@mohasinac/appkit 2.1.1 → 2.2.0

package/dist/features/auth/server.d.cts

@@ -1,24 +0,0 @@
-/**
- * feat-auth — API route handlers
- *
- * GET /api/auth/me  — return the currently authenticated user's profile.
- *
- * Consumer project wires this as a 2-line stub:
- *   export { authMeGET as GET } from "@mohasinac/feat-auth";
- */
-/**
- * Return the currently authenticated user's profile.
- * Reads the `__session` HTTP-only cookie → verifies via ISessionProvider →
- * fetches full profile via IAuthProvider.
- *
- * @example (letitrip.in stub)
- * ```ts
- * // src/app/api/auth/me/route.ts
- * export { authMeGET as GET } from "@mohasinac/feat-auth";
- * ```
- */
-declare const authMeGET: (request: Request, context: {
-    params: Promise<Record<string, string>>;
-}) => Promise<Response>;
-
-export { authMeGET };

package/dist/features/auth/server.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/errors/base-error.ts","../../../src/errors/error-codes.ts","../../../src/errors/api-error.ts","../../../src/errors/validation-error.ts","../../../src/errors/authentication-error.ts","../../../src/errors/authorization-error.ts","../../../src/errors/not-found-error.ts","../../../src/errors/database-error.ts","../../../src/errors/error-handler.ts","../../../src/errors/index.ts","../../../src/contracts/registry.ts","../../../src/next/api/routeHandler.ts","../../../src/next/request-helpers.ts","../../../src/core/Logger.ts","../../../src/core/Queue.ts","../../../src/core/StorageManager.ts","../../../src/core/EventBus.ts","../../../src/security/authorization.ts","../../../src/monitoring/client-logger.ts","../../../src/monitoring/server-logger.ts","../../../src/features/auth/api/route.ts"],"names":["NextResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAA,eAAA,GAAA,KAAA,CAAA;AAAA,EAAA,0BAAA,GAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,gBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,2BAAA,GAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,cAAA,GAAA,KAAA,CAAA;AAAA,EAAA,yBAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,qBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,gCAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,yBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,oCAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,wBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,mCAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,oBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,+BAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,mBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,8BAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;ACAA,IAAA,kBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,6BAAA,GAAA;AACA,IAAA,eAAA,EAAA;AACA,IAAA,gBAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACFA,IAAA,WAAA,GAAA,KAAA,CAAA;AAAA,EAAA,qBAAA,GAAA;AAAA,IAAA,eAAA,EAAA;AACA,IAAA,gBAAA,EAAA;AAEA,IAAA,cAAA,EAAA;AACA,IAAA,qBAAA,EAAA;AACA,IAAA,yBAAA,EAAA;AACA,IAAA,wBAAA,EAAA;AACA,IAAA,oBAAA,EAAA;AACA,IAAA,mBAAA,EAAA;AAEA,IAAA,kBAAA,EAAA;AAAA,EAAA;AAAA,CAAA,CAAA;ACqBO,SAAS,YAAA,GAAiC;AAC/C,EAAgB;AACd,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEF;;;ACqBA,SAAS,kBAAkB,OAAA,EAAiC;AA5D5D,EAAA,IAAA,EAAA;AA6DE,EAAA,MAAM,gBAAe,EAAA,GAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,MAA5B,IAAA,GAAA,EAAA,GAAiC,EAAA;AACtD,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,6BAA6B,CAAA;AAC9D,EAAA,OAAO,KAAA,GAAQ,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,IAAA;AAChD;AAMA,eAAe,cAAc,OAAA,EAAsC;AACjE,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,YAAA,EAAa;AACjC,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,iCAAiC,CAAA,EAAG;AAAA,MAChE,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACA,EAAA,MAAM,MAAA,GAAS,kBAAkB,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,yBAAyB,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC3E;AACA,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,CAAA;AAClD,IAAA,OAAO,cAAA,CAAA;AAAA,MACL,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,eAAe,OAAA,CAAQ;AAAA,KAAA,EACpB,OAAA,CAAQ,MAAA,CAAA;AAAA,EAEf,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,4BAA4B,CAAA,EAAG;AAAA,MAC3D,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAKO,SAAS,mBAGd,OAAA,EAA+C;AAC/C,EAAA,OAAO,OACL,SACA,OAAA,KACsB;AA3G1B,IAAA,IAAA,EAAA,EAAA,EAAA;AA4GI,IAAA,IAAI;AAEF,MAAA,IAAI,IAAA;AACJ,MAAA,MAAM,YACJ,OAAA,CAAQ,IAAA,IAAS,QAAQ,KAAA,IAAS,OAAA,CAAQ,MAAM,MAAA,GAAS,CAAA;AAE3D,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,IAAA,GAAO,MAAM,cAAc,OAAO,CAAA;AAAA,MACpC;AAEA,MAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AAC7C,QAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,OAAA,CAAQ,KAAA,CAAM,UAAS,EAAA,GAAA,IAAA,CAAK,IAAA,KAAL,IAAA,GAAA,EAAA,GAAa,EAAE,CAAA,EAAG;AACrD,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA2B;AAAA,YACpD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AAAA,MACF;AAGA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI;AACF,UAAA,GAAA,GAAM,MAAM,QAAQ,IAAA,EAAK;AAAA,QAC3B,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,mBAAA,EAAoB;AAAA,YAC7C,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAC3C,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB;AAAA,cACE,OAAA,EAAS,KAAA;AAAA,cACT,KAAA,EAAO,mBAAA;AAAA,cACP,MAAA,EAAA,CAAQ,EAAA,GAAA,MAAA,CAAO,KAAA,CAAM,MAAA,KAAb,YAAuB;AAAC,aAClC;AAAA,YACA,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAA,GAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AAGA,MAAA,MAAM,MAAA,GAAA,CAAS,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAS,MAAA,IAAS,MAAM,QAAQ,MAAA,GAAS,KAAA,CAAA;AAExD,MAAA,OAAO,MAAM,QAAQ,OAAA,CAAQ;AAAA,QAC3B,OAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAc;AAErB,MAAA,MAAM,SACJ,QAAQ,GAAA,IAAA,IAAA,GAAA,MAAA,GAAA,GAAA,CAA8B,MAAA,CAAA,KAAW,QAAA,GAC5C,IAA2B,MAAA,GAC5B,GAAA;AACN,MAAA,MAAM,OAAA,GACJ,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,uBAAA;AACvC,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,qBAAA,EAAwB,OAAA,CAAQ,MAAM,WAAW,GAAG,CAAA;AAClE,MAAA,OAAOA,YAAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,OAAA,EAAQ,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,IACzE;AAAA,EACF,CAAA;AACF;;;ACtKA,WAAA,EAAA;;;AC8BO,IAAM,MAAA,GAAN,MAAM,OAAA,CAAO;AAAA,EAgBV,YAAY,OAAA,EAAyB;AAd7C,IAAA,IAAA,CAAQ,OAAmB,EAAC;AAO5B,IAAA,IAAA,CAAQ,aAAA,GAA0C;AAAA,MAChD,KAAA,EAAO,CAAA;AAAA,MACP,IAAA,EAAM,CAAA;AAAA,MACN,IAAA,EAAM,CAAA;AAAA,MACN,KAAA,EAAO;AAAA,KACT;AApDF,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAwDI,IAAA,MAAM,WACJ,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,UAAA,KAAT,IAAA,GAAA,EAAA,GAAA,CACC,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,qBAAoB,iBAAA,GAAoB,MAAA;AACpD,IAAA,IAAA,CAAK,OAAA,GAAU;AAAA,MACb,QAAA,EAAA,CAAU,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,QAAA,KAAT,IAAA,GAAA,EAAA,GAAqB,OAAA;AAAA,MAC/B,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,aAAA,KAAT,IAAA,GAAA,EAAA,GAA0B,IAAA;AAAA,MACzC,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,aAAA,KAAT,IAAA,GAAA,EAAA,GAA0B,KAAA;AAAA,MACzC,UAAA,EAAY,OAAA;AAAA,MACZ,UAAA,EAAA,CAAY,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,UAAA,KAAT,IAAA,GAAA,EAAA,GAAuB,GAAA;AAAA,MACnC,WAAW,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS;AAAA,KACtB;AAAA,EACF;AAAA;AAAA,EAGA,OAAc,YAAY,OAAA,EAAiC;AACzD,IAAA,IAAI,CAAC,QAAO,QAAA,EAAU;AACpB,MAAA,OAAA,CAAO,QAAA,GAAW,IAAI,OAAA,CAAO,OAAO,CAAA;AAAA,IACtC;AACA,IAAA,OAAO,OAAA,CAAO,QAAA;AAAA,EAChB;AAAA;AAAA,EAGA,OAAc,aAAa,EAAA,EAAsC;AAC/D,IAAA,OAAA,CAAO,WAAA,EAAY,CAAE,OAAA,CAAQ,SAAA,GAAY,EAAA;AAAA,EAC3C;AAAA,EAEQ,UAAU,KAAA,EAA0B;AAC1C,IAAA,OACE,IAAA,CAAK,cAAc,KAAK,CAAA,IAAK,KAAK,aAAA,CAAc,IAAA,CAAK,QAAQ,QAAQ,CAAA;AAAA,EAEzE;AAAA,EAEQ,MAAA,CAAO,KAAA,EAAiB,OAAA,EAAiB,IAAA,EAAsB;AACrE,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG;AAE5B,IAAA,MAAM,SAAA,GACJ,QAAQ,IAAA,CAAK,OAAA,CAAQ,YAAY,IAAA,CAAK,OAAA,CAAQ,SAAA,CAAU,IAAI,CAAA,GAAI,IAAA;AAClE,IAAA,MAAM,KAAA,GAAkB;AAAA,MACtB,KAAA;AAAA,MACA,OAAA;AAAA,MACA,SAAA,sBAAe,IAAA,EAAK;AAAA,MACpB,IAAA,EAAM;AAAA,KACR;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,KAAK,KAAK,CAAA;AACpB,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAQ,UAAA,EAAY;AAC9C,MAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,IAClB;AAEA,IAAA,IAAI,IAAA,CAAK,QAAQ,aAAA,EAAe;AAC9B,MAAA,IAAA,CAAK,aAAa,KAAK,CAAA;AAAA,IACzB;AAEA,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,aAAA,IAAiB,OAAO,WAAW,WAAA,EAAa;AAC/D,MAAA,IAAA,CAAK,aAAA,EAAc;AAAA,IACrB;AAEA,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,UAAA,IAAc,KAAA,KAAU,OAAA,EAAS;AAChD,MAAA,IAAA,CAAK,WAAA,CAAY,KAAK,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAEpC,CAAC,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,aAAa,KAAA,EAAuB;AAC1C,IAAA,MAAM,MAAA,GAAS,CAAA,CAAA,EAAI,KAAA,CAAM,KAAA,CAAM,WAAA,EAAa,CAAA,EAAA,EAAK,KAAA,CAAM,SAAA,CAAU,WAAA,EAAa,CAAA,CAAA;AAC9E,IAAA,MAAM,OAAA,GAAU,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,OAAO,CAAA,CAAA;AAC1C,IAAA,QAAQ,MAAM,KAAA;AAAO,MACnB,KAAK,OAAA;AACH,QAAA,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AACjC,QAAA;AAAA,MACF,KAAK,MAAA;AACH,QAAA,OAAA,CAAQ,IAAA,CAAK,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA;AAAA,MACF,KAAK,MAAA;AACH,QAAA,OAAA,CAAQ,IAAA,CAAK,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AACjC,QAAA;AAAA;AACJ,EACF;AAAA,EAEQ,aAAA,GAAsB;AAC5B,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,QAAQ,UAAA,EAAY,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IAC5D,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,YAAY,KAAA,EAAgC;AACxD,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,IAAA,CAAK,QAAQ,UAAA,EAAY;AAC/D,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,UAAA,EAAY;AAAA,QACnC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,SAAS,KAAA,CAAM,OAAA;AAAA,UACf,SAAA,EAAW,KAAA,CAAM,SAAA,CAAU,WAAA,EAAY;AAAA,UACvC,MAAM,KAAA,CAAM;AAAA,SACb;AAAA,OACF,CAAA;AAAA,IACH,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,IAER;AAAA,EACF;AAAA,EAEO,KAAA,CAAM,SAAiB,IAAA,EAAsB;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,OAAA,EAAS,IAAI,CAAA;AAAA,EACpC;AAAA,EAEO,IAAA,CAAK,SAAiB,IAAA,EAAsB;AACjD,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAA;AAAA,EACnC;AAAA,EAEO,IAAA,CAAK,SAAiB,IAAA,EAAsB;AACjD,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAA;AAAA,EACnC;AAAA,EAEO,KAAA,CAAM,SAAiB,IAAA,EAAsB;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,OAAA,EAAS,IAAI,CAAA;AAAA,EACpC;AAAA,EAEO,QAAQ,KAAA,EAA8B;AAC3C,IAAA,IAAI,KAAA,SAAc,IAAA,CAAK,IAAA,CAAK,OAAO,CAAC,GAAA,KAAQ,GAAA,CAAI,KAAA,KAAU,KAAK,CAAA;AAC/D,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,IAAI,CAAA;AAAA,EACtB;AAAA,EAEO,KAAA,GAAc;AACnB,IAAA,IAAA,CAAK,OAAO,EAAC;AACb,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,aAAA,IAAiB,OAAO,WAAW,WAAA,EAAa;AAC/D,MAAA,YAAA,CAAa,WAAW,UAAU,CAAA;AAAA,IACpC;AAAA,EACF;AAAA,EAEO,MAAA,GAAiB;AACtB,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAA,EAAM,MAAM,CAAC,CAAA;AAAA,EAC1C;AAAA,EAEO,QAAA,GAAqC;AAC1C,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAK,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,KAAU,OAAO,CAAA,CAAE,MAAA;AAAA,MACpD,IAAA,EAAM,KAAK,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,KAAU,MAAM,CAAA,CAAE,MAAA;AAAA,MAClD,IAAA,EAAM,KAAK,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,KAAU,MAAM,CAAA,CAAE,MAAA;AAAA,MAClD,KAAA,EAAO,KAAK,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,KAAU,OAAO,CAAA,CAAE;AAAA,KACtD;AAAA,EACF;AACF,CAAA;AAGsB,OAAO,WAAA;;;ACvMb,OAAO,WAAA;;;ACCvB,IAAM,OAAA,GAAU,OAAO,WAAA,EAAY;AAS5B,IAAM,eAAA,GAAN,MAAM,eAAA,CAAe;AAAA,EAKlB,WAAA,CAAY,SAAiB,MAAA,EAAQ;AAC3C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAc,WAAA,CAAY,MAAA,GAAiB,EAAA,EAAoB;AAC7D,IAAA,IAAI,CAAC,eAAA,CAAe,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA,EAAG;AACzC,MAAA,eAAA,CAAe,UAAU,GAAA,CAAI,MAAA,EAAQ,IAAI,eAAA,CAAe,MAAM,CAAC,CAAA;AAAA,IACjE;AACA,IAAA,OAAO,eAAA,CAAe,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAAA,EAC5C;AAAA,EAEQ,WAAW,IAAA,EAAmC;AACpD,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,MAAA,MAAM,OAAA,GACJ,IAAA,KAAS,OAAA,GAAU,MAAA,CAAO,eAAe,MAAA,CAAO,cAAA;AAClD,MAAA,OAAO,OAAA,IAAA,IAAA,GAAA,OAAA,GAAW,IAAA;AAAA,IACpB,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,YAAY,GAAA,EAAqB;AACvC,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA;AAAA,EAC7B;AAAA,EAEO,GAAA,CAAO,GAAA,EAAa,KAAA,EAAU,OAAA,EAAmC;AAtD1E,IAAA,IAAA,EAAA;AAuDI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,OAAA,CAAQ,KAAK,WAAA,CAAY,GAAG,GAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAC5D,MAAA,OAAO,IAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,0BAAA,EAA4B,EAAE,KAAA,EAAO,CAAA;AACnD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEO,GAAA,CAAO,KAAa,OAAA,EAAoC;AAlEjE,IAAA,IAAA,EAAA;AAmEI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,WAAA,CAAY,GAAG,CAAC,CAAA;AAClD,MAAA,IAAI,IAAA,KAAS,MAAM,OAAO,IAAA;AAC1B,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,0BAAA,EAA4B,EAAE,KAAA,EAAO,CAAA;AACnD,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEO,MAAA,CAAO,KAAa,OAAA,EAAmC;AA/EhE,IAAA,IAAA,EAAA;AAgFI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,UAAA,CAAW,IAAA,CAAK,WAAA,CAAY,GAAG,CAAC,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,CAAA;AACtD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEO,MAAM,OAAA,EAAmC;AA3FlD,IAAA,IAAA,EAAA;AA4FI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM;AAClB,QAAA,IAAI,EAAE,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG,OAAA,CAAQ,WAAW,CAAC,CAAA;AAAA,MACrD,CAAC,CAAA;AACD,MAAA,OAAO,IAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,4BAAA,EAA8B,EAAE,KAAA,EAAO,CAAA;AACrD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEO,GAAA,CAAI,KAAa,OAAA,EAAmC;AACzD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,KAAM,IAAA;AAAA,EACpC;AAAA,EAEO,KAAK,OAAA,EAAoC;AA9GlD,IAAA,IAAA,EAAA;AA+GI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,OAAA,EAAS,OAAO,EAAC;AACtB,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AACvB,MAAA,IAAI,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,UAAA,CAAW,IAAA,CAAK,MAAA,CAAA,EAAS;AAC9B,QAAA,MAAA,CAAO,KAAK,CAAA,CAAE,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,MACzC;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEO,KAAK,OAAA,EAAkC;AA3HhD,IAAA,IAAA,EAAA,EAAA,EAAA;AA4HI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,SAAS,OAAO,CAAA;AACrB,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AACvB,MAAA,IAAI,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,UAAA,CAAW,IAAA,CAAK,MAAA,CAAA,EAAS;AAC9B,QAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA;AAC3B,QAAA,KAAA,IAAS,CAAA,CAAE,MAAA,IAAA,CAAU,EAAA,GAAA,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,MAAA,KAAH,IAAA,GAAA,EAAA,GAAa,CAAA,CAAA;AAAA,MACpC;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEO,WAAA,CAAY,OAAoB,OAAA,EAAkB;AACvD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AACpC,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,kBAAA;AAChB,MAAA,OAAA,CAAQ,OAAA,CAAQ,SAAS,GAAG,CAAA;AAC5B,MAAA,OAAA,CAAQ,WAAW,OAAO,CAAA;AAC1B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEO,OAAoB,OAAA,EAA6C;AAtJ1E,IAAA,IAAA,EAAA;AAuJI,IAAA,MAAM,UAAU,IAAA,CAAK,UAAA,CAAA,CAAW,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,YAAiB,OAAO,CAAA;AACxD,IAAA,IAAI,CAAC,OAAA,EAAS,OAAO,EAAC;AACtB,IAAA,MAAM,SAA4B,EAAC;AACnC,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AACvB,MAAA,IAAI,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,UAAA,CAAW,IAAA,CAAK,MAAA,CAAA,EAAS;AAC9B,QAAA,MAAM,CAAA,GAAI,KAAK,GAAA,CAAO,CAAA,CAAE,MAAM,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,EAAG,OAAO,CAAA;AAC1D,QAAA,IAAI,CAAA,KAAM,MAAM,MAAA,CAAO,CAAA,CAAE,MAAM,IAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA,GAAI,CAAA;AAAA,MACxD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAA;AAAA;AAhJa,eAAA,CAEI,SAAA,uBAAgB,GAAA,EAA4B;AAFtD,IAAM,cAAA,GAAN,eAAA;AAmJuB,cAAA,CAAe,WAAA,CAAY,EAAE;;;AC7J5C,OAAO,WAAA;;;ACEtB,WAAA,EAAA;;;ACDA,WAAA,EAAA;;;ACCA,WAAA,EAAA;;;ACMA,SAAS,aAAa,CAAA,EAAgC;AAjBtD,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAkBE,EAAA,OAAO;AAAA,IACL,IAAI,CAAA,CAAE,GAAA;AAAA,IACN,KAAA,EAAA,CAAO,EAAA,GAAA,CAAA,CAAE,KAAA,KAAF,IAAA,GAAA,EAAA,GAAW,MAAA;AAAA,IAClB,WAAA,EAAA,CAAa,EAAA,GAAA,CAAA,CAAE,WAAA,KAAF,IAAA,GAAA,EAAA,GAAiB,MAAA;AAAA,IAC9B,QAAA,EAAA,CAAU,EAAA,GAAA,CAAA,CAAE,QAAA,KAAF,IAAA,GAAA,EAAA,GAAc,MAAA;AAAA,IACxB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,iBAAiB,CAAA,CAAE;AAAA,GACrB;AACF;AAeO,IAAM,YAAY,kBAAA,CAAmB;AAAA,EAC1C,IAAA,EAAM,IAAA;AAAA,EACN,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAA6B;AAClD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,YAAA,EAAa;AAC9B,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,QAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,8BAAA,EAA+B;AAAA,QACxD,EAAE,QAAQ,GAAA;AAAI,OAChB;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAM,GAAG,CAAA;AAC5C,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,QAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAiB;AAAA,QAC1C,EAAE,QAAQ,GAAA;AAAI,OAChB;AAAA,IACF;AAEA,IAAA,OAAOA,YAAAA,CAAa,KAAK,EAAE,OAAA,EAAS,MAAM,IAAA,EAAM,YAAA,CAAa,OAAO,CAAA,EAAG,CAAA;AAAA,EACzE;AACF,CAAC","file":"server.js","sourcesContent":["export class AppError extends Error {\n  constructor(\n    public statusCode: number,\n    public message: string,\n    public code: string,\n    public data?: unknown,\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  toJSON(): {\n    success: false;\n    error: string;\n    code: string;\n    statusCode: number;\n    data?: unknown;\n  } {\n    return {\n      success: false,\n      error: this.message,\n      code: this.code,\n      statusCode: this.statusCode,\n      ...(this.data !== undefined && { data: this.data }),\n    };\n  }\n}\n","export const ERROR_CODES = {\n  // Authentication\n  AUTH_INVALID_CREDENTIALS: \"AUTH_001\",\n  AUTH_TOKEN_EXPIRED: \"AUTH_002\",\n  AUTH_TOKEN_INVALID: \"AUTH_003\",\n  AUTH_SESSION_EXPIRED: \"AUTH_004\",\n  AUTH_EMAIL_NOT_VERIFIED: \"AUTH_005\",\n\n  // Validation\n  VALIDATION_REQUIRED_FIELD: \"VAL_001\",\n  VALIDATION_INVALID_INPUT: \"VAL_002\",\n  VALIDATION_INVALID_EMAIL: \"VAL_003\",\n  VALIDATION_INVALID_PASSWORD: \"VAL_004\",\n  VALIDATION_INVALID_PHONE: \"VAL_005\",\n\n  // User\n  USER_NOT_FOUND: \"USER_001\",\n  USER_ALREADY_EXISTS: \"USER_002\",\n  USER_NOT_AUTHENTICATED: \"USER_003\",\n  USER_ACCOUNT_DISABLED: \"USER_004\",\n\n  // Database\n  DB_OPERATION_FAILED: \"DB_001\",\n  DB_NOT_FOUND: \"DB_002\",\n  DB_DUPLICATE_ENTRY: \"DB_003\",\n\n  // Email\n  EMAIL_SEND_FAILED: \"EMAIL_001\",\n  EMAIL_INVALID_TEMPLATE: \"EMAIL_002\",\n  EMAIL_RATE_LIMITED: \"EMAIL_003\",\n  EMAIL_DELIVERY_FAILED: \"EMAIL_004\",\n\n  // Password\n  PWD_RESET_TOKEN_EXPIRED: \"PWD_001\",\n  PWD_RESET_TOKEN_INVALID: \"PWD_002\",\n  PWD_TOO_WEAK: \"PWD_003\",\n  PWD_HISTORY_REUSE: \"PWD_004\",\n  PWD_SAME_AS_CURRENT: \"PWD_005\",\n\n  // Authorization\n  AUTHZ_FORBIDDEN: \"AUTHZ_001\",\n  AUTHZ_INSUFFICIENT_ROLE: \"AUTHZ_002\",\n\n  // General\n  GEN_BAD_REQUEST: \"GEN_001\",\n  GEN_NOT_FOUND: \"GEN_002\",\n  GEN_INTERNAL_ERROR: \"GEN_003\",\n  GEN_SERVICE_UNAVAILABLE: \"GEN_004\",\n  GEN_RATE_LIMITED: \"GEN_005\",\n  GEN_UNKNOWN: \"GEN_999\",\n} as const;\n\nexport type ErrorCode = (typeof ERROR_CODES)[keyof typeof ERROR_CODES];\n\nexport const ERROR_MESSAGES: Record<ErrorCode, string> = {\n  // Authentication\n  AUTH_001: \"Invalid email or password\",\n  AUTH_002: \"Your session has expired. Please log in again\",\n  AUTH_003: \"Invalid authentication token\",\n  AUTH_004: \"Your session has expired. Please log in again\",\n  AUTH_005: \"Please verify your email address before logging in\",\n\n  // Validation\n  VAL_001: \"This field is required\",\n  VAL_002: \"Invalid input provided\",\n  VAL_003: \"Please enter a valid email address\",\n  VAL_004:\n    \"Password must be at least 12 characters with uppercase, lowercase, number and special character\",\n  VAL_005: \"Please enter a valid phone number\",\n\n  // User\n  USER_001: \"User not found\",\n  USER_002: \"An account with this email already exists\",\n  USER_003: \"Please log in to continue\",\n  USER_004: \"Your account has been disabled. Please contact support\",\n\n  // Database\n  DB_001: \"A database error occurred. Please try again\",\n  DB_002: \"The requested resource was not found\",\n  DB_003: \"This record already exists\",\n\n  // Email\n  EMAIL_001: \"Failed to send email. Please try again\",\n  EMAIL_002: \"Invalid email template\",\n  EMAIL_003: \"Too many emails sent. Please wait before trying again\",\n  EMAIL_004: \"Email delivery failed. Please check the address and try again\",\n\n  // Password\n  PWD_001: \"Password reset link has expired. Please request a new one\",\n  PWD_002: \"Invalid password reset link\",\n  PWD_003: \"Password does not meet security requirements\",\n  PWD_004: \"Cannot reuse a recent password\",\n  PWD_005: \"New password must be different from your current password\",\n\n  // Authorization\n  AUTHZ_001: \"You do not have permission to perform this action\",\n  AUTHZ_002: \"Insufficient role to perform this action\",\n\n  // General\n  GEN_001: \"Bad request\",\n  GEN_002: \"The requested resource was not found\",\n  GEN_003: \"An internal server error occurred\",\n  GEN_004: \"Service temporarily unavailable\",\n  GEN_005: \"Too many requests. Please slow down\",\n  GEN_999: \"An unknown error occurred\",\n};\n","import { AppError } from \"./base-error\";\n\nexport class ApiError extends AppError {\n  constructor(statusCode: number, message: string, data?: unknown) {\n    super(statusCode, message, \"API_ERROR\", data);\n  }\n}\n","import { AppError } from \"./base-error\";\n\nexport class ValidationError extends AppError {\n  constructor(message: string, fields?: unknown) {\n    super(400, message, \"VALIDATION_ERROR\", fields);\n  }\n}\n","import { AppError } from \"./base-error\";\n\nexport class AuthenticationError extends AppError {\n  constructor(message: string, data?: unknown) {\n    super(401, message, \"AUTHENTICATION_ERROR\", data);\n  }\n}\n","import { AppError } from \"./base-error\";\n\nexport class AuthorizationError extends AppError {\n  constructor(message: string, data?: unknown) {\n    super(403, message, \"AUTHORIZATION_ERROR\", data);\n  }\n}\n","import { AppError } from \"./base-error\";\n\nexport class NotFoundError extends AppError {\n  constructor(message: string, data?: unknown) {\n    super(404, message, \"NOT_FOUND\", data);\n  }\n}\n","import { AppError } from \"./base-error\";\n\nexport class DatabaseError extends AppError {\n  constructor(message: string, data?: unknown) {\n    super(500, message, \"DATABASE_ERROR\", data);\n  }\n}\n","import { NextResponse } from \"next/server.js\";\nimport { AppError } from \"./base-error\";\nimport { ERROR_CODES, ERROR_MESSAGES } from \"./error-codes\";\n\n/**\n * Handle API errors with consistent response format.\n * Use in Next.js API route catch blocks.\n */\nexport function handleApiError(error: unknown): NextResponse {\n  if (error instanceof AppError) {\n    if (error.statusCode >= 500) {\n      console.error(\"[API Error]\", {\n        code: error.code,\n        message: error.message,\n        statusCode: error.statusCode,\n        data: error.data,\n      });\n    }\n    return NextResponse.json(error.toJSON(), { status: error.statusCode });\n  }\n\n  // Zod / schema validation errors\n  if (error && typeof error === \"object\" && \"issues\" in error) {\n    return NextResponse.json(\n      {\n        success: false,\n        error: \"Validation failed\",\n        code: ERROR_CODES.VALIDATION_INVALID_INPUT,\n        data: error,\n      },\n      { status: 400 },\n    );\n  }\n\n  console.error(\"[Unexpected API Error]\", {\n    error:\n      error instanceof Error\n        ? { name: error.name, message: error.message, stack: error.stack }\n        : error,\n  });\n\n  return NextResponse.json(\n    {\n      success: false,\n      error: ERROR_MESSAGES[ERROR_CODES.GEN_INTERNAL_ERROR],\n      code: ERROR_CODES.GEN_INTERNAL_ERROR,\n    },\n    { status: 500 },\n  );\n}\n\n/**\n * Log an error with optional context. Wraps console.error for package portability;\n * replace with your structured logger if needed.\n */\nexport function logError(\n  error: unknown,\n  context?: Record<string, unknown>,\n): void {\n  console.error(\"[Application Error]\", {\n    ...(context && { context }),\n    error:\n      error instanceof Error\n        ? { name: error.name, message: error.message, stack: error.stack }\n        : error,\n  });\n}\n\n/**\n * Type guard — check if a value is an AppError instance.\n */\nexport function isAppError(error: unknown): error is AppError {\n  return error instanceof AppError;\n}\n","export { AppError } from \"./base-error\";\nexport { ERROR_CODES, ERROR_MESSAGES } from \"./error-codes\";\nexport type { ErrorCode } from \"./error-codes\";\nexport { ApiError } from \"./api-error\";\nexport { ValidationError } from \"./validation-error\";\nexport { AuthenticationError } from \"./authentication-error\";\nexport { AuthorizationError } from \"./authorization-error\";\nexport { NotFoundError } from \"./not-found-error\";\nexport { DatabaseError } from \"./database-error\";\n// error-handler uses `next/server` — only import in server/API-route contexts\nexport { handleApiError, logError, isAppError } from \"./error-handler\";\n","import type { IAuthProvider, ISessionProvider } from \"./auth.js\";\nimport type { IEmailProvider } from \"./email.js\";\nimport type { IStorageProvider } from \"./storage.js\";\nimport type { IPaymentProvider } from \"./payment.js\";\nimport type { IShippingProvider } from \"./shipping.js\";\nimport type { ISearchProvider } from \"./search.js\";\nimport type { ICacheProvider, IQueueProvider, IEventBus } from \"./infra.js\";\nimport type { IStyleAdapter } from \"./style.js\";\nimport type { IDbProvider } from \"./repository.js\";\n\nexport interface ProviderRegistry {\n  auth: IAuthProvider;\n  session: ISessionProvider;\n  email: IEmailProvider;\n  storage: IStorageProvider;\n  style: IStyleAdapter;\n  db?: IDbProvider;\n  payment?: IPaymentProvider;\n  shipping?: IShippingProvider;\n  search?: ISearchProvider;\n  cache?: ICacheProvider;\n  queue?: IQueueProvider;\n  eventBus?: IEventBus;\n}\n\nlet _registry: ProviderRegistry | null = null;\n\nexport function registerProviders(registry: ProviderRegistry): void {\n  _registry = registry;\n}\n\nexport function getProviders(): ProviderRegistry {\n  if (!_registry) {\n    throw new Error(\n      \"[contracts] Call registerProviders() before getProviders(). \" +\n        \"Ensure providers.config.ts is imported at app startup.\",\n    );\n  }\n  return _registry;\n}\n\nexport function _resetProviders(): void {\n  _registry = null;\n}","/**\r\n * createRouteHandler — provider-aware API route handler factory for feat-* packages.\r\n *\r\n * Works like letitrip.in's local `createApiHandler` but uses `getProviders().session`\r\n * for auth instead of a hardwired Firebase Admin call. This makes it portable across\r\n * all consumer projects that register an `ISessionProvider`.\r\n *\r\n * @example\r\n * ```ts\r\n * export const POST = createRouteHandler({\r\n *   auth: true,\r\n *   roles: [\"admin\"],\r\n *   schema: mySchema,\r\n *   handler: async ({ user, body }) => { ... },\r\n * });\r\n * ```\r\n */\r\n\r\nimport { NextResponse } from \"next/server.js\";\r\nimport { getProviders } from \"@mohasinac/contracts\";\r\n\r\n/** Minimal schema interface compatible with Zod v3 and v4. */\r\ninterface ParseableSchema<TOutput> {\r\n  safeParse(\r\n    data: unknown,\r\n  ):\r\n    | { success: true; data: TOutput }\r\n    | { success: false; error: { issues?: unknown[] } };\r\n}\r\n\r\nexport interface RouteUser {\r\n  uid: string;\r\n  email?: string | null;\r\n  role?: string;\r\n  [key: string]: unknown;\r\n}\r\n\r\ninterface RouteHandlerOptions<\r\n  TInput = unknown,\r\n  TParams = Record<string, string>,\r\n> {\r\n  /** Require a valid session cookie. Implied when `roles` is set. */\r\n  auth?: boolean;\r\n  /**\r\n   * If provided, the verified user's `role` must be in this list.\r\n   * Implies `auth: true`.\r\n   */\r\n  roles?: string[];\r\n  /** Zod schema to validate + parse the JSON request body. */\r\n  schema?: ParseableSchema<TInput>;\r\n  /** Route handler. `user` is present when `auth: true`. */\r\n  handler: (ctx: {\r\n    request: Request;\r\n    user?: RouteUser;\r\n    body?: TInput;\r\n    params?: TParams;\r\n  }) => Promise<Response>;\r\n}\r\n\r\n/** Read the `__session` HTTP-only cookie from request headers. */\r\nfunction readSessionCookie(request: Request): string | null {\r\n  const cookieHeader = request.headers.get(\"cookie\") ?? \"\";\r\n  const match = cookieHeader.match(/(?:^|;\\s*)__session=([^;]+)/);\r\n  return match ? decodeURIComponent(match[1]) : null;\r\n}\r\n\r\n/**\r\n * Verify the session cookie using `getProviders().session`.\r\n * Returns a `RouteUser` on success, or throws for invalid credentials.\r\n */\r\nasync function verifySession(request: Request): Promise<RouteUser> {\r\n  const { session } = getProviders();\r\n  if (!session) {\r\n    throw Object.assign(new Error(\"Session provider not configured\"), {\r\n      status: 503,\r\n    });\r\n  }\r\n  const cookie = readSessionCookie(request);\r\n  if (!cookie) {\r\n    throw Object.assign(new Error(\"Authentication required\"), { status: 401 });\r\n  }\r\n  try {\r\n    const payload = await session.verifySession(cookie);\r\n    return {\r\n      uid: payload.uid,\r\n      email: payload.email,\r\n      role: payload.role,\r\n      emailVerified: payload.emailVerified,\r\n      ...payload.claims,\r\n    };\r\n  } catch {\r\n    throw Object.assign(new Error(\"Invalid or expired session\"), {\r\n      status: 401,\r\n    });\r\n  }\r\n}\r\n\r\n/**\r\n * Create a typed Next.js App Router handler with built-in auth + Zod validation.\r\n */\r\nexport function createRouteHandler<\r\n  TInput = unknown,\r\n  TParams = Record<string, string>,\r\n>(options: RouteHandlerOptions<TInput, TParams>) {\r\n  return async (\r\n    request: Request,\r\n    context: { params: Promise<TParams> },\r\n  ): Promise<Response> => {\r\n    try {\r\n      // ── Auth ──────────────────────────────────────────────────────────────\r\n      let user: RouteUser | undefined;\r\n      const needsAuth =\r\n        options.auth || (options.roles && options.roles.length > 0);\r\n\r\n      if (needsAuth) {\r\n        user = await verifySession(request);\r\n      }\r\n\r\n      if (options.roles && options.roles.length > 0) {\r\n        if (!user || !options.roles.includes(user.role ?? \"\")) {\r\n          return NextResponse.json(\r\n            { success: false, error: \"Insufficient permissions\" },\r\n            { status: 403 },\r\n          );\r\n        }\r\n      }\r\n\r\n      // ── Body validation ───────────────────────────────────────────────────\r\n      let body: TInput | undefined;\r\n      if (options.schema) {\r\n        let raw: unknown;\r\n        try {\r\n          raw = await request.json();\r\n        } catch {\r\n          return NextResponse.json(\r\n            { success: false, error: \"Invalid JSON body\" },\r\n            { status: 400 },\r\n          );\r\n        }\r\n        const result = options.schema.safeParse(raw);\r\n        if (!result.success) {\r\n          return NextResponse.json(\r\n            {\r\n              success: false,\r\n              error: \"Validation failed\",\r\n              issues: result.error.issues ?? [],\r\n            },\r\n            { status: 400 },\r\n          );\r\n        }\r\n        body = result.data;\r\n      }\r\n\r\n      // ── Params ────────────────────────────────────────────────────────────\r\n      const params = context?.params ? await context.params : undefined;\r\n\r\n      return await options.handler({\r\n        request,\r\n        user,\r\n        body,\r\n        params: params as TParams | undefined,\r\n      });\r\n    } catch (err: unknown) {\r\n      // Structured errors thrown with .status\r\n      const status =\r\n        typeof (err as { status?: unknown })?.status === \"number\"\r\n          ? (err as { status: number }).status\r\n          : 500;\r\n      const message =\r\n        err instanceof Error ? err.message : \"Internal server error\";\r\n      console.error(`[createRouteHandler] ${request.method} failed`, err);\r\n      return NextResponse.json({ success: false, error: message }, { status });\r\n    }\r\n  };\r\n}\r\n","/**\r\n * API Request Helpers\r\n *\r\n * Generic utilities for API route request parsing and session extraction.\r\n * Uses structural request types (not NextRequest) to avoid cross-package\r\n * type identity issues when multiple Next.js installs exist in a monorepo.\r\n */\r\n\r\nimport { AuthenticationError } from \"@mohasinac/errors\";\r\n\r\ninterface CookieStoreLike {\r\n  get(name: string): { value?: string } | string | undefined;\r\n}\r\n\r\ntype CookieCapableRequest = Request & { cookies?: CookieStoreLike };\r\n\r\nfunction readCookieFromHeader(request: Request, name: string): string | undefined {\r\n  const cookieHeader = request.headers.get(\"cookie\") ?? \"\";\r\n  const match = cookieHeader.match(\r\n    new RegExp(`(?:^|;\\\\s*)${name}=([^;]+)`),\r\n  );\r\n  return match ? decodeURIComponent(match[1]) : undefined;\r\n}\r\n\r\nexport function getSearchParams(request: Request): URLSearchParams {\r\n  return new URL(request.url).searchParams;\r\n}\r\n\r\nexport function getOptionalSessionCookie(\r\n  request: CookieCapableRequest,\r\n): string | undefined {\r\n  const cookieValue = request.cookies?.get(\"__session\");\r\n  if (typeof cookieValue === \"string\") return cookieValue;\r\n  if (cookieValue && typeof cookieValue === \"object\") return cookieValue.value;\r\n  return readCookieFromHeader(request, \"__session\");\r\n}\r\n\r\nexport function getRequiredSessionCookie(request: CookieCapableRequest): string {\r\n  const cookie = getOptionalSessionCookie(request);\r\n  if (!cookie) throw new AuthenticationError(\"Unauthorized\");\r\n  return cookie;\r\n}\r\n\r\nexport function getBooleanParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n): boolean | undefined {\r\n  const value = searchParams.get(key);\r\n  if (value === null) return undefined;\r\n  return value === \"true\";\r\n}\r\n\r\nexport function getStringParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n): string | undefined {\r\n  const value = searchParams.get(key);\r\n  if (!value) return undefined;\r\n  return value;\r\n}\r\n\r\nexport function getNumberParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n  fallback: number,\r\n  options?: { min?: number; max?: number },\r\n): number {\r\n  const rawValue = searchParams.get(key);\r\n  const parsed = rawValue ? Number.parseInt(rawValue, 10) : fallback;\r\n  const safeValue = Number.isNaN(parsed) ? fallback : parsed;\r\n  if (typeof options?.min === \"number\" && safeValue < options.min)\r\n    return options.min;\r\n  if (typeof options?.max === \"number\" && safeValue > options.max)\r\n    return options.max;\r\n  return safeValue;\r\n}\r\n","/**\n * Logger Class — @mohasinac/core\n *\n * Singleton class for application logging.\n * Pure utility — no framework or app-specific imports.\n *\n * The `logFileUrl` constructor option replaces the previous app-specific\n * `import(\"@/constants\")` call, making this usable in any context.\n */\n\nexport type LogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\nexport interface LogEntry {\n  level: LogLevel;\n  message: string;\n  timestamp: Date;\n  data?: unknown;\n}\n\nexport interface LoggerOptions {\n  minLevel?: LogLevel;\n  enableConsole?: boolean;\n  enableStorage?: boolean;\n  /**\n   * URL to POST error log entries. Set to your `/api/logs/write` route.\n   */\n  logFileUrl?: string;\n  /**\n   * @deprecated Prefer `logFileUrl`. When `true` and `logFileUrl` is not set,\n   * defaults to `/api/logs/write` for backward compatibility with the\n   * previous app-coupled Logger implementation.\n   */\n  enableFileLogging?: boolean;\n  maxEntries?: number;\n  /** Optional function to sanitize data before logging (e.g., PII redaction). */\n  sanitizer?: (data: unknown) => unknown;\n}\n\nexport class Logger {\n  private static instance: Logger;\n  private logs: LogEntry[] = [];\n  private options: Required<\n    Omit<LoggerOptions, \"logFileUrl\" | \"enableFileLogging\" | \"sanitizer\">\n  > & {\n    logFileUrl?: string;\n    sanitizer?: (data: unknown) => unknown;\n  };\n  private levelPriority: Record<LogLevel, number> = {\n    debug: 0,\n    info: 1,\n    warn: 2,\n    error: 3,\n  };\n\n  private constructor(options?: LoggerOptions) {\n    // `enableFileLogging: true` is a backward-compat alias for logFileUrl.\n    const fileUrl =\n      options?.logFileUrl ??\n      (options?.enableFileLogging ? \"/api/logs/write\" : undefined);\n    this.options = {\n      minLevel: options?.minLevel ?? \"debug\",\n      enableConsole: options?.enableConsole ?? true,\n      enableStorage: options?.enableStorage ?? false,\n      logFileUrl: fileUrl,\n      maxEntries: options?.maxEntries ?? 1000,\n      sanitizer: options?.sanitizer,\n    };\n  }\n\n  /** Get singleton instance */\n  public static getInstance(options?: LoggerOptions): Logger {\n    if (!Logger.instance) {\n      Logger.instance = new Logger(options);\n    }\n    return Logger.instance;\n  }\n\n  /** Set or update the data sanitizer (e.g., for PII redaction). */\n  public static setSanitizer(fn: (data: unknown) => unknown): void {\n    Logger.getInstance().options.sanitizer = fn;\n  }\n\n  private shouldLog(level: LogLevel): boolean {\n    return (\n      this.levelPriority[level] >= this.levelPriority[this.options.minLevel]\n    );\n  }\n\n  private addLog(level: LogLevel, message: string, data?: unknown): void {\n    if (!this.shouldLog(level)) return;\n\n    const sanitized =\n      data && this.options.sanitizer ? this.options.sanitizer(data) : data;\n    const entry: LogEntry = {\n      level,\n      message,\n      timestamp: new Date(),\n      data: sanitized,\n    };\n\n    this.logs.push(entry);\n    if (this.logs.length > this.options.maxEntries) {\n      this.logs.shift();\n    }\n\n    if (this.options.enableConsole) {\n      this.logToConsole(entry);\n    }\n\n    if (this.options.enableStorage && typeof window !== \"undefined\") {\n      this.saveToStorage();\n    }\n\n    if (this.options.logFileUrl && level === \"error\") {\n      this.writeToFile(entry).catch(() => {\n        // Silently fail to prevent recursive logging\n      });\n    }\n  }\n\n  private logToConsole(entry: LogEntry): void {\n    const prefix = `[${entry.level.toUpperCase()}] ${entry.timestamp.toISOString()}`;\n    const message = `${prefix} ${entry.message}`;\n    switch (entry.level) {\n      case \"debug\":\n        console.debug(message, entry.data);\n        break;\n      case \"info\":\n        console.info(message, entry.data);\n        break;\n      case \"warn\":\n        console.warn(message, entry.data);\n        break;\n      case \"error\":\n        console.error(message, entry.data);\n        break;\n    }\n  }\n\n  private saveToStorage(): void {\n    try {\n      localStorage.setItem(\"app_logs\", JSON.stringify(this.logs));\n    } catch {\n      // Silently fail\n    }\n  }\n\n  private async writeToFile(entry: LogEntry): Promise<void> {\n    if (typeof window === \"undefined\" || !this.options.logFileUrl) return;\n    try {\n      await fetch(this.options.logFileUrl, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          level: entry.level,\n          message: entry.message,\n          timestamp: entry.timestamp.toISOString(),\n          data: entry.data,\n        }),\n      });\n    } catch {\n      // Silently fail\n    }\n  }\n\n  public debug(message: string, data?: unknown): void {\n    this.addLog(\"debug\", message, data);\n  }\n\n  public info(message: string, data?: unknown): void {\n    this.addLog(\"info\", message, data);\n  }\n\n  public warn(message: string, data?: unknown): void {\n    this.addLog(\"warn\", message, data);\n  }\n\n  public error(message: string, data?: unknown): void {\n    this.addLog(\"error\", message, data);\n  }\n\n  public getLogs(level?: LogLevel): LogEntry[] {\n    if (level) return this.logs.filter((log) => log.level === level);\n    return [...this.logs];\n  }\n\n  public clear(): void {\n    this.logs = [];\n    if (this.options.enableStorage && typeof window !== \"undefined\") {\n      localStorage.removeItem(\"app_logs\");\n    }\n  }\n\n  public export(): string {\n    return JSON.stringify(this.logs, null, 2);\n  }\n\n  public getStats(): Record<LogLevel, number> {\n    return {\n      debug: this.logs.filter((l) => l.level === \"debug\").length,\n      info: this.logs.filter((l) => l.level === \"info\").length,\n      warn: this.logs.filter((l) => l.level === \"warn\").length,\n      error: this.logs.filter((l) => l.level === \"error\").length,\n    };\n  }\n}\n\n/** Shared singleton instance */\nexport const logger = Logger.getInstance();\n","/**\n * Queue Class — @mohasinac/core\n *\n * Generic priority queue for task management.\n * Pure utility — no framework or app-specific imports.\n */\n\nimport { Logger } from \"./Logger\";\n\nconst qLogger = Logger.getInstance();\n\nexport interface QueueOptions {\n  concurrency?: number;\n  autoStart?: boolean;\n}\n\nexport interface Task<T = unknown> {\n  id: string;\n  fn: () => Promise<T>;\n  priority?: number;\n}\n\nexport class Queue<T = unknown> {\n  private tasks: Task<T>[] = [];\n  private running: number = 0;\n  private readonly concurrency: number;\n  private autoStart: boolean;\n  private results: Map<string, T> = new Map();\n  private errors: Map<string, Error> = new Map();\n\n  constructor(options?: QueueOptions) {\n    this.concurrency = options?.concurrency ?? 1;\n    this.autoStart = options?.autoStart ?? true;\n  }\n\n  /** Add a task to the queue */\n  public add(id: string, fn: () => Promise<T>, priority: number = 0): void {\n    this.tasks.push({ id, fn, priority });\n    this.tasks.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));\n    if (this.autoStart) {\n      this.process();\n    }\n  }\n\n  private process(): void {\n    while (this.running < this.concurrency && this.tasks.length > 0) {\n      const task = this.tasks.shift();\n      if (!task) break;\n      this.running++;\n      task\n        .fn()\n        .then((result) => {\n          this.results.set(task.id, result);\n        })\n        .catch((error: unknown) => {\n          this.errors.set(task.id, error as Error);\n        })\n        .finally(() => {\n          this.running--;\n          this.process();\n        })\n        .catch((err: unknown) => {\n          qLogger.error(\"Queue.process error in finally\", { err });\n        });\n    }\n  }\n\n  public start(): void {\n    this.process();\n  }\n\n  public pause(): void {\n    this.autoStart = false;\n  }\n\n  public resume(): void {\n    this.autoStart = true;\n    this.process();\n  }\n\n  public clear(): void {\n    this.tasks = [];\n    this.results.clear();\n    this.errors.clear();\n  }\n\n  public getResult(id: string): T | undefined {\n    return this.results.get(id);\n  }\n\n  public getError(id: string): Error | undefined {\n    return this.errors.get(id);\n  }\n\n  public size(): number {\n    return this.tasks.length;\n  }\n\n  public getRunning(): number {\n    return this.running;\n  }\n\n  public isEmpty(): boolean {\n    return this.tasks.length === 0 && this.running === 0;\n  }\n\n  public async waitForCompletion(): Promise<void> {\n    while (!this.isEmpty()) {\n      await new Promise<void>((resolve) => setTimeout(resolve, 100));\n    }\n  }\n\n  public getStats(): {\n    pending: number;\n    running: number;\n    completed: number;\n    failed: number;\n  } {\n    return {\n      pending: this.tasks.length,\n      running: this.running,\n      completed: this.results.size,\n      failed: this.errors.size,\n    };\n  }\n}\n","/**\n * StorageManager Class — @mohasinac/core\n *\n * Singleton class for managing localStorage and sessionStorage with\n * namespace prefixing and SSR-safe fallbacks.\n * Pure utility — no framework or app-specific imports.\n */\n\nimport { Logger } from \"./Logger\";\n\nconst sLogger = Logger.getInstance();\n\nexport type StorageType = \"local\" | \"session\";\n\nexport interface StorageOptions {\n  type?: StorageType;\n  prefix?: string;\n}\n\nexport class StorageManager {\n  /** Per-prefix instance map — prevents namespace collisions */\n  private static instances = new Map<string, StorageManager>();\n  private readonly prefix: string;\n\n  private constructor(prefix: string = \"app_\") {\n    this.prefix = prefix;\n  }\n\n  /**\n   * Get-or-create a StorageManager for the given prefix.\n   * Each prefix returns an independent instance.\n   */\n  public static getInstance(prefix: string = \"\"): StorageManager {\n    if (!StorageManager.instances.has(prefix)) {\n      StorageManager.instances.set(prefix, new StorageManager(prefix));\n    }\n    return StorageManager.instances.get(prefix)!;\n  }\n\n  private getStorage(type: StorageType): Storage | null {\n    try {\n      if (typeof window === \"undefined\") return null;\n      const storage =\n        type === \"local\" ? window.localStorage : window.sessionStorage;\n      return storage ?? null;\n    } catch {\n      return null;\n    }\n  }\n\n  private generateKey(key: string): string {\n    return `${this.prefix}${key}`;\n  }\n\n  public set<T>(key: string, value: T, options?: StorageOptions): boolean {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return false;\n    try {\n      storage.setItem(this.generateKey(key), JSON.stringify(value));\n      return true;\n    } catch (error) {\n      sLogger.error(\"StorageManager.set error\", { error });\n      return false;\n    }\n  }\n\n  public get<T>(key: string, options?: StorageOptions): T | null {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return null;\n    try {\n      const item = storage.getItem(this.generateKey(key));\n      if (item === null) return null;\n      return JSON.parse(item) as T;\n    } catch (error) {\n      sLogger.error(\"StorageManager.get error\", { error });\n      return null;\n    }\n  }\n\n  public remove(key: string, options?: StorageOptions): boolean {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return false;\n    try {\n      storage.removeItem(this.generateKey(key));\n      return true;\n    } catch (error) {\n      sLogger.error(\"StorageManager.remove error\", { error });\n      return false;\n    }\n  }\n\n  public clear(options?: StorageOptions): boolean {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return false;\n    try {\n      const keys = Object.keys(storage);\n      keys.forEach((k) => {\n        if (k.startsWith(this.prefix)) storage.removeItem(k);\n      });\n      return true;\n    } catch (error) {\n      sLogger.error(\"StorageManager.clear error\", { error });\n      return false;\n    }\n  }\n\n  public has(key: string, options?: StorageOptions): boolean {\n    return this.get(key, options) !== null;\n  }\n\n  public keys(options?: StorageOptions): string[] {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return [];\n    const result: string[] = [];\n    for (let i = 0; i < storage.length; i++) {\n      const k = storage.key(i);\n      if (k?.startsWith(this.prefix)) {\n        result.push(k.slice(this.prefix.length));\n      }\n    }\n    return result;\n  }\n\n  public size(options?: StorageOptions): number {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return 0;\n    let bytes = 0;\n    for (let i = 0; i < storage.length; i++) {\n      const k = storage.key(i);\n      if (k?.startsWith(this.prefix)) {\n        const v = storage.getItem(k);\n        bytes += k.length + (v?.length ?? 0);\n      }\n    }\n    return bytes;\n  }\n\n  public isAvailable(type: StorageType = \"local\"): boolean {\n    const storage = this.getStorage(type);\n    if (!storage) return false;\n    try {\n      const testKey = \"__storage_test__\";\n      storage.setItem(testKey, \"1\");\n      storage.removeItem(testKey);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  public getAll<T = unknown>(options?: StorageOptions): Record<string, T> {\n    const storage = this.getStorage(options?.type ?? \"local\");\n    if (!storage) return {};\n    const result: Record<string, T> = {};\n    for (let i = 0; i < storage.length; i++) {\n      const k = storage.key(i);\n      if (k?.startsWith(this.prefix)) {\n        const v = this.get<T>(k.slice(this.prefix.length), options);\n        if (v !== null) result[k.slice(this.prefix.length)] = v;\n      }\n    }\n    return result;\n  }\n}\n\n/** Default StorageManager instance (empty prefix) */\nexport const storageManager = StorageManager.getInstance(\"\");\n","/**\n * EventBus Class — @mohasinac/core\n *\n * Singleton pub/sub event bus for decoupled communication.\n * Pure utility — no framework or app-specific imports.\n */\n\nimport { Logger } from \"./Logger\";\n\nconst logger = Logger.getInstance();\n\ntype EventCallback = (...args: unknown[]) => void;\n\nexport interface EventSubscription {\n  unsubscribe: () => void;\n}\n\nexport class EventBus {\n  private static instance: EventBus;\n  private readonly events: Map<string, EventCallback[]> = new Map();\n\n  private constructor() {}\n\n  public static getInstance(): EventBus {\n    if (!EventBus.instance) {\n      EventBus.instance = new EventBus();\n    }\n    return EventBus.instance;\n  }\n\n  public on(event: string, callback: EventCallback): EventSubscription {\n    if (!this.events.has(event)) {\n      this.events.set(event, []);\n    }\n    this.events.get(event)!.push(callback);\n    return { unsubscribe: () => this.off(event, callback) };\n  }\n\n  public once(event: string, callback: EventCallback): EventSubscription {\n    const wrapped = (...args: unknown[]) => {\n      callback(...args);\n      this.off(event, wrapped);\n    };\n    return this.on(event, wrapped);\n  }\n\n  public off(event: string, callback: EventCallback): void {\n    const callbacks = this.events.get(event);\n    if (!callbacks) return;\n    const idx = callbacks.indexOf(callback);\n    if (idx > -1) callbacks.splice(idx, 1);\n    if (callbacks.length === 0) this.events.delete(event);\n  }\n\n  public emit(event: string, ...args: unknown[]): void {\n    const callbacks = this.events.get(event);\n    if (!callbacks) return;\n    callbacks.forEach((cb) => {\n      try {\n        cb(...args);\n      } catch (error) {\n        logger.error(`EventBus: error in handler for \"${event}\"`, { error });\n      }\n    });\n  }\n\n  public removeAllListeners(event?: string): void {\n    if (event) {\n      this.events.delete(event);\n    } else {\n      this.events.clear();\n    }\n  }\n\n  public listenerCount(event: string): number {\n    return this.events.get(event)?.length ?? 0;\n  }\n\n  public eventNames(): string[] {\n    return Array.from(this.events.keys());\n  }\n\n  public hasListeners(event: string): boolean {\n    return this.listenerCount(event) > 0;\n  }\n}\n\n/** Shared singleton instance */\nexport const eventBus = EventBus.getInstance();\n","/**\n * Authorization Guards\n *\n * Pure utility functions that throw AuthenticationError / AuthorizationError.\n * Suitable for API routes, Server Actions, and middleware.\n *\n * Note: getUserFromRequest / requireAuthFromRequest are intentionally omitted —\n * they depend on Firebase Admin and the user repository; implement them in your\n * app layer using these primitives.\n */\n\nimport { AuthenticationError, AuthorizationError } from \"@mohasinac/errors\";\n\nexport type UserRole = \"admin\" | \"moderator\" | \"seller\" | \"user\";\n\nconst ROLE_HIERARCHY: Record<UserRole, number> = {\n  admin: 4,\n  moderator: 3,\n  seller: 2,\n  user: 1,\n};\n\nconst MSG = {\n  NOT_AUTHENTICATED: \"Please log in to continue\",\n  FORBIDDEN: \"You do not have permission to perform this action\",\n  EMAIL_NOT_VERIFIED: \"Please verify your email address before logging in\",\n  ACCOUNT_DISABLED: \"Your account has been disabled. Please contact support\",\n};\n\nexport function requireAuth(user: unknown): void {\n  if (!user) {\n    throw new AuthenticationError(MSG.NOT_AUTHENTICATED);\n  }\n}\n\nexport function requireRole(\n  user: Record<string, unknown> | null | undefined,\n  roles: UserRole | UserRole[],\n): void {\n  if (!user) throw new AuthenticationError(MSG.NOT_AUTHENTICATED);\n  const requiredRoles = Array.isArray(roles) ? roles : [roles];\n  const userRole = (user.role as UserRole) || \"user\";\n  if (!requiredRoles.includes(userRole)) {\n    throw new AuthorizationError(MSG.FORBIDDEN);\n  }\n}\n\nexport function requireOwnership(\n  user: Record<string, unknown> | null | undefined,\n  resourceOwnerId: string,\n): void {\n  if (!user) throw new AuthenticationError(MSG.NOT_AUTHENTICATED);\n  if (user.uid !== resourceOwnerId) {\n    throw new AuthorizationError(MSG.FORBIDDEN);\n  }\n}\n\nexport function requireEmailVerified(\n  user: Record<string, unknown> | null | undefined,\n): void {\n  if (!user) throw new AuthenticationError(MSG.NOT_AUTHENTICATED);\n  if (!user.emailVerified) throw new AuthorizationError(MSG.EMAIL_NOT_VERIFIED);\n}\n\nexport function requireActiveAccount(\n  user: Record<string, unknown> | null | undefined,\n): void {\n  if (!user) throw new AuthenticationError(MSG.NOT_AUTHENTICATED);\n  if (user.disabled) throw new AuthorizationError(MSG.ACCOUNT_DISABLED);\n}\n\n/**\n * Check if currentUserRole is allowed to change a target user's role.\n * - admin:     can change anyone's role\n * - moderator: can only change user → seller\n */\nexport function canChangeRole(\n  currentUserRole: UserRole,\n  targetCurrentRole: UserRole,\n  targetNewRole: UserRole,\n): boolean {\n  if (currentUserRole === \"admin\") return true;\n  if (currentUserRole === \"moderator\") {\n    return targetCurrentRole === \"user\" && targetNewRole === \"seller\";\n  }\n  return false;\n}\n\n/** Return the numeric hierarchy level for a role. */\nexport function getRoleLevel(role: UserRole): number {\n  return ROLE_HIERARCHY[role] ?? 0;\n}\n","/**\r\n * Client-Side Error Logging Utilities\r\n *\r\n * Wraps the Logger singleton for use in React components, client hooks, and\r\n * browser-only code. Automatically attaches timestamp, userAgent, and current URL.\r\n *\r\n * For server-side logging use `server-logger.ts`.\r\n */\r\n\r\nimport { logger } from \"../core\";\r\nimport { AppError } from \"../errors\";\r\n\r\nexport interface ClientErrorContext {\r\n  userId?: string;\r\n  component?: string;\r\n  action?: string;\r\n  url?: string;\r\n  method?: string;\r\n  statusCode?: number;\r\n  [key: string]: unknown;\r\n}\r\n\r\nfunction buildClientMeta(\r\n  error: unknown,\r\n  context?: ClientErrorContext,\r\n): Record<string, unknown> {\r\n  const base: Record<string, unknown> = {\r\n    ...context,\r\n    timestamp: new Date().toISOString(),\r\n    userAgent:\r\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\r\n    url: typeof window !== \"undefined\" ? window.location.href : \"unknown\",\r\n  };\r\n\r\n  if (error instanceof AppError) {\r\n    base.error = {\r\n      name: error.name,\r\n      message: error.message,\r\n      code: error.code,\r\n      statusCode: error.statusCode,\r\n      data: error.data,\r\n    };\r\n  } else if (error instanceof Error) {\r\n    base.error = {\r\n      name: error.name,\r\n      message: error.message,\r\n      stack: error.stack,\r\n    };\r\n  } else {\r\n    base.error = error;\r\n  }\r\n\r\n  return base;\r\n}\r\n\r\nexport const logClientError = (\r\n  message: string,\r\n  error: unknown,\r\n  context?: ClientErrorContext,\r\n): void => {\r\n  logger.error(message, buildClientMeta(error, context));\r\n};\r\n\r\nexport const logClientWarning = (\r\n  message: string,\r\n  data?: ClientErrorContext,\r\n): void => {\r\n  logger.warn(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n\r\nexport const logClientInfo = (\r\n  message: string,\r\n  data?: ClientErrorContext,\r\n): void => {\r\n  logger.info(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n\r\nexport const logClientDebug = (\r\n  message: string,\r\n  data?: ClientErrorContext,\r\n): void => {\r\n  logger.debug(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n","/**\r\n * Server-Side Error Logging Utilities\r\n *\r\n * Wraps the Logger singleton for use in API routes, server components, and\r\n * server actions. Attaches request metadata when a NextRequest is available.\r\n *\r\n * IMPORTANT: Only import this file in server-side code. For client-side code\r\n * use `client-logger.ts`.\r\n */\r\n\r\nimport { logger } from \"../core\";\r\nimport { AppError } from \"../errors\";\r\nimport { type NextRequest } from \"next/server\";\r\n\r\nexport interface ServerErrorContext {\r\n  userId?: string;\r\n  endpoint?: string;\r\n  method?: string;\r\n  statusCode?: number;\r\n  requestId?: string;\r\n  [key: string]: unknown;\r\n}\r\n\r\n/** Pull the commonly needed headers from a NextRequest in one call. */\r\nexport const extractRequestMetadata = (request: NextRequest) => ({\r\n  method: request.method,\r\n  url: request.url,\r\n  userAgent: request.headers.get(\"user-agent\") ?? \"unknown\",\r\n  ip:\r\n    request.headers.get(\"x-forwarded-for\") ??\r\n    request.headers.get(\"x-real-ip\") ??\r\n    \"unknown\",\r\n  referer: request.headers.get(\"referer\") ?? \"none\",\r\n});\r\n\r\nfunction buildServerMeta(\r\n  error: unknown,\r\n  context?: ServerErrorContext,\r\n): Record<string, unknown> {\r\n  const base: Record<string, unknown> = {\r\n    ...context,\r\n    timestamp: new Date().toISOString(),\r\n  };\r\n\r\n  if (error instanceof AppError) {\r\n    base.error = {\r\n      name: error.name,\r\n      message: error.message,\r\n      code: error.code,\r\n      statusCode: error.statusCode,\r\n      data: error.data,\r\n    };\r\n  } else if (error instanceof Error) {\r\n    base.error = {\r\n      name: error.name,\r\n      message: error.message,\r\n      stack: error.stack,\r\n    };\r\n  } else {\r\n    base.error = error;\r\n  }\r\n\r\n  return base;\r\n}\r\n\r\nexport const logServerError = (\r\n  message: string,\r\n  error: unknown,\r\n  context?: ServerErrorContext,\r\n): void => {\r\n  logger.error(message, buildServerMeta(error, context));\r\n};\r\n\r\nexport const logServerWarning = (\r\n  message: string,\r\n  data?: ServerErrorContext,\r\n): void => {\r\n  logger.warn(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n\r\nexport const logServerInfo = (\r\n  message: string,\r\n  data?: ServerErrorContext,\r\n): void => {\r\n  logger.info(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n\r\nexport const logServerDebug = (\r\n  message: string,\r\n  data?: ServerErrorContext,\r\n): void => {\r\n  logger.debug(message, { ...data, timestamp: new Date().toISOString() });\r\n};\r\n","/**\r\n * feat-auth — API route handlers\r\n *\r\n * GET /api/auth/me  — return the currently authenticated user's profile.\r\n *\r\n * Consumer project wires this as a 2-line stub:\r\n *   export { authMeGET as GET } from \"@mohasinac/feat-auth\";\r\n */\r\n\r\nimport { NextResponse } from \"next/server.js\";\r\nimport { createRouteHandler } from \"@mohasinac/next\";\r\nimport { getProviders } from \"@mohasinac/contracts\";\r\nimport type { AuthUser as ContractsAuthUser } from \"@mohasinac/contracts\";\r\nimport type { AuthUser, UserRole } from \"../types/index.js\";\r\n\r\n// ─── Transform ────────────────────────────────────────────────────────────────\r\n\r\nfunction toClientUser(u: ContractsAuthUser): AuthUser {\r\n  return {\r\n    id: u.uid,\r\n    email: u.email ?? undefined,\r\n    displayName: u.displayName ?? undefined,\r\n    photoURL: u.photoURL ?? undefined,\r\n    role: u.role as UserRole,\r\n    isEmailVerified: u.emailVerified,\r\n  };\r\n}\r\n\r\n// ─── GET /api/auth/me ─────────────────────────────────────────────────────────\r\n\r\n/**\r\n * Return the currently authenticated user's profile.\r\n * Reads the `__session` HTTP-only cookie → verifies via ISessionProvider →\r\n * fetches full profile via IAuthProvider.\r\n *\r\n * @example (letitrip.in stub)\r\n * ```ts\r\n * // src/app/api/auth/me/route.ts\r\n * export { authMeGET as GET } from \"@mohasinac/feat-auth\";\r\n * ```\r\n */\r\nexport const authMeGET = createRouteHandler({\r\n  auth: true,\r\n  handler: async ({ user }): Promise<NextResponse> => {\r\n    const { auth } = getProviders();\r\n    if (!auth) {\r\n      return NextResponse.json(\r\n        { success: false, error: \"Auth provider not configured\" },\r\n        { status: 503 },\r\n      );\r\n    }\r\n\r\n    const profile = await auth.getUser(user!.uid);\r\n    if (!profile) {\r\n      return NextResponse.json(\r\n        { success: false, error: \"User not found\" },\r\n        { status: 404 },\r\n      );\r\n    }\r\n\r\n    return NextResponse.json({ success: true, data: toClientUser(profile) });\r\n  },\r\n});\r\n"]}