hazo_auth 1.2.0 → 1.4.0

package/dist/server/config/config_loader.js

@@ -0,0 +1,329 @@
+// file_description: bootstrap configuration handling for the hazo_auth server
+// section: imports
+import fs from "fs";
+import path from "path";
+import axios from "axios";
+import { HazoConfig } from "hazo_config/dist/lib";
+import { create_logger_service } from "hazo_auth/server/logging/logger_service";
+const is_string_record = (value) => !!value &&
+    typeof value === "object" &&
+    !Array.isArray(value) &&
+    Object.values(value).every((entry) => typeof entry === "string");
+const sanitize_configuration_options = (options, logger) => {
+    var _a, _b;
+    if (!options || typeof options !== "object") {
+        return {};
+    }
+    const sanitized = {};
+    if (typeof options.config_file_path === "string" && options.config_file_path.length > 0) {
+        sanitized.config_file_path = options.config_file_path;
+    }
+    if (options.direct_configuration && typeof options.direct_configuration === "object") {
+        const direct_config = {};
+        const provided = options.direct_configuration;
+        if (Array.isArray(provided.permission_names)) {
+            direct_config.permission_names = provided.permission_names.filter((permission) => typeof permission === "string");
+        }
+        if (is_string_record(provided.templates)) {
+            direct_config.templates = provided.templates;
+        }
+        if (is_string_record(provided.labels)) {
+            direct_config.labels = provided.labels;
+        }
+        if (is_string_record(provided.styles)) {
+            direct_config.styles = provided.styles;
+        }
+        if (provided.emailer &&
+            typeof provided.emailer === "object" &&
+            typeof provided.emailer.base_url === "string") {
+            direct_config.emailer = {
+                base_url: provided.emailer.base_url,
+                api_key: typeof provided.emailer.api_key === "string" ? provided.emailer.api_key : undefined,
+                headers: is_string_record(provided.emailer.headers) ? provided.emailer.headers : undefined,
+            };
+        }
+        if (provided.logger) {
+            direct_config.logger = provided.logger;
+        }
+        if (provided.password_policy) {
+            direct_config.password_policy = {
+                min_length: typeof provided.password_policy.min_length === "number"
+                    ? provided.password_policy.min_length
+                    : undefined,
+                requires_lowercase: provided.password_policy.requires_lowercase,
+                requires_uppercase: provided.password_policy.requires_uppercase,
+                requires_number: provided.password_policy.requires_number,
+                requires_symbol: provided.password_policy.requires_symbol,
+            };
+        }
+        if (provided.token_settings) {
+            direct_config.token_settings = {
+                access_token_ttl_seconds: provided.token_settings.access_token_ttl_seconds,
+                refresh_token_ttl_seconds: provided.token_settings.refresh_token_ttl_seconds,
+            };
+        }
+        if (provided.rate_limit) {
+            direct_config.rate_limit = {
+                max_attempts: provided.rate_limit.max_attempts,
+                window_minutes: provided.rate_limit.window_minutes,
+            };
+        }
+        if (provided.captcha) {
+            direct_config.captcha = provided.captcha;
+        }
+        (_b = (_a = direct_config.logger) === null || _a === void 0 ? void 0 : _a.info) === null || _b === void 0 ? void 0 : _b.call(_a, "config_direct_override_detected", { fields: Object.keys(direct_config) });
+        sanitized.direct_configuration = direct_config;
+    }
+    return sanitized;
+};
+// section: defaults
+const default_config_path = path.resolve(process.cwd(), "config.ini");
+const default_password_policy = {
+    min_length: 12,
+    requires_uppercase: true,
+    requires_lowercase: true,
+    requires_number: true,
+    requires_symbol: true,
+};
+const default_token_settings = {
+    access_token_ttl_seconds: 15 * 60,
+    refresh_token_ttl_seconds: 60 * 60 * 24 * 30,
+};
+const default_rate_limit = {
+    max_attempts: 5,
+    window_minutes: 5,
+};
+const read_ini_section = (instance, section) => {
+    var _a;
+    if (instance === undefined) {
+        return {};
+    }
+    return (_a = instance.getSection(section)) !== null && _a !== void 0 ? _a : {};
+};
+// section: helper_functions
+const resolve_permissions = (direct_permissions, permission_section, logger) => {
+    var _a;
+    if (direct_permissions && direct_permissions.length > 0) {
+        logger.info("config_permissions_direct_override", { count: direct_permissions.length });
+        return direct_permissions;
+    }
+    const configured = (_a = permission_section.list) === null || _a === void 0 ? void 0 : _a.split(",").map((value) => value.trim()).filter((value) => value.length > 0);
+    if (configured && configured.length > 0) {
+        logger.info("config_permissions_from_file", { count: configured.length });
+        return configured;
+    }
+    logger.warn("config_permissions_default", {});
+    return [];
+};
+const resolve_password_policy = (direct_policy, auth_section, logger) => {
+    const resolved = Object.assign({}, default_password_policy);
+    const apply_value = (key, value) => {
+        if (value === undefined) {
+            return;
+        }
+        if (key === "min_length") {
+            const parsed = Number(value);
+            if (!Number.isNaN(parsed)) {
+                resolved[key] = parsed;
+            }
+            return;
+        }
+        resolved[key] = value === "true";
+    };
+    apply_value("min_length", auth_section.min_length);
+    apply_value("requires_uppercase", auth_section.requires_uppercase);
+    apply_value("requires_lowercase", auth_section.requires_lowercase);
+    apply_value("requires_number", auth_section.requires_number);
+    apply_value("requires_symbol", auth_section.requires_symbol);
+    if (direct_policy) {
+        Object.assign(resolved, direct_policy);
+        logger.info("config_password_policy_direct_override", resolved);
+    }
+    return resolved;
+};
+const resolve_token_settings = (direct_tokens, auth_section, logger) => {
+    const resolved = Object.assign({}, default_token_settings);
+    const access_token_value = Number(auth_section.access_token_ttl_seconds);
+    if (!Number.isNaN(access_token_value) && access_token_value > 0) {
+        resolved.access_token_ttl_seconds = access_token_value;
+    }
+    const refresh_token_value = Number(auth_section.refresh_token_ttl_seconds);
+    if (!Number.isNaN(refresh_token_value) && refresh_token_value > 0) {
+        resolved.refresh_token_ttl_seconds = refresh_token_value;
+    }
+    if (direct_tokens) {
+        Object.assign(resolved, direct_tokens);
+        logger.info("config_token_settings_direct_override", resolved);
+    }
+    return resolved;
+};
+const resolve_rate_limit = (direct_rate_limit, rate_section, logger) => {
+    const resolved = Object.assign({}, default_rate_limit);
+    const max_attempts = Number(rate_section.max_attempts);
+    if (!Number.isNaN(max_attempts) && max_attempts > 0) {
+        resolved.max_attempts = max_attempts;
+    }
+    const window_minutes = Number(rate_section.window_minutes);
+    if (!Number.isNaN(window_minutes) && window_minutes > 0) {
+        resolved.window_minutes = window_minutes;
+    }
+    if (direct_rate_limit) {
+        Object.assign(resolved, direct_rate_limit);
+        logger.info("config_rate_limit_direct_override", resolved);
+    }
+    return resolved;
+};
+const resolve_captcha = (direct_captcha, captcha_section, logger) => {
+    if (direct_captcha) {
+        logger.info("config_captcha_direct_override", { provider: direct_captcha.provider });
+        return direct_captcha;
+    }
+    if (captcha_section.provider && captcha_section.secret_key) {
+        logger.info("config_captcha_from_file", { provider: captcha_section.provider });
+        return {
+            provider: captcha_section.provider,
+            secret_key: captcha_section.secret_key,
+        };
+    }
+    logger.warn("config_captcha_missing", {});
+    return undefined;
+};
+const resolve_dictionary = (direct_values, section_values, logger, metric_name) => {
+    if (direct_values && Object.keys(direct_values).length > 0) {
+        logger.info(`${metric_name}_direct_override`, { keys: Object.keys(direct_values) });
+        return direct_values;
+    }
+    if (Object.keys(section_values).length > 0) {
+        logger.info(`${metric_name}_from_file`, { keys: Object.keys(section_values) });
+        return section_values;
+    }
+    logger.warn(`${metric_name}_empty`, {});
+    return {};
+};
+const read_template_file = (file_path, logger) => {
+    const absolute_path = path.isAbsolute(file_path)
+        ? file_path
+        : path.resolve(process.cwd(), file_path);
+    try {
+        const content = fs.readFileSync(absolute_path, "utf-8");
+        logger.info("config_template_loaded", { file_path: absolute_path });
+        return content;
+    }
+    catch (error) {
+        logger.error("config_template_load_failed", {
+            file_path: absolute_path,
+            error: error.message,
+        });
+        return undefined;
+    }
+};
+const resolve_templates = (direct_templates, template_section, logger) => {
+    const resolved_templates = {};
+    Object.entries(template_section).forEach(([template_name, template_path]) => {
+        const template_content = read_template_file(template_path, logger);
+        if (template_content) {
+            resolved_templates[template_name] = template_content;
+        }
+    });
+    if (direct_templates) {
+        Object.entries(direct_templates).forEach(([template_name, template_body]) => {
+            resolved_templates[template_name] = template_body;
+        });
+        logger.info("config_templates_direct_override", { count: Object.keys(direct_templates).length });
+    }
+    return resolved_templates;
+};
+const create_emailer_client = (emailer_options, logger) => {
+    var _a;
+    if (!emailer_options) {
+        return {
+            send_message: async () => {
+                logger.warn("emailer_placeholder_invoked", {});
+                return { success: true };
+            },
+        };
+    }
+    const client = axios.create({
+        baseURL: emailer_options.base_url,
+        headers: Object.assign(Object.assign(Object.assign({}, ((_a = emailer_options.headers) !== null && _a !== void 0 ? _a : {})), (emailer_options.api_key ? { Authorization: `Bearer ${emailer_options.api_key}` } : {})), { "Content-Type": "application/json" }),
+    });
+    return {
+        send_message: async (payload) => {
+            try {
+                logger.info("emailer_request_initiated", { payload });
+                await client.post("/send", payload);
+                logger.info("emailer_request_success", {});
+                return { success: true };
+            }
+            catch (error) {
+                logger.error("emailer_request_failed", { error: error.message });
+                return { success: false };
+            }
+        },
+    };
+};
+// section: loader
+export const load_runtime_configuration = (options) => {
+    var _a, _b, _c;
+    const fallback_logger = create_logger_service("hazo_auth_config");
+    const parsed_options = sanitize_configuration_options(options, fallback_logger);
+    const direct_configuration = parsed_options.direct_configuration;
+    const logger = (_a = direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.logger) !== null && _a !== void 0 ? _a : fallback_logger;
+    let hazo_config;
+    try {
+        const config_file_path = (_b = parsed_options === null || parsed_options === void 0 ? void 0 : parsed_options.config_file_path) !== null && _b !== void 0 ? _b : default_config_path;
+        if (fs.existsSync(config_file_path)) {
+            hazo_config = new HazoConfig({
+                filePath: config_file_path,
+                logger,
+            });
+            logger.info("config_file_loaded", { config_file_path });
+        }
+        else {
+            logger.warn("config_file_missing", { config_file_path });
+        }
+    }
+    catch (error) {
+        logger.error("config_file_error", { error: error.message });
+    }
+    const permission_section = read_ini_section(hazo_config, "permissions");
+    const auth_section = read_ini_section(hazo_config, "auth");
+    const rate_section = read_ini_section(hazo_config, "rate_limit");
+    const label_section = read_ini_section(hazo_config, "labels");
+    const style_section = read_ini_section(hazo_config, "styles");
+    const template_section = read_ini_section(hazo_config, "templates");
+    const emailer_section = read_ini_section(hazo_config, "emailer");
+    const captcha_section = read_ini_section(hazo_config, "captcha");
+    const permission_names = resolve_permissions(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.permission_names, permission_section, logger);
+    const password_policy = resolve_password_policy(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.password_policy, auth_section, logger);
+    const token_settings = resolve_token_settings(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.token_settings, auth_section, logger);
+    const rate_limit = resolve_rate_limit(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.rate_limit, rate_section, logger);
+    const labels = resolve_dictionary(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.labels, label_section, logger, "config_labels");
+    const styles = resolve_dictionary(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.styles, style_section, logger, "config_styles");
+    const templates = resolve_templates(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.templates, template_section, logger);
+    const resolved_emailer_options = (_c = direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.emailer) !== null && _c !== void 0 ? _c : (emailer_section.base_url
+        ? {
+            base_url: emailer_section.base_url,
+            api_key: emailer_section.api_key,
+            headers: emailer_section.headers ? JSON.parse(emailer_section.headers) : undefined,
+        }
+        : undefined);
+    const emailer = create_emailer_client(resolved_emailer_options, logger);
+    const captcha = resolve_captcha(direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.captcha, captcha_section, logger);
+    return {
+        permission_names,
+        logger,
+        emailer,
+        templates,
+        labels,
+        styles,
+        password_policy,
+        token_settings,
+        rate_limit,
+        captcha,
+    };
+};
+// section: context_factory
+export const create_app_context = (options) => ({
+    config: load_runtime_configuration(options),
+});

package/dist/server/index.d.ts

@@ -0,0 +1,2 @@
+export declare const start_server: () => Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,YAAY,QAAa,OAAO,CAAC,IAAI,CAgBjD,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,32 @@
+var _a;
+// file_description: bootstrap entry point for the hazo_auth express server
+// section: imports
+import http from "http";
+import { create_server_app } from "hazo_auth/server/server";
+import { create_logger_service } from "hazo_auth/server/logging/logger_service";
+// section: constants
+const default_port = Number((_a = process.env.PORT) !== null && _a !== void 0 ? _a : 4100);
+const server_namespace = "hazo_auth_server";
+// section: bootstrap_runner
+export const start_server = async () => {
+    const logger = create_logger_service(server_namespace);
+    const app = create_server_app();
+    const http_server = http.createServer(app);
+    return new Promise((resolve, reject) => {
+        http_server.listen(default_port, () => {
+            logger.info("server_started", { port: default_port });
+            resolve();
+        });
+        http_server.on("error", (error) => {
+            logger.error("server_start_failed", { error: error.message });
+            reject(error);
+        });
+    });
+};
+// section: direct_execution_guard
+const resolved_module_path = new URL(import.meta.url).pathname;
+const entry_module_path = process.argv[1] !== undefined ? new URL(`file://${process.argv[1]}`).pathname : undefined;
+const is_primary_module = entry_module_path !== undefined && entry_module_path === resolved_module_path;
+if (is_primary_module) {
+    void start_server();
+}

package/dist/server/logging/logger_service.d.ts

@@ -0,0 +1,3 @@
+import type { logger_service } from "hazo_auth/server/types/app_types";
+export declare const create_logger_service: (namespace: string, external_logger?: Partial<logger_service>) => logger_service;
+//# sourceMappingURL=logger_service.d.ts.map

package/dist/server/logging/logger_service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger_service.d.ts","sourceRoot":"","sources":["../../../src/server/logging/logger_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA2BtF,eAAO,MAAM,qBAAqB,GAChC,WAAW,MAAM,EACjB,kBAAkB,OAAO,CAAC,cAAc,CAAC,KACxC,cAsBF,CAAC"}

package/dist/server/logging/logger_service.js

@@ -0,0 +1,37 @@
+// section: helper_functions
+const create_console_logger = (namespace) => {
+    const write = (level, message, data) => {
+        const timestamp = new Date().toISOString();
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify({
+            namespace,
+            level,
+            message,
+            data,
+            timestamp,
+        }));
+    };
+    return {
+        debug: (message, data) => write("debug", message, data),
+        info: (message, data) => write("info", message, data),
+        warn: (message, data) => write("warn", message, data),
+        error: (message, data) => write("error", message, data),
+    };
+};
+// section: factory
+export const create_logger_service = (namespace, external_logger) => {
+    const console_logger = create_console_logger(namespace);
+    const safe_bind = (level, fallback) => {
+        const candidate = external_logger === null || external_logger === void 0 ? void 0 : external_logger[level];
+        if (typeof candidate === "function") {
+            return (message, data) => candidate(message, data);
+        }
+        return fallback;
+    };
+    return {
+        debug: safe_bind("debug", console_logger.debug),
+        info: safe_bind("info", console_logger.info),
+        warn: safe_bind("warn", console_logger.warn),
+        error: safe_bind("error", console_logger.error),
+    };
+};

package/dist/server/routes/root_router.d.ts

@@ -0,0 +1,3 @@
+import { Router } from "express";
+export declare const create_root_router: () => Router;
+//# sourceMappingURL=root_router.d.ts.map

package/dist/server/routes/root_router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root_router.d.ts","sourceRoot":"","sources":["../../../src/server/routes/root_router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,eAAO,MAAM,kBAAkB,QAAO,MASrC,CAAC"}

package/dist/server/routes/root_router.js

@@ -0,0 +1,14 @@
+// file_description: declares the primary express router for the hazo_auth backend
+// section: imports
+import { Router } from "express";
+// section: router_factory
+export const create_root_router = () => {
+    const root_router = Router();
+    // section: health_endpoint
+    root_router.get("/health", (_request, response) => {
+        response.status(200).json({
+            status: "ok",
+        });
+    });
+    return root_router;
+};

package/dist/server/server.d.ts

@@ -0,0 +1,3 @@
+import type { Application } from "express";
+export declare const create_server_app: () => Application;
+//# sourceMappingURL=server.d.ts.map

package/dist/server/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAK3C,eAAO,MAAM,iBAAiB,QAAO,WAcpC,CAAC"}

package/dist/server/server.js

@@ -0,0 +1,25 @@
+// file_description: configure and export the express application for hazo_auth
+// section: imports
+import express from "express";
+import helmet from "helmet";
+import cors from "cors";
+import cookie_parser from "cookie-parser";
+import compression from "compression";
+import { create_root_router } from "hazo_auth/server/routes/root_router";
+import { create_app_context } from "hazo_auth/server/config/config_loader";
+// section: app_factory
+export const create_server_app = () => {
+    const server_app = express();
+    server_app.use(helmet({ crossOriginResourcePolicy: false }));
+    server_app.use(cors({ credentials: true, origin: true }));
+    server_app.use(express.json({ limit: "1mb" }));
+    server_app.use(express.urlencoded({ extended: true }));
+    server_app.use(cookie_parser());
+    server_app.use(compression());
+    server_app.use((request, _response, next) => {
+        request.context = create_app_context();
+        next();
+    });
+    server_app.use(create_root_router());
+    return server_app;
+};

package/dist/server/types/app_types.d.ts

@@ -0,0 +1,53 @@
+import type { Request } from "express";
+export type logger_method = (message: string, data?: Record<string, unknown>) => void;
+export type logger_service = {
+    debug: logger_method;
+    info: logger_method;
+    warn: logger_method;
+    error: logger_method;
+};
+export type emailer_client = {
+    send_message: (payload: Record<string, unknown>) => Promise<{
+        success: boolean;
+    }>;
+};
+export type handlebars_templates = Record<string, string>;
+export type password_policy = {
+    min_length: number;
+    requires_uppercase: boolean;
+    requires_lowercase: boolean;
+    requires_number: boolean;
+    requires_symbol: boolean;
+};
+export type token_settings = {
+    access_token_ttl_seconds: number;
+    refresh_token_ttl_seconds: number;
+};
+export type rate_limit_settings = {
+    max_attempts: number;
+    window_minutes: number;
+};
+export type captcha_settings = {
+    provider: "recaptcha_v2" | "recaptcha_v3" | "hcaptcha";
+    secret_key: string;
+} | undefined;
+export type runtime_configuration = {
+    permission_names: string[];
+    logger: logger_service;
+    emailer: emailer_client;
+    templates: handlebars_templates;
+    labels: Record<string, string>;
+    styles: Record<string, string>;
+    password_policy: password_policy;
+    token_settings: token_settings;
+    rate_limit: rate_limit_settings;
+    captcha: captcha_settings;
+};
+export type app_context = {
+    config: runtime_configuration;
+};
+export type context_request<T = unknown> = Request & {
+    body: T;
+    context: app_context;
+};
+//# sourceMappingURL=app_types.d.ts.map

package/dist/server/types/app_types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app_types.d.ts","sourceRoot":"","sources":["../../../src/server/types/app_types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,MAAM,aAAa,GAAG,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,IAAI,CAAC;AAEV,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;CACtB,CAAC;AAGF,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,CACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,EAAE,cAAc,GAAG,cAAc,GAAG,UAAU,CAAC;IACvD,UAAU,EAAE,MAAM,CAAC;CACpB,GACD,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAAG;IAClC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,oBAAoB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,mBAAmB,CAAC;IAChC,OAAO,EAAE,gBAAgB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAGF,MAAM,MAAM,eAAe,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,GAAG;IACnD,IAAI,EAAE,CAAC,CAAC;IACR,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC"}

package/dist/server/types/app_types.js

@@ -0,0 +1 @@
+export {};

package/migrations/003_add_url_on_logon_to_hazo_users.sql

@@ -0,0 +1,8 @@
+-- file_description: migration to add url_on_logon column to hazo_users table
+-- This migration adds a url_on_logon text field to store the URL to redirect to after successful login
+
+-- Add url_on_logon column (nullable, as this is an optional redirect URL)
+ALTER TABLE hazo_users 
+ADD COLUMN url_on_logon TEXT;
+
+

package/next.config.mjs

@@ -22,6 +22,18 @@ const next_config = {
   // Using webpack externals configuration instead (see webpack section below)
   // section: webpack_configuration
   webpack: (config, { isServer }) => {
+    // section: hazo_auth_alias_resolution
+    // Add hazo_auth/* alias to resolve to ./src/* during local development
+    // This allows package-style imports to work during development
+    config.resolve.alias = {
+      ...config.resolve.alias,
+      "hazo_auth/components": path.resolve(__dirname, "src/components"),
+      "hazo_auth/lib": path.resolve(__dirname, "src/lib"),
+      "hazo_auth/hooks": path.resolve(__dirname, "src/hooks"),
+      "hazo_auth/server": path.resolve(__dirname, "src/server"),
+      "hazo_auth/app": path.resolve(__dirname, "src/app"),
+    };
+
     // Exclude sql.js from webpack bundling for API routes
     // These packages use Node.js module.exports which doesn't work in webpack context
     if (isServer) {

package/package.json

@@ -1,7 +1,41 @@
 {
   "name": "hazo_auth",
-  "version": "1.2.0",
+  "version": "1.4.0",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./components/*": {
+      "types": "./dist/components/*.d.ts",
+      "import": "./dist/components/*.js"
+    },
+    "./components/ui/*": {
+      "types": "./dist/components/ui/*.d.ts",
+      "import": "./dist/components/ui/*.js"
+    },
+    "./components/layouts/*": {
+      "types": "./dist/components/layouts/*.d.ts",
+      "import": "./dist/components/layouts/*.js"
+    },
+    "./lib/*": {
+      "types": "./dist/lib/*.d.ts",
+      "import": "./dist/lib/*.js"
+    },
+    "./hooks/*": {
+      "types": "./dist/hooks/*.d.ts",
+      "import": "./dist/hooks/*.js"
+    },
+    "./server/*": {
+      "types": "./dist/server/*.d.ts",
+      "import": "./dist/server/*.js"
+    }
+  },
   "files": [
+    "dist/**/*",
     "src/**/*",
     "public/file.svg",
     "public/globe.svg",
@@ -14,6 +48,7 @@
     "README.md",
     "LICENSE",
     "tsconfig.json",
+    "tsconfig.build.json",
     "tailwind.config.ts",
     "postcss.config.mjs",
     "next.config.mjs",
@@ -25,6 +60,8 @@
   "scripts": {
     "dev": "next dev",
     "build": "next build",
+    "build:pkg": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build:pkg",
     "start": "next start",
     "lint": "next lint",
     "storybook": "storybook dev -p 6006",
@@ -103,7 +140,7 @@
     "better-sqlite3": "^12.4.1",
     "cross-env": "^10.1.0",
     "eslint": "^8.57.0",
-    "eslint-config-next": "^14.2.7",
+    "eslint-config-next": "^16.0.4",
     "eslint-plugin-storybook": "^10.0.6",
     "jest": "^30.2.0",
     "jest-environment-jsdom": "^29.7.0",