@withwiz/toolkit 0.5.1 → 0.6.0

package/dist/cache/redis-cache-manager.js

@@ -1,12 +1,12 @@
 import {
   RedisCacheManager
-} from "../chunk-NQQU6UFE.js";
-import "../chunk-X5RMDLLM.js";
-import "../chunk-GQVBWZLH.js";
+} from "../chunk-O35V6RIF.js";
+import "../chunk-IHUQRVPV.js";
+import "../chunk-TEXVRHPF.js";
 import "../chunk-OHBAELPZ.js";
-import "../chunk-BJLLMVWW.js";
-import "../chunk-UCIUAZQT.js";
+import "../chunk-DBHISLC6.js";
 import "../chunk-SFPMFVSD.js";
+import "../chunk-UCIUAZQT.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-57W32BFZ.js";

package/dist/{chunk-LFQ3IQQB.js → chunk-3AJHXCDG.js}

@@ -1,10 +1,10 @@
 import {
   runCommand,
   runMacCommand
-} from "./chunk-S5UCZ2T3.js";
+} from "./chunk-X6MGVFT3.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 
 // src/system/memory.ts
 import os from "os";

package/dist/{chunk-N3TAGJHR.js → chunk-3ECJUXLM.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-YUBXS7YI.js";
 import {
   getPlatform
-} from "./chunk-S5UCZ2T3.js";
+} from "./chunk-X6MGVFT3.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   getResolvedCacheConfig
 } from "./chunk-UCIUAZQT.js";

package/dist/{chunk-WMQE2YK7.js → chunk-4BGAE7NU.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 
 // src/middleware/security.ts
 import { NextResponse } from "next/server";

package/dist/chunk-4YQ6YBM7.js

@@ -0,0 +1,50 @@
+import {
+  JWTService
+} from "./chunk-3GAY2T2A.js";
+import {
+  __spreadValues
+} from "./chunk-ORMEWXMH.js";
+
+// src/auth/handlers/me.handler.ts
+import { NextResponse } from "next/server";
+function createMeHandler(options) {
+  var _a, _b;
+  const { dependencies, jwt, hooks } = options;
+  const jwtService = new JWTService({
+    secret: jwt.secret,
+    accessTokenExpiry: (_a = jwt.accessTokenExpiry) != null ? _a : "7d",
+    refreshTokenExpiry: (_b = jwt.refreshTokenExpiry) != null ? _b : "30d",
+    algorithm: "HS256"
+  });
+  return async (request) => {
+    var _a2, _b2, _c;
+    try {
+      const token = (_c = (_a2 = request.cookies.get("access_token")) == null ? void 0 : _a2.value) != null ? _c : jwtService.extractTokenFromHeader((_b2 = request.headers.get("authorization")) != null ? _b2 : void 0);
+      if (!token) {
+        return NextResponse.json({ success: false, error: "Not authenticated" }, { status: 401 });
+      }
+      const payload = await jwtService.verifyAccessToken(token);
+      const user = await dependencies.userRepository.findById(payload.userId);
+      if (!user || user.isActive === false) {
+        return NextResponse.json({ success: false, error: "User not found" }, { status: 401 });
+      }
+      let userResponse = {
+        id: user.id,
+        email: user.email,
+        name: user.name,
+        role: user.role,
+        emailVerified: user.emailVerified
+      };
+      if (hooks == null ? void 0 : hooks.extendUserResponse) {
+        userResponse = __spreadValues(__spreadValues({}, userResponse), await hooks.extendUserResponse(user));
+      }
+      return NextResponse.json({ success: true, user: userResponse });
+    } catch (e) {
+      return NextResponse.json({ success: false, error: "Not authenticated" }, { status: 401 });
+    }
+  };
+}
+
+export {
+  createMeHandler
+};

package/dist/chunk-6B7VU6RZ.js

@@ -0,0 +1,90 @@
+import {
+  JWTService
+} from "./chunk-3GAY2T2A.js";
+import {
+  AuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/services/oauth-callback.service.ts
+var OAuthCallbackService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.userRepo = config.userRepository;
+    this.oauthRepo = config.oauthAccountRepository;
+    this.jwtService = new JWTService({
+      secret: config.jwtSecret,
+      accessTokenExpiry: (_a = config.accessTokenExpiry) != null ? _a : "7d",
+      refreshTokenExpiry: (_b = config.refreshTokenExpiry) != null ? _b : "30d",
+      algorithm: "HS256"
+    }, config.logger);
+    this.logger = (_c = config.logger) != null ? _c : { debug() {
+    }, info() {
+    }, warn() {
+    }, error() {
+    } };
+  }
+  async handleCallback(input) {
+    var _a, _b, _c;
+    const existingAccount = await this.oauthRepo.findByProvider(input.provider, input.providerAccountId);
+    if (existingAccount) {
+      const user = await this.userRepo.findById(existingAccount.userId);
+      if (!user) {
+        throw new AuthError("User not found for OAuth account", "USER_NOT_FOUND", 404);
+      }
+      if (user.isActive === false) {
+        throw new AuthError("Account is disabled", "ACCOUNT_DISABLED", 403);
+      }
+      await this.oauthRepo.update(existingAccount.id, {
+        accessToken: input.accessToken,
+        refreshToken: (_a = input.refreshToken) != null ? _a : null
+      });
+      await this.userRepo.updateLastLoginAt(user.id);
+      const tokens2 = await this.createTokens(user);
+      return { user, tokens: tokens2, isNewUser: false };
+    }
+    const existingUser = await this.userRepo.findByEmail(input.email);
+    if (existingUser) {
+      await this.oauthRepo.create({
+        userId: existingUser.id,
+        provider: input.provider,
+        providerAccountId: input.providerAccountId,
+        accessToken: input.accessToken,
+        refreshToken: (_b = input.refreshToken) != null ? _b : null
+      });
+      await this.userRepo.updateLastLoginAt(existingUser.id);
+      const tokens2 = await this.createTokens(existingUser);
+      return { user: existingUser, tokens: tokens2, isNewUser: false };
+    }
+    const newUser = await this.userRepo.create({
+      email: input.email,
+      name: input.name,
+      image: input.image,
+      role: "USER",
+      emailVerified: /* @__PURE__ */ new Date()
+      // OAuth users are auto-verified
+    });
+    await this.oauthRepo.create({
+      userId: newUser.id,
+      provider: input.provider,
+      providerAccountId: input.providerAccountId,
+      accessToken: input.accessToken,
+      refreshToken: (_c = input.refreshToken) != null ? _c : null
+    });
+    const tokens = await this.createTokens(newUser);
+    this.logger.info("New OAuth user created", { userId: newUser.id, provider: input.provider });
+    return { user: newUser, tokens, isNewUser: true };
+  }
+  async createTokens(user) {
+    var _a;
+    return this.jwtService.createTokenPair({
+      id: user.id,
+      email: user.email,
+      role: (_a = user.role) != null ? _a : "USER",
+      emailVerified: user.emailVerified
+    });
+  }
+};
+
+export {
+  OAuthCallbackService
+};

package/dist/chunk-6JY6NUR6.js

@@ -0,0 +1,38 @@
+import {
+  OAuthManager
+} from "./chunk-HZLJYEOO.js";
+
+// src/auth/handlers/oauth-authorize.handler.ts
+import { NextResponse } from "next/server";
+function createOAuthAuthorizeHandler(options) {
+  const { oauth } = options;
+  return async (request) => {
+    var _a;
+    try {
+      const body = await request.json();
+      const provider = body.provider;
+      if (!provider || !(oauth == null ? void 0 : oauth[provider])) {
+        return NextResponse.json({ success: false, error: "Invalid provider" }, { status: 400 });
+      }
+      const providers = {};
+      for (const [name, config] of Object.entries(oauth)) {
+        providers[name] = config;
+      }
+      const noopLogger = { debug() {
+      }, info() {
+      }, warn() {
+      }, error() {
+      } };
+      const manager = new OAuthManager({ providers }, (_a = options.dependencies.logger) != null ? _a : noopLogger);
+      const state = crypto.randomUUID();
+      const loginUrl = manager.getLoginUrl(provider, state);
+      return NextResponse.json({ success: true, loginUrl, state });
+    } catch (e) {
+      return NextResponse.json({ success: false, error: "OAuth initialization failed" }, { status: 500 });
+    }
+  };
+}
+
+export {
+  createOAuthAuthorizeHandler
+};

package/dist/{chunk-YSUL3SLC.js → chunk-77BJRPMN.js}

@@ -1,17 +1,17 @@
 import {
   getCacheManager,
   getEffectiveCacheBackend
-} from "./chunk-GGSFZP6T.js";
+} from "./chunk-7JKZBEVB.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   getCacheConfig,
   getCacheTTL
-} from "./chunk-7LJWRKDT.js";
+} from "./chunk-BEV7PQM3.js";
 import {
   isCacheEnabled
-} from "./chunk-BJLLMVWW.js";
+} from "./chunk-DBHISLC6.js";
 
 // src/cache/cache-wrapper.ts
 function getCacheBackendLabel() {

package/dist/{chunk-GGSFZP6T.js → chunk-7JKZBEVB.js}

@@ -1,29 +1,29 @@
 import {
   NoopCacheManager
-} from "./chunk-CRWMULHR.js";
+} from "./chunk-Q6KXN7HL.js";
 import {
   RedisCacheManager
-} from "./chunk-NQQU6UFE.js";
+} from "./chunk-O35V6RIF.js";
 import {
   HybridCacheManager
-} from "./chunk-FUDEEQR3.js";
+} from "./chunk-EXJQKCTN.js";
 import {
   isRedisAvailableNow,
   isRedisGloballyDisabled
-} from "./chunk-X5RMDLLM.js";
+} from "./chunk-IHUQRVPV.js";
 import {
   InMemoryCacheManager
-} from "./chunk-J4TTSXDN.js";
+} from "./chunk-CW3INZMV.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   getCacheConfig
-} from "./chunk-7LJWRKDT.js";
+} from "./chunk-BEV7PQM3.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-BJLLMVWW.js";
+} from "./chunk-DBHISLC6.js";
 
 // src/cache/cache-factory.ts
 function getInMemoryConfig() {

package/dist/{chunk-KGHWGLED.js → chunk-7KZRPDQD.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GFWGLWTS.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 
 // src/middleware/cors.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-OZE5KUS3.js → chunk-A2XAOU55.js}

@@ -15,7 +15,7 @@ function setConfig(config) {
   globalThis[GLOBAL_KEY] = config;
 }
 function initializeAuth(config) {
-  var _a, _b;
+  var _a, _b, _c;
   if (getConfig()) return;
   if (!config.jwtSecret) {
     throw new ConfigurationError("Auth", "jwtSecret is required");
@@ -29,7 +29,8 @@ function initializeAuth(config) {
   setConfig({
     jwtSecret: config.jwtSecret,
     accessTokenExpiry: (_a = config.accessTokenExpiry) != null ? _a : "7d",
-    refreshTokenExpiry: (_b = config.refreshTokenExpiry) != null ? _b : "30d"
+    refreshTokenExpiry: (_b = config.refreshTokenExpiry) != null ? _b : "30d",
+    cookieSecure: (_c = config.cookieSecure) != null ? _c : false
   });
 }
 function getAuthConfig() {

package/dist/{chunk-7LJWRKDT.js → chunk-BEV7PQM3.js}

@@ -1,7 +1,7 @@
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-BJLLMVWW.js";
+} from "./chunk-DBHISLC6.js";
 
 // src/cache/cache-config.ts
 var getCacheConfig = {

package/dist/{chunk-OIRAH57Y.js → chunk-CKK55QFQ.js}

@@ -2,7 +2,7 @@ import {
   logApiRequest,
   logApiResponse,
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 
 // src/middleware/response-logger.ts
 var responseLoggerMiddleware = async (context, next) => {

package/dist/{chunk-MAATEX2R.js → chunk-CRMXLNLC.js}

@@ -1,6 +1,6 @@
 import {
   formatLabel
-} from "./chunk-NY5QXT33.js";
+} from "./chunk-I6Q3WUDT.js";
 import {
   LoadingBar
 } from "./chunk-34WAGUT5.js";

package/dist/{chunk-J4TTSXDN.js → chunk-CW3INZMV.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   DEFAULT_INMEMORY_CONFIG
 } from "./chunk-SS56XFLI.js";

package/dist/chunk-DFSNHVXF.js

@@ -0,0 +1,54 @@
+import {
+  JWTService
+} from "./chunk-3GAY2T2A.js";
+import {
+  AuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/services/login.service.ts
+import { compare } from "bcryptjs";
+var LoginService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.userRepo = config.userRepository;
+    this.jwtService = new JWTService({
+      secret: config.jwtSecret,
+      accessTokenExpiry: (_a = config.accessTokenExpiry) != null ? _a : "7d",
+      refreshTokenExpiry: (_b = config.refreshTokenExpiry) != null ? _b : "30d",
+      algorithm: "HS256"
+    }, config.logger);
+    this.logger = (_c = config.logger) != null ? _c : { debug() {
+    }, info() {
+    }, warn() {
+    }, error() {
+    } };
+  }
+  async login(email, password, storedHash) {
+    var _a;
+    const user = await this.userRepo.findByEmail(email);
+    if (!user) {
+      throw new AuthError("Invalid credentials", "INVALID_CREDENTIALS", 401);
+    }
+    if (user.isActive === false) {
+      throw new AuthError("Account is disabled", "ACCOUNT_DISABLED", 403);
+    }
+    const isValid = await compare(password, storedHash);
+    if (!isValid) {
+      this.logger.warn("Failed login attempt", { email });
+      throw new AuthError("Invalid credentials", "INVALID_CREDENTIALS", 401);
+    }
+    const tokens = await this.jwtService.createTokenPair({
+      id: user.id,
+      email: user.email,
+      role: (_a = user.role) != null ? _a : "USER",
+      emailVerified: user.emailVerified
+    });
+    await this.userRepo.updateLastLoginAt(user.id);
+    this.logger.info("User logged in successfully", { userId: user.id });
+    return { user, tokens };
+  }
+};
+
+export {
+  LoginService
+};

package/dist/chunk-ETMTDHK2.js

@@ -0,0 +1,53 @@
+import {
+  TokenGenerator
+} from "./chunk-GDWEDUHO.js";
+import {
+  AuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/services/register.service.ts
+import { hash } from "bcryptjs";
+var RegisterService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.userRepo = config.userRepository;
+    this.tokenRepo = config.emailTokenRepository;
+    this.emailSender = config.emailSender;
+    this.emailVerificationRequired = (_a = config.emailVerificationRequired) != null ? _a : true;
+    this.bcryptRounds = (_b = config.bcryptRounds) != null ? _b : 12;
+    this.logger = (_c = config.logger) != null ? _c : { debug() {
+    }, info() {
+    }, warn() {
+    }, error() {
+    } };
+  }
+  async register(input) {
+    var _a;
+    const existing = await this.userRepo.findByEmail(input.email);
+    if (existing) {
+      throw new AuthError("Email already in use", "EMAIL_ALREADY_EXISTS", 409);
+    }
+    const hashedPassword = await hash(input.password, this.bcryptRounds);
+    const user = await this.userRepo.create({
+      email: input.email,
+      password: hashedPassword,
+      name: (_a = input.name) != null ? _a : null,
+      role: "USER",
+      emailVerified: this.emailVerificationRequired ? null : /* @__PURE__ */ new Date()
+    });
+    let verificationSent = false;
+    if (this.emailVerificationRequired && this.emailSender) {
+      const token = TokenGenerator.generate();
+      const expires = new Date(Date.now() + 24 * 60 * 60 * 1e3);
+      await this.tokenRepo.create(input.email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
+      await this.emailSender.sendVerificationEmail(input.email, token);
+      verificationSent = true;
+    }
+    this.logger.info("User registered", { userId: user.id, email: input.email });
+    return { user, verificationSent };
+  }
+};
+
+export {
+  RegisterService
+};

package/dist/{chunk-FUDEEQR3.js → chunk-EXJQKCTN.js}

@@ -1,16 +1,16 @@
 import {
   isRedisGloballyDisabled,
   notifyRedisError
-} from "./chunk-X5RMDLLM.js";
+} from "./chunk-IHUQRVPV.js";
 import {
   InMemoryCacheManager
-} from "./chunk-J4TTSXDN.js";
+} from "./chunk-CW3INZMV.js";
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   getCacheFallbackConfig
-} from "./chunk-BJLLMVWW.js";
+} from "./chunk-DBHISLC6.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";

package/dist/chunk-FI46LV42.js

@@ -0,0 +1,56 @@
+import {
+  TokenRefreshService
+} from "./chunk-JQFQT4S2.js";
+import {
+  setTokenCookies
+} from "./chunk-G2Q4TI3Q.js";
+import {
+  AuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/handlers/refresh.handler.ts
+import { NextResponse } from "next/server";
+function createRefreshHandler(options) {
+  const { dependencies, jwt, hooks, cookie } = options;
+  const refreshService = new TokenRefreshService({
+    userRepository: dependencies.userRepository,
+    jwtSecret: jwt.secret,
+    accessTokenExpiry: jwt.accessTokenExpiry,
+    refreshTokenExpiry: jwt.refreshTokenExpiry,
+    isTokenBlacklisted: hooks == null ? void 0 : hooks.isTokenBlacklisted,
+    logger: dependencies.logger
+  });
+  return async (request) => {
+    var _a;
+    try {
+      const refreshToken = (_a = request.cookies.get("refresh_token")) == null ? void 0 : _a.value;
+      if (!refreshToken) {
+        return NextResponse.json({ success: false, error: "No refresh token" }, { status: 401 });
+      }
+      if (hooks == null ? void 0 : hooks.onBeforeTokenRefresh) {
+        const hookResult = await hooks.onBeforeTokenRefresh(refreshToken);
+        if (hookResult instanceof Response) return hookResult;
+      }
+      const result = await refreshService.refresh(refreshToken);
+      const response = NextResponse.json({
+        success: true,
+        accessToken: result.accessToken,
+        user: result.user
+      });
+      setTokenCookies(response, { accessToken: result.accessToken, refreshToken }, { secure: cookie == null ? void 0 : cookie.secure });
+      return response;
+    } catch (error) {
+      if (error instanceof AuthError) {
+        return NextResponse.json(
+          { success: false, error: error.message, code: error.code },
+          { status: error.statusCode }
+        );
+      }
+      return NextResponse.json({ success: false, error: "Token refresh failed" }, { status: 401 });
+    }
+  };
+}
+
+export {
+  createRefreshHandler
+};

package/dist/{chunk-LX2EYD74.js → chunk-FNECYXI4.js}

@@ -1,21 +1,21 @@
-import {
-  DataTableBody
-} from "./chunk-7IY3RQQL.js";
-import {
-  DataTableBulkActions
-} from "./chunk-MAATEX2R.js";
 import {
   DataTableFilters
-} from "./chunk-SEZJN4TC.js";
+} from "./chunk-5UVEOCRU.js";
 import {
   DataTablePagination
-} from "./chunk-IPXPCBDO.js";
+} from "./chunk-WVDYHSHD.js";
 import {
   DataTableSearch
-} from "./chunk-KHYY4KCV.js";
+} from "./chunk-MEFZZE4M.js";
+import {
+  DataTableBody
+} from "./chunk-7IY3RQQL.js";
+import {
+  DataTableBulkActions
+} from "./chunk-CRMXLNLC.js";
 import {
   DEFAULT_LABELS
-} from "./chunk-NY5QXT33.js";
+} from "./chunk-I6Q3WUDT.js";
 import {
   Alert,
   AlertDescription

package/dist/chunk-FRY3TNJ6.js

@@ -0,0 +1,37 @@
+import {
+  PasswordResetService
+} from "./chunk-WC2IYFGC.js";
+
+// src/auth/handlers/forgot-password.handler.ts
+import { NextResponse } from "next/server";
+import { z } from "zod";
+var schema = z.object({ email: z.string().email() });
+function createForgotPasswordHandler(options) {
+  const { dependencies } = options;
+  return async (request) => {
+    try {
+      const body = await request.json();
+      const parsed = schema.safeParse(body);
+      if (!parsed.success) {
+        return NextResponse.json({ success: false, error: "Invalid email" }, { status: 400 });
+      }
+      if (!dependencies.emailSender) {
+        return NextResponse.json({ success: false, error: "Email service not configured" }, { status: 500 });
+      }
+      const service = new PasswordResetService({
+        userRepository: dependencies.userRepository,
+        emailTokenRepository: dependencies.emailTokenRepository,
+        emailSender: dependencies.emailSender,
+        logger: dependencies.logger
+      });
+      await service.requestReset(parsed.data.email);
+      return NextResponse.json({ success: true });
+    } catch (e) {
+      return NextResponse.json({ success: true });
+    }
+  };
+}
+
+export {
+  createForgotPasswordHandler
+};

package/dist/{chunk-LLVIA4JX.js → chunk-G2Q4TI3Q.js}

@@ -1,19 +1,19 @@
 import {
-  getCommonConfig
-} from "./chunk-SFPMFVSD.js";
+  getAuthConfig
+} from "./chunk-A2XAOU55.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
 // src/auth/core/jwt/cookie.ts
 function getDefaultOptions() {
-  let isProduction = false;
+  let secure = false;
   try {
-    isProduction = getCommonConfig().nodeEnv === "production";
+    secure = getAuthConfig().cookieSecure;
   } catch (e) {
   }
   return {
-    secure: isProduction,
+    secure,
     sameSite: "lax"
   };
 }

package/dist/{chunk-X5RMDLLM.js → chunk-IHUQRVPV.js}

@@ -1,13 +1,13 @@
 import {
   logger
-} from "./chunk-GQVBWZLH.js";
+} from "./chunk-TEXVRHPF.js";
 import {
   getCacheFallbackConfig,
   getConfig,
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-BJLLMVWW.js";
+} from "./chunk-DBHISLC6.js";
 
 // src/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";