hazo_auth 7.0.2 → 9.0.0

package/dist/lib/utils/get_origin_url.d.ts

@@ -1,23 +1,2 @@
-/**
- * Gets the public-facing origin URL for redirect construction.
- *
- * Behind reverse proxies (Cloudflare, nginx, etc.), `request.url` contains the
- * internal address (e.g. `http://localhost:3000`), not the public domain.
- * This function returns the correct origin from environment variables.
- *
- * Priority: NEXTAUTH_URL > APP_DOMAIN_NAME > NEXT_PUBLIC_APP_URL > APP_URL > request.url
- *
- * @param request_url - The request.url to use as fallback
- * @returns The origin URL (e.g. "https://gotimer.org")
- */
-export declare function get_origin_url(request_url: string): string;
-/**
- * Creates a URL using the public-facing origin instead of request.url.
- * Drop-in replacement for `new URL(path, request.url)` in route handlers.
- *
- * @param path - The path or relative URL (e.g. "/hazo_auth/login")
- * @param request_url - The request.url (used as fallback only)
- * @returns A URL object with the correct public origin
- */
-export declare function create_redirect_url(path: string, request_url: string): URL;
+export { get_origin_url, create_redirect_url } from 'hazo_core';
 //# sourceMappingURL=get_origin_url.d.ts.map

package/dist/lib/utils/get_origin_url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get_origin_url.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/get_origin_url.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA8B1D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,GAAG,CAG1E"}
+{"version":3,"file":"get_origin_url.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/get_origin_url.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/lib/utils/get_origin_url.js

@@ -1,57 +1,5 @@
-// file_description: Resolves the public-facing origin URL for constructing redirects
-// When running behind a reverse proxy (Cloudflare, nginx), request.url resolves to
-// the internal address (e.g. http://localhost:3000). This utility returns the correct
-// public origin using NEXTAUTH_URL, falling back to request.url.
-/**
- * Gets the public-facing origin URL for redirect construction.
- *
- * Behind reverse proxies (Cloudflare, nginx, etc.), `request.url` contains the
- * internal address (e.g. `http://localhost:3000`), not the public domain.
- * This function returns the correct origin from environment variables.
- *
- * Priority: NEXTAUTH_URL > APP_DOMAIN_NAME > NEXT_PUBLIC_APP_URL > APP_URL > request.url
- *
- * @param request_url - The request.url to use as fallback
- * @returns The origin URL (e.g. "https://gotimer.org")
- */
-export function get_origin_url(request_url) {
-    // NEXTAUTH_URL is the standard for NextAuth.js apps
-    const nextauth_url = process.env.NEXTAUTH_URL;
-    if (nextauth_url) {
-        return nextauth_url.replace(/\/$/, "");
-    }
-    // APP_DOMAIN_NAME (with protocol handling)
-    const app_domain = process.env.APP_DOMAIN_NAME;
-    if (app_domain) {
-        const domain = app_domain.trim();
-        if (domain.startsWith("http://") || domain.startsWith("https://")) {
-            return domain.replace(/\/$/, "");
-        }
-        return `https://${domain}`;
-    }
-    // Other common env vars
-    const env_url = process.env.NEXT_PUBLIC_APP_URL || process.env.APP_URL;
-    if (env_url) {
-        return env_url.replace(/\/$/, "");
-    }
-    // Fallback to request.url (works in development without a proxy)
-    try {
-        const url = new URL(request_url);
-        return url.origin;
-    }
-    catch (_a) {
-        return request_url;
-    }
-}
-/**
- * Creates a URL using the public-facing origin instead of request.url.
- * Drop-in replacement for `new URL(path, request.url)` in route handlers.
- *
- * @param path - The path or relative URL (e.g. "/hazo_auth/login")
- * @param request_url - The request.url (used as fallback only)
- * @returns A URL object with the correct public origin
- */
-export function create_redirect_url(path, request_url) {
-    const origin = get_origin_url(request_url);
-    return new URL(path, origin);
-}
+// file_description: Re-exports get_origin_url and create_redirect_url from hazo_core.
+// Canonical location moved to hazo_core/http in hazo_core v1.
+// This re-export maintains backward compatibility for hazo_auth consumers.
+// Will be removed in hazo_auth v9 — import from 'hazo_core' directly.
+export { get_origin_url, create_redirect_url } from 'hazo_core';

package/dist/lib/utils.d.ts

@@ -1,4 +1,3 @@
-import { type ClassValue } from "clsx";
-export declare function merge_class_names(...inputs: ClassValue[]): string;
-export declare const cn: (...inputs: ClassValue[]) => string;
+export { cn } from "hazo_ui";
+export { cn as merge_class_names } from "hazo_ui";
 //# sourceMappingURL=utils.d.ts.map

package/dist/lib/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/lib/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAI7C,wBAAgB,iBAAiB,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAExD;AAGD,eAAO,MAAM,EAAE,GAAI,GAAG,QAAQ,UAAU,EAAE,WAAiC,CAAC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/lib/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAG7B,OAAO,EAAE,EAAE,IAAI,iBAAiB,EAAE,MAAM,SAAS,CAAC"}

package/dist/lib/utils.js

@@ -1,9 +1,4 @@
-// file_description: provide shared utility helpers for the hazo_auth project
-import { clsx } from "clsx";
-import { twMerge } from "tailwind-merge";
-// section: tailwind_merge_helper
-export function merge_class_names(...inputs) {
-    return twMerge(clsx(inputs));
-}
-// section: shadcn_compatibility_helper
-export const cn = (...inputs) => merge_class_names(...inputs);
+// file_description: re-exports cn and merge_class_names from hazo_ui (canonical source)
+export { cn } from "hazo_ui";
+// merge_class_names alias — kept for backward compatibility
+export { cn as merge_class_names } from "hazo_ui";

package/dist/page_components/index.d.ts

@@ -1,8 +1,3 @@
-export { LoginPage, type LoginPageProps } from "./login.js";
-export { RegisterPage, type RegisterPageProps } from "./register.js";
-export { ForgotPasswordPage, type ForgotPasswordPageProps } from "./forgot_password.js";
-export { ResetPasswordPage, type ResetPasswordPageProps } from "./reset_password.js";
-export { VerifyEmailPage, type VerifyEmailPageProps } from "./verify_email.js";
 export { MySettingsPage, type MySettingsPageProps } from "./my_settings.js";
 export { CreateFirmPage, type CreateFirmPageProps } from "./create_firm.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/page_components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/page_components/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/page_components/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC"}

package/dist/page_components/index.js

@@ -1,10 +1,5 @@
 // file_description: barrel export for zero-config page components
 // These components can be used directly by consumers with sensible defaults
 // section: page_exports
-export { LoginPage } from "./login.js";
-export { RegisterPage } from "./register.js";
-export { ForgotPasswordPage } from "./forgot_password.js";
-export { ResetPasswordPage } from "./reset_password.js";
-export { VerifyEmailPage } from "./verify_email.js";
 export { MySettingsPage } from "./my_settings.js";
 export { CreateFirmPage } from "./create_firm.js";

package/dist/server/config/config_loader.js

@@ -4,7 +4,7 @@ import fs from "fs";
 import path from "path";
 import axios from "axios";
 import { HazoConfig } from "hazo_config/server";
-import { createLogger } from "hazo_logs";
+import { createLogger } from "hazo_core";
 const is_string_record = (value) => !!value &&
     typeof value === "object" &&
     !Array.isArray(value) &&
@@ -268,7 +268,7 @@ export const load_runtime_configuration = (options) => {
     const fallback_logger = createLogger("hazo_auth_config");
     const parsed_options = sanitize_configuration_options(options, fallback_logger);
     const direct_configuration = parsed_options.direct_configuration;
-    const logger = (_a = direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.logger) !== null && _a !== void 0 ? _a : fallback_logger;
+    const logger = ((_a = direct_configuration === null || direct_configuration === void 0 ? void 0 : direct_configuration.logger) !== null && _a !== void 0 ? _a : fallback_logger);
     let hazo_config;
     try {
         const config_file_path = (_b = parsed_options === null || parsed_options === void 0 ? void 0 : parsed_options.config_file_path) !== null && _b !== void 0 ? _b : default_config_path;

package/dist/server/index.js

@@ -3,7 +3,7 @@ var _a;
 // section: imports
 import http from "http";
 import { create_server_app } from "./server.js";
-import { createLogger } from "hazo_logs";
+import { createLogger } from "hazo_core";
 // section: constants
 const default_port = Number((_a = process.env.PORT) !== null && _a !== void 0 ? _a : 4100);
 // section: bootstrap_runner

package/dist/server/routes/index.d.ts

@@ -34,6 +34,9 @@ export { POST as relationshipUpgradePOST } from "./relationship_upgrade.js";
 export { POST as pinLoginPOST } from "./pin_login.js";
 export { otpRequestPOST } from "./otp/request.js";
 export { otpVerifyPOST } from "./otp/verify.js";
+export { legalDocsGET } from './legal_docs_get.js';
+export { legalDocsAcceptPOST } from './legal_docs_accept.js';
+export { legalDocsPublishPOST } from './legal_docs_publish.js';
 export { consentMeGET } from "./consent_me.js";
 export { stringsDefaultsGET } from "./strings_defaults.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGtE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAGvE,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,IAAI,IAAI,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,MAAM,IAAI,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,IAAI,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAG9E,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,IAAI,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGjE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,KAAK,IAAI,wBAAwB,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,IAAI,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACjL,OAAO,EAAE,GAAG,IAAI,4BAA4B,EAAE,IAAI,IAAI,6BAA6B,EAAE,GAAG,IAAI,4BAA4B,EAAE,MAAM,IAAI,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAC3M,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,IAAI,IAAI,uBAAuB,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EAAE,GAAG,IAAI,2BAA2B,EAAE,IAAI,IAAI,4BAA4B,EAAE,GAAG,IAAI,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAG7J,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,KAAK,IAAI,gBAAgB,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvI,OAAO,EAAE,GAAG,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGrE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,IAAI,gBAAgB,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvI,OAAO,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC;AAGvD,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,GAAG,IAAI,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,iBAAiB,EAAE,KAAK,IAAI,kBAAkB,EAAE,MAAM,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjJ,OAAO,EAAE,IAAI,IAAI,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGtE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAGvE,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,IAAI,IAAI,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,MAAM,IAAI,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,IAAI,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAG9E,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,IAAI,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGjE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,KAAK,IAAI,wBAAwB,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,IAAI,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACjL,OAAO,EAAE,GAAG,IAAI,4BAA4B,EAAE,IAAI,IAAI,6BAA6B,EAAE,GAAG,IAAI,4BAA4B,EAAE,MAAM,IAAI,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAC3M,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,IAAI,IAAI,uBAAuB,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EAAE,GAAG,IAAI,2BAA2B,EAAE,IAAI,IAAI,4BAA4B,EAAE,GAAG,IAAI,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAG7J,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,KAAK,IAAI,gBAAgB,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvI,OAAO,EAAE,GAAG,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGrE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,IAAI,gBAAgB,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvI,OAAO,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC;AAGvD,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,GAAG,IAAI,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,iBAAiB,EAAE,KAAK,IAAI,kBAAkB,EAAE,MAAM,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjJ,OAAO,EAAE,IAAI,IAAI,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/server/routes/index.js

@@ -48,6 +48,10 @@ export { POST as pinLoginPOST } from "./pin_login.js";
 // OTP sign-in routes
 export { otpRequestPOST } from "./otp/request.js";
 export { otpVerifyPOST } from "./otp/verify.js";
+// Legal docs routes
+export { legalDocsGET } from './legal_docs_get.js';
+export { legalDocsAcceptPOST } from './legal_docs_accept.js';
+export { legalDocsPublishPOST } from './legal_docs_publish.js';
 // Consent routes
 export { consentMeGET } from "./consent_me.js";
 // Strings routes

package/dist/server/routes/legal_docs_accept.d.ts

@@ -0,0 +1,3 @@
+import { NextRequest, NextResponse } from 'next/server';
+export declare function legalDocsAcceptPOST(request: NextRequest): Promise<NextResponse>;
+//# sourceMappingURL=legal_docs_accept.d.ts.map

package/dist/server/routes/legal_docs_accept.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal_docs_accept.d.ts","sourceRoot":"","sources":["../../../src/server/routes/legal_docs_accept.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AASxD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA0CrF"}

package/dist/server/routes/legal_docs_accept.js

@@ -0,0 +1,43 @@
+// file_description: POST /api/hazo_auth/legal_docs/accept — records a user's acceptance of one or more legal docs
+import { NextResponse } from 'next/server';
+import { hazo_get_auth } from '../../lib/auth/hazo_get_auth.server.js';
+import { get_client_ip } from '../../lib/auth/hazo_get_auth.server.js';
+import { get_legal_docs_config } from '../../lib/legal/legal_docs_config.server.js';
+import { read_legal_doc } from '../../lib/legal/legal_docs_reader.server.js';
+import { write_legal_acceptance } from '../../lib/legal/legal_docs_service.js';
+import { get_hazo_connect_instance } from '../../lib/hazo_connect_instance.server.js';
+import { create_app_logger } from '../../lib/app_logger.js';
+export async function legalDocsAcceptPOST(request) {
+    const logger = create_app_logger();
+    try {
+        const auth = await hazo_get_auth(request);
+        if (!auth.user) {
+            return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 });
+        }
+        const body = await request.json().catch(() => null);
+        const accepted = body === null || body === void 0 ? void 0 : body.accepted;
+        if (!accepted || typeof accepted !== 'object' || Object.keys(accepted).length === 0) {
+            return NextResponse.json({ ok: false, error: 'accepted is required' }, { status: 400 });
+        }
+        const config = get_legal_docs_config();
+        for (const [doc_key, { hash }] of Object.entries(accepted)) {
+            const doc_config = config.docs.find(d => d.key === doc_key);
+            if (!doc_config) {
+                return NextResponse.json({ ok: false, error: `Unknown doc key: ${doc_key}` }, { status: 400 });
+            }
+            const { hash: current_hash } = read_legal_doc(doc_config.path);
+            if (hash !== current_hash) {
+                return NextResponse.json({ ok: false, error: `Hash mismatch for "${doc_key}" — user may have seen a stale version` }, { status: 400 });
+            }
+        }
+        const ip = get_client_ip(request);
+        const user_agent = request.headers.get('user-agent');
+        const adapter = get_hazo_connect_instance();
+        await write_legal_acceptance(adapter, auth.user.id, accepted, ip, user_agent);
+        return NextResponse.json({ ok: true });
+    }
+    catch (err) {
+        logger.error('legal_docs_accept: internal server error', { err });
+        return NextResponse.json({ ok: false, error: 'Internal server error' }, { status: 500 });
+    }
+}

package/dist/server/routes/legal_docs_get.d.ts

@@ -0,0 +1,3 @@
+import { NextRequest, NextResponse } from 'next/server';
+export declare function legalDocsGET(_request: NextRequest): Promise<NextResponse>;
+//# sourceMappingURL=legal_docs_get.d.ts.map

package/dist/server/routes/legal_docs_get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal_docs_get.d.ts","sourceRoot":"","sources":["../../../src/server/routes/legal_docs_get.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOxD,wBAAsB,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA8C/E"}

package/dist/server/routes/legal_docs_get.js

@@ -0,0 +1,49 @@
+// file_description: GET /api/hazo_auth/legal_docs — returns configured legal docs with content and required version info
+import { NextResponse } from 'next/server';
+import { get_legal_docs_config } from '../../lib/legal/legal_docs_config.server.js';
+import { read_legal_doc } from '../../lib/legal/legal_docs_reader.server.js';
+import { get_required_versions } from '../../lib/legal/legal_docs_service.js';
+import { get_hazo_connect_instance } from '../../lib/hazo_connect_instance.server.js';
+import { create_app_logger } from '../../lib/app_logger.js';
+export async function legalDocsGET(_request) {
+    const logger = create_app_logger();
+    try {
+        const config = get_legal_docs_config();
+        if (config.docs.length === 0) {
+            return NextResponse.json({ ok: true, data: { display_mode: config.display_mode, docs: [] } });
+        }
+        const doc_results = config.docs.map((doc_config) => {
+            try {
+                const { content, hash } = read_legal_doc(doc_config.path);
+                return { ok: true, key: doc_config.key, title: doc_config.title, content, hash };
+            }
+            catch (err) {
+                logger.error('legal_docs_get: failed to read legal doc file', { err, key: doc_config.key, path: doc_config.path });
+                return { ok: false, key: doc_config.key, error: `File not found: ${doc_config.path}` };
+            }
+        });
+        const failed = doc_results.find(d => !d.ok);
+        if (failed) {
+            return NextResponse.json({ ok: false, error: `Legal doc "${failed.key}" could not be read. Check hazo_auth_config.ini path.` }, { status: 500 });
+        }
+        const adapter = get_hazo_connect_instance();
+        const keys = config.docs.map(d => d.key);
+        const required_versions = await get_required_versions(adapter, keys);
+        const docs = doc_results.map((d) => {
+            var _a, _b, _c, _d;
+            return ({
+                key: d.key,
+                title: d.title,
+                content: d.content,
+                hash: d.hash,
+                required_hash: (_b = (_a = required_versions[d.key]) === null || _a === void 0 ? void 0 : _a.required_hash) !== null && _b !== void 0 ? _b : null,
+                required_published_at: (_d = (_c = required_versions[d.key]) === null || _c === void 0 ? void 0 : _c.published_at) !== null && _d !== void 0 ? _d : null,
+            });
+        });
+        return NextResponse.json({ ok: true, data: { display_mode: config.display_mode, docs } });
+    }
+    catch (err) {
+        logger.error('legal_docs_get: internal server error', { err });
+        return NextResponse.json({ ok: false, error: 'Internal server error' }, { status: 500 });
+    }
+}

package/dist/server/routes/legal_docs_publish.d.ts

@@ -0,0 +1,3 @@
+import { NextRequest, NextResponse } from 'next/server';
+export declare function legalDocsPublishPOST(request: NextRequest): Promise<NextResponse>;
+//# sourceMappingURL=legal_docs_publish.d.ts.map

package/dist/server/routes/legal_docs_publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal_docs_publish.d.ts","sourceRoot":"","sources":["../../../src/server/routes/legal_docs_publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQxD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA+BtF"}

package/dist/server/routes/legal_docs_publish.js

@@ -0,0 +1,35 @@
+// file_description: POST /api/hazo_auth/legal_docs/publish — admin endpoint to publish a new required version of a legal doc
+import { NextResponse } from 'next/server';
+import { hazo_get_auth } from '../../lib/auth/hazo_get_auth.server.js';
+import { get_legal_docs_config } from '../../lib/legal/legal_docs_config.server.js';
+import { read_legal_doc } from '../../lib/legal/legal_docs_reader.server.js';
+import { publish_doc_version } from '../../lib/legal/legal_docs_service.js';
+import { get_hazo_connect_instance } from '../../lib/hazo_connect_instance.server.js';
+import { create_app_logger } from '../../lib/app_logger.js';
+export async function legalDocsPublishPOST(request) {
+    const logger = create_app_logger();
+    try {
+        const auth = await hazo_get_auth(request, { required_permissions: ['admin_user_management'] });
+        if (!auth.permission_ok) {
+            return NextResponse.json({ ok: false, error: 'Forbidden' }, { status: 403 });
+        }
+        const body = await request.json().catch(() => null);
+        const doc_key = body === null || body === void 0 ? void 0 : body.doc_key;
+        if (!doc_key || typeof doc_key !== 'string') {
+            return NextResponse.json({ ok: false, error: 'doc_key is required' }, { status: 400 });
+        }
+        const config = get_legal_docs_config();
+        const doc_config = config.docs.find(d => d.key === doc_key);
+        if (!doc_config) {
+            return NextResponse.json({ ok: false, error: `Unknown doc key: ${doc_key}` }, { status: 400 });
+        }
+        const { hash } = read_legal_doc(doc_config.path);
+        const adapter = get_hazo_connect_instance();
+        const { published_at } = await publish_doc_version(adapter, doc_key, hash, auth.user.id);
+        return NextResponse.json({ ok: true, data: { doc_key, required_hash: hash, published_at } });
+    }
+    catch (err) {
+        logger.error('legal_docs_publish: internal server error', { err });
+        return NextResponse.json({ ok: false, error: 'Internal server error' }, { status: 500 });
+    }
+}

package/dist/server/routes/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../src/server/routes/register.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;;;IAiG9C"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../src/server/routes/register.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAWxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;;;IAgI9C"}

package/dist/server/routes/register.js

@@ -6,12 +6,17 @@ import { create_app_logger } from "../../lib/app_logger.js";
 import { register_user } from "../../lib/services/registration_service.js";
 import { get_filename, get_line_number } from "../../lib/utils/api_route_helpers.js";
 import { sanitize_error_for_user } from "../../lib/utils/error_sanitizer.js";
+import { get_legal_docs_config } from "../../lib/legal/legal_docs_config.server.js";
+import { read_legal_doc } from "../../lib/legal/legal_docs_reader.server.js";
+import { get_client_ip } from "../../lib/auth/hazo_get_auth.server.js";
 // section: api_handler
 export async function POST(request) {
+    var _a;
     const logger = create_app_logger();
     try {
         const body = await request.json();
         const { name, email, password, url_on_logon } = body;
+        const legal_accepted = body === null || body === void 0 ? void 0 : body.legal_accepted;
         // Validate input
         if (!email || !password) {
             logger.warn("registration_validation_failed", {
@@ -32,6 +37,24 @@ export async function POST(request) {
             });
             return NextResponse.json({ error: "Invalid email address format" }, { status: 400 });
         }
+        // Validate legal acceptance if docs are configured
+        const legal_config = get_legal_docs_config();
+        if (legal_config.docs.length > 0) {
+            const missing_keys = legal_config.docs
+                .map(d => d.key)
+                .filter(key => !(legal_accepted === null || legal_accepted === void 0 ? void 0 : legal_accepted[key]));
+            if (missing_keys.length > 0) {
+                return NextResponse.json({ ok: false, error: 'legal_acceptance_required', missing_keys }, { status: 400 });
+            }
+            // Validate hashes match current file content
+            for (const doc_config of legal_config.docs) {
+                const submitted_hash = (_a = legal_accepted[doc_config.key]) === null || _a === void 0 ? void 0 : _a.hash;
+                const { hash: current_hash } = read_legal_doc(doc_config.path);
+                if (submitted_hash !== current_hash) {
+                    return NextResponse.json({ ok: false, error: `Hash mismatch for "${doc_config.key}"` }, { status: 400 });
+                }
+            }
+        }
         // Get singleton hazo_connect instance (reuses same connection across all routes)
         const hazoConnect = get_hazo_connect_instance();
         // Register user using the registration service
@@ -40,6 +63,9 @@ export async function POST(request) {
             password,
             name,
             url_on_logon,
+            legal_accepted,
+            ip: get_client_ip(request),
+            user_agent: request.headers.get('user-agent'),
         });
         if (!result.success) {
             const status_code = result.error === "Email address already registered" ? 409 : 500;

package/dist/server/routes/remove_profile_picture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove_profile_picture.d.ts","sourceRoot":"","sources":["../../../src/server/routes/remove_profile_picture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOxD,wBAAsB,MAAM,CAAC,OAAO,EAAE,WAAW;;;;;IAkGhD"}
+{"version":3,"file":"remove_profile_picture.d.ts","sourceRoot":"","sources":["../../../src/server/routes/remove_profile_picture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQxD,wBAAsB,MAAM,CAAC,OAAO,EAAE,WAAW;;;;;IAsGhD"}

package/dist/server/routes/remove_profile_picture.js

@@ -5,6 +5,7 @@ import { get_hazo_connect_instance } from "../../lib/hazo_connect_instance.serve
 import { create_app_logger } from "../../lib/app_logger.js";
 import { remove_user_profile_picture } from "../../lib/services/profile_picture_remove_service.js";
 import { get_filename, get_line_number } from "../../lib/utils/api_route_helpers.js";
+import { optional_import } from "hazo_core";
 // section: api_handler
 export async function DELETE(request) {
     const logger = create_app_logger();
@@ -36,7 +37,11 @@ export async function DELETE(request) {
                 return NextResponse.json({ error: "Relationship accounts not enabled" }, { status: 403 });
             }
             const hazoConnect_rel = get_hazo_connect_instance();
-            const { createCrudService } = await import("hazo_connect/server");
+            const hazo_connect_module = await optional_import("hazo_connect/server");
+            if (!hazo_connect_module) {
+                return NextResponse.json({ error: "hazo_connect not available" }, { status: 503 });
+            }
+            const { createCrudService } = hazo_connect_module;
             const rel_service = createCrudService(hazoConnect_rel, "hazo_user_relationships");
             const rels = await rel_service.findBy({ parent_user_id: user_id, child_user_id: target_user_id });
             if (!rels || rels.length === 0) {

package/dist/server/routes/upload_profile_picture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload_profile_picture.d.ts","sourceRoot":"","sources":["../../../src/server/routes/upload_profile_picture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAaxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;;;IAkR9C"}
+{"version":3,"file":"upload_profile_picture.d.ts","sourceRoot":"","sources":["../../../src/server/routes/upload_profile_picture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAcxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;;;IAsR9C"}

package/dist/server/routes/upload_profile_picture.js

@@ -9,6 +9,7 @@ import { update_user_profile_picture } from "../../lib/services/profile_picture_
 import { createCrudService } from "hazo_connect/server";
 import { map_db_source_to_ui } from "../../lib/services/profile_picture_source_mapper.js";
 import { get_filename, get_line_number } from "../../lib/utils/api_route_helpers.js";
+import { optional_import } from "hazo_core";
 import fs from "fs";
 import path from "path";
 // section: api_handler
@@ -42,7 +43,11 @@ export async function POST(request) {
                 return NextResponse.json({ error: "Relationship accounts not enabled" }, { status: 403 });
             }
             const hazoConnect = get_hazo_connect_instance();
-            const { createCrudService: createRelCrudService } = await import("hazo_connect/server");
+            const hazo_connect_module = await optional_import("hazo_connect/server");
+            if (!hazo_connect_module) {
+                return NextResponse.json({ error: "hazo_connect not available" }, { status: 503 });
+            }
+            const { createCrudService: createRelCrudService } = hazo_connect_module;
             const rel_service = createRelCrudService(hazoConnect, "hazo_user_relationships");
             const rels = await rel_service.findBy({ parent_user_id: user_id, child_user_id: target_user_id });
             if (!rels || rels.length === 0) {

package/dist/server/routes/user_management_users.d.ts

@@ -26,6 +26,7 @@ export declare function GET(request: NextRequest): Promise<NextResponse<{
         profile_source: {} | null;
         user_type: string | null;
         app_user_data: Record<string, unknown> | null;
+        legal_acceptance_status: "current" | "none" | "outdated";
     }[];
 }>>;
 /**
@@ -47,8 +48,7 @@ export declare function POST(request: NextRequest): Promise<NextResponse<{
 /**
  * DELETE - Hard-delete a user from hazo_users (cascades to all related rows).
  * Body: { user_id: string }
- * Requires: admin_user_management permission (enforced by UI, not here — same
- * pattern as PATCH/POST in this file which also don't re-auth).
+ * Requires: admin_user_management permission.
  */
 export declare function DELETE(request: NextRequest): Promise<NextResponse<{
     error: string;

package/dist/server/routes/user_management_users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user_management_users.d.ts","sourceRoot":"","sources":["../../../src/server/routes/user_management_users.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAexD,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAGvC;;;GAGG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;;;;IAyF7C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,WAAW;;;;IAgI/C;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;IA2E9C;AAED;;;;;GAKG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,WAAW;;;;IAuDhD"}
+{"version":3,"file":"user_management_users.d.ts","sourceRoot":"","sources":["../../../src/server/routes/user_management_users.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkBxD,eAAO,MAAM,OAAO,kBAAkB,CAAC;AA+BvC;;;GAGG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;;;;;IAsG7C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,WAAW;;;;IAgI/C;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;IA2E9C;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,WAAW;;;;IAmEhD"}

package/dist/server/routes/user_management_users.js

@@ -9,8 +9,35 @@ import { request_password_reset } from "../../lib/services/password_reset_servic
 import { get_auth_cache } from "../../lib/auth/auth_cache.js";
 import { get_auth_utility_config } from "../../lib/auth_utility_config.server.js";
 import { is_user_types_enabled, get_all_user_types, get_user_types_config, } from "../../lib/user_types_config.server.js";
+import { get_required_versions } from "../../lib/legal/legal_docs_service.js";
+import { get_legal_docs_config } from "../../lib/legal/legal_docs_config.server.js";
+import { hazo_get_auth } from "../../lib/auth/hazo_get_auth.server.js";
 // section: route_config
 export const dynamic = 'force-dynamic';
+// section: helpers
+/**
+ * Compute a user's legal compliance status given their raw legal_acceptance JSON,
+ * the currently-required hashes, and the configured doc keys.
+ */
+function compute_legal_status(raw, required, docs) {
+    if (docs.length === 0)
+        return 'none';
+    if (Object.keys(required).length === 0)
+        return 'none';
+    let map = {};
+    try {
+        map = typeof raw === 'string' ? JSON.parse(raw) : (raw !== null && raw !== void 0 ? raw : {});
+    }
+    catch ( /* ignore */_a) { /* ignore */ }
+    const all_current = docs.every(doc => {
+        var _a;
+        const req = required[doc.key];
+        if (!req)
+            return true;
+        return ((_a = map[doc.key]) === null || _a === void 0 ? void 0 : _a.hash) === req.required_hash;
+    });
+    return all_current ? 'current' : 'outdated';
+}
 // section: api_handler
 /**
  * GET - Fetch all users with details or a specific user by id
@@ -42,6 +69,13 @@ export async function GET(request) {
                 badge_color: t.badge_color,
             }))
             : [];
+        // Load legal docs required versions for compliance status
+        const legal_config = get_legal_docs_config();
+        let required_versions = {};
+        if (legal_config.docs.length > 0) {
+            const adapter = get_hazo_connect_instance();
+            required_versions = await get_required_versions(adapter, legal_config.docs.map(d => d.key));
+        }
         return NextResponse.json({
             success: true,
             user_types_enabled,
@@ -74,6 +108,7 @@ export async function GET(request) {
                     profile_source: user.profile_source || null,
                     user_type: user.user_type || null,
                     app_user_data,
+                    legal_acceptance_status: compute_legal_status(user.legal_acceptance, required_versions, legal_config.docs),
                 };
             }),
         }, { status: 200 });
@@ -244,14 +279,23 @@ export async function POST(request) {
 /**
  * DELETE - Hard-delete a user from hazo_users (cascades to all related rows).
  * Body: { user_id: string }
- * Requires: admin_user_management permission (enforced by UI, not here — same
- * pattern as PATCH/POST in this file which also don't re-auth).
+ * Requires: admin_user_management permission.
  */
 export async function DELETE(request) {
     const logger = create_app_logger();
     try {
+        const auth = await hazo_get_auth(request, { required_permissions: ['admin_user_management'] });
+        if (!auth.user) {
+            return NextResponse.json({ error: 'Authentication required' }, { status: 401 });
+        }
+        if (!auth.permission_ok) {
+            return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+        }
         const body = await request.json();
         const { user_id } = body;
+        if (auth.user.id === user_id) {
+            return NextResponse.json({ error: 'Cannot delete your own account' }, { status: 400 });
+        }
         if (!user_id) {
             return NextResponse.json({ error: "user_id is required" }, { status: 400 });
         }

package/dist/server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAK3C,eAAO,MAAM,iBAAiB,QAAO,WAcpC,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAM3C,eAAO,MAAM,iBAAiB,QAAO,WAoBpC,CAAC"}

package/dist/server/server.js

@@ -7,6 +7,7 @@ import cookie_parser from "cookie-parser";
 import compression from "compression";
 import { create_root_router } from "./routes/root_router.js";
 import { create_app_context } from "./config/config_loader.js";
+import { withContext, generateRequestId, REQUEST_ID_HEADER } from "hazo_core";
 // section: app_factory
 export const create_server_app = () => {
     const server_app = express();
@@ -15,6 +16,12 @@ export const create_server_app = () => {
     server_app.use(express.json({ limit: "1mb" }));
     server_app.use(express.urlencoded({ extended: true }));
     server_app.use(cookie_parser());
+    server_app.use((request, response, next) => {
+        var _a;
+        const correlationId = (_a = request.headers[REQUEST_ID_HEADER]) !== null && _a !== void 0 ? _a : generateRequestId();
+        response.setHeader(REQUEST_ID_HEADER, correlationId);
+        withContext({ correlationId }, () => next());
+    });
     server_app.use(compression());
     server_app.use((request, _response, next) => {
         request.context = create_app_context();