@rovela-ai/sdk 0.4.1 → 0.4.2

package/dist/auth/hooks/useAuth.js

@@ -0,0 +1,251 @@
+'use client';
+/**
+ * @rovela/sdk/auth/hooks/useAuth
+ *
+ * Client-side authentication hook.
+ * Wraps NextAuth session with customer-specific functionality.
+ */
+import { useCallback, useMemo } from 'react';
+import { useSession, signIn as nextAuthSignIn, signOut as nextAuthSignOut } from 'next-auth/react';
+// =============================================================================
+// Hook Implementation
+// =============================================================================
+/**
+ * Authentication hook for customer auth state and actions.
+ *
+ * @returns Auth state and methods
+ *
+ * @example
+ * ```typescript
+ * function MyComponent() {
+ *   const {
+ *     customer,
+ *     isAuthenticated,
+ *     isLoading,
+ *     signIn,
+ *     signUp,
+ *     signOut,
+ *   } = useAuth()
+ *
+ *   if (isLoading) return <div>Loading...</div>
+ *
+ *   if (isAuthenticated) {
+ *     return <div>Welcome, {customer?.name || customer?.email}</div>
+ *   }
+ *
+ *   return <button onClick={() => signIn({ email, password })}>Sign In</button>
+ * }
+ * ```
+ */
+export function useAuth() {
+    // Defensive handling: useSession() returns undefined if no SessionProvider
+    const sessionResult = useSession();
+    const session = sessionResult?.data ?? null;
+    const status = sessionResult?.status ?? 'loading';
+    const update = sessionResult?.update;
+    // Memoized customer data.
+    // Admin auth lives in a separate cookie jar — admin JWTs cannot reach this hook.
+    const customer = useMemo(() => {
+        if (!session?.user)
+            return null;
+        return session.user;
+    }, [session?.user]);
+    // Derived state
+    const isLoading = status === 'loading';
+    const isAuthenticated = status === 'authenticated' && !!customer;
+    const isEmailVerified = customer?.emailVerified ?? false;
+    /**
+     * Sign in with email and password.
+     */
+    const signIn = useCallback(async (options) => {
+        const { email, password, rememberMe = false, redirectTo } = options;
+        try {
+            const result = await nextAuthSignIn('credentials', {
+                email,
+                password,
+                rememberMe: rememberMe.toString(),
+                redirect: false,
+                callbackUrl: redirectTo,
+            });
+            if (result?.error) {
+                // Parse error from NextAuth
+                const error = result.error;
+                // Check for specific error codes
+                if (error.includes('EMAIL_NOT_VERIFIED') || error.includes('verify your email')) {
+                    return {
+                        success: false,
+                        error: 'Please verify your email before signing in',
+                        requiresVerification: true,
+                        email,
+                    };
+                }
+                return {
+                    success: false,
+                    error: error.includes('Invalid') ? 'Invalid email or password' : error,
+                };
+            }
+            // Trigger session update
+            if (update) {
+                await update();
+            }
+            return { success: true };
+        }
+        catch (error) {
+            console.error('[useAuth] Sign in error:', error);
+            return {
+                success: false,
+                error: 'An error occurred during sign in. Please try again.',
+            };
+        }
+    }, [update]);
+    /**
+     * Sign up with email and password.
+     */
+    const signUp = useCallback(async (data) => {
+        const { email, password, name } = data;
+        try {
+            const response = await fetch('/api/auth/register', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ email, password, name }),
+            });
+            const result = await response.json();
+            if (!response.ok) {
+                return {
+                    success: false,
+                    error: result.error || 'Failed to create account',
+                };
+            }
+            return {
+                success: true,
+                customerId: result.customerId,
+                verificationEmailSent: true,
+            };
+        }
+        catch (error) {
+            console.error('[useAuth] Sign up error:', error);
+            return {
+                success: false,
+                error: 'An error occurred during sign up. Please try again.',
+            };
+        }
+    }, []);
+    /**
+     * Sign out the current customer.
+     */
+    const signOut = useCallback(async () => {
+        await nextAuthSignOut({ redirect: false });
+    }, []);
+    /**
+     * Resend verification email.
+     */
+    const resendVerification = useCallback(async (email) => {
+        try {
+            const response = await fetch('/api/auth/resend-verification', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ email }),
+            });
+            const result = await response.json();
+            if (!response.ok) {
+                return {
+                    success: false,
+                    error: result.error || 'Failed to send verification email',
+                };
+            }
+            return { success: true };
+        }
+        catch (error) {
+            console.error('[useAuth] Resend verification error:', error);
+            return {
+                success: false,
+                error: 'An error occurred. Please try again.',
+            };
+        }
+    }, []);
+    /**
+     * Request password reset.
+     */
+    const requestPasswordReset = useCallback(async (email) => {
+        try {
+            await fetch('/api/auth/forgot-password', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ email }),
+            });
+            // Always return success to prevent email enumeration
+            return { success: true };
+        }
+        catch (error) {
+            console.error('[useAuth] Password reset request error:', error);
+            // Still return success for security
+            return { success: true };
+        }
+    }, []);
+    /**
+     * Reset password with token.
+     */
+    const resetPassword = useCallback(async (token, newPassword) => {
+        try {
+            const response = await fetch('/api/auth/reset-password', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ token, password: newPassword }),
+            });
+            const result = await response.json();
+            if (!response.ok) {
+                return {
+                    success: false,
+                    error: result.error || 'Failed to reset password',
+                };
+            }
+            return { success: true };
+        }
+        catch (error) {
+            console.error('[useAuth] Reset password error:', error);
+            return {
+                success: false,
+                error: 'An error occurred. Please try again.',
+            };
+        }
+    }, []);
+    /**
+     * Validate reset token.
+     */
+    const validateResetToken = useCallback(async (token) => {
+        try {
+            const response = await fetch(`/api/auth/reset-password?token=${encodeURIComponent(token)}`);
+            const result = await response.json();
+            if (!response.ok || !result.valid) {
+                return {
+                    valid: false,
+                    error: result.error || 'Invalid or expired reset link',
+                };
+            }
+            return { valid: true };
+        }
+        catch (error) {
+            console.error('[useAuth] Validate token error:', error);
+            return {
+                valid: false,
+                error: 'Failed to validate reset link. Please try again.',
+            };
+        }
+    }, []);
+    return {
+        // State
+        customer,
+        isAuthenticated,
+        isLoading,
+        isEmailVerified,
+        // Actions
+        signIn,
+        signUp,
+        signOut,
+        resendVerification,
+        requestPasswordReset,
+        resetPassword,
+        validateResetToken,
+    };
+}
+//# sourceMappingURL=useAuth.js.map

package/dist/auth/hooks/useAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuth.js","sourceRoot":"","sources":["../../../src/auth/hooks/useAuth.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,cAAc,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAclG,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,OAAO;IACrB,2EAA2E;IAC3E,MAAM,aAAa,GAAG,UAAU,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,aAAa,EAAE,IAAI,IAAI,IAAI,CAAA;IAC3C,MAAM,MAAM,GAAG,aAAa,EAAE,MAAM,IAAI,SAAS,CAAA;IACjD,MAAM,MAAM,GAAG,aAAa,EAAE,MAAM,CAAA;IAEpC,0BAA0B;IAC1B,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAA2B,EAAE;QACpD,IAAI,CAAC,OAAO,EAAE,IAAI;YAAE,OAAO,IAAI,CAAA;QAC/B,OAAO,OAAO,CAAC,IAAkC,CAAA;IACnD,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAEnB,gBAAgB;IAChB,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAA;IACtC,MAAM,eAAe,GAAG,MAAM,KAAK,eAAe,IAAI,CAAC,CAAC,QAAQ,CAAA;IAChE,MAAM,eAAe,GAAG,QAAQ,EAAE,aAAa,IAAI,KAAK,CAAA;IAExD;;OAEG;IACH,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,OAAsB,EAAyB,EAAE;QACjF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;QAEnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE;gBACjD,KAAK;gBACL,QAAQ;gBACR,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;gBACjC,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;YAEF,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;gBAClB,4BAA4B;gBAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;gBAE1B,iCAAiC;gBACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBAChF,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,4CAA4C;wBACnD,oBAAoB,EAAE,IAAI;wBAC1B,KAAK;qBACN,CAAA;gBACH,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK;iBACvE,CAAA;YACH,CAAC;YAED,yBAAyB;YACzB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,EAAE,CAAA;YAChB,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;YAChD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qDAAqD;aAC7D,CAAA;QACH,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAEZ;;OAEG;IACH,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,IAAgB,EAAyB,EAAE;QAC3E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;QAEtC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAChD,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,0BAA0B;iBAClD,CAAA;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,qBAAqB,EAAE,IAAI;aAC5B,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;YAChD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qDAAqD;aAC7D,CAAA;QACH,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;OAEG;IACH,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACpD,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;OAEG;IACH,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAqC,EAAE;QAChG,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+BAA+B,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAChC,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,mCAAmC;iBAC3D,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;YAC5D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sCAAsC;aAC9C,CAAA;QACH,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAuC,EAAE;QACpG,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,2BAA2B,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAChC,CAAC,CAAA;YAEF,qDAAqD;YACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;YAC/D,oCAAoC;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;OAEG;IACH,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,WAAmB,EAAgC,EAAE;QAC3G,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,0BAA0B,EAAE;gBACvD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;aACvD,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,0BAA0B;iBAClD,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;YACvD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sCAAsC;aAC9C,CAAA;QACH,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;OAEG;IACH,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAkC,EAAE;QAC7F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC3F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,+BAA+B;iBACvD,CAAA;YACH,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;YACvD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kDAAkD;aAC1D,CAAA;QACH,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,eAAe;QACf,SAAS;QACT,eAAe;QAEf,UAAU;QACV,MAAM;QACN,MAAM;QACN,OAAO;QACP,kBAAkB;QAClB,oBAAoB;QACpB,aAAa;QACb,kBAAkB;KACnB,CAAA;AACH,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @rovela/sdk/auth
+ *
+ * Customer authentication module for e-commerce stores.
+ *
+ * This module provides complete customer authentication including:
+ * - Email/password sign in and sign up
+ * - Email verification flow
+ * - Password reset flow
+ * - Remember me functionality
+ * - Session management with JWT
+ * - Pre-built UI components
+ * - Route protection
+ *
+ * @example
+ * ```typescript
+ * // Setup NextAuth route handler
+ * // app/api/auth/[...nextauth]/route.ts
+ * import NextAuth from 'next-auth'
+ * import { createCustomerAuthOptions } from '@rovela-ai/sdk/auth'
+ * const handler = NextAuth(createCustomerAuthOptions())
+ * export { handler as GET, handler as POST }
+ *
+ * // Setup API routes for registration, verification, etc.
+ * // app/api/auth/register/route.ts
+ * export { POST } from '@rovela/sdk/auth/api/register'
+ *
+ * // Use components in pages
+ * import { SignInForm, SignUpForm, AuthGuard, UserMenu } from '@rovela/sdk/auth'
+ *
+ * // Use auth hook in components
+ * import { useAuth } from '@rovela/sdk/auth'
+ *
+ * function MyComponent() {
+ *   const { customer, isAuthenticated, signIn, signOut } = useAuth()
+ *   // ...
+ * }
+ * ```
+ */
+export type { CustomerSession, AuthSession, AuthState, SignInOptions, SignInResult, SignUpData, SignUpResult, PasswordResetRequestResult, PasswordResetResult, TokenValidationResult, VerifyEmailResult, ResendVerificationResult, SignInFormProps, SignUpFormProps, ForgotPasswordFormProps, ResetPasswordFormProps, VerifyEmailNoticeProps, UserMenuProps, AuthGuardProps, AuthApiError, RegisterRequest, RegisterResponse, VerifyEmailResponse, ForgotPasswordRequest, ResetPasswordRequest, AuthConfigOptions, UseAuthReturn, } from './types';
+export { createCustomerAuthOptions, getCustomerSession, } from './config';
+export { POST as registerPOST } from './api/register';
+export { GET as verifyEmailGET, POST as verifyEmailPOST } from './api/verify-email';
+export { POST as resendVerificationPOST } from './api/resend-verification';
+export { POST as forgotPasswordPOST } from './api/forgot-password';
+export { GET as resetPasswordGET, POST as resetPasswordPOST } from './api/reset-password';
+export { useAuth } from './hooks/useAuth';
+export { SignInForm } from './components/SignInForm';
+export { SignUpForm } from './components/SignUpForm';
+export { ForgotPasswordForm } from './components/ForgotPasswordForm';
+export { ResetPasswordForm } from './components/ResetPasswordForm';
+export { VerifyEmailNotice } from './components/VerifyEmailNotice';
+export { UserMenu } from './components/UserMenu';
+export { AuthGuard, withAuth } from './components/AuthGuard';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAMH,YAAY,EAEV,eAAe,EACf,WAAW,EACX,SAAS,EAGT,aAAa,EACb,YAAY,EAGZ,UAAU,EACV,YAAY,EAGZ,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EAGrB,iBAAiB,EACjB,wBAAwB,EAGxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,cAAc,EAGd,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EAGpB,iBAAiB,EAGjB,aAAa,GACd,MAAM,SAAS,CAAA;AAMhB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAOjB,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACnF,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAC1E,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAMzF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAMzC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA"}

package/dist/auth/index.js

@@ -0,0 +1,67 @@
+/**
+ * @rovela/sdk/auth
+ *
+ * Customer authentication module for e-commerce stores.
+ *
+ * This module provides complete customer authentication including:
+ * - Email/password sign in and sign up
+ * - Email verification flow
+ * - Password reset flow
+ * - Remember me functionality
+ * - Session management with JWT
+ * - Pre-built UI components
+ * - Route protection
+ *
+ * @example
+ * ```typescript
+ * // Setup NextAuth route handler
+ * // app/api/auth/[...nextauth]/route.ts
+ * import NextAuth from 'next-auth'
+ * import { createCustomerAuthOptions } from '@rovela-ai/sdk/auth'
+ * const handler = NextAuth(createCustomerAuthOptions())
+ * export { handler as GET, handler as POST }
+ *
+ * // Setup API routes for registration, verification, etc.
+ * // app/api/auth/register/route.ts
+ * export { POST } from '@rovela/sdk/auth/api/register'
+ *
+ * // Use components in pages
+ * import { SignInForm, SignUpForm, AuthGuard, UserMenu } from '@rovela/sdk/auth'
+ *
+ * // Use auth hook in components
+ * import { useAuth } from '@rovela/sdk/auth'
+ *
+ * function MyComponent() {
+ *   const { customer, isAuthenticated, signIn, signOut } = useAuth()
+ *   // ...
+ * }
+ * ```
+ */
+// =============================================================================
+// Configuration
+// =============================================================================
+export { createCustomerAuthOptions, getCustomerSession, } from './config';
+// =============================================================================
+// API Route Handlers
+// =============================================================================
+// Individual route handlers (for flexible routing)
+export { POST as registerPOST } from './api/register';
+export { GET as verifyEmailGET, POST as verifyEmailPOST } from './api/verify-email';
+export { POST as resendVerificationPOST } from './api/resend-verification';
+export { POST as forgotPasswordPOST } from './api/forgot-password';
+export { GET as resetPasswordGET, POST as resetPasswordPOST } from './api/reset-password';
+// =============================================================================
+// Client Hooks
+// =============================================================================
+export { useAuth } from './hooks/useAuth';
+// =============================================================================
+// UI Components
+// =============================================================================
+export { SignInForm } from './components/SignInForm';
+export { SignUpForm } from './components/SignUpForm';
+export { ForgotPasswordForm } from './components/ForgotPasswordForm';
+export { ResetPasswordForm } from './components/ResetPasswordForm';
+export { VerifyEmailNotice } from './components/VerifyEmailNotice';
+export { UserMenu } from './components/UserMenu';
+export { AuthGuard, withAuth } from './components/AuthGuard';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAqDH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAEjB,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,mDAAmD;AACnD,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACnF,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAC1E,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAEzF,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA"}

package/dist/auth/server/customer-service.d.ts

@@ -0,0 +1,140 @@
+/**
+ * @rovela/sdk/auth/server/customer-service
+ *
+ * Customer CRUD operations.
+ * Each store has its own database (via Neon branches) - no tenant isolation needed.
+ */
+import * as schema from '../../core/db/schema';
+import type { CustomerSession } from '../types';
+export interface CreateCustomerResult {
+    customer: schema.Customer;
+    verificationToken?: string;
+    /** Number of guest orders claimed (orders with matching email and null customerId) */
+    ordersClaimedCount?: number;
+}
+export interface AuthenticateResult {
+    success: true;
+    customer: schema.Customer;
+}
+export interface AuthenticateError {
+    success: false;
+    error: string;
+    code: 'INVALID_CREDENTIALS' | 'EMAIL_NOT_VERIFIED' | 'USER_NOT_FOUND';
+}
+/**
+ * Create a new customer account.
+ * Password is hashed before storage.
+ * Returns customer with null emailVerified (needs verification).
+ *
+ * @param email - Customer email (will be lowercased)
+ * @param password - Plain text password (min 8 chars)
+ * @param name - Optional customer name
+ * @returns Created customer
+ * @throws Error if email already exists
+ *
+ * @example
+ * ```typescript
+ * const { customer } = await createCustomer(
+ *   'customer@example.com',
+ *   'securePassword123',
+ *   'John Doe'
+ * )
+ * ```
+ */
+export declare function createCustomer(email: string, password: string, name?: string): Promise<CreateCustomerResult>;
+/**
+ * Authenticate a customer by email and password.
+ * Checks email verification status.
+ *
+ * @param email - Customer email
+ * @param password - Plain text password
+ * @param requireVerification - Whether to require email verification (default: true)
+ * @returns Authentication result
+ *
+ * @example
+ * ```typescript
+ * const result = await authenticateCustomer('customer@example.com', 'password123')
+ * if (result.success) {
+ *   console.log('Authenticated:', result.customer.email)
+ * } else {
+ *   console.log('Failed:', result.error)
+ * }
+ * ```
+ */
+export declare function authenticateCustomer(email: string, password: string, requireVerification?: boolean): Promise<AuthenticateResult | AuthenticateError>;
+/**
+ * Get customer data for session (excludes sensitive fields).
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer session data or null if not found
+ *
+ * @example
+ * ```typescript
+ * const session = await findCustomerForSession(customerId)
+ * if (session) {
+ *   console.log('Customer:', session.email)
+ * }
+ * ```
+ */
+export declare function findCustomerForSession(customerId: string): Promise<CustomerSession | null>;
+/**
+ * Find a customer by email.
+ *
+ * @param email - Customer email
+ * @returns Customer or null if not found
+ */
+export declare function findCustomerByEmail(email: string): Promise<schema.Customer | null>;
+/**
+ * Find a customer by ID.
+ *
+ * @param customerId - Customer UUID
+ * @returns Customer or null if not found
+ */
+export declare function findCustomerById(customerId: string): Promise<schema.Customer | null>;
+/**
+ * Update customer profile information.
+ *
+ * @param customerId - Customer UUID
+ * @param data - Fields to update
+ * @returns Updated customer
+ *
+ * @example
+ * ```typescript
+ * const updated = await updateCustomer(customerId, { name: 'Jane Doe' })
+ * ```
+ */
+export declare function updateCustomer(customerId: string, data: {
+    name?: string;
+    email?: string;
+}): Promise<schema.Customer | null>;
+/**
+ * Update customer password.
+ *
+ * @param customerId - Customer UUID
+ * @param newPassword - New plain text password
+ *
+ * @example
+ * ```typescript
+ * await updateCustomerPassword(customerId, 'newSecurePassword123')
+ * ```
+ */
+export declare function updateCustomerPassword(customerId: string, newPassword: string): Promise<void>;
+/**
+ * Mark customer email as verified.
+ *
+ * @param customerId - Customer UUID
+ *
+ * @example
+ * ```typescript
+ * await markEmailVerified(customerId)
+ * ```
+ */
+export declare function markEmailVerified(customerId: string): Promise<void>;
+/**
+ * Check if email is already registered.
+ *
+ * @param email - Email to check
+ * @returns True if email exists
+ */
+export declare function emailExists(email: string): Promise<boolean>;
+//# sourceMappingURL=customer-service.d.ts.map

package/dist/auth/server/customer-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-service.d.ts","sourceRoot":"","sources":["../../../src/auth/server/customer-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAM/C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,IAAI,CAAA;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,gBAAgB,CAAA;CACtE;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,mBAAmB,UAAO,GACzB,OAAO,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,CAsCjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAwBjC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAUjC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAyBjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGjE"}