hazo_auth 1.3.0 → 1.4.1

package/dist/lib/auth_utility_config.server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Auth utility configuration options
+ */
+export type AuthUtilityConfig = {
+    cache_max_users: number;
+    cache_ttl_minutes: number;
+    cache_max_age_minutes: number;
+    rate_limit_per_user: number;
+    rate_limit_per_ip: number;
+    log_permission_denials: boolean;
+    enable_friendly_error_messages: boolean;
+    permission_error_messages: Map<string, string>;
+};
+/**
+ * Reads auth utility configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Auth utility configuration options
+ */
+export declare function get_auth_utility_config(): AuthUtilityConfig;
+//# sourceMappingURL=auth_utility_config.server.d.ts.map

package/dist/lib/auth_utility_config.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth_utility_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/auth_utility_config.server.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,OAAO,CAAC;IAChC,8BAA8B,EAAE,OAAO,CAAC;IACxC,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD,CAAC;AA0CF;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,CAgE3D"}

package/dist/lib/auth_utility_config.server.js

@@ -0,0 +1,64 @@
+// file_description: server-only helper to read auth utility configuration from hazo_auth_config.ini
+// section: imports
+import { get_config_value, get_config_number, get_config_boolean, } from "hazo_auth/lib/config/config_loader.server";
+// section: helpers
+/**
+ * Parses permission error messages from config string
+ * Format: "permission1:message1,permission2:message2"
+ * @param config_value - Config string value
+ * @returns Map of permission to user-friendly message
+ */
+function parse_permission_messages(config_value) {
+    const messages = new Map();
+    if (!config_value || config_value.trim().length === 0) {
+        return messages;
+    }
+    const pairs = config_value.split(",");
+    for (const pair of pairs) {
+        const trimmed = pair.trim();
+        if (trimmed.length === 0) {
+            continue;
+        }
+        const colon_index = trimmed.indexOf(":");
+        if (colon_index === -1) {
+            continue; // Skip invalid format
+        }
+        const permission = trimmed.substring(0, colon_index).trim();
+        const message = trimmed.substring(colon_index + 1).trim();
+        if (permission.length > 0 && message.length > 0) {
+            messages.set(permission, message);
+        }
+    }
+    return messages;
+}
+/**
+ * Reads auth utility configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Auth utility configuration options
+ */
+export function get_auth_utility_config() {
+    const section_name = "hazo_auth__auth_utility";
+    // Cache settings
+    const cache_max_users = get_config_number(section_name, "cache_max_users", 10000);
+    const cache_ttl_minutes = get_config_number(section_name, "cache_ttl_minutes", 15);
+    const cache_max_age_minutes = get_config_number(section_name, "cache_max_age_minutes", 30);
+    // Rate limiting
+    const rate_limit_per_user = get_config_number(section_name, "rate_limit_per_user", 100);
+    const rate_limit_per_ip = get_config_number(section_name, "rate_limit_per_ip", 200);
+    // Permission check behavior
+    const log_permission_denials = get_config_boolean(section_name, "log_permission_denials", true);
+    const enable_friendly_error_messages = get_config_boolean(section_name, "enable_friendly_error_messages", true);
+    // Permission message mappings
+    const permission_messages_str = get_config_value(section_name, "permission_error_messages", "");
+    const permission_error_messages = parse_permission_messages(permission_messages_str);
+    return {
+        cache_max_users,
+        cache_ttl_minutes,
+        cache_max_age_minutes,
+        rate_limit_per_user,
+        rate_limit_per_ip,
+        log_permission_denials,
+        enable_friendly_error_messages,
+        permission_error_messages,
+    };
+}

package/dist/lib/config/config_loader.server.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Reads a section from the config file
+ * @param section_name - Name of the section to read (e.g., "hazo_auth__register_layout")
+ * @param file_path - Optional custom config file path (defaults to hazo_auth_config.ini)
+ * @returns Section data as Record<string, string> or undefined if not found
+ */
+export declare function read_config_section(section_name: string, file_path?: string): Record<string, string> | undefined;
+/**
+ * Gets a single config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as string or default value
+ */
+export declare function get_config_value(section_name: string, key: string, default_value: string, file_path?: string): string;
+/**
+ * Gets a boolean config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default boolean value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as boolean
+ */
+export declare function get_config_boolean(section_name: string, key: string, default_value: boolean, file_path?: string): boolean;
+/**
+ * Gets a number config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default number value if key is not found or invalid
+ * @param file_path - Optional custom config file path
+ * @returns Config value as number
+ */
+export declare function get_config_number(section_name: string, key: string, default_value: number, file_path?: string): number;
+/**
+ * Gets a comma-separated list config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default array value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as array of strings
+ */
+export declare function get_config_array(section_name: string, key: string, default_value: string[], file_path?: string): string[];
+//# sourceMappingURL=config_loader.server.d.ts.map

package/dist/lib/config/config_loader.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config_loader.server.d.ts","sourceRoot":"","sources":["../../../src/lib/config/config_loader.server.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAwBpC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAQR;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,OAAO,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAST;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAeR;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EAAE,EACvB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,EAAE,CAcV"}

package/dist/lib/config/config_loader.server.js

@@ -0,0 +1,122 @@
+// file_description: shared utility for reading configuration from hazo_auth_config.ini using hazo_config
+// section: imports
+import { HazoConfig } from "hazo_config/dist/lib";
+import path from "path";
+import fs from "fs";
+import { create_app_logger } from "hazo_auth/lib/app_logger";
+// section: constants
+const DEFAULT_CONFIG_FILE = "hazo_auth_config.ini";
+// section: helpers
+/**
+ * Gets the default config file path
+ * @param custom_path - Optional custom config file path
+ * @returns Resolved config file path
+ */
+function get_config_file_path(custom_path) {
+    if (custom_path) {
+        return path.isAbsolute(custom_path) ? custom_path : path.resolve(process.cwd(), custom_path);
+    }
+    return path.resolve(process.cwd(), DEFAULT_CONFIG_FILE);
+}
+/**
+ * Reads a section from the config file
+ * @param section_name - Name of the section to read (e.g., "hazo_auth__register_layout")
+ * @param file_path - Optional custom config file path (defaults to hazo_auth_config.ini)
+ * @returns Section data as Record<string, string> or undefined if not found
+ */
+export function read_config_section(section_name, file_path) {
+    const config_path = get_config_file_path(file_path);
+    const logger = create_app_logger();
+    if (!fs.existsSync(config_path)) {
+        return undefined;
+    }
+    try {
+        const hazo_config = new HazoConfig({
+            filePath: config_path,
+        });
+        return hazo_config.getSection(section_name);
+    }
+    catch (error) {
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.warn("config_loader_read_section_failed", {
+            filename: "config_loader.server.ts",
+            line_number: 0,
+            section_name,
+            config_path,
+            error: error_message,
+        });
+        return undefined;
+    }
+}
+/**
+ * Gets a single config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as string or default value
+ */
+export function get_config_value(section_name, key, default_value, file_path) {
+    const section = read_config_section(section_name, file_path);
+    // Optional chaining on section and section[key]
+    // If section is undefined, or key is undefined, fall back to default
+    if (!section || section[key] === undefined) {
+        return default_value;
+    }
+    return section[key].trim() || default_value;
+}
+/**
+ * Gets a boolean config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default boolean value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as boolean
+ */
+export function get_config_boolean(section_name, key, default_value, file_path) {
+    const section = read_config_section(section_name, file_path);
+    if (!section || section[key] === undefined) {
+        return default_value;
+    }
+    const value = section[key].trim().toLowerCase();
+    return value !== "false" && value !== "0" && value !== "";
+}
+/**
+ * Gets a number config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default number value if key is not found or invalid
+ * @param file_path - Optional custom config file path
+ * @returns Config value as number
+ */
+export function get_config_number(section_name, key, default_value, file_path) {
+    const section = read_config_section(section_name, file_path);
+    if (!section || section[key] === undefined) {
+        return default_value;
+    }
+    const value = section[key].trim();
+    if (!value) {
+        return default_value;
+    }
+    const parsed = parseFloat(value);
+    return isNaN(parsed) ? default_value : parsed;
+}
+/**
+ * Gets a comma-separated list config value from a section
+ * @param section_name - Name of the section
+ * @param key - Key name within the section
+ * @param default_value - Default array value if key is not found
+ * @param file_path - Optional custom config file path
+ * @returns Config value as array of strings
+ */
+export function get_config_array(section_name, key, default_value, file_path) {
+    const section = read_config_section(section_name, file_path);
+    if (!section || section[key] === undefined) {
+        return default_value;
+    }
+    const value = section[key].trim();
+    if (!value) {
+        return default_value;
+    }
+    return value.split(",").map((item) => item.trim()).filter((item) => item.length > 0);
+}

package/dist/lib/email_verification_config.server.d.ts

@@ -0,0 +1,14 @@
+export type EmailVerificationConfig = {
+    alreadyLoggedInMessage: string;
+    showLogoutButton: boolean;
+    showReturnHomeButton: boolean;
+    returnHomeButtonLabel: string;
+    returnHomePath: string;
+};
+/**
+ * Reads email verification layout configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Email verification configuration options
+ */
+export declare function get_email_verification_config(): EmailVerificationConfig;
+//# sourceMappingURL=email_verification_config.server.d.ts.map

package/dist/lib/email_verification_config.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email_verification_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/email_verification_config.server.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,uBAAuB,GAAG;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,6BAA6B,IAAI,uBAAuB,CAWvE"}

package/dist/lib/email_verification_config.server.js

@@ -0,0 +1,20 @@
+// file_description: server-only helper to read email verification layout configuration from hazo_auth_config.ini
+// section: imports
+import { get_already_logged_in_config } from "hazo_auth/lib/already_logged_in_config.server";
+// section: helpers
+/**
+ * Reads email verification layout configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Email verification configuration options
+ */
+export function get_email_verification_config() {
+    // Get shared already logged in config
+    const alreadyLoggedInConfig = get_already_logged_in_config();
+    return {
+        alreadyLoggedInMessage: alreadyLoggedInConfig.message,
+        showLogoutButton: alreadyLoggedInConfig.showLogoutButton,
+        showReturnHomeButton: alreadyLoggedInConfig.showReturnHomeButton,
+        returnHomeButtonLabel: alreadyLoggedInConfig.returnHomeButtonLabel,
+        returnHomePath: alreadyLoggedInConfig.returnHomePath,
+    };
+}

package/dist/lib/file_types_config.server.d.ts

@@ -0,0 +1,11 @@
+export type FileTypesConfig = {
+    allowed_image_extensions: string[];
+    allowed_image_mime_types: string[];
+};
+/**
+ * Reads file type configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns File types configuration options
+ */
+export declare function get_file_types_config(): FileTypesConfig;
+//# sourceMappingURL=file_types_config.server.d.ts.map

package/dist/lib/file_types_config.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file_types_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/file_types_config.server.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG;IAC5B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,wBAAwB,EAAE,MAAM,EAAE,CAAC;CACpC,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CAOvD"}

package/dist/lib/file_types_config.server.js

@@ -0,0 +1,16 @@
+// file_description: server-only helper to read file type configuration from hazo_auth_config.ini
+// section: imports
+import { get_config_array } from "hazo_auth/lib/config/config_loader.server";
+// section: helpers
+/**
+ * Reads file type configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns File types configuration options
+ */
+export function get_file_types_config() {
+    const section = "hazo_auth__file_types";
+    return {
+        allowed_image_extensions: get_config_array(section, "allowed_image_extensions", ["jpg", "jpeg", "png"]),
+        allowed_image_mime_types: get_config_array(section, "allowed_image_mime_types", ["image/jpeg", "image/jpg", "image/png"]),
+    };
+}

package/dist/lib/forgot_password_config.server.d.ts

@@ -0,0 +1,14 @@
+export type ForgotPasswordConfig = {
+    alreadyLoggedInMessage: string;
+    showLogoutButton: boolean;
+    showReturnHomeButton: boolean;
+    returnHomeButtonLabel: string;
+    returnHomePath: string;
+};
+/**
+ * Reads forgot password layout configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Forgot password configuration options
+ */
+export declare function get_forgot_password_config(): ForgotPasswordConfig;
+//# sourceMappingURL=forgot_password_config.server.d.ts.map

package/dist/lib/forgot_password_config.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot_password_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/forgot_password_config.server.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,oBAAoB,CAWjE"}

package/dist/lib/forgot_password_config.server.js

@@ -0,0 +1,20 @@
+// file_description: server-only helper to read forgot password layout configuration from hazo_auth_config.ini
+// section: imports
+import { get_already_logged_in_config } from "hazo_auth/lib/already_logged_in_config.server";
+// section: helpers
+/**
+ * Reads forgot password layout configuration from hazo_auth_config.ini file
+ * Falls back to defaults if hazo_auth_config.ini is not found or section is missing
+ * @returns Forgot password configuration options
+ */
+export function get_forgot_password_config() {
+    // Get shared already logged in config
+    const alreadyLoggedInConfig = get_already_logged_in_config();
+    return {
+        alreadyLoggedInMessage: alreadyLoggedInConfig.message,
+        showLogoutButton: alreadyLoggedInConfig.showLogoutButton,
+        showReturnHomeButton: alreadyLoggedInConfig.showReturnHomeButton,
+        returnHomeButtonLabel: alreadyLoggedInConfig.returnHomeButtonLabel,
+        returnHomePath: alreadyLoggedInConfig.returnHomePath,
+    };
+}

package/dist/lib/hazo_connect_instance.server.d.ts

@@ -0,0 +1,17 @@
+import type { HazoConnectAdapter } from "hazo_connect";
+/**
+ * Gets or creates the singleton hazo_connect adapter instance
+ * This ensures all routes/components use the same database connection
+ *
+ * Uses the new hazo_connect singleton API which:
+ * - Automatically reuses the adapter instance
+ * - Automatically registers SQLite adapters with the admin service
+ * - Is thread-safe for Next.js serverless environments
+ * - Reads configuration from hazo_auth_config.ini using hazo_config (falls back to environment variables)
+ *
+ * Falls back to manual singleton if the new API is not available
+ *
+ * @returns The singleton HazoConnectAdapter instance
+ */
+export declare function get_hazo_connect_instance(): HazoConnectAdapter;
+//# sourceMappingURL=hazo_connect_instance.server.d.ts.map

package/dist/lib/hazo_connect_instance.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hazo_connect_instance.server.d.ts","sourceRoot":"","sources":["../../src/lib/hazo_connect_instance.server.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAWvD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,IAAI,kBAAkB,CAqE9D"}

package/dist/lib/hazo_connect_instance.server.js

@@ -0,0 +1,88 @@
+import { getHazoConnectSingleton } from "hazo_connect/nextjs/setup";
+import { create_sqlite_hazo_connect_server, get_hazo_connect_config_options } from "hazo_auth/lib/hazo_connect_setup.server";
+import { initializeAdminService, getSqliteAdminService } from "hazo_connect/server";
+import { create_app_logger } from "hazo_auth/lib/app_logger";
+// section: singleton_state
+let hazoConnectInstance = null;
+let isInitialized = false;
+// section: helpers
+/**
+ * Gets or creates the singleton hazo_connect adapter instance
+ * This ensures all routes/components use the same database connection
+ *
+ * Uses the new hazo_connect singleton API which:
+ * - Automatically reuses the adapter instance
+ * - Automatically registers SQLite adapters with the admin service
+ * - Is thread-safe for Next.js serverless environments
+ * - Reads configuration from hazo_auth_config.ini using hazo_config (falls back to environment variables)
+ *
+ * Falls back to manual singleton if the new API is not available
+ *
+ * @returns The singleton HazoConnectAdapter instance
+ */
+export function get_hazo_connect_instance() {
+    // Use the new singleton API from hazo_connect
+    // This automatically handles:
+    // - Instance reuse
+    // - Admin service registration (via registerSqliteAdapter)
+    // - Thread-safety for Next.js serverless
+    // - Configuration from hazo_auth_config.ini (via hazo_config) or environment variables
+    try {
+        // Get configuration from hazo_auth_config.ini (falls back to environment variables)
+        const config_options = get_hazo_connect_config_options();
+        const logger = create_app_logger();
+        logger.debug("hazo_connect_singleton_attempt", {
+            filename: "hazo_connect_instance.server.ts",
+            line_number: 38,
+            config_options,
+            note: "Attempting to get singleton with these options",
+        });
+        return getHazoConnectSingleton(config_options);
+    }
+    catch (error) {
+        const logger = create_app_logger();
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.error("hazo_connect_singleton_failed", {
+            filename: "hazo_connect_instance.server.ts",
+            line_number: 45,
+            error: error_message,
+            error_stack: error instanceof Error ? error.stack : undefined,
+            note: "Falling back to manual singleton implementation",
+        });
+        // Fallback: Manual singleton implementation if new API fails
+        // This should not happen with the updated package, but kept for safety
+        if (!hazoConnectInstance) {
+            // Get config options to determine database type
+            const config_options = get_hazo_connect_config_options();
+            const db_type = config_options.type;
+            // Only initialize SQLite admin service for SQLite databases
+            if (db_type === "sqlite" && !isInitialized) {
+                initializeAdminService({ enable_admin_ui: true });
+                isInitialized = true;
+            }
+            // Create the adapter instance (reads from hazo_auth_config.ini)
+            // Note: Despite the name, this function supports both SQLite and PostgREST
+            hazoConnectInstance = create_sqlite_hazo_connect_server();
+            // Note: Database migrations should be applied manually via SQLite Admin UI
+            // or through a separate migration script. The token_service has fallback
+            // logic to work without the token_type column if migration hasn't been applied.
+            // Finalize initialization by getting the admin service (only for SQLite)
+            if (db_type === "sqlite") {
+                try {
+                    getSqliteAdminService();
+                }
+                catch (adminError) {
+                    const logger = create_app_logger();
+                    const error_message = adminError instanceof Error ? adminError.message : "Unknown error";
+                    logger.warn("hazo_connect_instance_admin_service_init_failed", {
+                        filename: "hazo_connect_instance.server.ts",
+                        line_number: 0,
+                        error: error_message,
+                        note: "Could not get SqliteAdminService during initialization, continuing...",
+                    });
+                }
+            }
+        }
+        return hazoConnectInstance;
+    }
+}

package/dist/lib/hazo_connect_setup.d.ts

@@ -0,0 +1,2 @@
+export declare function create_sqlite_hazo_connect(): any;
+//# sourceMappingURL=hazo_connect_setup.d.ts.map

package/dist/lib/hazo_connect_setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hazo_connect_setup.d.ts","sourceRoot":"","sources":["../../src/lib/hazo_connect_setup.ts"],"names":[],"mappings":"AA4BA,wBAAgB,0BAA0B,QAWzC"}

package/dist/lib/hazo_connect_setup.js

@@ -0,0 +1,49 @@
+// file_description: helper function to create hazo_connect instance with configuration from environment variables
+// This file provides a client-safe wrapper that returns a mock on client-side
+// section: imports
+// Note: We don't import server-side code here to avoid client-side bundling issues
+// section: helpers
+/**
+ * Creates a hazo_connect instance configured from environment variables
+ *
+ * Environment variables:
+ * - HAZO_CONNECT_TYPE: Database type ("sqlite" | "postgrest") - defaults to "sqlite"
+ * - HAZO_CONNECT_SQLITE_PATH: Path to SQLite database file (relative to process.cwd() or absolute)
+ * - HAZO_CONNECT_POSTGREST_URL: PostgREST API URL (for postgrest type)
+ * - HAZO_CONNECT_POSTGREST_API_KEY: PostgREST API key (for postgrest type)
+ *
+ * Falls back to test fixture database if HAZO_CONNECT_SQLITE_PATH is not set
+ *
+ * Note: For client-side usage (Next.js pages), this returns a mock adapter
+ * since SQLite cannot run in browser environments. Use PostgREST for client-side database access.
+ */
+// Lazy loader for server module - prevents webpack from statically analyzing the require
+function loadServerModule() {
+    // Use Function constructor to create a dynamic require that webpack can't analyze
+    // eslint-disable-next-line no-new-func
+    const requireFunc = new Function('modulePath', 'return require(modulePath)');
+    return requireFunc('./hazo_connect_setup.server');
+}
+export function create_sqlite_hazo_connect() {
+    // Check if we're in a browser/client environment
+    if (typeof window !== "undefined") {
+        // Return a mock adapter for client-side usage
+        return create_client_mock_hazo_connect();
+    }
+    // Server-side: dynamically load server module
+    // Using Function constructor prevents webpack from statically analyzing the require
+    const serverModule = loadServerModule();
+    return serverModule.create_sqlite_hazo_connect_server();
+}
+/**
+ * Creates a mock hazo_connect adapter for client-side usage
+ * This satisfies the LayoutDataClient interface without requiring SQLite
+ */
+function create_client_mock_hazo_connect() {
+    return {
+        healthCheck: async () => {
+            // Mock health check for client-side - no-op
+            return Promise.resolve();
+        },
+    };
+}

package/dist/lib/hazo_connect_setup.server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Server-only function to create hazo_connect adapter
+ * Reads configuration from hazo_auth_config.ini using hazo_config, falls back to environment variables
+ * This should only be called from server-side code (API routes, server components)
+ */
+export declare function create_sqlite_hazo_connect_server(): import("hazo_connect").HazoConnectAdapter;
+/**
+ * Gets hazo_connect configuration options for use with singleton API
+ * Reads from hazo_auth_config.ini using hazo_config, falls back to environment variables
+ * @returns Configuration options compatible with getHazoConnectSingleton
+ */
+export declare function get_hazo_connect_config_options(): {
+    type?: "sqlite" | "postgrest";
+    sqlitePath?: string;
+    enableAdminUi?: boolean;
+    readOnly?: boolean;
+    baseUrl?: string;
+    apiKey?: string;
+};
+//# sourceMappingURL=hazo_connect_setup.server.d.ts.map

package/dist/lib/hazo_connect_setup.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hazo_connect_setup.server.d.ts","sourceRoot":"","sources":["../../src/lib/hazo_connect_setup.server.ts"],"names":[],"mappings":"AAgIA;;;;GAIG;AACH,wBAAgB,iCAAiC,8CAuBhD;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,IAAI;IACjD,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAsBA"}