@insforge/react 1.1.5 → 1.1.6-test.0

package/dist/lib.cjs

@@ -97,9 +97,39 @@ function resolveAuthUrl(targetPath, searchParams) {
   return `${resolvedPath}?${searchParams.toString()}`;
 }
 
+// src/lib/hosted-auth.ts
+function isHostedAuthEnvironment() {
+  if (typeof window === "undefined") {
+    return false;
+  }
+  const { hostname, port, protocol } = window.location;
+  if (hostname === "localhost" && port === "7130") {
+    return true;
+  }
+  if (protocol === "https:" && hostname.endsWith(".insforge.app")) {
+    return true;
+  }
+  return false;
+}
+function buildLegacyAuthUrl(redirectUrl, session) {
+  const url = new URL(redirectUrl);
+  url.searchParams.set("access_token", session.accessToken);
+  url.searchParams.set("user_id", session.userId);
+  url.searchParams.set("email", session.email);
+  if (session.name) {
+    url.searchParams.set("name", session.name);
+  }
+  if (session.csrfToken) {
+    url.searchParams.set("csrf_token", session.csrfToken);
+  }
+  return url.toString();
+}
+
+exports.buildLegacyAuthUrl = buildLegacyAuthUrl;
 exports.checkPasswordStrength = checkPasswordStrength;
 exports.createPasswordSchema = createPasswordSchema;
 exports.emailSchema = emailSchema;
+exports.isHostedAuthEnvironment = isHostedAuthEnvironment;
 exports.passwordSchema = passwordSchema;
 exports.resolveAuthPath = resolveAuthPath;
 exports.resolveAuthUrl = resolveAuthUrl;

package/dist/lib.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/validation.ts","../src/lib/path-utils.ts"],"names":["z"],"mappings":";;;;;AAKO,IAAM,WAAA,GAAcA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,mBAAmB,CAAA,CAAE,KAAA,CAAM,uBAAuB;AAKxF,SAAS,qBAAqB,OAAA,EAMlC;AACD,EAAA,MAAM;AAAA,IACJ,SAAA,GAAY,CAAA;AAAA,IACZ,gBAAA,GAAmB,KAAA;AAAA,IACnB,gBAAA,GAAmB,KAAA;AAAA,IACnB,aAAA,GAAgB,KAAA;AAAA,IAChB,kBAAA,GAAqB;AAAA,GACvB,GAAI,WAAW,EAAC;AAEhB,EAAA,IAAI,MAAA,GAASA,MAAE,MAAA,EAAO,CAAE,IAAI,SAAA,EAAW,CAAA,0BAAA,EAA6B,SAAS,CAAA,WAAA,CAAa,CAAA;AAE1F,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,IAAA,EAAM,2CAA2C,CAAA;AAAA,EACzE;AAEA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA;AAAA,MACd,qCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAKO,IAAM,iBAAiB,oBAAA;AAKvB,SAAS,cAAc,KAAA,EAAmD;AAC/E,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AAC1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,gBAAA,CACd,UACA,OAAA,EACoC;AACpC,EAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,sBAAsB,QAAA,EAGpC;AACA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAA,CAAS,UAAU,EAAA,EAAI;AACzB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX;AAEA,EAAA,IAAI,QAAQ,IAAA,CAAK,QAAQ,KAAK,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACpD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,0CAA0C,CAAA;AAAA,EAC1D;AAEA,EAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,6BAA6B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,QAAQ,CAAA,EAAG;AACxD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,wCAAwC,CAAA;AAAA,EACxD;AAEA,EAAA,OAAO,EAAE,OAAO,QAAA,EAAS;AAC3B;;;AClGO,SAAS,gBAAgB,UAAA,EAA4B;AAC1D,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,QAAA;AAGpC,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEpC,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,CAAA,EAAG;AACnC,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAQ,UAAU,CAAA,CAAA;AAAA,EAC3B;AAGA,EAAA,OAAO,UAAA;AACT;AAcO,SAAS,cAAA,CAAe,YAAoB,YAAA,EAAwC;AACzF,EAAA,MAAM,YAAA,GAAe,gBAAgB,UAAU,CAAA;AAE/C,EAAA,IAAI,CAAC,YAAA,IAAgB,YAAA,CAAa,QAAA,OAAe,EAAA,EAAI;AACnD,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAA,CAAa,UAAU,CAAA,CAAA;AACnD","file":"lib.cjs","sourcesContent":["import { z } from 'zod';\n\n/**\n * Email validation schema\n */\nexport const emailSchema = z.string().min(1, 'Email is required').email('Invalid email address');\n\n/**\n * Password validation schema with configurable requirements\n */\nexport function createPasswordSchema(options?: {\n  minLength?: number;\n  requireUppercase?: boolean;\n  requireLowercase?: boolean;\n  requireNumber?: boolean;\n  requireSpecialChar?: boolean;\n}) {\n  const {\n    minLength = 6,\n    requireUppercase = false,\n    requireLowercase = false,\n    requireNumber = false,\n    requireSpecialChar = false,\n  } = options || {};\n\n  let schema = z.string().min(minLength, `Password must be at least ${minLength} characters`);\n\n  if (requireUppercase) {\n    schema = schema.regex(/[A-Z]/, 'Password must contain at least one uppercase letter');\n  }\n\n  if (requireLowercase) {\n    schema = schema.regex(/[a-z]/, 'Password must contain at least one lowercase letter');\n  }\n\n  if (requireNumber) {\n    schema = schema.regex(/\\d/, 'Password must contain at least one number');\n  }\n\n  if (requireSpecialChar) {\n    schema = schema.regex(\n      /[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/,\n      'Password must contain at least one special character'\n    );\n  }\n\n  return schema;\n}\n\n/**\n * Default password schema (minimum 6 characters)\n */\nexport const passwordSchema = createPasswordSchema();\n\n/**\n * Validate email format\n */\nexport function validateEmail(email: string): { valid: boolean; error?: string } {\n  const result = emailSchema.safeParse(email);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password format\n */\nexport function validatePassword(\n  password: string,\n  options?: Parameters<typeof createPasswordSchema>[0]\n): { valid: boolean; error?: string } {\n  const schema = createPasswordSchema(options);\n  const result = schema.safeParse(password);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password strength based on multiple criteria\n */\nexport function checkPasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n} {\n  const feedback: string[] = [];\n  let score = 0;\n\n  if (password.length >= 8) {\n    score += 1;\n  } else {\n    feedback.push('Use at least 8 characters');\n  }\n\n  if (password.length >= 12) {\n    score += 1;\n  }\n\n  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Use both uppercase and lowercase letters');\n  }\n\n  if (/\\d/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one number');\n  }\n\n  if (/[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one special character');\n  }\n\n  return { score, feedback };\n}\n","/**\n * Path utilities for handling navigation in auth flows.\n * Ensures proper path resolution when auth pages are served under a base path (e.g., /auth/)\n */\n\n/**\n * Resolves an auth route path relative to the current location.\n * If the current path is under /auth/, it will preserve that prefix.\n * Otherwise, it returns the path as-is.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @returns The resolved path with proper base path handling\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in\n * resolveAuthPath('/sign-up') // Returns '/auth/sign-up'\n *\n * @example\n * // Current URL: http://localhost:5174/sign-in\n * resolveAuthPath('/sign-up') // Returns '/sign-up'\n */\nexport function resolveAuthPath(targetPath: string): string {\n  if (typeof window === 'undefined') {\n    return targetPath;\n  }\n\n  const currentPath = window.location.pathname;\n\n  // Check if we're currently under /auth/ base path\n  if (currentPath.startsWith('/auth/')) {\n    // If target already has /auth/ prefix, return as-is\n    if (targetPath.startsWith('/auth/')) {\n      return targetPath;\n    }\n    // Add /auth/ prefix to the target path\n    return `/auth${targetPath}`;\n  }\n\n  // Not under /auth/, return target path as-is\n  return targetPath;\n}\n\n/**\n * Resolves an auth route URL with search params preserved.\n * Similar to resolveAuthPath but returns a full URL string with query parameters.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @param searchParams - Optional URLSearchParams to append\n * @returns The resolved URL as a string\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in?redirect=...\n * resolveAuthUrl('/sign-up', searchParams) // Returns '/auth/sign-up?redirect=...'\n */\nexport function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string {\n  const resolvedPath = resolveAuthPath(targetPath);\n\n  if (!searchParams || searchParams.toString() === '') {\n    return resolvedPath;\n  }\n\n  return `${resolvedPath}?${searchParams.toString()}`;\n}\n"]}
+{"version":3,"sources":["../src/lib/validation.ts","../src/lib/path-utils.ts","../src/lib/hosted-auth.ts"],"names":["z"],"mappings":";;;;;AAKO,IAAM,WAAA,GAAcA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,mBAAmB,CAAA,CAAE,KAAA,CAAM,uBAAuB;AAKxF,SAAS,qBAAqB,OAAA,EAMlC;AACD,EAAA,MAAM;AAAA,IACJ,SAAA,GAAY,CAAA;AAAA,IACZ,gBAAA,GAAmB,KAAA;AAAA,IACnB,gBAAA,GAAmB,KAAA;AAAA,IACnB,aAAA,GAAgB,KAAA;AAAA,IAChB,kBAAA,GAAqB;AAAA,GACvB,GAAI,WAAW,EAAC;AAEhB,EAAA,IAAI,MAAA,GAASA,MAAE,MAAA,EAAO,CAAE,IAAI,SAAA,EAAW,CAAA,0BAAA,EAA6B,SAAS,CAAA,WAAA,CAAa,CAAA;AAE1F,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,IAAA,EAAM,2CAA2C,CAAA;AAAA,EACzE;AAEA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA;AAAA,MACd,qCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAKO,IAAM,iBAAiB,oBAAA;AAKvB,SAAS,cAAc,KAAA,EAAmD;AAC/E,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AAC1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,gBAAA,CACd,UACA,OAAA,EACoC;AACpC,EAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,sBAAsB,QAAA,EAGpC;AACA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAA,CAAS,UAAU,EAAA,EAAI;AACzB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX;AAEA,EAAA,IAAI,QAAQ,IAAA,CAAK,QAAQ,KAAK,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACpD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,0CAA0C,CAAA;AAAA,EAC1D;AAEA,EAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,6BAA6B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,QAAQ,CAAA,EAAG;AACxD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,wCAAwC,CAAA;AAAA,EACxD;AAEA,EAAA,OAAO,EAAE,OAAO,QAAA,EAAS;AAC3B;;;AClGO,SAAS,gBAAgB,UAAA,EAA4B;AAC1D,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,QAAA;AAGpC,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEpC,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,CAAA,EAAG;AACnC,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAQ,UAAU,CAAA,CAAA;AAAA,EAC3B;AAGA,EAAA,OAAO,UAAA;AACT;AAcO,SAAS,cAAA,CAAe,YAAoB,YAAA,EAAwC;AACzF,EAAA,MAAM,YAAA,GAAe,gBAAgB,UAAU,CAAA;AAE/C,EAAA,IAAI,CAAC,YAAA,IAAgB,YAAA,CAAa,QAAA,OAAe,EAAA,EAAI;AACnD,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAA,CAAa,UAAU,CAAA,CAAA;AACnD;;;AC9CO,SAAS,uBAAA,GAAmC;AACjD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,QAAA,KAAa,MAAA,CAAO,QAAA;AAG5C,EAAA,IAAI,QAAA,KAAa,WAAA,IAAe,IAAA,KAAS,MAAA,EAAQ;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,QAAA,KAAa,QAAA,IAAY,QAAA,CAAS,QAAA,CAAS,eAAe,CAAA,EAAG;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,KAAA;AACT;AAuBO,SAAS,kBAAA,CACd,aACA,OAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,WAAW,CAAA;AAC/B,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,OAAA,CAAQ,WAAW,CAAA;AACxD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,OAAA,CAAQ,KAAK,CAAA;AAE3C,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,OAAA,CAAQ,SAAS,CAAA;AAAA,EACtD;AAEA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB","file":"lib.cjs","sourcesContent":["import { z } from 'zod';\n\n/**\n * Email validation schema\n */\nexport const emailSchema = z.string().min(1, 'Email is required').email('Invalid email address');\n\n/**\n * Password validation schema with configurable requirements\n */\nexport function createPasswordSchema(options?: {\n  minLength?: number;\n  requireUppercase?: boolean;\n  requireLowercase?: boolean;\n  requireNumber?: boolean;\n  requireSpecialChar?: boolean;\n}) {\n  const {\n    minLength = 6,\n    requireUppercase = false,\n    requireLowercase = false,\n    requireNumber = false,\n    requireSpecialChar = false,\n  } = options || {};\n\n  let schema = z.string().min(minLength, `Password must be at least ${minLength} characters`);\n\n  if (requireUppercase) {\n    schema = schema.regex(/[A-Z]/, 'Password must contain at least one uppercase letter');\n  }\n\n  if (requireLowercase) {\n    schema = schema.regex(/[a-z]/, 'Password must contain at least one lowercase letter');\n  }\n\n  if (requireNumber) {\n    schema = schema.regex(/\\d/, 'Password must contain at least one number');\n  }\n\n  if (requireSpecialChar) {\n    schema = schema.regex(\n      /[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/,\n      'Password must contain at least one special character'\n    );\n  }\n\n  return schema;\n}\n\n/**\n * Default password schema (minimum 6 characters)\n */\nexport const passwordSchema = createPasswordSchema();\n\n/**\n * Validate email format\n */\nexport function validateEmail(email: string): { valid: boolean; error?: string } {\n  const result = emailSchema.safeParse(email);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password format\n */\nexport function validatePassword(\n  password: string,\n  options?: Parameters<typeof createPasswordSchema>[0]\n): { valid: boolean; error?: string } {\n  const schema = createPasswordSchema(options);\n  const result = schema.safeParse(password);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password strength based on multiple criteria\n */\nexport function checkPasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n} {\n  const feedback: string[] = [];\n  let score = 0;\n\n  if (password.length >= 8) {\n    score += 1;\n  } else {\n    feedback.push('Use at least 8 characters');\n  }\n\n  if (password.length >= 12) {\n    score += 1;\n  }\n\n  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Use both uppercase and lowercase letters');\n  }\n\n  if (/\\d/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one number');\n  }\n\n  if (/[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one special character');\n  }\n\n  return { score, feedback };\n}\n","/**\n * Path utilities for handling navigation in auth flows.\n * Ensures proper path resolution when auth pages are served under a base path (e.g., /auth/)\n */\n\n/**\n * Resolves an auth route path relative to the current location.\n * If the current path is under /auth/, it will preserve that prefix.\n * Otherwise, it returns the path as-is.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @returns The resolved path with proper base path handling\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in\n * resolveAuthPath('/sign-up') // Returns '/auth/sign-up'\n *\n * @example\n * // Current URL: http://localhost:5174/sign-in\n * resolveAuthPath('/sign-up') // Returns '/sign-up'\n */\nexport function resolveAuthPath(targetPath: string): string {\n  if (typeof window === 'undefined') {\n    return targetPath;\n  }\n\n  const currentPath = window.location.pathname;\n\n  // Check if we're currently under /auth/ base path\n  if (currentPath.startsWith('/auth/')) {\n    // If target already has /auth/ prefix, return as-is\n    if (targetPath.startsWith('/auth/')) {\n      return targetPath;\n    }\n    // Add /auth/ prefix to the target path\n    return `/auth${targetPath}`;\n  }\n\n  // Not under /auth/, return target path as-is\n  return targetPath;\n}\n\n/**\n * Resolves an auth route URL with search params preserved.\n * Similar to resolveAuthPath but returns a full URL string with query parameters.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @param searchParams - Optional URLSearchParams to append\n * @returns The resolved URL as a string\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in?redirect=...\n * resolveAuthUrl('/sign-up', searchParams) // Returns '/auth/sign-up?redirect=...'\n */\nexport function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string {\n  const resolvedPath = resolveAuthPath(targetPath);\n\n  if (!searchParams || searchParams.toString() === '') {\n    return resolvedPath;\n  }\n\n  return `${resolvedPath}?${searchParams.toString()}`;\n}\n","/**\n * Hosted Auth Helpers\n *\n * Utilities for detecting hosted auth environment and building legacy auth URLs\n * for cross-domain authentication flows.\n */\n\n/**\n * Check if current environment is a hosted auth environment\n *\n * Returns true for:\n * - localhost with port 7130 (hosted auth app dev)\n * - https://*.insforge.app (hosted auth app production)\n *\n * @returns true if running in hosted auth environment\n */\nexport function isHostedAuthEnvironment(): boolean {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n\n  const { hostname, port, protocol } = window.location;\n\n  // Local development\n  if (hostname === 'localhost' && port === '7130') {\n    return true;\n  }\n\n  // Production hosted auth\n  if (protocol === 'https:' && hostname.endsWith('.insforge.app')) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Session data for building legacy auth URL\n */\nexport interface LegacyAuthSession {\n  accessToken: string;\n  userId: string;\n  email: string;\n  name?: string;\n  csrfToken?: string;\n}\n\n/**\n * Build a legacy flow redirect URL with auth params in query string\n *\n * This is used to pass authentication credentials back to the user's app\n * after OAuth completes in the hosted auth environment.\n *\n * @param redirectUrl - The URL to redirect to (user's app)\n * @param session - The session data to include in the URL\n * @returns The complete URL with auth params\n */\nexport function buildLegacyAuthUrl(\n  redirectUrl: string,\n  session: LegacyAuthSession\n): string {\n  const url = new URL(redirectUrl);\n  url.searchParams.set('access_token', session.accessToken);\n  url.searchParams.set('user_id', session.userId);\n  url.searchParams.set('email', session.email);\n\n  if (session.name) {\n    url.searchParams.set('name', session.name);\n  }\n\n  if (session.csrfToken) {\n    url.searchParams.set('csrf_token', session.csrfToken);\n  }\n\n  return url.toString();\n}\n"]}

package/dist/lib.d.cts

@@ -75,4 +75,42 @@ declare function resolveAuthPath(targetPath: string): string;
  */
 declare function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string;
 
-export { checkPasswordStrength, createPasswordSchema, emailSchema, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };
+/**
+ * Hosted Auth Helpers
+ *
+ * Utilities for detecting hosted auth environment and building legacy auth URLs
+ * for cross-domain authentication flows.
+ */
+/**
+ * Check if current environment is a hosted auth environment
+ *
+ * Returns true for:
+ * - localhost with port 7130 (hosted auth app dev)
+ * - https://*.insforge.app (hosted auth app production)
+ *
+ * @returns true if running in hosted auth environment
+ */
+declare function isHostedAuthEnvironment(): boolean;
+/**
+ * Session data for building legacy auth URL
+ */
+interface LegacyAuthSession {
+    accessToken: string;
+    userId: string;
+    email: string;
+    name?: string;
+    csrfToken?: string;
+}
+/**
+ * Build a legacy flow redirect URL with auth params in query string
+ *
+ * This is used to pass authentication credentials back to the user's app
+ * after OAuth completes in the hosted auth environment.
+ *
+ * @param redirectUrl - The URL to redirect to (user's app)
+ * @param session - The session data to include in the URL
+ * @returns The complete URL with auth params
+ */
+declare function buildLegacyAuthUrl(redirectUrl: string, session: LegacyAuthSession): string;
+
+export { type LegacyAuthSession, buildLegacyAuthUrl, checkPasswordStrength, createPasswordSchema, emailSchema, isHostedAuthEnvironment, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };

package/dist/lib.d.ts

@@ -75,4 +75,42 @@ declare function resolveAuthPath(targetPath: string): string;
  */
 declare function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string;
 
-export { checkPasswordStrength, createPasswordSchema, emailSchema, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };
+/**
+ * Hosted Auth Helpers
+ *
+ * Utilities for detecting hosted auth environment and building legacy auth URLs
+ * for cross-domain authentication flows.
+ */
+/**
+ * Check if current environment is a hosted auth environment
+ *
+ * Returns true for:
+ * - localhost with port 7130 (hosted auth app dev)
+ * - https://*.insforge.app (hosted auth app production)
+ *
+ * @returns true if running in hosted auth environment
+ */
+declare function isHostedAuthEnvironment(): boolean;
+/**
+ * Session data for building legacy auth URL
+ */
+interface LegacyAuthSession {
+    accessToken: string;
+    userId: string;
+    email: string;
+    name?: string;
+    csrfToken?: string;
+}
+/**
+ * Build a legacy flow redirect URL with auth params in query string
+ *
+ * This is used to pass authentication credentials back to the user's app
+ * after OAuth completes in the hosted auth environment.
+ *
+ * @param redirectUrl - The URL to redirect to (user's app)
+ * @param session - The session data to include in the URL
+ * @returns The complete URL with auth params
+ */
+declare function buildLegacyAuthUrl(redirectUrl: string, session: LegacyAuthSession): string;
+
+export { type LegacyAuthSession, buildLegacyAuthUrl, checkPasswordStrength, createPasswordSchema, emailSchema, isHostedAuthEnvironment, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };

package/dist/lib.js

@@ -95,6 +95,34 @@ function resolveAuthUrl(targetPath, searchParams) {
   return `${resolvedPath}?${searchParams.toString()}`;
 }
 
-export { checkPasswordStrength, createPasswordSchema, emailSchema, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };
+// src/lib/hosted-auth.ts
+function isHostedAuthEnvironment() {
+  if (typeof window === "undefined") {
+    return false;
+  }
+  const { hostname, port, protocol } = window.location;
+  if (hostname === "localhost" && port === "7130") {
+    return true;
+  }
+  if (protocol === "https:" && hostname.endsWith(".insforge.app")) {
+    return true;
+  }
+  return false;
+}
+function buildLegacyAuthUrl(redirectUrl, session) {
+  const url = new URL(redirectUrl);
+  url.searchParams.set("access_token", session.accessToken);
+  url.searchParams.set("user_id", session.userId);
+  url.searchParams.set("email", session.email);
+  if (session.name) {
+    url.searchParams.set("name", session.name);
+  }
+  if (session.csrfToken) {
+    url.searchParams.set("csrf_token", session.csrfToken);
+  }
+  return url.toString();
+}
+
+export { buildLegacyAuthUrl, checkPasswordStrength, createPasswordSchema, emailSchema, isHostedAuthEnvironment, passwordSchema, resolveAuthPath, resolveAuthUrl, validateEmail, validatePassword };
 //# sourceMappingURL=lib.js.map
 //# sourceMappingURL=lib.js.map

package/dist/lib.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/validation.ts","../src/lib/path-utils.ts"],"names":[],"mappings":";;;AAKO,IAAM,WAAA,GAAc,EAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,mBAAmB,CAAA,CAAE,KAAA,CAAM,uBAAuB;AAKxF,SAAS,qBAAqB,OAAA,EAMlC;AACD,EAAA,MAAM;AAAA,IACJ,SAAA,GAAY,CAAA;AAAA,IACZ,gBAAA,GAAmB,KAAA;AAAA,IACnB,gBAAA,GAAmB,KAAA;AAAA,IACnB,aAAA,GAAgB,KAAA;AAAA,IAChB,kBAAA,GAAqB;AAAA,GACvB,GAAI,WAAW,EAAC;AAEhB,EAAA,IAAI,MAAA,GAAS,EAAE,MAAA,EAAO,CAAE,IAAI,SAAA,EAAW,CAAA,0BAAA,EAA6B,SAAS,CAAA,WAAA,CAAa,CAAA;AAE1F,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,IAAA,EAAM,2CAA2C,CAAA;AAAA,EACzE;AAEA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA;AAAA,MACd,qCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAKO,IAAM,iBAAiB,oBAAA;AAKvB,SAAS,cAAc,KAAA,EAAmD;AAC/E,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AAC1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,gBAAA,CACd,UACA,OAAA,EACoC;AACpC,EAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,sBAAsB,QAAA,EAGpC;AACA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAA,CAAS,UAAU,EAAA,EAAI;AACzB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX;AAEA,EAAA,IAAI,QAAQ,IAAA,CAAK,QAAQ,KAAK,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACpD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,0CAA0C,CAAA;AAAA,EAC1D;AAEA,EAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,6BAA6B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,QAAQ,CAAA,EAAG;AACxD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,wCAAwC,CAAA;AAAA,EACxD;AAEA,EAAA,OAAO,EAAE,OAAO,QAAA,EAAS;AAC3B;;;AClGO,SAAS,gBAAgB,UAAA,EAA4B;AAC1D,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,QAAA;AAGpC,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEpC,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,CAAA,EAAG;AACnC,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAQ,UAAU,CAAA,CAAA;AAAA,EAC3B;AAGA,EAAA,OAAO,UAAA;AACT;AAcO,SAAS,cAAA,CAAe,YAAoB,YAAA,EAAwC;AACzF,EAAA,MAAM,YAAA,GAAe,gBAAgB,UAAU,CAAA;AAE/C,EAAA,IAAI,CAAC,YAAA,IAAgB,YAAA,CAAa,QAAA,OAAe,EAAA,EAAI;AACnD,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAA,CAAa,UAAU,CAAA,CAAA;AACnD","file":"lib.js","sourcesContent":["import { z } from 'zod';\n\n/**\n * Email validation schema\n */\nexport const emailSchema = z.string().min(1, 'Email is required').email('Invalid email address');\n\n/**\n * Password validation schema with configurable requirements\n */\nexport function createPasswordSchema(options?: {\n  minLength?: number;\n  requireUppercase?: boolean;\n  requireLowercase?: boolean;\n  requireNumber?: boolean;\n  requireSpecialChar?: boolean;\n}) {\n  const {\n    minLength = 6,\n    requireUppercase = false,\n    requireLowercase = false,\n    requireNumber = false,\n    requireSpecialChar = false,\n  } = options || {};\n\n  let schema = z.string().min(minLength, `Password must be at least ${minLength} characters`);\n\n  if (requireUppercase) {\n    schema = schema.regex(/[A-Z]/, 'Password must contain at least one uppercase letter');\n  }\n\n  if (requireLowercase) {\n    schema = schema.regex(/[a-z]/, 'Password must contain at least one lowercase letter');\n  }\n\n  if (requireNumber) {\n    schema = schema.regex(/\\d/, 'Password must contain at least one number');\n  }\n\n  if (requireSpecialChar) {\n    schema = schema.regex(\n      /[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/,\n      'Password must contain at least one special character'\n    );\n  }\n\n  return schema;\n}\n\n/**\n * Default password schema (minimum 6 characters)\n */\nexport const passwordSchema = createPasswordSchema();\n\n/**\n * Validate email format\n */\nexport function validateEmail(email: string): { valid: boolean; error?: string } {\n  const result = emailSchema.safeParse(email);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password format\n */\nexport function validatePassword(\n  password: string,\n  options?: Parameters<typeof createPasswordSchema>[0]\n): { valid: boolean; error?: string } {\n  const schema = createPasswordSchema(options);\n  const result = schema.safeParse(password);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password strength based on multiple criteria\n */\nexport function checkPasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n} {\n  const feedback: string[] = [];\n  let score = 0;\n\n  if (password.length >= 8) {\n    score += 1;\n  } else {\n    feedback.push('Use at least 8 characters');\n  }\n\n  if (password.length >= 12) {\n    score += 1;\n  }\n\n  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Use both uppercase and lowercase letters');\n  }\n\n  if (/\\d/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one number');\n  }\n\n  if (/[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one special character');\n  }\n\n  return { score, feedback };\n}\n","/**\n * Path utilities for handling navigation in auth flows.\n * Ensures proper path resolution when auth pages are served under a base path (e.g., /auth/)\n */\n\n/**\n * Resolves an auth route path relative to the current location.\n * If the current path is under /auth/, it will preserve that prefix.\n * Otherwise, it returns the path as-is.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @returns The resolved path with proper base path handling\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in\n * resolveAuthPath('/sign-up') // Returns '/auth/sign-up'\n *\n * @example\n * // Current URL: http://localhost:5174/sign-in\n * resolveAuthPath('/sign-up') // Returns '/sign-up'\n */\nexport function resolveAuthPath(targetPath: string): string {\n  if (typeof window === 'undefined') {\n    return targetPath;\n  }\n\n  const currentPath = window.location.pathname;\n\n  // Check if we're currently under /auth/ base path\n  if (currentPath.startsWith('/auth/')) {\n    // If target already has /auth/ prefix, return as-is\n    if (targetPath.startsWith('/auth/')) {\n      return targetPath;\n    }\n    // Add /auth/ prefix to the target path\n    return `/auth${targetPath}`;\n  }\n\n  // Not under /auth/, return target path as-is\n  return targetPath;\n}\n\n/**\n * Resolves an auth route URL with search params preserved.\n * Similar to resolveAuthPath but returns a full URL string with query parameters.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @param searchParams - Optional URLSearchParams to append\n * @returns The resolved URL as a string\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in?redirect=...\n * resolveAuthUrl('/sign-up', searchParams) // Returns '/auth/sign-up?redirect=...'\n */\nexport function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string {\n  const resolvedPath = resolveAuthPath(targetPath);\n\n  if (!searchParams || searchParams.toString() === '') {\n    return resolvedPath;\n  }\n\n  return `${resolvedPath}?${searchParams.toString()}`;\n}\n"]}
+{"version":3,"sources":["../src/lib/validation.ts","../src/lib/path-utils.ts","../src/lib/hosted-auth.ts"],"names":[],"mappings":";;;AAKO,IAAM,WAAA,GAAc,EAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,mBAAmB,CAAA,CAAE,KAAA,CAAM,uBAAuB;AAKxF,SAAS,qBAAqB,OAAA,EAMlC;AACD,EAAA,MAAM;AAAA,IACJ,SAAA,GAAY,CAAA;AAAA,IACZ,gBAAA,GAAmB,KAAA;AAAA,IACnB,gBAAA,GAAmB,KAAA;AAAA,IACnB,aAAA,GAAgB,KAAA;AAAA,IAChB,kBAAA,GAAqB;AAAA,GACvB,GAAI,WAAW,EAAC;AAEhB,EAAA,IAAI,MAAA,GAAS,EAAE,MAAA,EAAO,CAAE,IAAI,SAAA,EAAW,CAAA,0BAAA,EAA6B,SAAS,CAAA,WAAA,CAAa,CAAA;AAE1F,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,qDAAqD,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,IAAA,EAAM,2CAA2C,CAAA;AAAA,EACzE;AAEA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA;AAAA,MACd,qCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAKO,IAAM,iBAAiB,oBAAA;AAKvB,SAAS,cAAc,KAAA,EAAmD;AAC/E,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AAC1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,gBAAA,CACd,UACA,OAAA,EACoC;AACpC,EAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA;AACxC,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,MAAM,OAAA,EAAQ;AACrD;AAKO,SAAS,sBAAsB,QAAA,EAGpC;AACA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAA,CAAS,UAAU,EAAA,EAAI;AACzB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX;AAEA,EAAA,IAAI,QAAQ,IAAA,CAAK,QAAQ,KAAK,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACpD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,0CAA0C,CAAA;AAAA,EAC1D;AAEA,EAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvB,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,6BAA6B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,QAAQ,CAAA,EAAG;AACxD,IAAA,KAAA,IAAS,CAAA;AAAA,EACX,CAAA,MAAO;AACL,IAAA,QAAA,CAAS,KAAK,wCAAwC,CAAA;AAAA,EACxD;AAEA,EAAA,OAAO,EAAE,OAAO,QAAA,EAAS;AAC3B;;;AClGO,SAAS,gBAAgB,UAAA,EAA4B;AAC1D,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,CAAS,QAAA;AAGpC,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEpC,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,CAAA,EAAG;AACnC,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAQ,UAAU,CAAA,CAAA;AAAA,EAC3B;AAGA,EAAA,OAAO,UAAA;AACT;AAcO,SAAS,cAAA,CAAe,YAAoB,YAAA,EAAwC;AACzF,EAAA,MAAM,YAAA,GAAe,gBAAgB,UAAU,CAAA;AAE/C,EAAA,IAAI,CAAC,YAAA,IAAgB,YAAA,CAAa,QAAA,OAAe,EAAA,EAAI;AACnD,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAA,CAAa,UAAU,CAAA,CAAA;AACnD;;;AC9CO,SAAS,uBAAA,GAAmC;AACjD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,QAAA,KAAa,MAAA,CAAO,QAAA;AAG5C,EAAA,IAAI,QAAA,KAAa,WAAA,IAAe,IAAA,KAAS,MAAA,EAAQ;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,QAAA,KAAa,QAAA,IAAY,QAAA,CAAS,QAAA,CAAS,eAAe,CAAA,EAAG;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,KAAA;AACT;AAuBO,SAAS,kBAAA,CACd,aACA,OAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,WAAW,CAAA;AAC/B,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,OAAA,CAAQ,WAAW,CAAA;AACxD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,OAAA,CAAQ,KAAK,CAAA;AAE3C,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,OAAA,CAAQ,SAAS,CAAA;AAAA,EACtD;AAEA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB","file":"lib.js","sourcesContent":["import { z } from 'zod';\n\n/**\n * Email validation schema\n */\nexport const emailSchema = z.string().min(1, 'Email is required').email('Invalid email address');\n\n/**\n * Password validation schema with configurable requirements\n */\nexport function createPasswordSchema(options?: {\n  minLength?: number;\n  requireUppercase?: boolean;\n  requireLowercase?: boolean;\n  requireNumber?: boolean;\n  requireSpecialChar?: boolean;\n}) {\n  const {\n    minLength = 6,\n    requireUppercase = false,\n    requireLowercase = false,\n    requireNumber = false,\n    requireSpecialChar = false,\n  } = options || {};\n\n  let schema = z.string().min(minLength, `Password must be at least ${minLength} characters`);\n\n  if (requireUppercase) {\n    schema = schema.regex(/[A-Z]/, 'Password must contain at least one uppercase letter');\n  }\n\n  if (requireLowercase) {\n    schema = schema.regex(/[a-z]/, 'Password must contain at least one lowercase letter');\n  }\n\n  if (requireNumber) {\n    schema = schema.regex(/\\d/, 'Password must contain at least one number');\n  }\n\n  if (requireSpecialChar) {\n    schema = schema.regex(\n      /[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/,\n      'Password must contain at least one special character'\n    );\n  }\n\n  return schema;\n}\n\n/**\n * Default password schema (minimum 6 characters)\n */\nexport const passwordSchema = createPasswordSchema();\n\n/**\n * Validate email format\n */\nexport function validateEmail(email: string): { valid: boolean; error?: string } {\n  const result = emailSchema.safeParse(email);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password format\n */\nexport function validatePassword(\n  password: string,\n  options?: Parameters<typeof createPasswordSchema>[0]\n): { valid: boolean; error?: string } {\n  const schema = createPasswordSchema(options);\n  const result = schema.safeParse(password);\n  if (result.success) {\n    return { valid: true };\n  }\n  return { valid: false, error: result.error.message };\n}\n\n/**\n * Validate password strength based on multiple criteria\n */\nexport function checkPasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n} {\n  const feedback: string[] = [];\n  let score = 0;\n\n  if (password.length >= 8) {\n    score += 1;\n  } else {\n    feedback.push('Use at least 8 characters');\n  }\n\n  if (password.length >= 12) {\n    score += 1;\n  }\n\n  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Use both uppercase and lowercase letters');\n  }\n\n  if (/\\d/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one number');\n  }\n\n  if (/[!@#$%^&*()_+\\-=[\\]{};':\"\\\\|,.<>/?]/.test(password)) {\n    score += 1;\n  } else {\n    feedback.push('Include at least one special character');\n  }\n\n  return { score, feedback };\n}\n","/**\n * Path utilities for handling navigation in auth flows.\n * Ensures proper path resolution when auth pages are served under a base path (e.g., /auth/)\n */\n\n/**\n * Resolves an auth route path relative to the current location.\n * If the current path is under /auth/, it will preserve that prefix.\n * Otherwise, it returns the path as-is.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @returns The resolved path with proper base path handling\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in\n * resolveAuthPath('/sign-up') // Returns '/auth/sign-up'\n *\n * @example\n * // Current URL: http://localhost:5174/sign-in\n * resolveAuthPath('/sign-up') // Returns '/sign-up'\n */\nexport function resolveAuthPath(targetPath: string): string {\n  if (typeof window === 'undefined') {\n    return targetPath;\n  }\n\n  const currentPath = window.location.pathname;\n\n  // Check if we're currently under /auth/ base path\n  if (currentPath.startsWith('/auth/')) {\n    // If target already has /auth/ prefix, return as-is\n    if (targetPath.startsWith('/auth/')) {\n      return targetPath;\n    }\n    // Add /auth/ prefix to the target path\n    return `/auth${targetPath}`;\n  }\n\n  // Not under /auth/, return target path as-is\n  return targetPath;\n}\n\n/**\n * Resolves an auth route URL with search params preserved.\n * Similar to resolveAuthPath but returns a full URL string with query parameters.\n *\n * @param targetPath - The target auth path (e.g., '/sign-in', '/sign-up')\n * @param searchParams - Optional URLSearchParams to append\n * @returns The resolved URL as a string\n *\n * @example\n * // Current URL: http://localhost:5174/auth/sign-in?redirect=...\n * resolveAuthUrl('/sign-up', searchParams) // Returns '/auth/sign-up?redirect=...'\n */\nexport function resolveAuthUrl(targetPath: string, searchParams?: URLSearchParams): string {\n  const resolvedPath = resolveAuthPath(targetPath);\n\n  if (!searchParams || searchParams.toString() === '') {\n    return resolvedPath;\n  }\n\n  return `${resolvedPath}?${searchParams.toString()}`;\n}\n","/**\n * Hosted Auth Helpers\n *\n * Utilities for detecting hosted auth environment and building legacy auth URLs\n * for cross-domain authentication flows.\n */\n\n/**\n * Check if current environment is a hosted auth environment\n *\n * Returns true for:\n * - localhost with port 7130 (hosted auth app dev)\n * - https://*.insforge.app (hosted auth app production)\n *\n * @returns true if running in hosted auth environment\n */\nexport function isHostedAuthEnvironment(): boolean {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n\n  const { hostname, port, protocol } = window.location;\n\n  // Local development\n  if (hostname === 'localhost' && port === '7130') {\n    return true;\n  }\n\n  // Production hosted auth\n  if (protocol === 'https:' && hostname.endsWith('.insforge.app')) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Session data for building legacy auth URL\n */\nexport interface LegacyAuthSession {\n  accessToken: string;\n  userId: string;\n  email: string;\n  name?: string;\n  csrfToken?: string;\n}\n\n/**\n * Build a legacy flow redirect URL with auth params in query string\n *\n * This is used to pass authentication credentials back to the user's app\n * after OAuth completes in the hosted auth environment.\n *\n * @param redirectUrl - The URL to redirect to (user's app)\n * @param session - The session data to include in the URL\n * @returns The complete URL with auth params\n */\nexport function buildLegacyAuthUrl(\n  redirectUrl: string,\n  session: LegacyAuthSession\n): string {\n  const url = new URL(redirectUrl);\n  url.searchParams.set('access_token', session.accessToken);\n  url.searchParams.set('user_id', session.userId);\n  url.searchParams.set('email', session.email);\n\n  if (session.name) {\n    url.searchParams.set('name', session.name);\n  }\n\n  if (session.csrfToken) {\n    url.searchParams.set('csrf_token', session.csrfToken);\n  }\n\n  return url.toString();\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insforge/react",
-  "version": "1.1.5",
+  "version": "1.1.6-test.0",
   "type": "module",
   "description": "Framework-agnostic React authentication UI components for Insforge - reusable across all frameworks",
   "main": "./dist/index.cjs",
@@ -89,7 +89,7 @@
     "@emotion/react": "^11.11.1",
     "@emotion/styled": "^11.11.0",
     "@insforge/sdk": "^1.1.2",
-    "@insforge/shared": "^1.1.3",
+    "@insforge/shared": "^1.1.4",
     "@insforge/shared-schemas": "^1.1.42",
     "lucide-react": "^0.552.0",
     "zod": "^4.1.12"