@strivacity/sdk-next 4.0.0-beta.1 → 4.0.0-beta.2

package/dist/server/sdk.mjs

@@ -1,2 +1,2 @@
-import{createEncryptedCookieStorage as e}from"./storages.mjs";import{apiAppRouteHandlerFactory as t,apiPageRouteHandlerFactory as n}from"./handlers/api.mjs";import{appRouteHandlerFactory as r,pageRouteHandlerFactory as i}from"./handlers/route.mjs";import{ConfigurationError as a}from"@strivacity/sdk-core/utils/errors";import{NextResponse as o}from"next/server";import{createBaseServerSDK as s}from"@strivacity/sdk-core/server";function c(c){if(!c.storage){if(!c.secret)throw new a(`Secret is required for encrypted cookie storage`);c.cookieMaxAge??=2592e3,c.storage=e(c.secret,{defaultCookieOptions:{maxAge:c.cookieMaxAge}})}let l=s({toRequest:e=>e,redirect:(e,t)=>o.redirect(e,t)},c);function u(e){return(r,i)=>r instanceof Request?t(l)(e)(r,i??{}):n(l)(e)(r,i)}function d(e,t){return typeof e==`function`?r(l)(e,t):i(l)(e)}return{get options(){return l.options},withAuthGuard:d,withApiAuthRequired:u,getSession:e=>l.getSession(e),updateSession:(e,t)=>l.updateSession(e,t),refreshSession:e=>l.refreshSession(e),revokeSession:e=>l.revokeSession(e),getEntrySession:e=>l.getEntrySession(e),completeLogin:(e,t)=>l.completeLogin(e,t),logout:(e,t)=>l.logout(e,t),handleLogin:e=>l.handleLogin(e),handleRegister:e=>l.handleRegister(e),handleCallback:e=>l.handleCallback(e),handleRefresh:e=>l.handleRefresh(e),handleRevoke:e=>l.handleRevoke(e),handleEntry:e=>l.handleEntry(e),handleLogout:e=>l.handleLogout(e),handleBackChannelLogout:e=>l.handleBackChannelLogout(e),handler:async e=>await l.handler(e)??new o(`Not Found`,{status:404})}}export{c as createServerSDK};
+import{createEncryptedCookieStorage as e}from"./storages.mjs";import{apiAppRouteHandlerFactory as t,apiPageRouteHandlerFactory as n}from"./handlers/api.mjs";import{appRouteHandlerFactory as r,pageRouteHandlerFactory as i}from"./handlers/route.mjs";import{ConfigurationError as a}from"@strivacity/sdk-core/utils/errors";import{NextResponse as o}from"next/server";import{createBaseServerSDK as s}from"@strivacity/sdk-core/server";function c(c){if(!c.storage){if(!c.secret)throw new a(`Secret is required for encrypted cookie storage`);c.cookieMaxAge??=2592e3,c.storage=e(c.secret,{defaultCookieOptions:{maxAge:c.cookieMaxAge}})}let l=s({toRequest:e=>e,redirect:(e,t)=>o.redirect(e,t)},c);function u(e){return(r,i)=>r instanceof Request?t(l)(e)(r,i??{}):n(l)(e)(r,i)}function d(e,t){return typeof e==`function`?r(l)(e,t):i(l)(e)}return{get options(){return l.options},withAuthGuard:d,withApiAuthRequired:u,getSession:(e,t)=>l.getSession(e,e instanceof Request?t:{autoRefresh:!1}),updateSession:(e,t)=>l.updateSession(e,t),refreshSession:e=>l.refreshSession(e),revokeSession:e=>l.revokeSession(e),getEntrySession:e=>l.getEntrySession(e),completeLogin:(e,t)=>l.completeLogin(e,t),logout:(e,t)=>l.logout(e,t),handleLogin:e=>l.handleLogin(e),handleRegister:e=>l.handleRegister(e),handleCallback:e=>l.handleCallback(e),handleRefresh:e=>l.handleRefresh(e),handleRevoke:e=>l.handleRevoke(e),handleEntry:e=>l.handleEntry(e),handleLogout:e=>l.handleLogout(e),handleBackChannelLogout:e=>l.handleBackChannelLogout(e),handler:async e=>await l.handler(e)??new o(`Not Found`,{status:404})}}export{c as createServerSDK};
 //# sourceMappingURL=sdk.mjs.map

package/dist/server/sdk.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.mjs","names":[],"sources":["../../src/server/sdk.ts"],"sourcesContent":["import type { NextApiHandler, NextApiRequest, NextApiResponse } from 'next';\nimport type { ParsedUrlQuery } from 'node:querystring';\nimport type {\n\tNextServerSDK,\n\tNextServerSDKInitConfig,\n\tWithAuthGuardAppRouterOptions,\n\tWithAuthGuardPageRouterOptions,\n\tAppRouterPageRoute,\n\tAppRouterPageRouteOpts,\n\tPageRoute,\n\tAppRouteHandlerFn,\n\tAppRouteHandlerFnContext,\n\tPagesRouterRequest,\n} from './types';\nimport { NextResponse, type NextRequest } from 'next/server';\nimport { createBaseServerSDK } from '@strivacity/sdk-core/server';\nimport { ConfigurationError } from '@strivacity/sdk-core/utils/errors';\nimport { createEncryptedCookieStorage } from './storages';\nimport { apiAppRouteHandlerFactory, apiPageRouteHandlerFactory } from './handlers/api';\nimport { appRouteHandlerFactory, pageRouteHandlerFactory } from './handlers/route';\n\n/**\n * Creates a Next.js server SDK instance with the provided configuration.\n *\n * @param {NextServerSDKInitConfig} initConfig - The initialization configuration for the SDK.\n * @returns {NextServerSDK} The initialized Next.js server SDK instance.\n */\nexport function createServerSDK(initConfig: NextServerSDKInitConfig): NextServerSDK {\n\tif (!initConfig.storage) {\n\t\tif (!initConfig.secret) {\n\t\t\tthrow new ConfigurationError('Secret is required for encrypted cookie storage');\n\t\t}\n\n\t\tinitConfig.cookieMaxAge ??= 30 * 24 * 60 * 60;\n\t\tinitConfig.storage = createEncryptedCookieStorage(initConfig.secret, { defaultCookieOptions: { maxAge: initConfig.cookieMaxAge } });\n\t}\n\n\tconst base = createBaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t},\n\t\tinitConfig,\n\t);\n\n\tfunction withApiAuthRequired(apiRoute: AppRouteHandlerFn): AppRouteHandlerFn;\n\tfunction withApiAuthRequired(apiRoute: NextApiHandler): NextApiHandler;\n\tfunction withApiAuthRequired(apiRoute: AppRouteHandlerFn | NextApiHandler): AppRouteHandlerFn | NextApiHandler {\n\t\treturn (req: NextRequest | Request | NextApiRequest, resOrCtx?: AppRouteHandlerFnContext | NextApiResponse) => {\n\t\t\tif (req instanceof Request) {\n\t\t\t\tconst appRouteHandler = apiAppRouteHandlerFactory(base);\n\t\t\t\tconst wrappedAppRoute = appRouteHandler(apiRoute as AppRouteHandlerFn);\n\t\t\t\treturn wrappedAppRoute(req, (resOrCtx ?? {}) as AppRouteHandlerFnContext);\n\t\t\t}\n\n\t\t\tconst pageRouteHandler = apiPageRouteHandlerFactory(base);\n\t\t\tconst wrappedPageRoute = pageRouteHandler(apiRoute as NextApiHandler);\n\t\t\treturn wrappedPageRoute(req, resOrCtx as NextApiResponse);\n\t\t};\n\t}\n\n\tfunction withAuthGuard(): PageRoute<Record<string, unknown>, ParsedUrlQuery>;\n\tfunction withAuthGuard<P extends Record<string, unknown> = Record<string, unknown>, Q extends ParsedUrlQuery = ParsedUrlQuery>(\n\t\topts: WithAuthGuardPageRouterOptions<P, Q>,\n\t): PageRoute<P, Q>;\n\tfunction withAuthGuard<P extends AppRouterPageRouteOpts = AppRouterPageRouteOpts>(\n\t\tfn: AppRouterPageRoute<P>,\n\t\topts?: WithAuthGuardAppRouterOptions<P>,\n\t): AppRouterPageRoute<P>;\n\tfunction withAuthGuard(\n\t\tfnOrOpts?: WithAuthGuardPageRouterOptions | AppRouterPageRoute,\n\t\topts?: WithAuthGuardAppRouterOptions,\n\t): PageRoute<Record<string, unknown>> | AppRouterPageRoute {\n\t\tif (typeof fnOrOpts === 'function') {\n\t\t\tconst appRouteHandler = appRouteHandlerFactory(base);\n\t\t\treturn appRouteHandler(fnOrOpts, opts);\n\t\t}\n\n\t\tconst pageRouteHandler = pageRouteHandlerFactory(base);\n\t\treturn pageRouteHandler(fnOrOpts);\n\t}\n\n\treturn {\n\t\tget options() {\n\t\t\treturn base.options;\n\t\t},\n\t\twithAuthGuard,\n\t\twithApiAuthRequired,\n\t\tgetSession: (req) => base.getSession(req),\n\t\tupdateSession: (event, session) => base.updateSession(event, session),\n\t\trefreshSession: (req) => base.refreshSession(req),\n\t\trevokeSession: (req) => base.revokeSession(req),\n\t\tgetEntrySession: (entryUrl) => base.getEntrySession(entryUrl),\n\t\tcompleteLogin: (params, req) => base.completeLogin(params, req),\n\t\tlogout: (postLogoutRedirectUri, req) => base.logout(postLogoutRedirectUri, req),\n\t\thandleLogin: (req) => base.handleLogin(req),\n\t\thandleRegister: (req) => base.handleRegister(req),\n\t\thandleCallback: (req) => base.handleCallback(req),\n\t\thandleRefresh: (req) => base.handleRefresh(req),\n\t\thandleRevoke: (req) => base.handleRevoke(req),\n\t\thandleEntry: (req) => base.handleEntry(req),\n\t\thandleLogout: (req) => base.handleLogout(req),\n\t\thandleBackChannelLogout: (req) => base.handleBackChannelLogout(req),\n\t\thandler: async (req) => (await base.handler(req)) ?? new NextResponse('Not Found', { status: 404 }),\n\t};\n}\n"],"mappings":"4aA2BA,SAAgB,EAAgB,EAAoD,CACnF,GAAI,CAAC,EAAW,QAAS,CACxB,GAAI,CAAC,EAAW,OACf,MAAM,IAAI,EAAmB,iDAAiD,EAG/E,EAAW,eAAiB,OAC5B,EAAW,QAAU,EAA6B,EAAW,OAAQ,CAAE,qBAAsB,CAAE,OAAQ,EAAW,YAAa,CAAE,CAAC,CACnI,CAEA,IAAM,EAAO,EACZ,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAa,SAAS,EAAK,CAAM,CAC7D,EACA,CACD,EAIA,SAAS,EAAoB,EAAkF,CAC9G,OAAQ,EAA6C,IAChD,aAAe,QACM,EAA0B,CAC1B,CAAA,CAAgB,CACjC,CAAA,CAAgB,EAAM,GAAY,CAAC,CAA8B,EAGhD,EAA2B,CAC3B,CAAA,CAAiB,CACnC,CAAA,CAAiB,EAAK,CAA2B,CAE1D,CAUA,SAAS,EACR,EACA,EAC0D,CAO1D,OANI,OAAO,GAAa,WACC,EAAuB,CACxC,CAAA,CAAgB,EAAU,CAAI,EAGb,EAAwB,CAC1C,CAAA,CAAiB,CAAQ,CACjC,CAEA,MAAO,CACN,IAAI,SAAU,CACb,OAAO,EAAK,OACb,EACA,gBACA,sBACA,WAAa,GAAQ,EAAK,WAAW,CAAG,EACxC,eAAgB,EAAO,IAAY,EAAK,cAAc,EAAO,CAAO,EACpE,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,cAAgB,GAAQ,EAAK,cAAc,CAAG,EAC9C,gBAAkB,GAAa,EAAK,gBAAgB,CAAQ,EAC5D,eAAgB,EAAQ,IAAQ,EAAK,cAAc,EAAQ,CAAG,EAC9D,QAAS,EAAuB,IAAQ,EAAK,OAAO,EAAuB,CAAG,EAC9E,YAAc,GAAQ,EAAK,YAAY,CAAG,EAC1C,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,cAAgB,GAAQ,EAAK,cAAc,CAAG,EAC9C,aAAe,GAAQ,EAAK,aAAa,CAAG,EAC5C,YAAc,GAAQ,EAAK,YAAY,CAAG,EAC1C,aAAe,GAAQ,EAAK,aAAa,CAAG,EAC5C,wBAA0B,GAAQ,EAAK,wBAAwB,CAAG,EAClE,QAAS,KAAO,IAAS,MAAM,EAAK,QAAQ,CAAG,GAAM,IAAI,EAAa,YAAa,CAAE,OAAQ,GAAI,CAAC,CACnG,CACD"}
+{"version":3,"file":"sdk.mjs","names":[],"sources":["../../src/server/sdk.ts"],"sourcesContent":["import type { NextApiHandler, NextApiRequest, NextApiResponse } from 'next';\nimport type { ParsedUrlQuery } from 'node:querystring';\nimport type {\n\tNextServerSDK,\n\tNextServerSDKInitConfig,\n\tWithAuthGuardAppRouterOptions,\n\tWithAuthGuardPageRouterOptions,\n\tAppRouterPageRoute,\n\tAppRouterPageRouteOpts,\n\tPageRoute,\n\tAppRouteHandlerFn,\n\tAppRouteHandlerFnContext,\n\tPagesRouterRequest,\n} from './types';\nimport { NextResponse, type NextRequest } from 'next/server';\nimport { createBaseServerSDK } from '@strivacity/sdk-core/server';\nimport { ConfigurationError } from '@strivacity/sdk-core/utils/errors';\nimport { createEncryptedCookieStorage } from './storages';\nimport { apiAppRouteHandlerFactory, apiPageRouteHandlerFactory } from './handlers/api';\nimport { appRouteHandlerFactory, pageRouteHandlerFactory } from './handlers/route';\n\n/**\n * Creates a Next.js server SDK instance with the provided configuration.\n *\n * @param {NextServerSDKInitConfig} initConfig - The initialization configuration for the SDK.\n * @returns {NextServerSDK} The initialized Next.js server SDK instance.\n */\nexport function createServerSDK(initConfig: NextServerSDKInitConfig): NextServerSDK {\n\tif (!initConfig.storage) {\n\t\tif (!initConfig.secret) {\n\t\t\tthrow new ConfigurationError('Secret is required for encrypted cookie storage');\n\t\t}\n\n\t\tinitConfig.cookieMaxAge ??= 30 * 24 * 60 * 60;\n\t\tinitConfig.storage = createEncryptedCookieStorage(initConfig.secret, { defaultCookieOptions: { maxAge: initConfig.cookieMaxAge } });\n\t}\n\n\tconst base = createBaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t},\n\t\tinitConfig,\n\t);\n\n\tfunction withApiAuthRequired(apiRoute: AppRouteHandlerFn): AppRouteHandlerFn;\n\tfunction withApiAuthRequired(apiRoute: NextApiHandler): NextApiHandler;\n\tfunction withApiAuthRequired(apiRoute: AppRouteHandlerFn | NextApiHandler): AppRouteHandlerFn | NextApiHandler {\n\t\treturn (req: NextRequest | Request | NextApiRequest, resOrCtx?: AppRouteHandlerFnContext | NextApiResponse) => {\n\t\t\tif (req instanceof Request) {\n\t\t\t\tconst appRouteHandler = apiAppRouteHandlerFactory(base);\n\t\t\t\tconst wrappedAppRoute = appRouteHandler(apiRoute as AppRouteHandlerFn);\n\t\t\t\treturn wrappedAppRoute(req, (resOrCtx ?? {}) as AppRouteHandlerFnContext);\n\t\t\t}\n\n\t\t\tconst pageRouteHandler = apiPageRouteHandlerFactory(base);\n\t\t\tconst wrappedPageRoute = pageRouteHandler(apiRoute as NextApiHandler);\n\t\t\treturn wrappedPageRoute(req, resOrCtx as NextApiResponse);\n\t\t};\n\t}\n\n\tfunction withAuthGuard(): PageRoute<Record<string, unknown>, ParsedUrlQuery>;\n\tfunction withAuthGuard<P extends Record<string, unknown> = Record<string, unknown>, Q extends ParsedUrlQuery = ParsedUrlQuery>(\n\t\topts: WithAuthGuardPageRouterOptions<P, Q>,\n\t): PageRoute<P, Q>;\n\tfunction withAuthGuard<P extends AppRouterPageRouteOpts = AppRouterPageRouteOpts>(\n\t\tfn: AppRouterPageRoute<P>,\n\t\topts?: WithAuthGuardAppRouterOptions<P>,\n\t): AppRouterPageRoute<P>;\n\tfunction withAuthGuard(\n\t\tfnOrOpts?: WithAuthGuardPageRouterOptions | AppRouterPageRoute,\n\t\topts?: WithAuthGuardAppRouterOptions,\n\t): PageRoute<Record<string, unknown>> | AppRouterPageRoute {\n\t\tif (typeof fnOrOpts === 'function') {\n\t\t\tconst appRouteHandler = appRouteHandlerFactory(base);\n\t\t\treturn appRouteHandler(fnOrOpts, opts);\n\t\t}\n\n\t\tconst pageRouteHandler = pageRouteHandlerFactory(base);\n\t\treturn pageRouteHandler(fnOrOpts);\n\t}\n\n\treturn {\n\t\tget options() {\n\t\t\treturn base.options;\n\t\t},\n\t\twithAuthGuard,\n\t\twithApiAuthRequired,\n\t\t// NOTE: refreshes (with autoRefresh) only for App Router requests, whose route handlers can write the rotated cookie.\n\t\t// Server Components (no request) and Pages Router requests read the stored session: a refresh there could not be saved.\n\t\tgetSession: (req, params) => base.getSession(req, req instanceof Request ? params : { autoRefresh: false }),\n\t\tupdateSession: (session, req) => base.updateSession(session, req),\n\t\trefreshSession: (req) => base.refreshSession(req),\n\t\trevokeSession: (req) => base.revokeSession(req),\n\t\tgetEntrySession: (entryUrl) => base.getEntrySession(entryUrl),\n\t\tcompleteLogin: (params, req) => base.completeLogin(params, req),\n\t\tlogout: (postLogoutRedirectUri, req) => base.logout(postLogoutRedirectUri, req),\n\t\thandleLogin: (req) => base.handleLogin(req),\n\t\thandleRegister: (req) => base.handleRegister(req),\n\t\thandleCallback: (req) => base.handleCallback(req),\n\t\thandleRefresh: (req) => base.handleRefresh(req),\n\t\thandleRevoke: (req) => base.handleRevoke(req),\n\t\thandleEntry: (req) => base.handleEntry(req),\n\t\thandleLogout: (req) => base.handleLogout(req),\n\t\thandleBackChannelLogout: (req) => base.handleBackChannelLogout(req),\n\t\thandler: async (req) => (await base.handler(req)) ?? new NextResponse('Not Found', { status: 404 }),\n\t};\n}\n"],"mappings":"4aA2BA,SAAgB,EAAgB,EAAoD,CACnF,GAAI,CAAC,EAAW,QAAS,CACxB,GAAI,CAAC,EAAW,OACf,MAAM,IAAI,EAAmB,iDAAiD,EAG/E,EAAW,eAAiB,OAC5B,EAAW,QAAU,EAA6B,EAAW,OAAQ,CAAE,qBAAsB,CAAE,OAAQ,EAAW,YAAa,CAAE,CAAC,CACnI,CAEA,IAAM,EAAO,EACZ,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAa,SAAS,EAAK,CAAM,CAC7D,EACA,CACD,EAIA,SAAS,EAAoB,EAAkF,CAC9G,OAAQ,EAA6C,IAChD,aAAe,QACM,EAA0B,CAC1B,CAAA,CAAgB,CACjC,CAAA,CAAgB,EAAM,GAAY,CAAC,CAA8B,EAGhD,EAA2B,CAC3B,CAAA,CAAiB,CACnC,CAAA,CAAiB,EAAK,CAA2B,CAE1D,CAUA,SAAS,EACR,EACA,EAC0D,CAO1D,OANI,OAAO,GAAa,WACC,EAAuB,CACxC,CAAA,CAAgB,EAAU,CAAI,EAGb,EAAwB,CAC1C,CAAA,CAAiB,CAAQ,CACjC,CAEA,MAAO,CACN,IAAI,SAAU,CACb,OAAO,EAAK,OACb,EACA,gBACA,sBAGA,YAAa,EAAK,IAAW,EAAK,WAAW,EAAK,aAAe,QAAU,EAAS,CAAE,YAAa,EAAM,CAAC,EAC1G,eAAgB,EAAS,IAAQ,EAAK,cAAc,EAAS,CAAG,EAChE,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,cAAgB,GAAQ,EAAK,cAAc,CAAG,EAC9C,gBAAkB,GAAa,EAAK,gBAAgB,CAAQ,EAC5D,eAAgB,EAAQ,IAAQ,EAAK,cAAc,EAAQ,CAAG,EAC9D,QAAS,EAAuB,IAAQ,EAAK,OAAO,EAAuB,CAAG,EAC9E,YAAc,GAAQ,EAAK,YAAY,CAAG,EAC1C,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,eAAiB,GAAQ,EAAK,eAAe,CAAG,EAChD,cAAgB,GAAQ,EAAK,cAAc,CAAG,EAC9C,aAAe,GAAQ,EAAK,aAAa,CAAG,EAC5C,YAAc,GAAQ,EAAK,YAAY,CAAG,EAC1C,aAAe,GAAQ,EAAK,aAAa,CAAG,EAC5C,wBAA0B,GAAQ,EAAK,wBAAwB,CAAG,EAClE,QAAS,KAAO,IAAS,MAAM,EAAK,QAAQ,CAAG,GAAM,IAAI,EAAa,YAAa,CAAE,OAAQ,GAAI,CAAC,CACnG,CACD"}

package/dist/server/storages.cjs

@@ -1,2 +1,2 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("next/server"),t=require("@strivacity/sdk-core/server"),n=require("next/headers"),r=require("@strivacity/sdk-core/utils/common"),i=require("@strivacity/sdk-core/utils/crypto"),a=require("@strivacity/sdk-core/storages/server");function o(t,n){if(t instanceof e.NextRequest)return t.cookies.get(n)?.value??null;if(t instanceof Request){let e=(t.headers.get(`cookie`)??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return e?decodeURIComponent(e.slice(n.length+1)):null}let r=(t.headers?.cookie??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return r?decodeURIComponent(r.slice(n.length+1)):null}function s(t,r){return(0,a.createSessionIdCookieStorage)({toRequest:e=>e,redirect:(t,n)=>e.NextResponse.redirect(t,n),getSessionId:async(e,t)=>t?o(t,e)??null:(await(0,n.cookies)()).get(e)?.value},t,r)}function c(a,s){let c={httpOnly:!0,secure:!0,path:`/`,sameSite:`lax`,...s?.defaultCookieOptions},l={async get(e,r){if(r){let n=o(r,e);if(n)return await(0,i.decryptString)(n,a,t.COOKIE_CONTEXT);let s=[];for(let t=0;;t++){let n=o(r,`${e}.${t}`);if(!n)break;s.push(n)}return s.length===0?null:await(0,i.decryptString)(s.join(``),a,t.COOKIE_CONTEXT)}{let r=await(0,n.cookies)(),o=r.get(e)?.value;if(o)return await(0,i.decryptString)(o,a,t.COOKIE_CONTEXT);let s=[];for(let t=0;;t++){let n=r.get(`${e}.${t}`)?.value;if(!n)break;s.push(n)}return s.length===0?null:await(0,i.decryptString)(s.join(``),a,t.COOKIE_CONTEXT)}},async set(o,s,u,d,f){f={...c,...f},await l.delete(o,u,d);let p=await(0,i.encryptString)(s,a,t.COOKIE_CONTEXT);if(d instanceof e.NextResponse){if(p.length<=t.COOKIE_CHUNK_SIZE)d.cookies.set(o,p,f);else for(let e=0;e*t.COOKIE_CHUNK_SIZE<p.length;e++)d.cookies.set(`${o}.${e}`,p.slice(e*t.COOKIE_CHUNK_SIZE,(e+1)*t.COOKIE_CHUNK_SIZE),f)}else if(d){let e=[];if(p.length<=t.COOKIE_CHUNK_SIZE)e.push((0,r.buildCookieString)(o,p,f));else for(let n=0;n*t.COOKIE_CHUNK_SIZE<p.length;n++)e.push((0,r.buildCookieString)(`${o}.${n}`,p.slice(n*t.COOKIE_CHUNK_SIZE,(n+1)*t.COOKIE_CHUNK_SIZE),f));let n=d.getHeader(`set-cookie`),i=Array.isArray(n)?n:n?[String(n)]:[];d.setHeader(`set-cookie`,[...i,...e])}else{let e=await(0,n.cookies)();if(p.length<=t.COOKIE_CHUNK_SIZE)e.set(o,p,f);else for(let n=0;n*t.COOKIE_CHUNK_SIZE<p.length;n++)e.set(`${o}.${n}`,p.slice(n*t.COOKIE_CHUNK_SIZE,(n+1)*t.COOKIE_CHUNK_SIZE),f)}},async delete(t,i,a,s){if(s={...c,...s,maxAge:0},a instanceof e.NextResponse){a.cookies.delete(t);for(let e=0;a.cookies.get(`${t}.${e}`);e++)a.cookies.delete(`${t}.${e}`)}else if(a){let e=[];if(e.push((0,r.buildCookieString)(t,``,s)),i)for(let n=0;o(i,`${t}.${n}`)!==null;n++)e.push((0,r.buildCookieString)(`${t}.${n}`,``,s));let n=a.getHeader(`set-cookie`),c=Array.isArray(n)?n:n?[String(n)]:[];a.setHeader(`set-cookie`,[...c,...e])}else{let e=await(0,n.cookies)();e.delete(t);for(let n=0;e.get(`${t}.${n}`);n++)e.delete(`${t}.${n}`)}}};return l}exports.createEncryptedCookieStorage=c,exports.createSessionIdCookieStorage=s;var l=require("@strivacity/sdk-react/storages");Object.keys(l).forEach(function(e){e!=="default"&&!Object.prototype.hasOwnProperty.call(exports,e)&&Object.defineProperty(exports,e,{enumerable:!0,get:function(){return l[e]}})});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("next/server"),t=require("next/headers"),n=require("@strivacity/sdk-core/utils/common"),r=require("@strivacity/sdk-core/storages/server");function i(t,n){if(t instanceof e.NextRequest)return t.cookies.get(n)?.value??null;if(t instanceof Request){let e=(t.headers.get(`cookie`)??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return e?decodeURIComponent(e.slice(n.length+1)):null}let r=(t.headers?.cookie??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return r?decodeURIComponent(r.slice(n.length+1)):null}function a(n,a){return(0,r.createSessionIdCookieStorage)({toRequest:e=>e,redirect:(t,n)=>e.NextResponse.redirect(t,n),getSessionId:async(e,n)=>n?i(n,e)??null:(await(0,t.cookies)()).get(e)?.value},n,a)}function o(r,a){let o=(e,t)=>{let n=e.getHeader(`set-cookie`),r=Array.isArray(n)?n:n?[String(n)]:[];e.setHeader(`set-cookie`,[...r,t])};return{async get(n){return(r?i(r,n):null)||(a instanceof e.NextResponse?a.cookies.get(n)?.value:a||r?null:(await(0,t.cookies)()).get(n)?.value)},async set(r,i,s){a instanceof e.NextResponse?a.cookies.set(r,i,s):a?o(a,(0,n.buildCookieString)(r,i,s)):(await(0,t.cookies)()).set(r,i,s)},async delete(r,i){a instanceof e.NextResponse?a.cookies.set(r,``,{...i,maxAge:0}):a?o(a,(0,n.buildCookieString)(r,``,{...i,maxAge:0})):(await(0,t.cookies)()).delete(r)}}}function s(e,t){let n={httpOnly:!0,secure:!0,path:`/`,sameSite:`lax`,...t?.defaultCookieOptions};return{get:(t,n)=>(0,r.readEncryptedCookie)(o(n),t,e),set:(t,i,a,s,c)=>(0,r.writeEncryptedCookie)(o(a,s),t,i,e,{...n,...c}),delete:(e,t,i,a)=>(0,r.deleteEncryptedCookie)(o(t,i),e,{...n,...a})}}exports.createEncryptedCookieStorage=s,exports.createSessionIdCookieStorage=a;var c=require("@strivacity/sdk-react/storages");Object.keys(c).forEach(function(e){e!=="default"&&!Object.prototype.hasOwnProperty.call(exports,e)&&Object.defineProperty(exports,e,{enumerable:!0,get:function(){return c[e]}})});
 //# sourceMappingURL=storages.cjs.map

package/dist/server/storages.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"storages.cjs","names":[],"sources":["../../src/server/storages.ts"],"sourcesContent":["import type { NextServerStorage, PagesRouterRequest, SessionIdCookieStorageOptions, EncryptedCookieStorageOptions } from './types';\nimport { cookies } from 'next/headers';\nimport { NextRequest, NextResponse } from 'next/server';\nimport { buildCookieString } from '@strivacity/sdk-core/utils/common';\nimport { encryptString, decryptString } from '@strivacity/sdk-core/utils/crypto';\nimport { COOKIE_CONTEXT, COOKIE_CHUNK_SIZE } from '@strivacity/sdk-core/server';\nimport { createSessionIdCookieStorage as createSessionIdCookieStorageBase } from '@strivacity/sdk-core/storages/server';\n\nexport * from '@strivacity/sdk-react/storages';\n\n/**\n * Reads cookie value(s) for a given key directly from a NextRequest or PagesRouterRequest, without calling `cookies()` from next/headers.\n * Used for Pages Router / middleware support.\n *\n * @param req - The NextRequest or PagesRouterRequest object from which to read the cookie.\n * @param key - The name of the cookie to read.\n * @returns The cookie value as a string, or null if the cookie is not found.\n */\nfunction getCookieFromRequest(req: NextRequest | Request | PagesRouterRequest, key: string): string | null {\n\tif (req instanceof NextRequest) {\n\t\treturn req.cookies.get(key)?.value ?? null;\n\t}\n\n\tif (req instanceof Request) {\n\t\tconst cookieHeader = req.headers.get('cookie') ?? '';\n\t\tconst match = cookieHeader\n\t\t\t.split(';')\n\t\t\t.map((c) => c.trim())\n\t\t\t.find((c) => c.startsWith(`${key}=`));\n\n\t\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n\t}\n\n\tconst cookieHeader = req.headers?.cookie ?? '';\n\tconst match = cookieHeader\n\t\t.split(';')\n\t\t.map((c: string) => c.trim())\n\t\t.find((c: string) => c.startsWith(`${key}=`));\n\n\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n}\n\n/**\n * Creates a session storage that puts a random unique id value cookie on the client and keeping the actual session data in the given `storage`.\n *\n * @param {NextServerStorage} storage - The storage used to persist session data, keyed by a randomly generated session id.\n * @param {SessionIdCookieStorageOptions} [options] - Options for configuring the session-id cookie storage.\n * @returns {NextServerStorage} An object implementing the ServerStorage interface for managing sessions indexed by a session-id cookie.\n */\nexport function createSessionIdCookieStorage(storage: NextServerStorage, options?: SessionIdCookieStorageOptions): NextServerStorage {\n\treturn createSessionIdCookieStorageBase<NextRequest | Request | PagesRouterRequest>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t\tgetSessionId: async (key, req) => {\n\t\t\t\tif (req) {\n\t\t\t\t\treturn getCookieFromRequest(req, key) ?? null;\n\t\t\t\t}\n\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\treturn store.get(key)?.value;\n\t\t\t},\n\t\t},\n\t\tstorage,\n\t\toptions,\n\t);\n}\n\n/**\n * Creates an encrypted cookie session storage.\n * Only callable in server-side contexts (middleware, API routes, or server components).\n *\n * @param secret - The secret key used for encryption and decryption.\n * @param {EncryptedCookieStorageOptions} [options] - Options for configuring the encrypted cookie storage.\n * @param {Partial<ServerCookieOptions>} [options.defaultCookieOptions] - Default cookie attributes for the encrypted cookie.\n * @returns An object implementing the ServerStorage interface for managing encrypted cookies.\n */\nexport function createEncryptedCookieStorage(secret: string, options?: EncryptedCookieStorageOptions): NextServerStorage {\n\tconst defaultCookieOptions = {\n\t\thttpOnly: true,\n\t\tsecure: true,\n\t\tpath: '/',\n\t\tsameSite: 'lax' as const,\n\t\t...options?.defaultCookieOptions,\n\t};\n\n\tconst storage: NextServerStorage = {\n\t\tasync get(key, req) {\n\t\t\tif (req) {\n\t\t\t\tconst cookie = getCookieFromRequest(req, key);\n\n\t\t\t\tif (cookie) {\n\t\t\t\t\treturn await decryptString(cookie, secret, COOKIE_CONTEXT);\n\t\t\t\t}\n\n\t\t\t\tconst cookieChunks: Array<string> = [];\n\n\t\t\t\tfor (let i = 0; ; i++) {\n\t\t\t\t\tconst chunk = getCookieFromRequest(req, `${key}.${i}`);\n\n\t\t\t\t\tif (!chunk) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tcookieChunks.push(chunk);\n\t\t\t\t}\n\n\t\t\t\tif (cookieChunks.length === 0) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\n\t\t\t\treturn await decryptString(cookieChunks.join(''), secret, COOKIE_CONTEXT);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\t\t\t\tconst cookie = store.get(key)?.value;\n\n\t\t\t\tif (cookie) {\n\t\t\t\t\treturn await decryptString(cookie, secret, COOKIE_CONTEXT);\n\t\t\t\t}\n\n\t\t\t\tconst cookieChunks: Array<string> = [];\n\n\t\t\t\tfor (let i = 0; ; i++) {\n\t\t\t\t\tconst chunk = store.get(`${key}.${i}`)?.value;\n\n\t\t\t\t\tif (!chunk) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tcookieChunks.push(chunk);\n\t\t\t\t}\n\n\t\t\t\tif (cookieChunks.length === 0) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\n\t\t\t\treturn await decryptString(cookieChunks.join(''), secret, COOKIE_CONTEXT);\n\t\t\t}\n\t\t},\n\t\tasync set(key, value, req, res, cookieOptions) {\n\t\t\tcookieOptions = { ...defaultCookieOptions, ...cookieOptions };\n\n\t\t\t// NOTE: Delete existing cookie(s) first to avoid leaving old chunks behind\n\t\t\tawait storage.delete(key, req, res);\n\n\t\t\tconst encrypted = await encryptString(value, secret, COOKIE_CONTEXT);\n\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tres.cookies.set(key, encrypted, cookieOptions);\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tres.cookies.set(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else if (res) {\n\t\t\t\tconst setCookies: Array<string> = [];\n\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tsetCookies.push(buildCookieString(key, encrypted, cookieOptions));\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tsetCookies.push(buildCookieString(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst existing = res.getHeader('set-cookie');\n\t\t\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\t\t\tres.setHeader('set-cookie', [...existingArr, ...setCookies]);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tstore.set(key, encrypted, cookieOptions);\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tstore.set(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\tasync delete(key, req, res, cookieOptions) {\n\t\t\tcookieOptions = { ...defaultCookieOptions, ...cookieOptions, maxAge: 0 };\n\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.delete(key);\n\n\t\t\t\tfor (let i = 0; res.cookies.get(`${key}.${i}`); i++) {\n\t\t\t\t\tres.cookies.delete(`${key}.${i}`);\n\t\t\t\t}\n\t\t\t} else if (res) {\n\t\t\t\tconst setCookies: Array<string> = [];\n\n\t\t\t\tsetCookies.push(buildCookieString(key, '', cookieOptions));\n\n\t\t\t\tif (req) {\n\t\t\t\t\tfor (let i = 0; getCookieFromRequest(req, `${key}.${i}`) !== null; i++) {\n\t\t\t\t\t\tsetCookies.push(buildCookieString(`${key}.${i}`, '', cookieOptions));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst existing = res.getHeader('set-cookie');\n\t\t\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\t\t\tres.setHeader('set-cookie', [...existingArr, ...setCookies]);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\tstore.delete(key);\n\n\t\t\t\tfor (let i = 0; store.get(`${key}.${i}`); i++) {\n\t\t\t\t\tstore.delete(`${key}.${i}`);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n\n\treturn storage;\n}\n"],"mappings":"mTAkBA,SAAS,EAAqB,EAAiD,EAA4B,CAC1G,GAAI,aAAe,EAAA,YAClB,OAAO,EAAI,QAAQ,IAAI,CAAG,CAAC,EAAE,OAAS,KAGvC,GAAI,aAAe,QAAS,CAE3B,IAAM,GADe,EAAI,QAAQ,IAAI,QAAQ,GAAK,GAAA,CAEhD,MAAM,GAAG,CAAC,CACV,IAAK,GAAM,EAAE,KAAK,CAAC,CAAC,CACpB,KAAM,GAAM,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAErC,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CAGA,IAAM,GADe,EAAI,SAAS,QAAU,GAAA,CAE1C,MAAM,GAAG,CAAC,CACV,IAAK,GAAc,EAAE,KAAK,CAAC,CAAC,CAC5B,KAAM,GAAc,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAE7C,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CASA,SAAgB,EAA6B,EAA4B,EAA4D,CACpI,OAAA,EAAO,EAAA,6BAAA,CACN,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAA,aAAa,SAAS,EAAK,CAAM,EAC5D,aAAc,MAAO,EAAK,IACrB,EACI,EAAqB,EAAK,CAAG,GAAK,MAKnC,MAAA,EAFa,EAAA,QAAA,CAAQ,EAAA,CAEf,IAAI,CAAG,CAAC,EAAE,KAEzB,EACA,EACA,CACD,CACD,CAWA,SAAgB,EAA6B,EAAgB,EAA4D,CACxH,IAAM,EAAuB,CAC5B,SAAU,GACV,OAAQ,GACR,KAAM,IACN,SAAU,MACV,GAAG,GAAS,oBACb,EAEM,EAA6B,CAClC,MAAM,IAAI,EAAK,EAAK,CACnB,GAAI,EAAK,CACR,IAAM,EAAS,EAAqB,EAAK,CAAG,EAE5C,GAAI,EACH,OAAO,MAAA,EAAM,EAAA,cAAA,CAAc,EAAQ,EAAQ,EAAA,cAAc,EAG1D,IAAM,EAA8B,CAAC,EAErC,IAAK,IAAI,EAAI,GAAK,IAAK,CACtB,IAAM,EAAQ,EAAqB,EAAK,GAAG,EAAI,GAAG,GAAG,EAErD,GAAI,CAAC,EACJ,MAGD,EAAa,KAAK,CAAK,CACxB,CAMA,OAJI,EAAa,SAAW,EACpB,KAGD,MAAA,EAAM,EAAA,cAAA,CAAc,EAAa,KAAK,EAAE,EAAG,EAAQ,EAAA,cAAc,CACzE,CAAO,CACN,IAAM,EAAQ,MAAA,EAAM,EAAA,QAAA,CAAQ,EACtB,EAAS,EAAM,IAAI,CAAG,CAAC,EAAE,MAE/B,GAAI,EACH,OAAO,MAAA,EAAM,EAAA,cAAA,CAAc,EAAQ,EAAQ,EAAA,cAAc,EAG1D,IAAM,EAA8B,CAAC,EAErC,IAAK,IAAI,EAAI,GAAK,IAAK,CACtB,IAAM,EAAQ,EAAM,IAAI,GAAG,EAAI,GAAG,GAAG,CAAC,EAAE,MAExC,GAAI,CAAC,EACJ,MAGD,EAAa,KAAK,CAAK,CACxB,CAMA,OAJI,EAAa,SAAW,EACpB,KAGD,MAAA,EAAM,EAAA,cAAA,CAAc,EAAa,KAAK,EAAE,EAAG,EAAQ,EAAA,cAAc,CACzE,CACD,EACA,MAAM,IAAI,EAAK,EAAO,EAAK,EAAK,EAAe,CAC9C,EAAgB,CAAE,GAAG,EAAsB,GAAG,CAAc,EAG5D,MAAM,EAAQ,OAAO,EAAK,EAAK,CAAG,EAElC,IAAM,EAAY,MAAA,EAAM,EAAA,cAAA,CAAc,EAAO,EAAQ,EAAA,cAAc,EAEnE,GAAI,aAAe,EAAA,aAAc,CAChC,GAAI,EAAU,QAAU,EAAA,kBACvB,EAAI,QAAQ,IAAI,EAAK,EAAW,CAAa,OAE7C,IAAK,IAAI,EAAI,EAAG,EAAI,EAAA,kBAAoB,EAAU,OAAQ,IACzD,EAAI,QAAQ,IAAI,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,EAAA,mBAAoB,EAAI,GAAK,EAAA,iBAAiB,EAAG,CAAa,CAGpH,MAAO,GAAI,EAAK,CACf,IAAM,EAA4B,CAAC,EAEnC,GAAI,EAAU,QAAU,EAAA,kBACvB,EAAW,MAAA,EAAK,EAAA,kBAAA,CAAkB,EAAK,EAAW,CAAa,CAAC,OAEhE,IAAK,IAAI,EAAI,EAAG,EAAI,EAAA,kBAAoB,EAAU,OAAQ,IACzD,EAAW,MAAA,EAAK,EAAA,kBAAA,CAAkB,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,EAAA,mBAAoB,EAAI,GAAK,EAAA,iBAAiB,EAAG,CAAa,CAAC,EAItI,IAAM,EAAW,EAAI,UAAU,YAAY,EACrC,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAI,UAAU,aAAc,CAAC,GAAG,EAAa,GAAG,CAAU,CAAC,CAC5D,KAAO,CACN,IAAM,EAAQ,MAAA,EAAM,EAAA,QAAA,CAAQ,EAE5B,GAAI,EAAU,QAAU,EAAA,kBACvB,EAAM,IAAI,EAAK,EAAW,CAAa,OAEvC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAA,kBAAoB,EAAU,OAAQ,IACzD,EAAM,IAAI,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,EAAA,mBAAoB,EAAI,GAAK,EAAA,iBAAiB,EAAG,CAAa,CAG9G,CACD,EACA,MAAM,OAAO,EAAK,EAAK,EAAK,EAAe,CAG1C,GAFA,EAAgB,CAAE,GAAG,EAAsB,GAAG,EAAe,OAAQ,CAAE,EAEnE,aAAe,EAAA,aAAc,CAChC,EAAI,QAAQ,OAAO,CAAG,EAEtB,IAAK,IAAI,EAAI,EAAG,EAAI,QAAQ,IAAI,GAAG,EAAI,GAAG,GAAG,EAAG,IAC/C,EAAI,QAAQ,OAAO,GAAG,EAAI,GAAG,GAAG,CAElC,MAAO,GAAI,EAAK,CACf,IAAM,EAA4B,CAAC,EAInC,GAFA,EAAW,MAAA,EAAK,EAAA,kBAAA,CAAkB,EAAK,GAAI,CAAa,CAAC,EAErD,EACH,IAAK,IAAI,EAAI,EAAG,EAAqB,EAAK,GAAG,EAAI,GAAG,GAAG,IAAM,KAAM,IAClE,EAAW,MAAA,EAAK,EAAA,kBAAA,CAAkB,GAAG,EAAI,GAAG,IAAK,GAAI,CAAa,CAAC,EAIrE,IAAM,EAAW,EAAI,UAAU,YAAY,EACrC,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAI,UAAU,aAAc,CAAC,GAAG,EAAa,GAAG,CAAU,CAAC,CAC5D,KAAO,CACN,IAAM,EAAQ,MAAA,EAAM,EAAA,QAAA,CAAQ,EAE5B,EAAM,OAAO,CAAG,EAEhB,IAAK,IAAI,EAAI,EAAG,EAAM,IAAI,GAAG,EAAI,GAAG,GAAG,EAAG,IACzC,EAAM,OAAO,GAAG,EAAI,GAAG,GAAG,CAE5B,CACD,CACD,EAEA,OAAO,CACR"}
+{"version":3,"file":"storages.cjs","names":[],"sources":["../../src/server/storages.ts"],"sourcesContent":["import type {\n\tCookieJar,\n\tCookieOptions,\n\tNextServerStorage,\n\tPagesRouterRequest,\n\tPagesRouterResponse,\n\tSessionIdCookieStorageOptions,\n\tEncryptedCookieStorageOptions,\n} from './types';\nimport { cookies } from 'next/headers';\nimport { NextRequest, NextResponse } from 'next/server';\nimport { buildCookieString } from '@strivacity/sdk-core/utils/common';\nimport {\n\tcreateSessionIdCookieStorage as createSessionIdCookieStorageBase,\n\treadEncryptedCookie,\n\twriteEncryptedCookie,\n\tdeleteEncryptedCookie,\n} from '@strivacity/sdk-core/storages/server';\n\nexport * from '@strivacity/sdk-react/storages';\n\n/**\n * Reads cookie value(s) for a given key directly from a NextRequest or PagesRouterRequest, without calling `cookies()` from next/headers.\n * Used for Pages Router / middleware support.\n *\n * @param req - The NextRequest or PagesRouterRequest object from which to read the cookie.\n * @param key - The name of the cookie to read.\n * @returns The cookie value as a string, or null if the cookie is not found.\n */\nfunction getCookieFromRequest(req: NextRequest | Request | PagesRouterRequest, key: string): string | null {\n\tif (req instanceof NextRequest) {\n\t\treturn req.cookies.get(key)?.value ?? null;\n\t}\n\n\tif (req instanceof Request) {\n\t\tconst cookieHeader = req.headers.get('cookie') ?? '';\n\t\tconst match = cookieHeader\n\t\t\t.split(';')\n\t\t\t.map((c) => c.trim())\n\t\t\t.find((c) => c.startsWith(`${key}=`));\n\n\t\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n\t}\n\n\tconst cookieHeader = req.headers?.cookie ?? '';\n\tconst match = cookieHeader\n\t\t.split(';')\n\t\t.map((c: string) => c.trim())\n\t\t.find((c: string) => c.startsWith(`${key}=`));\n\n\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n}\n\n/**\n * Creates a session storage that puts a random unique id value cookie on the client and keeping the actual session data in the given `storage`.\n *\n * @param {NextServerStorage} storage - The storage used to persist session data, keyed by a randomly generated session id.\n * @param {SessionIdCookieStorageOptions} [options] - Options for configuring the session-id cookie storage.\n * @returns {NextServerStorage} An object implementing the ServerStorage interface for managing sessions indexed by a session-id cookie.\n */\nexport function createSessionIdCookieStorage(storage: NextServerStorage, options?: SessionIdCookieStorageOptions): NextServerStorage {\n\treturn createSessionIdCookieStorageBase<NextRequest | Request | PagesRouterRequest>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t\tgetSessionId: async (key, req) => {\n\t\t\t\tif (req) {\n\t\t\t\t\treturn getCookieFromRequest(req, key) ?? null;\n\t\t\t\t}\n\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\treturn store.get(key)?.value;\n\t\t\t},\n\t\t},\n\t\tstorage,\n\t\toptions,\n\t);\n}\n\n/**\n * Builds the cookie access for one storage call. Writes go to the given response (App Router `NextResponse` or Pages Router\n * `res`), or to `cookies()` from next/headers when there is none. Reads come from the request, then from the response.\n *\n * @param req - The incoming request, if any.\n * @param res - The outgoing response, if any.\n * @returns The cookie jar.\n */\nfunction createJar(req?: NextRequest | Request | PagesRouterRequest, res?: NextResponse | PagesRouterResponse): CookieJar<CookieOptions> {\n\tconst appendSetCookie = (response: PagesRouterResponse, cookie: string) => {\n\t\tconst existing = response.getHeader('set-cookie');\n\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\tresponse.setHeader('set-cookie', [...existingArr, cookie]);\n\t};\n\n\treturn {\n\t\tasync get(name) {\n\t\t\tconst fromRequest = req ? getCookieFromRequest(req, name) : null;\n\n\t\t\tif (fromRequest) {\n\t\t\t\treturn fromRequest;\n\t\t\t}\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\treturn res.cookies.get(name)?.value;\n\t\t\t}\n\t\t\tif (res || req) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await cookies()).get(name)?.value;\n\t\t},\n\t\tasync set(name, value, cookieOptions) {\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.set(name, value, cookieOptions);\n\t\t\t} else if (res) {\n\t\t\t\tappendSetCookie(res, buildCookieString(name, value, cookieOptions));\n\t\t\t} else {\n\t\t\t\t(await cookies()).set(name, value, cookieOptions);\n\t\t\t}\n\t\t},\n\t\tasync delete(name, cookieOptions) {\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.set(name, '', { ...cookieOptions, maxAge: 0 });\n\t\t\t} else if (res) {\n\t\t\t\tappendSetCookie(res, buildCookieString(name, '', { ...cookieOptions, maxAge: 0 }));\n\t\t\t} else {\n\t\t\t\t(await cookies()).delete(name);\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Creates an encrypted cookie session storage.\n * Only callable in server-side contexts (middleware, API routes, or server components).\n *\n * @param secret - The secret key used for encryption and decryption.\n * @param {EncryptedCookieStorageOptions} [options] - Options for configuring the encrypted cookie storage.\n * @param {Partial<ServerCookieOptions>} [options.defaultCookieOptions] - Default cookie attributes for the encrypted cookie.\n * @returns An object implementing the ServerStorage interface for managing encrypted cookies.\n */\nexport function createEncryptedCookieStorage(secret: string, options?: EncryptedCookieStorageOptions): NextServerStorage {\n\tconst defaultCookieOptions = {\n\t\thttpOnly: true,\n\t\tsecure: true,\n\t\tpath: '/',\n\t\tsameSite: 'lax' as const,\n\t\t...options?.defaultCookieOptions,\n\t};\n\n\treturn {\n\t\tget: (key, req) => readEncryptedCookie(createJar(req), key, secret),\n\t\tset: (key, value, req, res, cookieOptions) => writeEncryptedCookie(createJar(req, res), key, value, secret, { ...defaultCookieOptions, ...cookieOptions }),\n\t\tdelete: (key, req, res, cookieOptions) => deleteEncryptedCookie(createJar(req, res), key, { ...defaultCookieOptions, ...cookieOptions }),\n\t};\n}\n"],"mappings":"2NA6BA,SAAS,EAAqB,EAAiD,EAA4B,CAC1G,GAAI,aAAe,EAAA,YAClB,OAAO,EAAI,QAAQ,IAAI,CAAG,CAAC,EAAE,OAAS,KAGvC,GAAI,aAAe,QAAS,CAE3B,IAAM,GADe,EAAI,QAAQ,IAAI,QAAQ,GAAK,GAAA,CAEhD,MAAM,GAAG,CAAC,CACV,IAAK,GAAM,EAAE,KAAK,CAAC,CAAC,CACpB,KAAM,GAAM,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAErC,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CAGA,IAAM,GADe,EAAI,SAAS,QAAU,GAAA,CAE1C,MAAM,GAAG,CAAC,CACV,IAAK,GAAc,EAAE,KAAK,CAAC,CAAC,CAC5B,KAAM,GAAc,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAE7C,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CASA,SAAgB,EAA6B,EAA4B,EAA4D,CACpI,OAAA,EAAO,EAAA,6BAAA,CACN,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAA,aAAa,SAAS,EAAK,CAAM,EAC5D,aAAc,MAAO,EAAK,IACrB,EACI,EAAqB,EAAK,CAAG,GAAK,MAKnC,MAAA,EAFa,EAAA,QAAA,CAAQ,EAAA,CAEf,IAAI,CAAG,CAAC,EAAE,KAEzB,EACA,EACA,CACD,CACD,CAUA,SAAS,EAAU,EAAkD,EAAoE,CACxI,IAAM,GAAmB,EAA+B,IAAmB,CAC1E,IAAM,EAAW,EAAS,UAAU,YAAY,EAC1C,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAS,UAAU,aAAc,CAAC,GAAG,EAAa,CAAM,CAAC,CAC1D,EAEA,MAAO,CACN,MAAM,IAAI,EAAM,CAaf,OAZoB,EAAM,EAAqB,EAAK,CAAI,EAAI,QAKxD,aAAe,EAAA,aACX,EAAI,QAAQ,IAAI,CAAI,CAAC,EAAE,MAE3B,GAAO,EACH,MAGA,MAAA,EAAM,EAAA,QAAA,CAAQ,EAAA,CAAG,IAAI,CAAI,CAAC,EAAE,MACrC,EACA,MAAM,IAAI,EAAM,EAAO,EAAe,CACjC,aAAe,EAAA,aAClB,EAAI,QAAQ,IAAI,EAAM,EAAO,CAAa,EAChC,EACV,EAAgB,GAAA,EAAK,EAAA,kBAAA,CAAkB,EAAM,EAAO,CAAa,CAAC,GAEjE,MAAA,EAAM,EAAA,QAAA,CAAQ,EAAA,CAAG,IAAI,EAAM,EAAO,CAAa,CAElD,EACA,MAAM,OAAO,EAAM,EAAe,CAC7B,aAAe,EAAA,aAClB,EAAI,QAAQ,IAAI,EAAM,GAAI,CAAE,GAAG,EAAe,OAAQ,CAAE,CAAC,EAC/C,EACV,EAAgB,GAAA,EAAK,EAAA,kBAAA,CAAkB,EAAM,GAAI,CAAE,GAAG,EAAe,OAAQ,CAAE,CAAC,CAAC,GAEhF,MAAA,EAAM,EAAA,QAAA,CAAQ,EAAA,CAAG,OAAO,CAAI,CAE/B,CACD,CACD,CAWA,SAAgB,EAA6B,EAAgB,EAA4D,CACxH,IAAM,EAAuB,CAC5B,SAAU,GACV,OAAQ,GACR,KAAM,IACN,SAAU,MACV,GAAG,GAAS,oBACb,EAEA,MAAO,CACN,KAAM,EAAK,KAAA,EAAQ,EAAA,oBAAA,CAAoB,EAAU,CAAG,EAAG,EAAK,CAAM,EAClE,KAAM,EAAK,EAAO,EAAK,EAAK,KAAA,EAAkB,EAAA,qBAAA,CAAqB,EAAU,EAAK,CAAG,EAAG,EAAK,EAAO,EAAQ,CAAE,GAAG,EAAsB,GAAG,CAAc,CAAC,EACzJ,QAAS,EAAK,EAAK,EAAK,KAAA,EAAkB,EAAA,sBAAA,CAAsB,EAAU,EAAK,CAAG,EAAG,EAAK,CAAE,GAAG,EAAsB,GAAG,CAAc,CAAC,CACxI,CACD"}

package/dist/server/storages.mjs

@@ -1,2 +1,2 @@
-import{NextRequest as e,NextResponse as t}from"next/server";import{COOKIE_CHUNK_SIZE as n,COOKIE_CONTEXT as r}from"@strivacity/sdk-core/server";import{cookies as i}from"next/headers";import{buildCookieString as a}from"@strivacity/sdk-core/utils/common";import{decryptString as o,encryptString as s}from"@strivacity/sdk-core/utils/crypto";import{createSessionIdCookieStorage as c}from"@strivacity/sdk-core/storages/server";export*from"@strivacity/sdk-react/storages";function l(t,n){if(t instanceof e)return t.cookies.get(n)?.value??null;if(t instanceof Request){let e=(t.headers.get(`cookie`)??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return e?decodeURIComponent(e.slice(n.length+1)):null}let r=(t.headers?.cookie??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return r?decodeURIComponent(r.slice(n.length+1)):null}function u(e,n){return c({toRequest:e=>e,redirect:(e,n)=>t.redirect(e,n),getSessionId:async(e,t)=>t?l(t,e)??null:(await i()).get(e)?.value},e,n)}function d(e,c){let u={httpOnly:!0,secure:!0,path:`/`,sameSite:`lax`,...c?.defaultCookieOptions},d={async get(t,n){if(n){let i=l(n,t);if(i)return await o(i,e,r);let a=[];for(let e=0;;e++){let r=l(n,`${t}.${e}`);if(!r)break;a.push(r)}return a.length===0?null:await o(a.join(``),e,r)}{let n=await i(),a=n.get(t)?.value;if(a)return await o(a,e,r);let s=[];for(let e=0;;e++){let r=n.get(`${t}.${e}`)?.value;if(!r)break;s.push(r)}return s.length===0?null:await o(s.join(``),e,r)}},async set(o,c,l,f,p){p={...u,...p},await d.delete(o,l,f);let m=await s(c,e,r);if(f instanceof t){if(m.length<=n)f.cookies.set(o,m,p);else for(let e=0;e*n<m.length;e++)f.cookies.set(`${o}.${e}`,m.slice(e*n,(e+1)*n),p)}else if(f){let e=[];if(m.length<=n)e.push(a(o,m,p));else for(let t=0;t*n<m.length;t++)e.push(a(`${o}.${t}`,m.slice(t*n,(t+1)*n),p));let t=f.getHeader(`set-cookie`),r=Array.isArray(t)?t:t?[String(t)]:[];f.setHeader(`set-cookie`,[...r,...e])}else{let e=await i();if(m.length<=n)e.set(o,m,p);else for(let t=0;t*n<m.length;t++)e.set(`${o}.${t}`,m.slice(t*n,(t+1)*n),p)}},async delete(e,n,r,o){if(o={...u,...o,maxAge:0},r instanceof t){r.cookies.delete(e);for(let t=0;r.cookies.get(`${e}.${t}`);t++)r.cookies.delete(`${e}.${t}`)}else if(r){let t=[];if(t.push(a(e,``,o)),n)for(let r=0;l(n,`${e}.${r}`)!==null;r++)t.push(a(`${e}.${r}`,``,o));let i=r.getHeader(`set-cookie`),s=Array.isArray(i)?i:i?[String(i)]:[];r.setHeader(`set-cookie`,[...s,...t])}else{let t=await i();t.delete(e);for(let n=0;t.get(`${e}.${n}`);n++)t.delete(`${e}.${n}`)}}};return d}export{d as createEncryptedCookieStorage,u as createSessionIdCookieStorage};
+import{NextRequest as e,NextResponse as t}from"next/server";import{cookies as n}from"next/headers";import{buildCookieString as r}from"@strivacity/sdk-core/utils/common";import{createSessionIdCookieStorage as i,deleteEncryptedCookie as a,readEncryptedCookie as o,writeEncryptedCookie as s}from"@strivacity/sdk-core/storages/server";export*from"@strivacity/sdk-react/storages";function c(t,n){if(t instanceof e)return t.cookies.get(n)?.value??null;if(t instanceof Request){let e=(t.headers.get(`cookie`)??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return e?decodeURIComponent(e.slice(n.length+1)):null}let r=(t.headers?.cookie??``).split(`;`).map(e=>e.trim()).find(e=>e.startsWith(`${n}=`));return r?decodeURIComponent(r.slice(n.length+1)):null}function l(e,r){return i({toRequest:e=>e,redirect:(e,n)=>t.redirect(e,n),getSessionId:async(e,t)=>t?c(t,e)??null:(await n()).get(e)?.value},e,r)}function u(e,i){let a=(e,t)=>{let n=e.getHeader(`set-cookie`),r=Array.isArray(n)?n:n?[String(n)]:[];e.setHeader(`set-cookie`,[...r,t])};return{async get(r){return(e?c(e,r):null)||(i instanceof t?i.cookies.get(r)?.value:i||e?null:(await n()).get(r)?.value)},async set(e,o,s){i instanceof t?i.cookies.set(e,o,s):i?a(i,r(e,o,s)):(await n()).set(e,o,s)},async delete(e,o){i instanceof t?i.cookies.set(e,``,{...o,maxAge:0}):i?a(i,r(e,``,{...o,maxAge:0})):(await n()).delete(e)}}}function d(e,t){let n={httpOnly:!0,secure:!0,path:`/`,sameSite:`lax`,...t?.defaultCookieOptions};return{get:(t,n)=>o(u(n),t,e),set:(t,r,i,a,o)=>s(u(i,a),t,r,e,{...n,...o}),delete:(e,t,r,i)=>a(u(t,r),e,{...n,...i})}}export{d as createEncryptedCookieStorage,l as createSessionIdCookieStorage};
 //# sourceMappingURL=storages.mjs.map

package/dist/server/storages.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storages.mjs","names":[],"sources":["../../src/server/storages.ts"],"sourcesContent":["import type { NextServerStorage, PagesRouterRequest, SessionIdCookieStorageOptions, EncryptedCookieStorageOptions } from './types';\nimport { cookies } from 'next/headers';\nimport { NextRequest, NextResponse } from 'next/server';\nimport { buildCookieString } from '@strivacity/sdk-core/utils/common';\nimport { encryptString, decryptString } from '@strivacity/sdk-core/utils/crypto';\nimport { COOKIE_CONTEXT, COOKIE_CHUNK_SIZE } from '@strivacity/sdk-core/server';\nimport { createSessionIdCookieStorage as createSessionIdCookieStorageBase } from '@strivacity/sdk-core/storages/server';\n\nexport * from '@strivacity/sdk-react/storages';\n\n/**\n * Reads cookie value(s) for a given key directly from a NextRequest or PagesRouterRequest, without calling `cookies()` from next/headers.\n * Used for Pages Router / middleware support.\n *\n * @param req - The NextRequest or PagesRouterRequest object from which to read the cookie.\n * @param key - The name of the cookie to read.\n * @returns The cookie value as a string, or null if the cookie is not found.\n */\nfunction getCookieFromRequest(req: NextRequest | Request | PagesRouterRequest, key: string): string | null {\n\tif (req instanceof NextRequest) {\n\t\treturn req.cookies.get(key)?.value ?? null;\n\t}\n\n\tif (req instanceof Request) {\n\t\tconst cookieHeader = req.headers.get('cookie') ?? '';\n\t\tconst match = cookieHeader\n\t\t\t.split(';')\n\t\t\t.map((c) => c.trim())\n\t\t\t.find((c) => c.startsWith(`${key}=`));\n\n\t\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n\t}\n\n\tconst cookieHeader = req.headers?.cookie ?? '';\n\tconst match = cookieHeader\n\t\t.split(';')\n\t\t.map((c: string) => c.trim())\n\t\t.find((c: string) => c.startsWith(`${key}=`));\n\n\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n}\n\n/**\n * Creates a session storage that puts a random unique id value cookie on the client and keeping the actual session data in the given `storage`.\n *\n * @param {NextServerStorage} storage - The storage used to persist session data, keyed by a randomly generated session id.\n * @param {SessionIdCookieStorageOptions} [options] - Options for configuring the session-id cookie storage.\n * @returns {NextServerStorage} An object implementing the ServerStorage interface for managing sessions indexed by a session-id cookie.\n */\nexport function createSessionIdCookieStorage(storage: NextServerStorage, options?: SessionIdCookieStorageOptions): NextServerStorage {\n\treturn createSessionIdCookieStorageBase<NextRequest | Request | PagesRouterRequest>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t\tgetSessionId: async (key, req) => {\n\t\t\t\tif (req) {\n\t\t\t\t\treturn getCookieFromRequest(req, key) ?? null;\n\t\t\t\t}\n\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\treturn store.get(key)?.value;\n\t\t\t},\n\t\t},\n\t\tstorage,\n\t\toptions,\n\t);\n}\n\n/**\n * Creates an encrypted cookie session storage.\n * Only callable in server-side contexts (middleware, API routes, or server components).\n *\n * @param secret - The secret key used for encryption and decryption.\n * @param {EncryptedCookieStorageOptions} [options] - Options for configuring the encrypted cookie storage.\n * @param {Partial<ServerCookieOptions>} [options.defaultCookieOptions] - Default cookie attributes for the encrypted cookie.\n * @returns An object implementing the ServerStorage interface for managing encrypted cookies.\n */\nexport function createEncryptedCookieStorage(secret: string, options?: EncryptedCookieStorageOptions): NextServerStorage {\n\tconst defaultCookieOptions = {\n\t\thttpOnly: true,\n\t\tsecure: true,\n\t\tpath: '/',\n\t\tsameSite: 'lax' as const,\n\t\t...options?.defaultCookieOptions,\n\t};\n\n\tconst storage: NextServerStorage = {\n\t\tasync get(key, req) {\n\t\t\tif (req) {\n\t\t\t\tconst cookie = getCookieFromRequest(req, key);\n\n\t\t\t\tif (cookie) {\n\t\t\t\t\treturn await decryptString(cookie, secret, COOKIE_CONTEXT);\n\t\t\t\t}\n\n\t\t\t\tconst cookieChunks: Array<string> = [];\n\n\t\t\t\tfor (let i = 0; ; i++) {\n\t\t\t\t\tconst chunk = getCookieFromRequest(req, `${key}.${i}`);\n\n\t\t\t\t\tif (!chunk) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tcookieChunks.push(chunk);\n\t\t\t\t}\n\n\t\t\t\tif (cookieChunks.length === 0) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\n\t\t\t\treturn await decryptString(cookieChunks.join(''), secret, COOKIE_CONTEXT);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\t\t\t\tconst cookie = store.get(key)?.value;\n\n\t\t\t\tif (cookie) {\n\t\t\t\t\treturn await decryptString(cookie, secret, COOKIE_CONTEXT);\n\t\t\t\t}\n\n\t\t\t\tconst cookieChunks: Array<string> = [];\n\n\t\t\t\tfor (let i = 0; ; i++) {\n\t\t\t\t\tconst chunk = store.get(`${key}.${i}`)?.value;\n\n\t\t\t\t\tif (!chunk) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tcookieChunks.push(chunk);\n\t\t\t\t}\n\n\t\t\t\tif (cookieChunks.length === 0) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\n\t\t\t\treturn await decryptString(cookieChunks.join(''), secret, COOKIE_CONTEXT);\n\t\t\t}\n\t\t},\n\t\tasync set(key, value, req, res, cookieOptions) {\n\t\t\tcookieOptions = { ...defaultCookieOptions, ...cookieOptions };\n\n\t\t\t// NOTE: Delete existing cookie(s) first to avoid leaving old chunks behind\n\t\t\tawait storage.delete(key, req, res);\n\n\t\t\tconst encrypted = await encryptString(value, secret, COOKIE_CONTEXT);\n\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tres.cookies.set(key, encrypted, cookieOptions);\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tres.cookies.set(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else if (res) {\n\t\t\t\tconst setCookies: Array<string> = [];\n\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tsetCookies.push(buildCookieString(key, encrypted, cookieOptions));\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tsetCookies.push(buildCookieString(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst existing = res.getHeader('set-cookie');\n\t\t\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\t\t\tres.setHeader('set-cookie', [...existingArr, ...setCookies]);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\tif (encrypted.length <= COOKIE_CHUNK_SIZE) {\n\t\t\t\t\tstore.set(key, encrypted, cookieOptions);\n\t\t\t\t} else {\n\t\t\t\t\tfor (let i = 0; i * COOKIE_CHUNK_SIZE < encrypted.length; i++) {\n\t\t\t\t\t\tstore.set(`${key}.${i}`, encrypted.slice(i * COOKIE_CHUNK_SIZE, (i + 1) * COOKIE_CHUNK_SIZE), cookieOptions);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\tasync delete(key, req, res, cookieOptions) {\n\t\t\tcookieOptions = { ...defaultCookieOptions, ...cookieOptions, maxAge: 0 };\n\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.delete(key);\n\n\t\t\t\tfor (let i = 0; res.cookies.get(`${key}.${i}`); i++) {\n\t\t\t\t\tres.cookies.delete(`${key}.${i}`);\n\t\t\t\t}\n\t\t\t} else if (res) {\n\t\t\t\tconst setCookies: Array<string> = [];\n\n\t\t\t\tsetCookies.push(buildCookieString(key, '', cookieOptions));\n\n\t\t\t\tif (req) {\n\t\t\t\t\tfor (let i = 0; getCookieFromRequest(req, `${key}.${i}`) !== null; i++) {\n\t\t\t\t\t\tsetCookies.push(buildCookieString(`${key}.${i}`, '', cookieOptions));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst existing = res.getHeader('set-cookie');\n\t\t\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\t\t\tres.setHeader('set-cookie', [...existingArr, ...setCookies]);\n\t\t\t} else {\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\tstore.delete(key);\n\n\t\t\t\tfor (let i = 0; store.get(`${key}.${i}`); i++) {\n\t\t\t\t\tstore.delete(`${key}.${i}`);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n\n\treturn storage;\n}\n"],"mappings":"kdAkBA,SAAS,EAAqB,EAAiD,EAA4B,CAC1G,GAAI,aAAe,EAClB,OAAO,EAAI,QAAQ,IAAI,CAAG,CAAC,EAAE,OAAS,KAGvC,GAAI,aAAe,QAAS,CAE3B,IAAM,GADe,EAAI,QAAQ,IAAI,QAAQ,GAAK,GAAA,CAEhD,MAAM,GAAG,CAAC,CACV,IAAK,GAAM,EAAE,KAAK,CAAC,CAAC,CACpB,KAAM,GAAM,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAErC,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CAGA,IAAM,GADe,EAAI,SAAS,QAAU,GAAA,CAE1C,MAAM,GAAG,CAAC,CACV,IAAK,GAAc,EAAE,KAAK,CAAC,CAAC,CAC5B,KAAM,GAAc,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAE7C,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CASA,SAAgB,EAA6B,EAA4B,EAA4D,CACpI,OAAO,EACN,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAa,SAAS,EAAK,CAAM,EAC5D,aAAc,MAAO,EAAK,IACrB,EACI,EAAqB,EAAK,CAAG,GAAK,MAKnC,MAFa,EAAQ,EAAA,CAEf,IAAI,CAAG,CAAC,EAAE,KAEzB,EACA,EACA,CACD,CACD,CAWA,SAAgB,EAA6B,EAAgB,EAA4D,CACxH,IAAM,EAAuB,CAC5B,SAAU,GACV,OAAQ,GACR,KAAM,IACN,SAAU,MACV,GAAG,GAAS,oBACb,EAEM,EAA6B,CAClC,MAAM,IAAI,EAAK,EAAK,CACnB,GAAI,EAAK,CACR,IAAM,EAAS,EAAqB,EAAK,CAAG,EAE5C,GAAI,EACH,OAAO,MAAM,EAAc,EAAQ,EAAQ,CAAc,EAG1D,IAAM,EAA8B,CAAC,EAErC,IAAK,IAAI,EAAI,GAAK,IAAK,CACtB,IAAM,EAAQ,EAAqB,EAAK,GAAG,EAAI,GAAG,GAAG,EAErD,GAAI,CAAC,EACJ,MAGD,EAAa,KAAK,CAAK,CACxB,CAMA,OAJI,EAAa,SAAW,EACpB,KAGD,MAAM,EAAc,EAAa,KAAK,EAAE,EAAG,EAAQ,CAAc,CACzE,CAAO,CACN,IAAM,EAAQ,MAAM,EAAQ,EACtB,EAAS,EAAM,IAAI,CAAG,CAAC,EAAE,MAE/B,GAAI,EACH,OAAO,MAAM,EAAc,EAAQ,EAAQ,CAAc,EAG1D,IAAM,EAA8B,CAAC,EAErC,IAAK,IAAI,EAAI,GAAK,IAAK,CACtB,IAAM,EAAQ,EAAM,IAAI,GAAG,EAAI,GAAG,GAAG,CAAC,EAAE,MAExC,GAAI,CAAC,EACJ,MAGD,EAAa,KAAK,CAAK,CACxB,CAMA,OAJI,EAAa,SAAW,EACpB,KAGD,MAAM,EAAc,EAAa,KAAK,EAAE,EAAG,EAAQ,CAAc,CACzE,CACD,EACA,MAAM,IAAI,EAAK,EAAO,EAAK,EAAK,EAAe,CAC9C,EAAgB,CAAE,GAAG,EAAsB,GAAG,CAAc,EAG5D,MAAM,EAAQ,OAAO,EAAK,EAAK,CAAG,EAElC,IAAM,EAAY,MAAM,EAAc,EAAO,EAAQ,CAAc,EAEnE,GAAI,aAAe,EAAc,CAChC,GAAI,EAAU,QAAU,EACvB,EAAI,QAAQ,IAAI,EAAK,EAAW,CAAa,OAE7C,IAAK,IAAI,EAAI,EAAG,EAAI,EAAoB,EAAU,OAAQ,IACzD,EAAI,QAAQ,IAAI,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,GAAoB,EAAI,GAAK,CAAiB,EAAG,CAAa,CAGpH,MAAO,GAAI,EAAK,CACf,IAAM,EAA4B,CAAC,EAEnC,GAAI,EAAU,QAAU,EACvB,EAAW,KAAK,EAAkB,EAAK,EAAW,CAAa,CAAC,OAEhE,IAAK,IAAI,EAAI,EAAG,EAAI,EAAoB,EAAU,OAAQ,IACzD,EAAW,KAAK,EAAkB,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,GAAoB,EAAI,GAAK,CAAiB,EAAG,CAAa,CAAC,EAItI,IAAM,EAAW,EAAI,UAAU,YAAY,EACrC,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAI,UAAU,aAAc,CAAC,GAAG,EAAa,GAAG,CAAU,CAAC,CAC5D,KAAO,CACN,IAAM,EAAQ,MAAM,EAAQ,EAE5B,GAAI,EAAU,QAAU,EACvB,EAAM,IAAI,EAAK,EAAW,CAAa,OAEvC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAoB,EAAU,OAAQ,IACzD,EAAM,IAAI,GAAG,EAAI,GAAG,IAAK,EAAU,MAAM,EAAI,GAAoB,EAAI,GAAK,CAAiB,EAAG,CAAa,CAG9G,CACD,EACA,MAAM,OAAO,EAAK,EAAK,EAAK,EAAe,CAG1C,GAFA,EAAgB,CAAE,GAAG,EAAsB,GAAG,EAAe,OAAQ,CAAE,EAEnE,aAAe,EAAc,CAChC,EAAI,QAAQ,OAAO,CAAG,EAEtB,IAAK,IAAI,EAAI,EAAG,EAAI,QAAQ,IAAI,GAAG,EAAI,GAAG,GAAG,EAAG,IAC/C,EAAI,QAAQ,OAAO,GAAG,EAAI,GAAG,GAAG,CAElC,MAAO,GAAI,EAAK,CACf,IAAM,EAA4B,CAAC,EAInC,GAFA,EAAW,KAAK,EAAkB,EAAK,GAAI,CAAa,CAAC,EAErD,EACH,IAAK,IAAI,EAAI,EAAG,EAAqB,EAAK,GAAG,EAAI,GAAG,GAAG,IAAM,KAAM,IAClE,EAAW,KAAK,EAAkB,GAAG,EAAI,GAAG,IAAK,GAAI,CAAa,CAAC,EAIrE,IAAM,EAAW,EAAI,UAAU,YAAY,EACrC,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAI,UAAU,aAAc,CAAC,GAAG,EAAa,GAAG,CAAU,CAAC,CAC5D,KAAO,CACN,IAAM,EAAQ,MAAM,EAAQ,EAE5B,EAAM,OAAO,CAAG,EAEhB,IAAK,IAAI,EAAI,EAAG,EAAM,IAAI,GAAG,EAAI,GAAG,GAAG,EAAG,IACzC,EAAM,OAAO,GAAG,EAAI,GAAG,GAAG,CAE5B,CACD,CACD,EAEA,OAAO,CACR"}
+{"version":3,"file":"storages.mjs","names":[],"sources":["../../src/server/storages.ts"],"sourcesContent":["import type {\n\tCookieJar,\n\tCookieOptions,\n\tNextServerStorage,\n\tPagesRouterRequest,\n\tPagesRouterResponse,\n\tSessionIdCookieStorageOptions,\n\tEncryptedCookieStorageOptions,\n} from './types';\nimport { cookies } from 'next/headers';\nimport { NextRequest, NextResponse } from 'next/server';\nimport { buildCookieString } from '@strivacity/sdk-core/utils/common';\nimport {\n\tcreateSessionIdCookieStorage as createSessionIdCookieStorageBase,\n\treadEncryptedCookie,\n\twriteEncryptedCookie,\n\tdeleteEncryptedCookie,\n} from '@strivacity/sdk-core/storages/server';\n\nexport * from '@strivacity/sdk-react/storages';\n\n/**\n * Reads cookie value(s) for a given key directly from a NextRequest or PagesRouterRequest, without calling `cookies()` from next/headers.\n * Used for Pages Router / middleware support.\n *\n * @param req - The NextRequest or PagesRouterRequest object from which to read the cookie.\n * @param key - The name of the cookie to read.\n * @returns The cookie value as a string, or null if the cookie is not found.\n */\nfunction getCookieFromRequest(req: NextRequest | Request | PagesRouterRequest, key: string): string | null {\n\tif (req instanceof NextRequest) {\n\t\treturn req.cookies.get(key)?.value ?? null;\n\t}\n\n\tif (req instanceof Request) {\n\t\tconst cookieHeader = req.headers.get('cookie') ?? '';\n\t\tconst match = cookieHeader\n\t\t\t.split(';')\n\t\t\t.map((c) => c.trim())\n\t\t\t.find((c) => c.startsWith(`${key}=`));\n\n\t\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n\t}\n\n\tconst cookieHeader = req.headers?.cookie ?? '';\n\tconst match = cookieHeader\n\t\t.split(';')\n\t\t.map((c: string) => c.trim())\n\t\t.find((c: string) => c.startsWith(`${key}=`));\n\n\treturn match ? decodeURIComponent(match.slice(key.length + 1)) : null;\n}\n\n/**\n * Creates a session storage that puts a random unique id value cookie on the client and keeping the actual session data in the given `storage`.\n *\n * @param {NextServerStorage} storage - The storage used to persist session data, keyed by a randomly generated session id.\n * @param {SessionIdCookieStorageOptions} [options] - Options for configuring the session-id cookie storage.\n * @returns {NextServerStorage} An object implementing the ServerStorage interface for managing sessions indexed by a session-id cookie.\n */\nexport function createSessionIdCookieStorage(storage: NextServerStorage, options?: SessionIdCookieStorageOptions): NextServerStorage {\n\treturn createSessionIdCookieStorageBase<NextRequest | Request | PagesRouterRequest>(\n\t\t{\n\t\t\ttoRequest: (req) => req as Request,\n\t\t\tredirect: (url, status) => NextResponse.redirect(url, status),\n\t\t\tgetSessionId: async (key, req) => {\n\t\t\t\tif (req) {\n\t\t\t\t\treturn getCookieFromRequest(req, key) ?? null;\n\t\t\t\t}\n\n\t\t\t\tconst store = await cookies();\n\n\t\t\t\treturn store.get(key)?.value;\n\t\t\t},\n\t\t},\n\t\tstorage,\n\t\toptions,\n\t);\n}\n\n/**\n * Builds the cookie access for one storage call. Writes go to the given response (App Router `NextResponse` or Pages Router\n * `res`), or to `cookies()` from next/headers when there is none. Reads come from the request, then from the response.\n *\n * @param req - The incoming request, if any.\n * @param res - The outgoing response, if any.\n * @returns The cookie jar.\n */\nfunction createJar(req?: NextRequest | Request | PagesRouterRequest, res?: NextResponse | PagesRouterResponse): CookieJar<CookieOptions> {\n\tconst appendSetCookie = (response: PagesRouterResponse, cookie: string) => {\n\t\tconst existing = response.getHeader('set-cookie');\n\t\tconst existingArr = Array.isArray(existing) ? existing : existing ? [String(existing)] : [];\n\n\t\tresponse.setHeader('set-cookie', [...existingArr, cookie]);\n\t};\n\n\treturn {\n\t\tasync get(name) {\n\t\t\tconst fromRequest = req ? getCookieFromRequest(req, name) : null;\n\n\t\t\tif (fromRequest) {\n\t\t\t\treturn fromRequest;\n\t\t\t}\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\treturn res.cookies.get(name)?.value;\n\t\t\t}\n\t\t\tif (res || req) {\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\treturn (await cookies()).get(name)?.value;\n\t\t},\n\t\tasync set(name, value, cookieOptions) {\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.set(name, value, cookieOptions);\n\t\t\t} else if (res) {\n\t\t\t\tappendSetCookie(res, buildCookieString(name, value, cookieOptions));\n\t\t\t} else {\n\t\t\t\t(await cookies()).set(name, value, cookieOptions);\n\t\t\t}\n\t\t},\n\t\tasync delete(name, cookieOptions) {\n\t\t\tif (res instanceof NextResponse) {\n\t\t\t\tres.cookies.set(name, '', { ...cookieOptions, maxAge: 0 });\n\t\t\t} else if (res) {\n\t\t\t\tappendSetCookie(res, buildCookieString(name, '', { ...cookieOptions, maxAge: 0 }));\n\t\t\t} else {\n\t\t\t\t(await cookies()).delete(name);\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Creates an encrypted cookie session storage.\n * Only callable in server-side contexts (middleware, API routes, or server components).\n *\n * @param secret - The secret key used for encryption and decryption.\n * @param {EncryptedCookieStorageOptions} [options] - Options for configuring the encrypted cookie storage.\n * @param {Partial<ServerCookieOptions>} [options.defaultCookieOptions] - Default cookie attributes for the encrypted cookie.\n * @returns An object implementing the ServerStorage interface for managing encrypted cookies.\n */\nexport function createEncryptedCookieStorage(secret: string, options?: EncryptedCookieStorageOptions): NextServerStorage {\n\tconst defaultCookieOptions = {\n\t\thttpOnly: true,\n\t\tsecure: true,\n\t\tpath: '/',\n\t\tsameSite: 'lax' as const,\n\t\t...options?.defaultCookieOptions,\n\t};\n\n\treturn {\n\t\tget: (key, req) => readEncryptedCookie(createJar(req), key, secret),\n\t\tset: (key, value, req, res, cookieOptions) => writeEncryptedCookie(createJar(req, res), key, value, secret, { ...defaultCookieOptions, ...cookieOptions }),\n\t\tdelete: (key, req, res, cookieOptions) => deleteEncryptedCookie(createJar(req, res), key, { ...defaultCookieOptions, ...cookieOptions }),\n\t};\n}\n"],"mappings":"uXA6BA,SAAS,EAAqB,EAAiD,EAA4B,CAC1G,GAAI,aAAe,EAClB,OAAO,EAAI,QAAQ,IAAI,CAAG,CAAC,EAAE,OAAS,KAGvC,GAAI,aAAe,QAAS,CAE3B,IAAM,GADe,EAAI,QAAQ,IAAI,QAAQ,GAAK,GAAA,CAEhD,MAAM,GAAG,CAAC,CACV,IAAK,GAAM,EAAE,KAAK,CAAC,CAAC,CACpB,KAAM,GAAM,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAErC,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CAGA,IAAM,GADe,EAAI,SAAS,QAAU,GAAA,CAE1C,MAAM,GAAG,CAAC,CACV,IAAK,GAAc,EAAE,KAAK,CAAC,CAAC,CAC5B,KAAM,GAAc,EAAE,WAAW,GAAG,EAAI,EAAE,CAAC,EAE7C,OAAO,EAAQ,mBAAmB,EAAM,MAAM,EAAI,OAAS,CAAC,CAAC,EAAI,IAClE,CASA,SAAgB,EAA6B,EAA4B,EAA4D,CACpI,OAAO,EACN,CACC,UAAY,GAAQ,EACpB,UAAW,EAAK,IAAW,EAAa,SAAS,EAAK,CAAM,EAC5D,aAAc,MAAO,EAAK,IACrB,EACI,EAAqB,EAAK,CAAG,GAAK,MAKnC,MAFa,EAAQ,EAAA,CAEf,IAAI,CAAG,CAAC,EAAE,KAEzB,EACA,EACA,CACD,CACD,CAUA,SAAS,EAAU,EAAkD,EAAoE,CACxI,IAAM,GAAmB,EAA+B,IAAmB,CAC1E,IAAM,EAAW,EAAS,UAAU,YAAY,EAC1C,EAAc,MAAM,QAAQ,CAAQ,EAAI,EAAW,EAAW,CAAC,OAAO,CAAQ,CAAC,EAAI,CAAC,EAE1F,EAAS,UAAU,aAAc,CAAC,GAAG,EAAa,CAAM,CAAC,CAC1D,EAEA,MAAO,CACN,MAAM,IAAI,EAAM,CAaf,OAZoB,EAAM,EAAqB,EAAK,CAAI,EAAI,QAKxD,aAAe,EACX,EAAI,QAAQ,IAAI,CAAI,CAAC,EAAE,MAE3B,GAAO,EACH,MAGA,MAAM,EAAQ,EAAA,CAAG,IAAI,CAAI,CAAC,EAAE,MACrC,EACA,MAAM,IAAI,EAAM,EAAO,EAAe,CACjC,aAAe,EAClB,EAAI,QAAQ,IAAI,EAAM,EAAO,CAAa,EAChC,EACV,EAAgB,EAAK,EAAkB,EAAM,EAAO,CAAa,CAAC,GAEjE,MAAM,EAAQ,EAAA,CAAG,IAAI,EAAM,EAAO,CAAa,CAElD,EACA,MAAM,OAAO,EAAM,EAAe,CAC7B,aAAe,EAClB,EAAI,QAAQ,IAAI,EAAM,GAAI,CAAE,GAAG,EAAe,OAAQ,CAAE,CAAC,EAC/C,EACV,EAAgB,EAAK,EAAkB,EAAM,GAAI,CAAE,GAAG,EAAe,OAAQ,CAAE,CAAC,CAAC,GAEhF,MAAM,EAAQ,EAAA,CAAG,OAAO,CAAI,CAE/B,CACD,CACD,CAWA,SAAgB,EAA6B,EAAgB,EAA4D,CACxH,IAAM,EAAuB,CAC5B,SAAU,GACV,OAAQ,GACR,KAAM,IACN,SAAU,MACV,GAAG,GAAS,oBACb,EAEA,MAAO,CACN,KAAM,EAAK,IAAQ,EAAoB,EAAU,CAAG,EAAG,EAAK,CAAM,EAClE,KAAM,EAAK,EAAO,EAAK,EAAK,IAAkB,EAAqB,EAAU,EAAK,CAAG,EAAG,EAAK,EAAO,EAAQ,CAAE,GAAG,EAAsB,GAAG,CAAc,CAAC,EACzJ,QAAS,EAAK,EAAK,EAAK,IAAkB,EAAsB,EAAU,EAAK,CAAG,EAAG,EAAK,CAAE,GAAG,EAAsB,GAAG,CAAc,CAAC,CACxI,CACD"}

package/dist/server/types.d.ts

@@ -81,9 +81,17 @@ export type NextServerStorage = SDKStorage<[
 ]> & {
     deleteByLogoutToken?(token: LogoutTokenClaims): Promise<void>;
 };
-export type NextServerSDKOptions<Storage extends NextServerStorage = NextServerStorage, StateStorage extends SDKStorage = SDKStorage> = ServerSDKOptions<Storage, StateStorage>;
-export type NextServerSDKInitConfig<Storage extends NextServerStorage = NextServerStorage, StateStorage extends SDKStorage = SDKStorage> = ServerSDKInitConfig & Partial<NextServerSDKOptions<Storage, StateStorage>>;
-export type NextServerSDK<TEvent extends NextRequest | Request | PagesRouterRequest | undefined = NextRequest | Request | PagesRouterRequest | undefined> = BaseServerSDK<TEvent> & {
+export type NextServerSDKOptions<Storage extends NextServerStorage = NextServerStorage, StateStorage extends SDKStorage = SDKStorage> = ServerSDKOptions<NextRequest | Request | PagesRouterRequest | undefined, Storage, StateStorage>;
+export type NextServerSDKInitConfig<Storage extends NextServerStorage = NextServerStorage, StateStorage extends SDKStorage = SDKStorage> = ServerSDKInitConfig<NextRequest | Request | PagesRouterRequest | undefined> & Partial<NextServerSDKOptions<Storage, StateStorage>>;
+export type NextServerSDK<TEvent extends NextRequest | Request | PagesRouterRequest | undefined = NextRequest | Request | PagesRouterRequest | undefined> = Omit<BaseServerSDK<TEvent>, 'handler'> & {
+    /**
+     * Dispatches an incoming request to the matching auth route handler based on `authUrlPrefix`, or answers `404 Not Found`
+     * if no auth route matched. Export it as `GET` and `POST` from the `app/auth/[...strivacity]/route.ts` catch-all route.
+     *
+     * @param {TEvent} req - The incoming request.
+     * @returns {Promise<Response>} The handler's response.
+     */
+    handler(req: TEvent): Promise<Response>;
     /**
      * Wraps a React component with an authentication guard. If the user is not authenticated, they will be redirected to the login page.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strivacity/sdk-next",
-  "version": "4.0.0-beta.1",
+  "version": "4.0.0-beta.2",
   "description": "Strivacity Next.js SDK client",
   "license": "MIT",
   "author": "strivacity <opensource@strivacity.com>",
@@ -9,15 +9,9 @@
     "url": "https://github.com/Strivacity/sdk-js"
   },
   "sideEffects": false,
-  "main": "./dist/client.cjs",
-  "types": "./dist/types.d.ts",
+  "main": "./dist/client/index.cjs",
+  "types": "./dist/client/index.d.ts",
   "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.cjs",
-      "default": "./dist/index.mjs"
-    },
     "./client": {
       "types": "./dist/client/index.d.ts",
       "import": "./dist/client/index.mjs",
@@ -56,8 +50,8 @@
     }
   },
   "dependencies": {
-    "@strivacity/sdk-core": "4.0.0-beta.1",
-    "@strivacity/sdk-react": "4.0.0-beta.1"
+    "@strivacity/sdk-core": "4.0.0-beta.2",
+    "@strivacity/sdk-react": "4.0.0-beta.2"
   },
   "peerDependencies": {
     "next": ">=15"

package/testing/tests/client/components.spec.ts

@@ -1,10 +0,0 @@
-import { test, expect } from 'vitest';
-import * as nextComponents from '../../../src/client/components';
-import * as reactComponents from '@strivacity/sdk-react/components';
-
-test('re-exports components from the react sdk', () => {
-	const reactKeys = Object.keys(reactComponents);
-
-	expect(reactKeys.length).toBeGreaterThan(0);
-	expect(Object.keys(nextComponents).sort()).toEqual(reactKeys.sort());
-});

package/testing/tests/client/hooks.spec.ts

@@ -1,10 +0,0 @@
-import { test, expect } from 'vitest';
-import * as nextHooks from '../../../src/client/hooks';
-import * as reactHooks from '@strivacity/sdk-react/hooks';
-
-test('re-exports hooks from the react sdk', () => {
-	const reactKeys = Object.keys(reactHooks);
-
-	expect(reactKeys.length).toBeGreaterThan(0);
-	expect(Object.keys(nextHooks).sort()).toEqual(reactKeys.sort());
-});

package/testing/tests/client/index.spec.ts

@@ -1,106 +0,0 @@
-import { test, expect } from 'vitest';
-import * as clientIndex from '../../../src/client/index';
-
-test('should export the correct things', () => {
-	const expectedExports = [
-		'AlgorithmTypeList',
-		'BACKCHANNEL_LOGOUT_EVENT',
-		'COOKIE_CHUNK_SIZE',
-		'COOKIE_CONTEXT',
-		'ConfigurationError',
-		'DEFAULT_COOKIE_MAX_AGE',
-		'DISALLOWED_PROXY_HEADERS',
-		'FallbackError',
-		'GrantTypeList',
-		'InternalError',
-		'NetworkError',
-		'OidcError',
-		'PopupBlockedError',
-		'PopupClosedError',
-		'ProtocolError',
-		'RETURN_TO_COOKIE',
-		'ResponseModeList',
-		'ResponseTypeList',
-		'STRIVACITY_SDK',
-		'ServerError',
-		'SessionExpiredError',
-		'StyAuthProvider',
-		'SubjectTypeList',
-		'TokenEndpointAuthMethodList',
-		'UnsupportedFlowError',
-		'assertWebAuthnCredential',
-		'buildAuthorizationUrl',
-		'buildCookieString',
-		'buildEndSessionUrl',
-		'createBaseFlow',
-		'createCacheAPIStorage',
-		'createDefaultLogging',
-		'createEmbeddedFlow',
-		'createEncryptedCookieStorage',
-		'createHttpClient',
-		'createIndexedDBStorage',
-		'createLocalStorage',
-		'createMemoryStorage',
-		'createNativeFlow',
-		'createPopupFlow',
-		'createRedirectFlow',
-		'createServerMemoryStorage',
-		'createServerStateStorage',
-		'createSession',
-		'createSessionIdCookieStorage',
-		'createSessionStorage',
-		'createState',
-		'createWebAuthnCredential',
-		'createWorkerStorage',
-		'decodeBase64URL',
-		'decodeJwt',
-		'decryptString',
-		'defaultOptions',
-		'encodeBase64URL',
-		'encryptString',
-		'exchangeCode',
-		'fetchFlowEntry',
-		'finalizeLoginSession',
-		'flushSetCookies',
-		'generateCodeChallenge',
-		'generateCodeVerifier',
-		'generateJwt',
-		'generateRandomHex',
-		'getDefaultFlowState',
-		'getDiscoveryDocument',
-		'getSDKOptions',
-		'getServerSDKOptions',
-		'handleWorkerStorageRequests',
-		'injectScript',
-		'isSessionExpired',
-		'loadSession',
-		'parseCookieHeader',
-		'parseState',
-		'popupCallbackHandler',
-		'popupUrlHandler',
-		'proxyResponse',
-		'pushSetCookie',
-		'redirectCallbackHandler',
-		'redirectUrlHandler',
-		'refreshToken',
-		'revokeToken',
-		'serializeCookie',
-		'serializeSession',
-		'serializeState',
-		'submitLoginForm',
-		'throwHttpError',
-		'throwTokenEndpointError',
-		'timestamp',
-		'toSafeRedirect',
-		'unflattenObject',
-		'useNativeLogin',
-		'useNativeLoginContext',
-		'useStrivacity',
-		'verifyIdToken',
-		'verifyJwt',
-		'withAuthGuard',
-	];
-
-	expect(Object.keys(clientIndex)).toHaveLength(expectedExports.length);
-	expect(Object.keys(clientIndex).sort()).toEqual(expectedExports.sort());
-});

package/testing/tests/client/storages.spec.ts

@@ -1,10 +0,0 @@
-import { test, expect } from 'vitest';
-import * as nextStorages from '../../../src/client/storages';
-import * as reactStorages from '@strivacity/sdk-react/storages';
-
-test('re-exports storages from the react sdk', () => {
-	const reactKeys = Object.keys(reactStorages);
-
-	expect(reactKeys.length).toBeGreaterThan(0);
-	expect(Object.keys(nextStorages).sort()).toEqual(reactKeys.sort());
-});

package/testing/tests/client/utils.spec.ts

@@ -1,10 +0,0 @@
-import { test, expect } from 'vitest';
-import * as nextUtils from '../../../src/client/utils';
-import * as reactUtils from '@strivacity/sdk-react/utils';
-
-test('re-exports utilities from the react sdk', () => {
-	const reactKeys = Object.keys(reactUtils);
-
-	expect(reactKeys.length).toBeGreaterThan(0);
-	expect(Object.keys(nextUtils).sort()).toEqual(reactKeys.sort());
-});

package/testing/tests/server/handlers/api.spec.ts

@@ -1,110 +0,0 @@
-import type { Mock } from 'vitest';
-import { describe, test, expect, vi } from 'vitest';
-import { NextRequest, NextResponse } from 'next/server';
-import { createMockBaseServerSDK } from '@strivacity/testing/mocks/sdk';
-import { apiAppRouteHandlerFactory, apiPageRouteHandlerFactory } from '../../../../src/server/handlers/api';
-import type { BaseServerSDK, PagesRouterRequest } from '../../../../src/server/types';
-
-describe('apiAppRouteHandlerFactory', () => {
-	test('returns a 401 response and does not call the route when there is no session', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>();
-		const apiRoute = vi.fn();
-		const handler = apiAppRouteHandlerFactory(sdk)(apiRoute);
-
-		const response = await handler(new NextRequest('https://brandtegrity.io/api/secret'), {});
-
-		expect(response.status).toBe(401);
-		await expect(response.json()).resolves.toEqual({
-			error: 'not_authenticated',
-			description: 'The user does not have an active session or is not authenticated',
-		});
-		expect(apiRoute).not.toHaveBeenCalled();
-	});
-
-	test('calls the route with the request and params when there is a session', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>({ getSession: vi.fn().mockResolvedValue({}) });
-		const apiRoute = vi.fn().mockResolvedValue(NextResponse.json({ ok: true }));
-		const handler = apiAppRouteHandlerFactory(sdk)(apiRoute);
-		const req = new NextRequest('https://brandtegrity.io/api/secret');
-		const params = { params: Promise.resolve({ id: '1' }) };
-
-		await handler(req, params);
-
-		expect(apiRoute).toHaveBeenCalledWith(req, params);
-		expect(sdk.getSession).toHaveBeenCalledWith(req);
-	});
-
-	test('returns the route NextResponse unchanged', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>({ getSession: vi.fn().mockResolvedValue({}) });
-		const routeResponse = NextResponse.json({ ok: true });
-		const apiRoute = vi.fn().mockResolvedValue(routeResponse);
-		const handler = apiAppRouteHandlerFactory(sdk)(apiRoute);
-
-		const response = await handler(new NextRequest('https://brandtegrity.io/api/secret'), {});
-
-		expect(response).toBe(routeResponse);
-	});
-
-	test('wraps a plain Response returned by the route into a NextResponse', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>({ getSession: vi.fn().mockResolvedValue({}) });
-		const apiRoute = vi.fn().mockResolvedValue(new Response('plain body', { status: 201, headers: { 'x-custom': 'yes' } }));
-		const handler = apiAppRouteHandlerFactory(sdk)(apiRoute);
-
-		const response = await handler(new NextRequest('https://brandtegrity.io/api/secret'), {});
-
-		expect(response).toBeInstanceOf(NextResponse);
-		expect(response.status).toBe(201);
-		expect(response.headers.get('x-custom')).toBe('yes');
-		await expect(response.text()).resolves.toBe('plain body');
-	});
-
-	test('converts a plain Request to a NextRequest before checking the session and calling the route', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>({ getSession: vi.fn().mockResolvedValue({}) });
-		const apiRoute = vi.fn().mockResolvedValue(NextResponse.json({ ok: true }));
-		const handler = apiAppRouteHandlerFactory(sdk)(apiRoute);
-		const req = new Request('https://brandtegrity.io/api/secret');
-
-		await handler(req, {});
-
-		const usedRequest = (sdk.getSession as Mock).mock.calls[0][0] as NextRequest;
-		expect(usedRequest).toBeInstanceOf(NextRequest);
-		expect(usedRequest.url).toBe(req.url);
-		expect(apiRoute).toHaveBeenCalledWith(usedRequest, {});
-	});
-});
-
-describe('apiPageRouteHandlerFactory', () => {
-	function createFakeRes() {
-		const json = vi.fn();
-		const status = vi.fn().mockReturnValue({ json });
-
-		return { status, json };
-	}
-
-	test('responds with 401 and does not call the route when there is no session', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>();
-		const apiRoute = vi.fn();
-		const handler = apiPageRouteHandlerFactory(sdk)(apiRoute);
-		const req = {} as PagesRouterRequest;
-		const res = createFakeRes();
-
-		await handler(req, res as never);
-
-		expect(res.status).toHaveBeenCalledWith(401);
-		expect(res.json).toHaveBeenCalledWith({ error: 'not_authenticated', description: 'The user does not have an active session or is not authenticated' });
-		expect(apiRoute).not.toHaveBeenCalled();
-	});
-
-	test('calls the route with the request and response when there is a session', async () => {
-		const sdk = createMockBaseServerSDK<BaseServerSDK<NextRequest | Request | PagesRouterRequest | undefined>>({ getSession: vi.fn().mockResolvedValue({}) });
-		const apiRoute = vi.fn();
-		const handler = apiPageRouteHandlerFactory(sdk)(apiRoute);
-		const req = {} as PagesRouterRequest;
-		const res = createFakeRes();
-
-		await handler(req, res as never);
-
-		expect(apiRoute).toHaveBeenCalledWith(req, res);
-		expect(res.status).not.toHaveBeenCalled();
-	});
-});