@rovela-ai/sdk 0.3.34 → 0.4.1

package/dist/auth/index.js

@@ -1,67 +0,0 @@
-/**
- * @rovela/sdk/auth
- *
- * Customer authentication module for e-commerce stores.
- *
- * This module provides complete customer authentication including:
- * - Email/password sign in and sign up
- * - Email verification flow
- * - Password reset flow
- * - Remember me functionality
- * - Session management with JWT
- * - Pre-built UI components
- * - Route protection
- *
- * @example
- * ```typescript
- * // Setup NextAuth route handler
- * // app/api/auth/[...nextauth]/route.ts
- * import { createAuthHandlers } from '@rovela/sdk/auth'
- * export const { GET, POST } = createAuthHandlers()
- *
- * // Setup API routes for registration, verification, etc.
- * // app/api/auth/register/route.ts
- * export { POST } from '@rovela/sdk/auth/api/register'
- *
- * // Use components in pages
- * import { SignInForm, SignUpForm, AuthGuard, UserMenu } from '@rovela/sdk/auth'
- *
- * // Use auth hook in components
- * import { useAuth } from '@rovela/sdk/auth'
- *
- * function MyComponent() {
- *   const { customer, isAuthenticated, signIn, signOut } = useAuth()
- *   // ...
- * }
- * ```
- */
-// =============================================================================
-// Configuration
-// =============================================================================
-export { createCustomerAuthOptions, createAuthOptions, // @deprecated alias for createCustomerAuthOptions — kept for SDK-API compatibility
-getCustomerSession, } from './config';
-// =============================================================================
-// API Route Handlers
-// =============================================================================
-export { createAuthHandlers } from './api/auth';
-// Individual route handlers (for flexible routing)
-export { POST as registerPOST } from './api/register';
-export { GET as verifyEmailGET, POST as verifyEmailPOST } from './api/verify-email';
-export { POST as resendVerificationPOST } from './api/resend-verification';
-export { POST as forgotPasswordPOST } from './api/forgot-password';
-export { GET as resetPasswordGET, POST as resetPasswordPOST } from './api/reset-password';
-// =============================================================================
-// Client Hooks
-// =============================================================================
-export { useAuth } from './hooks/useAuth';
-// =============================================================================
-// UI Components
-// =============================================================================
-export { SignInForm } from './components/SignInForm';
-export { SignUpForm } from './components/SignUpForm';
-export { ForgotPasswordForm } from './components/ForgotPasswordForm';
-export { ResetPasswordForm } from './components/ResetPasswordForm';
-export { VerifyEmailNotice } from './components/VerifyEmailNotice';
-export { UserMenu } from './components/UserMenu';
-export { AuthGuard, withAuth } from './components/AuthGuard';
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAqDH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EAAE,mFAAmF;AACtG,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAEjB,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE/C,mDAAmD;AACnD,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACnF,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAC1E,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAEzF,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA"}

package/dist/auth/server/customer-service.d.ts

@@ -1,140 +0,0 @@
-/**
- * @rovela/sdk/auth/server/customer-service
- *
- * Customer CRUD operations.
- * Each store has its own database (via Neon branches) - no tenant isolation needed.
- */
-import * as schema from '../../core/db/schema';
-import type { CustomerSession } from '../types';
-export interface CreateCustomerResult {
-    customer: schema.Customer;
-    verificationToken?: string;
-    /** Number of guest orders claimed (orders with matching email and null customerId) */
-    ordersClaimedCount?: number;
-}
-export interface AuthenticateResult {
-    success: true;
-    customer: schema.Customer;
-}
-export interface AuthenticateError {
-    success: false;
-    error: string;
-    code: 'INVALID_CREDENTIALS' | 'EMAIL_NOT_VERIFIED' | 'USER_NOT_FOUND';
-}
-/**
- * Create a new customer account.
- * Password is hashed before storage.
- * Returns customer with null emailVerified (needs verification).
- *
- * @param email - Customer email (will be lowercased)
- * @param password - Plain text password (min 8 chars)
- * @param name - Optional customer name
- * @returns Created customer
- * @throws Error if email already exists
- *
- * @example
- * ```typescript
- * const { customer } = await createCustomer(
- *   'customer@example.com',
- *   'securePassword123',
- *   'John Doe'
- * )
- * ```
- */
-export declare function createCustomer(email: string, password: string, name?: string): Promise<CreateCustomerResult>;
-/**
- * Authenticate a customer by email and password.
- * Checks email verification status.
- *
- * @param email - Customer email
- * @param password - Plain text password
- * @param requireVerification - Whether to require email verification (default: true)
- * @returns Authentication result
- *
- * @example
- * ```typescript
- * const result = await authenticateCustomer('customer@example.com', 'password123')
- * if (result.success) {
- *   console.log('Authenticated:', result.customer.email)
- * } else {
- *   console.log('Failed:', result.error)
- * }
- * ```
- */
-export declare function authenticateCustomer(email: string, password: string, requireVerification?: boolean): Promise<AuthenticateResult | AuthenticateError>;
-/**
- * Get customer data for session (excludes sensitive fields).
- *
- * @param customerId - Customer UUID
- * @returns Customer session data or null if not found
- *
- * @example
- * ```typescript
- * const session = await findCustomerForSession(customerId)
- * if (session) {
- *   console.log('Customer:', session.email)
- * }
- * ```
- */
-export declare function findCustomerForSession(customerId: string): Promise<CustomerSession | null>;
-/**
- * Find a customer by email.
- *
- * @param email - Customer email
- * @returns Customer or null if not found
- */
-export declare function findCustomerByEmail(email: string): Promise<schema.Customer | null>;
-/**
- * Find a customer by ID.
- *
- * @param customerId - Customer UUID
- * @returns Customer or null if not found
- */
-export declare function findCustomerById(customerId: string): Promise<schema.Customer | null>;
-/**
- * Update customer profile information.
- *
- * @param customerId - Customer UUID
- * @param data - Fields to update
- * @returns Updated customer
- *
- * @example
- * ```typescript
- * const updated = await updateCustomer(customerId, { name: 'Jane Doe' })
- * ```
- */
-export declare function updateCustomer(customerId: string, data: {
-    name?: string;
-    email?: string;
-}): Promise<schema.Customer | null>;
-/**
- * Update customer password.
- *
- * @param customerId - Customer UUID
- * @param newPassword - New plain text password
- *
- * @example
- * ```typescript
- * await updateCustomerPassword(customerId, 'newSecurePassword123')
- * ```
- */
-export declare function updateCustomerPassword(customerId: string, newPassword: string): Promise<void>;
-/**
- * Mark customer email as verified.
- *
- * @param customerId - Customer UUID
- *
- * @example
- * ```typescript
- * await markEmailVerified(customerId)
- * ```
- */
-export declare function markEmailVerified(customerId: string): Promise<void>;
-/**
- * Check if email is already registered.
- *
- * @param email - Email to check
- * @returns True if email exists
- */
-export declare function emailExists(email: string): Promise<boolean>;
-//# sourceMappingURL=customer-service.d.ts.map

package/dist/auth/server/customer-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"customer-service.d.ts","sourceRoot":"","sources":["../../../src/auth/server/customer-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAM/C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,IAAI,CAAA;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,gBAAgB,CAAA;CACtE;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,mBAAmB,UAAO,GACzB,OAAO,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,CAsCjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAwBjC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAUjC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAyBjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGjE"}

package/dist/auth/server/customer-service.js

@@ -1,266 +0,0 @@
-/**
- * @rovela/sdk/auth/server/customer-service
- *
- * Customer CRUD operations.
- * Each store has its own database (via Neon branches) - no tenant isolation needed.
- */
-import { eq } from 'drizzle-orm';
-import { getDb } from '../../core/db/client';
-import * as schema from '../../core/db/schema';
-import { hashPassword, verifyPassword } from './password';
-// =============================================================================
-// Customer CRUD
-// =============================================================================
-/**
- * Create a new customer account.
- * Password is hashed before storage.
- * Returns customer with null emailVerified (needs verification).
- *
- * @param email - Customer email (will be lowercased)
- * @param password - Plain text password (min 8 chars)
- * @param name - Optional customer name
- * @returns Created customer
- * @throws Error if email already exists
- *
- * @example
- * ```typescript
- * const { customer } = await createCustomer(
- *   'customer@example.com',
- *   'securePassword123',
- *   'John Doe'
- * )
- * ```
- */
-export async function createCustomer(email, password, name) {
-    const db = getDb();
-    // Hash password
-    const passwordHash = await hashPassword(password);
-    try {
-        const [customer] = await db
-            .insert(schema.customers)
-            .values({
-            email: email.toLowerCase().trim(),
-            name: name?.trim() || null,
-            passwordHash,
-            emailVerified: null, // Not verified initially
-        })
-            .returning();
-        // Claim any guest orders with matching email
-        let ordersClaimedCount = 0;
-        try {
-            const { claimGuestOrders } = await import('../../core/db/queries');
-            ordersClaimedCount = await claimGuestOrders(email, customer.id);
-        }
-        catch (claimError) {
-            // Log but don't fail registration - claiming orders is secondary
-            console.warn('[Auth] Failed to claim guest orders:', claimError);
-        }
-        return { customer, ordersClaimedCount };
-    }
-    catch (error) {
-        // Check for unique constraint violation
-        const err = error;
-        if (err.code === '23505' || err.cause?.code === '23505') {
-            throw new Error('An account with this email already exists');
-        }
-        throw error;
-    }
-}
-/**
- * Authenticate a customer by email and password.
- * Checks email verification status.
- *
- * @param email - Customer email
- * @param password - Plain text password
- * @param requireVerification - Whether to require email verification (default: true)
- * @returns Authentication result
- *
- * @example
- * ```typescript
- * const result = await authenticateCustomer('customer@example.com', 'password123')
- * if (result.success) {
- *   console.log('Authenticated:', result.customer.email)
- * } else {
- *   console.log('Failed:', result.error)
- * }
- * ```
- */
-export async function authenticateCustomer(email, password, requireVerification = true) {
-    const db = getDb();
-    // Find customer by email
-    const [customer] = await db
-        .select()
-        .from(schema.customers)
-        .where(eq(schema.customers.email, email.toLowerCase().trim()))
-        .limit(1);
-    if (!customer) {
-        return {
-            success: false,
-            error: 'Invalid email or password',
-            code: 'INVALID_CREDENTIALS',
-        };
-    }
-    // Verify password
-    const isValidPassword = await verifyPassword(password, customer.passwordHash);
-    if (!isValidPassword) {
-        return {
-            success: false,
-            error: 'Invalid email or password',
-            code: 'INVALID_CREDENTIALS',
-        };
-    }
-    // Check email verification
-    if (requireVerification && !customer.emailVerified) {
-        return {
-            success: false,
-            error: 'Please verify your email before signing in',
-            code: 'EMAIL_NOT_VERIFIED',
-        };
-    }
-    return { success: true, customer };
-}
-/**
- * Get customer data for session (excludes sensitive fields).
- *
- * @param customerId - Customer UUID
- * @returns Customer session data or null if not found
- *
- * @example
- * ```typescript
- * const session = await findCustomerForSession(customerId)
- * if (session) {
- *   console.log('Customer:', session.email)
- * }
- * ```
- */
-export async function findCustomerForSession(customerId) {
-    const db = getDb();
-    const [customer] = await db
-        .select({
-        id: schema.customers.id,
-        email: schema.customers.email,
-        name: schema.customers.name,
-        emailVerified: schema.customers.emailVerified,
-    })
-        .from(schema.customers)
-        .where(eq(schema.customers.id, customerId))
-        .limit(1);
-    if (!customer) {
-        return null;
-    }
-    return {
-        id: customer.id,
-        email: customer.email,
-        name: customer.name,
-        emailVerified: !!customer.emailVerified,
-    };
-}
-/**
- * Find a customer by email.
- *
- * @param email - Customer email
- * @returns Customer or null if not found
- */
-export async function findCustomerByEmail(email) {
-    const db = getDb();
-    const [customer] = await db
-        .select()
-        .from(schema.customers)
-        .where(eq(schema.customers.email, email.toLowerCase().trim()))
-        .limit(1);
-    return customer || null;
-}
-/**
- * Find a customer by ID.
- *
- * @param customerId - Customer UUID
- * @returns Customer or null if not found
- */
-export async function findCustomerById(customerId) {
-    const db = getDb();
-    const [customer] = await db
-        .select()
-        .from(schema.customers)
-        .where(eq(schema.customers.id, customerId))
-        .limit(1);
-    return customer || null;
-}
-/**
- * Update customer profile information.
- *
- * @param customerId - Customer UUID
- * @param data - Fields to update
- * @returns Updated customer
- *
- * @example
- * ```typescript
- * const updated = await updateCustomer(customerId, { name: 'Jane Doe' })
- * ```
- */
-export async function updateCustomer(customerId, data) {
-    const db = getDb();
-    const updateData = {};
-    if (data.name !== undefined) {
-        updateData.name = data.name?.trim() || null;
-    }
-    if (data.email !== undefined) {
-        updateData.email = data.email.toLowerCase().trim();
-    }
-    if (Object.keys(updateData).length === 0) {
-        // Nothing to update, return current customer
-        return findCustomerById(customerId);
-    }
-    const [customer] = await db
-        .update(schema.customers)
-        .set(updateData)
-        .where(eq(schema.customers.id, customerId))
-        .returning();
-    return customer || null;
-}
-/**
- * Update customer password.
- *
- * @param customerId - Customer UUID
- * @param newPassword - New plain text password
- *
- * @example
- * ```typescript
- * await updateCustomerPassword(customerId, 'newSecurePassword123')
- * ```
- */
-export async function updateCustomerPassword(customerId, newPassword) {
-    const db = getDb();
-    const passwordHash = await hashPassword(newPassword);
-    await db
-        .update(schema.customers)
-        .set({ passwordHash })
-        .where(eq(schema.customers.id, customerId));
-}
-/**
- * Mark customer email as verified.
- *
- * @param customerId - Customer UUID
- *
- * @example
- * ```typescript
- * await markEmailVerified(customerId)
- * ```
- */
-export async function markEmailVerified(customerId) {
-    const db = getDb();
-    await db
-        .update(schema.customers)
-        .set({ emailVerified: new Date() })
-        .where(eq(schema.customers.id, customerId));
-}
-/**
- * Check if email is already registered.
- *
- * @param email - Email to check
- * @returns True if email exists
- */
-export async function emailExists(email) {
-    const customer = await findCustomerByEmail(email);
-    return !!customer;
-}
-//# sourceMappingURL=customer-service.js.map

package/dist/auth/server/customer-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"customer-service.js","sourceRoot":"","sources":["../../../src/auth/server/customer-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAyBzD,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,QAAgB,EAChB,IAAa;IAEb,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,gBAAgB;IAChB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAA;IAEjD,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;aACxB,MAAM,CAAC;YACN,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI;YAC1B,YAAY;YACZ,aAAa,EAAE,IAAI,EAAE,yBAAyB;SAC/C,CAAC;aACD,SAAS,EAAE,CAAA;QAEd,6CAA6C;QAC7C,IAAI,kBAAkB,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;YAClE,kBAAkB,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,iEAAiE;YACjE,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,UAAU,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;IACzC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,wCAAwC;QACxC,MAAM,GAAG,GAAG,KAAqD,CAAA;QACjE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,mBAAmB,GAAG,IAAI;IAE1B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,yBAAyB;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,qBAAqB;SAC5B,CAAA;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,qBAAqB;SAC5B,CAAA;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,mBAAmB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4CAA4C;YACnD,IAAI,EAAE,oBAAoB;SAC3B,CAAA;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;QACvB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK;QAC7B,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;QAC3B,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa;KAC9C,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;SAC1C,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;KACxC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa;IAEb,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB;IAElB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;SAC1C,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAAuC;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,UAAU,GAAgC,EAAE,CAAA;IAElD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,6CAA6C;QAC7C,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,UAAU,CAAC;SACf,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;SAC1C,SAAS,EAAE,CAAA;IAEd,OAAO,QAAQ,IAAI,IAAI,CAAA;AACzB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,WAAmB;IAEnB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;IAEpD,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAElB,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACxB,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;SAClC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACjD,OAAO,CAAC,CAAC,QAAQ,CAAA;AACnB,CAAC"}

package/dist/auth/server/customer-session.d.ts

@@ -1,81 +0,0 @@
-/**
- * @rovela-ai/sdk/auth/server/customer-session
- *
- * Centralized session check for customer-side API routes and Server
- * Components. Mirror of `requireAdmin()` on the admin side.
- *
- * # Why this exists
- *
- * Before this helper, customer API routes each had their own inline
- * "check session.user.id, optionally check session.user.role" scaffolding.
- * Some of them (e.g. `/api/account/orders`) simply checked `session.user.id`
- * and trusted whatever was there — including an admin session that happened
- * to be in the single shared cookie. Result: admin JWTs silently succeeded
- * on customer endpoints, returning "no orders" for the admin UUID rather
- * than rejecting the request.
- *
- * Post-0.3.20 the admin cookie lives at a different name entirely
- * (`__Secure-rovela.admin.session-token`), so an admin JWT CANNOT reach
- * this helper because `getServerSession(createCustomerAuthOptions())` only
- * reads the customer cookie (`__Secure-rovela.customer.session-token`).
- * The `role` check below is belt-and-braces for legacy tokens still in
- * flight during the fleet-wide cookie-name rollout.
- *
- * # Return contract
- *
- * Discriminated union, same as `requireAdmin`:
- *   - `{ ok: true, customer }`  — caller proceeds
- *   - `{ ok: false, response }` — caller returns `response` directly
- *
- * Never throws — any internal error converts to a safe response.
- *
- * @example
- * ```ts
- * export async function GET() {
- *   const guard = await requireCustomer()
- *   if (!guard.ok) return guard.response
- *   const { customer } = guard
- *   const orders = await findOrders({ customerId: customer.id })
- *   return Response.json({ orders })
- * }
- * ```
- */
-import { NextResponse } from 'next/server';
-/**
- * Shape of the verified customer returned on success. Deliberately a subset
- * of the full customer row so callers don't accidentally leak sensitive
- * fields (passwordHash, emailVerifiedAt timestamp, etc).
- */
-export interface VerifiedCustomer {
-    id: string;
-    email: string;
-    name: string | null;
-    emailVerified: boolean;
-}
-export type RequireCustomerResult = {
-    ok: true;
-    customer: VerifiedCustomer;
-} | {
-    ok: false;
-    response: NextResponse<{
-        error: string;
-        code: string;
-    }>;
-};
-/**
- * Authenticate the current request as a customer.
- *
- * Resolves with either `{ ok: true, customer }` (caller may proceed) or
- * `{ ok: false, response }` (caller returns the response to the client).
- *
- * @example
- * ```ts
- * export async function GET() {
- *   const guard = await requireCustomer()
- *   if (!guard.ok) return guard.response
- *   // ...proceed with guard.customer
- * }
- * ```
- */
-export declare function requireCustomer(): Promise<RequireCustomerResult>;
-//# sourceMappingURL=customer-session.d.ts.map

package/dist/auth/server/customer-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"customer-session.d.ts","sourceRoot":"","sources":["../../../src/auth/server/customer-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAS1C;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAA;AAwB1E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,qBAAqB,CAAC,CA6CtE"}