mulguard 1.1.6 → 1.1.8

package/dist/client/index.mjs

@@ -1,478 +0,0 @@
-import { useState as y, useCallback as l, useEffect as h, createContext as x, useContext as O } from "react";
-import { jsx as N } from "react/jsx-runtime";
-function E() {
-  return typeof window > "u";
-}
-async function S() {
-  try {
-    return await import("../actions-DeCfLtHA.mjs").then((a) => a.f);
-  } catch {
-    return null;
-  }
-}
-async function _(e, a) {
-  if (E())
-    return e.verify2FA ? e.verify2FA(a) : {
-      success: !1,
-      error: "2FA verification is not configured"
-    };
-  try {
-    const r = await S();
-    if (r)
-      return await r.verify2FAAction(e, a);
-  } catch {
-  }
-  try {
-    const r = await fetch("/api/auth/verify-2fa", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify(a)
-    });
-    if (!r.ok) {
-      const c = await r.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: c.error || "2FA verification failed",
-        errorCode: c.errorCode
-      };
-    }
-    return await r.json();
-  } catch (r) {
-    return {
-      success: !1,
-      error: r instanceof Error ? r.message : "2FA verification failed"
-    };
-  }
-}
-async function b(e, a) {
-  var r;
-  if (E())
-    return (r = e.signIn) != null && r.email ? e.signIn.email(a) : {
-      success: !1,
-      error: "Email sign in is not configured"
-    };
-  try {
-    const c = await S();
-    if (c)
-      return await c.signInEmailAction(e, a);
-  } catch {
-  }
-  try {
-    const c = await fetch("/api/auth/sign-in", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify({ provider: "email", credentials: a })
-    });
-    if (!c.ok) {
-      const f = await c.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: f.error || "Sign in failed",
-        errorCode: f.errorCode
-      };
-    }
-    return await c.json();
-  } catch (c) {
-    return {
-      success: !1,
-      error: c instanceof Error ? c.message : "Sign in failed"
-    };
-  }
-}
-async function D(e, a) {
-  if (E())
-    return e.signUp ? e.signUp(a) : {
-      success: !1,
-      error: "Sign up is not configured"
-    };
-  try {
-    const r = await S();
-    if (r)
-      return await r.signUpAction(e, a);
-  } catch {
-  }
-  try {
-    const r = await fetch("/api/auth/sign-up", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify(a)
-    });
-    if (!r.ok) {
-      const c = await r.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: c.error || "Sign up failed",
-        errorCode: c.errorCode
-      };
-    }
-    return await r.json();
-  } catch (r) {
-    return {
-      success: !1,
-      error: r instanceof Error ? r.message : "Sign up failed"
-    };
-  }
-}
-function L(e) {
-  const [a, r] = y(null), [c, f] = y(!0), i = l(async (n = !1) => {
-    f(!0);
-    try {
-      const s = "/api/auth/session" + (n ? `?t=${Date.now()}` : ""), t = await fetch(s, {
-        method: "GET",
-        credentials: "include",
-        // Include cookies in request
-        headers: {
-          "Content-Type": "application/json",
-          "Cache-Control": "no-cache, no-store, must-revalidate",
-          // ✅ FIX: Prevent caching
-          Pragma: "no-cache",
-          Expires: "0"
-        },
-        cache: "no-store"
-        // ✅ FIX: Prevent caching
-      });
-      if (t.status === 401 || t.status === 403) {
-        r(null);
-        return;
-      }
-      if (t.ok) {
-        const o = await t.json();
-        o.session ? r(o.session) : r(null);
-      } else
-        r(null);
-    } catch (s) {
-      process.env.NODE_ENV === "development" && console.error("Failed to load session:", s), r(null);
-    } finally {
-      f(!1);
-    }
-  }, [e]), g = l((n) => {
-    if (!n || !n.expiresAt || !e.refreshSession)
-      return () => {
-      };
-    const s = new Date(n.expiresAt), t = /* @__PURE__ */ new Date(), o = s.getTime() - t.getTime(), u = 5 * 60 * 1e3;
-    if (o > 0 && o < u)
-      return e.refreshSession().catch(() => {
-      }), () => {
-      };
-    if (o > u) {
-      const m = o - u, A = setTimeout(() => {
-        var P;
-        (P = e.refreshSession) == null || P.call(e).catch(() => {
-        });
-      }, m);
-      return () => clearTimeout(A);
-    }
-    return () => {
-    };
-  }, [e]);
-  h(() => {
-    let n = null;
-    (async () => {
-      await i();
-      try {
-        const o = await fetch("/api/auth/session", {
-          method: "GET",
-          credentials: "include",
-          headers: {
-            "Content-Type": "application/json"
-          },
-          cache: "no-store"
-          // ✅ FIX: Prevent caching
-        });
-        if (o.ok) {
-          const u = await o.json();
-          u.session ? n = g(u.session) : r(null);
-        } else
-          r(null);
-      } catch (o) {
-        process.env.NODE_ENV === "development" && console.debug("Failed to schedule proactive refresh:", o), r(null);
-      }
-    })();
-    const t = setInterval(() => {
-      fetch("/api/auth/session", {
-        method: "GET",
-        credentials: "include",
-        headers: {
-          "Content-Type": "application/json"
-        },
-        cache: "no-store"
-        // ✅ FIX: Prevent caching
-      }).then((o) => o.status === 401 || o.status === 403 ? (r(null), n && (n(), n = null), typeof window < "u" && window.location.pathname !== "/auth/login" && window.location.replace("/auth/login?reason=session_expired"), null) : o.json()).then((o) => {
-        o && (o.session ? (r(o.session), n && n(), n = g(o.session)) : (r(null), n && (n(), n = null)));
-      }).catch(() => {
-        r(null), n && (n(), n = null);
-      });
-    }, 60 * 1e3);
-    return () => {
-      clearInterval(t), n && n();
-    };
-  }, [i, g]);
-  const p = l(
-    async (n) => {
-      try {
-        const s = await b(e, n);
-        return s.success && await i(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "Sign in failed"
-        };
-      }
-    },
-    [e, i]
-  ), w = l(
-    async (n) => {
-      if (!e.signIn.oauth)
-        throw new Error("OAuth sign in is not configured");
-      return e.signIn.oauth(n);
-    },
-    [e]
-  ), d = l(
-    async (n) => {
-      if (!e.signIn.passkey)
-        return {
-          success: !1,
-          error: "PassKey sign in is not configured"
-        };
-      try {
-        const s = await e.signIn.passkey(n);
-        return s.success && await i(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "PassKey authentication failed"
-        };
-      }
-    },
-    [e, i]
-  ), v = l(
-    async (n) => {
-      if (!e.signUp)
-        return {
-          success: !1,
-          error: "Sign up is not configured"
-        };
-      try {
-        const s = await D(e, n);
-        return s.success && await i(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "Sign up failed"
-        };
-      }
-    },
-    [e, i]
-  ), C = l(async () => {
-    var n, s;
-    try {
-      if (r(null), f(!0), typeof window < "u") {
-        try {
-          window.sessionStorage.clear();
-        } catch {
-        }
-        try {
-          const t = (n = e._getSessionConfig) == null ? void 0 : n.call(e), o = (t == null ? void 0 : t.cookieName) || "__mulguard_session";
-          try {
-            window.localStorage.removeItem(o);
-          } catch {
-          }
-        } catch {
-        }
-      }
-      if (await e.signOut(), await i(!0), r(null), f(!1), typeof window < "u") {
-        const t = "/auth/login", o = window.location.pathname, u = window.location.search;
-        if (o === t || o.startsWith("/auth/")) {
-          window.location.reload();
-          return;
-        }
-        const m = new URL(t, window.location.origin);
-        o && o !== "/" && m.searchParams.set("redirect", o + u), window.location.replace(m.toString());
-      }
-    } catch (t) {
-      if (process.env.NODE_ENV === "development" && console.error("Sign out error:", t), r(null), f(!1), typeof window < "u") {
-        try {
-          window.sessionStorage.clear();
-          const u = (s = e._getSessionConfig) == null ? void 0 : s.call(e), m = (u == null ? void 0 : u.cookieName) || "__mulguard_session";
-          try {
-            window.localStorage.removeItem(m);
-          } catch {
-          }
-        } catch {
-        }
-        const o = "/auth/login";
-        window.location.pathname !== o && !window.location.pathname.startsWith("/auth/") ? window.location.replace(o) : window.location.reload();
-      }
-    }
-  }, [e, i]), U = l(
-    async (n) => {
-      if (!e.resetPassword)
-        throw new Error("Password reset is not configured");
-      return e.resetPassword(n);
-    },
-    [e]
-  ), T = l(
-    async (n) => {
-      if (!e.verifyEmail)
-        throw new Error("Email verification is not configured");
-      return e.verifyEmail(n);
-    },
-    [e]
-  ), F = l(
-    async (n) => {
-      if (!e.verify2FA)
-        return {
-          success: !1,
-          error: "2FA verification is not configured"
-        };
-      try {
-        const s = await _(e, n);
-        return s.success && (await new Promise((t) => setTimeout(t, 100)), await i()), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "2FA verification failed"
-        };
-      }
-    },
-    [e, i]
-  ), j = l(
-    async (n, s) => e.signIn(n, s),
-    [e]
-  );
-  return {
-    session: a,
-    isLoading: c,
-    signIn: j,
-    signInMethods: {
-      email: p,
-      oauth: w,
-      passkey: d,
-      otp: l(
-        async (n, s) => {
-          if (!e.signIn.otp)
-            return {
-              success: !1,
-              error: "OTP sign in is not configured"
-            };
-          try {
-            const t = await e.signIn.otp(n, s);
-            return t.success && await i(), t;
-          } catch (t) {
-            return {
-              success: !1,
-              error: t instanceof Error ? t.message : "OTP sign in failed"
-            };
-          }
-        },
-        [e, i]
-      )
-    },
-    signUp: v,
-    signOut: C,
-    resetPassword: U,
-    verifyEmail: T,
-    verify2FA: F
-  };
-}
-function M(e) {
-  const [a, r] = y(null), [c, f] = y(!0), [i, g] = y(null), p = l(async () => {
-    f(!0), g(null);
-    try {
-      const w = await e.getSession();
-      r(w);
-    } catch (w) {
-      const d = w instanceof Error ? w : new Error("Failed to load session");
-      g(d), r(null);
-    } finally {
-      f(!1);
-    }
-  }, [e]);
-  return h(() => {
-    p();
-    const w = setInterval(() => {
-      p();
-    }, 5 * 60 * 1e3);
-    return () => clearInterval(w);
-  }, [p]), {
-    session: a,
-    isLoading: c,
-    error: i
-  };
-}
-function W(e) {
-  const [a, r] = y([]), [c, f] = y(!0), i = l(async () => {
-    if (!e.accountPicker) {
-      r([]), f(!1);
-      return;
-    }
-    f(!0);
-    try {
-      const d = await e.accountPicker.getLastUsers();
-      r(d);
-    } catch (d) {
-      process.env.NODE_ENV === "development" && console.error("Failed to load last users:", d), r([]);
-    } finally {
-      f(!1);
-    }
-  }, [e]);
-  h(() => {
-    i();
-  }, [i]);
-  const g = l(
-    async (d, v) => {
-      e.accountPicker && (await e.accountPicker.rememberUser(d, v), await i());
-    },
-    [e, i]
-  ), p = l(
-    async (d) => {
-      e.accountPicker && (await e.accountPicker.clearUser(d), await i());
-    },
-    [e, i]
-  ), w = l(async () => {
-    e.accountPicker && (await e.accountPicker.clearAll(), await i());
-  }, [e, i]);
-  return {
-    lastUsers: a,
-    isLoading: c,
-    rememberUser: g,
-    clearUser: p,
-    clearAll: w,
-    refresh: i
-  };
-}
-const I = x(null);
-function R({ auth: e, children: a }) {
-  const r = M(e), c = W(e);
-  return /* @__PURE__ */ N(I.Provider, { value: { auth: e, session: r, accountPicker: c }, children: a });
-}
-function k() {
-  const e = O(I);
-  if (!e)
-    throw new Error("useMulguardContext must be used within MulguardProvider");
-  return e;
-}
-function J() {
-  const { auth: e } = k();
-  return L(e);
-}
-const z = R, K = k;
-export {
-  z as AuthProvider,
-  R as MulguardProvider,
-  W as useAccountPicker,
-  L as useAuth,
-  K as useAuthContext,
-  J as useAuthFromContext,
-  k as useMulguardContext,
-  M as useSession
-};

package/dist/client/provider.d.ts

@@ -1,69 +0,0 @@
-import { ReactNode } from 'react';
-import { MulguardInstance } from '../mulguard';
-import { useSession, useAccountPicker } from './hooks';
-interface MulguardContextValue {
-    auth: MulguardInstance;
-    session: ReturnType<typeof useSession>;
-    accountPicker: ReturnType<typeof useAccountPicker>;
-}
-interface MulguardProviderProps {
-    auth: MulguardInstance;
-    children: ReactNode;
-}
-/**
- * Mulguard Provider - provides auth instance to children
- *
- * @example
- * ```tsx
- * import { MulguardProvider } from 'mulguard/client'
- * import { auth } from '@/lib/auth'
- *
- * export default function RootLayout({ children }) {
- *   return (
- *     <MulguardProvider auth={auth}>
- *       {children}
- *     </MulguardProvider>
- *   )
- * }
- * ```
- */
-export declare function MulguardProvider({ auth, children }: MulguardProviderProps): import("react/jsx-runtime").JSX.Element;
-/**
- * Use Mulguard context
- *
- * @example
- * ```tsx
- * import { useMulguardContext } from 'mulguard/client'
- *
- * function Component() {
- *   const { auth, session } = useMulguardContext()
- *   // ...
- * }
- * ```
- */
-export declare function useMulguardContext(): MulguardContextValue;
-/**
- * Convenience hook that uses context
- *
- * @example
- * ```tsx
- * import { useAuthFromContext } from 'mulguard/client'
- *
- * function Component() {
- *   const { signIn, signOut } = useAuthFromContext()
- *   // ...
- * }
- * ```
- */
-export declare function useAuthFromContext(): import('./hooks').UseAuthReturn;
-/**
- * @deprecated Use MulguardProvider instead
- * This is kept for backward compatibility
- */
-export declare const AuthProvider: typeof MulguardProvider;
-/**
- * @deprecated Use useMulguardContext instead
- * This is kept for backward compatibility
- */
-export declare const useAuthContext: typeof useMulguardContext;
-export {};

package/dist/client/server-actions-helper.d.ts

@@ -1,22 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-import { Verify2FAData, AuthResult, EmailCredentials, RegisterData } from '../core/types';
-/**
- * Verify 2FA with automatic fallback
- * Tries Server Action first, then falls back to Route Handler
- */
-export declare function verify2FAWithFallback(auth: MulguardInstance, data: Verify2FAData): Promise<AuthResult>;
-/**
- * Sign out with automatic fallback
- */
-export declare function signOutWithFallback(auth: MulguardInstance): Promise<{
-    success: boolean;
-    error?: string;
-}>;
-/**
- * Sign in with email with automatic fallback
- */
-export declare function signInEmailWithFallback(auth: MulguardInstance, credentials: EmailCredentials): Promise<AuthResult>;
-/**
- * Sign up with automatic fallback
- */
-export declare function signUpWithFallback(auth: MulguardInstance, data: RegisterData): Promise<AuthResult>;

package/dist/components/AccountPicker.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-import { RememberedUser } from '../core/types';
-interface AccountPickerProps {
-    auth: MulguardInstance;
-    onSelectUser?: (user: RememberedUser) => void;
-    onUseDifferentAccount?: () => void;
-    maxDisplay?: number;
-    className?: string;
-}
-export declare function AccountPicker({ auth, onSelectUser, onUseDifferentAccount, maxDisplay, className, }: AccountPickerProps): import("react/jsx-runtime").JSX.Element | null;
-export {};

package/dist/components/OAuthButton.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface OAuthButtonProps {
-    auth: MulguardInstance;
-    provider: string;
-    children?: React.ReactNode;
-    className?: string;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-}
-export declare function OAuthButton({ auth, provider, children, className, onSuccess, onError, }: OAuthButtonProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/PassKeyButton.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface PassKeyButtonProps {
-    auth: MulguardInstance;
-    children?: React.ReactNode;
-    className?: string;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-    userId?: string;
-}
-export declare function PassKeyButton({ auth, children, className, onSuccess, onError, userId, }: PassKeyButtonProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/PassKeyRegister.d.ts

@@ -1,10 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface PassKeyRegisterProps {
-    auth: MulguardInstance;
-    onSuccess?: (passkeyId: string) => void;
-    onError?: (error: string) => void;
-    userId?: string;
-    defaultName?: string;
-}
-export declare function PassKeyRegister({ auth, onSuccess, onError, userId, defaultName, }: PassKeyRegisterProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/TwoFactorSetup.d.ts

@@ -1,8 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface TwoFactorSetupProps {
-    auth: MulguardInstance;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-}
-export declare function TwoFactorSetup({ auth, onSuccess, onError }: TwoFactorSetupProps): import("react/jsx-runtime").JSX.Element | null;
-export {};

package/dist/components/TwoFactorVerify.d.ts

@@ -1,9 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface TwoFactorVerifyProps {
-    auth: MulguardInstance;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-    onUseBackupCode?: () => void;
-}
-export declare function TwoFactorVerify({ auth, onSuccess, onError, onUseBackupCode }: TwoFactorVerifyProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/core/account-picker/encryption.d.ts

@@ -1,22 +0,0 @@
-/**
- * Account Picker Encryption Utilities
- * Supports multiple encryption methods for account picker storage
- */
-export type EncryptionMethod = 'none' | 'base64' | 'aes-gcm';
-/**
- * Encryption result with metadata
- */
-interface EncryptionResult {
-    data: string;
-    method: EncryptionMethod;
-    iv?: string;
-}
-/**
- * Encrypt data based on method
- */
-export declare function encryptData(data: string, method?: EncryptionMethod): Promise<EncryptionResult>;
-/**
- * Decrypt data - auto-detects method from stored data or uses provided method
- */
-export declare function decryptData(encrypted: string, method?: EncryptionMethod): Promise<string>;
-export {};

package/dist/core/account-picker/index.d.ts

@@ -1,22 +0,0 @@
-import { RememberedUser, User } from '../types';
-import { EncryptionMethod } from './encryption';
-export type { EncryptionMethod } from './encryption';
-export interface AccountPickerConfig {
-    enabled: boolean;
-    maxAccounts?: number;
-    /** @deprecated Use encryptionMethod instead. If true, defaults to 'base64' */
-    encryptStorage?: boolean;
-    /** Encryption method: 'none' | 'base64' | 'aes-gcm' (default: 'base64' for backward compatibility) */
-    encryptionMethod?: EncryptionMethod;
-    storageKey?: string;
-}
-export interface AccountPickerMethods {
-    getLastUsers(): Promise<RememberedUser[]>;
-    rememberUser(user: User, provider?: 'email' | 'oauth' | 'passkey'): Promise<void>;
-    clearUser(userId: string): Promise<void>;
-    clearAll(): Promise<void>;
-}
-/**
- * Create Account Picker methods
- */
-export declare function createAccountPickerMethods(config: AccountPickerConfig): AccountPickerMethods;