@urun-sh/next 0.2.26

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 urun contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,49 @@
+# @urun-sh/next
+
+Next.js on-ramp for uRun **scoped client tokens** — never ship your org API
+key to the browser.
+
+## One import, one line
+
+```ts
+// app/api/urun-token/route.ts
+import { urunTokenRoute } from '@urun-sh/next'
+export const POST = urunTokenRoute()
+```
+
+Set the `URUN_API_KEY` env secret and you are done: the route mints
+short-lived tokens the browser passes to the SDK through the existing `jwt` /
+`getAccessToken` auth options.
+
+## Scoping
+
+```ts
+export const POST = urunTokenRoute({
+  allowedFunctions: ['zimage/generate'],       // only these app/functions
+  allowedOrigins: ['https://app.example.com'], // only from these Origins
+  maxSessionS: 900,                            // per-session length cap
+  expiresIn: 120,                              // token start-window (max 3600)
+  subject: (req) => getUserId(req),            // stable per-end-user identity
+})
+```
+
+Constraints are enforced **server-side at session admission**. A per-request
+body may only *narrow* these (subset of an allowlist, lower expiry, tighter
+cap) — never widen, and never choose its own `subject`.
+
+Token expiry gates **starting** sessions only: a live session rides its lease
+and is never killed by token expiry; `maxSessionS` is the honest per-session
+cap (folded with the function's own `max_session_s`).
+
+## Pages Router
+
+```ts
+// pages/api/urun-token.ts
+import { urunTokenPagesHandler } from '@urun-sh/next'
+export default urunTokenPagesHandler()
+```
+
+## Server SDK
+
+The underlying mint call is `createClientToken(apiKey, options)` from
+`@urun-sh/core` — plain `fetch`, Node-safe, framework-free.

package/dist/index.cjs

@@ -0,0 +1 @@
+"use strict";var l=Object.defineProperty;var y=Object.getOwnPropertyDescriptor;var k=Object.getOwnPropertyNames;var x=Object.prototype.hasOwnProperty;var b=(e,n)=>{for(var r in n)l(e,r,{get:n[r],enumerable:!0})},R=(e,n,r,o)=>{if(n&&typeof n=="object"||typeof n=="function")for(let t of k(n))!x.call(e,t)&&t!==r&&l(e,t,{get:()=>n[t],enumerable:!(o=y(n,t))||o.enumerable});return e};var S=e=>R(l({},"__esModule",{value:!0}),e);var P={};b(P,{URUN_API_KEY_ENV:()=>w,urunTokenPagesHandler:()=>U,urunTokenRoute:()=>O});module.exports=S(P);var d=require("@urun-sh/core"),w="URUN_API_KEY",I=60,a=class extends Error{};function h(e){return Array.isArray(e)&&e.every(n=>typeof n=="string")}function T(e,n){let r=n&&typeof n=="object"&&!Array.isArray(n)?n:{},o={expiresIn:e.expiresIn,allowedFunctions:e.allowedFunctions,allowedOrigins:e.allowedOrigins,maxSessionS:e.maxSessionS},t=r.expiresIn;if(t!==void 0){if(typeof t!="number"||!Number.isInteger(t)||t<1)throw new a("expiresIn must be a positive integer");let u=e.expiresIn??I;if(t>u)throw new a(`expiresIn may not exceed the configured ${u}s`);o.expiresIn=t}let s=(u,c,f)=>{if(u===void 0)return c;if(!h(u))throw new a(`${f} must be an array of strings`);if(c){let g=u.filter(p=>!c.includes(p));if(g.length>0)throw new a(`${f} may only narrow the configured allowlist (rejected: ${g.join(", ")})`)}return u};o.allowedFunctions=s(r.allowedFunctions,e.allowedFunctions,"allowedFunctions"),o.allowedOrigins=s(r.allowedOrigins,e.allowedOrigins,"allowedOrigins");let i=r.maxSessionS;if(i!==void 0){if(typeof i!="number"||!Number.isInteger(i)||i<1)throw new a("maxSessionS must be a positive integer");o.maxSessionS=e.maxSessionS===void 0?i:Math.min(e.maxSessionS,i)}return o}async function m(e,n,r){let o=e.apiKey??process.env[w];if(!o)return console.error(`[urun] token route: no API key \u2014 set ${w} or pass options.apiKey`),{status:500,body:{message:"token route not configured"}};let t;try{t=T(e,n)}catch(s){if(s instanceof a)return{status:400,body:{message:s.message}};throw s}try{let s=await(0,d.createClientToken)(o,{baseUrl:e.baseUrl,expiresIn:t.expiresIn,allowedFunctions:t.allowedFunctions,allowedOrigins:t.allowedOrigins,maxSessionS:t.maxSessionS,metadata:e.metadata,subject:r,fetch:e.fetch});return{status:200,body:{token:s.token,expiresAt:s.expiresAt.toISOString(),orgId:s.orgId}}}catch(s){let i=s instanceof d.ClientTokenError?`${s.message} (status ${s.status??"n/a"})`:s instanceof Error?s.message:String(s);return console.error(`[urun] token route: mint failed: ${i}`),{status:502,body:{message:"token mint failed"}}}}function O(e={}){return async n=>{let r;try{r=await n.json()}catch{r=void 0}let o=e.subject?await e.subject(n):void 0,{status:t,body:s}=await m(e,r,o);return new Response(JSON.stringify(s),{status:t,headers:{"content-type":"application/json"}})}}function U(e={}){return async(n,r)=>{if((n.method??"GET").toUpperCase()!=="POST"){r.status(405).json({message:"method not allowed"});return}let{status:o,body:t}=await m(e,n.body,void 0);r.status(o).json(t)}}0&&(module.exports={URUN_API_KEY_ENV,urunTokenPagesHandler,urunTokenRoute});

package/dist/index.d.cts

@@ -0,0 +1,71 @@
+import { CreateClientTokenOptions } from '@urun-sh/core';
+
+/**
+ * @urun-sh/next — the Next.js on-ramp for uRun scoped client tokens.
+ *
+ * The whole integration is ONE import + ONE line:
+ *
+ *   // app/api/urun-token/route.ts
+ *   import { urunTokenRoute } from '@urun-sh/next'
+ *   export const POST = urunTokenRoute()
+ *
+ * The route mints short-lived scoped client tokens with your org API key
+ * (the standard `URUN_API_KEY` env secret) via `createClientToken` from
+ * `@urun-sh/core`, so the key NEVER ships to the browser. The browser hands
+ * the minted token to the SDK through the existing `jwt` / `getAccessToken`
+ * auth options.
+ *
+ * SECURITY MODEL of the per-request body: the browser may only NARROW the
+ * scope your options configured — request a SUBSET of a configured function /
+ * origin allowlist, LOWER the expiry, and maxSessionS folds by MIN. It can
+ * never widen anything, and it can never choose its own `subject` (identity
+ * is server-derived via `options.subject`, defaulting to a random subject per
+ * token so distinct end-users never share a session).
+ */
+
+/** The standard env secret the route reads the org API key from. */
+declare const URUN_API_KEY_ENV = "URUN_API_KEY";
+interface UrunTokenRouteOptions extends Omit<CreateClientTokenOptions, 'fetch' | 'subject'> {
+    /** Org API key (default: `process.env.URUN_API_KEY`). */
+    apiKey?: string;
+    /**
+     * Derive a STABLE per-end-user subject from the request (e.g. your auth
+     * session). A stable subject coalesces one user's tabs into one session;
+     * omitted, every token gets a random subject (users never share sessions).
+     * The browser body can never set this.
+     */
+    subject?: (request: Request) => string | undefined | Promise<string | undefined>;
+    /** Fetch override (tests / custom agents). */
+    fetch?: typeof fetch;
+}
+/** The JSON shape a successful token response carries to the browser. */
+interface UrunTokenResponseBody {
+    token: string;
+    expiresAt: string;
+    orgId: string;
+}
+/**
+ * A fully-built Next.js App Router route handler that mints scoped client
+ * tokens: `export const POST = urunTokenRoute()`.
+ */
+declare function urunTokenRoute(options?: UrunTokenRouteOptions): (request: Request) => Promise<Response>;
+/**
+ * Structural Pages Router types — no dependency on `next` itself, so the
+ * package builds/tests standalone and works with any Next version.
+ */
+interface UrunTokenPagesRequest {
+    method?: string;
+    body?: unknown;
+}
+interface UrunTokenPagesResponse {
+    status(code: number): UrunTokenPagesResponse;
+    json(body: unknown): void;
+}
+/**
+ * The Pages Router variant: `export default urunTokenPagesHandler()`.
+ * NOTE: `options.subject` receives no Request here (Pages req is structural);
+ * derive identity inside your own wrapper if you need it on Pages Router.
+ */
+declare function urunTokenPagesHandler(options?: UrunTokenRouteOptions): (req: UrunTokenPagesRequest, res: UrunTokenPagesResponse) => Promise<void>;
+
+export { URUN_API_KEY_ENV, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, urunTokenPagesHandler, urunTokenRoute };

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+import { CreateClientTokenOptions } from '@urun-sh/core';
+
+declare const URUN_API_KEY_ENV = "URUN_API_KEY";
+interface UrunTokenRouteOptions extends Omit<CreateClientTokenOptions, 'fetch' | 'subject'> {
+    
+    apiKey?: string;
+    
+    subject?: (request: Request) => string | undefined | Promise<string | undefined>;
+    
+    fetch?: typeof fetch;
+}
+
+interface UrunTokenResponseBody {
+    token: string;
+    expiresAt: string;
+    orgId: string;
+}
+
+declare function urunTokenRoute(options?: UrunTokenRouteOptions): (request: Request) => Promise<Response>;
+
+interface UrunTokenPagesRequest {
+    method?: string;
+    body?: unknown;
+}
+interface UrunTokenPagesResponse {
+    status(code: number): UrunTokenPagesResponse;
+    json(body: unknown): void;
+}
+
+declare function urunTokenPagesHandler(options?: UrunTokenRouteOptions): (req: UrunTokenPagesRequest, res: UrunTokenPagesResponse) => Promise<void>;
+
+export { URUN_API_KEY_ENV, type UrunTokenPagesRequest, type UrunTokenPagesResponse, type UrunTokenResponseBody, type UrunTokenRouteOptions, urunTokenPagesHandler, urunTokenRoute };

package/dist/index.js

@@ -0,0 +1 @@
+import{createClientToken as m,ClientTokenError as p}from"@urun-sh/core";var w="URUN_API_KEY",y=60,a=class extends Error{};function k(e){return Array.isArray(e)&&e.every(s=>typeof s=="string")}function x(e,s){let r=s&&typeof s=="object"&&!Array.isArray(s)?s:{},o={expiresIn:e.expiresIn,allowedFunctions:e.allowedFunctions,allowedOrigins:e.allowedOrigins,maxSessionS:e.maxSessionS},t=r.expiresIn;if(t!==void 0){if(typeof t!="number"||!Number.isInteger(t)||t<1)throw new a("expiresIn must be a positive integer");let u=e.expiresIn??y;if(t>u)throw new a(`expiresIn may not exceed the configured ${u}s`);o.expiresIn=t}let n=(u,d,c)=>{if(u===void 0)return d;if(!k(u))throw new a(`${c} must be an array of strings`);if(d){let l=u.filter(g=>!d.includes(g));if(l.length>0)throw new a(`${c} may only narrow the configured allowlist (rejected: ${l.join(", ")})`)}return u};o.allowedFunctions=n(r.allowedFunctions,e.allowedFunctions,"allowedFunctions"),o.allowedOrigins=n(r.allowedOrigins,e.allowedOrigins,"allowedOrigins");let i=r.maxSessionS;if(i!==void 0){if(typeof i!="number"||!Number.isInteger(i)||i<1)throw new a("maxSessionS must be a positive integer");o.maxSessionS=e.maxSessionS===void 0?i:Math.min(e.maxSessionS,i)}return o}async function f(e,s,r){let o=e.apiKey??process.env[w];if(!o)return console.error(`[urun] token route: no API key \u2014 set ${w} or pass options.apiKey`),{status:500,body:{message:"token route not configured"}};let t;try{t=x(e,s)}catch(n){if(n instanceof a)return{status:400,body:{message:n.message}};throw n}try{let n=await m(o,{baseUrl:e.baseUrl,expiresIn:t.expiresIn,allowedFunctions:t.allowedFunctions,allowedOrigins:t.allowedOrigins,maxSessionS:t.maxSessionS,metadata:e.metadata,subject:r,fetch:e.fetch});return{status:200,body:{token:n.token,expiresAt:n.expiresAt.toISOString(),orgId:n.orgId}}}catch(n){let i=n instanceof p?`${n.message} (status ${n.status??"n/a"})`:n instanceof Error?n.message:String(n);return console.error(`[urun] token route: mint failed: ${i}`),{status:502,body:{message:"token mint failed"}}}}function R(e={}){return async s=>{let r;try{r=await s.json()}catch{r=void 0}let o=e.subject?await e.subject(s):void 0,{status:t,body:n}=await f(e,r,o);return new Response(JSON.stringify(n),{status:t,headers:{"content-type":"application/json"}})}}function S(e={}){return async(s,r)=>{if((s.method??"GET").toUpperCase()!=="POST"){r.status(405).json({message:"method not allowed"});return}let{status:o,body:t}=await f(e,s.body,void 0);r.status(o).json(t)}}export{w as URUN_API_KEY_ENV,S as urunTokenPagesHandler,R as urunTokenRoute};

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@urun-sh/next",
+  "version": "0.2.26",
+  "description": "Next.js on-ramp for uRun scoped client tokens — a fully-built token route in one import and one line.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/urun-sh/urun-ts.git",
+    "directory": "packages/next"
+  },
+  "bugs": {
+    "url": "https://github.com/urun-sh/urun-ts/issues"
+  },
+  "homepage": "https://github.com/urun-sh/urun-ts/tree/main/packages/next#readme",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "peerDependencies": {
+    "@urun-sh/core": "^0.2.26"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.3.0",
+    "vitest": "^3.0.0",
+    "@urun-sh/core": "0.2.26"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup && node ../../scripts/sanitize-dist.mjs .",
+    "test": "vitest run",
+    "dev": "tsup --watch"
+  }
+}