@solvapay/react 1.2.1 → 1.3.0-preview-cb8ad16e16ce8f8f357bd7f2e7068d85159df587

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @solvapay/react changelog
 
+## 1.3.0-preview-cb8ad16e16ce8f8f357bd7f2e7068d85159df587
+
+### Minor Changes
+
+- 2de7fd8: Add Auth0 identity adapters across `@solvapay/auth`, `@solvapay/react`, and `@solvapay/next` (`createAuth0AuthMiddleware`), plus a `next-auth0` scaffolder template. The Next.js middleware now strips client-supplied identity headers (`x-user-id`, `authorization`) before forwarding a verified session identity downstream.
+
+### Patch Changes
+
+- c2a1169: Loosen internal `@solvapay/*` peerDependency ranges from `workspace:*` (exact) to `workspace:^` so a patch/minor bump of a peer no longer forces a major bump on its dependents. Affects `@solvapay/react` → `@solvapay/mcp-core`, `@solvapay/server` → `@solvapay/auth`, and `@solvapay/mcp` → `@solvapay/mcp-core`. This is a widening of the published peer range and is non-breaking for consumers.
+- 2de7fd8: Surface server `{ error }` messages from failed plans and checkout fetches instead of generic HTTP status text.
+
 ## 1.2.1
 
 ### Patch Changes

package/dist/adapters/auth0.cjs

@@ -0,0 +1,60 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/adapters/auth0.ts
+var auth0_exports = {};
+__export(auth0_exports, {
+  createAuth0ClientAuthAdapter: () => createAuth0ClientAuthAdapter
+});
+module.exports = __toCommonJS(auth0_exports);
+
+// src/adapters/session-auth.ts
+var DEFAULT_SENTINEL = "session-authenticated";
+async function resolveValue(value) {
+  return value;
+}
+function createSessionAuthAdapter(options) {
+  const sentinel = options.sentinelToken ?? DEFAULT_SENTINEL;
+  return {
+    async getToken() {
+      if (options.getToken) {
+        return resolveValue(options.getToken());
+      }
+      const userId = await resolveValue(options.getUserId());
+      return userId ? sentinel : null;
+    },
+    async getUserId() {
+      return resolveValue(options.getUserId());
+    },
+    subscribe: options.subscribe
+  };
+}
+
+// src/adapters/auth0.ts
+function createAuth0ClientAuthAdapter(options) {
+  return createSessionAuthAdapter({
+    getUserId: () => options.userId ?? null,
+    sentinelToken: "auth0-session",
+    subscribe: options.subscribe
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createAuth0ClientAuthAdapter
+});

package/dist/adapters/auth0.d.cts

@@ -0,0 +1,16 @@
+import { AuthAdapter } from './auth.cjs';
+import { createSessionAuthAdapter } from './session-auth.cjs';
+
+interface Auth0ClientAuthAdapterOptions {
+    userId: string | null | undefined;
+    subscribe?: ReturnType<typeof createSessionAuthAdapter>['subscribe'];
+}
+/**
+ * Client adapter for `@auth0/nextjs-auth0` httpOnly session cookies.
+ *
+ * Pair with `createAuth0AuthAdapter` server middleware — the real credential
+ * is the session cookie; this adapter only reports sign-in state to the SDK.
+ */
+declare function createAuth0ClientAuthAdapter(options: Auth0ClientAuthAdapterOptions): AuthAdapter;
+
+export { type Auth0ClientAuthAdapterOptions, createAuth0ClientAuthAdapter };

package/dist/adapters/auth0.d.ts

@@ -0,0 +1,16 @@
+import { AuthAdapter } from './auth.js';
+import { createSessionAuthAdapter } from './session-auth.js';
+
+interface Auth0ClientAuthAdapterOptions {
+    userId: string | null | undefined;
+    subscribe?: ReturnType<typeof createSessionAuthAdapter>['subscribe'];
+}
+/**
+ * Client adapter for `@auth0/nextjs-auth0` httpOnly session cookies.
+ *
+ * Pair with `createAuth0AuthAdapter` server middleware — the real credential
+ * is the session cookie; this adapter only reports sign-in state to the SDK.
+ */
+declare function createAuth0ClientAuthAdapter(options: Auth0ClientAuthAdapterOptions): AuthAdapter;
+
+export { type Auth0ClientAuthAdapterOptions, createAuth0ClientAuthAdapter };

package/dist/adapters/auth0.js

@@ -0,0 +1,15 @@
+import {
+  createSessionAuthAdapter
+} from "../chunk-JTW665JR.js";
+
+// src/adapters/auth0.ts
+function createAuth0ClientAuthAdapter(options) {
+  return createSessionAuthAdapter({
+    getUserId: () => options.userId ?? null,
+    sentinelToken: "auth0-session",
+    subscribe: options.subscribe
+  });
+}
+export {
+  createAuth0ClientAuthAdapter
+};

package/dist/adapters/session-auth.cjs

@@ -0,0 +1,49 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/adapters/session-auth.ts
+var session_auth_exports = {};
+__export(session_auth_exports, {
+  createSessionAuthAdapter: () => createSessionAuthAdapter
+});
+module.exports = __toCommonJS(session_auth_exports);
+var DEFAULT_SENTINEL = "session-authenticated";
+async function resolveValue(value) {
+  return value;
+}
+function createSessionAuthAdapter(options) {
+  const sentinel = options.sentinelToken ?? DEFAULT_SENTINEL;
+  return {
+    async getToken() {
+      if (options.getToken) {
+        return resolveValue(options.getToken());
+      }
+      const userId = await resolveValue(options.getUserId());
+      return userId ? sentinel : null;
+    },
+    async getUserId() {
+      return resolveValue(options.getUserId());
+    },
+    subscribe: options.subscribe
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createSessionAuthAdapter
+});

package/dist/adapters/session-auth.d.cts

@@ -0,0 +1,20 @@
+import { AuthAdapter } from './auth.cjs';
+
+interface SessionAuthAdapterOptions {
+    /** Returns the stable user id (e.g. Auth0 `sub`). */
+    getUserId: () => Promise<string | null> | string | null;
+    /**
+     * Optional token for SDK session-alive checks. When omitted, a non-null sentinel
+     * is returned whenever `getUserId` resolves to a value.
+     */
+    getToken?: () => Promise<string | null> | string | null;
+    sentinelToken?: string;
+    subscribe?: AuthAdapter['subscribe'];
+}
+/**
+ * Client adapter for httpOnly-cookie session auth where the browser cannot read
+ * the real credential. Reports authenticated state via a sentinel token.
+ */
+declare function createSessionAuthAdapter(options: SessionAuthAdapterOptions): AuthAdapter;
+
+export { type SessionAuthAdapterOptions, createSessionAuthAdapter };

package/dist/adapters/session-auth.d.ts

@@ -0,0 +1,20 @@
+import { AuthAdapter } from './auth.js';
+
+interface SessionAuthAdapterOptions {
+    /** Returns the stable user id (e.g. Auth0 `sub`). */
+    getUserId: () => Promise<string | null> | string | null;
+    /**
+     * Optional token for SDK session-alive checks. When omitted, a non-null sentinel
+     * is returned whenever `getUserId` resolves to a value.
+     */
+    getToken?: () => Promise<string | null> | string | null;
+    sentinelToken?: string;
+    subscribe?: AuthAdapter['subscribe'];
+}
+/**
+ * Client adapter for httpOnly-cookie session auth where the browser cannot read
+ * the real credential. Reports authenticated state via a sentinel token.
+ */
+declare function createSessionAuthAdapter(options: SessionAuthAdapterOptions): AuthAdapter;
+
+export { type SessionAuthAdapterOptions, createSessionAuthAdapter };

package/dist/adapters/session-auth.js

@@ -0,0 +1,6 @@
+import {
+  createSessionAuthAdapter
+} from "../chunk-JTW665JR.js";
+export {
+  createSessionAuthAdapter
+};

package/dist/{chunk-XRNCDI2T.js → chunk-3UR4QQ5P.js}

@@ -14,7 +14,7 @@ import {
   usePurchaseStatus,
   useSolvaPay,
   useTransport
-} from "./chunk-Y2UAJG67.js";
+} from "./chunk-ORMHGGOU.js";
 
 // src/components/CancelledPlanNotice.tsx
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/chunk-JTW665JR.js

@@ -0,0 +1,25 @@
+// src/adapters/session-auth.ts
+var DEFAULT_SENTINEL = "session-authenticated";
+async function resolveValue(value) {
+  return value;
+}
+function createSessionAuthAdapter(options) {
+  const sentinel = options.sentinelToken ?? DEFAULT_SENTINEL;
+  return {
+    async getToken() {
+      if (options.getToken) {
+        return resolveValue(options.getToken());
+      }
+      const userId = await resolveValue(options.getUserId());
+      return userId ? sentinel : null;
+    },
+    async getUserId() {
+      return resolveValue(options.getUserId());
+    },
+    subscribe: options.subscribe
+  };
+}
+
+export {
+  createSessionAuthAdapter
+};