hazo_auth 5.1.22 → 5.1.24

package/README.md

@@ -2,6 +2,48 @@
 
 A reusable authentication UI component package powered by Next.js, TailwindCSS, and shadcn. It integrates `hazo_config` for configuration management and `hazo_connect` for data access, enabling future components to stay aligned with platform conventions.
 
+### What's New in v5.2.0 ⚠️ BREAKING CHANGE
+
+**Server/Client Module Separation** - Complete fix for "Module not found: Can't resolve 'fs'" errors.
+
+**Breaking Change - New Import Path:**
+```typescript
+// BEFORE (v5.1.x) - Server imports from main entry
+import { hazo_get_auth, get_login_config } from "hazo_auth";
+
+// AFTER (v5.2.0) - Server imports from dedicated entry point
+import { hazo_get_auth, get_login_config } from "hazo_auth/server-lib";
+
+// Client imports unchanged
+import { ProfilePicMenu, use_auth_status } from "hazo_auth/client";
+import { cn } from "hazo_auth"; // Still works
+```
+
+**Key Changes:**
+- ✅ **New `hazo_auth/server-lib` entry point** - All server-only exports (auth functions, services, config loaders) now here
+- ✅ **Clean main entry** - `hazo_auth` is now client-safe (components, types, utilities only)
+- ✅ **Peer dependencies** - `hazo_config` and `hazo_connect` are now peer dependencies (install in your app)
+- ✅ **Fixed import path** - Uses `hazo_config/server` (not deprecated `hazo_config/dist/lib`)
+
+**Required Migration:**
+```bash
+# 1. Install peer dependencies
+npm install hazo_config hazo_connect hazo_logs
+
+# 2. Update imports in your server-side code
+# Change: import { hazo_get_auth } from "hazo_auth"
+# To:     import { hazo_get_auth } from "hazo_auth/server-lib"
+```
+
+### What's New in v5.1.23 🔧
+
+**FIX: Server/Client Bundling Issue** - Added `import "server-only"` guards to prevent accidental client bundling.
+
+**Key Changes:**
+- ✅ **Server-Only Guards** - Added `import "server-only"` to all server files preventing accidental client bundling
+- ✅ **hazo_logs v1.0.10** - Upgraded with conditional exports for browser/node environments
+- ✅ **Client Logging Support** - Logs API route now exports POST for client-side log ingestion
+
 ### What's New in v5.1.5 🐛
 
 **CRITICAL BUGFIX**: Fixed incomplete migration from v4.x to v5.x - several files were still referencing the deprecated `hazo_user_roles` table instead of `hazo_user_scopes`. This release completes the scope-based role assignment architecture introduced in v5.0.
@@ -104,6 +146,19 @@ npm run dev
 
 That's it! Visit `http://localhost:3000/hazo_auth/login` to see the login page.
 
+### Tailwind v4 Setup (Required for Tailwind v4 Users)
+
+If you're using Tailwind v4, add this to your `globals.css` AFTER the tailwindcss import:
+
+```css
+@import "tailwindcss";
+
+/* Required: Enable Tailwind to scan hazo_auth package classes */
+@source "../node_modules/hazo_auth/dist";
+```
+
+**Important:** Without this directive, Tailwind classes in hazo_auth components (hover states, colors, spacing) will not be compiled, resulting in broken styling.
+
 ### CLI Commands
 
 ```bash
@@ -313,19 +368,19 @@ import {
 For server-side code (API routes, Server Components):
 
 ```typescript
-// Use the main hazo_auth export for server-side code
-import { hazo_get_auth, get_config_value } from "hazo_auth";
-import { hazo_get_user_profiles } from "hazo_auth";
+// Use hazo_auth/server-lib for server-side code
+import { hazo_get_auth, get_config_value } from "hazo_auth/server-lib";
+import { hazo_get_user_profiles } from "hazo_auth/server-lib";
 ```
 
 ### Why This Matters
 
-If you import from the main `hazo_auth` entry in a client component, you'll get bundling errors like:
-```
-Module not found: Can't resolve 'fs'
-```
+Server-only code (Node.js APIs like `fs`, `path`, database access) must be kept separate from client bundles. The `hazo_auth/server-lib` entry point:
+- Contains all server-only exports (auth functions, services, config loaders)
+- Includes `import "server-only"` guard that throws build errors if imported in client code
+- Uses peer dependencies (`hazo_config`, `hazo_connect`, `hazo_logs`) from your app
 
-Use `hazo_auth/client` to avoid this.
+If you accidentally import from `hazo_auth/server-lib` in a client component, you'll get a helpful build error instead of a cryptic "Can't resolve 'fs'" message.
 
 ---
 

package/SETUP_CHECKLIST.md

@@ -7,8 +7,8 @@ This checklist provides step-by-step instructions for setting up the `hazo_auth`
 The fastest way to set up hazo_auth:
 
 ```bash
-# 1. Install the package
-npm install hazo_auth
+# 1. Install the package and peer dependencies
+npm install hazo_auth hazo_config hazo_connect hazo_logs
 
 # 2. Initialize project (creates directories, copies config files)
 npx hazo_auth init
@@ -55,12 +55,14 @@ node --version
 
 ## Phase 1: Installation & Config Files
 
-### Step 1.1: Install the package
+### Step 1.1: Install the package and peer dependencies
 
 ```bash
-npm install hazo_auth
+npm install hazo_auth hazo_config hazo_connect hazo_logs
 ```
 
+**Note (v5.2.0+):** `hazo_config`, `hazo_connect`, and `hazo_logs` are now peer dependencies. You must install them in your project.
+
 **Verify installation:**
 ```bash
 ls node_modules/hazo_auth/package.json
@@ -1602,7 +1604,7 @@ Replace `hazo_get_auth` with `hazo_get_tenant_auth` in your API routes:
 
 **Before (standard auth):**
 ```typescript
-import { hazo_get_auth } from "hazo_auth";
+import { hazo_get_auth } from "hazo_auth/server-lib";
 
 export async function GET(request: NextRequest) {
   const auth = await hazo_get_auth(request);
@@ -1612,7 +1614,7 @@ export async function GET(request: NextRequest) {
 
 **After (tenant auth):**
 ```typescript
-import { hazo_get_tenant_auth } from "hazo_auth";
+import { hazo_get_tenant_auth } from "hazo_auth/server-lib";
 
 export async function GET(request: NextRequest) {
   const auth = await hazo_get_tenant_auth(request);
@@ -1627,7 +1629,7 @@ export async function GET(request: NextRequest) {
 
 **Or use strict mode with error handling:**
 ```typescript
-import { require_tenant_auth, HazoAuthError } from "hazo_auth";
+import { require_tenant_auth, HazoAuthError } from "hazo_auth/server-lib";
 
 export async function GET(request: NextRequest) {
   try {

package/cli-src/lib/already_logged_in_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read already logged in configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_boolean } from "./config/config_loader.server.js";
 

package/cli-src/lib/app_logger.ts

@@ -1,4 +1,7 @@
-// file_description: client-accessible wrapper for the main app logging service using hazo_logs
+// file_description: server-only wrapper for the main app logging service using hazo_logs
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { createLogger } from "hazo_logs";
 

package/cli-src/lib/app_permissions_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read app permissions configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // This allows consuming apps to declare their required permissions with descriptions for debugging
 // section: imports
 import { read_config_section } from "./config/config_loader.server.js";

package/cli-src/lib/app_user_data_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read app_user_data schema configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // Enables schema-based editing of app_user_data in User Management
 // section: imports
 import {

package/cli-src/lib/auth/auth_utils.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-side authentication utilities for checking login status in API routes
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { NextRequest, NextResponse } from "next/server";
 import { get_hazo_connect_instance } from "../hazo_connect_instance.server.js";

package/cli-src/lib/auth/hazo_get_auth.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-side implementation of hazo_get_auth utility for API routes
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { NextRequest } from "next/server";
 import { get_hazo_connect_instance } from "../hazo_connect_instance.server.js";

package/cli-src/lib/auth/hazo_get_tenant_auth.server.ts

@@ -1,4 +1,7 @@
 // file_description: tenant-aware authentication function that extracts scope from request headers/cookies
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { NextRequest } from "next/server";
 import { hazo_get_auth } from "./hazo_get_auth.server.js";

package/cli-src/lib/auth_utility_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read auth utility configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import {
   get_config_value,

package/cli-src/lib/branding_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read firm branding configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import {
   get_config_value,

package/cli-src/lib/config/config_loader.server.ts

@@ -1,6 +1,9 @@
 // file_description: shared utility for reading configuration from hazo_auth_config.ini using hazo_config
+// section: server-only-guard
+import "server-only";
+
 // section: imports
-import { HazoConfig } from "hazo_config/dist/lib";
+import { HazoConfig } from "hazo_config/server";
 import path from "path";
 import fs from "fs";
 import { create_app_logger } from "../app_logger.js";

package/cli-src/lib/cookies_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read cookie configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 
 import { read_config_section } from "./config/config_loader.server.js";
 

package/cli-src/lib/dev_lock_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read dev lock configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_boolean, get_config_number } from "./config/config_loader.server.js";
 import { DEFAULT_DEV_LOCK } from "./config/default_config.js";

package/cli-src/lib/email_verification_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read email verification layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_already_logged_in_config } from "./already_logged_in_config.server.js";
 import { get_config_value } from "./config/config_loader.server.js";

package/cli-src/lib/file_types_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read file type configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_array } from "./config/config_loader.server.js";
 

package/cli-src/lib/forgot_password_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read forgot password layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_already_logged_in_config } from "./already_logged_in_config.server.js";
 import { get_config_value } from "./config/config_loader.server.js";

package/cli-src/lib/hazo_connect_instance.server.ts

@@ -1,4 +1,7 @@
 // file_description: singleton instance of hazo_connect adapter - initialized once and reused across all routes
+// section: server-only-guard
+import "server-only";
+
 // This ensures all routes/components use the same database connection
 // Uses the new hazo_connect singleton API from hazo_connect/nextjs/setup
 // Reads configuration from hazo_auth_config.ini using hazo_config

package/cli-src/lib/hazo_connect_setup.server.ts

@@ -1,9 +1,12 @@
 // file_description: server-only helper to create hazo_connect instance (imports server-side code)
+// section: server-only-guard
+import "server-only";
+
 // This file should only be imported in server contexts (API routes, server components)
 // Reads configuration from hazo_auth_config.ini using hazo_config
 // section: imports
 import { createHazoConnect } from "hazo_connect/server";
-import { HazoConfig } from "hazo_config/dist/lib";
+import { HazoConfig } from "hazo_config/server";
 import path from "path";
 import fs from "fs";
 import { create_app_logger } from "./app_logger.js";

package/cli-src/lib/login_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read login layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value } from "./config/config_loader.server.js";
 import { get_already_logged_in_config } from "./already_logged_in_config.server.js";

package/cli-src/lib/messages_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read user-facing messages from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value } from "./config/config_loader.server.js";
 

package/cli-src/lib/my_settings_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read my settings layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value } from "./config/config_loader.server.js";
 import { get_user_fields_config } from "./user_fields_config.server.js";

package/cli-src/lib/navbar_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read navbar configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_boolean, get_config_number } from "./config/config_loader.server.js";
 import { DEFAULT_NAVBAR } from "./config/default_config.js";

package/cli-src/lib/oauth_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read OAuth configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_boolean } from "./config/config_loader.server.js";
 import { DEFAULT_OAUTH } from "./config/default_config.js";

package/cli-src/lib/password_requirements_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read shared password requirements configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_number, get_config_boolean } from "./config/config_loader.server.js";
 import { DEFAULT_PASSWORD_REQUIREMENTS } from "./config/default_config.js";

package/cli-src/lib/profile_pic_menu_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read profile picture menu configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_boolean, get_config_array } from "./config/config_loader.server.js";
 

package/cli-src/lib/profile_picture_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read profile picture configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_boolean, get_config_value, get_config_number, read_config_section } from "./config/config_loader.server.js";
 import { create_app_logger } from "./app_logger.js";

package/cli-src/lib/register_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read register layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_boolean, get_config_value, read_config_section } from "./config/config_loader.server.js";
 import { get_password_requirements_config } from "./password_requirements_config.server.js";

package/cli-src/lib/reset_password_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read reset password layout configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value } from "./config/config_loader.server.js";
 import { get_already_logged_in_config } from "./already_logged_in_config.server.js";

package/cli-src/lib/scope_hierarchy_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read HRBAC scope hierarchy configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import {
   get_config_value,

package/cli-src/lib/ui_shell_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: load ui shell layout settings from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value } from "./config/config_loader.server.js";
 import { get_navbar_config, type NavbarConfig } from "./navbar_config.server.js";

package/cli-src/lib/ui_sizes_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read UI size configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_number } from "./config/config_loader.server.js";
 

package/cli-src/lib/user_fields_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read shared user fields configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_boolean } from "./config/config_loader.server.js";
 

package/cli-src/lib/user_management_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read user management configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import { get_config_value, get_config_array, read_config_section } from "./config/config_loader.server.js";
 

package/cli-src/lib/user_profiles_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read user profiles cache configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import {
   get_config_number,

package/cli-src/lib/user_types_config.server.ts

@@ -1,4 +1,7 @@
 // file_description: server-only helper to read user types configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
+
 // section: imports
 import {
   get_config_value,

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 export * from "./contexts/hazo_auth_provider.js";
 export * from "./contexts/hazo_auth_config.js";
 export * from "./components/index.js";
-export * from "./lib/index.js";
+export type { HazoAuthUser, HazoAuthResult, HazoAuthError, HazoAuthOptions, ScopeDetails, TenantOrganization, TenantAuthOptions, TenantAuthResult, RequiredTenantAuthResult, } from "./lib/auth/auth_types";
+export { AuthenticationRequiredError, TenantRequiredError, TenantAccessDeniedError, } from "./lib/auth/auth_types.js";
+export { cn, merge_class_names } from "./lib/utils.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAG5C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAG5C,cAAc,oBAAoB,CAAC;AAGnC,YAAY,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,8 +1,14 @@
-// file_description: main entry point for hazo_auth package - exports all public APIs
+// file_description: main entry point for hazo_auth package - client-safe exports only
+// This entry point is safe for use in client components (browser)
+// For server-side code, use "hazo_auth/server-lib" instead
+//
+// BREAKING CHANGE (v5.2.0): Server-only exports moved to "hazo_auth/server-lib"
+// Migration: import { hazo_get_auth, get_login_config } from "hazo_auth/server-lib";
 // section: context_exports
 export * from "./contexts/hazo_auth_provider.js";
 export * from "./contexts/hazo_auth_config.js";
 // section: component_exports
 export * from "./components/index.js";
-// section: lib_exports
-export * from "./lib/index.js";
+export { AuthenticationRequiredError, TenantRequiredError, TenantAccessDeniedError, } from "./lib/auth/auth_types.js";
+// section: utility_exports (client-safe)
+export { cn, merge_class_names } from "./lib/utils.js";

package/dist/lib/already_logged_in_config.server.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 export type AlreadyLoggedInConfig = {
     message: string;
     showLogoutButton: boolean;

package/dist/lib/already_logged_in_config.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"already_logged_in_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/already_logged_in_config.server.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,qBAAqB,CAyBpE"}
+{"version":3,"file":"already_logged_in_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/already_logged_in_config.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAMrB,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,qBAAqB,CAyBpE"}

package/dist/lib/already_logged_in_config.server.js

@@ -1,4 +1,6 @@
 // file_description: server-only helper to read already logged in configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
 // section: imports
 import { get_config_value, get_config_boolean } from "./config/config_loader.server.js";
 // section: helpers

package/dist/lib/app_logger.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 /**
  * Returns the hazo_auth logger instance
  * Uses hazo_logs for consistent logging across hazo packages

package/dist/lib/app_logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_logger.d.ts","sourceRoot":"","sources":["../../src/lib/app_logger.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,kCAAe,CAAC"}
+{"version":3,"file":"app_logger.d.ts","sourceRoot":"","sources":["../../src/lib/app_logger.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AASrB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,kCAAe,CAAC"}

package/dist/lib/app_logger.js

@@ -1,4 +1,6 @@
-// file_description: client-accessible wrapper for the main app logging service using hazo_logs
+// file_description: server-only wrapper for the main app logging service using hazo_logs
+// section: server-only-guard
+import "server-only";
 // section: imports
 import { createLogger } from "hazo_logs";
 // section: logger_instance

package/dist/lib/app_permissions_config.server.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 /**
  * A single app permission declaration
  */

package/dist/lib/app_permissions_config.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_permissions_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/app_permissions_config.server.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC;AAIF;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,IAAI,oBAAoB,CA0BjE;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAGpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,gBAAgB,EAAE,MAAM,EAAE,GACzB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYrB"}
+{"version":3,"file":"app_permissions_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/app_permissions_config.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAQrB;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC;AAIF;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,IAAI,oBAAoB,CA0BjE;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAGpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,gBAAgB,EAAE,MAAM,EAAE,GACzB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYrB"}

package/dist/lib/app_permissions_config.server.js

@@ -1,4 +1,6 @@
 // file_description: server-only helper to read app permissions configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
 // This allows consuming apps to declare their required permissions with descriptions for debugging
 // section: imports
 import { read_config_section } from "./config/config_loader.server.js";

package/dist/lib/app_user_data_config.server.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 /**
  * JSON Schema property definition (simplified subset)
  */

package/dist/lib/app_user_data_config.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_user_data_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/app_user_data_config.server.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+DAA+D;IAC/D,aAAa,EAAE,OAAO,CAAC;IACvB,8CAA8C;IAC9C,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACjC,kEAAkE;IAClE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAkEF;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,CAU5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,GAAG,IAAI,CAGnE;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAarD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBxE"}
+{"version":3,"file":"app_user_data_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/app_user_data_config.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAYrB;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,+DAA+D;IAC/D,aAAa,EAAE,OAAO,CAAC;IACvB,8CAA8C;IAC9C,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACjC,kEAAkE;IAClE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAkEF;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,CAU5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,GAAG,IAAI,CAGnE;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAarD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBxE"}

package/dist/lib/app_user_data_config.server.js

@@ -1,4 +1,6 @@
 // file_description: server-only helper to read app_user_data schema configuration from hazo_auth_config.ini
+// section: server-only-guard
+import "server-only";
 // Enables schema-based editing of app_user_data in User Management
 // section: imports
 import { get_config_value, get_config_boolean, read_config_section, } from "./config/config_loader.server.js";

package/dist/lib/auth/auth_utils.server.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 import { NextRequest, NextResponse } from "next/server";
 export type AuthUser = {
     authenticated: true;

package/dist/lib/auth/auth_utils.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_utils.server.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/auth_utils.server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOxD,MAAM,MAAM,QAAQ,GAAG;IACrB,aAAa,EAAE,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR;IAAE,aAAa,EAAE,KAAK,CAAA;CAAE,CAAC;AAmB7B;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA8CtF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ1E;AAED;;;;;GAKG;AACH,wBAAsB,oCAAoC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IACxF,WAAW,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC,CA6DD"}
+{"version":3,"file":"auth_utils.server.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/auth_utils.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAGrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOxD,MAAM,MAAM,QAAQ,GAAG;IACrB,aAAa,EAAE,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR;IAAE,aAAa,EAAE,KAAK,CAAA;CAAE,CAAC;AAmB7B;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA8CtF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ1E;AAED;;;;;GAKG;AACH,wBAAsB,oCAAoC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IACxF,WAAW,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC,CA6DD"}

package/dist/lib/auth/auth_utils.server.js

@@ -1,4 +1,6 @@
 // file_description: server-side authentication utilities for checking login status in API routes
+// section: server-only-guard
+import "server-only";
 // section: imports
 import { NextResponse } from "next/server";
 import { get_hazo_connect_instance } from "../hazo_connect_instance.server.js";

package/dist/lib/auth/hazo_get_auth.server.d.ts

@@ -1,3 +1,4 @@
+import "server-only";
 import { NextRequest } from "next/server";
 import type { HazoAuthResult, HazoAuthOptions } from "./auth_types";
 /**