@rovela-ai/sdk 0.1.0 → 0.1.1

package/dist/auth/server/customer-service.d.ts

@@ -0,0 +1,138 @@
+/**
+ * @rovela/sdk/auth/server/customer-service
+ *
+ * Customer CRUD operations with tenant isolation.
+ * All operations are scoped to the current tenant.
+ */
+import * as schema from '../../core/db/schema';
+import type { CustomerSession } from '../types';
+export interface CreateCustomerResult {
+    customer: schema.Customer;
+    verificationToken?: string;
+}
+export interface AuthenticateResult {
+    success: true;
+    customer: schema.Customer;
+}
+export interface AuthenticateError {
+    success: false;
+    error: string;
+    code: 'INVALID_CREDENTIALS' | 'EMAIL_NOT_VERIFIED' | 'USER_NOT_FOUND';
+}
+/**
+ * Create a new customer account.
+ * Password is hashed before storage.
+ * Returns customer with null emailVerified (needs verification).
+ *
+ * @param email - Customer email (will be lowercased)
+ * @param password - Plain text password (min 8 chars)
+ * @param name - Optional customer name
+ * @returns Created customer
+ * @throws Error if email already exists
+ *
+ * @example
+ * ```typescript
+ * const { customer } = await createCustomer(
+ *   'customer@example.com',
+ *   'securePassword123',
+ *   'John Doe'
+ * )
+ * ```
+ */
+export declare function createCustomer(email: string, password: string, name?: string): Promise<CreateCustomerResult>;
+/**
+ * Authenticate a customer by email and password.
+ * Checks email verification status.
+ *
+ * @param email - Customer email
+ * @param password - Plain text password
+ * @param requireVerification - Whether to require email verification (default: true)
+ * @returns Authentication result
+ *
+ * @example
+ * ```typescript
+ * const result = await authenticateCustomer('customer@example.com', 'password123')
+ * if (result.success) {
+ *   console.log('Authenticated:', result.customer.email)
+ * } else {
+ *   console.log('Failed:', result.error)
+ * }
+ * ```
+ */
+export declare function authenticateCustomer(email: string, password: string, requireVerification?: boolean): Promise<AuthenticateResult | AuthenticateError>;
+/**
+ * Get customer data for session (excludes sensitive fields).
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer session data or null if not found
+ *
+ * @example
+ * ```typescript
+ * const session = await findCustomerForSession(customerId)
+ * if (session) {
+ *   console.log('Customer:', session.email)
+ * }
+ * ```
+ */
+export declare function findCustomerForSession(customerId: string): Promise<CustomerSession | null>;
+/**
+ * Find a customer by email.
+ *
+ * @param email - Customer email
+ * @returns Customer or null if not found
+ */
+export declare function findCustomerByEmail(email: string): Promise<schema.Customer | null>;
+/**
+ * Find a customer by ID.
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer or null if not found
+ */
+export declare function findCustomerById(customerId: string): Promise<schema.Customer | null>;
+/**
+ * Update customer profile information.
+ *
+ * @param customerId - Customer UUID
+ * @param data - Fields to update
+ * @returns Updated customer
+ *
+ * @example
+ * ```typescript
+ * const updated = await updateCustomer(customerId, { name: 'Jane Doe' })
+ * ```
+ */
+export declare function updateCustomer(customerId: string, data: {
+    name?: string;
+    email?: string;
+}): Promise<schema.Customer | null>;
+/**
+ * Update customer password.
+ *
+ * @param customerId - Customer UUID
+ * @param newPassword - New plain text password
+ *
+ * @example
+ * ```typescript
+ * await updateCustomerPassword(customerId, 'newSecurePassword123')
+ * ```
+ */
+export declare function updateCustomerPassword(customerId: string, newPassword: string): Promise<void>;
+/**
+ * Mark customer email as verified.
+ *
+ * @param customerId - Customer UUID
+ *
+ * @example
+ * ```typescript
+ * await markEmailVerified(customerId)
+ * ```
+ */
+export declare function markEmailVerified(customerId: string): Promise<void>;
+/**
+ * Check if email is already registered.
+ *
+ * @param email - Email to check
+ * @returns True if email exists
+ */
+export declare function emailExists(email: string): Promise<boolean>;
+//# sourceMappingURL=customer-service.d.ts.map

package/dist/auth/server/customer-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-service.d.ts","sourceRoot":"","sources":["../../../src/auth/server/customer-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAM/C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,IAAI,CAAA;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,gBAAgB,CAAA;CACtE;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,oBAAoB,CAAC,CA4B/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,mBAAmB,UAAO,GACzB,OAAO,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,CA4CjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA8BjC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgBjC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgBjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CA+BjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAazE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGjE"}

package/dist/auth/server/customer-service.js

@@ -0,0 +1,309 @@
+"use strict";
+/**
+ * @rovela/sdk/auth/server/customer-service
+ *
+ * Customer CRUD operations with tenant isolation.
+ * All operations are scoped to the current tenant.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCustomer = createCustomer;
+exports.authenticateCustomer = authenticateCustomer;
+exports.findCustomerForSession = findCustomerForSession;
+exports.findCustomerByEmail = findCustomerByEmail;
+exports.findCustomerById = findCustomerById;
+exports.updateCustomer = updateCustomer;
+exports.updateCustomerPassword = updateCustomerPassword;
+exports.markEmailVerified = markEmailVerified;
+exports.emailExists = emailExists;
+const drizzle_orm_1 = require("drizzle-orm");
+const client_1 = require("../../core/db/client");
+const schema = __importStar(require("../../core/db/schema"));
+const password_1 = require("./password");
+// =============================================================================
+// Customer CRUD
+// =============================================================================
+/**
+ * Create a new customer account.
+ * Password is hashed before storage.
+ * Returns customer with null emailVerified (needs verification).
+ *
+ * @param email - Customer email (will be lowercased)
+ * @param password - Plain text password (min 8 chars)
+ * @param name - Optional customer name
+ * @returns Created customer
+ * @throws Error if email already exists
+ *
+ * @example
+ * ```typescript
+ * const { customer } = await createCustomer(
+ *   'customer@example.com',
+ *   'securePassword123',
+ *   'John Doe'
+ * )
+ * ```
+ */
+async function createCustomer(email, password, name) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    // Hash password
+    const passwordHash = await (0, password_1.hashPassword)(password);
+    try {
+        const [customer] = await db
+            .insert(schema.customers)
+            .values({
+            tenantId,
+            email: email.toLowerCase().trim(),
+            name: name?.trim() || null,
+            passwordHash,
+            emailVerified: null, // Not verified initially
+        })
+            .returning();
+        return { customer };
+    }
+    catch (error) {
+        // Check for unique constraint violation
+        const err = error;
+        if (err.code === '23505' || err.cause?.code === '23505') {
+            throw new Error('An account with this email already exists');
+        }
+        throw error;
+    }
+}
+/**
+ * Authenticate a customer by email and password.
+ * Checks email verification status.
+ *
+ * @param email - Customer email
+ * @param password - Plain text password
+ * @param requireVerification - Whether to require email verification (default: true)
+ * @returns Authentication result
+ *
+ * @example
+ * ```typescript
+ * const result = await authenticateCustomer('customer@example.com', 'password123')
+ * if (result.success) {
+ *   console.log('Authenticated:', result.customer.email)
+ * } else {
+ *   console.log('Failed:', result.error)
+ * }
+ * ```
+ */
+async function authenticateCustomer(email, password, requireVerification = true) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    // Find customer by email
+    const [customer] = await db
+        .select()
+        .from(schema.customers)
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.email, email.toLowerCase().trim())))
+        .limit(1);
+    if (!customer) {
+        return {
+            success: false,
+            error: 'Invalid email or password',
+            code: 'INVALID_CREDENTIALS',
+        };
+    }
+    // Verify password
+    const isValidPassword = await (0, password_1.verifyPassword)(password, customer.passwordHash);
+    if (!isValidPassword) {
+        return {
+            success: false,
+            error: 'Invalid email or password',
+            code: 'INVALID_CREDENTIALS',
+        };
+    }
+    // Check email verification
+    if (requireVerification && !customer.emailVerified) {
+        return {
+            success: false,
+            error: 'Please verify your email before signing in',
+            code: 'EMAIL_NOT_VERIFIED',
+        };
+    }
+    return { success: true, customer };
+}
+/**
+ * Get customer data for session (excludes sensitive fields).
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer session data or null if not found
+ *
+ * @example
+ * ```typescript
+ * const session = await findCustomerForSession(customerId)
+ * if (session) {
+ *   console.log('Customer:', session.email)
+ * }
+ * ```
+ */
+async function findCustomerForSession(customerId) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    const [customer] = await db
+        .select({
+        id: schema.customers.id,
+        email: schema.customers.email,
+        name: schema.customers.name,
+        emailVerified: schema.customers.emailVerified,
+    })
+        .from(schema.customers)
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.id, customerId)))
+        .limit(1);
+    if (!customer) {
+        return null;
+    }
+    return {
+        id: customer.id,
+        email: customer.email,
+        name: customer.name,
+        emailVerified: !!customer.emailVerified,
+    };
+}
+/**
+ * Find a customer by email.
+ *
+ * @param email - Customer email
+ * @returns Customer or null if not found
+ */
+async function findCustomerByEmail(email) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    const [customer] = await db
+        .select()
+        .from(schema.customers)
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.email, email.toLowerCase().trim())))
+        .limit(1);
+    return customer || null;
+}
+/**
+ * Find a customer by ID.
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer or null if not found
+ */
+async function findCustomerById(customerId) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    const [customer] = await db
+        .select()
+        .from(schema.customers)
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.id, customerId)))
+        .limit(1);
+    return customer || null;
+}
+/**
+ * Update customer profile information.
+ *
+ * @param customerId - Customer UUID
+ * @param data - Fields to update
+ * @returns Updated customer
+ *
+ * @example
+ * ```typescript
+ * const updated = await updateCustomer(customerId, { name: 'Jane Doe' })
+ * ```
+ */
+async function updateCustomer(customerId, data) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    const updateData = {};
+    if (data.name !== undefined) {
+        updateData.name = data.name?.trim() || null;
+    }
+    if (data.email !== undefined) {
+        updateData.email = data.email.toLowerCase().trim();
+    }
+    if (Object.keys(updateData).length === 0) {
+        // Nothing to update, return current customer
+        return findCustomerById(customerId);
+    }
+    const [customer] = await db
+        .update(schema.customers)
+        .set(updateData)
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.id, customerId)))
+        .returning();
+    return customer || null;
+}
+/**
+ * Update customer password.
+ *
+ * @param customerId - Customer UUID
+ * @param newPassword - New plain text password
+ *
+ * @example
+ * ```typescript
+ * await updateCustomerPassword(customerId, 'newSecurePassword123')
+ * ```
+ */
+async function updateCustomerPassword(customerId, newPassword) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    const passwordHash = await (0, password_1.hashPassword)(newPassword);
+    await db
+        .update(schema.customers)
+        .set({ passwordHash })
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.id, customerId)));
+}
+/**
+ * Mark customer email as verified.
+ *
+ * @param customerId - Customer UUID
+ *
+ * @example
+ * ```typescript
+ * await markEmailVerified(customerId)
+ * ```
+ */
+async function markEmailVerified(customerId) {
+    const db = (0, client_1.getDb)();
+    const tenantId = (0, client_1.getTenantId)();
+    await db
+        .update(schema.customers)
+        .set({ emailVerified: new Date() })
+        .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema.customers.tenantId, tenantId), (0, drizzle_orm_1.eq)(schema.customers.id, customerId)));
+}
+/**
+ * Check if email is already registered.
+ *
+ * @param email - Email to check
+ * @returns True if email exists
+ */
+async function emailExists(email) {
+    const customer = await findCustomerByEmail(email);
+    return !!customer;
+}
+//# sourceMappingURL=customer-service.js.map

package/dist/auth/server/customer-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-service.js","sourceRoot":"","sources":["../../../src/auth/server/customer-service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDH,wCAgCC;AAqBD,oDAgDC;AAgBD,wDAgCC;AAQD,kDAkBC;AAQD,4CAkBC;AAcD,wCAkCC;AAaD,wDAkBC;AAYD,8CAaC;AAQD,kCAGC;AA9WD,6CAAqC;AACrC,iDAAyD;AACzD,6DAA8C;AAC9C,yCAAyD;AAuBzD,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,QAAgB,EAChB,IAAa;IAEb,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,gBAAgB;IAChB,MAAM,YAAY,GAAG,MAAM,IAAA,uBAAY,EAAC,QAAQ,CAAC,CAAA;IAEjD,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;aACxB,MAAM,CAAC;YACN,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI;YAC1B,YAAY;YACZ,aAAa,EAAE,IAAI,EAAE,yBAAyB;SAC/C,CAAC;aACD,SAAS,EAAE,CAAA;QAEd,OAAO,EAAE,QAAQ,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,wCAAwC;QACxC,MAAM,GAAG,GAAG,KAAqD,CAAA;QACjE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,mBAAmB,GAAG,IAAI;IAE1B,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,yBAAyB;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CACvD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,qBAAqB;SAC5B,CAAA;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,MAAM,IAAA,yBAAc,EAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,qBAAqB;SAC5B,CAAA;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,mBAAmB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4CAA4C;YACnD,IAAI,EAAE,oBAAoB;SAC3B,CAAA;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;QACvB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK;QAC7B,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;QAC3B,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa;KAC9C,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CACpC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;KACxC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CACvD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CACpC,UAAkB;IAElB,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CACpC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAAuC;IAEvC,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,UAAU,GAAgC,EAAE,CAAA;IAElD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,6CAA6C;QAC7C,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,UAAU,CAAC;SACf,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CACpC,CACF;SACA,SAAS,EAAE,CAAA;IAEd,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,WAAmB;IAEnB,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,YAAY,GAAG,MAAM,IAAA,uBAAY,EAAC,WAAW,CAAC,CAAA;IAEpD,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC;SACrB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CACpC,CACF,CAAA;AACL,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,EAAE,GAAG,IAAA,cAAK,GAAE,CAAA;IAClB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAE9B,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;SAClC,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,IAAA,gBAAE,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CACpC,CACF,CAAA;AACL,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,CAAC,QAAQ,CAAA;AACnB,CAAC"}

package/dist/auth/server/email-sender.d.ts

@@ -0,0 +1,64 @@
+/**
+ * @rovela/sdk/auth/server/email-sender
+ *
+ * Email sending utilities for customer authentication.
+ * This file re-exports from the emails module for backward compatibility.
+ *
+ * NOTE: For new code, prefer importing directly from '@rovela/sdk/emails':
+ * ```typescript
+ * import { sendVerificationEmail, sendWelcomeEmail } from '@rovela/sdk/emails'
+ * ```
+ */
+/**
+ * Send verification email to new customer.
+ *
+ * @param email - Customer email address
+ * @param token - Verification token
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendVerificationEmail('customer@example.com', 'abc123token', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendVerificationEmail` from '@rovela/sdk/emails' for more options
+ */
+export declare function sendVerificationEmail(email: string, token: string, storeName: string): Promise<void>;
+/**
+ * Send password reset email to customer.
+ *
+ * @param email - Customer email address
+ * @param token - Reset token
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendPasswordResetEmail('customer@example.com', 'abc123token', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendPasswordResetEmail` from '@rovela/sdk/emails' for more options
+ */
+export declare function sendPasswordResetEmail(email: string, token: string, storeName: string): Promise<void>;
+/**
+ * Send welcome email to new customer after verification.
+ *
+ * @param email - Customer email address
+ * @param name - Customer name
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendWelcomeEmail('customer@example.com', 'John', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendWelcomeEmail` from '@rovela/sdk/emails' for more options
+ */
+export declare function sendWelcomeEmail(email: string, name: string | null | undefined, storeName: string): Promise<void>;
+/**
+ * Get the store name from configuration or environment.
+ * Falls back to a generic name if not configured.
+ *
+ * @deprecated Use `getStoreName` from '@rovela/sdk/emails'
+ */
+export declare function getStoreName(): string;
+//# sourceMappingURL=email-sender.d.ts.map

package/dist/auth/server/email-sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-sender.d.ts","sourceRoot":"","sources":["../../../src/auth/server/email-sender.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC"}

package/dist/auth/server/email-sender.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * @rovela/sdk/auth/server/email-sender
+ *
+ * Email sending utilities for customer authentication.
+ * This file re-exports from the emails module for backward compatibility.
+ *
+ * NOTE: For new code, prefer importing directly from '@rovela/sdk/emails':
+ * ```typescript
+ * import { sendVerificationEmail, sendWelcomeEmail } from '@rovela/sdk/emails'
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendVerificationEmail = sendVerificationEmail;
+exports.sendPasswordResetEmail = sendPasswordResetEmail;
+exports.sendWelcomeEmail = sendWelcomeEmail;
+exports.getStoreName = getStoreName;
+const emails_1 = require("../../emails");
+// =============================================================================
+// Re-exported Functions (Backward Compatible API)
+// =============================================================================
+/**
+ * Send verification email to new customer.
+ *
+ * @param email - Customer email address
+ * @param token - Verification token
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendVerificationEmail('customer@example.com', 'abc123token', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendVerificationEmail` from '@rovela/sdk/emails' for more options
+ */
+async function sendVerificationEmail(email, token, storeName) {
+    const storeUrl = (0, emails_1.getStoreUrl)();
+    const verificationLink = `${storeUrl}/auth/verify-email?token=${token}`;
+    const result = await (0, emails_1.sendVerificationEmail)({
+        to: email,
+        customerName: email.split('@')[0], // Fallback to email prefix
+        verificationLink,
+        expiryTime: '24',
+    });
+    if (!result.success) {
+        console.error('[Auth Email] Failed to send verification email:', result.error);
+        throw new Error('Failed to send verification email');
+    }
+}
+/**
+ * Send password reset email to customer.
+ *
+ * @param email - Customer email address
+ * @param token - Reset token
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendPasswordResetEmail('customer@example.com', 'abc123token', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendPasswordResetEmail` from '@rovela/sdk/emails' for more options
+ */
+async function sendPasswordResetEmail(email, token, storeName) {
+    const storeUrl = (0, emails_1.getStoreUrl)();
+    const resetLink = `${storeUrl}/auth/reset-password?token=${token}`;
+    const result = await (0, emails_1.sendPasswordResetEmail)({
+        to: email,
+        customerName: email.split('@')[0], // Fallback to email prefix
+        resetLink,
+        expiryTime: '1',
+    });
+    if (!result.success) {
+        console.error('[Auth Email] Failed to send password reset email:', result.error);
+        throw new Error('Failed to send password reset email');
+    }
+}
+/**
+ * Send welcome email to new customer after verification.
+ *
+ * @param email - Customer email address
+ * @param name - Customer name
+ * @param storeName - Name of the store
+ *
+ * @example
+ * ```typescript
+ * await sendWelcomeEmail('customer@example.com', 'John', 'My Store')
+ * ```
+ *
+ * @deprecated Use `sendWelcomeEmail` from '@rovela/sdk/emails' for more options
+ */
+async function sendWelcomeEmail(email, name, storeName) {
+    const customerName = name || 'there';
+    const result = await (0, emails_1.sendWelcomeEmail)({
+        to: email,
+        customerName,
+    });
+    // Welcome email failure is not critical - just log it
+    if (!result.success) {
+        console.error('[Auth Email] Failed to send welcome email:', result.error);
+    }
+}
+/**
+ * Get the store name from configuration or environment.
+ * Falls back to a generic name if not configured.
+ *
+ * @deprecated Use `getStoreName` from '@rovela/sdk/emails'
+ */
+function getStoreName() {
+    return (0, emails_1.getStoreName)();
+}
+//# sourceMappingURL=email-sender.js.map

package/dist/auth/server/email-sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-sender.js","sourceRoot":"","sources":["../../../src/auth/server/email-sender.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AA4BH,sDAmBC;AAgBD,wDAmBC;AAgBD,4CAgBC;AAQD,oCAEC;AA1HD,yCAMqB;AAErB,gFAAgF;AAChF,kDAAkD;AAClD,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,KAAa,EACb,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAC9B,MAAM,gBAAgB,GAAG,GAAG,QAAQ,4BAA4B,KAAK,EAAE,CAAA;IAEvE,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAgB,EAAC;QACpC,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,2BAA2B;QAC9D,gBAAgB;QAChB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAAa,EACb,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,GAAG,QAAQ,8BAA8B,KAAK,EAAE,CAAA;IAElE,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAiB,EAAC;QACrC,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,2BAA2B;QAC9D,SAAS;QACT,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAChF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,IAA+B,EAC/B,SAAiB;IAEjB,MAAM,YAAY,GAAG,IAAI,IAAI,OAAO,CAAA;IAEpC,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAW,EAAC;QAC/B,EAAE,EAAE,KAAK;QACT,YAAY;KACb,CAAC,CAAA;IAEF,sDAAsD;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY;IAC1B,OAAO,IAAA,qBAAsB,GAAE,CAAA;AACjC,CAAC"}

package/dist/auth/server/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @rovela/sdk/auth/server
+ *
+ * Server-side authentication utilities.
+ * Import from '@rovela/sdk/auth/server' in server components and API routes.
+ */
+export { hashPassword, verifyPassword, validatePassword, MIN_PASSWORD_LENGTH, } from './password';
+export { sendVerificationEmail, sendPasswordResetEmail, sendWelcomeEmail, getStoreName, } from './email-sender';
+export { createCustomer, authenticateCustomer, findCustomerForSession, findCustomerByEmail, findCustomerById, updateCustomer, updateCustomerPassword, markEmailVerified, emailExists, } from './customer-service';
+export type { CreateCustomerResult, AuthenticateResult, AuthenticateError, } from './customer-service';
+export { createVerificationToken, verifyEmail, deleteVerificationTokens, resendVerificationEmail, isEmailVerified, cleanupExpiredTokens, } from './verification-service';
+export { requestPasswordReset, validateResetToken, resetPassword, deletePasswordResetTokens, cleanupExpiredResetTokens, } from './password-reset-service';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA"}