanup\n      if (intervalId) {\n        clearInterval(intervalId);\n      }\n    };\n  }, [loadAuthState]);\n\n  // Handle authentication callback from URL\n  useEffect(() => {\n    // Only run once and only after auth is loaded\n    if (!isLoaded || hasProcessedCallbackRef.current) {\n      return;\n    }\n\n    const searchParams = new URLSearchParams(window.location.search);\n    const accessToken = searchParams.get('access_token');\n\n    if (accessToken && !!user) {\n      // Mark as processed\n      hasProcessedCallbackRef.current = true;\n\n      // Clean URL by removing query parameters\n      const url = new URL(window.location.href);\n      url.search = '';\n      window.history.replaceState({}, '', url.toString());\n\n      // Redirect to afterSignInUrl\n      setTimeout(() => {\n        window.location.href = afterSignInUrl;\n      }, 100);\n    }\n  }, [isLoaded, user, afterSignInUrl]);\n\n  const getPublicAuthConfig = useCallback(async () => {\n    try {\n      const result = await insforge.auth.getPublicAuthConfig();\n      if (result.data) {\n        return result.data;\n      } else {\n        console.error('[InsforgeProvider] Failed to get public auth config:', result.error);\n        return null;\n      }\n    } catch (error) {\n      console.error('[InsforgeProvider] Failed to get public auth config:', error);\n      return null;\n    }\n  }, [insforge]);\n\n  /**\n   * Helper function to handle successful authentication\n   */\n  const handleAuthSuccess = useCallback(\n    async (authToken: string, fallbackUser?: { id?: string; email?: string; name?: string }) => {\n      const userResult = await insforge.auth.getCurrentUser();\n\n      if (userResult.data) {\n        const profile = userResult.data.profile;\n        const userData: InsforgeUser = {\n          id: userResult.data.user.id,\n          email: userResult.data.user.email,\n          name: (profile?.nickname as string | undefined) || '',\n          avatarUrl: (profile?.avatarUrl as string | undefined) || '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n\n        // Try to sync token to cookie if function provided\n        if (onSignIn) {\n          try {\n            await onSignIn(authToken);\n          } catch (error: unknown) {\n            if (error instanceof Error) {\n              console.error('[InsforgeProvider] Error syncing token to cookie:', error.message);\n            }\n          }\n        }\n      } else if (fallbackUser) {\n        // Fallback to basic user data if getCurrentUser fails\n        const userData: InsforgeUser = {\n          id: fallbackUser.id || '',\n          email: fallbackUser.email || '',\n          name: fallbackUser.name || '',\n          avatarUrl: '',\n        };\n\n        setUser(userData);\n\n        if (onAuthChange) {\n          onAuthChange(userData);\n        }\n      }\n    },\n    [insforge, onAuthChange, onSignIn]\n  );\n\n  const signIn = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signInWithPassword({\n        email,\n        password,\n      });\n\n      if (sdkResult.data) {\n        await handleAuthSuccess(\n          sdkResult.data.accessToken || '',\n          sdkResult.data.user\n            ? {\n                id: sdkResult.data.user.id,\n                email: sdkResult.data.user.email,\n                name: sdkResult.data.user.name,\n              }\n            : undefined\n        );\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Invalid email or password',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signUp = useCallback(\n    async (email: string, password: string) => {\n      const sdkResult = await insforge.auth.signUp({ email, password });\n\n      if (sdkResult.data) {\n        // Only set auth state if we got a token back (email verification might be required)\n        if (sdkResult.data.accessToken) {\n          await handleAuthSuccess(\n            sdkResult.data.accessToken,\n            sdkResult.data.user\n              ? {\n                  id: sdkResult.data.user.id,\n                  email: sdkResult.data.user.email,\n                  name: sdkResult.data.user.name,\n                }\n              : undefined\n          );\n        }\n        return sdkResult.data;\n      } else {\n        // Return the full error object to preserve statusCode and other properties\n        return {\n          error: sdkResult.error?.message || 'Sign up failed',\n          statusCode: sdkResult.error?.statusCode,\n          errorCode: sdkResult.error?.error,\n        };\n      }\n    },\n    [insforge, handleAuthSuccess]\n  );\n\n  const signOut = useCallback(async () => {\n    await insforge.auth.signOut();\n\n    // Clear cookie if function provided\n    if (onSignOut) {\n      try {\n        await onSignOut();\n      } catch (error: unknown) {\n        if (error instanceof Error) {\n          console.error('[InsforgeProvider] Error clearing cookie:', error.message);\n        }\n      }\n    }\n\n    // Clear refresh interval if exists\n    if (refreshIntervalRef.current) {\n      clearInterval(refreshIntervalRef.current);\n    }\n\n    setUser(null);\n    if (onAuthChange) {\n      onAuthChange(null);\n    }\n  }, [insforge, onAuthChange, onSignOut]);\n\n  const updateUser = useCallback(\n    async (data: Partial<InsforgeUser>) => {\n      if (!user) {\n        return { error: 'No user signed in' };\n      }\n\n      const profileUpdate: Record<string, string | undefined> = {\n        nickname: data.name,\n        avatarUrl: data.avatarUrl,\n      };\n\n      const result = await insforge.auth.setProfile(profileUpdate);\n\n      if (result.data) {\n        const userResult = await insforge.auth.getCurrentUser();\n        if (userResult.data) {\n          const profile = userResult.data.profile;\n          const updatedUser: InsforgeUser = {\n            id: userResult.data.user.id,\n            email: userResult.data.user.email,\n            name: profile?.nickname || '',\n            avatarUrl: profile?.avatarUrl || '',\n          };\n          setUser(updatedUser);\n          if (onAuthChange) {\n            onAuthChange(updatedUser);\n          }\n        }\n        return null;\n      } else {\n        return { error: result.error?.message || 'Failed to update user' };\n      }\n    },\n    [user, onAuthChange, insforge]\n  );\n\n  const sendVerificationEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendVerificationEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const sendResetPasswordEmail = useCallback(\n    async (email: string) => {\n      const sdkResult = await insforge.auth.sendResetPasswordEmail({ email });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const resetPassword = useCallback(\n    async (token: string, newPassword: string) => {\n      const sdkResult = await insforge.auth.resetPassword({\n        newPassword,\n        otp: token,\n      });\n      return sdkResult.data;\n    },\n    [insforge]\n  );\n\n  const verifyEmail = useCallback(\n    async (otp: string, email?: string) => {\n      const sdkResult = await insforge.auth.verifyEmail({ otp, email: email || undefined });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          accessToken: '',\n          error: {\n            message: sdkResult.error?.message || 'Email verification failed',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const exchangeResetPasswordToken = useCallback(\n    async (email: string, code: string) => {\n      const sdkResult = await insforge.auth.exchangeResetPasswordToken({ email, code });\n      if (sdkResult.data) {\n        return sdkResult.data;\n      } else {\n        return {\n          error: {\n            message: sdkResult.error?.message || 'Failed to exchange reset password token',\n          },\n        };\n      }\n    },\n    [insforge]\n  );\n\n  const loginWithOAuth = useCallback(\n    async (provider: OAuthProvider, redirectTo: string) => {\n      const sdkResult = await insforge.auth.signInWithOAuth({\n        provider,\n        redirectTo: redirectTo || window.location.origin + afterSignInUrl,\n      });\n      if (sdkResult.error) {\n        throw new Error(sdkResult.error.message);\n      }\n    },\n    [insforge, afterSignInUrl]\n  );\n\n  return (\n    <NavigationProvider adapter={BrowserNavigationAdapter}>\n      <InsforgeContext.Provider\n        value={{\n          user,\n          isLoaded,\n          isSignedIn: !!user,\n          setUser,\n          signIn,\n          signUp,\n          signOut,\n          updateUser,\n          reloadAuth: loadAuthState,\n          sendVerificationEmail,\n          sendResetPasswordEmail,\n          resetPassword,\n          verifyEmail,\n          exchangeResetPasswordToken,\n          getPublicAuthConfig,\n          loginWithOAuth,\n          baseUrl,\n          afterSignInUrl,\n        }}\n      >\n        {children}\n      </InsforgeContext.Provider>\n    </NavigationProvider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *\n *   if (!isSignedIn) return <SignIn />;\n *\n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useInsforge(): InsforgeContextValue {\n  const context = useContext(InsforgeContext);\n\n  // During SSR in Next.js, context might be undefined temporarily\n  // Return a safe default that won't break SSR rendering\n  if (!context) {\n    return {\n      user: null,\n      isLoaded: false,\n      isSignedIn: false,\n      setUser: () => {},\n      signIn: async () => ({ error: 'SSR mode' }),\n      signUp: async () => ({ error: 'SSR mode' }),\n      signOut: async () => {},\n      updateUser: async () => ({ error: 'SSR mode' }),\n      reloadAuth: async () => ({ success: false, error: 'SSR mode' }),\n      sendVerificationEmail: async () => null,\n      sendResetPasswordEmail: async () => null,\n      resetPassword: async () => null,\n      verifyEmail: async () => null,\n      exchangeResetPasswordToken: async () => ({ error: { message: 'SSR mode' } }),\n      loginWithOAuth: async () => {},\n      getPublicAuthConfig: async () => null,\n      baseUrl: '',\n      afterSignInUrl: '/',\n    } as InsforgeContextValue;\n  }\n\n  return context;\n}\n","import { useEffect, useState, type ReactNode } from 'react';\nimport { useInsforge } from '../provider/InsforgeProvider';\n\nexport interface RouteGuardProps {\n  children: ReactNode;\n\n  /**\n   * Whether to use built-in auth (external deployed Insforge Auth)\n   * - true: redirects to baseUrl/auth/sign-in with redirect param\n   * - false: redirects to paths.signIn (your own login page)\n   * @default true\n   */\n  builtInAuth?: boolean;\n\n  /**\n   * Custom paths for auth pages (only used when builtInAuth is false)\n   * @default { signIn: '/sign-in', signUp: '/sign-up', forgotPassword: '/forgot-password' }\n   */\n  paths?: {\n    signIn?: string;\n    signUp?: string;\n    forgotPassword?: string;\n  };\n\n  /**\n   * List of public routes that don't require authentication\n   * These routes will be accessible even when not signed in\n   *\n   * Note: When builtInAuth=true, you DON'T need to include auth paths here\n   * (e.g., '/sign-in', '/sign-up') as they will be auto-redirected to external auth\n   *\n   * @example ['/', '/about', '/blog/*']\n   */\n  publicRoutes?: string[];\n\n  /**\n   * Loading fallback while checking auth (required)\n   * You must provide a loading component\n   */\n  loadingFallback: ReactNode;\n}\n\n/**\n * Route Guard for React apps\n *\n * Ensures user is authenticated before rendering protected routes.\n *\n * @example\n * ```tsx\n * // Using external built-in auth (deployed Insforge Auth)\n * // User visits /sign-up → redirects to baseUrl/auth/sign-up\n * // User visits /dashboard → redirects to baseUrl/auth/sign-in\n * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>\n *   <RouteGuard\n *     builtInAuth\n *     publicRoutes={['/', '/about']}\n *     loadingFallback={<div>Loading...</div>}\n *   >\n *     <App />\n *   </RouteGuard>\n * </InsforgeProvider>\n * ```\n *\n * @example\n * ```tsx\n * // Using custom login page (@insforge/react components)\n * // User visits /login → renders your <SignIn /> component (must be in publicRoutes)\n * // User visits /dashboard → redirects to /login\n * <InsforgeProvider baseUrl={import.meta.env.VITE_INSFORGE_BASE_URL}>\n *   <RouteGuard\n *     builtInAuth={false}\n *     publicRoutes={['/login', '/register', '/forgot-password', '/']}\n *     paths={{ signIn: '/login', signUp: '/register' }}\n *     loadingFallback={<Spinner />}\n *   >\n *     <App />\n *   </RouteGuard>\n * </InsforgeProvider>\n * ```\n */\nexport function RouteGuard({\n  children,\n  builtInAuth = true,\n  paths = {},\n  publicRoutes = [],\n  loadingFallback,\n}: RouteGuardProps) {\n  const { isSignedIn, isLoaded, afterSignInUrl, baseUrl } = useInsforge();\n\n  const { signIn = '/sign-in', signUp = '/sign-up', forgotPassword = '/forgot-password' } = paths;\n\n  // Track current path (supports both pathname and hash routing)\n  const [currentPath, setCurrentPath] = useState('');\n\n  useEffect(() => {\n    const updatePath = () => {\n      // Support both hash routing (#/path) and pathname routing (/path)\n      const path = window.location.hash ? window.location.hash.slice(1) : window.location.pathname;\n      setCurrentPath(path || '/');\n    };\n\n    updatePath();\n\n    // Listen to both hash and path changes\n    window.addEventListener('hashchange', updatePath);\n    window.addEventListener('popstate', updatePath);\n\n    return () => {\n      window.removeEventListener('hashchange', updatePath);\n      window.removeEventListener('popstate', updatePath);\n    };\n  }, []);\n\n  // Check if current route is public\n  const isPublicRoute = publicRoutes.some((route) => {\n    // Support exact match and wildcard\n    if (route.endsWith('/*')) {\n      const prefix = route.slice(0, -2);\n      return currentPath.startsWith(prefix);\n    }\n    // Exact match or with query params\n    return currentPath === route || currentPath.startsWith(route + '?');\n  });\n\n  useEffect(() => {\n    // Still loading - don't do anything yet\n    if (!isLoaded) return;\n\n    // User is signed in - allow access to everything\n    if (isSignedIn) return;\n\n    // User is NOT signed in - check routing logic\n    if (!isSignedIn) {\n      if (builtInAuth) {\n        // Built-in auth mode: redirect to external auth pages\n\n        // Check if user is trying to access auth pages\n        const isSignInPage = currentPath === signIn || currentPath.startsWith(signIn + '?');\n        const isSignUpPage = currentPath === signUp || currentPath.startsWith(signUp + '?');\n        const isForgotPasswordPage =\n          currentPath === forgotPassword || currentPath.startsWith(forgotPassword + '?');\n\n        if (isSignInPage) {\n          // Redirect to external sign-in\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-in', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        if (isSignUpPage) {\n          // Redirect to external sign-up\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-up', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        if (isForgotPasswordPage) {\n          // Redirect to external forgot-password (no redirect param for password reset)\n          const authUrl = new URL('/auth/forgot-password', baseUrl);\n          window.location.replace(authUrl.toString());\n          return;\n        }\n\n        // Not an auth page - check if it's public or protected\n        if (isPublicRoute) {\n          // Public route - allow access\n          return;\n        } else {\n          // Protected route - redirect to external sign-in\n          const redirectUrl = new URL(afterSignInUrl, window.location.origin).href;\n          const authUrl = new URL('/auth/sign-in', baseUrl);\n          authUrl.searchParams.set('redirect', redirectUrl);\n          window.location.replace(authUrl.toString());\n        }\n      } else {\n        // Custom auth mode: redirect to local auth pages\n        if (isPublicRoute) {\n          // Public route (including local auth pages) - allow access\n          return;\n        } else {\n          // Protected route - redirect to local sign-in\n          window.location.href = signIn + '?redirect=' + afterSignInUrl;\n        }\n      }\n    }\n  }, [\n    isLoaded,\n    isSignedIn,\n    currentPath,\n    isPublicRoute,\n    builtInAuth,\n    baseUrl,\n    signIn,\n    signUp,\n    forgotPassword,\n    afterSignInUrl,\n  ]);\n\n  // Show loading state\n  if (!isLoaded) {\n    return <>{loadingFallback}</>;\n  }\n\n  // Render children - either public route or signed in\n  return <>{children}</>;\n}\n"]}