@solvapay/next 1.0.1-preview.1 → 1.0.1-preview.2

package/README.md

@@ -274,7 +274,7 @@ export const config = {
 
 ```typescript
 // src/proxy.ts (in src/ folder, not project root)
-import { createSupabaseAuthMiddleware } from '@solvapay/next'
+import { createSupabaseAuthMiddleware } from '@solvapay/next/middleware'
 
 // Use 'proxy' export for Next.js 16 (no deprecation warning)
 export const proxy = createSupabaseAuthMiddleware({
@@ -289,21 +289,21 @@ export const config = {
 **File Location Notes:**
 
 - **Next.js 15**: Place `middleware.ts` at project root
-- **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
-- **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
+- **Next.js 16 without `src/` folder**: Place `proxy.ts` at project root
+- **Next.js 16 with `src/` folder**: Place `src/proxy.ts` (in `src/` folder, not root)
 
-> **Note:** Next.js 16 renamed "middleware" to "proxy". You can use either export name, but `proxy` is recommended to avoid deprecation warnings.
+> **Note:** Next.js 16 renamed "middleware" to "proxy". Use `proxy` to avoid deprecation warnings.
 
 ### Custom Middleware
 
 Alternatively, you can create your own middleware:
 
 ```typescript
-// middleware.ts (or src/proxy.ts for Next.js 16)
+// proxy.ts (or src/proxy.ts for Next.js 16)
 import { NextResponse } from 'next/server'
 import type { NextRequest } from 'next/server'
 
-export async function middleware(request: NextRequest) {
+export async function proxy(request: NextRequest) {
   // Extract user ID from your auth system
   const userId = await getUserIdFromAuth(request)
 

package/dist/chunk-F7TBIH6W.js

@@ -0,0 +1,74 @@
+// src/helpers/middleware.ts
+import { NextResponse } from "next/server";
+function createAuthMiddleware(options) {
+  const { adapter, publicRoutes = [], userIdHeader = "x-user-id" } = options;
+  return async function middleware(request) {
+    const req = request;
+    const { pathname } = req.nextUrl;
+    if (!pathname.startsWith("/api")) {
+      return NextResponse.next();
+    }
+    const isPublicRoute = publicRoutes.some((route) => pathname.startsWith(route));
+    const userId = await adapter.getUserIdFromRequest(req);
+    if (isPublicRoute) {
+      const requestHeaders2 = new Headers(req.headers);
+      if (userId) {
+        requestHeaders2.set(userIdHeader, userId);
+      }
+      return NextResponse.next({
+        request: {
+          headers: requestHeaders2
+        }
+      });
+    }
+    if (!userId) {
+      return NextResponse.json(
+        { error: "Unauthorized", details: "Valid authentication required" },
+        { status: 401 }
+      );
+    }
+    const requestHeaders = new Headers(req.headers);
+    requestHeaders.set(userIdHeader, userId);
+    return NextResponse.next({
+      request: {
+        headers: requestHeaders
+      }
+    });
+  };
+}
+function createSupabaseAuthMiddleware(options = {}) {
+  const { jwtSecret, publicRoutes = [], userIdHeader = "x-user-id" } = options;
+  let authAdapter = null;
+  let adapterPromise = null;
+  const lazyAdapter = {
+    async getUserIdFromRequest(req) {
+      if (!authAdapter) {
+        if (!adapterPromise) {
+          adapterPromise = (async () => {
+            const secret = jwtSecret || process.env.SUPABASE_JWT_SECRET;
+            if (!secret) {
+              throw new Error(
+                "SUPABASE_JWT_SECRET environment variable is required. Please set it in your .env.local file. Get it from: Supabase Dashboard \u2192 Settings \u2192 API \u2192 JWT Secret"
+              );
+            }
+            const { SupabaseAuthAdapter } = await import("@solvapay/auth/supabase");
+            authAdapter = new SupabaseAuthAdapter({ jwtSecret: secret });
+            return authAdapter;
+          })();
+        }
+        authAdapter = await adapterPromise;
+      }
+      return authAdapter.getUserIdFromRequest(req);
+    }
+  };
+  return createAuthMiddleware({
+    adapter: lazyAdapter,
+    publicRoutes,
+    userIdHeader
+  });
+}
+
+export {
+  createAuthMiddleware,
+  createSupabaseAuthMiddleware
+};

package/dist/index.d.cts

@@ -1,7 +1,8 @@
-import { NextResponse, NextRequest } from 'next/server';
+import { NextResponse } from 'next/server';
 import * as _solvapay_server from '@solvapay/server';
 import { AuthenticatedUser, SolvaPay } from '@solvapay/server';
-import { AuthAdapter } from '@solvapay/auth';
+export { AuthMiddlewareOptions, SupabaseAuthMiddlewareOptions, createAuthMiddleware, createSupabaseAuthMiddleware } from './middleware.cjs';
+import '@solvapay/auth';
 
 /**
  * Purchase Cache Utilities
@@ -274,180 +275,6 @@ declare function listPlans(request: globalThis.Request): Promise<{
     productRef: string;
 } | NextResponse>;
 
-/**
- * Next.js Middleware Helpers
- *
- * Helpers for creating authentication middleware in Next.js.
- * Works with any AuthAdapter implementation (Supabase, custom, etc.)
- */
-
-/**
- * Configuration options for authentication middleware
- */
-interface AuthMiddlewareOptions {
-    /**
-     * Auth adapter instance to use for extracting user IDs from requests
-     * You can use SupabaseAuthAdapter, MockAuthAdapter, or create your own
-     */
-    adapter: AuthAdapter;
-    /**
-     * Public routes that don't require authentication
-     * Routes are matched using pathname.startsWith()
-     */
-    publicRoutes?: string[];
-    /**
-     * Header name to store the user ID (default: 'x-user-id')
-     */
-    userIdHeader?: string;
-}
-/**
- * Creates a Next.js middleware function for authentication
- *
- * This helper:
- * 1. Uses the provided AuthAdapter to extract userId from requests
- * 2. Handles public vs protected routes
- * 3. Adds userId to request headers for downstream routes
- * 4. Returns appropriate error responses for auth failures
- *
- * @param options - Configuration options
- * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
- *
- * @example Next.js 15
- * ```typescript
- * // middleware.ts (at project root)
- * import { createAuthMiddleware } from '@solvapay/next';
- * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
- *
- * const adapter = new SupabaseAuthAdapter({
- *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
- * });
- *
- * export const middleware = createAuthMiddleware({
- *   adapter,
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Next.js 16 with src/ folder
- * ```typescript
- * // src/proxy.ts (in src/ folder, not project root)
- * import { createAuthMiddleware } from '@solvapay/next';
- * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
- *
- * const adapter = new SupabaseAuthAdapter({
- *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
- * });
- *
- * // Use 'proxy' export for Next.js 16 (no deprecation warning)
- * export const proxy = createAuthMiddleware({
- *   adapter,
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Custom adapter
- * ```typescript
- * import { createAuthMiddleware } from '@solvapay/next';
- * import type { AuthAdapter } from '@solvapay/auth';
- *
- * const myAdapter: AuthAdapter = {
- *   async getUserIdFromRequest(req) {
- *     // Your custom auth logic
- *     return userId;
- *   },
- * };
- *
- * export const middleware = createAuthMiddleware({
- *   adapter: myAdapter,
- * });
- * ```
- *
- * **File Location Notes:**
- * - **Next.js 15**: Place `middleware.ts` at project root
- * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
- * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
- *
- * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
- * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
- */
-declare function createAuthMiddleware(options: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-/**
- * Configuration options for Supabase authentication middleware
- */
-interface SupabaseAuthMiddlewareOptions {
-    /**
-     * Supabase JWT secret (from Supabase dashboard: Settings → API → JWT Secret)
-     * If not provided, will use SUPABASE_JWT_SECRET environment variable
-     */
-    jwtSecret?: string;
-    /**
-     * Public routes that don't require authentication
-     * Routes are matched using pathname.startsWith()
-     */
-    publicRoutes?: string[];
-    /**
-     * Header name to store the user ID (default: 'x-user-id')
-     */
-    userIdHeader?: string;
-}
-/**
- * Creates a Next.js middleware function for Supabase authentication
- *
- * Convenience function that creates a SupabaseAuthAdapter and wraps it with createAuthMiddleware.
- * Only use this if you're using Supabase - otherwise use createAuthMiddleware with your own adapter.
- *
- * Uses dynamic import to avoid requiring Supabase as a dependency in @solvapay/next.
- *
- * @param options - Configuration options
- * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
- *
- * @example Next.js 15
- * ```typescript
- * // middleware.ts (at project root)
- * import { createSupabaseAuthMiddleware } from '@solvapay/next';
- *
- * export const middleware = createSupabaseAuthMiddleware({
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Next.js 16 with src/ folder
- * ```typescript
- * // src/proxy.ts (in src/ folder, not project root)
- * import { createSupabaseAuthMiddleware } from '@solvapay/next';
- *
- * // Use 'proxy' export for Next.js 16 (no deprecation warning)
- * export const proxy = createSupabaseAuthMiddleware({
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * **File Location Notes:**
- * - **Next.js 15**: Place `middleware.ts` at project root
- * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
- * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
- *
- * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
- * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
- */
-declare function createSupabaseAuthMiddleware(options?: SupabaseAuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-
 /**
  * SolvaPay Next.js SDK
  *
@@ -531,4 +358,4 @@ interface CheckPurchaseOptions {
  */
 declare function checkPurchase(request: Request, options?: CheckPurchaseOptions): Promise<PurchaseCheckResult | NextResponse>;
 
-export { type AuthMiddlewareOptions, type CheckPurchaseOptions, type PurchaseCheckResult, type RequestDeduplicationOptions, type SupabaseAuthMiddlewareOptions, cancelRenewal, checkPurchase, clearAllPurchaseCache, clearPurchaseCache, createAuthMiddleware, createCheckoutSession, createCustomerSession, createPaymentIntent, createSupabaseAuthMiddleware, getAuthenticatedUser, getPurchaseCacheStats, listPlans, processPaymentIntent, syncCustomer };
+export { type CheckPurchaseOptions, type PurchaseCheckResult, type RequestDeduplicationOptions, cancelRenewal, checkPurchase, clearAllPurchaseCache, clearPurchaseCache, createCheckoutSession, createCustomerSession, createPaymentIntent, getAuthenticatedUser, getPurchaseCacheStats, listPlans, processPaymentIntent, syncCustomer };

package/dist/index.d.ts

@@ -1,7 +1,8 @@
-import { NextResponse, NextRequest } from 'next/server';
+import { NextResponse } from 'next/server';
 import * as _solvapay_server from '@solvapay/server';
 import { AuthenticatedUser, SolvaPay } from '@solvapay/server';
-import { AuthAdapter } from '@solvapay/auth';
+export { AuthMiddlewareOptions, SupabaseAuthMiddlewareOptions, createAuthMiddleware, createSupabaseAuthMiddleware } from './middleware.js';
+import '@solvapay/auth';
 
 /**
  * Purchase Cache Utilities
@@ -274,180 +275,6 @@ declare function listPlans(request: globalThis.Request): Promise<{
     productRef: string;
 } | NextResponse>;
 
-/**
- * Next.js Middleware Helpers
- *
- * Helpers for creating authentication middleware in Next.js.
- * Works with any AuthAdapter implementation (Supabase, custom, etc.)
- */
-
-/**
- * Configuration options for authentication middleware
- */
-interface AuthMiddlewareOptions {
-    /**
-     * Auth adapter instance to use for extracting user IDs from requests
-     * You can use SupabaseAuthAdapter, MockAuthAdapter, or create your own
-     */
-    adapter: AuthAdapter;
-    /**
-     * Public routes that don't require authentication
-     * Routes are matched using pathname.startsWith()
-     */
-    publicRoutes?: string[];
-    /**
-     * Header name to store the user ID (default: 'x-user-id')
-     */
-    userIdHeader?: string;
-}
-/**
- * Creates a Next.js middleware function for authentication
- *
- * This helper:
- * 1. Uses the provided AuthAdapter to extract userId from requests
- * 2. Handles public vs protected routes
- * 3. Adds userId to request headers for downstream routes
- * 4. Returns appropriate error responses for auth failures
- *
- * @param options - Configuration options
- * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
- *
- * @example Next.js 15
- * ```typescript
- * // middleware.ts (at project root)
- * import { createAuthMiddleware } from '@solvapay/next';
- * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
- *
- * const adapter = new SupabaseAuthAdapter({
- *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
- * });
- *
- * export const middleware = createAuthMiddleware({
- *   adapter,
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Next.js 16 with src/ folder
- * ```typescript
- * // src/proxy.ts (in src/ folder, not project root)
- * import { createAuthMiddleware } from '@solvapay/next';
- * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
- *
- * const adapter = new SupabaseAuthAdapter({
- *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
- * });
- *
- * // Use 'proxy' export for Next.js 16 (no deprecation warning)
- * export const proxy = createAuthMiddleware({
- *   adapter,
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Custom adapter
- * ```typescript
- * import { createAuthMiddleware } from '@solvapay/next';
- * import type { AuthAdapter } from '@solvapay/auth';
- *
- * const myAdapter: AuthAdapter = {
- *   async getUserIdFromRequest(req) {
- *     // Your custom auth logic
- *     return userId;
- *   },
- * };
- *
- * export const middleware = createAuthMiddleware({
- *   adapter: myAdapter,
- * });
- * ```
- *
- * **File Location Notes:**
- * - **Next.js 15**: Place `middleware.ts` at project root
- * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
- * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
- *
- * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
- * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
- */
-declare function createAuthMiddleware(options: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-/**
- * Configuration options for Supabase authentication middleware
- */
-interface SupabaseAuthMiddlewareOptions {
-    /**
-     * Supabase JWT secret (from Supabase dashboard: Settings → API → JWT Secret)
-     * If not provided, will use SUPABASE_JWT_SECRET environment variable
-     */
-    jwtSecret?: string;
-    /**
-     * Public routes that don't require authentication
-     * Routes are matched using pathname.startsWith()
-     */
-    publicRoutes?: string[];
-    /**
-     * Header name to store the user ID (default: 'x-user-id')
-     */
-    userIdHeader?: string;
-}
-/**
- * Creates a Next.js middleware function for Supabase authentication
- *
- * Convenience function that creates a SupabaseAuthAdapter and wraps it with createAuthMiddleware.
- * Only use this if you're using Supabase - otherwise use createAuthMiddleware with your own adapter.
- *
- * Uses dynamic import to avoid requiring Supabase as a dependency in @solvapay/next.
- *
- * @param options - Configuration options
- * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
- *
- * @example Next.js 15
- * ```typescript
- * // middleware.ts (at project root)
- * import { createSupabaseAuthMiddleware } from '@solvapay/next';
- *
- * export const middleware = createSupabaseAuthMiddleware({
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * @example Next.js 16 with src/ folder
- * ```typescript
- * // src/proxy.ts (in src/ folder, not project root)
- * import { createSupabaseAuthMiddleware } from '@solvapay/next';
- *
- * // Use 'proxy' export for Next.js 16 (no deprecation warning)
- * export const proxy = createSupabaseAuthMiddleware({
- *   publicRoutes: ['/api/list-plans'],
- * });
- *
- * export const config = {
- *   matcher: ['/api/:path*'],
- * };
- * ```
- *
- * **File Location Notes:**
- * - **Next.js 15**: Place `middleware.ts` at project root
- * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
- * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
- *
- * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
- * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
- */
-declare function createSupabaseAuthMiddleware(options?: SupabaseAuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-
 /**
  * SolvaPay Next.js SDK
  *
@@ -531,4 +358,4 @@ interface CheckPurchaseOptions {
  */
 declare function checkPurchase(request: Request, options?: CheckPurchaseOptions): Promise<PurchaseCheckResult | NextResponse>;
 
-export { type AuthMiddlewareOptions, type CheckPurchaseOptions, type PurchaseCheckResult, type RequestDeduplicationOptions, type SupabaseAuthMiddlewareOptions, cancelRenewal, checkPurchase, clearAllPurchaseCache, clearPurchaseCache, createAuthMiddleware, createCheckoutSession, createCustomerSession, createPaymentIntent, createSupabaseAuthMiddleware, getAuthenticatedUser, getPurchaseCacheStats, listPlans, processPaymentIntent, syncCustomer };
+export { type CheckPurchaseOptions, type PurchaseCheckResult, type RequestDeduplicationOptions, cancelRenewal, checkPurchase, clearAllPurchaseCache, clearPurchaseCache, createCheckoutSession, createCustomerSession, createPaymentIntent, getAuthenticatedUser, getPurchaseCacheStats, listPlans, processPaymentIntent, syncCustomer };

package/dist/index.js

@@ -1,5 +1,10 @@
+import {
+  createAuthMiddleware,
+  createSupabaseAuthMiddleware
+} from "./chunk-F7TBIH6W.js";
+
 // src/index.ts
-import { NextResponse as NextResponse8 } from "next/server";
+import { NextResponse as NextResponse7 } from "next/server";
 import { createSolvaPay } from "@solvapay/server";
 import { SolvaPayError } from "@solvapay/core";
 
@@ -271,76 +276,6 @@ async function listPlans(request) {
   return result;
 }
 
-// src/helpers/middleware.ts
-import { NextResponse as NextResponse7 } from "next/server";
-function createAuthMiddleware(options) {
-  const { adapter, publicRoutes = [], userIdHeader = "x-user-id" } = options;
-  return async function middleware(request) {
-    const req = request;
-    const { pathname } = req.nextUrl;
-    if (!pathname.startsWith("/api")) {
-      return NextResponse7.next();
-    }
-    const isPublicRoute = publicRoutes.some((route) => pathname.startsWith(route));
-    const userId = await adapter.getUserIdFromRequest(req);
-    if (isPublicRoute) {
-      const requestHeaders2 = new Headers(req.headers);
-      if (userId) {
-        requestHeaders2.set(userIdHeader, userId);
-      }
-      return NextResponse7.next({
-        request: {
-          headers: requestHeaders2
-        }
-      });
-    }
-    if (!userId) {
-      return NextResponse7.json(
-        { error: "Unauthorized", details: "Valid authentication required" },
-        { status: 401 }
-      );
-    }
-    const requestHeaders = new Headers(req.headers);
-    requestHeaders.set(userIdHeader, userId);
-    return NextResponse7.next({
-      request: {
-        headers: requestHeaders
-      }
-    });
-  };
-}
-function createSupabaseAuthMiddleware(options = {}) {
-  const { jwtSecret, publicRoutes = [], userIdHeader = "x-user-id" } = options;
-  let authAdapter = null;
-  let adapterPromise = null;
-  const lazyAdapter = {
-    async getUserIdFromRequest(req) {
-      if (!authAdapter) {
-        if (!adapterPromise) {
-          adapterPromise = (async () => {
-            const secret = jwtSecret || process.env.SUPABASE_JWT_SECRET;
-            if (!secret) {
-              throw new Error(
-                "SUPABASE_JWT_SECRET environment variable is required. Please set it in your .env.local file. Get it from: Supabase Dashboard \u2192 Settings \u2192 API \u2192 JWT Secret"
-              );
-            }
-            const { SupabaseAuthAdapter } = await import("@solvapay/auth/supabase");
-            authAdapter = new SupabaseAuthAdapter({ jwtSecret: secret });
-            return authAdapter;
-          })();
-        }
-        authAdapter = await adapterPromise;
-      }
-      return authAdapter.getUserIdFromRequest(req);
-    }
-  };
-  return createAuthMiddleware({
-    adapter: lazyAdapter,
-    publicRoutes,
-    userIdHeader
-  });
-}
-
 // src/index.ts
 async function checkPurchase(request, options = {}) {
   try {
@@ -349,7 +284,7 @@ async function checkPurchase(request, options = {}) {
     if (userIdOrError instanceof Response) {
       const clonedResponse = userIdOrError.clone();
       const body = await clonedResponse.json().catch(() => ({ error: "Unauthorized" }));
-      return NextResponse8.json(body, { status: userIdOrError.status });
+      return NextResponse7.json(body, { status: userIdOrError.status });
     }
     const userId = userIdOrError;
     const email = options.includeEmail !== false ? await getUserEmailFromRequest(request) : null;
@@ -405,10 +340,10 @@ async function checkPurchase(request, options = {}) {
   } catch (error) {
     console.error("Check purchase failed:", error);
     if (error instanceof SolvaPayError) {
-      return NextResponse8.json({ error: error.message }, { status: 500 });
+      return NextResponse7.json({ error: error.message }, { status: 500 });
     }
     const errorMessage = error instanceof Error ? error.message : "Unknown error";
-    return NextResponse8.json(
+    return NextResponse7.json(
       { error: "Failed to check purchase", details: errorMessage },
       { status: 500 }
     );

package/dist/middleware.cjs

@@ -0,0 +1,111 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/middleware.ts
+var middleware_exports = {};
+__export(middleware_exports, {
+  createAuthMiddleware: () => createAuthMiddleware,
+  createSupabaseAuthMiddleware: () => createSupabaseAuthMiddleware
+});
+module.exports = __toCommonJS(middleware_exports);
+
+// src/helpers/middleware.ts
+var import_server = require("next/server");
+function createAuthMiddleware(options) {
+  const { adapter, publicRoutes = [], userIdHeader = "x-user-id" } = options;
+  return async function middleware(request) {
+    const req = request;
+    const { pathname } = req.nextUrl;
+    if (!pathname.startsWith("/api")) {
+      return import_server.NextResponse.next();
+    }
+    const isPublicRoute = publicRoutes.some((route) => pathname.startsWith(route));
+    const userId = await adapter.getUserIdFromRequest(req);
+    if (isPublicRoute) {
+      const requestHeaders2 = new Headers(req.headers);
+      if (userId) {
+        requestHeaders2.set(userIdHeader, userId);
+      }
+      return import_server.NextResponse.next({
+        request: {
+          headers: requestHeaders2
+        }
+      });
+    }
+    if (!userId) {
+      return import_server.NextResponse.json(
+        { error: "Unauthorized", details: "Valid authentication required" },
+        { status: 401 }
+      );
+    }
+    const requestHeaders = new Headers(req.headers);
+    requestHeaders.set(userIdHeader, userId);
+    return import_server.NextResponse.next({
+      request: {
+        headers: requestHeaders
+      }
+    });
+  };
+}
+function createSupabaseAuthMiddleware(options = {}) {
+  const { jwtSecret, publicRoutes = [], userIdHeader = "x-user-id" } = options;
+  let authAdapter = null;
+  let adapterPromise = null;
+  const lazyAdapter = {
+    async getUserIdFromRequest(req) {
+      if (!authAdapter) {
+        if (!adapterPromise) {
+          adapterPromise = (async () => {
+            const secret = jwtSecret || process.env.SUPABASE_JWT_SECRET;
+            if (!secret) {
+              throw new Error(
+                "SUPABASE_JWT_SECRET environment variable is required. Please set it in your .env.local file. Get it from: Supabase Dashboard \u2192 Settings \u2192 API \u2192 JWT Secret"
+              );
+            }
+            const { SupabaseAuthAdapter } = await import("@solvapay/auth/supabase");
+            authAdapter = new SupabaseAuthAdapter({ jwtSecret: secret });
+            return authAdapter;
+          })();
+        }
+        authAdapter = await adapterPromise;
+      }
+      return authAdapter.getUserIdFromRequest(req);
+    }
+  };
+  return createAuthMiddleware({
+    adapter: lazyAdapter,
+    publicRoutes,
+    userIdHeader
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createAuthMiddleware,
+  createSupabaseAuthMiddleware
+});

package/dist/middleware.d.cts

@@ -0,0 +1,178 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { AuthAdapter } from '@solvapay/auth';
+
+/**
+ * Next.js Middleware Helpers
+ *
+ * Helpers for creating authentication middleware in Next.js.
+ * Works with any AuthAdapter implementation (Supabase, custom, etc.)
+ */
+
+/**
+ * Configuration options for authentication middleware
+ */
+interface AuthMiddlewareOptions {
+    /**
+     * Auth adapter instance to use for extracting user IDs from requests
+     * You can use SupabaseAuthAdapter, MockAuthAdapter, or create your own
+     */
+    adapter: AuthAdapter;
+    /**
+     * Public routes that don't require authentication
+     * Routes are matched using pathname.startsWith()
+     */
+    publicRoutes?: string[];
+    /**
+     * Header name to store the user ID (default: 'x-user-id')
+     */
+    userIdHeader?: string;
+}
+/**
+ * Creates a Next.js middleware function for authentication
+ *
+ * This helper:
+ * 1. Uses the provided AuthAdapter to extract userId from requests
+ * 2. Handles public vs protected routes
+ * 3. Adds userId to request headers for downstream routes
+ * 4. Returns appropriate error responses for auth failures
+ *
+ * @param options - Configuration options
+ * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
+ *
+ * @example Next.js 15
+ * ```typescript
+ * // middleware.ts (at project root)
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
+ *
+ * const adapter = new SupabaseAuthAdapter({
+ *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
+ * });
+ *
+ * export const middleware = createAuthMiddleware({
+ *   adapter,
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Next.js 16 with src/ folder
+ * ```typescript
+ * // src/proxy.ts (in src/ folder, not project root)
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
+ *
+ * const adapter = new SupabaseAuthAdapter({
+ *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
+ * });
+ *
+ * // Use 'proxy' export for Next.js 16 (no deprecation warning)
+ * export const proxy = createAuthMiddleware({
+ *   adapter,
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Custom adapter
+ * ```typescript
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import type { AuthAdapter } from '@solvapay/auth';
+ *
+ * const myAdapter: AuthAdapter = {
+ *   async getUserIdFromRequest(req) {
+ *     // Your custom auth logic
+ *     return userId;
+ *   },
+ * };
+ *
+ * export const middleware = createAuthMiddleware({
+ *   adapter: myAdapter,
+ * });
+ * ```
+ *
+ * **File Location Notes:**
+ * - **Next.js 15**: Place `middleware.ts` at project root
+ * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
+ * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
+ *
+ * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
+ * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
+ */
+declare function createAuthMiddleware(options: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+/**
+ * Configuration options for Supabase authentication middleware
+ */
+interface SupabaseAuthMiddlewareOptions {
+    /**
+     * Supabase JWT secret (from Supabase dashboard: Settings → API → JWT Secret)
+     * If not provided, will use SUPABASE_JWT_SECRET environment variable
+     */
+    jwtSecret?: string;
+    /**
+     * Public routes that don't require authentication
+     * Routes are matched using pathname.startsWith()
+     */
+    publicRoutes?: string[];
+    /**
+     * Header name to store the user ID (default: 'x-user-id')
+     */
+    userIdHeader?: string;
+}
+/**
+ * Creates a Next.js middleware function for Supabase authentication
+ *
+ * Convenience function that creates a SupabaseAuthAdapter and wraps it with createAuthMiddleware.
+ * Only use this if you're using Supabase - otherwise use createAuthMiddleware with your own adapter.
+ *
+ * Uses dynamic import to avoid requiring Supabase as a dependency in @solvapay/next.
+ *
+ * @param options - Configuration options
+ * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
+ *
+ * @example Next.js 15
+ * ```typescript
+ * // middleware.ts (at project root)
+ * import { createSupabaseAuthMiddleware } from '@solvapay/next';
+ *
+ * export const middleware = createSupabaseAuthMiddleware({
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Next.js 16 with src/ folder
+ * ```typescript
+ * // src/proxy.ts (in src/ folder, not project root)
+ * import { createSupabaseAuthMiddleware } from '@solvapay/next';
+ *
+ * // Use 'proxy' export for Next.js 16 (no deprecation warning)
+ * export const proxy = createSupabaseAuthMiddleware({
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * **File Location Notes:**
+ * - **Next.js 15**: Place `middleware.ts` at project root
+ * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
+ * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
+ *
+ * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
+ * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
+ */
+declare function createSupabaseAuthMiddleware(options?: SupabaseAuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+
+export { type AuthMiddlewareOptions, type SupabaseAuthMiddlewareOptions, createAuthMiddleware, createSupabaseAuthMiddleware };

package/dist/middleware.d.ts

@@ -0,0 +1,178 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { AuthAdapter } from '@solvapay/auth';
+
+/**
+ * Next.js Middleware Helpers
+ *
+ * Helpers for creating authentication middleware in Next.js.
+ * Works with any AuthAdapter implementation (Supabase, custom, etc.)
+ */
+
+/**
+ * Configuration options for authentication middleware
+ */
+interface AuthMiddlewareOptions {
+    /**
+     * Auth adapter instance to use for extracting user IDs from requests
+     * You can use SupabaseAuthAdapter, MockAuthAdapter, or create your own
+     */
+    adapter: AuthAdapter;
+    /**
+     * Public routes that don't require authentication
+     * Routes are matched using pathname.startsWith()
+     */
+    publicRoutes?: string[];
+    /**
+     * Header name to store the user ID (default: 'x-user-id')
+     */
+    userIdHeader?: string;
+}
+/**
+ * Creates a Next.js middleware function for authentication
+ *
+ * This helper:
+ * 1. Uses the provided AuthAdapter to extract userId from requests
+ * 2. Handles public vs protected routes
+ * 3. Adds userId to request headers for downstream routes
+ * 4. Returns appropriate error responses for auth failures
+ *
+ * @param options - Configuration options
+ * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
+ *
+ * @example Next.js 15
+ * ```typescript
+ * // middleware.ts (at project root)
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
+ *
+ * const adapter = new SupabaseAuthAdapter({
+ *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
+ * });
+ *
+ * export const middleware = createAuthMiddleware({
+ *   adapter,
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Next.js 16 with src/ folder
+ * ```typescript
+ * // src/proxy.ts (in src/ folder, not project root)
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import { SupabaseAuthAdapter } from '@solvapay/auth/supabase';
+ *
+ * const adapter = new SupabaseAuthAdapter({
+ *   jwtSecret: process.env.SUPABASE_JWT_SECRET!,
+ * });
+ *
+ * // Use 'proxy' export for Next.js 16 (no deprecation warning)
+ * export const proxy = createAuthMiddleware({
+ *   adapter,
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Custom adapter
+ * ```typescript
+ * import { createAuthMiddleware } from '@solvapay/next';
+ * import type { AuthAdapter } from '@solvapay/auth';
+ *
+ * const myAdapter: AuthAdapter = {
+ *   async getUserIdFromRequest(req) {
+ *     // Your custom auth logic
+ *     return userId;
+ *   },
+ * };
+ *
+ * export const middleware = createAuthMiddleware({
+ *   adapter: myAdapter,
+ * });
+ * ```
+ *
+ * **File Location Notes:**
+ * - **Next.js 15**: Place `middleware.ts` at project root
+ * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
+ * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
+ *
+ * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
+ * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
+ */
+declare function createAuthMiddleware(options: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+/**
+ * Configuration options for Supabase authentication middleware
+ */
+interface SupabaseAuthMiddlewareOptions {
+    /**
+     * Supabase JWT secret (from Supabase dashboard: Settings → API → JWT Secret)
+     * If not provided, will use SUPABASE_JWT_SECRET environment variable
+     */
+    jwtSecret?: string;
+    /**
+     * Public routes that don't require authentication
+     * Routes are matched using pathname.startsWith()
+     */
+    publicRoutes?: string[];
+    /**
+     * Header name to store the user ID (default: 'x-user-id')
+     */
+    userIdHeader?: string;
+}
+/**
+ * Creates a Next.js middleware function for Supabase authentication
+ *
+ * Convenience function that creates a SupabaseAuthAdapter and wraps it with createAuthMiddleware.
+ * Only use this if you're using Supabase - otherwise use createAuthMiddleware with your own adapter.
+ *
+ * Uses dynamic import to avoid requiring Supabase as a dependency in @solvapay/next.
+ *
+ * @param options - Configuration options
+ * @returns Next.js middleware function (can be exported as `middleware` or `proxy`)
+ *
+ * @example Next.js 15
+ * ```typescript
+ * // middleware.ts (at project root)
+ * import { createSupabaseAuthMiddleware } from '@solvapay/next';
+ *
+ * export const middleware = createSupabaseAuthMiddleware({
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * @example Next.js 16 with src/ folder
+ * ```typescript
+ * // src/proxy.ts (in src/ folder, not project root)
+ * import { createSupabaseAuthMiddleware } from '@solvapay/next';
+ *
+ * // Use 'proxy' export for Next.js 16 (no deprecation warning)
+ * export const proxy = createSupabaseAuthMiddleware({
+ *   publicRoutes: ['/api/list-plans'],
+ * });
+ *
+ * export const config = {
+ *   matcher: ['/api/:path*'],
+ * };
+ * ```
+ *
+ * **File Location Notes:**
+ * - **Next.js 15**: Place `middleware.ts` at project root
+ * - **Next.js 16 without `src/` folder**: Place `middleware.ts` or `proxy.ts` at project root
+ * - **Next.js 16 with `src/` folder**: Place `src/proxy.ts` or `src/middleware.ts` (in `src/` folder, not root)
+ *
+ * **Note:** Next.js 16 renamed "middleware" to "proxy". You can export the return value as either
+ * `middleware` or `proxy` - both work, but `proxy` is recommended to avoid deprecation warnings.
+ */
+declare function createSupabaseAuthMiddleware(options?: SupabaseAuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+
+export { type AuthMiddlewareOptions, type SupabaseAuthMiddlewareOptions, createAuthMiddleware, createSupabaseAuthMiddleware };

package/dist/middleware.js

@@ -0,0 +1,8 @@
+import {
+  createAuthMiddleware,
+  createSupabaseAuthMiddleware
+} from "./chunk-F7TBIH6W.js";
+export {
+  createAuthMiddleware,
+  createSupabaseAuthMiddleware
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solvapay/next",
-  "version": "1.0.1-preview.1",
+  "version": "1.0.1-preview.2",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -10,6 +10,11 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "require": "./dist/index.cjs"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "import": "./dist/middleware.js",
+      "require": "./dist/middleware.cjs"
     }
   },
   "files": [
@@ -29,9 +34,9 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@solvapay/server": "1.0.1-preview.1",
-    "@solvapay/auth": "1.0.1-preview.1",
-    "@solvapay/core": "1.0.1-preview.1"
+    "@solvapay/auth": "1.0.1-preview.2",
+    "@solvapay/core": "1.0.1-preview.2",
+    "@solvapay/server": "1.0.1-preview.2"
   },
   "peerDependencies": {
     "next": ">=13.0.0"
@@ -44,7 +49,7 @@
     "@solvapay/test-utils": "0.0.0"
   },
   "scripts": {
-    "build": "tsup src/index.ts --format esm,cjs --dts --tsconfig tsconfig.build.json --external next",
+    "build": "tsup src/index.ts src/middleware.ts --format esm,cjs --dts --tsconfig tsconfig.build.json --external next",
     "test": "vitest run || exit 0",
     "test:watch": "vitest",
     "lint": "eslint src",