@tern-secure/nextjs 4.2.10 → 5.0.0

package/dist/esm/app-router/client/actions.js

@@ -1,159 +1,3 @@
-import { TernSecureAuth } from "../../utils/client-init";
-import {
-  signInWithEmailAndPassword,
-  signInWithRedirect,
-  getRedirectResult,
-  GoogleAuthProvider,
-  OAuthProvider,
-  createUserWithEmailAndPassword,
-  sendEmailVerification
-} from "firebase/auth";
-import { handleFirebaseAuthError } from "../../errors";
-async function createUser(email, password) {
-  const auth = TernSecureAuth();
-  try {
-    const actionCodeSettings = {
-      url: `${window.location.origin}/sign-in`,
-      handleCodeInApp: true
-    };
-    const userCredential = await createUserWithEmailAndPassword(auth, email, password);
-    await sendEmailVerification(userCredential.user, actionCodeSettings);
-    return {
-      success: true,
-      message: "Account created successfully. Please check your email for verification",
-      user: userCredential.user
-    };
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
+{
 }
-async function signInWithEmail(email, password) {
-  const auth = TernSecureAuth();
-  try {
-    const UserCredential = await signInWithEmailAndPassword(auth, email, password);
-    const user = UserCredential.user;
-    return {
-      success: true,
-      message: "Authentication successful",
-      user,
-      error: !user.emailVerified ? "REQUIRES_VERIFICATION" : "AUTHENTICATED"
-    };
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
-}
-async function signInWithRedirectGoogle() {
-  const auth = TernSecureAuth();
-  const provider = new GoogleAuthProvider();
-  provider.setCustomParameters({
-    login_hint: "user@example.com",
-    prompt: "select_account"
-  });
-  try {
-    await signInWithRedirect(auth, provider);
-    return { success: true, message: "Redirect initiated" };
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
-}
-async function signInWithMicrosoft() {
-  const auth = TernSecureAuth();
-  const provider = new OAuthProvider("microsoft.com");
-  provider.setCustomParameters({
-    prompt: "consent"
-  });
-  try {
-    await signInWithRedirect(auth, provider);
-    return { success: true, message: "Redirect initiated" };
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
-}
-async function handleAuthRedirectResult() {
-  const auth = TernSecureAuth();
-  try {
-    const result = await getRedirectResult(auth);
-    if (result) {
-      const user = result.user;
-      return { success: true, user };
-    } else {
-      return { success: false, error: "No redirect result" };
-    }
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
-}
-async function resendEmailVerification() {
-  const auth = TernSecureAuth();
-  try {
-    const user = auth.currentUser;
-    if (!user) {
-      throw new Error("No user found. Please try signing up again.");
-    }
-    await user.reload();
-    if (user.emailVerified) {
-      return {
-        success: true,
-        message: "Email is already verified. You can sign in.",
-        isVerified: true
-      };
-    }
-    const actionCodeSettings = {
-      url: `${window.location.origin}/sign-in`,
-      handleCodeInApp: true
-    };
-    await sendEmailVerification(user, actionCodeSettings);
-    return {
-      success: true,
-      message: "Verification email sent successfully.",
-      isVerified: false
-    };
-  } catch (error) {
-    const authError = handleFirebaseAuthError(error);
-    return {
-      success: false,
-      message: authError.message,
-      error: authError.code,
-      user: null
-    };
-  }
-}
-export {
-  createUser,
-  handleAuthRedirectResult,
-  resendEmailVerification,
-  signInWithEmail,
-  signInWithMicrosoft,
-  signInWithRedirectGoogle
-};
 //# sourceMappingURL=actions.js.map

package/dist/esm/app-router/client/actions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/client/actions.ts"],"sourcesContent":["import { TernSecureAuth } from '../../utils/client-init'\nimport { \n  signInWithEmailAndPassword, \n  signInWithRedirect, \n  getRedirectResult, \n  GoogleAuthProvider, \n  OAuthProvider, \n  createUserWithEmailAndPassword, \n  sendEmailVerification } from 'firebase/auth'\nimport type { SignInResponse } from '../../types'\nimport { handleFirebaseAuthError } from '../../errors'\n\n\nexport async function createUser(email: string, password: string): Promise<SignInResponse> {\n  const auth = TernSecureAuth()\n  try {\n    \n    const actionCodeSettings = {\n      url: `${window.location.origin}/sign-in`,\n      handleCodeInApp: true\n    };\n\n    const userCredential = await createUserWithEmailAndPassword(auth, email, password);\n\n    await sendEmailVerification(userCredential.user, actionCodeSettings)\n    \n    return { \n      success: true, \n      message: 'Account created successfully. Please check your email for verification', \n      user: userCredential.user \n    };\n\n  } catch (error) {\n    const authError = handleFirebaseAuthError(error)\n    return { \n      success: false, \n      message: authError.message, \n      error: authError.code,\n      user: null\n     }\n  }\n}\n\n\nexport async function signInWithEmail(email: string, password: string): Promise<SignInResponse> {\n  const auth = TernSecureAuth()\n  try {\n  const UserCredential = await signInWithEmailAndPassword(auth, email, password)\n  const user = UserCredential.user\n  \n  return { \n    success: true, \n    message: 'Authentication successful',\n    user: user,\n    error: !user.emailVerified ? 'REQUIRES_VERIFICATION' : 'AUTHENTICATED'\n  };\n\n} catch (error){\n  const authError = handleFirebaseAuthError(error)\n  return { \n    success: false,\n    message: authError.message,\n    error: authError.code,\n    user: null\n  }\n}\n}\n\nexport async function signInWithRedirectGoogle() {\n  const auth = TernSecureAuth()\n  const provider = new GoogleAuthProvider()\n  provider.setCustomParameters({\n    login_hint: 'user@example.com',\n    prompt: 'select_account'\n  })\n\n  try {\n    await signInWithRedirect(auth, provider)\n    return { success: true, message: 'Redirect initiated' }\n  } catch (error) {\n    const authError = handleFirebaseAuthError(error)\n    return {\n      success: false,\n      message: authError.message,\n      error: authError.code,\n      user: null\n    }\n  }\n}\n\n\nexport async function signInWithMicrosoft() {\n  const auth = TernSecureAuth()\n  const provider = new OAuthProvider('microsoft.com')\n  provider.setCustomParameters({\n    prompt: 'consent'\n  })\n\n  try {\n    await signInWithRedirect(auth, provider)\n    return { success: true, message: 'Redirect initiated' }\n  } catch (error) {\n    const authError = handleFirebaseAuthError(error)\n    return {\n      success: false, \n      message: authError.message,\n      error: authError.code,\n      user: null\n    }\n  }\n}\n\n\nexport async function handleAuthRedirectResult() {\n  const auth = TernSecureAuth()\n  try {\n    const result = await getRedirectResult(auth)\n    if (result) {\n      const user = result.user\n      return { success: true, user }\n    } else {\n      return { success: false, error: 'No redirect result' }\n    }\n  } catch (error: any) {\n    const authError = handleFirebaseAuthError(error)\n    return {\n      success: false,\n      message: authError.message,\n      error: authError.code,\n      user: null\n    }\n  }\n}\n\n\nexport async function resendEmailVerification() {\n  const auth = TernSecureAuth()\n  try {\n    const user = auth.currentUser;\n    if (!user) {\n      throw new Error('No user found. Please try signing up again.');\n    }\n\n    await user.reload();\n\n    if (user.emailVerified) {\n      return { \n        success: true, \n        message: 'Email is already verified. You can sign in.',\n        isVerified: true \n      };\n    }\n\n    const actionCodeSettings = {\n      url: `${window.location.origin}/sign-in`,\n      handleCodeInApp: true,\n    };\n\n    await sendEmailVerification(user, actionCodeSettings);\n    return { \n      success: true, \n      message: 'Verification email sent successfully.',\n      isVerified: false\n     };\n    } catch (error) {\n      const authError = handleFirebaseAuthError(error)\n      return {\n        success: false,\n        message: authError.message,\n        error: authError.code,\n        user: null\n      }\n    }\n}"],"mappings":"AAAA,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAA6B;AAE/B,SAAS,+BAA+B;AAGxC,eAAsB,WAAW,OAAe,UAA2C;AACzF,QAAM,OAAO,eAAe;AAC5B,MAAI;AAEF,UAAM,qBAAqB;AAAA,MACzB,KAAK,GAAG,OAAO,SAAS,MAAM;AAAA,MAC9B,iBAAiB;AAAA,IACnB;AAEA,UAAM,iBAAiB,MAAM,+BAA+B,MAAM,OAAO,QAAQ;AAEjF,UAAM,sBAAsB,eAAe,MAAM,kBAAkB;AAEnE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS;AAAA,MACT,MAAM,eAAe;AAAA,IACvB;AAAA,EAEF,SAAS,OAAO;AACd,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACP;AAAA,EACH;AACF;AAGA,eAAsB,gBAAgB,OAAe,UAA2C;AAC9F,QAAM,OAAO,eAAe;AAC5B,MAAI;AACJ,UAAM,iBAAiB,MAAM,2BAA2B,MAAM,OAAO,QAAQ;AAC7E,UAAM,OAAO,eAAe;AAE5B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA,OAAO,CAAC,KAAK,gBAAgB,0BAA0B;AAAA,IACzD;AAAA,EAEF,SAAS,OAAM;AACb,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,EACF;AACA;AAEA,eAAsB,2BAA2B;AAC/C,QAAM,OAAO,eAAe;AAC5B,QAAM,WAAW,IAAI,mBAAmB;AACxC,WAAS,oBAAoB;AAAA,IAC3B,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV,CAAC;AAED,MAAI;AACF,UAAM,mBAAmB,MAAM,QAAQ;AACvC,WAAO,EAAE,SAAS,MAAM,SAAS,qBAAqB;AAAA,EACxD,SAAS,OAAO;AACd,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAGA,eAAsB,sBAAsB;AAC1C,QAAM,OAAO,eAAe;AAC5B,QAAM,WAAW,IAAI,cAAc,eAAe;AAClD,WAAS,oBAAoB;AAAA,IAC3B,QAAQ;AAAA,EACV,CAAC;AAED,MAAI;AACF,UAAM,mBAAmB,MAAM,QAAQ;AACvC,WAAO,EAAE,SAAS,MAAM,SAAS,qBAAqB;AAAA,EACxD,SAAS,OAAO;AACd,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAGA,eAAsB,2BAA2B;AAC/C,QAAM,OAAO,eAAe;AAC5B,MAAI;AACF,UAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,QAAI,QAAQ;AACV,YAAM,OAAO,OAAO;AACpB,aAAO,EAAE,SAAS,MAAM,KAAK;AAAA,IAC/B,OAAO;AACL,aAAO,EAAE,SAAS,OAAO,OAAO,qBAAqB;AAAA,IACvD;AAAA,EACF,SAAS,OAAY;AACnB,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAGA,eAAsB,0BAA0B;AAC9C,QAAM,OAAO,eAAe;AAC5B,MAAI;AACF,UAAM,OAAO,KAAK;AAClB,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AAEA,UAAM,KAAK,OAAO;AAElB,QAAI,KAAK,eAAe;AACtB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY;AAAA,MACd;AAAA,IACF;AAEA,UAAM,qBAAqB;AAAA,MACzB,KAAK,GAAG,OAAO,SAAS,MAAM;AAAA,MAC9B,iBAAiB;AAAA,IACnB;AAEA,UAAM,sBAAsB,MAAM,kBAAkB;AACpD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS;AAAA,MACT,YAAY;AAAA,IACb;AAAA,EACD,SAAS,OAAO;AACd,UAAM,YAAY,wBAAwB,KAAK;AAC/C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,EACF;AACJ;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/client/actions.ts"],"sourcesContent":["{/*import { TernSecureAuth } from '../../utils/client-init'\r\nimport { \r\n  signInWithEmailAndPassword, \r\n  signInWithRedirect, \r\n  getRedirectResult, \r\n  GoogleAuthProvider, \r\n  OAuthProvider, \r\n  createUserWithEmailAndPassword, \r\n  sendEmailVerification \r\n} from 'firebase/auth'\r\nimport type { SignInResponse } from '@tern-secure/types'\r\nimport { handleFirebaseAuthError } from '@tern-secure/types'\r\n\r\n\r\nexport async function createUser(email: string, password: string): Promise<SignInResponse> {\r\n  const auth = TernSecureAuth()\r\n  \r\n  try {\r\n    \r\n    const actionCodeSettings = {\r\n      url: `${window.location.origin}/sign-in`,\r\n      handleCodeInApp: true\r\n    };\r\n\r\n    const userCredential = await createUserWithEmailAndPassword(auth, email, password);\r\n\r\n    await sendEmailVerification(userCredential.user, actionCodeSettings)\r\n    \r\n    return { \r\n      success: true, \r\n      message: 'Account created successfully. Please check your email for verification', \r\n      user: userCredential.user \r\n    };\r\n\r\n  } catch (error) {\r\n    const authError = handleFirebaseAuthError(error)\r\n    return { \r\n      success: false, \r\n      message: authError.message, \r\n      error: authError.code,\r\n      user: null\r\n     }\r\n  }\r\n}\r\n\r\n\r\nexport async function signInWithEmail(email: string, password: string): Promise<SignInResponse> {\r\n  const auth = TernSecureAuth()\r\n  try {\r\n  const UserCredential = await signInWithEmailAndPassword(auth, email, password)\r\n  const user = UserCredential.user\r\n  \r\n  return { \r\n    success: true, \r\n    message: 'Authentication successful',\r\n    user: user,\r\n    error: !user.emailVerified ? 'REQUIRES_VERIFICATION' : 'AUTHENTICATED'\r\n  };\r\n\r\n} catch (error){\r\n  const authError = handleFirebaseAuthError(error)\r\n  return { \r\n    success: false,\r\n    message: authError.message,\r\n    error: authError.code,\r\n    user: null\r\n  }\r\n}\r\n}\r\n\r\nexport async function signInWithRedirectGoogle() {\r\n  const auth = TernSecureAuth()\r\n  const provider = new GoogleAuthProvider()\r\n  provider.setCustomParameters({\r\n    login_hint: 'user@example.com',\r\n    prompt: 'select_account'\r\n  })\r\n\r\n  try {\r\n    await signInWithRedirect(auth, provider)\r\n    return { success: true, message: 'Redirect initiated' }\r\n  } catch (error) {\r\n    const authError = handleFirebaseAuthError(error)\r\n    return {\r\n      success: false,\r\n      message: authError.message,\r\n      error: authError.code,\r\n      user: null\r\n    }\r\n  }\r\n}\r\n\r\n\r\nexport async function signInWithMicrosoft() {\r\n  const auth = TernSecureAuth()\r\n  const provider = new OAuthProvider('microsoft.com')\r\n  provider.setCustomParameters({\r\n    prompt: 'consent'\r\n  })\r\n\r\n  try {\r\n    await signInWithRedirect(auth, provider)\r\n    return { success: true, message: 'Redirect initiated' }\r\n  } catch (error) {\r\n    const authError = handleFirebaseAuthError(error)\r\n    return {\r\n      success: false, \r\n      message: authError.message,\r\n      error: authError.code,\r\n      user: null\r\n    }\r\n  }\r\n}\r\n\r\n\r\nexport async function handleAuthRedirectResult() {\r\n  const auth = TernSecureAuth()\r\n  try {\r\n    const result = await getRedirectResult(auth)\r\n    if (result) {\r\n      const user = result.user\r\n      return { success: true, user }\r\n    } else {\r\n      return { success: false, error: 'No redirect result' }\r\n    }\r\n  } catch (error: any) {\r\n    const authError = handleFirebaseAuthError(error)\r\n    return {\r\n      success: false,\r\n      message: authError.message,\r\n      error: authError.code,\r\n      user: null\r\n    }\r\n  }\r\n}\r\n\r\n\r\nexport async function resendEmailVerification() {\r\n  const auth = TernSecureAuth()\r\n  try {\r\n    const user = auth.currentUser;\r\n    if (!user) {\r\n      throw new Error('No user found. Please try signing up again.');\r\n    }\r\n\r\n    await user.reload();\r\n\r\n    if (user.emailVerified) {\r\n      return { \r\n        success: true, \r\n        message: 'Email is already verified. You can sign in.',\r\n        isVerified: true \r\n      };\r\n    }\r\n\r\n    const actionCodeSettings = {\r\n      url: `${window.location.origin}/sign-in`,\r\n      handleCodeInApp: true,\r\n    };\r\n\r\n    await sendEmailVerification(user, actionCodeSettings);\r\n    return { \r\n      success: true, \r\n      message: 'Verification email sent successfully.',\r\n      isVerified: false\r\n     };\r\n    } catch (error) {\r\n      const authError = handleFirebaseAuthError(error)\r\n      return {\r\n        success: false,\r\n        message: authError.message,\r\n        error: authError.code,\r\n        user: null\r\n      }\r\n    }\r\n}*/}"],"mappings":"AAAA;AA+KG;","names":[]}

package/dist/esm/app-router/route-handler/internal-route.js

@@ -1,34 +1,9 @@
-import { Verify } from "../../components/verify";
-const internalRoutes = {
-  signUpVerify: {
-    pattern: /^\/sign-up\/verify$/,
-    component: Verify
-  },
-  signInVerify: {
-    pattern: /^\/sign-in\/verify$/,
-    component: Verify
-  }
-};
-function isInternalRoute(pathname) {
-  return Object.values(internalRoutes).some((route) => route.pattern.test(pathname));
-}
-function isAuthRoute(pathname) {
-  return pathname.startsWith("/sign-in") || pathname.startsWith("/sign-up");
-}
-function isBaseAuthRoute(pathname) {
-  return pathname === "/sign-in" || pathname === "/sign-up";
-}
-function handleInternalRoute(pathname) {
-  for (const [key, route] of Object.entries(internalRoutes)) {
-    if (route.pattern.test(pathname)) {
-      return route.component;
-    }
-  }
-  return null;
-}
+import {
+  isBaseAuthRoute,
+  isInternalRoute,
+  isAuthRoute
+} from "@tern-secure/react";
 export {
-  handleInternalRoute,
-  internalRoutes,
   isAuthRoute,
   isBaseAuthRoute,
   isInternalRoute

package/dist/esm/app-router/route-handler/internal-route.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/route-handler/internal-route.tsx"],"sourcesContent":["import { Verify } from \"../../components/verify\"\n\n// Internal route mapping\nexport const internalRoutes = {\n  signUpVerify: {\n    pattern: /^\\/sign-up\\/verify$/,\n    component: Verify,\n  },\n  signInVerify: {\n    pattern: /^\\/sign-in\\/verify$/,\n    component: Verify,\n  },\n}\n\n// Check if path is an internal route\nexport function isInternalRoute(pathname: string): boolean {\n  return Object.values(internalRoutes).some((route) => route.pattern.test(pathname))\n}\n\n// Check if path is within auth routes\nexport function isAuthRoute(pathname: string): boolean {\n  return pathname.startsWith(\"/sign-in\") || pathname.startsWith(\"/sign-up\")\n}\n\n// Check if path is exactly the base auth route\nexport function isBaseAuthRoute(pathname: string): boolean {\n  return pathname === \"/sign-in\" || pathname === \"/sign-up\"\n}\n\n// Internal route handler\nexport function handleInternalRoute(pathname: string) {\n  for (const [key, route] of Object.entries(internalRoutes)) {\n    if (route.pattern.test(pathname)) {\n      return route.component\n    }\n  }\n  return null\n}"],"mappings":"AAAA,SAAS,cAAc;AAGhB,MAAM,iBAAiB;AAAA,EAC5B,cAAc;AAAA,IACZ,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,cAAc;AAAA,IACZ,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AAGO,SAAS,gBAAgB,UAA2B;AACzD,SAAO,OAAO,OAAO,cAAc,EAAE,KAAK,CAAC,UAAU,MAAM,QAAQ,KAAK,QAAQ,CAAC;AACnF;AAGO,SAAS,YAAY,UAA2B;AACrD,SAAO,SAAS,WAAW,UAAU,KAAK,SAAS,WAAW,UAAU;AAC1E;AAGO,SAAS,gBAAgB,UAA2B;AACzD,SAAO,aAAa,cAAc,aAAa;AACjD;AAGO,SAAS,oBAAoB,UAAkB;AACpD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,cAAc,GAAG;AACzD,QAAI,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAChC,aAAO,MAAM;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/route-handler/internal-route.tsx"],"sourcesContent":["export {\r\n  isBaseAuthRoute,\r\n  isInternalRoute,\r\n  isAuthRoute\r\n} from '@tern-secure/react'"],"mappings":"AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":[]}

package/dist/esm/boundary/components.js

@@ -0,0 +1,18 @@
+"use client";
+import {
+  useAuth,
+  useIdToken,
+  useSignUp,
+  useSession,
+  SignIn,
+  SignUp
+} from "@tern-secure/react";
+export {
+  SignIn,
+  SignUp,
+  useAuth,
+  useIdToken,
+  useSession,
+  useSignUp
+};
+//# sourceMappingURL=components.js.map

package/dist/esm/boundary/components.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/boundary/components.ts"],"sourcesContent":["'use client'\n\nexport { \n    useAuth,\n    useIdToken,\n    useSignUp,\n    useSession,\n    SignIn,\n    //SignOut,\n    //SignOutButton,\n    SignUp,\n} from '@tern-secure/react' "],"mappings":";AAEA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,OACG;","names":[]}

package/dist/esm/boundary/hooks.js

@@ -0,0 +1,9 @@
+import {
+  useAuth,
+  useIdToken
+} from "@tern-secure/react";
+export {
+  useAuth,
+  useIdToken
+};
+//# sourceMappingURL=hooks.js.map

package/dist/esm/boundary/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/boundary/hooks.ts"],"sourcesContent":["export {\n    useAuth,\n    useIdToken\n} from '@tern-secure/react'"],"mappings":"AAAA;AAAA,EACI;AAAA,EACA;AAAA,OACG;","names":[]}

package/dist/esm/components/uiComponents.js

@@ -0,0 +1,21 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import {
+  SignIn as BaseSignIn,
+  SignUp as BaseSignUp
+} from "@tern-secure/react";
+import {
+  UserButton
+} from "@tern-secure/react";
+const SignIn = (props) => {
+  return /* @__PURE__ */ jsx(BaseSignIn, { ...props });
+};
+const SignUp = (props) => {
+  return /* @__PURE__ */ jsx(BaseSignUp, { ...props });
+};
+export {
+  SignIn,
+  SignUp,
+  UserButton
+};
+//# sourceMappingURL=uiComponents.js.map

package/dist/esm/components/uiComponents.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/components/uiComponents.tsx"],"sourcesContent":["'use client'\n\nimport  { \n    SignIn as BaseSignIn,\n    SignUp as BaseSignUp,\n} from '@tern-secure/react'\nimport type { ComponentProps } from 'react';\n\nexport {\n  UserButton\n} from '@tern-secure/react';\n\nexport const SignIn = (props: ComponentProps<typeof BaseSignIn>) => {\n  return <BaseSignIn {...props} />;\n};\n\nexport const SignUp = (props: ComponentProps<typeof BaseSignUp>) => {\n  return <BaseSignUp {...props} />; \n};"],"mappings":";AAaS;AAXT;AAAA,EACI,UAAU;AAAA,EACV,UAAU;AAAA,OACP;AAGP;AAAA,EACE;AAAA,OACK;AAEA,MAAM,SAAS,CAAC,UAA6C;AAClE,SAAO,oBAAC,cAAY,GAAG,OAAO;AAChC;AAEO,MAAM,SAAS,CAAC,UAA6C;AAClE,SAAO,oBAAC,cAAY,GAAG,OAAO;AAChC;","names":[]}

package/dist/esm/errors.js

@@ -36,6 +36,7 @@ const ERROR_PATTERNS = {
   WEAK_PASSWORD: /weak.*password|password.*weak|Firebase:.*Error.*auth\/weak-password/i
 };
 class TernSecureError extends Error {
+  code;
   constructor(code, message) {
     super(message || code);
     this.name = "TernSecureError";

package/dist/esm/errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/errors.ts"],"sourcesContent":["import { SignInResponse } from \"./types\"\n\nexport type ErrorCode = keyof typeof ERRORS\n\nexport interface AuthErrorResponse {\n  success: false\n  message: string\n  code: ErrorCode\n}\n\nexport const ERRORS = {\n  SERVER_SIDE_INITIALIZATION: \"TernSecure must be initialized on the client side\",\n  REQUIRES_VERIFICATION: \"AUTH_REQUIRES_VERIFICATION\",\n  AUTHENTICATED: \"AUTHENTICATED\",\n  UNAUTHENTICATED: \"UNAUTHENTICATED\",\n  UNVERIFIED: \"UNVERIFIED\",\n  NOT_INITIALIZED: \"TernSecure services are not initialized. Call initializeTernSecure() first\",\n  HOOK_CONTEXT: \"Hook must be used within TernSecureProvider\",\n  EMAIL_NOT_VERIFIED: \"EMAIL_NOT_VERIFIED\",\n  INVALID_CREDENTIALS: \"INVALID_CREDENTIALS\",\n  USER_DISABLED: \"USER_DISABLED\",\n  TOO_MANY_ATTEMPTS: \"TOO_MANY_ATTEMPTS\",\n  NETWORK_ERROR: \"NETWORK_ERROR\",\n  INVALID_EMAIL: \"INVALID_EMAIL\",\n  WEAK_PASSWORD: \"WEAK_PASSWORD\",\n  EMAIL_EXISTS: \"EMAIL_EXISTS\",\n  POPUP_BLOCKED: \"POPUP_BLOCKED\",\n  OPERATION_NOT_ALLOWED: \"OPERATION_NOT_ALLOWED\",\n  EXPIRED_TOKEN: \"EXPIRED_TOKEN\",\n  INVALID_TOKEN: \"INVALID_TOKEN\",\n  SESSION_EXPIRED: \"SESSION_EXPIRED\",\n  INTERNAL_ERROR: \"INTERNAL_ERROR\",\n} as const\n\n// Firebase Auth Error Code patterns\nconst ERROR_PATTERNS = {\n  INVALID_EMAIL: /auth.*invalid.*email|invalid.*email.*auth|Firebase:.*Error.*auth\\/invalid-email/i,\n  INVALID_CREDENTIALS:\n    /auth.*invalid.*credential|invalid.*password|wrong.*password|Firebase:.*Error.*auth\\/(invalid-credential|wrong-password|user-not-found)/i,\n  USER_DISABLED: /user.*disabled|disabled.*user|Firebase:.*Error.*auth\\/user-disabled/i,\n  TOO_MANY_ATTEMPTS: /too.*many.*attempts|too.*many.*requests|Firebase:.*Error.*auth\\/too-many-requests/i,\n  NETWORK_ERROR: /network.*request.*failed|failed.*network|Firebase:.*Error.*auth\\/network-request-failed/i,\n  OPERATION_NOT_ALLOWED: /operation.*not.*allowed|method.*not.*allowed|Firebase:.*Error.*auth\\/operation-not-allowed/i,\n  POPUP_BLOCKED: /popup.*blocked|blocked.*popup|Firebase:.*Error.*auth\\/popup-blocked/i,\n  EMAIL_EXISTS: /email.*exists|email.*already.*use|Firebase:.*Error.*auth\\/email-already-in-use/i,\n  EXPIRED_TOKEN: /token.*expired|expired.*token|Firebase:.*Error.*auth\\/expired-token/i,\n  INVALID_TOKEN: /invalid.*token|token.*invalid|Firebase:.*Error.*auth\\/invalid-token/i,\n  SESSION_EXPIRED: /session.*expired|expired.*session|Firebase:.*Error.*auth\\/session-expired/i,\n  WEAK_PASSWORD: /weak.*password|password.*weak|Firebase:.*Error.*auth\\/weak-password/i,\n} as const\n\nexport class TernSecureError extends Error {\n  code: ErrorCode\n\n  constructor(code: ErrorCode, message?: string) {\n    super(message || code)\n    this.name = \"TernSecureError\"\n    this.code = code\n  }\n}\n\ninterface SerializedFirebaseError {\n  name?: string\n  code?: string\n  message?: string\n  stack?: string\n}\n\n/**\n * Determines if an object matches the shape of a Firebase Error\n */\nfunction isFirebaseErrorLike(error: unknown): error is SerializedFirebaseError {\n  if (!error || typeof error !== \"object\") return false\n\n  const err = error as SerializedFirebaseError\n\n  // Check for bundled Firebase error format: \"Firebase: Error (auth/error-code)\"\n  if (typeof err.message === \"string\") {\n    const bundledErrorMatch = err.message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\n    if (bundledErrorMatch) {\n      // Add the extracted code to the error object\n      err.code = `auth/${bundledErrorMatch[1]}`\n      return true\n    }\n  }\n\n  return (\n    (typeof err.code === \"string\" && err.code.startsWith(\"auth/\")) ||\n    (typeof err.name === \"string\" && err.name.includes(\"FirebaseError\"))\n  )\n}\n\n/**\n * Extracts the error code from a Firebase-like error object\n */\nfunction extractFirebaseErrorCode(error: SerializedFirebaseError): string {\n  // First try to extract from bundled error message format\n  if (typeof error.message === \"string\") {\n    const bundledErrorMatch = error.message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\n    if (bundledErrorMatch) {\n      return bundledErrorMatch[1]\n    }\n  }\n\n  // Then try the standard code property\n  if (error.code) {\n    return error.code.replace(\"auth/\", \"\")\n  }\n\n  // Finally try to extract from error message if it contains an error code\n  if (typeof error.message === \"string\") {\n    const messageCodeMatch = error.message.match(/auth\\/([a-z-]+)/)\n    if (messageCodeMatch) {\n      return messageCodeMatch[1]\n    }\n  }\n\n  return \"\"\n}\n\n/**\n * Maps a Firebase error code to our internal error code\n */\nfunction mapFirebaseErrorCode(code: string): ErrorCode {\n  // Direct mapping for known error codes\n  const directMappings: Record<string, ErrorCode> = {\n    \"invalid-email\": \"INVALID_EMAIL\",\n    \"user-disabled\": \"USER_DISABLED\",\n    \"too-many-requests\": \"TOO_MANY_ATTEMPTS\",\n    \"network-request-failed\": \"NETWORK_ERROR\",\n    \"operation-not-allowed\": \"OPERATION_NOT_ALLOWED\",\n    \"popup-blocked\": \"POPUP_BLOCKED\",\n    \"email-already-in-use\": \"EMAIL_EXISTS\",\n    \"weak-password\": \"WEAK_PASSWORD\",\n    \"invalid-credential\": \"INVALID_CREDENTIALS\",\n    \"wrong-password\": \"INVALID_CREDENTIALS\",\n    \"user-not-found\": \"INVALID_CREDENTIALS\",\n    \"invalid-password\": \"INVALID_CREDENTIALS\",\n    \"user-token-expired\": \"EXPIRED_TOKEN\",\n    \"invalid-id-token\": \"INVALID_TOKEN\",\n  }\n\n  return directMappings[code] || \"INTERNAL_ERROR\"\n}\n\n/**\n * Determines error type based on error message pattern matching\n */\nfunction determineErrorTypeFromMessage(message: string): ErrorCode {\n  // First check for bundled Firebase error format\n  const bundledErrorMatch = message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\n  if (bundledErrorMatch) {\n    const errorCode = bundledErrorMatch[1]\n    const mappedCode = mapFirebaseErrorCode(errorCode)\n    if (mappedCode) {\n      return mappedCode\n    }\n  }\n\n  // Then check standard patterns\n  for (const [errorType, pattern] of Object.entries(ERROR_PATTERNS)) {\n    if (pattern.test(message)) {\n      return errorType as ErrorCode\n    }\n  }\n\n  return \"INTERNAL_ERROR\"\n}\n\n/**\n * Creates a standardized error response\n */\nfunction createErrorResponse(code: ErrorCode, message: string): AuthErrorResponse {\n  const defaultMessages: Record<ErrorCode, string> = {\n    INVALID_EMAIL: \"Invalid email format\",\n    INVALID_CREDENTIALS: \"Invalid email or password\",\n    USER_DISABLED: \"This account has been disabled\",\n    TOO_MANY_ATTEMPTS: \"Too many attempts. Please try again later\",\n    NETWORK_ERROR: \"Network error. Please check your connection\",\n    OPERATION_NOT_ALLOWED: \"This login method is not enabled\",\n    POPUP_BLOCKED: \"Login popup was blocked. Please enable popups\",\n    EMAIL_EXISTS: \"This email is already in use\",\n    EXPIRED_TOKEN: \"Your session has expired. Please login again\",\n    INVALID_TOKEN: \"Invalid authentication token\",\n    SESSION_EXPIRED: \"Your session has expired\",\n    WEAK_PASSWORD: \"Password is too weak\",\n    EMAIL_NOT_VERIFIED: \"Email verification required\",\n    INTERNAL_ERROR: \"An internal error occurred. Please try again\",\n    SERVER_SIDE_INITIALIZATION: \"TernSecure must be initialized on the client side\",\n    REQUIRES_VERIFICATION: \"Email verification required\",\n    AUTHENTICATED: \"Already authenticated\",\n    UNAUTHENTICATED: \"Authentication required\",\n    UNVERIFIED: \"Email verification required\",\n    NOT_INITIALIZED: \"TernSecure services are not initialized\",\n    HOOK_CONTEXT: \"Hook must be used within TernSecureProvider\",\n  }\n\n  return {\n    success: false,\n    message: message || defaultMessages[code],\n    code,\n  }\n}\n\n/**\n * Handles Firebase authentication errors with multiple fallback mechanisms\n */\nexport function handleFirebaseAuthError(error: unknown): AuthErrorResponse {\n  // Helper to extract clean error code from bundled format\n  function extractErrorInfo(input: unknown): { code: string; message: string } | null {\n    // Case 1: String input (direct Firebase error message)\n    if (typeof input === 'string') {\n      const match = input.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\n      if (match) {\n        return { code: match[1], message: input };\n      }\n    }\n\n    // Case 2: Error object\n    if (input && typeof input === 'object') {\n      const err = input as { code?: string; message?: string };\n      \n      // Check for bundled message format first\n      if (err.message) {\n        const match = err.message.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\n        if (match) {\n          return { code: match[1], message: err.message };\n        }\n      }\n\n      // Check for direct code\n      if (err.code) {\n        return {\n          code: err.code.replace('auth/', ''),\n          message: err.message || ''\n        };\n      }\n    }\n\n    return null;\n  }\n\n  // Map error codes to user-friendly messages\n  const ERROR_MESSAGES: Record<string, { message: string; code: ErrorCode }> = {\n    'invalid-email': { message: 'Invalid email format', code: 'INVALID_EMAIL' },\n    'invalid-credential': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\n    'invalid-login-credentials': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\n    'wrong-password': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\n    'user-not-found': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\n    'user-disabled': { message: 'This account has been disabled', code: 'USER_DISABLED' },\n    'too-many-requests': { message: 'Too many attempts. Please try again later', code: 'TOO_MANY_ATTEMPTS' },\n    'network-request-failed': { message: 'Network error. Please check your connection', code: 'NETWORK_ERROR' },\n    'email-already-in-use': { message: 'This email is already in use', code: 'EMAIL_EXISTS' },\n    'weak-password': { message: 'Password is too weak', code: 'WEAK_PASSWORD' },\n    'operation-not-allowed': { message: 'This login method is not enabled', code: 'OPERATION_NOT_ALLOWED' },\n    'popup-blocked': { message: 'Login popup was blocked. Please enable popups', code: 'POPUP_BLOCKED' },\n    'expired-action-code': { message: 'Your session has expired. Please login again', code: 'EXPIRED_TOKEN' },\n    'user-token-expired': { message: 'Your session has expired. Please login again', code: 'EXPIRED_TOKEN' }\n  };\n\n  try {\n    // Extract error information\n    const errorInfo = extractErrorInfo(error);\n    \n    if (errorInfo) {\n      const mappedError = ERROR_MESSAGES[errorInfo.code];\n      if (mappedError) {\n        return {\n          success: false,\n          message: mappedError.message,\n          code: mappedError.code\n        };\n      }\n    }\n\n    // If we couldn't extract or map the error, try one last time with string conversion\n    const errorString = String(error);\n    const lastMatch = errorString.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\n    if (lastMatch && ERROR_MESSAGES[lastMatch[1]]) {\n      return {\n        success: false,\n        ...ERROR_MESSAGES[lastMatch[1]]\n      };\n    }\n\n  } catch (e) {\n    // Silent catch - we'll return the default error\n  }\n\n  // Default fallback\n  return {\n    success: false,\n    message: 'An unexpected error occurred. Please try again later',\n    code: 'INTERNAL_ERROR'\n  };\n}\n\n/**\n * Type guard to check if a response is an AuthErrorResponse\n */\nexport function isAuthErrorResponse(response: unknown): response is AuthErrorResponse {\n  return (\n    typeof response === \"object\" &&\n    response !== null &&\n    \"success\" in response &&\n    (response as { success: boolean }).success === false &&\n    \"code\" in response &&\n    \"message\" in response\n  )\n}\n\n\n\nexport function getErrorAlertVariant(error: SignInResponse | undefined) {\n if (!error) return \"destructive\"\n\n  switch (error.error) {\n    case \"AUTHENTICATED\":\n      return \"default\"\n    case \"EMAIL_EXISTS\":\n    case \"UNAUTHENTICATED\":\n    case \"UNVERIFIED\":\n    case \"REQUIRES_VERIFICATION\":\n    case \"INVALID_EMAIL\":\n    case \"INVALID_TOKEN\":\n    case \"INTERNAL_ERROR\":\n    case \"USER_DISABLED\":\n    case \"TOO_MANY_ATTEMPTS\":\n    case \"NETWORK_ERROR\":\n    case \"SESSION_EXPIRED\":\n    case \"EXPIRED_TOKEN\":\n    case \"INVALID_CREDENTIALS\":\n    default:\n      return \"destructive\"\n  }\n}"],"mappings":"AAUO,MAAM,SAAS;AAAA,EACpB,4BAA4B;AAAA,EAC5B,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,eAAe;AAAA,EACf,cAAc;AAAA,EACd,eAAe;AAAA,EACf,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,gBAAgB;AAClB;AAGA,MAAM,iBAAiB;AAAA,EACrB,eAAe;AAAA,EACf,qBACE;AAAA,EACF,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,cAAc;AAAA,EACd,eAAe;AAAA,EACf,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,eAAe;AACjB;AAEO,MAAM,wBAAwB,MAAM;AAAA,EAGzC,YAAY,MAAiB,SAAkB;AAC7C,UAAM,WAAW,IAAI;AACrB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAYA,SAAS,oBAAoB,OAAkD;AAC7E,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,MAAM;AAGZ,MAAI,OAAO,IAAI,YAAY,UAAU;AACnC,UAAM,oBAAoB,IAAI,QAAQ,MAAM,uCAAuC;AACnF,QAAI,mBAAmB;AAErB,UAAI,OAAO,QAAQ,kBAAkB,CAAC,CAAC;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SACG,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,WAAW,OAAO,KAC3D,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,SAAS,eAAe;AAEtE;AAKA,SAAS,yBAAyB,OAAwC;AAExE,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,oBAAoB,MAAM,QAAQ,MAAM,uCAAuC;AACrF,QAAI,mBAAmB;AACrB,aAAO,kBAAkB,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI,MAAM,MAAM;AACd,WAAO,MAAM,KAAK,QAAQ,SAAS,EAAE;AAAA,EACvC;AAGA,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,mBAAmB,MAAM,QAAQ,MAAM,iBAAiB;AAC9D,QAAI,kBAAkB;AACpB,aAAO,iBAAiB,CAAC;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,qBAAqB,MAAyB;AAErD,QAAM,iBAA4C;AAAA,IAChD,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,IACrB,0BAA0B;AAAA,IAC1B,yBAAyB;AAAA,IACzB,iBAAiB;AAAA,IACjB,wBAAwB;AAAA,IACxB,iBAAiB;AAAA,IACjB,sBAAsB;AAAA,IACtB,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,sBAAsB;AAAA,IACtB,oBAAoB;AAAA,EACtB;AAEA,SAAO,eAAe,IAAI,KAAK;AACjC;AAKA,SAAS,8BAA8B,SAA4B;AAEjE,QAAM,oBAAoB,QAAQ,MAAM,uCAAuC;AAC/E,MAAI,mBAAmB;AACrB,UAAM,YAAY,kBAAkB,CAAC;AACrC,UAAM,aAAa,qBAAqB,SAAS;AACjD,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,OAAO,KAAK,OAAO,QAAQ,cAAc,GAAG;AACjE,QAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,oBAAoB,MAAiB,SAAoC;AAChF,QAAM,kBAA6C;AAAA,IACjD,eAAe;AAAA,IACf,qBAAqB;AAAA,IACrB,eAAe;AAAA,IACf,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,cAAc;AAAA,IACd,eAAe;AAAA,IACf,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,4BAA4B;AAAA,IAC5B,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,YAAY;AAAA,IACZ,iBAAiB;AAAA,IACjB,cAAc;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS,WAAW,gBAAgB,IAAI;AAAA,IACxC;AAAA,EACF;AACF;AAKO,SAAS,wBAAwB,OAAmC;AAEzE,WAAS,iBAAiB,OAA0D;AAElF,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,uCAAuC;AACjE,UAAI,OAAO;AACT,eAAO,EAAE,MAAM,MAAM,CAAC,GAAG,SAAS,MAAM;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,SAAS,OAAO,UAAU,UAAU;AACtC,YAAM,MAAM;AAGZ,UAAI,IAAI,SAAS;AACf,cAAM,QAAQ,IAAI,QAAQ,MAAM,uCAAuC;AACvE,YAAI,OAAO;AACT,iBAAO,EAAE,MAAM,MAAM,CAAC,GAAG,SAAS,IAAI,QAAQ;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,IAAI,MAAM;AACZ,eAAO;AAAA,UACL,MAAM,IAAI,KAAK,QAAQ,SAAS,EAAE;AAAA,UAClC,SAAS,IAAI,WAAW;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAGA,QAAM,iBAAuE;AAAA,IAC3E,iBAAiB,EAAE,SAAS,wBAAwB,MAAM,gBAAgB;AAAA,IAC1E,sBAAsB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IAC1F,6BAA6B,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACjG,kBAAkB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACtF,kBAAkB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACtF,iBAAiB,EAAE,SAAS,kCAAkC,MAAM,gBAAgB;AAAA,IACpF,qBAAqB,EAAE,SAAS,6CAA6C,MAAM,oBAAoB;AAAA,IACvG,0BAA0B,EAAE,SAAS,+CAA+C,MAAM,gBAAgB;AAAA,IAC1G,wBAAwB,EAAE,SAAS,gCAAgC,MAAM,eAAe;AAAA,IACxF,iBAAiB,EAAE,SAAS,wBAAwB,MAAM,gBAAgB;AAAA,IAC1E,yBAAyB,EAAE,SAAS,oCAAoC,MAAM,wBAAwB;AAAA,IACtG,iBAAiB,EAAE,SAAS,iDAAiD,MAAM,gBAAgB;AAAA,IACnG,uBAAuB,EAAE,SAAS,gDAAgD,MAAM,gBAAgB;AAAA,IACxG,sBAAsB,EAAE,SAAS,gDAAgD,MAAM,gBAAgB;AAAA,EACzG;AAEA,MAAI;AAEF,UAAM,YAAY,iBAAiB,KAAK;AAExC,QAAI,WAAW;AACb,YAAM,cAAc,eAAe,UAAU,IAAI;AACjD,UAAI,aAAa;AACf,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,YAAY;AAAA,UACrB,MAAM,YAAY;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAGA,UAAM,cAAc,OAAO,KAAK;AAChC,UAAM,YAAY,YAAY,MAAM,uCAAuC;AAC3E,QAAI,aAAa,eAAe,UAAU,CAAC,CAAC,GAAG;AAC7C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,GAAG,eAAe,UAAU,CAAC,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,EAEF,SAAS,GAAG;AAAA,EAEZ;AAGA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AACF;AAKO,SAAS,oBAAoB,UAAkD;AACpF,SACE,OAAO,aAAa,YACpB,aAAa,QACb,aAAa,YACZ,SAAkC,YAAY,SAC/C,UAAU,YACV,aAAa;AAEjB;AAIO,SAAS,qBAAqB,OAAmC;AACvE,MAAI,CAAC,MAAO,QAAO;AAElB,UAAQ,MAAM,OAAO;AAAA,IACnB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL;AACE,aAAO;AAAA,EACX;AACF;","names":[]}
+{"version":3,"sources":["../../src/errors.ts"],"sourcesContent":["import { SignInResponse } from \"@tern-secure/types\"\r\n\r\nexport type ErrorCode = keyof typeof ERRORS\r\n\r\nexport interface AuthErrorResponse {\r\n  success: false\r\n  message: string\r\n  code: ErrorCode\r\n}\r\n\r\nexport const ERRORS = {\r\n  SERVER_SIDE_INITIALIZATION: \"TernSecure must be initialized on the client side\",\r\n  REQUIRES_VERIFICATION: \"AUTH_REQUIRES_VERIFICATION\",\r\n  AUTHENTICATED: \"AUTHENTICATED\",\r\n  UNAUTHENTICATED: \"UNAUTHENTICATED\",\r\n  UNVERIFIED: \"UNVERIFIED\",\r\n  NOT_INITIALIZED: \"TernSecure services are not initialized. Call initializeTernSecure() first\",\r\n  HOOK_CONTEXT: \"Hook must be used within TernSecureProvider\",\r\n  EMAIL_NOT_VERIFIED: \"EMAIL_NOT_VERIFIED\",\r\n  INVALID_CREDENTIALS: \"INVALID_CREDENTIALS\",\r\n  USER_DISABLED: \"USER_DISABLED\",\r\n  TOO_MANY_ATTEMPTS: \"TOO_MANY_ATTEMPTS\",\r\n  NETWORK_ERROR: \"NETWORK_ERROR\",\r\n  INVALID_EMAIL: \"INVALID_EMAIL\",\r\n  WEAK_PASSWORD: \"WEAK_PASSWORD\",\r\n  EMAIL_EXISTS: \"EMAIL_EXISTS\",\r\n  POPUP_BLOCKED: \"POPUP_BLOCKED\",\r\n  OPERATION_NOT_ALLOWED: \"OPERATION_NOT_ALLOWED\",\r\n  EXPIRED_TOKEN: \"EXPIRED_TOKEN\",\r\n  INVALID_TOKEN: \"INVALID_TOKEN\",\r\n  SESSION_EXPIRED: \"SESSION_EXPIRED\",\r\n  INTERNAL_ERROR: \"INTERNAL_ERROR\",\r\n} as const\r\n\r\n// Firebase Auth Error Code patterns\r\nconst ERROR_PATTERNS = {\r\n  INVALID_EMAIL: /auth.*invalid.*email|invalid.*email.*auth|Firebase:.*Error.*auth\\/invalid-email/i,\r\n  INVALID_CREDENTIALS:\r\n    /auth.*invalid.*credential|invalid.*password|wrong.*password|Firebase:.*Error.*auth\\/(invalid-credential|wrong-password|user-not-found)/i,\r\n  USER_DISABLED: /user.*disabled|disabled.*user|Firebase:.*Error.*auth\\/user-disabled/i,\r\n  TOO_MANY_ATTEMPTS: /too.*many.*attempts|too.*many.*requests|Firebase:.*Error.*auth\\/too-many-requests/i,\r\n  NETWORK_ERROR: /network.*request.*failed|failed.*network|Firebase:.*Error.*auth\\/network-request-failed/i,\r\n  OPERATION_NOT_ALLOWED: /operation.*not.*allowed|method.*not.*allowed|Firebase:.*Error.*auth\\/operation-not-allowed/i,\r\n  POPUP_BLOCKED: /popup.*blocked|blocked.*popup|Firebase:.*Error.*auth\\/popup-blocked/i,\r\n  EMAIL_EXISTS: /email.*exists|email.*already.*use|Firebase:.*Error.*auth\\/email-already-in-use/i,\r\n  EXPIRED_TOKEN: /token.*expired|expired.*token|Firebase:.*Error.*auth\\/expired-token/i,\r\n  INVALID_TOKEN: /invalid.*token|token.*invalid|Firebase:.*Error.*auth\\/invalid-token/i,\r\n  SESSION_EXPIRED: /session.*expired|expired.*session|Firebase:.*Error.*auth\\/session-expired/i,\r\n  WEAK_PASSWORD: /weak.*password|password.*weak|Firebase:.*Error.*auth\\/weak-password/i,\r\n} as const\r\n\r\nexport class TernSecureError extends Error {\r\n  code: ErrorCode\r\n\r\n  constructor(code: ErrorCode, message?: string) {\r\n    super(message || code)\r\n    this.name = \"TernSecureError\"\r\n    this.code = code\r\n  }\r\n}\r\n\r\ninterface SerializedFirebaseError {\r\n  name?: string\r\n  code?: string\r\n  message?: string\r\n  stack?: string\r\n}\r\n\r\n/**\r\n * Determines if an object matches the shape of a Firebase Error\r\n */\r\nfunction isFirebaseErrorLike(error: unknown): error is SerializedFirebaseError {\r\n  if (!error || typeof error !== \"object\") return false\r\n\r\n  const err = error as SerializedFirebaseError\r\n\r\n  // Check for bundled Firebase error format: \"Firebase: Error (auth/error-code)\"\r\n  if (typeof err.message === \"string\") {\r\n    const bundledErrorMatch = err.message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\r\n    if (bundledErrorMatch) {\r\n      // Add the extracted code to the error object\r\n      err.code = `auth/${bundledErrorMatch[1]}`\r\n      return true\r\n    }\r\n  }\r\n\r\n  return (\r\n    (typeof err.code === \"string\" && err.code.startsWith(\"auth/\")) ||\r\n    (typeof err.name === \"string\" && err.name.includes(\"FirebaseError\"))\r\n  )\r\n}\r\n\r\n/**\r\n * Extracts the error code from a Firebase-like error object\r\n */\r\nfunction extractFirebaseErrorCode(error: SerializedFirebaseError): string {\r\n  // First try to extract from bundled error message format\r\n  if (typeof error.message === \"string\") {\r\n    const bundledErrorMatch = error.message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\r\n    if (bundledErrorMatch) {\r\n      return bundledErrorMatch[1]\r\n    }\r\n  }\r\n\r\n  // Then try the standard code property\r\n  if (error.code) {\r\n    return error.code.replace(\"auth/\", \"\")\r\n  }\r\n\r\n  // Finally try to extract from error message if it contains an error code\r\n  if (typeof error.message === \"string\") {\r\n    const messageCodeMatch = error.message.match(/auth\\/([a-z-]+)/)\r\n    if (messageCodeMatch) {\r\n      return messageCodeMatch[1]\r\n    }\r\n  }\r\n\r\n  return \"\"\r\n}\r\n\r\n/**\r\n * Maps a Firebase error code to our internal error code\r\n */\r\nfunction mapFirebaseErrorCode(code: string): ErrorCode {\r\n  // Direct mapping for known error codes\r\n  const directMappings: Record<string, ErrorCode> = {\r\n    \"invalid-email\": \"INVALID_EMAIL\",\r\n    \"user-disabled\": \"USER_DISABLED\",\r\n    \"too-many-requests\": \"TOO_MANY_ATTEMPTS\",\r\n    \"network-request-failed\": \"NETWORK_ERROR\",\r\n    \"operation-not-allowed\": \"OPERATION_NOT_ALLOWED\",\r\n    \"popup-blocked\": \"POPUP_BLOCKED\",\r\n    \"email-already-in-use\": \"EMAIL_EXISTS\",\r\n    \"weak-password\": \"WEAK_PASSWORD\",\r\n    \"invalid-credential\": \"INVALID_CREDENTIALS\",\r\n    \"wrong-password\": \"INVALID_CREDENTIALS\",\r\n    \"user-not-found\": \"INVALID_CREDENTIALS\",\r\n    \"invalid-password\": \"INVALID_CREDENTIALS\",\r\n    \"user-token-expired\": \"EXPIRED_TOKEN\",\r\n    \"invalid-id-token\": \"INVALID_TOKEN\",\r\n  }\r\n\r\n  return directMappings[code] || \"INTERNAL_ERROR\"\r\n}\r\n\r\n/**\r\n * Determines error type based on error message pattern matching\r\n */\r\nfunction determineErrorTypeFromMessage(message: string): ErrorCode {\r\n  // First check for bundled Firebase error format\r\n  const bundledErrorMatch = message.match(/Firebase:\\s*Error\\s*$$auth\\/([^)]+)$$/)\r\n  if (bundledErrorMatch) {\r\n    const errorCode = bundledErrorMatch[1]\r\n    const mappedCode = mapFirebaseErrorCode(errorCode)\r\n    if (mappedCode) {\r\n      return mappedCode\r\n    }\r\n  }\r\n\r\n  // Then check standard patterns\r\n  for (const [errorType, pattern] of Object.entries(ERROR_PATTERNS)) {\r\n    if (pattern.test(message)) {\r\n      return errorType as ErrorCode\r\n    }\r\n  }\r\n\r\n  return \"INTERNAL_ERROR\"\r\n}\r\n\r\n/**\r\n * Creates a standardized error response\r\n */\r\nfunction createErrorResponse(code: ErrorCode, message: string): AuthErrorResponse {\r\n  const defaultMessages: Record<ErrorCode, string> = {\r\n    INVALID_EMAIL: \"Invalid email format\",\r\n    INVALID_CREDENTIALS: \"Invalid email or password\",\r\n    USER_DISABLED: \"This account has been disabled\",\r\n    TOO_MANY_ATTEMPTS: \"Too many attempts. Please try again later\",\r\n    NETWORK_ERROR: \"Network error. Please check your connection\",\r\n    OPERATION_NOT_ALLOWED: \"This login method is not enabled\",\r\n    POPUP_BLOCKED: \"Login popup was blocked. Please enable popups\",\r\n    EMAIL_EXISTS: \"This email is already in use\",\r\n    EXPIRED_TOKEN: \"Your session has expired. Please login again\",\r\n    INVALID_TOKEN: \"Invalid authentication token\",\r\n    SESSION_EXPIRED: \"Your session has expired\",\r\n    WEAK_PASSWORD: \"Password is too weak\",\r\n    EMAIL_NOT_VERIFIED: \"Email verification required\",\r\n    INTERNAL_ERROR: \"An internal error occurred. Please try again\",\r\n    SERVER_SIDE_INITIALIZATION: \"TernSecure must be initialized on the client side\",\r\n    REQUIRES_VERIFICATION: \"Email verification required\",\r\n    AUTHENTICATED: \"Already authenticated\",\r\n    UNAUTHENTICATED: \"Authentication required\",\r\n    UNVERIFIED: \"Email verification required\",\r\n    NOT_INITIALIZED: \"TernSecure services are not initialized\",\r\n    HOOK_CONTEXT: \"Hook must be used within TernSecureProvider\",\r\n  }\r\n\r\n  return {\r\n    success: false,\r\n    message: message || defaultMessages[code],\r\n    code,\r\n  }\r\n}\r\n\r\n/**\r\n * Handles Firebase authentication errors with multiple fallback mechanisms\r\n */\r\nexport function handleFirebaseAuthError(error: unknown): AuthErrorResponse {\r\n  // Helper to extract clean error code from bundled format\r\n  function extractErrorInfo(input: unknown): { code: string; message: string } | null {\r\n    // Case 1: String input (direct Firebase error message)\r\n    if (typeof input === 'string') {\r\n      const match = input.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\r\n      if (match) {\r\n        return { code: match[1], message: input };\r\n      }\r\n    }\r\n\r\n    // Case 2: Error object\r\n    if (input && typeof input === 'object') {\r\n      const err = input as { code?: string; message?: string };\r\n      \r\n      // Check for bundled message format first\r\n      if (err.message) {\r\n        const match = err.message.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\r\n        if (match) {\r\n          return { code: match[1], message: err.message };\r\n        }\r\n      }\r\n\r\n      // Check for direct code\r\n      if (err.code) {\r\n        return {\r\n          code: err.code.replace('auth/', ''),\r\n          message: err.message || ''\r\n        };\r\n      }\r\n    }\r\n\r\n    return null;\r\n  }\r\n\r\n  // Map error codes to user-friendly messages\r\n  const ERROR_MESSAGES: Record<string, { message: string; code: ErrorCode }> = {\r\n    'invalid-email': { message: 'Invalid email format', code: 'INVALID_EMAIL' },\r\n    'invalid-credential': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\r\n    'invalid-login-credentials': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\r\n    'wrong-password': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\r\n    'user-not-found': { message: 'Invalid email or password', code: 'INVALID_CREDENTIALS' },\r\n    'user-disabled': { message: 'This account has been disabled', code: 'USER_DISABLED' },\r\n    'too-many-requests': { message: 'Too many attempts. Please try again later', code: 'TOO_MANY_ATTEMPTS' },\r\n    'network-request-failed': { message: 'Network error. Please check your connection', code: 'NETWORK_ERROR' },\r\n    'email-already-in-use': { message: 'This email is already in use', code: 'EMAIL_EXISTS' },\r\n    'weak-password': { message: 'Password is too weak', code: 'WEAK_PASSWORD' },\r\n    'operation-not-allowed': { message: 'This login method is not enabled', code: 'OPERATION_NOT_ALLOWED' },\r\n    'popup-blocked': { message: 'Login popup was blocked. Please enable popups', code: 'POPUP_BLOCKED' },\r\n    'expired-action-code': { message: 'Your session has expired. Please login again', code: 'EXPIRED_TOKEN' },\r\n    'user-token-expired': { message: 'Your session has expired. Please login again', code: 'EXPIRED_TOKEN' }\r\n  };\r\n\r\n  try {\r\n    // Extract error information\r\n    const errorInfo = extractErrorInfo(error);\r\n    \r\n    if (errorInfo) {\r\n      const mappedError = ERROR_MESSAGES[errorInfo.code];\r\n      if (mappedError) {\r\n        return {\r\n          success: false,\r\n          message: mappedError.message,\r\n          code: mappedError.code\r\n        };\r\n      }\r\n    }\r\n\r\n    // If we couldn't extract or map the error, try one last time with string conversion\r\n    const errorString = String(error);\r\n    const lastMatch = errorString.match(/Firebase:\\s*Error\\s*\\(auth\\/([^)]+)\\)/);\r\n    if (lastMatch && ERROR_MESSAGES[lastMatch[1]]) {\r\n      return {\r\n        success: false,\r\n        ...ERROR_MESSAGES[lastMatch[1]]\r\n      };\r\n    }\r\n\r\n  } catch (e) {\r\n    // Silent catch - we'll return the default error\r\n  }\r\n\r\n  // Default fallback\r\n  return {\r\n    success: false,\r\n    message: 'An unexpected error occurred. Please try again later',\r\n    code: 'INTERNAL_ERROR'\r\n  };\r\n}\r\n\r\n/**\r\n * Type guard to check if a response is an AuthErrorResponse\r\n */\r\nexport function isAuthErrorResponse(response: unknown): response is AuthErrorResponse {\r\n  return (\r\n    typeof response === \"object\" &&\r\n    response !== null &&\r\n    \"success\" in response &&\r\n    (response as { success: boolean }).success === false &&\r\n    \"code\" in response &&\r\n    \"message\" in response\r\n  )\r\n}\r\n\r\n\r\n\r\nexport function getErrorAlertVariant(error: SignInResponse | undefined) {\r\n if (!error) return \"destructive\"\r\n\r\n  switch (error.error) {\r\n    case \"AUTHENTICATED\":\r\n      return \"default\"\r\n    case \"EMAIL_EXISTS\":\r\n    case \"UNAUTHENTICATED\":\r\n    case \"UNVERIFIED\":\r\n    case \"REQUIRES_VERIFICATION\":\r\n    case \"INVALID_EMAIL\":\r\n    case \"INVALID_TOKEN\":\r\n    case \"INTERNAL_ERROR\":\r\n    case \"USER_DISABLED\":\r\n    case \"TOO_MANY_ATTEMPTS\":\r\n    case \"NETWORK_ERROR\":\r\n    case \"SESSION_EXPIRED\":\r\n    case \"EXPIRED_TOKEN\":\r\n    case \"INVALID_CREDENTIALS\":\r\n    default:\r\n      return \"destructive\"\r\n  }\r\n}"],"mappings":"AAUO,MAAM,SAAS;AAAA,EACpB,4BAA4B;AAAA,EAC5B,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,eAAe;AAAA,EACf,cAAc;AAAA,EACd,eAAe;AAAA,EACf,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,gBAAgB;AAClB;AAGA,MAAM,iBAAiB;AAAA,EACrB,eAAe;AAAA,EACf,qBACE;AAAA,EACF,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,cAAc;AAAA,EACd,eAAe;AAAA,EACf,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,eAAe;AACjB;AAEO,MAAM,wBAAwB,MAAM;AAAA,EACzC;AAAA,EAEA,YAAY,MAAiB,SAAkB;AAC7C,UAAM,WAAW,IAAI;AACrB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAYA,SAAS,oBAAoB,OAAkD;AAC7E,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,QAAM,MAAM;AAGZ,MAAI,OAAO,IAAI,YAAY,UAAU;AACnC,UAAM,oBAAoB,IAAI,QAAQ,MAAM,uCAAuC;AACnF,QAAI,mBAAmB;AAErB,UAAI,OAAO,QAAQ,kBAAkB,CAAC,CAAC;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SACG,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,WAAW,OAAO,KAC3D,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,SAAS,eAAe;AAEtE;AAKA,SAAS,yBAAyB,OAAwC;AAExE,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,oBAAoB,MAAM,QAAQ,MAAM,uCAAuC;AACrF,QAAI,mBAAmB;AACrB,aAAO,kBAAkB,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI,MAAM,MAAM;AACd,WAAO,MAAM,KAAK,QAAQ,SAAS,EAAE;AAAA,EACvC;AAGA,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,mBAAmB,MAAM,QAAQ,MAAM,iBAAiB;AAC9D,QAAI,kBAAkB;AACpB,aAAO,iBAAiB,CAAC;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,qBAAqB,MAAyB;AAErD,QAAM,iBAA4C;AAAA,IAChD,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,IACrB,0BAA0B;AAAA,IAC1B,yBAAyB;AAAA,IACzB,iBAAiB;AAAA,IACjB,wBAAwB;AAAA,IACxB,iBAAiB;AAAA,IACjB,sBAAsB;AAAA,IACtB,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,sBAAsB;AAAA,IACtB,oBAAoB;AAAA,EACtB;AAEA,SAAO,eAAe,IAAI,KAAK;AACjC;AAKA,SAAS,8BAA8B,SAA4B;AAEjE,QAAM,oBAAoB,QAAQ,MAAM,uCAAuC;AAC/E,MAAI,mBAAmB;AACrB,UAAM,YAAY,kBAAkB,CAAC;AACrC,UAAM,aAAa,qBAAqB,SAAS;AACjD,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAAA,EACF;AAGA,aAAW,CAAC,WAAW,OAAO,KAAK,OAAO,QAAQ,cAAc,GAAG;AACjE,QAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,oBAAoB,MAAiB,SAAoC;AAChF,QAAM,kBAA6C;AAAA,IACjD,eAAe;AAAA,IACf,qBAAqB;AAAA,IACrB,eAAe;AAAA,IACf,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,cAAc;AAAA,IACd,eAAe;AAAA,IACf,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,4BAA4B;AAAA,IAC5B,uBAAuB;AAAA,IACvB,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,YAAY;AAAA,IACZ,iBAAiB;AAAA,IACjB,cAAc;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS,WAAW,gBAAgB,IAAI;AAAA,IACxC;AAAA,EACF;AACF;AAKO,SAAS,wBAAwB,OAAmC;AAEzE,WAAS,iBAAiB,OAA0D;AAElF,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,QAAQ,MAAM,MAAM,uCAAuC;AACjE,UAAI,OAAO;AACT,eAAO,EAAE,MAAM,MAAM,CAAC,GAAG,SAAS,MAAM;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,SAAS,OAAO,UAAU,UAAU;AACtC,YAAM,MAAM;AAGZ,UAAI,IAAI,SAAS;AACf,cAAM,QAAQ,IAAI,QAAQ,MAAM,uCAAuC;AACvE,YAAI,OAAO;AACT,iBAAO,EAAE,MAAM,MAAM,CAAC,GAAG,SAAS,IAAI,QAAQ;AAAA,QAChD;AAAA,MACF;AAGA,UAAI,IAAI,MAAM;AACZ,eAAO;AAAA,UACL,MAAM,IAAI,KAAK,QAAQ,SAAS,EAAE;AAAA,UAClC,SAAS,IAAI,WAAW;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAGA,QAAM,iBAAuE;AAAA,IAC3E,iBAAiB,EAAE,SAAS,wBAAwB,MAAM,gBAAgB;AAAA,IAC1E,sBAAsB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IAC1F,6BAA6B,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACjG,kBAAkB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACtF,kBAAkB,EAAE,SAAS,6BAA6B,MAAM,sBAAsB;AAAA,IACtF,iBAAiB,EAAE,SAAS,kCAAkC,MAAM,gBAAgB;AAAA,IACpF,qBAAqB,EAAE,SAAS,6CAA6C,MAAM,oBAAoB;AAAA,IACvG,0BAA0B,EAAE,SAAS,+CAA+C,MAAM,gBAAgB;AAAA,IAC1G,wBAAwB,EAAE,SAAS,gCAAgC,MAAM,eAAe;AAAA,IACxF,iBAAiB,EAAE,SAAS,wBAAwB,MAAM,gBAAgB;AAAA,IAC1E,yBAAyB,EAAE,SAAS,oCAAoC,MAAM,wBAAwB;AAAA,IACtG,iBAAiB,EAAE,SAAS,iDAAiD,MAAM,gBAAgB;AAAA,IACnG,uBAAuB,EAAE,SAAS,gDAAgD,MAAM,gBAAgB;AAAA,IACxG,sBAAsB,EAAE,SAAS,gDAAgD,MAAM,gBAAgB;AAAA,EACzG;AAEA,MAAI;AAEF,UAAM,YAAY,iBAAiB,KAAK;AAExC,QAAI,WAAW;AACb,YAAM,cAAc,eAAe,UAAU,IAAI;AACjD,UAAI,aAAa;AACf,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,YAAY;AAAA,UACrB,MAAM,YAAY;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAGA,UAAM,cAAc,OAAO,KAAK;AAChC,UAAM,YAAY,YAAY,MAAM,uCAAuC;AAC3E,QAAI,aAAa,eAAe,UAAU,CAAC,CAAC,GAAG;AAC7C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,GAAG,eAAe,UAAU,CAAC,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,EAEF,SAAS,GAAG;AAAA,EAEZ;AAGA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AACF;AAKO,SAAS,oBAAoB,UAAkD;AACpF,SACE,OAAO,aAAa,YACpB,aAAa,QACb,aAAa,YACZ,SAAkC,YAAY,SAC/C,UAAU,YACV,aAAa;AAEjB;AAIO,SAAS,qBAAqB,OAAmC;AACvE,MAAI,CAAC,MAAO,QAAO;AAElB,UAAQ,MAAM,OAAO;AAAA,IACnB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL;AACE,aAAO;AAAA,EACX;AACF;","names":[]}

package/dist/esm/index.js

@@ -1,24 +1,23 @@
-import { TernSecureAuth, TernSecureFirestore, ternSecureAuth } from "./utils/client-init";
-import { loadFireConfig, validateConfig } from "./utils/config";
-import { signInWithEmail } from "./app-router/client/actions";
 import { TernSecureProvider } from "./app-router/client/TernSecureProvider";
-import { useAuth } from "./boundary/hooks/useAuth";
-import { SignIn } from "./components/sign-in";
-import { SignOutButton } from "./components/sign-out-button";
-import { SignOut } from "./components/sign-out";
-import { SignUp } from "./components/sign-up";
+import {
+  useAuth,
+  useIdToken,
+  useSignUp,
+  useSession
+} from "./boundary/components";
+import {
+  SignIn,
+  SignUp,
+  UserButton
+} from "./components/uiComponents";
 export {
   SignIn,
-  SignOut,
-  SignOutButton,
   SignUp,
-  TernSecureAuth,
-  TernSecureFirestore,
   TernSecureProvider,
-  loadFireConfig,
-  signInWithEmail,
-  ternSecureAuth,
+  UserButton,
   useAuth,
-  validateConfig
+  useIdToken,
+  useSession,
+  useSignUp
 };
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["\n//import { TernSecureServerProvider } from './app-router/server/TernSecureServerProvider'\n//import type { TernSecureState } from './app-router/client/TernSecureProvider'\nexport { TernSecureAuth, TernSecureFirestore, ternSecureAuth } from './utils/client-init'\nexport { loadFireConfig, validateConfig } from './utils/config'\nexport { signInWithEmail } from './app-router/client/actions'\n//export { useInternalContext } from './boundary/TernSecureCtx'\n//export { TernSecureClientProvider } from './app-router/client/TernSecureProvider'\nexport { TernSecureProvider } from './app-router/client/TernSecureProvider'\nexport { useAuth } from './boundary/hooks/useAuth' \nexport { SignIn } from './components/sign-in'\nexport { SignOutButton } from './components/sign-out-button'\nexport { SignOut } from './components/sign-out'\nexport { SignUp } from './components/sign-up'\nexport type { TernSecureUser, TernSecureUserData } from './types'\n\n//export const TernSecureProvider = TernSecureServerProvider\n//export type { TernSecureState }"],"mappings":"AAGA,SAAS,gBAAgB,qBAAqB,sBAAsB;AACpE,SAAS,gBAAgB,sBAAsB;AAC/C,SAAS,uBAAuB;AAGhC,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,cAAc;","names":[]}
+{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["\r\n//import { TernSecureServerProvider } from './app-router/server/TernSecureServerProvider'\r\n//import type { TernSecureState } from './app-router/client/TernSecureProvider'\r\n//export { \r\n//    TernSecureAuth, \r\n//    TernSecureFirestore, \r\n//    ternSecureAuth \r\n//} from '@tern-secure/react'\r\n//export { loadFireConfig, validateConfig } from './utils/config'\r\n//export { signInWithEmail } from '@tern-secure/next-backend'\r\n//export { useInternalContext } from './boundary/TernSecureCtx'\r\n//export { TernSecureClientProvider } from './app-router/client/TernSecureProvider'\r\nexport { TernSecureProvider } from './app-router/client/TernSecureProvider'\r\nexport {\r\n    useAuth,\r\n    useIdToken,\r\n    useSignUp,\r\n    useSession,\r\n    //SignIn,\r\n    //SignOut,\r\n    //SignOutButton,\r\n    //SignUp,\r\n} from './boundary/components'\r\n\r\nexport {\r\n    SignIn,\r\n    SignUp,\r\n    UserButton,\r\n} from './components/uiComponents'\r\n\r\nexport type { TernSecureUser, TernSecureUserData } from '@tern-secure/types'\r\n\r\n//export const TernSecureProvider = TernSecureServerProvider\r\n//export type { TernSecureState }"],"mappings":"AAYA,SAAS,0BAA0B;AACnC;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKG;AAEP;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;","names":[]}

package/dist/esm/server/auth.js

@@ -3,28 +3,27 @@ import { cookies } from "next/headers";
 import { verifyFirebaseToken } from "./jwt-edge";
 import { TernSecureError } from "../errors";
 const auth = cache(async () => {
-  var _a, _b, _c, _d;
   try {
     console.log("auth: Starting auth check...");
     const cookieStore = await cookies();
-    const sessionCookie = (_a = cookieStore.get("_session_cookie")) == null ? void 0 : _a.value;
+    const sessionCookie = cookieStore.get("_session_cookie")?.value;
     if (sessionCookie) {
       const result = await verifyFirebaseToken(sessionCookie, true);
       if (result.valid) {
         const user = {
-          uid: (_b = result.uid) != null ? _b : "",
+          uid: result.uid ?? "",
           email: result.email || null,
           authTime: result.authTime
         };
         return { user, error: null };
       }
     }
-    const idToken = (_c = cookieStore.get("_session_token")) == null ? void 0 : _c.value;
+    const idToken = cookieStore.get("_session_token")?.value;
     if (idToken) {
       const result = await verifyFirebaseToken(idToken, false);
       if (result.valid) {
         const user = {
-          uid: (_d = result.uid) != null ? _d : "",
+          uid: result.uid ?? "",
           email: result.email || null,
           authTime: result.authTime
         };

package/dist/esm/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["import { cache } from \"react\"\nimport { cookies } from \"next/headers\"\nimport type { User } from \"./types\"\nimport { verifyFirebaseToken } from \"./jwt-edge\"\nimport { TernSecureError } from \"../errors\"\n\n\n\nexport interface AuthResult {\n  user: User | null\n  error: Error | null\n}\n\n  /**\n   * Get the current authenticated user from the session or token\n   */\nexport const auth = cache(async (): Promise<AuthResult> => {\n  try {\n    // Get all active sessions for debugging\n   console.log(\"auth: Starting auth check...\")\n   const cookieStore = await cookies()\n\n    // First try session cookie as it's more secure\n    const sessionCookie = cookieStore.get(\"_session_cookie\")?.value\n    if (sessionCookie) {\n      const result = await verifyFirebaseToken(sessionCookie, true)\n      if (result.valid) {\n        const user: User = {\n          uid: result.uid ?? '',\n          email: result.email || null,\n          authTime: result.authTime\n        }\n        return { user, error: null }\n      }\n    }\n\n    // Fallback to ID token\n    const idToken = cookieStore.get(\"_session_token\")?.value\n    if (idToken) {\n      const result = await verifyFirebaseToken(idToken, false)\n      if (result.valid) {\n        const user: User = {\n          uid: result.uid ?? '',\n          email: result.email || null,\n          authTime: result.authTime\n        }\n        return { user, error: null }\n      }\n    }\n\n      return {\n          user: null,\n          error: new TernSecureError('UNAUTHENTICATED', 'No valid session found')\n      }\n\n    } catch (error) {\n      console.error(\"Error in Auth:\", error)\n      if (error instanceof TernSecureError) {\n        return {\n          user: null,\n          error\n        }\n      }\n      return {\n        user: null,\n        error: new TernSecureError('INTERNAL_ERROR', 'An unexpected error occurred')\n      }\n    }\n  })\n\n/**\n * Type guard to check if user is authenticated\n */\nexport const isAuthenticated = cache(async (): Promise<boolean>  => {\n  const { user } = await auth()\n  return user !== null\n})\n\n/**\n * Get user info from auth result\n */\nexport const getUser = cache(async (): Promise<User | null> => {\n  const { user } = await auth()\n  return user\n})\n\n/**\n * Require authentication\n * Throws error if not authenticated\n */\nexport const requireAuth = cache(async (): Promise<User> => {\n  const { user, error } = await auth()\n\n  if (!user) {\n    throw error || new Error(\"Authentication required\")\n  }\n\n  return user\n})"],"mappings":"AAAA,SAAS,aAAa;AACtB,SAAS,eAAe;AAExB,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAYzB,MAAM,OAAO,MAAM,YAAiC;AAhB3D;AAiBE,MAAI;AAEH,YAAQ,IAAI,8BAA8B;AAC1C,UAAM,cAAc,MAAM,QAAQ;AAGjC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,SAAS,MAAM,oBAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAEE,WAAO;AAAA,MACH,MAAM;AAAA,MACN,OAAO,IAAI,gBAAgB,mBAAmB,wBAAwB;AAAA,IAC1E;AAAA,EAEF,SAAS,OAAO;AACd,YAAQ,MAAM,kBAAkB,KAAK;AACrC,QAAI,iBAAiB,iBAAiB;AACpC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,IAAI,gBAAgB,kBAAkB,8BAA8B;AAAA,IAC7E;AAAA,EACF;AACF,CAAC;AAKI,MAAM,kBAAkB,MAAM,YAA+B;AAClE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO,SAAS;AAClB,CAAC;AAKM,MAAM,UAAU,MAAM,YAAkC;AAC7D,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO;AACT,CAAC;AAMM,MAAM,cAAc,MAAM,YAA2B;AAC1D,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,IAAI,MAAM,yBAAyB;AAAA,EACpD;AAEA,SAAO;AACT,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["import { cache } from \"react\"\r\nimport { cookies } from \"next/headers\"\r\nimport type { User } from \"./types\"\r\nimport { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport { TernSecureError } from \"../errors\"\r\n\r\n\r\n\r\nexport interface AuthResult {\r\n  user: User | null\r\n  error: Error | null\r\n}\r\n\r\n  /**\r\n   * Get the current authenticated user from the session or token\r\n   */\r\nexport const auth = cache(async (): Promise<AuthResult> => {\r\n  try {\r\n    // Get all active sessions for debugging\r\n   console.log(\"auth: Starting auth check...\")\r\n   const cookieStore = await cookies()\r\n\r\n    // First try session cookie as it's more secure\r\n    const sessionCookie = cookieStore.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n        const user: User = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n    // Fallback to ID token\r\n    const idToken = cookieStore.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: User = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n      return {\r\n          user: null,\r\n          error: new TernSecureError('UNAUTHENTICATED', 'No valid session found')\r\n      }\r\n\r\n    } catch (error) {\r\n      console.error(\"Error in Auth:\", error)\r\n      if (error instanceof TernSecureError) {\r\n        return {\r\n          user: null,\r\n          error\r\n        }\r\n      }\r\n      return {\r\n        user: null,\r\n        error: new TernSecureError('INTERNAL_ERROR', 'An unexpected error occurred')\r\n      }\r\n    }\r\n  })\r\n\r\n/**\r\n * Type guard to check if user is authenticated\r\n */\r\nexport const isAuthenticated = cache(async (): Promise<boolean>  => {\r\n  const { user } = await auth()\r\n  return user !== null\r\n})\r\n\r\n/**\r\n * Get user info from auth result\r\n */\r\nexport const getUser = cache(async (): Promise<User | null> => {\r\n  const { user } = await auth()\r\n  return user\r\n})\r\n\r\n/**\r\n * Require authentication\r\n * Throws error if not authenticated\r\n */\r\nexport const requireAuth = cache(async (): Promise<User> => {\r\n  const { user, error } = await auth()\r\n\r\n  if (!user) {\r\n    throw error || new Error(\"Authentication required\")\r\n  }\r\n\r\n  return user\r\n})"],"mappings":"AAAA,SAAS,aAAa;AACtB,SAAS,eAAe;AAExB,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAYzB,MAAM,OAAO,MAAM,YAAiC;AACzD,MAAI;AAEH,YAAQ,IAAI,8BAA8B;AAC1C,UAAM,cAAc,MAAM,QAAQ;AAGjC,UAAM,gBAAgB,YAAY,IAAI,iBAAiB,GAAG;AAC1D,QAAI,eAAe;AACjB,YAAM,SAAS,MAAM,oBAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,UAAU,YAAY,IAAI,gBAAgB,GAAG;AACnD,QAAI,SAAS;AACX,YAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAEE,WAAO;AAAA,MACH,MAAM;AAAA,MACN,OAAO,IAAI,gBAAgB,mBAAmB,wBAAwB;AAAA,IAC1E;AAAA,EAEF,SAAS,OAAO;AACd,YAAQ,MAAM,kBAAkB,KAAK;AACrC,QAAI,iBAAiB,iBAAiB;AACpC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,IAAI,gBAAgB,kBAAkB,8BAA8B;AAAA,IAC7E;AAAA,EACF;AACF,CAAC;AAKI,MAAM,kBAAkB,MAAM,YAA+B;AAClE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO,SAAS;AAClB,CAAC;AAKM,MAAM,UAAU,MAAM,YAAkC;AAC7D,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO;AACT,CAAC;AAMM,MAAM,cAAc,MAAM,YAA2B;AAC1D,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,IAAI,MAAM,yBAAyB;AAAA,EACpD;AAEA,SAAO;AACT,CAAC;","names":[]}

package/dist/esm/server/crypto.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/crypto.ts"],"sourcesContent":["const ENCRYPTION_KEY = process.env.TERN_ENCRYPTION_KEY || \"default-key-32-chars-exactly!!!!!\"\n\n// Simple encryption for cookie data\nexport function encrypt(text: string): string {\n  const textBytes = new TextEncoder().encode(text)\n  const encrypted = textBytes.map((byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length))\n  return Buffer.from(encrypted).toString(\"base64url\")\n}\n\nexport function decrypt(encoded: string): string {\n  const encrypted = Buffer.from(encoded, \"base64url\")\n  const decrypted = new Uint8Array(encrypted).map(\n    (byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length),\n  )\n  return new TextDecoder().decode(decrypted)\n}\n"],"mappings":"AAAA,MAAM,iBAAiB,QAAQ,IAAI,uBAAuB;AAGnD,SAAS,QAAQ,MAAsB;AAC5C,QAAM,YAAY,IAAI,YAAY,EAAE,OAAO,IAAI;AAC/C,QAAM,YAAY,UAAU,IAAI,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM,CAAC;AACxG,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,WAAW;AACpD;AAEO,SAAS,QAAQ,SAAyB;AAC/C,QAAM,YAAY,OAAO,KAAK,SAAS,WAAW;AAClD,QAAM,YAAY,IAAI,WAAW,SAAS,EAAE;AAAA,IAC1C,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM;AAAA,EACzE;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAC3C;","names":[]}
+{"version":3,"sources":["../../../src/server/crypto.ts"],"sourcesContent":["const ENCRYPTION_KEY = process.env.TERN_ENCRYPTION_KEY || \"default-key-32-chars-exactly!!!!!\"\r\n\r\n// Simple encryption for cookie data\r\nexport function encrypt(text: string): string {\r\n  const textBytes = new TextEncoder().encode(text)\r\n  const encrypted = textBytes.map((byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length))\r\n  return Buffer.from(encrypted).toString(\"base64url\")\r\n}\r\n\r\nexport function decrypt(encoded: string): string {\r\n  const encrypted = Buffer.from(encoded, \"base64url\")\r\n  const decrypted = new Uint8Array(encrypted).map(\r\n    (byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length),\r\n  )\r\n  return new TextDecoder().decode(decrypted)\r\n}\r\n"],"mappings":"AAAA,MAAM,iBAAiB,QAAQ,IAAI,uBAAuB;AAGnD,SAAS,QAAQ,MAAsB;AAC5C,QAAM,YAAY,IAAI,YAAY,EAAE,OAAO,IAAI;AAC/C,QAAM,YAAY,UAAU,IAAI,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM,CAAC;AACxG,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,WAAW;AACpD;AAEO,SAAS,QAAQ,SAAyB;AAC/C,QAAM,YAAY,OAAO,KAAK,SAAS,WAAW;AAClD,QAAM,YAAY,IAAI,WAAW,SAAS,EAAE;AAAA,IAC1C,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM;AAAA,EACzE;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAC3C;","names":[]}

package/dist/esm/server/ctx-store.js

@@ -27,10 +27,9 @@ class ContextStore {
     return user;
   }
   static debug() {
-    var _a;
     return {
       sessionsCount: global.__ternSecure.sessions.size,
-      currentSessionId: ((_a = global.__ternSecure.context) == null ? void 0 : _a.sessionId) || null,
+      currentSessionId: global.__ternSecure.context?.sessionId || null,
       sessions: Array.from(global.__ternSecure.sessions.entries())
     };
   }

package/dist/esm/server/ctx-store.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/ctx-store.ts"],"sourcesContent":["import type { User } from \"./types\"\n\ninterface RequestContext {\n  user: UserVerificationRequirement\n  sessionId: string\n}\n\n// Use Node.js global for server-side persistence\ndeclare global {\n  var __ternSecure: {\n    context: RequestContext | null\n    sessions: Map<string, User>\n  }\n}\n\n// Initialize global state if not exists\nif (typeof global.__ternSecure === 'undefined') {\n    global.__ternSecure = {\n      context: null,\n      sessions: new Map(),\n    }\n  console.log(\"ContextStore: Initialized global state\")\n}\n\nexport class ContextStore {\n  static setContext(context: RequestContext) {\n    console.log(\"ContextStore: Setting context:\", context)\n    global.__ternSecure.context = context\n    console.log(\"ContextStore: Context set successfully\")\n  }\n\n  static getContext(): RequestContext | null {\n    const context = global.__ternSecure.context\n    console.log(\"ContextStore: Getting context:\", context)\n    return context\n  }\n\n  static setSession(sessionId: string, user: User) {\n    console.log(\"ContextStore: Setting session:\", { sessionId, user })\n    global.__ternSecure.sessions.set(sessionId, user)\n    console.log(\"ContextStore: Session set successfully\")\n  }\n\n  static getSession(sessionId: string): User | null {\n    const user = global.__ternSecure.sessions.get(sessionId) || null\n    console.log(\"ContextStore: Getting session:\", { sessionId, user })\n    return user\n  }\n\n  static debug() {\n    return {\n      sessionsCount: global.__ternSecure.sessions.size,\n      currentSessionId: global.__ternSecure.context?.sessionId || null,\n      sessions: Array.from(global.__ternSecure.sessions.entries()),\n    }\n  }\n}\n\n"],"mappings":"AAgBA,IAAI,OAAO,OAAO,iBAAiB,aAAa;AAC5C,SAAO,eAAe;AAAA,IACpB,SAAS;AAAA,IACT,UAAU,oBAAI,IAAI;AAAA,EACpB;AACF,UAAQ,IAAI,wCAAwC;AACtD;AAEO,MAAM,aAAa;AAAA,EACxB,OAAO,WAAW,SAAyB;AACzC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO,aAAa,UAAU;AAC9B,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,aAAoC;AACzC,UAAM,UAAU,OAAO,aAAa;AACpC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,WAAW,WAAmB,MAAY;AAC/C,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO,aAAa,SAAS,IAAI,WAAW,IAAI;AAChD,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,WAAW,WAAgC;AAChD,UAAM,OAAO,OAAO,aAAa,SAAS,IAAI,SAAS,KAAK;AAC5D,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,QAAQ;AAjDjB;AAkDI,WAAO;AAAA,MACL,eAAe,OAAO,aAAa,SAAS;AAAA,MAC5C,oBAAkB,YAAO,aAAa,YAApB,mBAA6B,cAAa;AAAA,MAC5D,UAAU,MAAM,KAAK,OAAO,aAAa,SAAS,QAAQ,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/server/ctx-store.ts"],"sourcesContent":["import type { User } from \"./types\"\r\n\r\ninterface RequestContext {\r\n  user: UserVerificationRequirement\r\n  sessionId: string\r\n}\r\n\r\n// Use Node.js global for server-side persistence\r\ndeclare global {\r\n  var __ternSecure: {\r\n    context: RequestContext | null\r\n    sessions: Map<string, User>\r\n  }\r\n}\r\n\r\n// Initialize global state if not exists\r\nif (typeof global.__ternSecure === 'undefined') {\r\n    global.__ternSecure = {\r\n      context: null,\r\n      sessions: new Map(),\r\n    }\r\n  console.log(\"ContextStore: Initialized global state\")\r\n}\r\n\r\nexport class ContextStore {\r\n  static setContext(context: RequestContext) {\r\n    console.log(\"ContextStore: Setting context:\", context)\r\n    global.__ternSecure.context = context\r\n    console.log(\"ContextStore: Context set successfully\")\r\n  }\r\n\r\n  static getContext(): RequestContext | null {\r\n    const context = global.__ternSecure.context\r\n    console.log(\"ContextStore: Getting context:\", context)\r\n    return context\r\n  }\r\n\r\n  static setSession(sessionId: string, user: User) {\r\n    console.log(\"ContextStore: Setting session:\", { sessionId, user })\r\n    global.__ternSecure.sessions.set(sessionId, user)\r\n    console.log(\"ContextStore: Session set successfully\")\r\n  }\r\n\r\n  static getSession(sessionId: string): User | null {\r\n    const user = global.__ternSecure.sessions.get(sessionId) || null\r\n    console.log(\"ContextStore: Getting session:\", { sessionId, user })\r\n    return user\r\n  }\r\n\r\n  static debug() {\r\n    return {\r\n      sessionsCount: global.__ternSecure.sessions.size,\r\n      currentSessionId: global.__ternSecure.context?.sessionId || null,\r\n      sessions: Array.from(global.__ternSecure.sessions.entries()),\r\n    }\r\n  }\r\n}\r\n\r\n"],"mappings":"AAgBA,IAAI,OAAO,OAAO,iBAAiB,aAAa;AAC5C,SAAO,eAAe;AAAA,IACpB,SAAS;AAAA,IACT,UAAU,oBAAI,IAAI;AAAA,EACpB;AACF,UAAQ,IAAI,wCAAwC;AACtD;AAEO,MAAM,aAAa;AAAA,EACxB,OAAO,WAAW,SAAyB;AACzC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO,aAAa,UAAU;AAC9B,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,aAAoC;AACzC,UAAM,UAAU,OAAO,aAAa;AACpC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,WAAW,WAAmB,MAAY;AAC/C,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO,aAAa,SAAS,IAAI,WAAW,IAAI;AAChD,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,WAAW,WAAgC;AAChD,UAAM,OAAO,OAAO,aAAa,SAAS,IAAI,SAAS,KAAK;AAC5D,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,QAAQ;AACb,WAAO;AAAA,MACL,eAAe,OAAO,aAAa,SAAS;AAAA,MAC5C,kBAAkB,OAAO,aAAa,SAAS,aAAa;AAAA,MAC5D,UAAU,MAAM,KAAK,OAAO,aAAa,SAAS,QAAQ,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/server/edge-session.js

@@ -1,16 +1,15 @@
 import { verifyFirebaseToken } from "./jwt-edge";
 async function verifySession(request) {
-  var _a, _b, _c, _d, _e, _f;
   try {
-    const sessionCookie = (_a = request.cookies.get("_session_cookie")) == null ? void 0 : _a.value;
-    const idToken = (_b = request.cookies.get("_session_token")) == null ? void 0 : _b.value;
+    const sessionCookie = request.cookies.get("_session_cookie")?.value;
+    const idToken = request.cookies.get("_session_token")?.value;
     if (sessionCookie) {
       const result = await verifyFirebaseToken(sessionCookie, true);
       if (result.valid) {
         const user = {
-          uid: (_c = result.uid) != null ? _c : "",
+          uid: result.uid ?? "",
           email: result.email || null,
-          emailVerified: (_d = result.emailVerified) != null ? _d : false,
+          emailVerified: result.emailVerified ?? false,
           authTime: result.authTime
         };
         return {
@@ -24,9 +23,9 @@ async function verifySession(request) {
       const result = await verifyFirebaseToken(idToken, false);
       if (result.valid) {
         const user = {
-          uid: (_e = result.uid) != null ? _e : "",
+          uid: result.uid ?? "",
           email: result.email || null,
-          emailVerified: (_f = result.emailVerified) != null ? _f : false,
+          emailVerified: result.emailVerified ?? false,
           authTime: result.authTime
         };
         return {

package/dist/esm/server/edge-session.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/edge-session.ts"],"sourcesContent":["import { verifyFirebaseToken } from \"./jwt-edge\"\nimport type { NextRequest } from \"next/server\"\nimport type { SessionResult, User } from \"./types\"\n\n\n\nexport async function verifySession(request: NextRequest): Promise<SessionResult> {\n  try {\n    //const cookieStore = await cookies()\n\n    // First try session cookie\n\n    const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\n    const idToken = request.cookies.get(\"_session_token\")?.value\n\n    //const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\n    if (sessionCookie) {\n      const result = await verifyFirebaseToken(sessionCookie, true)\n      if (result.valid) {\n          const user: User = {\n            uid: result.uid ?? '',\n            email: result.email || null,\n            emailVerified: result.emailVerified ?? false,\n            authTime: result.authTime,\n        }\n\n        return {\n          user,\n          token: sessionCookie,\n          sessionId: sessionCookie,\n        }\n      }\n    }\n\n    // Then try ID token\n    //const idToken = request.cookies.get(\"_session_token\")?.value\n    if (idToken) {\n      const result = await verifyFirebaseToken(idToken, false)\n      if (result.valid) {\n        const user: User =  {\n            uid: result.uid ?? '',\n            email: result.email || null,\n            emailVerified: result.emailVerified ?? false,\n            authTime: result.authTime,\n        }\n\n\n        return {\n          user,\n          token: idToken,\n          sessionId: idToken,\n        }\n      }\n    }\n\n    return {\n      user: null,\n      token: null,\n      sessionId: null,\n      error: \"No valid session found\",\n    }\n  } catch (error) {\n    console.error(\"Session verification error:\", error)\n    return {\n      user: null,\n      token: null,\n      sessionId: null,\n      error: error instanceof Error ? error.message : \"Session verification failed\",\n    }\n  }\n}"],"mappings":"AAAA,SAAS,2BAA2B;AAMpC,eAAsB,cAAc,SAA8C;AANlF;AAOE,MAAI;AAKF,UAAM,iBAAgB,aAAQ,QAAQ,IAAI,iBAAiB,MAArC,mBAAwC;AAC9D,UAAM,WAAU,aAAQ,QAAQ,IAAI,gBAAgB,MAApC,mBAAuC;AAGvD,QAAI,eAAe;AACjB,YAAM,SAAS,MAAM,oBAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AACd,cAAM,OAAa;AAAA,UACjB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,gBAAe,YAAO,kBAAP,YAAwB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAEA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAIA,QAAI,SAAS;AACX,YAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAc;AAAA,UAChB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,gBAAe,YAAO,kBAAP,YAAwB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAGA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+BAA+B,KAAK;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/server/edge-session.ts"],"sourcesContent":["import { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport type { NextRequest } from \"next/server\"\r\nimport type { SessionResult, User } from \"./types\"\r\n\r\n\r\n\r\nexport async function verifySession(request: NextRequest): Promise<SessionResult> {\r\n  try {\r\n    //const cookieStore = await cookies()\r\n\r\n    // First try session cookie\r\n\r\n    const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    const idToken = request.cookies.get(\"_session_token\")?.value\r\n\r\n    //const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n          const user: User = {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            authTime: result.authTime,\r\n        }\r\n\r\n        return {\r\n          user,\r\n          token: sessionCookie,\r\n          sessionId: sessionCookie,\r\n        }\r\n      }\r\n    }\r\n\r\n    // Then try ID token\r\n    //const idToken = request.cookies.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: User =  {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            authTime: result.authTime,\r\n        }\r\n\r\n\r\n        return {\r\n          user,\r\n          token: idToken,\r\n          sessionId: idToken,\r\n        }\r\n      }\r\n    }\r\n\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      sessionId: null,\r\n      error: \"No valid session found\",\r\n    }\r\n  } catch (error) {\r\n    console.error(\"Session verification error:\", error)\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      sessionId: null,\r\n      error: error instanceof Error ? error.message : \"Session verification failed\",\r\n    }\r\n  }\r\n}"],"mappings":"AAAA,SAAS,2BAA2B;AAMpC,eAAsB,cAAc,SAA8C;AAChF,MAAI;AAKF,UAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AAC9D,UAAM,UAAU,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAGvD,QAAI,eAAe;AACjB,YAAM,SAAS,MAAM,oBAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AACd,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAEA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAIA,QAAI,SAAS;AACX,YAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAc;AAAA,UAChB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAGA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+BAA+B,KAAK;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;","names":[]}

package/dist/esm/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/index.ts"],"sourcesContent":["export { ternSecureMiddleware, createRouteMatcher } from './ternSecureMiddleware'\nexport { auth, getUser, type AuthResult } from './auth'\nexport type { User, SessionResult } from './types'"],"mappings":"AAAA,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,MAAM,eAAgC;","names":[]}
+{"version":3,"sources":["../../../src/server/index.ts"],"sourcesContent":["export { ternSecureMiddleware, createRouteMatcher } from './ternSecureMiddleware'\r\nexport { auth, getUser, type AuthResult } from './auth'\r\nexport type { User, SessionResult } from './types'"],"mappings":"AAAA,SAAS,sBAAsB,0BAA0B;AACzD,SAAS,MAAM,eAAgC;","names":[]}