@victusvinceere/saas-core 0.1.0

package/dist/auth/index.d.mts

@@ -0,0 +1,40 @@
+import { NextAuthConfig } from 'next-auth';
+import { Adapter } from 'next-auth/adapters';
+
+type AuthProvider = "google" | "github" | "email" | "credentials";
+interface AuthConfigOptions {
+    adapter: Adapter;
+    providers: AuthProvider[];
+    pages?: {
+        signIn?: string;
+        signOut?: string;
+        error?: string;
+        verifyRequest?: string;
+        newUser?: string;
+    };
+    callbacks?: {
+        onUserCreated?: (user: {
+            id: string;
+            email: string;
+        }) => Promise<void>;
+        getUserRole?: (userId: string) => Promise<string>;
+    };
+    session?: {
+        strategy?: "jwt" | "database";
+        maxAge?: number;
+    };
+    credentials?: {
+        authorize: (credentials: Record<string, string>) => Promise<{
+            id: string;
+            email: string;
+            name?: string;
+            image?: string;
+        } | null>;
+    };
+    email?: {
+        from?: string;
+    };
+}
+declare function createAuthConfig(options: AuthConfigOptions): NextAuthConfig;
+
+export { type AuthConfigOptions, type AuthProvider, createAuthConfig };

package/dist/auth/index.d.ts

@@ -0,0 +1,40 @@
+import { NextAuthConfig } from 'next-auth';
+import { Adapter } from 'next-auth/adapters';
+
+type AuthProvider = "google" | "github" | "email" | "credentials";
+interface AuthConfigOptions {
+    adapter: Adapter;
+    providers: AuthProvider[];
+    pages?: {
+        signIn?: string;
+        signOut?: string;
+        error?: string;
+        verifyRequest?: string;
+        newUser?: string;
+    };
+    callbacks?: {
+        onUserCreated?: (user: {
+            id: string;
+            email: string;
+        }) => Promise<void>;
+        getUserRole?: (userId: string) => Promise<string>;
+    };
+    session?: {
+        strategy?: "jwt" | "database";
+        maxAge?: number;
+    };
+    credentials?: {
+        authorize: (credentials: Record<string, string>) => Promise<{
+            id: string;
+            email: string;
+            name?: string;
+            image?: string;
+        } | null>;
+    };
+    email?: {
+        from?: string;
+    };
+}
+declare function createAuthConfig(options: AuthConfigOptions): NextAuthConfig;
+
+export { type AuthConfigOptions, type AuthProvider, createAuthConfig };

package/dist/auth/index.js

@@ -0,0 +1,147 @@
+"use client";
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/index.ts
+var auth_exports = {};
+__export(auth_exports, {
+  createAuthConfig: () => createAuthConfig
+});
+module.exports = __toCommonJS(auth_exports);
+
+// src/auth/create-auth-config.ts
+var import_google = __toESM(require("next-auth/providers/google"));
+var import_resend = __toESM(require("next-auth/providers/resend"));
+var import_github = __toESM(require("next-auth/providers/github"));
+var import_credentials = __toESM(require("next-auth/providers/credentials"));
+function createProviders(options) {
+  const providers = [];
+  for (const provider of options.providers) {
+    switch (provider) {
+      case "google":
+        providers.push(
+          (0, import_google.default)({
+            clientId: process.env.GOOGLE_CLIENT_ID,
+            clientSecret: process.env.GOOGLE_CLIENT_SECRET
+          })
+        );
+        break;
+      case "github":
+        providers.push(
+          (0, import_github.default)({
+            clientId: process.env.GITHUB_CLIENT_ID,
+            clientSecret: process.env.GITHUB_CLIENT_SECRET
+          })
+        );
+        break;
+      case "email":
+        providers.push(
+          (0, import_resend.default)({
+            apiKey: process.env.AUTH_RESEND_KEY,
+            from: options.email?.from || process.env.EMAIL_FROM || "no-reply@example.com"
+          })
+        );
+        break;
+      case "credentials":
+        if (options.credentials?.authorize) {
+          providers.push(
+            (0, import_credentials.default)({
+              credentials: {
+                email: { label: "Email", type: "email" },
+                password: { label: "Password", type: "password" }
+              },
+              authorize: async (credentials) => {
+                if (!credentials?.email || !credentials?.password) {
+                  return null;
+                }
+                return options.credentials.authorize(credentials);
+              }
+            })
+          );
+        }
+        break;
+    }
+  }
+  return providers;
+}
+function createAuthConfig(options) {
+  return {
+    adapter: options.adapter,
+    session: {
+      strategy: options.session?.strategy || "jwt",
+      maxAge: options.session?.maxAge || 30 * 24 * 60 * 60
+      // 30 days
+    },
+    providers: createProviders(options),
+    pages: {
+      signIn: options.pages?.signIn || "/login",
+      error: options.pages?.error || "/auth-error",
+      verifyRequest: options.pages?.verifyRequest || "/verify-request",
+      newUser: options.pages?.newUser
+    },
+    callbacks: {
+      async jwt({ token, user, trigger }) {
+        if (user) {
+          token.id = user.id;
+          if (options.callbacks?.getUserRole) {
+            token.role = await options.callbacks.getUserRole(user.id);
+          } else {
+            token.role = "USER";
+          }
+        }
+        if (trigger === "update" && token.id && options.callbacks?.getUserRole) {
+          token.role = await options.callbacks.getUserRole(token.id);
+        }
+        return token;
+      },
+      session({ session, token }) {
+        if (session.user && token.id) {
+          session.user.id = token.id;
+          session.user.role = token.role;
+        }
+        return session;
+      }
+    },
+    events: {
+      async createUser({ user }) {
+        if (options.callbacks?.onUserCreated && user.email) {
+          await options.callbacks.onUserCreated({
+            id: user.id,
+            email: user.email
+          });
+        }
+      }
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createAuthConfig
+});
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/index.ts","../../src/auth/create-auth-config.ts"],"sourcesContent":["export { createAuthConfig } from \"./create-auth-config\";\nexport type { AuthConfigOptions, AuthProvider } from \"./create-auth-config\";\n","import type { NextAuthConfig } from \"next-auth\";\nimport type { Adapter } from \"next-auth/adapters\";\nimport type { Provider } from \"next-auth/providers\";\nimport Google from \"next-auth/providers/google\";\nimport Resend from \"next-auth/providers/resend\";\nimport GitHub from \"next-auth/providers/github\";\nimport Credentials from \"next-auth/providers/credentials\";\n\nexport type AuthProvider = \"google\" | \"github\" | \"email\" | \"credentials\";\n\nexport interface AuthConfigOptions {\n  adapter: Adapter;\n  providers: AuthProvider[];\n  pages?: {\n    signIn?: string;\n    signOut?: string;\n    error?: string;\n    verifyRequest?: string;\n    newUser?: string;\n  };\n  callbacks?: {\n    onUserCreated?: (user: { id: string; email: string }) => Promise<void>;\n    getUserRole?: (userId: string) => Promise<string>;\n  };\n  session?: {\n    strategy?: \"jwt\" | \"database\";\n    maxAge?: number;\n  };\n  credentials?: {\n    authorize: (credentials: Record<string, string>) => Promise<{\n      id: string;\n      email: string;\n      name?: string;\n      image?: string;\n    } | null>;\n  };\n  email?: {\n    from?: string;\n  };\n}\n\nfunction createProviders(\n  options: AuthConfigOptions\n): Provider[] {\n  const providers: Provider[] = [];\n\n  for (const provider of options.providers) {\n    switch (provider) {\n      case \"google\":\n        providers.push(\n          Google({\n            clientId: process.env.GOOGLE_CLIENT_ID!,\n            clientSecret: process.env.GOOGLE_CLIENT_SECRET!,\n          })\n        );\n        break;\n      case \"github\":\n        providers.push(\n          GitHub({\n            clientId: process.env.GITHUB_CLIENT_ID!,\n            clientSecret: process.env.GITHUB_CLIENT_SECRET!,\n          })\n        );\n        break;\n      case \"email\":\n        providers.push(\n          Resend({\n            apiKey: process.env.AUTH_RESEND_KEY!,\n            from: options.email?.from || process.env.EMAIL_FROM || \"no-reply@example.com\",\n          })\n        );\n        break;\n      case \"credentials\":\n        if (options.credentials?.authorize) {\n          providers.push(\n            Credentials({\n              credentials: {\n                email: { label: \"Email\", type: \"email\" },\n                password: { label: \"Password\", type: \"password\" },\n              },\n              authorize: async (credentials) => {\n                if (!credentials?.email || !credentials?.password) {\n                  return null;\n                }\n                return options.credentials!.authorize(credentials as Record<string, string>);\n              },\n            })\n          );\n        }\n        break;\n    }\n  }\n\n  return providers;\n}\n\nexport function createAuthConfig(options: AuthConfigOptions): NextAuthConfig {\n  return {\n    adapter: options.adapter,\n    session: {\n      strategy: options.session?.strategy || \"jwt\",\n      maxAge: options.session?.maxAge || 30 * 24 * 60 * 60, // 30 days\n    },\n    providers: createProviders(options),\n    pages: {\n      signIn: options.pages?.signIn || \"/login\",\n      error: options.pages?.error || \"/auth-error\",\n      verifyRequest: options.pages?.verifyRequest || \"/verify-request\",\n      newUser: options.pages?.newUser,\n    },\n    callbacks: {\n      async jwt({ token, user, trigger }) {\n        if (user) {\n          token.id = user.id;\n          // Get user role from callback or default to USER\n          if (options.callbacks?.getUserRole) {\n            token.role = await options.callbacks.getUserRole(user.id);\n          } else {\n            token.role = \"USER\";\n          }\n        }\n        // Refresh role on explicit update trigger\n        if (trigger === \"update\" && token.id && options.callbacks?.getUserRole) {\n          token.role = await options.callbacks.getUserRole(token.id as string);\n        }\n        return token;\n      },\n      session({ session, token }) {\n        if (session.user && token.id) {\n          session.user.id = token.id as string;\n          session.user.role = token.role as string;\n        }\n        return session;\n      },\n    },\n    events: {\n      async createUser({ user }) {\n        if (options.callbacks?.onUserCreated && user.email) {\n          await options.callbacks.onUserCreated({\n            id: user.id!,\n            email: user.email,\n          });\n        }\n      },\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACGA,oBAAmB;AACnB,oBAAmB;AACnB,oBAAmB;AACnB,yBAAwB;AAmCxB,SAAS,gBACP,SACY;AACZ,QAAM,YAAwB,CAAC;AAE/B,aAAW,YAAY,QAAQ,WAAW;AACxC,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,kBAAU;AAAA,cACR,cAAAA,SAAO;AAAA,YACL,UAAU,QAAQ,IAAI;AAAA,YACtB,cAAc,QAAQ,IAAI;AAAA,UAC5B,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,kBAAU;AAAA,cACR,cAAAC,SAAO;AAAA,YACL,UAAU,QAAQ,IAAI;AAAA,YACtB,cAAc,QAAQ,IAAI;AAAA,UAC5B,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,kBAAU;AAAA,cACR,cAAAC,SAAO;AAAA,YACL,QAAQ,QAAQ,IAAI;AAAA,YACpB,MAAM,QAAQ,OAAO,QAAQ,QAAQ,IAAI,cAAc;AAAA,UACzD,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,YAAI,QAAQ,aAAa,WAAW;AAClC,oBAAU;AAAA,gBACR,mBAAAC,SAAY;AAAA,cACV,aAAa;AAAA,gBACX,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ;AAAA,gBACvC,UAAU,EAAE,OAAO,YAAY,MAAM,WAAW;AAAA,cAClD;AAAA,cACA,WAAW,OAAO,gBAAgB;AAChC,oBAAI,CAAC,aAAa,SAAS,CAAC,aAAa,UAAU;AACjD,yBAAO;AAAA,gBACT;AACA,uBAAO,QAAQ,YAAa,UAAU,WAAqC;AAAA,cAC7E;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AACA;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,SAA4C;AAC3E,SAAO;AAAA,IACL,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,MACP,UAAU,QAAQ,SAAS,YAAY;AAAA,MACvC,QAAQ,QAAQ,SAAS,UAAU,KAAK,KAAK,KAAK;AAAA;AAAA,IACpD;AAAA,IACA,WAAW,gBAAgB,OAAO;AAAA,IAClC,OAAO;AAAA,MACL,QAAQ,QAAQ,OAAO,UAAU;AAAA,MACjC,OAAO,QAAQ,OAAO,SAAS;AAAA,MAC/B,eAAe,QAAQ,OAAO,iBAAiB;AAAA,MAC/C,SAAS,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,WAAW;AAAA,MACT,MAAM,IAAI,EAAE,OAAO,MAAM,QAAQ,GAAG;AAClC,YAAI,MAAM;AACR,gBAAM,KAAK,KAAK;AAEhB,cAAI,QAAQ,WAAW,aAAa;AAClC,kBAAM,OAAO,MAAM,QAAQ,UAAU,YAAY,KAAK,EAAE;AAAA,UAC1D,OAAO;AACL,kBAAM,OAAO;AAAA,UACf;AAAA,QACF;AAEA,YAAI,YAAY,YAAY,MAAM,MAAM,QAAQ,WAAW,aAAa;AACtE,gBAAM,OAAO,MAAM,QAAQ,UAAU,YAAY,MAAM,EAAY;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAAA,MACA,QAAQ,EAAE,SAAS,MAAM,GAAG;AAC1B,YAAI,QAAQ,QAAQ,MAAM,IAAI;AAC5B,kBAAQ,KAAK,KAAK,MAAM;AACxB,kBAAQ,KAAK,OAAO,MAAM;AAAA,QAC5B;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,MAAM,WAAW,EAAE,KAAK,GAAG;AACzB,YAAI,QAAQ,WAAW,iBAAiB,KAAK,OAAO;AAClD,gBAAM,QAAQ,UAAU,cAAc;AAAA,YACpC,IAAI,KAAK;AAAA,YACT,OAAO,KAAK;AAAA,UACd,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["Google","GitHub","Resend","Credentials"]}

package/dist/auth/index.mjs

@@ -0,0 +1,111 @@
+"use client";
+
+// src/auth/create-auth-config.ts
+import Google from "next-auth/providers/google";
+import Resend from "next-auth/providers/resend";
+import GitHub from "next-auth/providers/github";
+import Credentials from "next-auth/providers/credentials";
+function createProviders(options) {
+  const providers = [];
+  for (const provider of options.providers) {
+    switch (provider) {
+      case "google":
+        providers.push(
+          Google({
+            clientId: process.env.GOOGLE_CLIENT_ID,
+            clientSecret: process.env.GOOGLE_CLIENT_SECRET
+          })
+        );
+        break;
+      case "github":
+        providers.push(
+          GitHub({
+            clientId: process.env.GITHUB_CLIENT_ID,
+            clientSecret: process.env.GITHUB_CLIENT_SECRET
+          })
+        );
+        break;
+      case "email":
+        providers.push(
+          Resend({
+            apiKey: process.env.AUTH_RESEND_KEY,
+            from: options.email?.from || process.env.EMAIL_FROM || "no-reply@example.com"
+          })
+        );
+        break;
+      case "credentials":
+        if (options.credentials?.authorize) {
+          providers.push(
+            Credentials({
+              credentials: {
+                email: { label: "Email", type: "email" },
+                password: { label: "Password", type: "password" }
+              },
+              authorize: async (credentials) => {
+                if (!credentials?.email || !credentials?.password) {
+                  return null;
+                }
+                return options.credentials.authorize(credentials);
+              }
+            })
+          );
+        }
+        break;
+    }
+  }
+  return providers;
+}
+function createAuthConfig(options) {
+  return {
+    adapter: options.adapter,
+    session: {
+      strategy: options.session?.strategy || "jwt",
+      maxAge: options.session?.maxAge || 30 * 24 * 60 * 60
+      // 30 days
+    },
+    providers: createProviders(options),
+    pages: {
+      signIn: options.pages?.signIn || "/login",
+      error: options.pages?.error || "/auth-error",
+      verifyRequest: options.pages?.verifyRequest || "/verify-request",
+      newUser: options.pages?.newUser
+    },
+    callbacks: {
+      async jwt({ token, user, trigger }) {
+        if (user) {
+          token.id = user.id;
+          if (options.callbacks?.getUserRole) {
+            token.role = await options.callbacks.getUserRole(user.id);
+          } else {
+            token.role = "USER";
+          }
+        }
+        if (trigger === "update" && token.id && options.callbacks?.getUserRole) {
+          token.role = await options.callbacks.getUserRole(token.id);
+        }
+        return token;
+      },
+      session({ session, token }) {
+        if (session.user && token.id) {
+          session.user.id = token.id;
+          session.user.role = token.role;
+        }
+        return session;
+      }
+    },
+    events: {
+      async createUser({ user }) {
+        if (options.callbacks?.onUserCreated && user.email) {
+          await options.callbacks.onUserCreated({
+            id: user.id,
+            email: user.email
+          });
+        }
+      }
+    }
+  };
+}
+export {
+  createAuthConfig
+};
+//# sourceMappingURL=index.mjs.map

package/dist/auth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/create-auth-config.ts"],"sourcesContent":["import type { NextAuthConfig } from \"next-auth\";\nimport type { Adapter } from \"next-auth/adapters\";\nimport type { Provider } from \"next-auth/providers\";\nimport Google from \"next-auth/providers/google\";\nimport Resend from \"next-auth/providers/resend\";\nimport GitHub from \"next-auth/providers/github\";\nimport Credentials from \"next-auth/providers/credentials\";\n\nexport type AuthProvider = \"google\" | \"github\" | \"email\" | \"credentials\";\n\nexport interface AuthConfigOptions {\n  adapter: Adapter;\n  providers: AuthProvider[];\n  pages?: {\n    signIn?: string;\n    signOut?: string;\n    error?: string;\n    verifyRequest?: string;\n    newUser?: string;\n  };\n  callbacks?: {\n    onUserCreated?: (user: { id: string; email: string }) => Promise<void>;\n    getUserRole?: (userId: string) => Promise<string>;\n  };\n  session?: {\n    strategy?: \"jwt\" | \"database\";\n    maxAge?: number;\n  };\n  credentials?: {\n    authorize: (credentials: Record<string, string>) => Promise<{\n      id: string;\n      email: string;\n      name?: string;\n      image?: string;\n    } | null>;\n  };\n  email?: {\n    from?: string;\n  };\n}\n\nfunction createProviders(\n  options: AuthConfigOptions\n): Provider[] {\n  const providers: Provider[] = [];\n\n  for (const provider of options.providers) {\n    switch (provider) {\n      case \"google\":\n        providers.push(\n          Google({\n            clientId: process.env.GOOGLE_CLIENT_ID!,\n            clientSecret: process.env.GOOGLE_CLIENT_SECRET!,\n          })\n        );\n        break;\n      case \"github\":\n        providers.push(\n          GitHub({\n            clientId: process.env.GITHUB_CLIENT_ID!,\n            clientSecret: process.env.GITHUB_CLIENT_SECRET!,\n          })\n        );\n        break;\n      case \"email\":\n        providers.push(\n          Resend({\n            apiKey: process.env.AUTH_RESEND_KEY!,\n            from: options.email?.from || process.env.EMAIL_FROM || \"no-reply@example.com\",\n          })\n        );\n        break;\n      case \"credentials\":\n        if (options.credentials?.authorize) {\n          providers.push(\n            Credentials({\n              credentials: {\n                email: { label: \"Email\", type: \"email\" },\n                password: { label: \"Password\", type: \"password\" },\n              },\n              authorize: async (credentials) => {\n                if (!credentials?.email || !credentials?.password) {\n                  return null;\n                }\n                return options.credentials!.authorize(credentials as Record<string, string>);\n              },\n            })\n          );\n        }\n        break;\n    }\n  }\n\n  return providers;\n}\n\nexport function createAuthConfig(options: AuthConfigOptions): NextAuthConfig {\n  return {\n    adapter: options.adapter,\n    session: {\n      strategy: options.session?.strategy || \"jwt\",\n      maxAge: options.session?.maxAge || 30 * 24 * 60 * 60, // 30 days\n    },\n    providers: createProviders(options),\n    pages: {\n      signIn: options.pages?.signIn || \"/login\",\n      error: options.pages?.error || \"/auth-error\",\n      verifyRequest: options.pages?.verifyRequest || \"/verify-request\",\n      newUser: options.pages?.newUser,\n    },\n    callbacks: {\n      async jwt({ token, user, trigger }) {\n        if (user) {\n          token.id = user.id;\n          // Get user role from callback or default to USER\n          if (options.callbacks?.getUserRole) {\n            token.role = await options.callbacks.getUserRole(user.id);\n          } else {\n            token.role = \"USER\";\n          }\n        }\n        // Refresh role on explicit update trigger\n        if (trigger === \"update\" && token.id && options.callbacks?.getUserRole) {\n          token.role = await options.callbacks.getUserRole(token.id as string);\n        }\n        return token;\n      },\n      session({ session, token }) {\n        if (session.user && token.id) {\n          session.user.id = token.id as string;\n          session.user.role = token.role as string;\n        }\n        return session;\n      },\n    },\n    events: {\n      async createUser({ user }) {\n        if (options.callbacks?.onUserCreated && user.email) {\n          await options.callbacks.onUserCreated({\n            id: user.id!,\n            email: user.email,\n          });\n        }\n      },\n    },\n  };\n}\n"],"mappings":";;;AAGA,OAAO,YAAY;AACnB,OAAO,YAAY;AACnB,OAAO,YAAY;AACnB,OAAO,iBAAiB;AAmCxB,SAAS,gBACP,SACY;AACZ,QAAM,YAAwB,CAAC;AAE/B,aAAW,YAAY,QAAQ,WAAW;AACxC,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,kBAAU;AAAA,UACR,OAAO;AAAA,YACL,UAAU,QAAQ,IAAI;AAAA,YACtB,cAAc,QAAQ,IAAI;AAAA,UAC5B,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,kBAAU;AAAA,UACR,OAAO;AAAA,YACL,UAAU,QAAQ,IAAI;AAAA,YACtB,cAAc,QAAQ,IAAI;AAAA,UAC5B,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,kBAAU;AAAA,UACR,OAAO;AAAA,YACL,QAAQ,QAAQ,IAAI;AAAA,YACpB,MAAM,QAAQ,OAAO,QAAQ,QAAQ,IAAI,cAAc;AAAA,UACzD,CAAC;AAAA,QACH;AACA;AAAA,MACF,KAAK;AACH,YAAI,QAAQ,aAAa,WAAW;AAClC,oBAAU;AAAA,YACR,YAAY;AAAA,cACV,aAAa;AAAA,gBACX,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ;AAAA,gBACvC,UAAU,EAAE,OAAO,YAAY,MAAM,WAAW;AAAA,cAClD;AAAA,cACA,WAAW,OAAO,gBAAgB;AAChC,oBAAI,CAAC,aAAa,SAAS,CAAC,aAAa,UAAU;AACjD,yBAAO;AAAA,gBACT;AACA,uBAAO,QAAQ,YAAa,UAAU,WAAqC;AAAA,cAC7E;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AACA;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,SAA4C;AAC3E,SAAO;AAAA,IACL,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,MACP,UAAU,QAAQ,SAAS,YAAY;AAAA,MACvC,QAAQ,QAAQ,SAAS,UAAU,KAAK,KAAK,KAAK;AAAA;AAAA,IACpD;AAAA,IACA,WAAW,gBAAgB,OAAO;AAAA,IAClC,OAAO;AAAA,MACL,QAAQ,QAAQ,OAAO,UAAU;AAAA,MACjC,OAAO,QAAQ,OAAO,SAAS;AAAA,MAC/B,eAAe,QAAQ,OAAO,iBAAiB;AAAA,MAC/C,SAAS,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,WAAW;AAAA,MACT,MAAM,IAAI,EAAE,OAAO,MAAM,QAAQ,GAAG;AAClC,YAAI,MAAM;AACR,gBAAM,KAAK,KAAK;AAEhB,cAAI,QAAQ,WAAW,aAAa;AAClC,kBAAM,OAAO,MAAM,QAAQ,UAAU,YAAY,KAAK,EAAE;AAAA,UAC1D,OAAO;AACL,kBAAM,OAAO;AAAA,UACf;AAAA,QACF;AAEA,YAAI,YAAY,YAAY,MAAM,MAAM,QAAQ,WAAW,aAAa;AACtE,gBAAM,OAAO,MAAM,QAAQ,UAAU,YAAY,MAAM,EAAY;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAAA,MACA,QAAQ,EAAE,SAAS,MAAM,GAAG;AAC1B,YAAI,QAAQ,QAAQ,MAAM,IAAI;AAC5B,kBAAQ,KAAK,KAAK,MAAM;AACxB,kBAAQ,KAAK,OAAO,MAAM;AAAA,QAC5B;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,MAAM,WAAW,EAAE,KAAK,GAAG;AACzB,YAAI,QAAQ,WAAW,iBAAiB,KAAK,OAAO;AAClD,gBAAM,QAAQ,UAAU,cAAc;AAAA,YACpC,IAAI,KAAK;AAAA,YACT,OAAO,KAAK;AAAA,UACd,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/authorization/index.d.mts

@@ -0,0 +1,78 @@
+import { NextResponse } from 'next/server';
+
+type Role = "USER" | "MODERATOR" | "ADMIN" | "SUPER_ADMIN";
+interface AuthorizationConfig {
+    roleHierarchy?: string[];
+    permissions?: Record<string, string[]>;
+}
+/**
+ * Configure the authorization system
+ */
+declare function configureAuthorization(options: AuthorizationConfig): void;
+/**
+ * Check if a role has at least the minimum required role level
+ */
+declare function hasMinRole(userRole: string, minRole: string): boolean;
+/**
+ * Check if user has one of the allowed roles
+ */
+declare function hasRole(userRole: string, allowedRoles: string[]): boolean;
+/**
+ * Check if user is admin (ADMIN or SUPER_ADMIN)
+ */
+declare function isAdmin(role: string): boolean;
+/**
+ * Check if user is super admin
+ */
+declare function isSuperAdmin(role: string): boolean;
+/**
+ * Check if user is moderator or higher
+ */
+declare function isModerator(role: string): boolean;
+/**
+ * Check if user has a specific permission
+ */
+declare function hasPermission(userRole: string, permission: string): boolean;
+/**
+ * Default permissions configuration
+ */
+declare const PERMISSIONS: {
+    readonly "users:read": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "users:update": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "users:delete": readonly ["SUPER_ADMIN"];
+    readonly "users:updateRole": readonly ["SUPER_ADMIN"];
+    readonly "posts:create": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "posts:update": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "posts:delete": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "posts:publish": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "admin:access": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "admin:settings": readonly ["SUPER_ADMIN"];
+    readonly "subscriptions:read": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "subscriptions:manage": readonly ["SUPER_ADMIN"];
+};
+type Permission = keyof typeof PERMISSIONS;
+/**
+ * Higher-order function for protecting API routes
+ * Returns unauthorized response if user doesn't have required role
+ */
+interface WithRoleResult<T = unknown> {
+    authorized: boolean;
+    response: NextResponse | null;
+    session: T | null;
+}
+interface WithRoleOptions {
+    getSession: () => Promise<{
+        user?: {
+            id?: string;
+            role?: string;
+        };
+    } | null>;
+    minRole: string;
+}
+declare function withRole(options: WithRoleOptions): Promise<WithRoleResult>;
+/**
+ * Create a custom permission checker
+ */
+declare function createPermissionChecker(permissions: Record<string, string[]>): (userRole: string, permission: string) => boolean;
+
+export { type AuthorizationConfig, PERMISSIONS, type Permission, type Role, type WithRoleOptions, type WithRoleResult, configureAuthorization, createPermissionChecker, hasMinRole, hasPermission, hasRole, isAdmin, isModerator, isSuperAdmin, withRole };

package/dist/authorization/index.d.ts

@@ -0,0 +1,78 @@
+import { NextResponse } from 'next/server';
+
+type Role = "USER" | "MODERATOR" | "ADMIN" | "SUPER_ADMIN";
+interface AuthorizationConfig {
+    roleHierarchy?: string[];
+    permissions?: Record<string, string[]>;
+}
+/**
+ * Configure the authorization system
+ */
+declare function configureAuthorization(options: AuthorizationConfig): void;
+/**
+ * Check if a role has at least the minimum required role level
+ */
+declare function hasMinRole(userRole: string, minRole: string): boolean;
+/**
+ * Check if user has one of the allowed roles
+ */
+declare function hasRole(userRole: string, allowedRoles: string[]): boolean;
+/**
+ * Check if user is admin (ADMIN or SUPER_ADMIN)
+ */
+declare function isAdmin(role: string): boolean;
+/**
+ * Check if user is super admin
+ */
+declare function isSuperAdmin(role: string): boolean;
+/**
+ * Check if user is moderator or higher
+ */
+declare function isModerator(role: string): boolean;
+/**
+ * Check if user has a specific permission
+ */
+declare function hasPermission(userRole: string, permission: string): boolean;
+/**
+ * Default permissions configuration
+ */
+declare const PERMISSIONS: {
+    readonly "users:read": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "users:update": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "users:delete": readonly ["SUPER_ADMIN"];
+    readonly "users:updateRole": readonly ["SUPER_ADMIN"];
+    readonly "posts:create": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "posts:update": readonly ["MODERATOR", "ADMIN", "SUPER_ADMIN"];
+    readonly "posts:delete": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "posts:publish": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "admin:access": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "admin:settings": readonly ["SUPER_ADMIN"];
+    readonly "subscriptions:read": readonly ["ADMIN", "SUPER_ADMIN"];
+    readonly "subscriptions:manage": readonly ["SUPER_ADMIN"];
+};
+type Permission = keyof typeof PERMISSIONS;
+/**
+ * Higher-order function for protecting API routes
+ * Returns unauthorized response if user doesn't have required role
+ */
+interface WithRoleResult<T = unknown> {
+    authorized: boolean;
+    response: NextResponse | null;
+    session: T | null;
+}
+interface WithRoleOptions {
+    getSession: () => Promise<{
+        user?: {
+            id?: string;
+            role?: string;
+        };
+    } | null>;
+    minRole: string;
+}
+declare function withRole(options: WithRoleOptions): Promise<WithRoleResult>;
+/**
+ * Create a custom permission checker
+ */
+declare function createPermissionChecker(permissions: Record<string, string[]>): (userRole: string, permission: string) => boolean;
+
+export { type AuthorizationConfig, PERMISSIONS, type Permission, type Role, type WithRoleOptions, type WithRoleResult, configureAuthorization, createPermissionChecker, hasMinRole, hasPermission, hasRole, isAdmin, isModerator, isSuperAdmin, withRole };

package/dist/authorization/index.js

@@ -0,0 +1,137 @@
+"use client";
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/authorization/index.ts
+var authorization_exports = {};
+__export(authorization_exports, {
+  PERMISSIONS: () => PERMISSIONS,
+  configureAuthorization: () => configureAuthorization,
+  createPermissionChecker: () => createPermissionChecker,
+  hasMinRole: () => hasMinRole,
+  hasPermission: () => hasPermission,
+  hasRole: () => hasRole,
+  isAdmin: () => isAdmin,
+  isModerator: () => isModerator,
+  isSuperAdmin: () => isSuperAdmin,
+  withRole: () => withRole
+});
+module.exports = __toCommonJS(authorization_exports);
+var import_server = require("next/server");
+var DEFAULT_ROLE_HIERARCHY = ["USER", "MODERATOR", "ADMIN", "SUPER_ADMIN"];
+var config = {
+  roleHierarchy: DEFAULT_ROLE_HIERARCHY,
+  permissions: {}
+};
+function configureAuthorization(options) {
+  config = { ...config, ...options };
+}
+function hasMinRole(userRole, minRole) {
+  const hierarchy = config.roleHierarchy || DEFAULT_ROLE_HIERARCHY;
+  const userLevel = hierarchy.indexOf(userRole);
+  const minLevel = hierarchy.indexOf(minRole);
+  if (userLevel === -1 || minLevel === -1) {
+    return false;
+  }
+  return userLevel >= minLevel;
+}
+function hasRole(userRole, allowedRoles) {
+  return allowedRoles.includes(userRole);
+}
+function isAdmin(role) {
+  return hasMinRole(role, "ADMIN");
+}
+function isSuperAdmin(role) {
+  return role === "SUPER_ADMIN";
+}
+function isModerator(role) {
+  return hasMinRole(role, "MODERATOR");
+}
+function hasPermission(userRole, permission) {
+  const permissions = config.permissions || {};
+  const allowedRoles = permissions[permission];
+  if (!allowedRoles) {
+    return false;
+  }
+  return allowedRoles.includes(userRole);
+}
+var PERMISSIONS = {
+  // User management
+  "users:read": ["MODERATOR", "ADMIN", "SUPER_ADMIN"],
+  "users:update": ["ADMIN", "SUPER_ADMIN"],
+  "users:delete": ["SUPER_ADMIN"],
+  "users:updateRole": ["SUPER_ADMIN"],
+  // Content management
+  "posts:create": ["MODERATOR", "ADMIN", "SUPER_ADMIN"],
+  "posts:update": ["MODERATOR", "ADMIN", "SUPER_ADMIN"],
+  "posts:delete": ["ADMIN", "SUPER_ADMIN"],
+  "posts:publish": ["ADMIN", "SUPER_ADMIN"],
+  // Admin panel access
+  "admin:access": ["ADMIN", "SUPER_ADMIN"],
+  "admin:settings": ["SUPER_ADMIN"],
+  // Subscription management
+  "subscriptions:read": ["ADMIN", "SUPER_ADMIN"],
+  "subscriptions:manage": ["SUPER_ADMIN"]
+};
+async function withRole(options) {
+  const session = await options.getSession();
+  if (!session?.user?.id) {
+    return {
+      authorized: false,
+      response: import_server.NextResponse.json({ error: "Unauthorized" }, { status: 401 }),
+      session: null
+    };
+  }
+  const userRole = session.user.role || "USER";
+  if (!hasMinRole(userRole, options.minRole)) {
+    return {
+      authorized: false,
+      response: import_server.NextResponse.json({ error: "Forbidden" }, { status: 403 }),
+      session
+    };
+  }
+  return {
+    authorized: true,
+    response: null,
+    session
+  };
+}
+function createPermissionChecker(permissions) {
+  return function checkPermission(userRole, permission) {
+    const allowedRoles = permissions[permission];
+    if (!allowedRoles) {
+      return false;
+    }
+    return allowedRoles.includes(userRole);
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PERMISSIONS,
+  configureAuthorization,
+  createPermissionChecker,
+  hasMinRole,
+  hasPermission,
+  hasRole,
+  isAdmin,
+  isModerator,
+  isSuperAdmin,
+  withRole
+});
+//# sourceMappingURL=index.js.map