mulguard 1.1.6 → 1.1.7

package/dist/actions-CMtg7FGv.js

@@ -0,0 +1 @@
+"use strict";const l=require("next/headers");var t=(s=>(s.INVALID_CREDENTIALS="INVALID_CREDENTIALS",s.ACCOUNT_LOCKED="ACCOUNT_LOCKED",s.ACCOUNT_INACTIVE="ACCOUNT_INACTIVE",s.TWO_FA_REQUIRED="TWO_FA_REQUIRED",s.INVALID_TWO_FA_CODE="INVALID_TWO_FA_CODE",s.SESSION_EXPIRED="SESSION_EXPIRED",s.UNAUTHORIZED="UNAUTHORIZED",s.NETWORK_ERROR="NETWORK_ERROR",s.VALIDATION_ERROR="VALIDATION_ERROR",s.RATE_LIMITED="RATE_LIMITED",s.UNKNOWN_ERROR="UNKNOWN_ERROR",s))(t||{});const _={INVALID_CREDENTIALS:401,ACCOUNT_LOCKED:423,ACCOUNT_INACTIVE:403,TWO_FA_REQUIRED:428,INVALID_TWO_FA_CODE:401,SESSION_EXPIRED:401,UNAUTHORIZED:403,NETWORK_ERROR:502,VALIDATION_ERROR:400,RATE_LIMITED:429,UNKNOWN_ERROR:500};function d(s){return _[s]??500}async function I(s){var n;try{return(n=(await l.cookies()).get(s))==null?void 0:n.value}catch(e){const o=(e==null?void 0:e.message)||"";if(o.includes("cookies")||o.includes("request scope")||o.includes("outside")||o.includes("dynamic"))return;throw e}}async function a(s){try{return(await l.cookies()).set({name:s.name,value:s.value,maxAge:s.maxAge,expires:s.expires,httpOnly:s.httpOnly??!0,secure:s.secure,sameSite:s.sameSite??"lax",path:s.path??"/",domain:s.domain}),{success:!0}}catch(n){const e=(n==null?void 0:n.message)||"";if(e.includes("cookies")||e.includes("request scope")||e.includes("outside")||e.includes("dynamic")){const o=`Cannot set cookie "${s.name}" outside request scope. Make sure this is called from a Server Action or Route Handler.`;return process.env.NODE_ENV==="development"&&console.warn(`[Mulguard] ${o}`),{success:!1,error:e,warning:o}}throw n}}async function E(s,n){try{(await l.cookies()).set({name:s,value:"",maxAge:0,expires:new Date(0),httpOnly:!0,path:(n==null?void 0:n.path)??"/",domain:n==null?void 0:n.domain})}catch(e){const o=(e==null?void 0:e.message)||"";if(o.includes("cookies")||o.includes("request scope")||o.includes("outside")||o.includes("dynamic")){process.env.NODE_ENV==="development"&&console.warn(`[Mulguard] Cannot delete cookie "${s}" outside request scope`);return}throw e}}function u(s,n,e){const o=process.env.NODE_ENV==="production";return{name:s,value:n,maxAge:e.expiresIn,httpOnly:e.httpOnly??!0,secure:e.secure??o,sameSite:e.sameSite??"lax",path:e.path??"/"}}async function N(s,n){if(!s.verify2FA)return{success:!1,error:"2FA verification is not configured",errorCode:t.VALIDATION_ERROR};try{const e=await s.verify2FA(n,{skipCookieSave:!0});if(e.success&&e.session)try{const{cookieName:o,config:r}=s._getSessionConfig(),c=typeof e.session=="object"&&"token"in e.session?String(e.session.token):JSON.stringify(e.session),i=u(o,c,r),O=await a(i);!O.success&&process.env.NODE_ENV==="development"&&console.warn("[Mulguard] Failed to save session after 2FA verification:",O.error||O.warning)}catch(o){process.env.NODE_ENV==="development"&&console.warn("[Mulguard] Failed to save session cookie:",o)}return e}catch(e){return{success:!1,error:e instanceof Error?e.message:"2FA verification failed",errorCode:t.UNKNOWN_ERROR}}}async function R(s){var n;try{const e=await s.getSession(),o=e==null?void 0:e.user;s.signOut&&await s.signOut();const{cookieName:r,config:c}=s._getSessionConfig();await E(r,{path:c.path||"/"});const i=(n=s._getCallbacks)==null?void 0:n.call(s);return o&&(i!=null&&i.onSignOut)&&await i.onSignOut(o),{success:!0}}catch(e){return{success:!1,error:e instanceof Error?e.message:"Sign out failed"}}}async function g(s,n){if(!s.signIn.email)return{success:!1,error:"Email sign in is not configured",errorCode:t.VALIDATION_ERROR};try{const e=await s.signIn.email(n);if(e.success&&e.session)try{const{cookieName:o,config:r}=s._getSessionConfig(),c=typeof e.session=="object"&&"token"in e.session?String(e.session.token):JSON.stringify(e.session),i=u(o,c,r);await a(i)}catch(o){process.env.NODE_ENV==="development"&&console.warn("[Mulguard] Failed to save session cookie:",o)}return e}catch(e){return{success:!1,error:e instanceof Error?e.message:"Sign in failed",errorCode:t.UNKNOWN_ERROR}}}async function f(s,n){if(!s.signUp)return{success:!1,error:"Sign up is not configured",errorCode:t.VALIDATION_ERROR};try{const e=await s.signUp(n);if(e.success&&e.session)try{const{cookieName:o,config:r}=s._getSessionConfig(),c=typeof e.session=="object"&&"token"in e.session?String(e.session.token):JSON.stringify(e.session),i=u(o,c,r);await a(i)}catch(o){process.env.NODE_ENV==="development"&&console.warn("[Mulguard] Failed to save session cookie:",o)}return e}catch(e){return{success:!1,error:e instanceof Error?e.message:"Sign up failed",errorCode:t.UNKNOWN_ERROR}}}const A=Object.freeze(Object.defineProperty({__proto__:null,signInEmailAction:g,signOutAction:R,signUpAction:f,verify2FAAction:N},Symbol.toStringTag,{value:"Module"}));exports.AuthErrorCode=t;exports.actions=A;exports.buildCookieOptions=u;exports.deleteCookie=E;exports.getCookie=I;exports.getErrorStatusCode=d;exports.setCookie=a;exports.signInEmailAction=g;exports.signOutAction=R;exports.signUpAction=f;exports.verify2FAAction=N;

package/dist/{actions-DeCfLtHA.mjs → actions-CjQUKaXF.mjs}

@@ -1,6 +1,22 @@
 import { cookies as u } from "next/headers";
 var c = /* @__PURE__ */ ((s) => (s.INVALID_CREDENTIALS = "INVALID_CREDENTIALS", s.ACCOUNT_LOCKED = "ACCOUNT_LOCKED", s.ACCOUNT_INACTIVE = "ACCOUNT_INACTIVE", s.TWO_FA_REQUIRED = "TWO_FA_REQUIRED", s.INVALID_TWO_FA_CODE = "INVALID_TWO_FA_CODE", s.SESSION_EXPIRED = "SESSION_EXPIRED", s.UNAUTHORIZED = "UNAUTHORIZED", s.NETWORK_ERROR = "NETWORK_ERROR", s.VALIDATION_ERROR = "VALIDATION_ERROR", s.RATE_LIMITED = "RATE_LIMITED", s.UNKNOWN_ERROR = "UNKNOWN_ERROR", s))(c || {});
-async function _(s) {
+const E = {
+  INVALID_CREDENTIALS: 401,
+  ACCOUNT_LOCKED: 423,
+  ACCOUNT_INACTIVE: 403,
+  TWO_FA_REQUIRED: 428,
+  INVALID_TWO_FA_CODE: 401,
+  SESSION_EXPIRED: 401,
+  UNAUTHORIZED: 403,
+  NETWORK_ERROR: 502,
+  VALIDATION_ERROR: 400,
+  RATE_LIMITED: 429,
+  UNKNOWN_ERROR: 500
+};
+function I(s) {
+  return E[s] ?? 500;
+}
+async function A(s) {
   var o;
   try {
     return (o = (await u()).get(s)) == null ? void 0 : o.value;
@@ -11,7 +27,7 @@ async function _(s) {
     throw e;
   }
 }
-async function l(s) {
+async function O(s) {
   try {
     return (await u()).set({
       name: s.name,
@@ -37,7 +53,7 @@ async function l(s) {
     throw o;
   }
 }
-async function O(s, o) {
+async function N(s, o) {
   try {
     (await u()).set({
       name: s,
@@ -57,7 +73,7 @@ async function O(s, o) {
     throw e;
   }
 }
-function f(s, o, e) {
+function l(s, o, e) {
   const n = process.env.NODE_ENV === "production";
   return {
     name: s,
@@ -69,7 +85,7 @@ function f(s, o, e) {
     path: e.path ?? "/"
   };
 }
-async function g(s, o) {
+async function R(s, o) {
   if (!s.verify2FA)
     return {
       success: !1,
@@ -80,8 +96,8 @@ async function g(s, o) {
     const e = await s.verify2FA(o, { skipCookieSave: !0 });
     if (e.success && e.session)
       try {
-        const { cookieName: n, config: r } = s._getSessionConfig(), t = typeof e.session == "object" && "token" in e.session ? String(e.session.token) : JSON.stringify(e.session), i = f(n, t, r), a = await l(i);
-        a.success || process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session after 2FA verification:", a.error || a.warning);
+        const { cookieName: n, config: r } = s._getSessionConfig(), t = typeof e.session == "object" && "token" in e.session ? String(e.session.token) : JSON.stringify(e.session), i = l(n, t, r), a = await O(i);
+        !a.success && process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session after 2FA verification:", a.error || a.warning);
       } catch (n) {
         process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session cookie:", n);
       }
@@ -94,13 +110,13 @@ async function g(s, o) {
     };
   }
 }
-async function N(s) {
+async function f(s) {
   var o;
   try {
     const e = await s.getSession(), n = e == null ? void 0 : e.user;
     s.signOut && await s.signOut();
     const { cookieName: r, config: t } = s._getSessionConfig();
-    await O(r, {
+    await N(r, {
       path: t.path || "/"
     });
     const i = (o = s._getCallbacks) == null ? void 0 : o.call(s);
@@ -112,33 +128,32 @@ async function N(s) {
     };
   }
 }
-async function d(s, o) {
-  var e;
-  if (!((e = s.signIn) != null && e.email))
+async function g(s, o) {
+  if (!s.signIn.email)
     return {
       success: !1,
       error: "Email sign in is not configured",
       errorCode: c.VALIDATION_ERROR
     };
   try {
-    const n = await s.signIn.email(o);
-    if (n.success && n.session)
+    const e = await s.signIn.email(o);
+    if (e.success && e.session)
       try {
-        const { cookieName: r, config: t } = s._getSessionConfig(), i = typeof n.session == "object" && "token" in n.session ? String(n.session.token) : JSON.stringify(n.session), a = f(r, i, t);
-        await l(a);
-      } catch (r) {
-        process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session cookie:", r);
+        const { cookieName: n, config: r } = s._getSessionConfig(), t = typeof e.session == "object" && "token" in e.session ? String(e.session.token) : JSON.stringify(e.session), i = l(n, t, r);
+        await O(i);
+      } catch (n) {
+        process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session cookie:", n);
       }
-    return n;
-  } catch (n) {
+    return e;
+  } catch (e) {
     return {
       success: !1,
-      error: n instanceof Error ? n.message : "Sign in failed",
+      error: e instanceof Error ? e.message : "Sign in failed",
       errorCode: c.UNKNOWN_ERROR
     };
   }
 }
-async function E(s, o) {
+async function _(s, o) {
   if (!s.signUp)
     return {
       success: !1,
@@ -149,8 +164,8 @@ async function E(s, o) {
     const e = await s.signUp(o);
     if (e.success && e.session)
       try {
-        const { cookieName: n, config: r } = s._getSessionConfig(), t = typeof e.session == "object" && "token" in e.session ? String(e.session.token) : JSON.stringify(e.session), i = f(n, t, r);
-        await l(i);
+        const { cookieName: n, config: r } = s._getSessionConfig(), t = typeof e.session == "object" && "token" in e.session ? String(e.session.token) : JSON.stringify(e.session), i = l(n, t, r);
+        await O(i);
       } catch (n) {
         process.env.NODE_ENV === "development" && console.warn("[Mulguard] Failed to save session cookie:", n);
       }
@@ -163,22 +178,23 @@ async function E(s, o) {
     };
   }
 }
-const m = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const S = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  signInEmailAction: d,
-  signOutAction: N,
-  signUpAction: E,
-  verify2FAAction: g
+  signInEmailAction: g,
+  signOutAction: f,
+  signUpAction: _,
+  verify2FAAction: R
 }, Symbol.toStringTag, { value: "Module" }));
 export {
   c as A,
-  d as a,
-  E as b,
-  l as c,
-  O as d,
-  f as e,
-  m as f,
-  _ as g,
-  N as s,
-  g as v
+  g as a,
+  _ as b,
+  O as c,
+  N as d,
+  l as e,
+  I as f,
+  A as g,
+  S as h,
+  f as s,
+  R as v
 };

package/dist/client/index.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("react"),O=require("react/jsx-runtime");function v(){return typeof window>"u"}async function h(){try{return await Promise.resolve().then(()=>require("../actions-CExpv_dD.js")).then(l=>l.actions)}catch{return null}}async function N(e,l){if(v())return e.verify2FA?e.verify2FA(l):{success:!1,error:"2FA verification is not configured"};try{const r=await h();if(r)return await r.verify2FAAction(e,l)}catch{}try{const r=await fetch("/api/auth/verify-2fa",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify(l)});if(!r.ok){const a=await r.json().catch(()=>({}));return{success:!1,error:a.error||"2FA verification failed",errorCode:a.errorCode}}return await r.json()}catch(r){return{success:!1,error:r instanceof Error?r.message:"2FA verification failed"}}}async function _(e,l){var r;if(v())return(r=e.signIn)!=null&&r.email?e.signIn.email(l):{success:!1,error:"Email sign in is not configured"};try{const a=await h();if(a)return await a.signInEmailAction(e,l)}catch{}try{const a=await fetch("/api/auth/sign-in",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({provider:"email",credentials:l})});if(!a.ok){const u=await a.json().catch(()=>({}));return{success:!1,error:u.error||"Sign in failed",errorCode:u.errorCode}}return await a.json()}catch(a){return{success:!1,error:a instanceof Error?a.message:"Sign in failed"}}}async function D(e,l){if(v())return e.signUp?e.signUp(l):{success:!1,error:"Sign up is not configured"};try{const r=await h();if(r)return await r.signUpAction(e,l)}catch{}try{const r=await fetch("/api/auth/sign-up",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify(l)});if(!r.ok){const a=await r.json().catch(()=>({}));return{success:!1,error:a.error||"Sign up failed",errorCode:a.errorCode}}return await r.json()}catch(r){return{success:!1,error:r instanceof Error?r.message:"Sign up failed"}}}function E(e){const[l,r]=o.useState(null),[a,u]=o.useState(!0),c=o.useCallback(async(s=!1)=>{u(!0);try{const n="/api/auth/session"+(s?`?t=${Date.now()}`:""),i=await fetch(n,{method:"GET",credentials:"include",headers:{"Content-Type":"application/json","Cache-Control":"no-cache, no-store, must-revalidate",Pragma:"no-cache",Expires:"0"},cache:"no-store"});if(i.status===401||i.status===403){r(null);return}if(i.ok){const t=await i.json();t.session?r(t.session):r(null)}else r(null)}catch(n){process.env.NODE_ENV==="development"&&console.error("Failed to load session:",n),r(null)}finally{u(!1)}},[e]),g=o.useCallback(s=>{if(!s||!s.expiresAt||!e.refreshSession)return()=>{};const n=new Date(s.expiresAt),i=new Date,t=n.getTime()-i.getTime(),f=5*60*1e3;if(t>0&&t<f)return e.refreshSession().catch(()=>{}),()=>{};if(t>f){const p=t-f,S=setTimeout(()=>{var C;(C=e.refreshSession)==null||C.call(e).catch(()=>{})},p);return()=>clearTimeout(S)}return()=>{}},[e]);o.useEffect(()=>{let s=null;(async()=>{await c();try{const t=await fetch("/api/auth/session",{method:"GET",credentials:"include",headers:{"Content-Type":"application/json"},cache:"no-store"});if(t.ok){const f=await t.json();f.session?s=g(f.session):r(null)}else r(null)}catch(t){process.env.NODE_ENV==="development"&&console.debug("Failed to schedule proactive refresh:",t),r(null)}})();const i=setInterval(()=>{fetch("/api/auth/session",{method:"GET",credentials:"include",headers:{"Content-Type":"application/json"},cache:"no-store"}).then(t=>t.status===401||t.status===403?(r(null),s&&(s(),s=null),typeof window<"u"&&window.location.pathname!=="/auth/login"&&window.location.replace("/auth/login?reason=session_expired"),null):t.json()).then(t=>{t&&(t.session?(r(t.session),s&&s(),s=g(t.session)):(r(null),s&&(s(),s=null)))}).catch(()=>{r(null),s&&(s(),s=null)})},60*1e3);return()=>{clearInterval(i),s&&s()}},[c,g]);const y=o.useCallback(async s=>{try{const n=await _(e,s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"Sign in failed"}}},[e,c]),w=o.useCallback(async s=>{if(!e.signIn.oauth)throw new Error("OAuth sign in is not configured");return e.signIn.oauth(s)},[e]),d=o.useCallback(async s=>{if(!e.signIn.passkey)return{success:!1,error:"PassKey sign in is not configured"};try{const n=await e.signIn.passkey(s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"PassKey authentication failed"}}},[e,c]),m=o.useCallback(async s=>{if(!e.signUp)return{success:!1,error:"Sign up is not configured"};try{const n=await D(e,s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"Sign up failed"}}},[e,c]),U=o.useCallback(async()=>{var s,n;try{if(r(null),u(!0),typeof window<"u"){try{window.sessionStorage.clear()}catch{}try{const i=(s=e._getSessionConfig)==null?void 0:s.call(e),t=(i==null?void 0:i.cookieName)||"__mulguard_session";try{window.localStorage.removeItem(t)}catch{}}catch{}}if(await e.signOut(),await c(!0),r(null),u(!1),typeof window<"u"){const i="/auth/login",t=window.location.pathname,f=window.location.search;if(t===i||t.startsWith("/auth/")){window.location.reload();return}const p=new URL(i,window.location.origin);t&&t!=="/"&&p.searchParams.set("redirect",t+f),window.location.replace(p.toString())}}catch(i){if(process.env.NODE_ENV==="development"&&console.error("Sign out error:",i),r(null),u(!1),typeof window<"u"){try{window.sessionStorage.clear();const f=(n=e._getSessionConfig)==null?void 0:n.call(e),p=(f==null?void 0:f.cookieName)||"__mulguard_session";try{window.localStorage.removeItem(p)}catch{}}catch{}const t="/auth/login";window.location.pathname!==t&&!window.location.pathname.startsWith("/auth/")?window.location.replace(t):window.location.reload()}}},[e,c]),T=o.useCallback(async s=>{if(!e.resetPassword)throw new Error("Password reset is not configured");return e.resetPassword(s)},[e]),F=o.useCallback(async s=>{if(!e.verifyEmail)throw new Error("Email verification is not configured");return e.verifyEmail(s)},[e]),x=o.useCallback(async s=>{if(!e.verify2FA)return{success:!1,error:"2FA verification is not configured"};try{const n=await N(e,s);return n.success&&(await new Promise(i=>setTimeout(i,100)),await c()),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"2FA verification failed"}}},[e,c]),j=o.useCallback(async(s,n)=>e.signIn(s,n),[e]);return{session:l,isLoading:a,signIn:j,signInMethods:{email:y,oauth:w,passkey:d,otp:o.useCallback(async(s,n)=>{if(!e.signIn.otp)return{success:!1,error:"OTP sign in is not configured"};try{const i=await e.signIn.otp(s,n);return i.success&&await c(),i}catch(i){return{success:!1,error:i instanceof Error?i.message:"OTP sign in failed"}}},[e,c])},signUp:m,signOut:U,resetPassword:T,verifyEmail:F,verify2FA:x}}function A(e){const[l,r]=o.useState(null),[a,u]=o.useState(!0),[c,g]=o.useState(null),y=o.useCallback(async()=>{u(!0),g(null);try{const w=await e.getSession();r(w)}catch(w){const d=w instanceof Error?w:new Error("Failed to load session");g(d),r(null)}finally{u(!1)}},[e]);return o.useEffect(()=>{y();const w=setInterval(()=>{y()},5*60*1e3);return()=>clearInterval(w)},[y]),{session:l,isLoading:a,error:c}}function P(e){const[l,r]=o.useState([]),[a,u]=o.useState(!0),c=o.useCallback(async()=>{if(!e.accountPicker){r([]),u(!1);return}u(!0);try{const d=await e.accountPicker.getLastUsers();r(d)}catch(d){process.env.NODE_ENV==="development"&&console.error("Failed to load last users:",d),r([])}finally{u(!1)}},[e]);o.useEffect(()=>{c()},[c]);const g=o.useCallback(async(d,m)=>{e.accountPicker&&(await e.accountPicker.rememberUser(d,m),await c())},[e,c]),y=o.useCallback(async d=>{e.accountPicker&&(await e.accountPicker.clearUser(d),await c())},[e,c]),w=o.useCallback(async()=>{e.accountPicker&&(await e.accountPicker.clearAll(),await c())},[e,c]);return{lastUsers:l,isLoading:a,rememberUser:g,clearUser:y,clearAll:w,refresh:c}}const b=o.createContext(null);function I({auth:e,children:l}){const r=A(e),a=P(e);return O.jsx(b.Provider,{value:{auth:e,session:r,accountPicker:a},children:l})}function k(){const e=o.useContext(b);if(!e)throw new Error("useMulguardContext must be used within MulguardProvider");return e}function L(){const{auth:e}=k();return E(e)}const M=I,R=k;exports.AuthProvider=M;exports.MulguardProvider=I;exports.useAccountPicker=P;exports.useAuth=E;exports.useAuthContext=R;exports.useAuthFromContext=L;exports.useMulguardContext=k;exports.useSession=A;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("react"),N=require("react/jsx-runtime");function v(){return typeof window>"u"}async function h(){try{return await Promise.resolve().then(()=>require("../actions-CMtg7FGv.js")).then(l=>l.actions)}catch{return null}}async function _(e,l){if(v())return e.verify2FA?e.verify2FA(l):{success:!1,error:"2FA verification is not configured"};try{const r=await h();if(r)return await r.verify2FAAction(e,l)}catch{}try{const r=await fetch("/api/auth/verify-2fa",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify(l)});if(!r.ok){const a=await r.json().catch(()=>({}));return{success:!1,error:a.error||"2FA verification failed",errorCode:a.errorCode}}return await r.json()}catch(r){return{success:!1,error:r instanceof Error?r.message:"2FA verification failed"}}}async function D(e,l){var r;if(v())return(r=e.signIn)!=null&&r.email?e.signIn.email(l):{success:!1,error:"Email sign in is not configured"};try{const a=await h();if(a)return await a.signInEmailAction(e,l)}catch{}try{const a=await fetch("/api/auth/sign-in",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({provider:"email",credentials:l})});if(!a.ok){const u=await a.json().catch(()=>({}));return{success:!1,error:u.error||"Sign in failed",errorCode:u.errorCode}}return await a.json()}catch(a){return{success:!1,error:a instanceof Error?a.message:"Sign in failed"}}}async function L(e,l){if(v())return e.signUp?e.signUp(l):{success:!1,error:"Sign up is not configured"};try{const r=await h();if(r)return await r.signUpAction(e,l)}catch{}try{const r=await fetch("/api/auth/sign-up",{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify(l)});if(!r.ok){const a=await r.json().catch(()=>({}));return{success:!1,error:a.error||"Sign up failed",errorCode:a.errorCode}}return await r.json()}catch(r){return{success:!1,error:r instanceof Error?r.message:"Sign up failed"}}}function E(e){const[l,r]=o.useState(null),[a,u]=o.useState(!0),c=o.useCallback(async(s=!1)=>{u(!0);try{const n="/api/auth/session"+(s?`?t=${Date.now()}`:""),i=await fetch(n,{method:"GET",credentials:"include",headers:{"Content-Type":"application/json","Cache-Control":"no-cache, no-store, must-revalidate",Pragma:"no-cache",Expires:"0"},cache:"no-store"});if(i.status===401||i.status===403){r(null);return}if(i.ok){const t=await i.json();t.session?r(t.session):r(null)}else r(null)}catch(n){process.env.NODE_ENV==="development"&&console.error("Failed to load session:",n),r(null)}finally{u(!1)}},[e]),w=o.useCallback(s=>{if(!s||!s.expiresAt||!e.refreshSession)return()=>{};const n=new Date(s.expiresAt),i=new Date,t=n.getTime()-i.getTime(),f=5*60*1e3;if(t>0&&t<f)return e.refreshSession().catch(()=>{}),()=>{};if(t>f){const p=t-f,S=setTimeout(()=>{var C;(C=e.refreshSession)==null||C.call(e).catch(()=>{})},p);return()=>clearTimeout(S)}return()=>{}},[e]);o.useEffect(()=>{let s=null;(async()=>{await c();try{const t=await fetch("/api/auth/session",{method:"GET",credentials:"include",headers:{"Content-Type":"application/json"},cache:"no-store"});if(t.ok){const f=await t.json();f.session?s=w(f.session):r(null)}else r(null)}catch(t){process.env.NODE_ENV==="development"&&console.debug("Failed to schedule proactive refresh:",t),r(null)}})();const i=setInterval(()=>{fetch("/api/auth/session",{method:"GET",credentials:"include",headers:{"Content-Type":"application/json"},cache:"no-store"}).then(t=>t.status===401||t.status===403?(r(null),s&&(s(),s=null),typeof window<"u"&&window.location.pathname!=="/auth/login"&&window.location.replace("/auth/login?reason=session_expired"),null):t.json()).then(t=>{t&&(t.session?(r(t.session),s&&s(),s=w(t.session)):(r(null),s&&(s(),s=null)))}).catch(()=>{r(null),s&&(s(),s=null)})},60*1e3);return()=>{clearInterval(i),s&&s()}},[c,w]);const y=o.useCallback(async s=>{try{const n=await D(e,s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"Sign in failed"}}},[e,c]),g=o.useCallback(async s=>{if(!e.signIn.oauth)throw new Error("OAuth sign in is not configured");return e.signIn.oauth(s)},[e]),d=o.useCallback(async s=>{if(!e.signIn.passkey)return{success:!1,error:"PassKey sign in is not configured"};try{const n=await e.signIn.passkey(s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"PassKey authentication failed"}}},[e,c]),m=o.useCallback(async s=>{if(!e.signUp)return{success:!1,error:"Sign up is not configured"};try{const n=await L(e,s);return n.success&&await c(),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"Sign up failed"}}},[e,c]),U=o.useCallback(async()=>{var s,n;try{if(r(null),u(!0),typeof window<"u"){try{window.sessionStorage.clear()}catch{}try{const i=(s=e._getSessionConfig)==null?void 0:s.call(e),t=(i==null?void 0:i.cookieName)||"__mulguard_session";try{window.localStorage.removeItem(t)}catch{}}catch{}}if(await e.signOut(),await c(!0),r(null),u(!1),typeof window<"u"){const i="/auth/login",t=window.location.pathname,f=window.location.search;if(t===i||t.startsWith("/auth/")){window.location.reload();return}const p=new URL(i,window.location.origin);t&&t!=="/"&&p.searchParams.set("redirect",t+f),window.location.replace(p.toString())}}catch(i){if(process.env.NODE_ENV==="development"&&console.error("Sign out error:",i),r(null),u(!1),typeof window<"u"){try{window.sessionStorage.clear();const f=(n=e._getSessionConfig)==null?void 0:n.call(e),p=(f==null?void 0:f.cookieName)||"__mulguard_session";try{window.localStorage.removeItem(p)}catch{}}catch{}const t="/auth/login";window.location.pathname!==t&&!window.location.pathname.startsWith("/auth/")?window.location.replace(t):window.location.reload()}}},[e,c]),T=o.useCallback(async s=>{if(!e.resetPassword)throw new Error("Password reset is not configured");return e.resetPassword(s)},[e]),F=o.useCallback(async s=>{if(!e.verifyEmail)throw new Error("Email verification is not configured");return e.verifyEmail(s)},[e]),x=o.useCallback(async s=>{if(!e.verify2FA)return{success:!1,error:"2FA verification is not configured"};try{const n=await _(e,s);return n.success&&(await new Promise(i=>setTimeout(i,100)),await c()),n}catch(n){return{success:!1,error:n instanceof Error?n.message:"2FA verification failed"}}},[e,c]),j=o.useCallback(async(s,n)=>s==="credentials"?!n||!("email"in n)||!("password"in n)?{success:!1,error:"Credentials are required"}:e.signIn("credentials",n):s==="otp"?!n||!("email"in n)?{success:!1,error:"Email is required"}:e.signIn("otp",n):s==="passkey"?e.signIn("passkey",n):e.signIn(s),[e]);return{session:l,isLoading:a,signIn:j,signInMethods:{email:y,oauth:g,passkey:d,otp:o.useCallback(async(s,n)=>{if(!e.signIn.otp)return{success:!1,error:"OTP sign in is not configured"};try{const i=await e.signIn.otp(s,n);return i.success&&await c(),i}catch(i){return{success:!1,error:i instanceof Error?i.message:"OTP sign in failed"}}},[e,c])},signUp:m,signOut:U,resetPassword:T,verifyEmail:F,verify2FA:x}}function A(e){const[l,r]=o.useState(null),[a,u]=o.useState(!0),[c,w]=o.useState(null),y=o.useCallback(async()=>{u(!0),w(null);try{const g=await e.getSession();r(g)}catch(g){const d=g instanceof Error?g:new Error("Failed to load session");w(d),r(null)}finally{u(!1)}},[e]);return o.useEffect(()=>{y();const g=setInterval(()=>{y()},5*60*1e3);return()=>clearInterval(g)},[y]),{session:l,isLoading:a,error:c}}function P(e){const[l,r]=o.useState([]),[a,u]=o.useState(!0),c=o.useCallback(async()=>{if(!e.accountPicker){r([]),u(!1);return}u(!0);try{const d=await e.accountPicker.getLastUsers();r(d)}catch(d){process.env.NODE_ENV==="development"&&console.error("Failed to load last users:",d),r([])}finally{u(!1)}},[e]);o.useEffect(()=>{c()},[c]);const w=o.useCallback(async(d,m)=>{e.accountPicker&&(await e.accountPicker.rememberUser(d,m),await c())},[e,c]),y=o.useCallback(async d=>{e.accountPicker&&(await e.accountPicker.clearUser(d),await c())},[e,c]),g=o.useCallback(async()=>{e.accountPicker&&(await e.accountPicker.clearAll(),await c())},[e,c]);return{lastUsers:l,isLoading:a,rememberUser:w,clearUser:y,clearAll:g,refresh:c}}const I=o.createContext(null);function b({auth:e,children:l}){const r=A(e),a=P(e);return N.jsx(I.Provider,{value:{auth:e,session:r,accountPicker:a},children:l})}function k(){const e=o.useContext(I);if(!e)throw new Error("useMulguardContext must be used within MulguardProvider");return e}function M(){const{auth:e}=k();return E(e)}const q=b,R=k;exports.AuthProvider=q;exports.MulguardProvider=b;exports.useAccountPicker=P;exports.useAuth=E;exports.useAuthContext=R;exports.useAuthFromContext=M;exports.useMulguardContext=k;exports.useSession=A;

package/dist/client/index.mjs

@@ -1,16 +1,16 @@
-import { useState as y, useCallback as l, useEffect as h, createContext as x, useContext as O } from "react";
-import { jsx as N } from "react/jsx-runtime";
+import { useState as p, useCallback as l, useEffect as h, createContext as x, useContext as N } from "react";
+import { jsx as _ } from "react/jsx-runtime";
 function E() {
   return typeof window > "u";
 }
 async function S() {
   try {
-    return await import("../actions-DeCfLtHA.mjs").then((a) => a.f);
+    return await import("../actions-CjQUKaXF.mjs").then((a) => a.h);
   } catch {
     return null;
   }
 }
-async function _(e, a) {
+async function b(e, a) {
   if (E())
     return e.verify2FA ? e.verify2FA(a) : {
       success: !1,
@@ -47,7 +47,7 @@ async function _(e, a) {
     };
   }
 }
-async function b(e, a) {
+async function D(e, a) {
   var r;
   if (E())
     return (r = e.signIn) != null && r.email ? e.signIn.email(a) : {
@@ -85,7 +85,7 @@ async function b(e, a) {
     };
   }
 }
-async function D(e, a) {
+async function L(e, a) {
   if (E())
     return e.signUp ? e.signUp(a) : {
       success: !1,
@@ -122,11 +122,11 @@ async function D(e, a) {
     };
   }
 }
-function L(e) {
-  const [a, r] = y(null), [c, f] = y(!0), i = l(async (n = !1) => {
+function M(e) {
+  const [a, r] = p(null), [c, f] = p(!0), t = l(async (n = !1) => {
     f(!0);
     try {
-      const s = "/api/auth/session" + (n ? `?t=${Date.now()}` : ""), t = await fetch(s, {
+      const s = "/api/auth/session" + (n ? `?t=${Date.now()}` : ""), i = await fetch(s, {
         method: "GET",
         credentials: "include",
         // Include cookies in request
@@ -140,12 +140,12 @@ function L(e) {
         cache: "no-store"
         // ✅ FIX: Prevent caching
       });
-      if (t.status === 401 || t.status === 403) {
+      if (i.status === 401 || i.status === 403) {
         r(null);
         return;
       }
-      if (t.ok) {
-        const o = await t.json();
+      if (i.ok) {
+        const o = await i.json();
         o.session ? r(o.session) : r(null);
       } else
         r(null);
@@ -158,15 +158,15 @@ function L(e) {
     if (!n || !n.expiresAt || !e.refreshSession)
       return () => {
       };
-    const s = new Date(n.expiresAt), t = /* @__PURE__ */ new Date(), o = s.getTime() - t.getTime(), u = 5 * 60 * 1e3;
+    const s = new Date(n.expiresAt), i = /* @__PURE__ */ new Date(), o = s.getTime() - i.getTime(), u = 5 * 60 * 1e3;
     if (o > 0 && o < u)
       return e.refreshSession().catch(() => {
       }), () => {
       };
     if (o > u) {
       const m = o - u, A = setTimeout(() => {
-        var P;
-        (P = e.refreshSession) == null || P.call(e).catch(() => {
+        var I;
+        (I = e.refreshSession) == null || I.call(e).catch(() => {
         });
       }, m);
       return () => clearTimeout(A);
@@ -177,7 +177,7 @@ function L(e) {
   h(() => {
     let n = null;
     (async () => {
-      await i();
+      await t();
       try {
         const o = await fetch("/api/auth/session", {
           method: "GET",
@@ -197,7 +197,7 @@ function L(e) {
         process.env.NODE_ENV === "development" && console.debug("Failed to schedule proactive refresh:", o), r(null);
       }
     })();
-    const t = setInterval(() => {
+    const i = setInterval(() => {
       fetch("/api/auth/session", {
         method: "GET",
         credentials: "include",
@@ -213,14 +213,14 @@ function L(e) {
       });
     }, 60 * 1e3);
     return () => {
-      clearInterval(t), n && n();
+      clearInterval(i), n && n();
     };
-  }, [i, g]);
-  const p = l(
+  }, [t, g]);
+  const y = l(
     async (n) => {
       try {
-        const s = await b(e, n);
-        return s.success && await i(), s;
+        const s = await D(e, n);
+        return s.success && await t(), s;
       } catch (s) {
         return {
           success: !1,
@@ -228,7 +228,7 @@ function L(e) {
         };
       }
     },
-    [e, i]
+    [e, t]
   ), w = l(
     async (n) => {
       if (!e.signIn.oauth)
@@ -245,7 +245,7 @@ function L(e) {
         };
       try {
         const s = await e.signIn.passkey(n);
-        return s.success && await i(), s;
+        return s.success && await t(), s;
       } catch (s) {
         return {
           success: !1,
@@ -253,7 +253,7 @@ function L(e) {
         };
       }
     },
-    [e, i]
+    [e, t]
   ), v = l(
     async (n) => {
       if (!e.signUp)
@@ -262,8 +262,8 @@ function L(e) {
           error: "Sign up is not configured"
         };
       try {
-        const s = await D(e, n);
-        return s.success && await i(), s;
+        const s = await L(e, n);
+        return s.success && await t(), s;
       } catch (s) {
         return {
           success: !1,
@@ -271,7 +271,7 @@ function L(e) {
         };
       }
     },
-    [e, i]
+    [e, t]
   ), C = l(async () => {
     var n, s;
     try {
@@ -281,7 +281,7 @@ function L(e) {
         } catch {
         }
         try {
-          const t = (n = e._getSessionConfig) == null ? void 0 : n.call(e), o = (t == null ? void 0 : t.cookieName) || "__mulguard_session";
+          const i = (n = e._getSessionConfig) == null ? void 0 : n.call(e), o = (i == null ? void 0 : i.cookieName) || "__mulguard_session";
           try {
             window.localStorage.removeItem(o);
           } catch {
@@ -289,17 +289,17 @@ function L(e) {
         } catch {
         }
       }
-      if (await e.signOut(), await i(!0), r(null), f(!1), typeof window < "u") {
-        const t = "/auth/login", o = window.location.pathname, u = window.location.search;
-        if (o === t || o.startsWith("/auth/")) {
+      if (await e.signOut(), await t(!0), r(null), f(!1), typeof window < "u") {
+        const i = "/auth/login", o = window.location.pathname, u = window.location.search;
+        if (o === i || o.startsWith("/auth/")) {
           window.location.reload();
           return;
         }
-        const m = new URL(t, window.location.origin);
+        const m = new URL(i, window.location.origin);
         o && o !== "/" && m.searchParams.set("redirect", o + u), window.location.replace(m.toString());
       }
-    } catch (t) {
-      if (process.env.NODE_ENV === "development" && console.error("Sign out error:", t), r(null), f(!1), typeof window < "u") {
+    } catch (i) {
+      if (process.env.NODE_ENV === "development" && console.error("Sign out error:", i), r(null), f(!1), typeof window < "u") {
         try {
           window.sessionStorage.clear();
           const u = (s = e._getSessionConfig) == null ? void 0 : s.call(e), m = (u == null ? void 0 : u.cookieName) || "__mulguard_session";
@@ -313,7 +313,7 @@ function L(e) {
         window.location.pathname !== o && !window.location.pathname.startsWith("/auth/") ? window.location.replace(o) : window.location.reload();
       }
     }
-  }, [e, i]), U = l(
+  }, [e, t]), U = l(
     async (n) => {
       if (!e.resetPassword)
         throw new Error("Password reset is not configured");
@@ -335,8 +335,8 @@ function L(e) {
           error: "2FA verification is not configured"
         };
       try {
-        const s = await _(e, n);
-        return s.success && (await new Promise((t) => setTimeout(t, 100)), await i()), s;
+        const s = await b(e, n);
+        return s.success && (await new Promise((i) => setTimeout(i, 100)), await t()), s;
       } catch (s) {
         return {
           success: !1,
@@ -344,9 +344,15 @@ function L(e) {
         };
       }
     },
-    [e, i]
+    [e, t]
   ), j = l(
-    async (n, s) => e.signIn(n, s),
+    async (n, s) => n === "credentials" ? !s || !("email" in s) || !("password" in s) ? {
+      success: !1,
+      error: "Credentials are required"
+    } : e.signIn("credentials", s) : n === "otp" ? !s || !("email" in s) ? {
+      success: !1,
+      error: "Email is required"
+    } : e.signIn("otp", s) : n === "passkey" ? e.signIn("passkey", s) : e.signIn(n),
     [e]
   );
   return {
@@ -354,7 +360,7 @@ function L(e) {
     isLoading: c,
     signIn: j,
     signInMethods: {
-      email: p,
+      email: y,
       oauth: w,
       passkey: d,
       otp: l(
@@ -365,16 +371,16 @@ function L(e) {
               error: "OTP sign in is not configured"
             };
           try {
-            const t = await e.signIn.otp(n, s);
-            return t.success && await i(), t;
-          } catch (t) {
+            const i = await e.signIn.otp(n, s);
+            return i.success && await t(), i;
+          } catch (i) {
             return {
               success: !1,
-              error: t instanceof Error ? t.message : "OTP sign in failed"
+              error: i instanceof Error ? i.message : "OTP sign in failed"
             };
           }
         },
-        [e, i]
+        [e, t]
       )
     },
     signUp: v,
@@ -384,8 +390,8 @@ function L(e) {
     verify2FA: F
   };
 }
-function M(e) {
-  const [a, r] = y(null), [c, f] = y(!0), [i, g] = y(null), p = l(async () => {
+function W(e) {
+  const [a, r] = p(null), [c, f] = p(!0), [t, g] = p(null), y = l(async () => {
     f(!0), g(null);
     try {
       const w = await e.getSession();
@@ -398,19 +404,19 @@ function M(e) {
     }
   }, [e]);
   return h(() => {
-    p();
+    y();
     const w = setInterval(() => {
-      p();
+      y();
     }, 5 * 60 * 1e3);
     return () => clearInterval(w);
-  }, [p]), {
+  }, [y]), {
     session: a,
     isLoading: c,
-    error: i
+    error: t
   };
 }
-function W(e) {
-  const [a, r] = y([]), [c, f] = y(!0), i = l(async () => {
+function R(e) {
+  const [a, r] = p([]), [c, f] = p(!0), t = l(async () => {
     if (!e.accountPicker) {
       r([]), f(!1);
       return;
@@ -426,53 +432,53 @@ function W(e) {
     }
   }, [e]);
   h(() => {
-    i();
-  }, [i]);
+    t();
+  }, [t]);
   const g = l(
     async (d, v) => {
-      e.accountPicker && (await e.accountPicker.rememberUser(d, v), await i());
+      e.accountPicker && (await e.accountPicker.rememberUser(d, v), await t());
     },
-    [e, i]
-  ), p = l(
+    [e, t]
+  ), y = l(
     async (d) => {
-      e.accountPicker && (await e.accountPicker.clearUser(d), await i());
+      e.accountPicker && (await e.accountPicker.clearUser(d), await t());
     },
-    [e, i]
+    [e, t]
   ), w = l(async () => {
-    e.accountPicker && (await e.accountPicker.clearAll(), await i());
-  }, [e, i]);
+    e.accountPicker && (await e.accountPicker.clearAll(), await t());
+  }, [e, t]);
   return {
     lastUsers: a,
     isLoading: c,
     rememberUser: g,
-    clearUser: p,
+    clearUser: y,
     clearAll: w,
-    refresh: i
+    refresh: t
   };
 }
-const I = x(null);
-function R({ auth: e, children: a }) {
-  const r = M(e), c = W(e);
-  return /* @__PURE__ */ N(I.Provider, { value: { auth: e, session: r, accountPicker: c }, children: a });
+const P = x(null);
+function V({ auth: e, children: a }) {
+  const r = W(e), c = R(e);
+  return /* @__PURE__ */ _(P.Provider, { value: { auth: e, session: r, accountPicker: c }, children: a });
 }
 function k() {
-  const e = O(I);
+  const e = N(P);
   if (!e)
     throw new Error("useMulguardContext must be used within MulguardProvider");
   return e;
 }
-function J() {
+function q() {
   const { auth: e } = k();
-  return L(e);
+  return M(e);
 }
-const z = R, K = k;
+const z = V, K = k;
 export {
   z as AuthProvider,
-  R as MulguardProvider,
-  W as useAccountPicker,
-  L as useAuth,
+  V as MulguardProvider,
+  R as useAccountPicker,
+  M as useAuth,
   K as useAuthContext,
-  J as useAuthFromContext,
+  q as useAuthFromContext,
   k as useMulguardContext,
-  M as useSession
+  W as useSession
 };