mulguard 1.1.7 → 1.1.9

package/dist/client/index.mjs

@@ -1,484 +0,0 @@
-import { useState as p, useCallback as l, useEffect as h, createContext as x, useContext as N } from "react";
-import { jsx as _ } from "react/jsx-runtime";
-function E() {
-  return typeof window > "u";
-}
-async function S() {
-  try {
-    return await import("../actions-CjQUKaXF.mjs").then((a) => a.h);
-  } catch {
-    return null;
-  }
-}
-async function b(e, a) {
-  if (E())
-    return e.verify2FA ? e.verify2FA(a) : {
-      success: !1,
-      error: "2FA verification is not configured"
-    };
-  try {
-    const r = await S();
-    if (r)
-      return await r.verify2FAAction(e, a);
-  } catch {
-  }
-  try {
-    const r = await fetch("/api/auth/verify-2fa", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify(a)
-    });
-    if (!r.ok) {
-      const c = await r.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: c.error || "2FA verification failed",
-        errorCode: c.errorCode
-      };
-    }
-    return await r.json();
-  } catch (r) {
-    return {
-      success: !1,
-      error: r instanceof Error ? r.message : "2FA verification failed"
-    };
-  }
-}
-async function D(e, a) {
-  var r;
-  if (E())
-    return (r = e.signIn) != null && r.email ? e.signIn.email(a) : {
-      success: !1,
-      error: "Email sign in is not configured"
-    };
-  try {
-    const c = await S();
-    if (c)
-      return await c.signInEmailAction(e, a);
-  } catch {
-  }
-  try {
-    const c = await fetch("/api/auth/sign-in", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify({ provider: "email", credentials: a })
-    });
-    if (!c.ok) {
-      const f = await c.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: f.error || "Sign in failed",
-        errorCode: f.errorCode
-      };
-    }
-    return await c.json();
-  } catch (c) {
-    return {
-      success: !1,
-      error: c instanceof Error ? c.message : "Sign in failed"
-    };
-  }
-}
-async function L(e, a) {
-  if (E())
-    return e.signUp ? e.signUp(a) : {
-      success: !1,
-      error: "Sign up is not configured"
-    };
-  try {
-    const r = await S();
-    if (r)
-      return await r.signUpAction(e, a);
-  } catch {
-  }
-  try {
-    const r = await fetch("/api/auth/sign-up", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      credentials: "include",
-      body: JSON.stringify(a)
-    });
-    if (!r.ok) {
-      const c = await r.json().catch(() => ({}));
-      return {
-        success: !1,
-        error: c.error || "Sign up failed",
-        errorCode: c.errorCode
-      };
-    }
-    return await r.json();
-  } catch (r) {
-    return {
-      success: !1,
-      error: r instanceof Error ? r.message : "Sign up failed"
-    };
-  }
-}
-function M(e) {
-  const [a, r] = p(null), [c, f] = p(!0), t = l(async (n = !1) => {
-    f(!0);
-    try {
-      const s = "/api/auth/session" + (n ? `?t=${Date.now()}` : ""), i = await fetch(s, {
-        method: "GET",
-        credentials: "include",
-        // Include cookies in request
-        headers: {
-          "Content-Type": "application/json",
-          "Cache-Control": "no-cache, no-store, must-revalidate",
-          // ✅ FIX: Prevent caching
-          Pragma: "no-cache",
-          Expires: "0"
-        },
-        cache: "no-store"
-        // ✅ FIX: Prevent caching
-      });
-      if (i.status === 401 || i.status === 403) {
-        r(null);
-        return;
-      }
-      if (i.ok) {
-        const o = await i.json();
-        o.session ? r(o.session) : r(null);
-      } else
-        r(null);
-    } catch (s) {
-      process.env.NODE_ENV === "development" && console.error("Failed to load session:", s), r(null);
-    } finally {
-      f(!1);
-    }
-  }, [e]), g = l((n) => {
-    if (!n || !n.expiresAt || !e.refreshSession)
-      return () => {
-      };
-    const s = new Date(n.expiresAt), i = /* @__PURE__ */ new Date(), o = s.getTime() - i.getTime(), u = 5 * 60 * 1e3;
-    if (o > 0 && o < u)
-      return e.refreshSession().catch(() => {
-      }), () => {
-      };
-    if (o > u) {
-      const m = o - u, A = setTimeout(() => {
-        var I;
-        (I = e.refreshSession) == null || I.call(e).catch(() => {
-        });
-      }, m);
-      return () => clearTimeout(A);
-    }
-    return () => {
-    };
-  }, [e]);
-  h(() => {
-    let n = null;
-    (async () => {
-      await t();
-      try {
-        const o = await fetch("/api/auth/session", {
-          method: "GET",
-          credentials: "include",
-          headers: {
-            "Content-Type": "application/json"
-          },
-          cache: "no-store"
-          // ✅ FIX: Prevent caching
-        });
-        if (o.ok) {
-          const u = await o.json();
-          u.session ? n = g(u.session) : r(null);
-        } else
-          r(null);
-      } catch (o) {
-        process.env.NODE_ENV === "development" && console.debug("Failed to schedule proactive refresh:", o), r(null);
-      }
-    })();
-    const i = setInterval(() => {
-      fetch("/api/auth/session", {
-        method: "GET",
-        credentials: "include",
-        headers: {
-          "Content-Type": "application/json"
-        },
-        cache: "no-store"
-        // ✅ FIX: Prevent caching
-      }).then((o) => o.status === 401 || o.status === 403 ? (r(null), n && (n(), n = null), typeof window < "u" && window.location.pathname !== "/auth/login" && window.location.replace("/auth/login?reason=session_expired"), null) : o.json()).then((o) => {
-        o && (o.session ? (r(o.session), n && n(), n = g(o.session)) : (r(null), n && (n(), n = null)));
-      }).catch(() => {
-        r(null), n && (n(), n = null);
-      });
-    }, 60 * 1e3);
-    return () => {
-      clearInterval(i), n && n();
-    };
-  }, [t, g]);
-  const y = l(
-    async (n) => {
-      try {
-        const s = await D(e, n);
-        return s.success && await t(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "Sign in failed"
-        };
-      }
-    },
-    [e, t]
-  ), w = l(
-    async (n) => {
-      if (!e.signIn.oauth)
-        throw new Error("OAuth sign in is not configured");
-      return e.signIn.oauth(n);
-    },
-    [e]
-  ), d = l(
-    async (n) => {
-      if (!e.signIn.passkey)
-        return {
-          success: !1,
-          error: "PassKey sign in is not configured"
-        };
-      try {
-        const s = await e.signIn.passkey(n);
-        return s.success && await t(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "PassKey authentication failed"
-        };
-      }
-    },
-    [e, t]
-  ), v = l(
-    async (n) => {
-      if (!e.signUp)
-        return {
-          success: !1,
-          error: "Sign up is not configured"
-        };
-      try {
-        const s = await L(e, n);
-        return s.success && await t(), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "Sign up failed"
-        };
-      }
-    },
-    [e, t]
-  ), C = l(async () => {
-    var n, s;
-    try {
-      if (r(null), f(!0), typeof window < "u") {
-        try {
-          window.sessionStorage.clear();
-        } catch {
-        }
-        try {
-          const i = (n = e._getSessionConfig) == null ? void 0 : n.call(e), o = (i == null ? void 0 : i.cookieName) || "__mulguard_session";
-          try {
-            window.localStorage.removeItem(o);
-          } catch {
-          }
-        } catch {
-        }
-      }
-      if (await e.signOut(), await t(!0), r(null), f(!1), typeof window < "u") {
-        const i = "/auth/login", o = window.location.pathname, u = window.location.search;
-        if (o === i || o.startsWith("/auth/")) {
-          window.location.reload();
-          return;
-        }
-        const m = new URL(i, window.location.origin);
-        o && o !== "/" && m.searchParams.set("redirect", o + u), window.location.replace(m.toString());
-      }
-    } catch (i) {
-      if (process.env.NODE_ENV === "development" && console.error("Sign out error:", i), r(null), f(!1), typeof window < "u") {
-        try {
-          window.sessionStorage.clear();
-          const u = (s = e._getSessionConfig) == null ? void 0 : s.call(e), m = (u == null ? void 0 : u.cookieName) || "__mulguard_session";
-          try {
-            window.localStorage.removeItem(m);
-          } catch {
-          }
-        } catch {
-        }
-        const o = "/auth/login";
-        window.location.pathname !== o && !window.location.pathname.startsWith("/auth/") ? window.location.replace(o) : window.location.reload();
-      }
-    }
-  }, [e, t]), U = l(
-    async (n) => {
-      if (!e.resetPassword)
-        throw new Error("Password reset is not configured");
-      return e.resetPassword(n);
-    },
-    [e]
-  ), T = l(
-    async (n) => {
-      if (!e.verifyEmail)
-        throw new Error("Email verification is not configured");
-      return e.verifyEmail(n);
-    },
-    [e]
-  ), F = l(
-    async (n) => {
-      if (!e.verify2FA)
-        return {
-          success: !1,
-          error: "2FA verification is not configured"
-        };
-      try {
-        const s = await b(e, n);
-        return s.success && (await new Promise((i) => setTimeout(i, 100)), await t()), s;
-      } catch (s) {
-        return {
-          success: !1,
-          error: s instanceof Error ? s.message : "2FA verification failed"
-        };
-      }
-    },
-    [e, t]
-  ), j = l(
-    async (n, s) => n === "credentials" ? !s || !("email" in s) || !("password" in s) ? {
-      success: !1,
-      error: "Credentials are required"
-    } : e.signIn("credentials", s) : n === "otp" ? !s || !("email" in s) ? {
-      success: !1,
-      error: "Email is required"
-    } : e.signIn("otp", s) : n === "passkey" ? e.signIn("passkey", s) : e.signIn(n),
-    [e]
-  );
-  return {
-    session: a,
-    isLoading: c,
-    signIn: j,
-    signInMethods: {
-      email: y,
-      oauth: w,
-      passkey: d,
-      otp: l(
-        async (n, s) => {
-          if (!e.signIn.otp)
-            return {
-              success: !1,
-              error: "OTP sign in is not configured"
-            };
-          try {
-            const i = await e.signIn.otp(n, s);
-            return i.success && await t(), i;
-          } catch (i) {
-            return {
-              success: !1,
-              error: i instanceof Error ? i.message : "OTP sign in failed"
-            };
-          }
-        },
-        [e, t]
-      )
-    },
-    signUp: v,
-    signOut: C,
-    resetPassword: U,
-    verifyEmail: T,
-    verify2FA: F
-  };
-}
-function W(e) {
-  const [a, r] = p(null), [c, f] = p(!0), [t, g] = p(null), y = l(async () => {
-    f(!0), g(null);
-    try {
-      const w = await e.getSession();
-      r(w);
-    } catch (w) {
-      const d = w instanceof Error ? w : new Error("Failed to load session");
-      g(d), r(null);
-    } finally {
-      f(!1);
-    }
-  }, [e]);
-  return h(() => {
-    y();
-    const w = setInterval(() => {
-      y();
-    }, 5 * 60 * 1e3);
-    return () => clearInterval(w);
-  }, [y]), {
-    session: a,
-    isLoading: c,
-    error: t
-  };
-}
-function R(e) {
-  const [a, r] = p([]), [c, f] = p(!0), t = l(async () => {
-    if (!e.accountPicker) {
-      r([]), f(!1);
-      return;
-    }
-    f(!0);
-    try {
-      const d = await e.accountPicker.getLastUsers();
-      r(d);
-    } catch (d) {
-      process.env.NODE_ENV === "development" && console.error("Failed to load last users:", d), r([]);
-    } finally {
-      f(!1);
-    }
-  }, [e]);
-  h(() => {
-    t();
-  }, [t]);
-  const g = l(
-    async (d, v) => {
-      e.accountPicker && (await e.accountPicker.rememberUser(d, v), await t());
-    },
-    [e, t]
-  ), y = l(
-    async (d) => {
-      e.accountPicker && (await e.accountPicker.clearUser(d), await t());
-    },
-    [e, t]
-  ), w = l(async () => {
-    e.accountPicker && (await e.accountPicker.clearAll(), await t());
-  }, [e, t]);
-  return {
-    lastUsers: a,
-    isLoading: c,
-    rememberUser: g,
-    clearUser: y,
-    clearAll: w,
-    refresh: t
-  };
-}
-const P = x(null);
-function V({ auth: e, children: a }) {
-  const r = W(e), c = R(e);
-  return /* @__PURE__ */ _(P.Provider, { value: { auth: e, session: r, accountPicker: c }, children: a });
-}
-function k() {
-  const e = N(P);
-  if (!e)
-    throw new Error("useMulguardContext must be used within MulguardProvider");
-  return e;
-}
-function q() {
-  const { auth: e } = k();
-  return M(e);
-}
-const z = V, K = k;
-export {
-  z as AuthProvider,
-  V as MulguardProvider,
-  R as useAccountPicker,
-  M as useAuth,
-  K as useAuthContext,
-  q as useAuthFromContext,
-  k as useMulguardContext,
-  W as useSession
-};

package/dist/components/AccountPicker.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-import { RememberedUser } from '../core/types';
-interface AccountPickerProps {
-    auth: MulguardInstance;
-    onSelectUser?: (user: RememberedUser) => void;
-    onUseDifferentAccount?: () => void;
-    maxDisplay?: number;
-    className?: string;
-}
-export declare function AccountPicker({ auth, onSelectUser, onUseDifferentAccount, maxDisplay, className, }: AccountPickerProps): import("react/jsx-runtime").JSX.Element | null;
-export {};

package/dist/components/OAuthButton.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface OAuthButtonProps {
-    auth: MulguardInstance;
-    provider: string;
-    children?: React.ReactNode;
-    className?: string;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-}
-export declare function OAuthButton({ auth, provider, children, className, onSuccess, onError, }: OAuthButtonProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/PassKeyButton.d.ts

@@ -1,11 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface PassKeyButtonProps {
-    auth: MulguardInstance;
-    children?: React.ReactNode;
-    className?: string;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-    userId?: string;
-}
-export declare function PassKeyButton({ auth, children, className, onSuccess, onError, userId, }: PassKeyButtonProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/PassKeyRegister.d.ts

@@ -1,10 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface PassKeyRegisterProps {
-    auth: MulguardInstance;
-    onSuccess?: (passkeyId: string) => void;
-    onError?: (error: string) => void;
-    userId?: string;
-    defaultName?: string;
-}
-export declare function PassKeyRegister({ auth, onSuccess, onError, userId, defaultName, }: PassKeyRegisterProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/TwoFactorSetup.d.ts

@@ -1,8 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface TwoFactorSetupProps {
-    auth: MulguardInstance;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-}
-export declare function TwoFactorSetup({ auth, onSuccess, onError }: TwoFactorSetupProps): import("react/jsx-runtime").JSX.Element | null;
-export {};

package/dist/components/TwoFactorVerify.d.ts

@@ -1,9 +0,0 @@
-import { MulguardInstance } from '../mulguard';
-interface TwoFactorVerifyProps {
-    auth: MulguardInstance;
-    onSuccess?: () => void;
-    onError?: (error: string) => void;
-    onUseBackupCode?: () => void;
-}
-export declare function TwoFactorVerify({ auth, onSuccess, onError, onUseBackupCode }: TwoFactorVerifyProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/core/account-picker/encryption.d.ts

@@ -1,22 +0,0 @@
-/**
- * Account Picker Encryption Utilities
- * Supports multiple encryption methods for account picker storage
- */
-export type EncryptionMethod = 'none' | 'base64' | 'aes-gcm';
-/**
- * Encryption result with metadata
- */
-interface EncryptionResult {
-    data: string;
-    method: EncryptionMethod;
-    iv?: string;
-}
-/**
- * Encrypt data based on method
- */
-export declare function encryptData(data: string, method?: EncryptionMethod): Promise<EncryptionResult>;
-/**
- * Decrypt data - auto-detects method from stored data or uses provided method
- */
-export declare function decryptData(encrypted: string, method?: EncryptionMethod): Promise<string>;
-export {};

package/dist/core/account-picker/index.d.ts

@@ -1,22 +0,0 @@
-import { RememberedUser, User } from '../types';
-import { EncryptionMethod } from './encryption';
-export type { EncryptionMethod } from './encryption';
-export interface AccountPickerConfig {
-    enabled: boolean;
-    maxAccounts?: number;
-    /** @deprecated Use encryptionMethod instead. If true, defaults to 'base64' */
-    encryptStorage?: boolean;
-    /** Encryption method: 'none' | 'base64' | 'aes-gcm' (default: 'base64' for backward compatibility) */
-    encryptionMethod?: EncryptionMethod;
-    storageKey?: string;
-}
-export interface AccountPickerMethods {
-    getLastUsers(): Promise<RememberedUser[]>;
-    rememberUser(user: User, provider?: 'email' | 'oauth' | 'passkey'): Promise<void>;
-    clearUser(userId: string): Promise<void>;
-    clearAll(): Promise<void>;
-}
-/**
- * Create Account Picker methods
- */
-export declare function createAccountPickerMethods(config: AccountPickerConfig): AccountPickerMethods;