@xenterprises/fastify-xconfig 1.0.0 → 1.0.1

package/dist/middleware/cors.js

@@ -1,11 +0,0 @@
-export async function setupCors(fastify, options) {
-    if (options.active !== false) {
-        await fastify.register(import("@fastify/cors"), {
-            origin: options.origin || ["https://getx.io", "http://localhost:3000"],
-            credentials: options.credentials !== undefined ? options.credentials : true,
-            methods: options.methods || ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
-        });
-        console.info("   ✅ CORS Enabled");
-    }
-}
-//# sourceMappingURL=cors.js.map

package/dist/middleware/cors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAwB,EAAE,OAAY;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;YACtE,WAAW,EACT,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAChE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;SACxE,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/middleware/errorHandler.d.ts

@@ -1,2 +0,0 @@
-import { FastifyInstance } from "fastify";
-export declare function setupErrorHandler(fastify: FastifyInstance, fancyErrors: boolean): Promise<void>;

package/dist/middleware/errorHandler.js

@@ -1,19 +0,0 @@
-export async function setupErrorHandler(fastify, fancyErrors) {
-    if (fancyErrors !== false) {
-        fastify.setErrorHandler((error, request, reply) => {
-            const statusCode = error.statusCode || 500;
-            const response = {
-                status: statusCode,
-                message: error.message || "Internal Server Error",
-                stack: process.env.NODE_ENV === "development" ? error.stack : undefined,
-            };
-            // Optional Bugsnag error reporting
-            if (fastify.bugsnag)
-                fastify.bugsnag.notify(error);
-            fastify.log.error(response);
-            reply.status(statusCode).send(response);
-        });
-        console.info("   ✅ Fancy Errors Enabled");
-    }
-}
-//# sourceMappingURL=errorHandler.js.map

package/dist/middleware/errorHandler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwB,EACxB,WAAoB;IAEpB,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC;YAC3C,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;gBACjD,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxE,CAAC;YAEF,mCAAmC;YACnC,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/middleware/multipart.d.ts

@@ -1,2 +0,0 @@
-import { FastifyInstance } from "fastify";
-export declare function setupMultipart(fastify: FastifyInstance, options: any): Promise<void>;

package/dist/middleware/multipart.js

@@ -1,7 +0,0 @@
-export async function setupMultipart(fastify, options) {
-    if (options.active !== false) {
-        await fastify.register(import("@fastify/multipart"), options);
-        console.info("   ✅ Multipart Enabled");
-    }
-}
-//# sourceMappingURL=multipart.js.map

package/dist/middleware/multipart.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multipart.js","sourceRoot":"","sources":["../../src/middleware/multipart.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAwB,EAAE,OAAY;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/middleware/rateLimit.d.ts

@@ -1,2 +0,0 @@
-import { FastifyInstance } from "fastify";
-export declare function setupRateLimit(fastify: FastifyInstance, options: any): Promise<void>;

package/dist/middleware/rateLimit.js

@@ -1,7 +0,0 @@
-export async function setupRateLimit(fastify, options) {
-    if (options.active !== false) {
-        await fastify.register(import("@fastify/rate-limit"), options);
-        console.info("   ✅ Rate Limiting Enabled");
-    }
-}
-//# sourceMappingURL=rateLimit.js.map

package/dist/middleware/rateLimit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../src/middleware/rateLimit.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAwB,EAAE,OAAY;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/middleware/underPressure.d.ts

@@ -1,2 +0,0 @@
-import { FastifyInstance } from "fastify";
-export declare function setupUnderPressure(fastify: FastifyInstance, options: any): Promise<void>;

package/dist/middleware/underPressure.js

@@ -1,7 +0,0 @@
-export async function setupUnderPressure(fastify, options) {
-    if (options.active !== false) {
-        await fastify.register(import("@fastify/under-pressure"), options);
-        console.info("   ✅ Under Pressure Enabled");
-    }
-}
-//# sourceMappingURL=underPressure.js.map

package/dist/middleware/underPressure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"underPressure.js","sourceRoot":"","sources":["../../src/middleware/underPressure.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAwB,EACxB,OAAY;IAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/utils/colorize.d.ts

@@ -1,4 +0,0 @@
-import type { FastifyInstance, RouteOptions } from "fastify";
-export declare function colorize(method: string, text: string): string;
-export declare function printRoutes(routes: RouteOptions[], colors?: boolean): void;
-export declare function captureRoutes(fastify: FastifyInstance): RouteOptions[];

package/dist/utils/colorize.js

@@ -1,33 +0,0 @@
-const COLORS = {
-    POST: 33,
-    GET: 32,
-    PUT: 34,
-    DELETE: 31,
-    PATCH: 90,
-    clear: 39,
-};
-// Function to colorize method and path names
-export function colorize(method, text) {
-    const colorCode = COLORS[method] || COLORS.clear;
-    return `\u001b[${colorCode}m${text}\u001b[${COLORS.clear}m`;
-}
-// Function to print the collected routes
-export function printRoutes(routes, colors = true) {
-    routes
-        .sort((a, b) => a.url.localeCompare(b.url))
-        .forEach(({ method, url }) => {
-        const methodsArray = Array.isArray(method) ? method : [method];
-        methodsArray
-            .filter((m) => m !== "HEAD")
-            .forEach((m) => console.info(`${colors ? colorize(m, m) : m}\t${colors ? colorize(m, url) : url}`));
-    });
-}
-// Helper function to capture all registered routes
-export function captureRoutes(fastify) {
-    const routes = [];
-    fastify.addHook("onRoute", (routeOptions) => {
-        routes.push(routeOptions);
-    });
-    return routes;
-}
-//# sourceMappingURL=colorize.js.map

package/dist/utils/colorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"colorize.js","sourceRoot":"","sources":["../../src/utils/colorize.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,GAA+B;IACzC,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,EAAE;IACP,GAAG,EAAE,EAAE;IACP,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,6CAA6C;AAC7C,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAoB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC;IAC/D,OAAO,UAAU,SAAS,IAAI,IAAI,UAAU,MAAM,CAAC,KAAK,GAAG,CAAC;AAC9D,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,MAAM,GAAG,IAAI;IAC/D,MAAM;SACH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC1C,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/D,YAAY;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;aAC3B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACb,OAAO,CAAC,IAAI,CACV,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CACrE,CACF,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/formatBytes.d.ts

@@ -1 +0,0 @@
-export declare function formatBytes(bytes: number, decimals?: number): string;

package/dist/utils/formatBytes.js

@@ -1,10 +0,0 @@
-export function formatBytes(bytes, decimals = 2) {
-    if (bytes === 0)
-        return "0 Bytes";
-    const k = 1024;
-    const dm = decimals < 0 ? 0 : decimals;
-    const sizes = ["Bytes", "KB", "MB", "GB", "TB", "PB"];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return `${parseFloat((bytes / Math.pow(k, i)).toFixed(dm))} ${sizes[i]}`;
-}
-//# sourceMappingURL=formatBytes.js.map

package/dist/utils/formatBytes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"formatBytes.js","sourceRoot":"","sources":["../../src/utils/formatBytes.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAQ,GAAG,CAAC;IACrD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/utils/randomUUID.d.ts

@@ -1 +0,0 @@
-export declare const generateUUID: any;

package/dist/utils/randomUUID.js

@@ -1,3 +0,0 @@
-import { randomUUID } from "uncrypto";
-export const generateUUID = randomUUID;
-//# sourceMappingURL=randomUUID.js.map

package/dist/utils/randomUUID.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"randomUUID.js","sourceRoot":"","sources":["../../src/utils/randomUUID.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC"}

package/dist/utils/statAsync.d.ts

@@ -1,2 +0,0 @@
-import fs from "fs";
-export declare const statAsync: typeof fs.stat.__promisify__;

package/dist/utils/statAsync.js

@@ -1,4 +0,0 @@
-import fs from "fs";
-import util from "util";
-export const statAsync = util.promisify(fs.stat);
-//# sourceMappingURL=statAsync.js.map

package/dist/utils/statAsync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"statAsync.js","sourceRoot":"","sources":["../../src/utils/statAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC"}

package/dist/xConfig.d.ts

@@ -1,3 +0,0 @@
-declare function xConfig(fastify: any, options: any): Promise<void>;
-declare const _default: typeof xConfig;
-export default _default;

package/dist/xConfig.js

@@ -1,9 +0,0 @@
-//src/xConfig.js
-import fp from "fastify-plugin";
-async function xConfig(fastify, options) {
-    fastify.decorate("xEcho", () => "Hello from X Enterprises!");
-}
-export default fp(xConfig, {
-    name: "xConfig",
-});
-//# sourceMappingURL=xConfig.js.map

package/dist/xConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"xConfig.js","sourceRoot":"","sources":["../src/xConfig.ts"],"names":[],"mappings":"AAAA,gBAAgB;AAChB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhC,KAAK,UAAU,OAAO,CAAC,OAAO,EAAE,OAAO;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;AAC/D,CAAC;AAED,eAAe,EAAE,CAAC,OAAO,EAAE;IACzB,IAAI,EAAE,SAAS;CAChB,CAAC,CAAC"}

package/server/app.js

@@ -1,85 +0,0 @@
-// server/app.js
-import Fastify from 'fastify';
-import xConfig from '../src/xConfig.js';  // Import your plugin correctly
-
-const fastify = Fastify();
-
-
-export default async function (fastify, opts) {
-  fastify.register(xConfig, {
-    professional: false,
-    fancyErrors: true,
-    prisma: {
-      active: false,
-    },
-    bugsnag: {
-      apiKey: process.env.BUGSNAG_API_KEY
-    },
-    rateLimit: {
-      max: process.env.RATE_LIMIT_MAX || 100,
-      timeWindow: process.env.RATE_LIMIT_TIME_WINDOW || '1 minute'
-    },
-    stripe: {
-      active: false,
-      apiKey: process.env.STRIPE_API_KEY
-    },
-    sendGrid: {
-      active: true,
-      apiKey: process.env.SENDGRID_API_KEY,
-      apiKeyEmailValidation: process.env.SENDGRID_API_EMAIL_VALIDATION_KEY,
-      fromEmail: process.env.SENDGRID_FROM_EMAIL || 'ops@getx.io',
-    },
-    twilio: {
-      active: true,
-      accountSid: process.env.TWILIO_ACCOUNT_SID,
-      authToken: process.env.TWILIO_AUTH_TOKEN,
-      phoneNumber: process.env.TWILIO_PHONE_NUMBER
-    },
-    cloudinary: {
-      active: false,
-      cloudName: process.env.CLOUDINARY_CLOUD_NAME,
-      apiKey: process.env.CLOUDINARY_API_KEY,
-      apiSecret: process.env.CLOUDINARY_API_SECRET,
-      basePath: process.env.CLOUDINARY_BASE_PATH || 'basepath'
-    },
-    cors: {
-      active: true,
-      origin: process.env.CORS_ORIGIN || ['http://localhost:3000', 'https://app.bandmate.io'],
-      credentials: true
-    },
-    auth: {
-      excludedPaths: ['/public', '/portal/auth/register'],
-      admin: {
-        active: true,
-        secret: process.env.ADMIN_JWT_SECRET,
-        expiresIn: '1h',
-        cookieOptions: {
-          name: 'adminToken',
-          httpOnly: true,
-          secure: true, // Set to false if not using HTTPS
-          sameSite: 'strict', // Can be 'lax', 'strict', or 'none'
-        }
-      },
-      user: {
-        active: true,
-        portalStackProjectId: process.env.STACK_PROJECT_ID,
-        me: {
-          isOnboarded: true
-        },
-        registerEmail: {
-          subject: 'Welcome to Bandmate!',
-          templateId: ''
-        }
-      },
-    },
-    geocode: {
-      active: true,
-      apiKey: process.env.GEOCODIO_API_KEY
-    }
-  });  // Register the default export, which should be a function
-  fastify.get('/', async (request, reply) => {
-    console.log(fastify.xEcho())
-    return { status: fastify.xEcho() }
-  })
-
-};

package/src/auth/admin.js

@@ -1,181 +0,0 @@
-import * as jose from "jose";
-const isProduction = process.env.NODE_ENV === 'production';
-
-export async function setupAdminAuth(fastify, options) {
-  if (options.admin?.active !== false) {
-    // Get configuration
-    const projectId = options.admin.stackProjectId || process.env.ADMIN_STACK_PROJECT_ID;
-    const publishableKey = options.admin.publishableKey || process.env.ADMIN_STACK_PUBLISHABLE_CLIENT_KEY;
-    const secretKey = options.admin.secretKey || process.env.ADMIN_STACK_SECRET_SERVER_KEY;
-
-    if (!projectId) {
-      throw new Error("Stack Auth admin project ID is required");
-    }
-
-    if (!publishableKey || !secretKey) {
-      throw new Error("Stack Auth admin publishable and secret keys are required");
-    }
-
-    const adminExcludedPaths = options.admin.excludedPaths || [
-      "/admin/auth/login",
-      "/admin/auth/logout",
-    ];
-
-    // Base URL for Stack Auth API
-    const stackAuthBaseUrl = `https://api.stack-auth.com/api/v1`;
-    const jwksUrl = `${stackAuthBaseUrl}/projects/${projectId}/.well-known/jwks.json`;
-
-    // Create JWKS for token verification
-    const jwks = jose.createRemoteJWKSet(new URL(jwksUrl));
-
-    // Helper for Stack Auth API headers
-    fastify.decorate('getAdminStackAuthHeaders', function (accessType = "server") {
-      const headers = {
-        'Content-Type': 'application/json',
-        'Accept': 'application/json',
-        'X-Stack-Access-Type': accessType,
-        'X-Stack-Project-Id': projectId,
-      };
-
-      if (accessType === "client") {
-        headers['X-Stack-Publishable-Client-Key'] = publishableKey;
-      } else if (accessType === "server") {
-        headers['X-Stack-Secret-Server-Key'] = secretKey;
-      }
-
-      return headers;
-    });
-
-    // JWT verification helper
-    fastify.decorate('verifyAdminStackJWT', async function (accessToken) {
-      try {
-        // Add validation to ensure accessToken is a valid string
-        if (!accessToken || typeof accessToken !== 'string') {
-          fastify.log.error('Invalid admin token format: token must be a non-empty string');
-          return null;
-        }
-
-        const { payload } = await jose.jwtVerify(accessToken, jwks);
-
-        // Verify the payload has expected properties
-        if (!payload || !payload.sub) {
-          fastify.log.error('Invalid admin token payload: missing required claims');
-          return null;
-        }
-
-        return payload;
-      } catch (error) {
-        fastify.log.error(error);
-        return null;
-      }
-    });
-
-    // Admin authentication hook
-    fastify.addHook("onRequest", async (request, reply) => {
-      const url = request.url;
-
-      // Skip authentication for excluded paths
-      if (adminExcludedPaths.some((path) => url.startsWith(path))) {
-        return;
-      }
-
-      if (url.startsWith("/admin")) {
-        try {
-          // Get token from header
-          const authHeader = request.headers.authorization;
-          if (!authHeader || !authHeader.startsWith("Bearer ")) {
-            return reply.code(401).send({ error: "Admin access token required" });
-          }
-
-          // Verify token
-          const token = authHeader.slice(7);
-          const payload = await fastify.verifyAdminStackJWT(token);
-
-          if (!payload) {
-            return reply.code(401).send({ error: "Invalid admin token" });
-          }
-
-          // Set admin info on request
-          request.admin = payload;
-          request.adminAuth = { id: payload.sub };
-        } catch (err) {
-          return reply.code(401).send({ error: "Admin authentication failed" });
-        }
-      }
-    });
-
-    // Admin login endpoint
-    fastify.post("/admin/auth/login", async (req, reply) => {
-      try {
-        const { email, password } = req.body;
-
-        if (!email || !password) {
-          return reply.code(400).send({ error: "Email and password required" });
-        }
-
-        // Call Stack Auth API for password sign-in
-        const response = await fetch(
-          `${stackAuthBaseUrl}/auth/password/sign-in`,
-          {
-            method: 'POST',
-            headers: fastify.getAdminStackAuthHeaders("server"),
-            body: JSON.stringify({ email, password })
-          }
-        );
-
-        const data = await response.json().catch(() => ({}));
-
-        if (!response.ok) {
-          return reply.code(response.status || 400).send({
-            error: data.message || "Authentication failed"
-          });
-        }
-
-        // Check if we have the expected response properties
-        if (!data.access_token || !data.refresh_token || !data.user_id) {
-          return reply.code(500).send({ error: "Invalid response from authentication service" });
-        }
-
-        // Verify token
-        const payload = await fastify.verifyAdminStackJWT(data.access_token);
-        if (!payload) {
-          return reply.code(401).send({ error: "Invalid token received" });
-        }
-
-        reply.send({
-          accessToken: data.access_token,
-          refreshToken: data.refresh_token,
-          admin: payload,
-          adminId: data.user_id
-        });
-      } catch (err) {
-        fastify.log.error(err);
-        reply.code(500).send({ error: "Internal server error" });
-      }
-    });
-
-    // Admin info endpoint
-    fastify.get("/admin/auth/me", async (req, reply) => {
-      reply.send(req.admin || { authenticated: false });
-    });
-
-    // Token verification endpoint
-    fastify.post("/admin/auth/verify", async (req, reply) => {
-      const { token } = req.body;
-
-      if (!token) {
-        return reply.code(400).send({ error: "Token required" });
-      }
-
-      const payload = await fastify.verifyAdminStackJWT(token);
-
-      if (!payload) {
-        return reply.code(401).send({ valid: false });
-      }
-
-      reply.send({ valid: true, admin: payload });
-    });
-
-    console.info("   ✅ Auth Admin Enabled");
-  }
-}

package/src/auth/portal.js

@@ -1,177 +0,0 @@
-import * as jose from "jose";
-import fetch from "node-fetch";
-
-export async function setupAuth(fastify, options) {
-  if (options.user?.active !== false) {
-    // Get configuration
-    const projectId = options.user.portalStackProjectId || process.env.STACK_PROJECT_ID;
-    const publishableKey = options.user.publishableKey || process.env.STACK_PUBLISHABLE_CLIENT_KEY;
-    const secretKey = options.user.secretKey || process.env.STACK_SECRET_SERVER_KEY;
-
-    if (!projectId) {
-      throw new Error("Stack Auth project ID is required");
-    }
-
-    if (!publishableKey || !secretKey) {
-      throw new Error("Stack Auth publishable and secret keys are required");
-    }
-
-    const userExcludedPaths = options.user.excludedPaths || [
-      "/portal/auth/login",
-      "/portal/auth/logout",
-      "/portal/auth/register",
-      "/portal/auth/forgot-password",
-      "/portal/auth/reset-password"
-    ];
-
-    // Base URL for Stack Auth API
-    const stackAuthBaseUrl = `https://api.stack-auth.com/api/v1`;
-    const jwksUrl = `${stackAuthBaseUrl}/projects/${projectId}/.well-known/jwks.json`;
-
-    // Create JWKS for token verification
-    const jwks = jose.createRemoteJWKSet(new URL(jwksUrl));
-
-    // Helper for Stack Auth API headers
-    fastify.decorate('getStackAuthHeaders', function (accessType = "server") {
-      const headers = {
-        'Content-Type': 'application/json',
-        'Accept': 'application/json',
-        'X-Stack-Access-Type': accessType,
-        'X-Stack-Project-Id': projectId,
-      };
-
-      if (accessType === "client") {
-        headers['X-Stack-Publishable-Client-Key'] = publishableKey;
-      } else if (accessType === "server") {
-        headers['X-Stack-Secret-Server-Key'] = secretKey;
-      }
-
-      return headers;
-    });
-
-    // JWT verification helper
-    fastify.decorate('verifyStackJWT', async function (accessToken) {
-      try {
-        const { payload } = await jose.jwtVerify(accessToken, jwks);
-        return payload;
-      } catch (error) {
-        fastify.log.error(error);
-        return null;
-      }
-    });
-
-    // API URL helper
-    fastify.decorate('getStackAuthApiUrl', function () {
-      return stackAuthBaseUrl;
-    });
-
-    // Authentication middleware
-    fastify.addHook("onRequest", async (request, reply) => {
-      const url = request.url;
-
-      // Skip excluded paths
-      if (userExcludedPaths.some(path => url.startsWith(path))) {
-        return;
-      }
-
-      if (url.startsWith("/portal")) {
-        try {
-          // Get token from header
-          const authHeader = request.headers.authorization;
-          if (!authHeader || !authHeader.startsWith("Bearer ")) {
-            return reply.code(401).send({ error: "Access token required" });
-          }
-
-          // Verify token
-          const token = authHeader.slice(7);
-          const payload = await fastify.verifyStackJWT(token);
-
-          if (!payload) {
-            return reply.code(401).send({ error: "Invalid token" });
-          }
-
-          // Set user info on request
-          request.user = payload;
-          request.userAuth = { id: payload.sub };
-        } catch (err) {
-          return reply.code(401).send({ error: "Authentication failed" });
-        }
-      }
-    });
-
-    // Login endpoint
-    fastify.post("/portal/auth/login", async (req, reply) => {
-      try {
-        const { email, password } = req.body;
-
-        if (!email || !password) {
-          return reply.code(400).send({ error: "Email and password required" });
-        }
-
-        // Call Stack Auth API for password sign-in
-        const response = await fetch(
-          `${stackAuthBaseUrl}/auth/password/sign-in`,
-          {
-            method: 'POST',
-            headers: fastify.getStackAuthHeaders("server"),
-            body: JSON.stringify({ email, password })
-          }
-        );
-
-        const data = await response.json().catch(() => ({}));
-
-        if (!response.ok) {
-          return reply.code(response.status || 400).send({
-            error: data.message || "Authentication failed"
-          });
-        }
-
-        // Check if we have the expected response properties
-        if (!data.access_token || !data.refresh_token || !data.user_id) {
-          return reply.code(500).send({ error: "Invalid response from authentication service" });
-        }
-
-        // Verify token
-        const payload = await fastify.verifyStackJWT(data.access_token);
-        if (!payload) {
-          return reply.code(401).send({ error: "Invalid token received" });
-        }
-
-        reply.send({
-          accessToken: data.access_token,
-          refreshToken: data.refresh_token,
-          user: payload,
-          userId: data.user_id
-        });
-      } catch (err) {
-        fastify.log.error(err);
-        reply.code(500).send({ error: "Internal server error" });
-      }
-    });
-
-
-    // User info endpoint
-    fastify.get("/portal/auth/me", async (req, reply) => {
-      reply.send(req.user || { authenticated: false });
-    });
-
-    // Token verification endpoint
-    fastify.post("/portal/auth/verify", async (req, reply) => {
-      const { token } = req.body;
-
-      if (!token) {
-        return reply.code(400).send({ error: "Token required" });
-      }
-
-      const payload = await fastify.verifyStackJWT(token);
-
-      if (!payload) {
-        return reply.code(401).send({ valid: false });
-      }
-
-      reply.send({ valid: true, user: payload });
-    });
-
-    console.info("   ✅ Auth User Enabled");
-  }
-}