@mohasinac/appkit 2.1.1 → 2.2.0

package/dist/next/index.js

@@ -1,646 +1,30 @@
-import { trackError } from '../chunk-V55QYTXF.js';
-import { CacheManager } from '../chunk-EPJNBIKL.js';
-export { AUTH_ROUTES, DEFAULT_ROUTE_MAP, PROTECTED_ROUTES, PUBLIC_ROUTES, ROUTES, createRouteMap } from '../chunk-EPJNBIKL.js';
-import '../chunk-EEMSMWIZ.js';
-import { getProviders } from '../chunk-PAHR3D5L.js';
-import { AuthenticationError } from '../chunk-IE5L2QHV.js';
-import { __spreadValues, __spreadProps } from '../chunk-2NMEKWO5.js';
-import { NextResponse } from 'next/server.js';
-import { NextResponse as NextResponse$1 } from 'next/server';
-import { useEffect } from 'react';
-import { jsx, jsxs } from 'react/jsx-runtime';
-
-function createApiErrorHandler(options) {
-  const {
-    isAppError,
-    getStatusCode,
-    toJSON,
-    logger,
-    internalErrorCode = "INTERNAL_ERROR",
-    internalErrorMessage = "An internal server error occurred"
-  } = options;
-  return function handleApiError(error) {
-    if (isAppError(error)) {
-      const status = getStatusCode(error);
-      if (status >= 500) {
-        logger.error("API Error", {
-          body: toJSON(error)
-        });
-      }
-      return NextResponse.json(toJSON(error), { status });
-    }
-    if (error !== null && typeof error === "object" && "issues" in error && Array.isArray(error.issues)) {
-      return NextResponse.json(
-        {
-          success: false,
-          error: "Validation failed",
-          code: "VALIDATION_ERROR",
-          data: error
-        },
-        { status: 400 }
-      );
-    }
-    logger.error("Unexpected API error", {
-      error: error instanceof Error ? { name: error.name, message: error.message, stack: error.stack } : error
-    });
-    return NextResponse.json(
-      {
-        success: false,
-        error: internalErrorMessage,
-        code: internalErrorCode
-      },
-      { status: 500 }
-    );
-  };
-}
-function readSessionCookie(request) {
-  var _a;
-  const cookieHeader = (_a = request.headers.get("cookie")) != null ? _a : "";
-  const match = cookieHeader.match(/(?:^|;\s*)__session=([^;]+)/);
-  return match ? decodeURIComponent(match[1]) : null;
-}
-async function verifySession(request) {
-  const { session } = getProviders();
-  if (!session) {
-    throw Object.assign(new Error("Session provider not configured"), {
-      status: 503
-    });
-  }
-  const cookie = readSessionCookie(request);
-  if (!cookie) {
-    throw Object.assign(new Error("Authentication required"), { status: 401 });
-  }
-  try {
-    const payload = await session.verifySession(cookie);
-    return __spreadValues({
-      uid: payload.uid,
-      email: payload.email,
-      role: payload.role,
-      emailVerified: payload.emailVerified
-    }, payload.claims);
-  } catch (e) {
-    throw Object.assign(new Error("Invalid or expired session"), {
-      status: 401
-    });
-  }
-}
-function createRouteHandler(options) {
-  return async (request, context) => {
-    var _a, _b;
-    try {
-      let user;
-      const needsAuth = options.auth || options.roles && options.roles.length > 0;
-      if (needsAuth) {
-        user = await verifySession(request);
-      }
-      if (options.roles && options.roles.length > 0) {
-        if (!user || !options.roles.includes((_a = user.role) != null ? _a : "")) {
-          return NextResponse.json(
-            { success: false, error: "Insufficient permissions" },
-            { status: 403 }
-          );
-        }
-      }
-      let body;
-      if (options.schema) {
-        let raw;
-        try {
-          raw = await request.json();
-        } catch (e) {
-          return NextResponse.json(
-            { success: false, error: "Invalid JSON body" },
-            { status: 400 }
-          );
-        }
-        const result = options.schema.safeParse(raw);
-        if (!result.success) {
-          return NextResponse.json(
-            {
-              success: false,
-              error: "Validation failed",
-              issues: (_b = result.error.issues) != null ? _b : []
-            },
-            { status: 400 }
-          );
-        }
-        body = result.data;
-      }
-      const params = (context == null ? void 0 : context.params) ? await context.params : void 0;
-      return await options.handler({
-        request,
-        user,
-        body,
-        params
-      });
-    } catch (err) {
-      const status = typeof (err == null ? void 0 : err.status) === "number" ? err.status : 500;
-      const message = err instanceof Error ? err.message : "Internal server error";
-      console.error(`[createRouteHandler] ${request.method} failed`, err);
-      return NextResponse.json({ success: false, error: message }, { status });
-    }
-  };
-}
-
-// src/next/api/apiHandler.ts
-function createApiHandlerFactory(deps) {
-  return function createApiHandler(options) {
-    return async (request, context) => {
-      const startMs = performance.now();
-      try {
-        let rateLimitHeaders;
-        if (options.rateLimit) {
-          const rateLimitResult = await deps.applyRateLimit(
-            request,
-            options.rateLimit
-          );
-          rateLimitHeaders = {
-            "RateLimit-Limit": String(rateLimitResult.limit),
-            "RateLimit-Remaining": String(rateLimitResult.remaining),
-            "RateLimit-Reset": String(rateLimitResult.reset)
-          };
-          if (!rateLimitResult.success) {
-            return new Response(
-              JSON.stringify({
-                success: false,
-                error: deps.getRateLimitExceededMessage()
-              }),
-              {
-                status: 429,
-                headers: __spreadValues({
-                  "Content-Type": "application/json"
-                }, rateLimitHeaders)
-              }
-            );
-          }
-        }
-        let user;
-        if (options.roles && options.roles.length > 0) {
-          user = await deps.requireRoleFromRequest(request, options.roles);
-        } else if (options.auth) {
-          user = await deps.requireAuthFromRequest(request);
-        }
-        let validatedBody;
-        if (options.schema) {
-          if (typeof options.schema.safeParse === "function") {
-            const body = await request.json();
-            const result = options.schema.safeParse(body);
-            if (!result.success) {
-              return deps.errorResponse(
-                "Validation failed",
-                400,
-                result.error.issues
-              );
-            }
-            validatedBody = result.data;
-          } else {
-            try {
-              validatedBody = await request.json();
-            } catch (e) {
-              validatedBody = void 0;
-            }
-          }
-        }
-        const resolvedParams = (context == null ? void 0 : context.params) ? await context.params : void 0;
-        const response = await options.handler({
-          request,
-          user,
-          body: validatedBody,
-          params: resolvedParams
-        });
-        response.headers.set("Access-Control-Max-Age", "86400");
-        if (rateLimitHeaders) {
-          for (const [key, value] of Object.entries(rateLimitHeaders)) {
-            response.headers.set(key, value);
-          }
-        }
-        deps.logTiming({
-          method: request.method,
-          path: new URL(request.url).pathname,
-          status: response.status,
-          durationMs: Math.round(performance.now() - startMs)
-        });
-        return response;
-      } catch (error) {
-        deps.logTiming({
-          method: request.method,
-          path: new URL(request.url).pathname,
-          durationMs: Math.round(performance.now() - startMs),
-          error: error instanceof Error ? error.message : String(error)
-        });
-        return deps.handleApiError(error);
-      }
-    };
-  };
-}
-
-// src/next/request-helpers.ts
-function readCookieFromHeader(request, name) {
-  var _a;
-  const cookieHeader = (_a = request.headers.get("cookie")) != null ? _a : "";
-  const match = cookieHeader.match(
-    new RegExp(`(?:^|;\\s*)${name}=([^;]+)`)
-  );
-  return match ? decodeURIComponent(match[1]) : void 0;
-}
-function getSearchParams(request) {
-  return new URL(request.url).searchParams;
-}
-function getOptionalSessionCookie(request) {
-  var _a;
-  const cookieValue = (_a = request.cookies) == null ? void 0 : _a.get("__session");
-  if (typeof cookieValue === "string") return cookieValue;
-  if (cookieValue && typeof cookieValue === "object") return cookieValue.value;
-  return readCookieFromHeader(request, "__session");
-}
-function getRequiredSessionCookie(request) {
-  const cookie = getOptionalSessionCookie(request);
-  if (!cookie) throw new AuthenticationError("Unauthorized");
-  return cookie;
-}
-function getBooleanParam(searchParams, key) {
-  const value = searchParams.get(key);
-  if (value === null) return void 0;
-  return value === "true";
-}
-function getStringParam(searchParams, key) {
-  const value = searchParams.get(key);
-  if (!value) return void 0;
-  return value;
-}
-function getNumberParam(searchParams, key, fallback, options) {
-  const rawValue = searchParams.get(key);
-  const parsed = rawValue ? Number.parseInt(rawValue, 10) : fallback;
-  const safeValue = Number.isNaN(parsed) ? fallback : parsed;
-  if (typeof (options == null ? void 0 : options.min) === "number" && safeValue < options.min)
-    return options.min;
-  if (typeof (options == null ? void 0 : options.max) === "number" && safeValue > options.max)
-    return options.max;
-  return safeValue;
-}
-var DEFAULT_TTL = 5 * 60 * 1e3;
-var cache = CacheManager.getInstance(500);
-function buildCacheKey(request, config) {
-  if (config.keyGenerator) return config.keyGenerator(request);
-  const url = new URL(request.url);
-  if (config.includeQuery !== false && url.search)
-    return `${url.pathname}${url.search}`;
-  return url.pathname;
-}
-function isCacheable(request, config) {
-  var _a;
-  if (config.bypassCache) return false;
-  const methods = (_a = config.methods) != null ? _a : ["GET"];
-  return methods.includes(request.method);
-}
-function withCache(handler, config = {}) {
-  return async (request, ...args) => {
-    var _a;
-    if (!isCacheable(request, config)) {
-      return handler(request, ...args);
-    }
-    const key = buildCacheKey(request, config);
-    const cached = cache.get(key);
-    if (cached) {
-      return new NextResponse(cached.body, {
-        status: cached.status,
-        headers: cached.headers
-      });
-    }
-    const response = await handler(request, ...args);
-    const body = await response.text();
-    const headers = {};
-    response.headers.forEach((value, key2) => {
-      headers[key2] = value;
-    });
-    cache.set(
-      key,
-      { body, status: response.status, headers },
-      { ttl: (_a = config.ttl) != null ? _a : DEFAULT_TTL }
-    );
-    return new NextResponse(body, { status: response.status, headers });
-  };
-}
-function invalidateCache(pattern) {
-  if (!pattern) {
-    cache.clear();
-    return;
-  }
-  const keys = cache.keys();
-  if (typeof pattern === "string") {
-    for (const key of keys) {
-      if (key.startsWith(pattern)) cache.delete(key);
-    }
-  } else {
-    for (const key of keys) {
-      if (pattern.test(key)) cache.delete(key);
-    }
-  }
-}
-var ENC_PREFIX = "enc:v1:";
-function scrubValue(value) {
-  if (typeof value === "string" && value.startsWith(ENC_PREFIX)) {
-    return "[encrypted]";
-  }
-  if (Array.isArray(value)) return value.map(scrubValue);
-  if (value !== null && typeof value === "object") {
-    return Object.fromEntries(
-      Object.entries(value).map(([k, v]) => [
-        k,
-        scrubValue(v)
-      ])
-    );
-  }
-  return value;
-}
-var piiScrubberMiddleware = async (_request, _ctx, next) => {
-  var _a;
-  const response = await next();
-  const contentType = (_a = response.headers.get("content-type")) != null ? _a : "";
-  if (!contentType.includes("application/json")) return response;
-  let body;
-  try {
-    body = await response.json();
-  } catch (e) {
-    return response;
-  }
-  const scrubbed = scrubValue(body);
-  return NextResponse$1.json(scrubbed, {
-    status: response.status,
-    headers: response.headers
-  });
-};
-
-// src/next/middleware/chain.ts
-async function runChain(middlewares, ctx, request, handler) {
-  let index = 0;
-  async function next() {
-    if (index < middlewares.length) {
-      const mw = middlewares[index++];
-      return mw(request, ctx, next);
-    }
-    return handler();
-  }
-  return next();
-}
-function buildBaseContext(request) {
-  var _a, _b, _c, _d, _e, _f;
-  return {
-    traceId: crypto.randomUUID(),
-    ip: (_c = (_b = (_a = request.headers.get("x-forwarded-for")) == null ? void 0 : _a.split(",")[0]) == null ? void 0 : _b.trim()) != null ? _c : "unknown",
-    locale: (_f = (_e = (_d = request.headers.get("accept-language")) == null ? void 0 : _d.split(",")[0]) == null ? void 0 : _e.split("-")[0]) != null ? _f : "en",
-    startedAt: Date.now()
-  };
-}
-function createApiMiddleware(config = {}) {
-  const { middlewares = [], scrubPii = true } = config;
-  return function withHandler(routeFn) {
-    return async function handler(request) {
-      const ctx = buildBaseContext(request);
-      const chain = [
-        ...middlewares,
-        // Apply PII scrubber last (wraps all other middleware output)
-        ...scrubPii ? [piiScrubberMiddleware] : []
-      ];
-      return runChain(chain, ctx, request, async () => {
-        try {
-          return await routeFn({}, ctx, request);
-        } catch (err) {
-          const message = err instanceof Error ? err.message : "Internal server error";
-          return NextResponse$1.json({ error: message }, { status: 500 });
-        }
-      });
-    };
-  };
-}
-function maskPii(value) {
-  var _a;
-  if (value.includes("@")) {
-    const [local, domain] = value.split("@");
-    return `${(_a = local == null ? void 0 : local[0]) != null ? _a : ""}***@${domain}`;
-  }
-  if (/^\+?\d{7,}$/.test(value)) {
-    return value.slice(0, 3) + "***" + value.slice(-2);
-  }
-  return "***";
-}
-function hasPermission(permissions, required) {
-  return permissions.has("*") || permissions.has(required);
-}
-function redactObject(obj, fields, mask) {
-  return fields.reduce((acc, field) => {
-    if (!(field in acc)) return acc;
-    const current = acc[field];
-    const redacted = __spreadValues({}, acc);
-    if (mask && typeof current === "string") {
-      redacted[field] = maskPii(current);
-    } else {
-      delete redacted[field];
-    }
-    return redacted;
-  }, obj);
-}
-function createPiiRedactorMiddleware(rules) {
-  return async (_req, ctx, next) => {
-    var _a;
-    const response = await next();
-    const contentType = (_a = response.headers.get("content-type")) != null ? _a : "";
-    if (!contentType.includes("application/json")) return response;
-    let body;
-    try {
-      body = await response.json();
-    } catch (e) {
-      return response;
-    }
-    for (const { fields, mask = true, unless } of rules) {
-      if (unless && hasPermission(ctx.user.permissions, unless)) continue;
-      if (Array.isArray(body.data)) {
-        body = __spreadProps(__spreadValues({}, body), {
-          data: body.data.map(
-            (item) => redactObject(item, fields, mask)
-          )
-        });
-      } else {
-        body = redactObject(body, fields, mask);
-      }
-    }
-    return NextResponse$1.json(body, {
-      status: response.status,
-      headers: response.headers
-    });
-  };
-}
-function successResponse(data, message, status = 200, meta) {
-  return NextResponse$1.json(
-    __spreadValues(__spreadValues(__spreadValues({
-      success: true
-    }, data !== void 0 && { data }), message && { message }), meta && { meta }),
-    { status }
-  );
-}
-function errorResponse(error, status = 400, details) {
-  return NextResponse$1.json(
-    __spreadValues({
-      success: false,
-      error
-    }, details !== void 0 && { details }),
-    { status }
-  );
-}
-var ApiErrors = {
-  unauthorized: (message = "Unauthorized") => errorResponse(message, 401),
-  forbidden: (message = "Forbidden") => errorResponse(message, 403),
-  notFound: (resource = "Resource") => errorResponse(`${resource} not found`, 404),
-  badRequest: (message = "Bad request", details) => errorResponse(message, 400, details),
-  internalError: (message = "Internal server error") => errorResponse(message, 500),
-  validationError: (details) => errorResponse("Validation failed", 422, details)
-};
-function GlobalError({ error, reset }) {
-  useEffect(() => {
-    trackError(error, "unknown" /* UNKNOWN */, "critical" /* CRITICAL */, {
-      component: "GlobalError",
-      metadata: { digest: error.digest }
-    });
-  }, [error]);
-  return /* @__PURE__ */ jsx("html", { children: /* @__PURE__ */ jsxs(
-    "body",
-    {
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        alignItems: "center",
-        justifyContent: "center",
-        minHeight: "100vh",
-        margin: 0,
-        fontFamily: "system-ui, sans-serif",
-        padding: "2rem",
-        textAlign: "center"
-      },
-      children: [
-        /* @__PURE__ */ jsx("h1", { style: { fontSize: "2rem", marginBottom: "0.5rem" }, children: "Something went wrong" }),
-        /* @__PURE__ */ jsx("p", { style: { opacity: 0.7, marginBottom: "1.5rem" }, children: "A critical error occurred. We're working on it." }),
-        process.env.NODE_ENV === "development" && /* @__PURE__ */ jsxs(
-          "pre",
-          {
-            style: {
-              fontSize: "0.75rem",
-              padding: "1rem",
-              background: "#f3f4f6",
-              borderRadius: "0.5rem",
-              textAlign: "left",
-              maxWidth: "40rem",
-              overflow: "auto",
-              marginBottom: "1.5rem"
-            },
-            children: [
-              error.message,
-              error.digest ? `
-(digest: ${error.digest})` : ""
-            ]
-          }
-        ),
-        /* @__PURE__ */ jsx("button", { onClick: reset, type: "button", children: "Try again" })
-      ]
-    }
-  ) });
-}
-function ErrorView({
-  error,
-  reset,
-  heading = "Something went wrong",
-  description = "An unexpected error occurred. Please try again.",
-  retryLabel = "Try again"
-}) {
-  useEffect(() => {
-    trackError(error, "unknown" /* UNKNOWN */, "high" /* HIGH */, {
-      component: "ErrorView",
-      metadata: { digest: error.digest }
-    });
-  }, [error]);
-  return /* @__PURE__ */ jsxs(
-    "div",
-    {
-      role: "alert",
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        alignItems: "center",
-        justifyContent: "center",
-        minHeight: "50vh",
-        padding: "2rem",
-        textAlign: "center"
-      },
-      children: [
-        /* @__PURE__ */ jsx("h2", { style: { fontSize: "1.5rem", marginBottom: "0.5rem" }, children: heading }),
-        /* @__PURE__ */ jsx("p", { style: { opacity: 0.7, marginBottom: "1.5rem" }, children: description }),
-        process.env.NODE_ENV === "development" && error.digest && /* @__PURE__ */ jsxs("p", { style: { fontSize: "0.75rem", opacity: 0.5, marginBottom: "1rem" }, children: [
-          "digest: ",
-          error.digest
-        ] }),
-        /* @__PURE__ */ jsx("button", { onClick: reset, type: "button", children: retryLabel })
-      ]
-    }
-  );
-}
-function NotFoundView({
-  heading = "404 \u2014 Page not found",
-  description = "The page you are looking for does not exist.",
-  homeLabel = "Go home",
-  homeHref = "/"
-}) {
-  return /* @__PURE__ */ jsxs(
-    "div",
-    {
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        alignItems: "center",
-        justifyContent: "center",
-        minHeight: "60vh",
-        padding: "2rem",
-        textAlign: "center"
-      },
-      children: [
-        /* @__PURE__ */ jsx("h1", { style: { fontSize: "4rem", fontWeight: 700, marginBottom: "0.5rem" }, children: "404" }),
-        /* @__PURE__ */ jsx("h2", { style: { fontSize: "1.5rem", marginBottom: "0.75rem" }, children: heading }),
-        /* @__PURE__ */ jsx("p", { style: { opacity: 0.7, marginBottom: "2rem" }, children: description }),
-        /* @__PURE__ */ jsx("a", { href: homeHref, children: homeLabel })
-      ]
-    }
-  );
-}
-function UnauthorizedView({
-  heading = "401 \u2014 Unauthorized",
-  description = "You need to be signed in to view this page.",
-  loginLabel = "Sign in",
-  loginHref = "/auth/login",
-  homeLabel = "Go home",
-  homeHref = "/"
-}) {
-  return /* @__PURE__ */ jsxs(
-    "div",
-    {
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        alignItems: "center",
-        justifyContent: "center",
-        minHeight: "60vh",
-        padding: "2rem",
-        textAlign: "center"
-      },
-      children: [
-        /* @__PURE__ */ jsx("h1", { style: { fontSize: "4rem", fontWeight: 700, marginBottom: "0.5rem" }, children: "401" }),
-        /* @__PURE__ */ jsx("h2", { style: { fontSize: "1.5rem", marginBottom: "0.75rem" }, children: heading }),
-        /* @__PURE__ */ jsx("p", { style: { opacity: 0.7, marginBottom: "2rem" }, children: description }),
-        /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: "1rem" }, children: [
-          /* @__PURE__ */ jsx("a", { href: loginHref, children: loginLabel }),
-          /* @__PURE__ */ jsx("a", { href: homeHref, children: homeLabel })
-        ] })
-      ]
-    }
-  );
-}
-
-export { ApiErrors, ErrorView, GlobalError, NotFoundView, UnauthorizedView, buildBaseContext, createApiErrorHandler, createApiHandlerFactory, createApiMiddleware, createPiiRedactorMiddleware, createRouteHandler, errorResponse, getBooleanParam, getNumberParam, getOptionalSessionCookie, getRequiredSessionCookie, getSearchParams, getStringParam, invalidateCache, piiScrubberMiddleware, runChain, successResponse, withCache };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+/**
+ * @mohasinac/next — Next.js adapters and utilities
+ *
+ * Stage B4: IAuthVerifier interface + createApiErrorHandler factory.
+ */
+// Generic API error handler factory
+export { createApiErrorHandler } from "./api/errorHandler";
+// Provider-aware route handler factory for feat-* packages
+export { createRouteHandler } from "./api/routeHandler";
+// Generic API handler factory (auth + rate-limit + validation wrapper)
+export { createApiHandlerFactory } from "./api/apiHandler";
+export { createRouteHandler as createApiHandler } from "./api/routeHandler";
+// Request parsing helpers
+export { getSearchParams, getOptionalSessionCookie, getRequiredSessionCookie, getBooleanParam, getStringParam, getNumberParam, } from "./request-helpers";
+// Shared route-map primitives (SSR apps can extend/override)
+export { DEFAULT_ROUTE_MAP, createRouteMap, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, } from "./routing/route-map";
+// Response caching middleware
+export { withCache, invalidateCache } from "./cache-middleware";
+// PII-aware composable middleware chain (Phase 21)
+export { createApiMiddleware, runChain, buildBaseContext, } from "./middleware/chain";
+export { piiScrubberMiddleware } from "./middleware/pii-scrubber";
+export { createPiiRedactorMiddleware } from "./middleware/pii-redactor";
+// Standardized API response helpers
+export { successResponse, errorResponse, ApiErrors } from "./api/api-response";
+// Error UI view components
+export { GlobalError } from "./components/GlobalError";
+export { ErrorView } from "./components/ErrorView";
+export { NotFoundView } from "./components/NotFoundView";
+export { UnauthorizedView } from "./components/UnauthorizedView";
+export { ErrorBoundary } from "./ErrorBoundary";