@qelos/integrator-next 4.0.1 → 4.1.0

package/dist/runtime/api-proxy.js

@@ -0,0 +1,90 @@
+import { NextResponse } from 'next/server';
+import { rewriteSetCookieDomain } from '../cookies';
+import { resolveQelosProxyTarget } from '../proxy-target';
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+]);
+function buildUpstreamHeaders(req) {
+    const out = new Headers();
+    req.headers.forEach((value, key) => {
+        const lk = key.toLowerCase();
+        if (HOP_BY_HOP.has(lk))
+            return;
+        if (lk === 'host')
+            return;
+        out.append(key, value);
+    });
+    return out;
+}
+async function proxyRequest(req, config) {
+    const base = resolveQelosProxyTarget(config);
+    if (!base) {
+        return NextResponse.json({
+            error: '[@qelos/integrator-next] Qelos API proxy is not configured. Set appUrl (or NEXT_QELOS_PROXY_TARGET / QELOS_IP / QELOS_API_IP in development).',
+        }, { status: 503 });
+    }
+    const pathWithSearch = req.nextUrl.pathname + req.nextUrl.search;
+    const targetUrl = `${base.replace(/\/+$/, '')}${pathWithSearch}`;
+    const originalHost = req.headers.get('host');
+    const init = {
+        method: req.method,
+        headers: buildUpstreamHeaders(req),
+        redirect: 'manual',
+    };
+    if (req.method !== 'GET' && req.method !== 'HEAD') {
+        init.body = req.body;
+        init.duplex = 'half';
+    }
+    let upstream;
+    try {
+        upstream = await fetch(targetUrl, init);
+    }
+    catch {
+        return NextResponse.json({ error: 'upstream fetch failed' }, { status: 502 });
+    }
+    const outHeaders = new Headers();
+    upstream.headers.forEach((value, key) => {
+        const lk = key.toLowerCase();
+        if (lk === 'set-cookie')
+            return;
+        if (HOP_BY_HOP.has(lk))
+            return;
+        outHeaders.append(key, value);
+    });
+    const rawCookies = upstream.headers.getSetCookie?.() ?? [];
+    for (const c of rawCookies) {
+        outHeaders.append('set-cookie', rewriteSetCookieDomain(c, originalHost ?? undefined));
+    }
+    return new Response(upstream.body, {
+        status: upstream.status,
+        statusText: upstream.statusText,
+        headers: outHeaders,
+    });
+}
+/**
+ * Handlers for a catch-all App Router route (e.g. `app/api/[...qelos]/route.ts`)
+ * that reverse-proxies every `/api/**` call to Qelos with `Set-Cookie` domain
+ * rewriting. Use `export const runtime = 'nodejs'`.
+ */
+export function createQelosApiProxyHandlers(config) {
+    async function handle(req) {
+        return proxyRequest(req, config);
+    }
+    return {
+        runtime: 'nodejs',
+        GET: handle,
+        POST: handle,
+        PUT: handle,
+        PATCH: handle,
+        DELETE: handle,
+        OPTIONS: handle,
+    };
+}
+//# sourceMappingURL=api-proxy.js.map

package/dist/runtime/api-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-proxy.js","sourceRoot":"","sources":["../../src/runtime/api-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,UAAU;IACV,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,GAAgB;IAC5C,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QAC/B,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAgB,EAChB,MAAuB;IAEvB,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,IAAI,CACtB;YACE,KAAK,EACH,+IAA+I;SAClJ,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC;IACjE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE7C,MAAM,IAAI,GAAsC;QAC9C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC;QAClC,QAAQ,EAAE,QAAQ;KACnB,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,OAAO,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,YAAY;YAAE,OAAO;QAChC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QAC/B,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,UAAU,CAAC,MAAM,CACf,YAAY,EACZ,sBAAsB,CAAC,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CACrD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAuB;IACjE,KAAK,UAAU,MAAM,CAAC,GAAgB;QACpC,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAiB;QAC1B,GAAG,EAAE,MAAM;QACX,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC"}

package/dist/sdk-factory.d.ts

@@ -1,20 +1,17 @@
-import QelosSDK from '@qelos/sdk';
-import type { QelosNextConfig, QelosTokenPair, TokenRefreshHook } from './types';
-export interface CreateSdkParams<TRefreshTarget = unknown> {
+import type QelosSDKInstance from '@qelos/sdk';
+import type { QelosNextConfig } from './types';
+export interface CreateSdkParams {
     config: QelosNextConfig;
     /**
-     * Tokens for the current request. The factory mutates this object in place
-     * when a token refresh occurs, so callers can read the latest pair after
-     * the SDK has been used.
+     * Live header source so every SDK call forwards the current request cookies
+     * and `Authorization` (no mutable token state).
      */
-    tokens: QelosTokenPair;
-    /**
-     * Transport-specific carrier passed through to `onTokenRefresh`. Edge
-     * middleware passes the outbound `NextResponse`; Pages Router passes the
-     * `NextApiResponse` / `ServerResponse`; App Router server components pass
-     * `null` because they cannot mutate cookies after rendering starts.
-     */
-    refreshTarget: TRefreshTarget;
-    onTokenRefresh?: TokenRefreshHook<TRefreshTarget>;
+    getHeaders: () => {
+        cookie?: string;
+        authorization?: string;
+    } | Promise<{
+        cookie?: string;
+        authorization?: string;
+    }>;
 }
-export declare function createRequestSdk<TRefreshTarget = unknown>({ config, tokens, refreshTarget, onTokenRefresh, }: CreateSdkParams<TRefreshTarget>): QelosSDK;
+export declare function createRequestSdk({ config, getHeaders, }: CreateSdkParams): QelosSDKInstance;

package/dist/sdk-factory.js

@@ -1,90 +1,40 @@
-import QelosSDK from '@qelos/sdk';
-const NO_AUTH_URLS = new Set([
-    '/api/token/refresh',
-    '/api/cookie/refresh',
-    '/api/signin',
-    '/api/signup',
-]);
-export function createRequestSdk({ config, tokens, refreshTarget, onTokenRefresh, }) {
-    let sdk;
-    let refreshInFlight = null;
-    const baseOptions = config.sdkOptions || {};
-    async function performRefresh() {
-        if (!tokens.refreshToken && !tokens.accessToken) {
-            throw new Error('no refresh token available');
-        }
-        const previous = {
-            accessToken: tokens.accessToken,
-            refreshToken: tokens.refreshToken,
-        };
-        let refreshed;
-        if (tokens.refreshToken) {
-            const result = await sdk.authentication.refreshToken(tokens.refreshToken);
-            refreshed = {
-                accessToken: result.payload.token,
-                refreshToken: result.payload.refreshToken,
-            };
-        }
-        else {
-            const result = await sdk.authentication.refreshCookieToken(tokens.accessToken);
-            refreshed = {
-                accessToken: result.payload.cookieToken,
-            };
-        }
-        tokens.accessToken = refreshed.accessToken;
-        tokens.refreshToken = refreshed.refreshToken;
-        if (onTokenRefresh) {
-            await onTokenRefresh({
-                target: refreshTarget,
-                oldTokens: previous,
-                newTokens: refreshed,
-                sdk,
-            });
-        }
+import sdkModule from '@qelos/sdk';
+function resolveQelosSdkConstructor() {
+    const top = sdkModule;
+    if (typeof top === 'function') {
+        return top;
+    }
+    const once = top.default;
+    if (typeof once === 'function') {
+        return once;
     }
-    function ensureRefresh() {
-        if (!refreshInFlight) {
-            refreshInFlight = performRefresh().finally(() => {
-                refreshInFlight = null;
-            });
-        }
-        return refreshInFlight;
+    const twice = once?.default;
+    if (typeof twice === 'function') {
+        return twice;
     }
+    throw new Error('[@qelos/integrator-next] Could not resolve QelosSDK constructor from @qelos/sdk');
+}
+const QelosSDK = resolveQelosSdkConstructor();
+export function createRequestSdk({ config, getHeaders, }) {
+    const baseOptions = config.sdkOptions || {};
     const options = {
         appUrl: config.appUrl,
-        fetch: globalThis.fetch.bind(globalThis),
-        forceRefresh: !config.apiToken,
+        fetch: globalThis.fetch,
         ...baseOptions,
     };
     if (config.apiToken) {
         options.apiToken = config.apiToken;
+        return new QelosSDK(options);
     }
-    else {
-        if (tokens.accessToken) {
-            options.accessToken = tokens.accessToken;
-        }
-        if (tokens.refreshToken) {
-            options.refreshToken = tokens.refreshToken;
-        }
-        options.extraHeaders = async (relativeUrl, forceRefresh) => {
-            const headers = {};
-            if (NO_AUTH_URLS.has(relativeUrl)) {
-                return headers;
-            }
-            if (forceRefresh && (tokens.refreshToken || tokens.accessToken)) {
-                await ensureRefresh();
-            }
-            const token = sdk?.authentication?.accessToken || tokens.accessToken;
-            if (token) {
-                headers.authorization = 'Bearer ' + token;
-            }
-            return headers;
-        };
-        options.onFailedRefreshToken = async () => {
-            await ensureRefresh();
-        };
-    }
-    sdk = new QelosSDK(options);
-    return sdk;
+    options.extraHeaders = async () => {
+        const h = await getHeaders();
+        const headers = {};
+        if (h.cookie)
+            headers.cookie = h.cookie;
+        if (h.authorization)
+            headers.authorization = h.authorization;
+        return headers;
+    };
+    return new QelosSDK(options);
 }
 //# sourceMappingURL=sdk-factory.js.map

package/dist/sdk-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-factory.js","sourceRoot":"","sources":["../src/sdk-factory.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,YAAY,CAAC;AASlC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,oBAAoB;IACpB,qBAAqB;IACrB,aAAa;IACb,aAAa;CACd,CAAC,CAAC;AAoBH,MAAM,UAAU,gBAAgB,CAA2B,EACzD,MAAM,EACN,MAAM,EACN,aAAa,EACb,cAAc,GACkB;IAChC,IAAI,GAAa,CAAC;IAClB,IAAI,eAAe,GAAyB,IAAI,CAAC;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAE5C,KAAK,UAAU,cAAc;QAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAmB;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,IAAI,SAAyB,CAAC;QAC9B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1E,SAAS,GAAG;gBACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBACjC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;aAC1C,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/E,SAAS,GAAG;gBACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;aACxC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QAC3C,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QAC7C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,cAAc,CAAC;gBACnB,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,SAAS;gBACpB,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,aAAa;QACpB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC9C,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,YAAY,EAAE,CAAC,MAAM,CAAC,QAAQ;QAC9B,GAAG,WAAW;KACf,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE;YACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChE,MAAM,aAAa,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,EAAE,cAAc,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;YACrE,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,aAAa,GAAG,SAAS,GAAG,KAAK,CAAC;YAC5C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,OAAO,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE;YACxC,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC;IAED,GAAG,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"sdk-factory.js","sourceRoot":"","sources":["../src/sdk-factory.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,YAAY,CAAC;AAOnC,SAAS,0BAA0B;IACjC,MAAM,GAAG,GAAG,SAAoB,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAI,GAA6B,CAAC,OAAO,CAAC;IACpD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAI,IAA0C,EAAE,OAAO,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,KAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;AAa9C,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,GACM;IAChB,MAAM,WAAW,GAA6B,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAEtE,MAAM,OAAO,GAAoB;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,UAAU,CAAC,KAA6B;QAC/C,GAAG,WAAW;KACf,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,CAAC,aAAa;YAAE,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;QAC7D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}

package/dist/types.d.ts

@@ -2,30 +2,42 @@ import type QelosSDK from '@qelos/sdk';
 import type { IUser } from '@qelos/sdk/dist/authentication';
 import type { IWorkspace } from '@qelos/sdk/workspaces';
 import type { QelosSDKOptions } from '@qelos/sdk/types';
-import type { QelosConfig, QelosContext, QelosTokenPair, ResolvedTokens } from '@qelos/global-types';
-export type { QelosTokenPair, ResolvedTokens } from '@qelos/global-types';
-export interface QelosNextConfig extends QelosConfig {
+export interface QelosNextConfig {
+    /**
+     * Base URL of the Qelos backend (e.g. https://yourdomain.com).
+     */
+    appUrl: string;
+    /**
+     * Static API token used for service-to-service calls. When provided, no
+     * cookie-based `/api/me` identification is required for anonymous access.
+     */
+    apiToken?: string;
+    /**
+     * If true, the request is rejected (401) when the user cannot be resolved.
+     * Defaults to `false` — anonymous requests pass through with `user = null`.
+     */
+    requireAuth?: boolean;
+    /**
+     * Skip the middleware / resolver entirely for requests matching any of these
+     * path prefixes. Useful for `/_next`, `/favicon.ico`, `/health`, etc.
+     */
+    skipPaths?: string[];
     /**
      * Optional extra options merged into the per-request SDK instance.
      */
     sdkOptions?: Partial<QelosSDKOptions>;
-}
-export interface TokenRefreshContext<TRefreshTarget = unknown> {
     /**
-     * The transport-specific carrier for the refresh hook. For App Router edge
-     * middleware this is the outbound `NextResponse`; for Pages Router API
-     * routes it is the `NextApiResponse`; for `getServerSideProps` it is the
-     * raw `ServerResponse`. App Router server components / route handlers do
-     * not call this hook because cookies cannot be set after the response has
-     * started — the refreshed tokens are only mutated on the in-memory pair.
+     * When `false` (default), Edge middleware prepends `/api/` to `skipPaths` so
+     * the catch-all BFF proxy route is not shadowed by the `/api/me` probe.
      */
-    target: TRefreshTarget;
-    oldTokens: QelosTokenPair;
-    newTokens: ResolvedTokens;
+    disableProxy?: boolean;
+}
+export interface QelosRequestContext {
+    user: IUser | null;
+    workspace: IWorkspace | null;
+    workspaces: IWorkspace[];
     sdk: QelosSDK;
 }
-export type TokenRefreshHook<TRefreshTarget = unknown> = (ctx: TokenRefreshContext<TRefreshTarget>) => void | Promise<void>;
-export type QelosRequestContext = QelosContext<QelosSDK, IUser, IWorkspace>;
 /**
  * Header name used to forward the resolved user id from edge middleware to
  * downstream App Router handlers. Handlers that want the full user object

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAyCA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA2CA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qelos/integrator-next",
-  "version": "4.0.1",
+  "version": "4.1.0",
   "description": "Qelos integrator middleware for Next.js (App Router and Pages Router): identifies the user and workspace via the Qelos SDK before the application's own handler runs.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -70,7 +70,7 @@
     }
   },
   "dependencies": {
-    "@qelos/sdk": "4.0.0"
+    "@qelos/sdk": "4.1.0"
   },
   "devDependencies": {
     "@types/node": "^22.5.4",