next-supa-utils 0.1.0

package/dist/client/index.js

@@ -0,0 +1,127 @@
+"use client";
+"use client";
+
+// src/client/hooks/useSupaUser.ts
+import { useEffect, useState } from "react";
+import { createBrowserClient } from "@supabase/ssr";
+
+// src/shared/utils/error-handler.ts
+function handleSupaError(error) {
+  if (error instanceof Error) {
+    const record = error;
+    return {
+      message: error.message,
+      code: typeof record.code === "string" ? record.code : void 0,
+      status: typeof record.status === "number" ? record.status : void 0
+    };
+  }
+  if (typeof error === "object" && error !== null && "message" in error && typeof error.message === "string") {
+    const err = error;
+    return {
+      message: err.message,
+      code: typeof err.code === "string" ? err.code : void 0,
+      status: typeof err.status === "number" ? err.status : void 0
+    };
+  }
+  if (typeof error === "string") {
+    return { message: error };
+  }
+  return { message: "An unknown error occurred" };
+}
+
+// src/client/hooks/useSupaUser.ts
+function useSupaUser() {
+  const [state, setState] = useState({
+    user: null,
+    loading: true,
+    error: null
+  });
+  useEffect(() => {
+    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+    if (!supabaseUrl || !supabaseAnonKey) {
+      setState({
+        user: null,
+        loading: false,
+        error: {
+          message: "Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.",
+          code: "CONFIG_ERROR"
+        }
+      });
+      return;
+    }
+    const supabase = createBrowserClient(supabaseUrl, supabaseAnonKey);
+    supabase.auth.getUser().then(({ data, error }) => {
+      setState({
+        user: data.user,
+        loading: false,
+        error: error ? handleSupaError(error) : null
+      });
+    });
+    const {
+      data: { subscription }
+    } = supabase.auth.onAuthStateChange((_event, session) => {
+      setState((prev) => ({
+        ...prev,
+        user: session?.user ?? null,
+        loading: false
+      }));
+    });
+    return () => {
+      subscription.unsubscribe();
+    };
+  }, []);
+  return state;
+}
+
+// src/client/hooks/useSupaSession.ts
+import { useEffect as useEffect2, useState as useState2 } from "react";
+import { createBrowserClient as createBrowserClient2 } from "@supabase/ssr";
+function useSupaSession() {
+  const [state, setState] = useState2({
+    session: null,
+    loading: true,
+    error: null
+  });
+  useEffect2(() => {
+    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+    if (!supabaseUrl || !supabaseAnonKey) {
+      setState({
+        session: null,
+        loading: false,
+        error: {
+          message: "Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.",
+          code: "CONFIG_ERROR"
+        }
+      });
+      return;
+    }
+    const supabase = createBrowserClient2(supabaseUrl, supabaseAnonKey);
+    supabase.auth.getSession().then(({ data, error }) => {
+      setState({
+        session: data.session,
+        loading: false,
+        error: error ? handleSupaError(error) : null
+      });
+    });
+    const {
+      data: { subscription }
+    } = supabase.auth.onAuthStateChange((_event, session) => {
+      setState((prev) => ({
+        ...prev,
+        session,
+        loading: false
+      }));
+    });
+    return () => {
+      subscription.unsubscribe();
+    };
+  }, []);
+  return state;
+}
+export {
+  useSupaSession,
+  useSupaUser
+};
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/hooks/useSupaUser.ts","../../src/shared/utils/error-handler.ts","../../src/client/hooks/useSupaSession.ts"],"sourcesContent":["\"use client\";\n\nimport { useEffect, useState } from \"react\";\nimport { createBrowserClient } from \"@supabase/ssr\";\n\nimport type { UseSupaUserReturn } from \"../../types\";\nimport { handleSupaError } from \"../../shared/utils/error-handler\";\n\n/**\n * React hook that provides the current Supabase user and\n * subscribes to real-time auth state changes.\n *\n * Must be used inside a Client Component (`\"use client\"`).\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useSupaUser } from \"next-supa-utils/client\";\n *\n * export default function Avatar() {\n *   const { user, loading, error } = useSupaUser();\n *\n *   if (loading) return <p>Loading…</p>;\n *   if (error)  return <p>Error: {error.message}</p>;\n *   if (!user)  return <p>Not signed in</p>;\n *\n *   return <p>Hello, {user.email}</p>;\n * }\n * ```\n */\nexport function useSupaUser(): UseSupaUserReturn {\n  const [state, setState] = useState<UseSupaUserReturn>({\n    user: null,\n    loading: true,\n    error: null,\n  });\n\n  useEffect(() => {\n    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;\n    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;\n\n    if (!supabaseUrl || !supabaseAnonKey) {\n      setState({\n        user: null,\n        loading: false,\n        error: {\n          message:\n            \"Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.\",\n          code: \"CONFIG_ERROR\",\n        },\n      });\n      return;\n    }\n\n    const supabase = createBrowserClient(supabaseUrl, supabaseAnonKey);\n\n    // ── Initial fetch ─────────────────────────────────────────────\n    supabase.auth.getUser().then(({ data, error }) => {\n      setState({\n        user: data.user,\n        loading: false,\n        error: error ? handleSupaError(error) : null,\n      });\n    });\n\n    // ── Subscribe to auth state changes ───────────────────────────\n    const {\n      data: { subscription },\n    } = supabase.auth.onAuthStateChange((_event, session) => {\n      setState((prev) => ({\n        ...prev,\n        user: session?.user ?? null,\n        loading: false,\n      }));\n    });\n\n    return () => {\n      subscription.unsubscribe();\n    };\n  }, []);\n\n  return state;\n}\n","import type { SupaError } from \"../../types\";\n\n/**\n * Normalize any thrown value into a consistent `SupaError` shape.\n *\n * Handles:\n * - Supabase `AuthError` / `PostgrestError` (has `.message` and optional `.code` / `.status`)\n * - Standard `Error` instances\n * - Plain strings\n * - Unknown values (fallback)\n */\nexport function handleSupaError(error: unknown): SupaError {\n  // ── Supabase errors & standard Error instances ──────────────────\n  if (error instanceof Error) {\n    const record = error as unknown as Record<string, unknown>;\n    return {\n      message: error.message,\n      code: typeof record.code === \"string\" ? record.code : undefined,\n      status: typeof record.status === \"number\" ? record.status : undefined,\n    };\n  }\n\n  // ── Plain object with a message property ────────────────────────\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"message\" in error &&\n    typeof (error as Record<string, unknown>).message === \"string\"\n  ) {\n    const err = error as Record<string, unknown>;\n    return {\n      message: err.message as string,\n      code: typeof err.code === \"string\" ? err.code : undefined,\n      status: typeof err.status === \"number\" ? err.status : undefined,\n    };\n  }\n\n  // ── String ──────────────────────────────────────────────────────\n  if (typeof error === \"string\") {\n    return { message: error };\n  }\n\n  // ── Fallback ────────────────────────────────────────────────────\n  return { message: \"An unknown error occurred\" };\n}\n","\"use client\";\n\nimport { useEffect, useState } from \"react\";\nimport { createBrowserClient } from \"@supabase/ssr\";\nimport type { Session } from \"@supabase/supabase-js\";\n\nimport type { UseSupaSessionReturn } from \"../../types\";\nimport { handleSupaError } from \"../../shared/utils/error-handler\";\n\n/**\n * React hook that provides the current Supabase session and\n * subscribes to real-time auth state changes.\n *\n * Must be used inside a Client Component (`\"use client\"`).\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useSupaSession } from \"next-supa-utils/client\";\n *\n * export default function TokenDisplay() {\n *   const { session, loading, error } = useSupaSession();\n *\n *   if (loading)   return <p>Loading…</p>;\n *   if (error)     return <p>Error: {error.message}</p>;\n *   if (!session)  return <p>No active session</p>;\n *\n *   return <p>Token expires at: {session.expires_at}</p>;\n * }\n * ```\n */\nexport function useSupaSession(): UseSupaSessionReturn {\n  const [state, setState] = useState<UseSupaSessionReturn>({\n    session: null,\n    loading: true,\n    error: null,\n  });\n\n  useEffect(() => {\n    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;\n    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;\n\n    if (!supabaseUrl || !supabaseAnonKey) {\n      setState({\n        session: null,\n        loading: false,\n        error: {\n          message:\n            \"Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.\",\n          code: \"CONFIG_ERROR\",\n        },\n      });\n      return;\n    }\n\n    const supabase = createBrowserClient(supabaseUrl, supabaseAnonKey);\n\n    // ── Initial fetch ─────────────────────────────────────────────\n    supabase.auth.getSession().then(({ data, error }) => {\n      setState({\n        session: data.session,\n        loading: false,\n        error: error ? handleSupaError(error) : null,\n      });\n    });\n\n    // ── Subscribe to auth state changes ───────────────────────────\n    const {\n      data: { subscription },\n    } = supabase.auth.onAuthStateChange((_event, session: Session | null) => {\n      setState((prev) => ({\n        ...prev,\n        session,\n        loading: false,\n      }));\n    });\n\n    return () => {\n      subscription.unsubscribe();\n    };\n  }, []);\n\n  return state;\n}\n"],"mappings":";;;;AAEA,SAAS,WAAW,gBAAgB;AACpC,SAAS,2BAA2B;;;ACQ7B,SAAS,gBAAgB,OAA2B;AAEzD,MAAI,iBAAiB,OAAO;AAC1B,UAAM,SAAS;AACf,WAAO;AAAA,MACL,SAAS,MAAM;AAAA,MACf,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,MACtD,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC9D;AAAA,EACF;AAGA,MACE,OAAO,UAAU,YACjB,UAAU,QACV,aAAa,SACb,OAAQ,MAAkC,YAAY,UACtD;AACA,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,SAAS,IAAI;AAAA,MACb,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAAA,MAChD,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACxD;AAAA,EACF;AAGA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAGA,SAAO,EAAE,SAAS,4BAA4B;AAChD;;;ADdO,SAAS,cAAiC;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAA4B;AAAA,IACpD,MAAM;AAAA,IACN,SAAS;AAAA,IACT,OAAO;AAAA,EACT,CAAC;AAED,YAAU,MAAM;AACd,UAAM,cAAc,QAAQ,IAAI;AAChC,UAAM,kBAAkB,QAAQ,IAAI;AAEpC,QAAI,CAAC,eAAe,CAAC,iBAAiB;AACpC,eAAS;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SACE;AAAA,UACF,MAAM;AAAA,QACR;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,WAAW,oBAAoB,aAAa,eAAe;AAGjE,aAAS,KAAK,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,MAAM;AAChD,eAAS;AAAA,QACP,MAAM,KAAK;AAAA,QACX,SAAS;AAAA,QACT,OAAO,QAAQ,gBAAgB,KAAK,IAAI;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAGD,UAAM;AAAA,MACJ,MAAM,EAAE,aAAa;AAAA,IACvB,IAAI,SAAS,KAAK,kBAAkB,CAAC,QAAQ,YAAY;AACvD,eAAS,CAAC,UAAU;AAAA,QAClB,GAAG;AAAA,QACH,MAAM,SAAS,QAAQ;AAAA,QACvB,SAAS;AAAA,MACX,EAAE;AAAA,IACJ,CAAC;AAED,WAAO,MAAM;AACX,mBAAa,YAAY;AAAA,IAC3B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,SAAO;AACT;;;AEhFA,SAAS,aAAAA,YAAW,YAAAC,iBAAgB;AACpC,SAAS,uBAAAC,4BAA2B;AA4B7B,SAAS,iBAAuC;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAIC,UAA+B;AAAA,IACvD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO;AAAA,EACT,CAAC;AAED,EAAAC,WAAU,MAAM;AACd,UAAM,cAAc,QAAQ,IAAI;AAChC,UAAM,kBAAkB,QAAQ,IAAI;AAEpC,QAAI,CAAC,eAAe,CAAC,iBAAiB;AACpC,eAAS;AAAA,QACP,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OAAO;AAAA,UACL,SACE;AAAA,UACF,MAAM;AAAA,QACR;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,WAAWC,qBAAoB,aAAa,eAAe;AAGjE,aAAS,KAAK,WAAW,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,MAAM;AACnD,eAAS;AAAA,QACP,SAAS,KAAK;AAAA,QACd,SAAS;AAAA,QACT,OAAO,QAAQ,gBAAgB,KAAK,IAAI;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAGD,UAAM;AAAA,MACJ,MAAM,EAAE,aAAa;AAAA,IACvB,IAAI,SAAS,KAAK,kBAAkB,CAAC,QAAQ,YAA4B;AACvE,eAAS,CAAC,UAAU;AAAA,QAClB,GAAG;AAAA,QACH;AAAA,QACA,SAAS;AAAA,MACX,EAAE;AAAA,IACJ,CAAC;AAED,WAAO,MAAM;AACX,mBAAa,YAAY;AAAA,IAC3B;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,SAAO;AACT;","names":["useEffect","useState","createBrowserClient","useState","useEffect","createBrowserClient"]}

package/dist/server/index.cjs

@@ -0,0 +1,163 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/server/index.ts
+var server_exports = {};
+__export(server_exports, {
+  createAction: () => createAction,
+  withSupaAuth: () => withSupaAuth
+});
+module.exports = __toCommonJS(server_exports);
+
+// src/server/middleware/withSupaAuth.ts
+var import_ssr = require("@supabase/ssr");
+var import_server = require("next/server");
+function withSupaAuth(config) {
+  const {
+    protectedRoutes,
+    redirectTo = "/login",
+    publicRoutes = [],
+    onAuthSuccess
+  } = config;
+  return async function middleware(request) {
+    let response = import_server.NextResponse.next({
+      request: { headers: request.headers }
+    });
+    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+    if (!supabaseUrl || !supabaseAnonKey) {
+      console.error(
+        "[next-supa-utils] Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables."
+      );
+      return response;
+    }
+    const supabase = (0, import_ssr.createServerClient)(supabaseUrl, supabaseAnonKey, {
+      cookies: {
+        getAll() {
+          return request.cookies.getAll();
+        },
+        setAll(cookiesToSet) {
+          cookiesToSet.forEach(({ name, value }) => {
+            request.cookies.set(name, value);
+          });
+          response = import_server.NextResponse.next({ request });
+          cookiesToSet.forEach(({ name, value, options }) => {
+            response.cookies.set(name, value, options);
+          });
+        }
+      }
+    });
+    const {
+      data: { user }
+    } = await supabase.auth.getUser();
+    const { pathname } = request.nextUrl;
+    const isPublicRoute = publicRoutes.some(
+      (route) => pathname.startsWith(route)
+    );
+    if (isPublicRoute) {
+      return response;
+    }
+    const isProtectedRoute = protectedRoutes.some(
+      (route) => pathname.startsWith(route)
+    );
+    if (isProtectedRoute && !user) {
+      const loginUrl = new URL(redirectTo, request.url);
+      loginUrl.searchParams.set("next", pathname);
+      return import_server.NextResponse.redirect(loginUrl);
+    }
+    if (user && onAuthSuccess) {
+      await onAuthSuccess({ id: user.id, email: user.email ?? void 0 });
+    }
+    return response;
+  };
+}
+
+// src/server/actions/actionWrapper.ts
+var import_ssr2 = require("@supabase/ssr");
+var import_headers = require("next/headers");
+
+// src/shared/utils/error-handler.ts
+function handleSupaError(error) {
+  if (error instanceof Error) {
+    const record = error;
+    return {
+      message: error.message,
+      code: typeof record.code === "string" ? record.code : void 0,
+      status: typeof record.status === "number" ? record.status : void 0
+    };
+  }
+  if (typeof error === "object" && error !== null && "message" in error && typeof error.message === "string") {
+    const err = error;
+    return {
+      message: err.message,
+      code: typeof err.code === "string" ? err.code : void 0,
+      status: typeof err.status === "number" ? err.status : void 0
+    };
+  }
+  if (typeof error === "string") {
+    return { message: error };
+  }
+  return { message: "An unknown error occurred" };
+}
+
+// src/server/actions/actionWrapper.ts
+function createAction(fn) {
+  return async (...args) => {
+    try {
+      const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+      const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+      if (!supabaseUrl || !supabaseAnonKey) {
+        return {
+          data: null,
+          error: {
+            message: "Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.",
+            code: "CONFIG_ERROR"
+          }
+        };
+      }
+      const cookieStore = await (0, import_headers.cookies)();
+      const supabase = (0, import_ssr2.createServerClient)(supabaseUrl, supabaseAnonKey, {
+        cookies: {
+          getAll() {
+            return cookieStore.getAll();
+          },
+          setAll(cookiesToSet) {
+            try {
+              cookiesToSet.forEach(({ name, value, options }) => {
+                cookieStore.set(name, value, options);
+              });
+            } catch {
+            }
+          }
+        }
+      });
+      const data = await fn(supabase, ...args);
+      return { data, error: null };
+    } catch (caught) {
+      const error = handleSupaError(caught);
+      return { data: null, error };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createAction,
+  withSupaAuth
+});
+//# sourceMappingURL=index.cjs.map

package/dist/server/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/index.ts","../../src/server/middleware/withSupaAuth.ts","../../src/server/actions/actionWrapper.ts","../../src/shared/utils/error-handler.ts"],"sourcesContent":["// ── Server entry point ──────────────────────────────────────────────\n// This module should ONLY be imported in server-side contexts:\n// middleware.ts, Server Components, Server Actions, Route Handlers.\n\nexport { withSupaAuth } from \"./middleware/withSupaAuth\";\nexport { createAction } from \"./actions/actionWrapper\";\n\n// Re-export types consumers commonly need alongside server helpers.\nexport type { SupaAuthConfig, ActionResponse, SupaError } from \"../types\";\n","import { createServerClient, type CookieOptions } from \"@supabase/ssr\";\nimport { NextResponse, type NextRequest } from \"next/server\";\n\nimport type { SupaAuthConfig } from \"../../types\";\n\n/**\n * Create a Next.js middleware handler that protects routes based on\n * Supabase authentication state.\n *\n * @example\n * ```ts\n * // middleware.ts\n * import { withSupaAuth } from \"next-supa-utils/server\";\n *\n * export default withSupaAuth({\n *   protectedRoutes: [\"/dashboard\", \"/admin\"],\n *   redirectTo: \"/login\",\n *   publicRoutes: [\"/admin/login\"],\n * });\n *\n * export const config = {\n *   matcher: [\"/((?!_next/static|_next/image|favicon.ico|.*\\\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)\"],\n * };\n * ```\n */\nexport function withSupaAuth(config: SupaAuthConfig) {\n  const {\n    protectedRoutes,\n    redirectTo = \"/login\",\n    publicRoutes = [],\n    onAuthSuccess,\n  } = config;\n\n  return async function middleware(request: NextRequest): Promise<NextResponse> {\n    // ── 1. Create a mutable response so Supabase can set cookies ──\n    let response = NextResponse.next({\n      request: { headers: request.headers },\n    });\n\n    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;\n    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;\n\n    if (!supabaseUrl || !supabaseAnonKey) {\n      console.error(\n        \"[next-supa-utils] Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.\",\n      );\n      return response;\n    }\n\n    // ── 2. Initialize server client with middleware cookie helpers ─\n    const supabase = createServerClient(supabaseUrl, supabaseAnonKey, {\n      cookies: {\n        getAll() {\n          return request.cookies.getAll();\n        },\n        setAll(cookiesToSet: { name: string; value: string; options?: CookieOptions }[]) {\n          // Forward cookies to the request so downstream server\n          // components can read the updated session.\n          cookiesToSet.forEach(({ name, value }) => {\n            request.cookies.set(name, value);\n          });\n\n          // Re-create the response so it carries the updated request.\n          response = NextResponse.next({ request });\n\n          // Set cookies on the outgoing response so the browser\n          // stores the refreshed tokens.\n          cookiesToSet.forEach(({ name, value, options }) => {\n            response.cookies.set(name, value, options);\n          });\n        },\n      },\n    });\n\n    // ── 3. Refresh session (required to keep tokens alive) ────────\n    const {\n      data: { user },\n    } = await supabase.auth.getUser();\n\n    const { pathname } = request.nextUrl;\n\n    // ── 4. Check if current path matches a public override ────────\n    const isPublicRoute = publicRoutes.some((route) =>\n      pathname.startsWith(route),\n    );\n\n    if (isPublicRoute) {\n      return response;\n    }\n\n    // ── 5. Check if current path requires authentication ──────────\n    const isProtectedRoute = protectedRoutes.some((route) =>\n      pathname.startsWith(route),\n    );\n\n    if (isProtectedRoute && !user) {\n      const loginUrl = new URL(redirectTo, request.url);\n      // Preserve the originally-requested URL so the app can redirect\n      // back after login.\n      loginUrl.searchParams.set(\"next\", pathname);\n      return NextResponse.redirect(loginUrl);\n    }\n\n    // ── 6. Optional success callback ──────────────────────────────\n    if (user && onAuthSuccess) {\n      await onAuthSuccess({ id: user.id, email: user.email ?? undefined });\n    }\n\n    return response;\n  };\n}\n","import { createServerClient, type CookieOptions } from \"@supabase/ssr\";\nimport { cookies } from \"next/headers\";\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\n\nimport type { ActionResponse, SupaError } from \"../../types\";\nimport { handleSupaError } from \"../../shared/utils/error-handler\";\n\n/**\n * Create a type-safe Server Action that automatically:\n * 1. Initialises a Supabase server client (with cookies)\n * 2. Wraps execution in try/catch\n * 3. Returns a standardised `{ data, error }` response\n *\n * @example\n * ```ts\n * // app/actions/profile.ts\n * \"use server\";\n * import { createAction } from \"next-supa-utils/server\";\n *\n * export const getProfile = createAction(async (supabase, userId: string) => {\n *   const { data, error } = await supabase\n *     .from(\"profiles\")\n *     .select(\"*\")\n *     .eq(\"id\", userId)\n *     .single();\n *\n *   if (error) throw error;\n *   return data;\n * });\n *\n * // Usage in a Server Component or Client Component:\n * const result = await getProfile(\"user-uuid\");\n * if (result.error) { ... }\n * ```\n */\nexport function createAction<TArgs extends unknown[], TResult>(\n  fn: (supabase: SupabaseClient, ...args: TArgs) => Promise<TResult>,\n): (...args: TArgs) => Promise<ActionResponse<TResult>> {\n  return async (...args: TArgs): Promise<ActionResponse<TResult>> => {\n    try {\n      const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;\n      const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;\n\n      if (!supabaseUrl || !supabaseAnonKey) {\n        return {\n          data: null,\n          error: {\n            message:\n              \"Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.\",\n            code: \"CONFIG_ERROR\",\n          },\n        };\n      }\n\n      const cookieStore = await cookies();\n\n      const supabase = createServerClient(supabaseUrl, supabaseAnonKey, {\n        cookies: {\n          getAll() {\n            return cookieStore.getAll();\n          },\n          setAll(cookiesToSet: { name: string; value: string; options?: CookieOptions }[]) {\n            try {\n              cookiesToSet.forEach(({ name, value, options }) => {\n                cookieStore.set(name, value, options);\n              });\n            } catch {\n              // `cookies().set()` throws when called from a Server Component.\n              // In that context we only need read access — the middleware\n              // handles token refresh.\n            }\n          },\n        },\n      });\n\n      const data = await fn(supabase, ...args);\n\n      return { data, error: null };\n    } catch (caught: unknown) {\n      const error: SupaError = handleSupaError(caught);\n      return { data: null, error };\n    }\n  };\n}\n","import type { SupaError } from \"../../types\";\n\n/**\n * Normalize any thrown value into a consistent `SupaError` shape.\n *\n * Handles:\n * - Supabase `AuthError` / `PostgrestError` (has `.message` and optional `.code` / `.status`)\n * - Standard `Error` instances\n * - Plain strings\n * - Unknown values (fallback)\n */\nexport function handleSupaError(error: unknown): SupaError {\n  // ── Supabase errors & standard Error instances ──────────────────\n  if (error instanceof Error) {\n    const record = error as unknown as Record<string, unknown>;\n    return {\n      message: error.message,\n      code: typeof record.code === \"string\" ? record.code : undefined,\n      status: typeof record.status === \"number\" ? record.status : undefined,\n    };\n  }\n\n  // ── Plain object with a message property ────────────────────────\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"message\" in error &&\n    typeof (error as Record<string, unknown>).message === \"string\"\n  ) {\n    const err = error as Record<string, unknown>;\n    return {\n      message: err.message as string,\n      code: typeof err.code === \"string\" ? err.code : undefined,\n      status: typeof err.status === \"number\" ? err.status : undefined,\n    };\n  }\n\n  // ── String ──────────────────────────────────────────────────────\n  if (typeof error === \"string\") {\n    return { message: error };\n  }\n\n  // ── Fallback ────────────────────────────────────────────────────\n  return { message: \"An unknown error occurred\" };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAuD;AACvD,oBAA+C;AAwBxC,SAAS,aAAa,QAAwB;AACnD,QAAM;AAAA,IACJ;AAAA,IACA,aAAa;AAAA,IACb,eAAe,CAAC;AAAA,IAChB;AAAA,EACF,IAAI;AAEJ,SAAO,eAAe,WAAW,SAA6C;AAE5E,QAAI,WAAW,2BAAa,KAAK;AAAA,MAC/B,SAAS,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACtC,CAAC;AAED,UAAM,cAAc,QAAQ,IAAI;AAChC,UAAM,kBAAkB,QAAQ,IAAI;AAEpC,QAAI,CAAC,eAAe,CAAC,iBAAiB;AACpC,cAAQ;AAAA,QACN;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAGA,UAAM,eAAW,+BAAmB,aAAa,iBAAiB;AAAA,MAChE,SAAS;AAAA,QACP,SAAS;AACP,iBAAO,QAAQ,QAAQ,OAAO;AAAA,QAChC;AAAA,QACA,OAAO,cAA0E;AAG/E,uBAAa,QAAQ,CAAC,EAAE,MAAM,MAAM,MAAM;AACxC,oBAAQ,QAAQ,IAAI,MAAM,KAAK;AAAA,UACjC,CAAC;AAGD,qBAAW,2BAAa,KAAK,EAAE,QAAQ,CAAC;AAIxC,uBAAa,QAAQ,CAAC,EAAE,MAAM,OAAO,QAAQ,MAAM;AACjD,qBAAS,QAAQ,IAAI,MAAM,OAAO,OAAO;AAAA,UAC3C,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,CAAC;AAGD,UAAM;AAAA,MACJ,MAAM,EAAE,KAAK;AAAA,IACf,IAAI,MAAM,SAAS,KAAK,QAAQ;AAEhC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAG7B,UAAM,gBAAgB,aAAa;AAAA,MAAK,CAAC,UACvC,SAAS,WAAW,KAAK;AAAA,IAC3B;AAEA,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAGA,UAAM,mBAAmB,gBAAgB;AAAA,MAAK,CAAC,UAC7C,SAAS,WAAW,KAAK;AAAA,IAC3B;AAEA,QAAI,oBAAoB,CAAC,MAAM;AAC7B,YAAM,WAAW,IAAI,IAAI,YAAY,QAAQ,GAAG;AAGhD,eAAS,aAAa,IAAI,QAAQ,QAAQ;AAC1C,aAAO,2BAAa,SAAS,QAAQ;AAAA,IACvC;AAGA,QAAI,QAAQ,eAAe;AACzB,YAAM,cAAc,EAAE,IAAI,KAAK,IAAI,OAAO,KAAK,SAAS,OAAU,CAAC;AAAA,IACrE;AAEA,WAAO;AAAA,EACT;AACF;;;AC9GA,IAAAA,cAAuD;AACvD,qBAAwB;;;ACUjB,SAAS,gBAAgB,OAA2B;AAEzD,MAAI,iBAAiB,OAAO;AAC1B,UAAM,SAAS;AACf,WAAO;AAAA,MACL,SAAS,MAAM;AAAA,MACf,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,MACtD,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC9D;AAAA,EACF;AAGA,MACE,OAAO,UAAU,YACjB,UAAU,QACV,aAAa,SACb,OAAQ,MAAkC,YAAY,UACtD;AACA,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,SAAS,IAAI;AAAA,MACb,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAAA,MAChD,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACxD;AAAA,EACF;AAGA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAGA,SAAO,EAAE,SAAS,4BAA4B;AAChD;;;ADTO,SAAS,aACd,IACsD;AACtD,SAAO,UAAU,SAAkD;AACjE,QAAI;AACF,YAAM,cAAc,QAAQ,IAAI;AAChC,YAAM,kBAAkB,QAAQ,IAAI;AAEpC,UAAI,CAAC,eAAe,CAAC,iBAAiB;AACpC,eAAO;AAAA,UACL,MAAM;AAAA,UACN,OAAO;AAAA,YACL,SACE;AAAA,YACF,MAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,cAAc,UAAM,wBAAQ;AAElC,YAAM,eAAW,gCAAmB,aAAa,iBAAiB;AAAA,QAChE,SAAS;AAAA,UACP,SAAS;AACP,mBAAO,YAAY,OAAO;AAAA,UAC5B;AAAA,UACA,OAAO,cAA0E;AAC/E,gBAAI;AACF,2BAAa,QAAQ,CAAC,EAAE,MAAM,OAAO,QAAQ,MAAM;AACjD,4BAAY,IAAI,MAAM,OAAO,OAAO;AAAA,cACtC,CAAC;AAAA,YACH,QAAQ;AAAA,YAIR;AAAA,UACF;AAAA,QACF;AAAA,MACF,CAAC;AAED,YAAM,OAAO,MAAM,GAAG,UAAU,GAAG,IAAI;AAEvC,aAAO,EAAE,MAAM,OAAO,KAAK;AAAA,IAC7B,SAAS,QAAiB;AACxB,YAAM,QAAmB,gBAAgB,MAAM;AAC/C,aAAO,EAAE,MAAM,MAAM,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;","names":["import_ssr"]}

package/dist/server/index.d.cts

@@ -0,0 +1,99 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/** Standardized error shape returned by all next-supa-utils helpers. */
+interface SupaError {
+    message: string;
+    code?: string;
+    status?: number;
+}
+/** Discriminated success/failure response returned by `createAction`. */
+type ActionResponse<T> = {
+    data: T;
+    error: null;
+} | {
+    data: null;
+    error: SupaError;
+};
+interface SupaAuthConfig {
+    /**
+     * Route prefixes that require an authenticated user.
+     * Supports simple prefix matching.
+     *
+     * @example ["/dashboard", "/admin", "/settings"]
+     */
+    protectedRoutes: string[];
+    /**
+     * Where to redirect unauthenticated users.
+     * @default "/login"
+     */
+    redirectTo?: string;
+    /**
+     * Routes that are always public, even if they match a protected prefix.
+     *
+     * @example ["/admin/login"]
+     */
+    publicRoutes?: string[];
+    /**
+     * Optional callback invoked after session refresh,
+     * before the redirect decision. Useful for custom logging or headers.
+     */
+    onAuthSuccess?: (user: {
+        id: string;
+        email?: string;
+    }) => void | Promise<void>;
+}
+
+/**
+ * Create a Next.js middleware handler that protects routes based on
+ * Supabase authentication state.
+ *
+ * @example
+ * ```ts
+ * // middleware.ts
+ * import { withSupaAuth } from "next-supa-utils/server";
+ *
+ * export default withSupaAuth({
+ *   protectedRoutes: ["/dashboard", "/admin"],
+ *   redirectTo: "/login",
+ *   publicRoutes: ["/admin/login"],
+ * });
+ *
+ * export const config = {
+ *   matcher: ["/((?!_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)"],
+ * };
+ * ```
+ */
+declare function withSupaAuth(config: SupaAuthConfig): (request: NextRequest) => Promise<NextResponse>;
+
+/**
+ * Create a type-safe Server Action that automatically:
+ * 1. Initialises a Supabase server client (with cookies)
+ * 2. Wraps execution in try/catch
+ * 3. Returns a standardised `{ data, error }` response
+ *
+ * @example
+ * ```ts
+ * // app/actions/profile.ts
+ * "use server";
+ * import { createAction } from "next-supa-utils/server";
+ *
+ * export const getProfile = createAction(async (supabase, userId: string) => {
+ *   const { data, error } = await supabase
+ *     .from("profiles")
+ *     .select("*")
+ *     .eq("id", userId)
+ *     .single();
+ *
+ *   if (error) throw error;
+ *   return data;
+ * });
+ *
+ * // Usage in a Server Component or Client Component:
+ * const result = await getProfile("user-uuid");
+ * if (result.error) { ... }
+ * ```
+ */
+declare function createAction<TArgs extends unknown[], TResult>(fn: (supabase: SupabaseClient, ...args: TArgs) => Promise<TResult>): (...args: TArgs) => Promise<ActionResponse<TResult>>;
+
+export { type ActionResponse, type SupaAuthConfig, type SupaError, createAction, withSupaAuth };

package/dist/server/index.d.ts

@@ -0,0 +1,99 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/** Standardized error shape returned by all next-supa-utils helpers. */
+interface SupaError {
+    message: string;
+    code?: string;
+    status?: number;
+}
+/** Discriminated success/failure response returned by `createAction`. */
+type ActionResponse<T> = {
+    data: T;
+    error: null;
+} | {
+    data: null;
+    error: SupaError;
+};
+interface SupaAuthConfig {
+    /**
+     * Route prefixes that require an authenticated user.
+     * Supports simple prefix matching.
+     *
+     * @example ["/dashboard", "/admin", "/settings"]
+     */
+    protectedRoutes: string[];
+    /**
+     * Where to redirect unauthenticated users.
+     * @default "/login"
+     */
+    redirectTo?: string;
+    /**
+     * Routes that are always public, even if they match a protected prefix.
+     *
+     * @example ["/admin/login"]
+     */
+    publicRoutes?: string[];
+    /**
+     * Optional callback invoked after session refresh,
+     * before the redirect decision. Useful for custom logging or headers.
+     */
+    onAuthSuccess?: (user: {
+        id: string;
+        email?: string;
+    }) => void | Promise<void>;
+}
+
+/**
+ * Create a Next.js middleware handler that protects routes based on
+ * Supabase authentication state.
+ *
+ * @example
+ * ```ts
+ * // middleware.ts
+ * import { withSupaAuth } from "next-supa-utils/server";
+ *
+ * export default withSupaAuth({
+ *   protectedRoutes: ["/dashboard", "/admin"],
+ *   redirectTo: "/login",
+ *   publicRoutes: ["/admin/login"],
+ * });
+ *
+ * export const config = {
+ *   matcher: ["/((?!_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)"],
+ * };
+ * ```
+ */
+declare function withSupaAuth(config: SupaAuthConfig): (request: NextRequest) => Promise<NextResponse>;
+
+/**
+ * Create a type-safe Server Action that automatically:
+ * 1. Initialises a Supabase server client (with cookies)
+ * 2. Wraps execution in try/catch
+ * 3. Returns a standardised `{ data, error }` response
+ *
+ * @example
+ * ```ts
+ * // app/actions/profile.ts
+ * "use server";
+ * import { createAction } from "next-supa-utils/server";
+ *
+ * export const getProfile = createAction(async (supabase, userId: string) => {
+ *   const { data, error } = await supabase
+ *     .from("profiles")
+ *     .select("*")
+ *     .eq("id", userId)
+ *     .single();
+ *
+ *   if (error) throw error;
+ *   return data;
+ * });
+ *
+ * // Usage in a Server Component or Client Component:
+ * const result = await getProfile("user-uuid");
+ * if (result.error) { ... }
+ * ```
+ */
+declare function createAction<TArgs extends unknown[], TResult>(fn: (supabase: SupabaseClient, ...args: TArgs) => Promise<TResult>): (...args: TArgs) => Promise<ActionResponse<TResult>>;
+
+export { type ActionResponse, type SupaAuthConfig, type SupaError, createAction, withSupaAuth };

package/dist/server/index.js

@@ -0,0 +1,135 @@
+// src/server/middleware/withSupaAuth.ts
+import { createServerClient } from "@supabase/ssr";
+import { NextResponse } from "next/server";
+function withSupaAuth(config) {
+  const {
+    protectedRoutes,
+    redirectTo = "/login",
+    publicRoutes = [],
+    onAuthSuccess
+  } = config;
+  return async function middleware(request) {
+    let response = NextResponse.next({
+      request: { headers: request.headers }
+    });
+    const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+    const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+    if (!supabaseUrl || !supabaseAnonKey) {
+      console.error(
+        "[next-supa-utils] Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables."
+      );
+      return response;
+    }
+    const supabase = createServerClient(supabaseUrl, supabaseAnonKey, {
+      cookies: {
+        getAll() {
+          return request.cookies.getAll();
+        },
+        setAll(cookiesToSet) {
+          cookiesToSet.forEach(({ name, value }) => {
+            request.cookies.set(name, value);
+          });
+          response = NextResponse.next({ request });
+          cookiesToSet.forEach(({ name, value, options }) => {
+            response.cookies.set(name, value, options);
+          });
+        }
+      }
+    });
+    const {
+      data: { user }
+    } = await supabase.auth.getUser();
+    const { pathname } = request.nextUrl;
+    const isPublicRoute = publicRoutes.some(
+      (route) => pathname.startsWith(route)
+    );
+    if (isPublicRoute) {
+      return response;
+    }
+    const isProtectedRoute = protectedRoutes.some(
+      (route) => pathname.startsWith(route)
+    );
+    if (isProtectedRoute && !user) {
+      const loginUrl = new URL(redirectTo, request.url);
+      loginUrl.searchParams.set("next", pathname);
+      return NextResponse.redirect(loginUrl);
+    }
+    if (user && onAuthSuccess) {
+      await onAuthSuccess({ id: user.id, email: user.email ?? void 0 });
+    }
+    return response;
+  };
+}
+
+// src/server/actions/actionWrapper.ts
+import { createServerClient as createServerClient2 } from "@supabase/ssr";
+import { cookies } from "next/headers";
+
+// src/shared/utils/error-handler.ts
+function handleSupaError(error) {
+  if (error instanceof Error) {
+    const record = error;
+    return {
+      message: error.message,
+      code: typeof record.code === "string" ? record.code : void 0,
+      status: typeof record.status === "number" ? record.status : void 0
+    };
+  }
+  if (typeof error === "object" && error !== null && "message" in error && typeof error.message === "string") {
+    const err = error;
+    return {
+      message: err.message,
+      code: typeof err.code === "string" ? err.code : void 0,
+      status: typeof err.status === "number" ? err.status : void 0
+    };
+  }
+  if (typeof error === "string") {
+    return { message: error };
+  }
+  return { message: "An unknown error occurred" };
+}
+
+// src/server/actions/actionWrapper.ts
+function createAction(fn) {
+  return async (...args) => {
+    try {
+      const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+      const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+      if (!supabaseUrl || !supabaseAnonKey) {
+        return {
+          data: null,
+          error: {
+            message: "Missing NEXT_PUBLIC_SUPABASE_URL or NEXT_PUBLIC_SUPABASE_ANON_KEY environment variables.",
+            code: "CONFIG_ERROR"
+          }
+        };
+      }
+      const cookieStore = await cookies();
+      const supabase = createServerClient2(supabaseUrl, supabaseAnonKey, {
+        cookies: {
+          getAll() {
+            return cookieStore.getAll();
+          },
+          setAll(cookiesToSet) {
+            try {
+              cookiesToSet.forEach(({ name, value, options }) => {
+                cookieStore.set(name, value, options);
+              });
+            } catch {
+            }
+          }
+        }
+      });
+      const data = await fn(supabase, ...args);
+      return { data, error: null };
+    } catch (caught) {
+      const error = handleSupaError(caught);
+      return { data: null, error };
+    }
+  };
+}
+export {
+  createAction,
+  withSupaAuth
+};
+//# sourceMappingURL=index.js.map