@aruvili/api 0.1.0

package/dist/middleware/rate-limit.js

@@ -0,0 +1,40 @@
+import { config } from '../config.js';
+/**
+ * Simple in-memory sliding window rate limiter.
+ * Enterprise: replace with Redis-backed limiter for multi-instance deployments.
+ */
+const windows = new Map();
+// Periodic cleanup to prevent memory leak
+setInterval(() => {
+    const now = Date.now();
+    for (const [key, val] of windows) {
+        if (now > val.resetAt)
+            windows.delete(key);
+    }
+}, 60_000);
+function getClientKey(c) {
+    const user = c.get('user');
+    if (user?.email && user.email !== 'guest@system.local')
+        return `user:${user.email}`;
+    return `ip:${c.req.header('x-forwarded-for') || c.req.header('x-real-ip') || 'unknown'}`;
+}
+export async function rateLimitMiddleware(c, next) {
+    const key = getClientKey(c);
+    const now = Date.now();
+    const limit = config.rateLimitMax;
+    const windowMs = config.rateLimitWindowMs;
+    let entry = windows.get(key);
+    if (!entry || now > entry.resetAt) {
+        entry = { count: 0, resetAt: now + windowMs };
+        windows.set(key, entry);
+    }
+    entry.count++;
+    c.header('X-RateLimit-Limit', String(limit));
+    c.header('X-RateLimit-Remaining', String(Math.max(0, limit - entry.count)));
+    c.header('X-RateLimit-Reset', String(Math.ceil(entry.resetAt / 1000)));
+    if (entry.count > limit) {
+        return c.json({ error: 'Too Many Requests', retry_after_ms: entry.resetAt - now }, 429);
+    }
+    await next();
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;GAGG;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEtE,0CAA0C;AAC1C,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,SAAS,YAAY,CAAC,CAAU;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB;QAAE,OAAO,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,CAAU,EAAE,IAAU;IAC9D,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE1C,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvE,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;AACf,CAAC"}

package/dist/middleware/rbac.d.ts

@@ -0,0 +1,10 @@
+import { Context, Next } from 'hono';
+/**
+ * Enforces metadata-driven Role-Based Access Control (RBAC) security boundaries on all requests.
+ */
+export declare function rbacMiddleware(c: Context, next: Next): Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
+    error: string;
+}, 404, "json">) | undefined>;
+//# sourceMappingURL=rbac.d.ts.map

package/dist/middleware/rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/middleware/rbac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIrC;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;;;;8BA+D1D"}

package/dist/middleware/rbac.js

@@ -0,0 +1,61 @@
+import { registry } from '../registry.js';
+/**
+ * Enforces metadata-driven Role-Based Access Control (RBAC) security boundaries on all requests.
+ */
+export async function rbacMiddleware(c, next) {
+    const user = c.get('user');
+    const doctypeName = c.req.param('doctype');
+    if (!user || !user.roles) {
+        return c.json({ error: 'Forbidden: Missing request authentication context' }, 403);
+    }
+    if (!doctypeName) {
+        await next();
+        return;
+    }
+    // Load DocType schema definition
+    const doctype = await registry.get(doctypeName);
+    if (!doctype) {
+        return c.json({ error: `DocType ${doctypeName} not found` }, 404);
+    }
+    const method = c.req.method;
+    const path = c.req.path;
+    let action = 'read';
+    if (method === 'POST') {
+        if (path.endsWith('/submit')) {
+            action = 'submit';
+        }
+        else if (path.endsWith('/cancel')) {
+            action = 'cancel';
+        }
+        else {
+            action = 'create';
+        }
+    }
+    else if (method === 'PUT') {
+        action = 'update';
+    }
+    else if (method === 'DELETE') {
+        action = 'delete';
+    }
+    else if (method === 'GET') {
+        action = 'read';
+    }
+    // Admin bypass
+    if (user.roles.includes('System Manager')) {
+        await next();
+        return;
+    }
+    // Check user roles against PermissionRules
+    const permitted = doctype.permissions.some(rule => {
+        const roleMatches = user.roles.includes(rule.role);
+        if (!roleMatches)
+            return false;
+        // Check action boolean
+        return !!rule[action];
+    });
+    if (!permitted) {
+        return c.json({ error: `Forbidden: User does not hold ${action} permissions for DocType '${doctypeName}'` }, 403);
+    }
+    await next();
+}
+//# sourceMappingURL=rbac.js.map

package/dist/middleware/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../src/middleware/rbac.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAU,EAAE,IAAU;IACzD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,WAAW,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAExB,IAAI,MAAM,GAAyB,MAAM,CAAC;IAE1C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,uBAAuB;QACvB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iCAAiC,MAAM,6BAA6B,WAAW,GAAG,EAAE,EAC7F,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;AACf,CAAC"}

package/dist/middleware/tenant.d.ts

@@ -0,0 +1,3 @@
+import { MiddlewareHandler } from 'hono';
+export declare const tenantMiddleware: MiddlewareHandler;
+//# sourceMappingURL=tenant.d.ts.map

package/dist/middleware/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/middleware/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAKzC,eAAO,MAAM,gBAAgB,EAAE,iBAkB9B,CAAC"}

package/dist/middleware/tenant.js

@@ -0,0 +1,19 @@
+import { requestContext } from '../context.js';
+const TENANT_REGEX = /^[a-zA-Z0-9_]{1,63}$/;
+export const tenantMiddleware = async (c, next) => {
+    const tenantHeader = c.req.header('X-Tenant-ID');
+    // Resolve tenant. Default to public if not provided.
+    let tenantId = 'public';
+    if (tenantHeader) {
+        tenantId = tenantHeader.toLowerCase().trim();
+    }
+    // Validate tenantId to block SQL Injection in search path
+    if (!TENANT_REGEX.test(tenantId)) {
+        return c.json({ error: 'Invalid Tenant ID format' }, 400);
+    }
+    // Bind tenant to context store
+    return requestContext.run({ tenantId, user: c.get('user') }, async () => {
+        await next();
+    });
+};
+//# sourceMappingURL=tenant.js.map

package/dist/middleware/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../src/middleware/tenant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,MAAM,CAAC,MAAM,gBAAgB,GAAsB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACnE,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEjD,qDAAqD;IACrD,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,YAAY,EAAE,CAAC;QACjB,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,+BAA+B;IAC/B,OAAO,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,26 @@
+import { DocTypeDefinition } from '@aruvili/core';
+import { z } from 'zod';
+declare class DocTypeRegistry {
+    private cache;
+    private zodSchemas;
+    /**
+     * Clears in-memory metadata caches.
+     */
+    invalidate(doctypeName: string): void;
+    /**
+     * Retrieves a DocTypeDefinition schema structure.
+     * Loads dynamically from database into cache if missing.
+     */
+    get(doctypeName: string): Promise<DocTypeDefinition | null>;
+    /**
+     * Sets definition details to registry and clear caches.
+     */
+    set(doctypeName: string, definition: DocTypeDefinition): void;
+    /**
+     * Compiles and returns a runtime Zod validator matching the fields configuration.
+     */
+    getValidator(doctypeName: string): Promise<z.ZodObject<any> | null>;
+}
+export declare const registry: DocTypeRegistry;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,cAAM,eAAe;IACnB,OAAO,CAAC,KAAK,CAAwC;IACrD,OAAO,CAAC,UAAU,CAAuC;IAEzD;;OAEG;IACI,UAAU,CAAC,WAAW,EAAE,MAAM;IAKrC;;;OAGG;IACU,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAoBxE;;OAEG;IACI,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB;IAK7D;;OAEG;IACU,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;CAqEjF;AAED,eAAO,MAAM,QAAQ,iBAAwB,CAAC"}

package/dist/registry.js

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+import { query } from './db.js';
+class DocTypeRegistry {
+    cache = new Map();
+    zodSchemas = new Map();
+    /**
+     * Clears in-memory metadata caches.
+     */
+    invalidate(doctypeName) {
+        this.cache.delete(doctypeName);
+        this.zodSchemas.delete(doctypeName);
+    }
+    /**
+     * Retrieves a DocTypeDefinition schema structure.
+     * Loads dynamically from database into cache if missing.
+     */
+    async get(doctypeName) {
+        if (this.cache.has(doctypeName)) {
+            return this.cache.get(doctypeName);
+        }
+        // Attempt to load from PostgreSQL meta configuration table
+        try {
+            const res = await query('SELECT definition FROM _doctype_meta WHERE name = $1', [doctypeName]);
+            if (res.rows.length === 0) {
+                return null;
+            }
+            const definition = res.rows[0].definition;
+            this.cache.set(doctypeName, definition);
+            return definition;
+        }
+        catch (err) {
+            console.error(`Failed to load DocType ${doctypeName} from database:`, err);
+            return null;
+        }
+    }
+    /**
+     * Sets definition details to registry and clear caches.
+     */
+    set(doctypeName, definition) {
+        this.cache.set(doctypeName, definition);
+        this.zodSchemas.delete(doctypeName);
+    }
+    /**
+     * Compiles and returns a runtime Zod validator matching the fields configuration.
+     */
+    async getValidator(doctypeName) {
+        if (this.zodSchemas.has(doctypeName)) {
+            return this.zodSchemas.get(doctypeName);
+        }
+        const definition = await this.get(doctypeName);
+        if (!definition)
+            return null;
+        const shape = {
+            name: z.string().max(255).optional(),
+            docstatus: z.number().int().min(0).max(2).optional()
+        };
+        for (const field of definition.fields) {
+            let validator;
+            switch (field.fieldtype) {
+                case 'Select':
+                    if (field.options) {
+                        const list = field.options.split(',').map(s => s.trim());
+                        validator = z.enum(list);
+                    }
+                    else {
+                        validator = z.string().max(255);
+                    }
+                    break;
+                case 'Text':
+                case 'Link':
+                    validator = z.string().max(255);
+                    break;
+                case 'Small Text':
+                case 'Long Text':
+                    validator = z.string();
+                    break;
+                case 'Int':
+                    validator = z.number().int();
+                    break;
+                case 'Float':
+                case 'Currency':
+                    validator = z.number();
+                    break;
+                case 'Check':
+                    validator = z.boolean();
+                    break;
+                case 'Date':
+                    validator = z.string().regex(/^\d{4}-\d{2}-\d{2}$/, 'Must be in YYYY-MM-DD format');
+                    break;
+                case 'Datetime':
+                    validator = z.string().datetime();
+                    break;
+                case 'Table':
+                    // Child table fields are arrays of validations compiled from the child schema.
+                    // Note: to prevent recursion, retrieve the child validator dynamically.
+                    validator = z.array(z.any()); // Validated down the pipeline inside CRUD controller transaction loop
+                    break;
+                default:
+                    validator = z.any();
+            }
+            if (!field.required) {
+                validator = validator.optional().nullable();
+            }
+            shape[field.fieldname] = validator;
+        }
+        const compiled = z.object(shape);
+        this.zodSchemas.set(doctypeName, compiled);
+        return compiled;
+    }
+}
+export const registry = new DocTypeRegistry();
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,MAAM,eAAe;IACX,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC7C,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEzD;;OAEG;IACI,UAAU,CAAC,WAAmB;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,GAAG,CAAC,WAAmB;QAClC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,sDAAsD,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/F,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAA+B,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACxC,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,WAAW,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,GAAG,CAAC,WAAmB,EAAE,UAA6B;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,KAAK,GAAiC;YAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACrD,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,SAAuB,CAAC;YAE5B,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;gBACxB,KAAK,QAAQ;oBACX,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;wBACzD,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAA6B,CAAC,CAAC;oBACpD,CAAC;yBAAM,CAAC;wBACN,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAClC,CAAC;oBACD,MAAM;gBACR,KAAK,MAAM,CAAC;gBACZ,KAAK,MAAM;oBACT,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,YAAY,CAAC;gBAClB,KAAK,WAAW;oBACd,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBACvB,MAAM;gBACR,KAAK,KAAK;oBACR,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;oBAC7B,MAAM;gBACR,KAAK,OAAO,CAAC;gBACb,KAAK,UAAU;oBACb,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBACvB,MAAM;gBACR,KAAK,OAAO;oBACV,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;oBACxB,MAAM;gBACR,KAAK,MAAM;oBACT,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;oBACpF,MAAM;gBACR,KAAK,UAAU;oBACb,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;oBAClC,MAAM;gBACR,KAAK,OAAO;oBACV,+EAA+E;oBAC/E,wEAAwE;oBACxE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,sEAAsE;oBACpG,MAAM;gBACR;oBACE,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACxB,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,SAAS,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9C,CAAC;YAED,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/routes/auth.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+export declare const authRouter: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=auth.d.ts.map

package/dist/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,eAAO,MAAM,UAAU,4EAAa,CAAC"}

package/dist/routes/auth.js

@@ -0,0 +1,141 @@
+import { Hono } from 'hono';
+import { config } from '../config.js';
+import { query, withTransaction } from '../db.js';
+import crypto from 'crypto';
+export const authRouter = new Hono();
+/**
+ * Hash password using native crypto (no bcrypt dependency needed in Bun).
+ */
+async function hashPassword(password) {
+    const salt = crypto.randomBytes(32).toString('hex');
+    return new Promise((resolve, reject) => {
+        crypto.scrypt(password, salt, 64, (err, derived) => {
+            if (err)
+                reject(err);
+            resolve(`${salt}:${derived.toString('hex')}`);
+        });
+    });
+}
+async function verifyPassword(password, hash) {
+    const [salt, key] = hash.split(':');
+    return new Promise((resolve, reject) => {
+        crypto.scrypt(password, salt, 64, (err, derived) => {
+            if (err)
+                reject(err);
+            resolve(derived.toString('hex') === key);
+        });
+    });
+}
+/**
+ * Generate a signed JWT token.
+ */
+function signJWT(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
+    const now = Math.floor(Date.now() / 1000);
+    const body = Buffer.from(JSON.stringify({
+        ...payload,
+        iat: now,
+        exp: now + config.jwtExpiresIn
+    })).toString('base64url');
+    const signature = crypto
+        .createHmac('sha256', config.jwtSecret)
+        .update(`${header}.${body}`)
+        .digest('base64url');
+    return `${header}.${body}.${signature}`;
+}
+/**
+ * POST /api/auth/signup
+ */
+authRouter.post('/signup', async (c) => {
+    const { email, password, full_name } = await c.req.json();
+    if (!email || !password) {
+        return c.json({ error: 'Email and password are required' }, 400);
+    }
+    if (typeof password !== 'string' || password.length < 8) {
+        return c.json({ error: 'Password must be at least 8 characters' }, 400);
+    }
+    if (typeof email !== 'string' || !email.includes('@')) {
+        return c.json({ error: 'Invalid email address' }, 400);
+    }
+    try {
+        const existing = await query('SELECT name FROM _users WHERE email = $1', [email.toLowerCase()]);
+        if (existing.rows.length > 0) {
+            return c.json({ error: 'An account with this email already exists' }, 409);
+        }
+        const hashed = await hashPassword(password);
+        const userId = crypto.randomUUID();
+        await withTransaction(async (client) => {
+            await client.query(`INSERT INTO _users (name, uuid, email, full_name, hashed_password, roles, enabled)
+         VALUES ($1, gen_random_uuid(), $2, $3, $4, $5, true)`, [userId, email.toLowerCase(), full_name || '', hashed, JSON.stringify(['Guest'])]);
+        });
+        const token = signJWT({ email: email.toLowerCase(), roles: ['Guest'], user_id: userId });
+        return c.json({ token, user: { name: userId, email: email.toLowerCase(), roles: ['Guest'] } }, 201);
+    }
+    catch (err) {
+        console.error('[AUTH] Signup failed:', err.message);
+        return c.json({ error: 'Registration failed' }, 500);
+    }
+});
+/**
+ * POST /api/auth/login
+ */
+authRouter.post('/login', async (c) => {
+    const { email, password } = await c.req.json();
+    if (!email || !password) {
+        return c.json({ error: 'Email and password are required' }, 400);
+    }
+    try {
+        const res = await query('SELECT name, email, hashed_password, roles, enabled FROM _users WHERE email = $1', [email.toLowerCase()]);
+        if (res.rows.length === 0) {
+            return c.json({ error: 'Invalid email or password' }, 401);
+        }
+        const user = res.rows[0];
+        if (!user.enabled) {
+            return c.json({ error: 'Account is disabled' }, 403);
+        }
+        const valid = await verifyPassword(password, user.hashed_password);
+        if (!valid) {
+            return c.json({ error: 'Invalid email or password' }, 401);
+        }
+        const roles = Array.isArray(user.roles) ? user.roles : JSON.parse(user.roles || '["Guest"]');
+        const token = signJWT({ email: user.email, roles, user_id: user.name });
+        // Update last login
+        await query('UPDATE _users SET last_login = NOW() WHERE name = $1', [user.name]);
+        return c.json({ token, user: { name: user.name, email: user.email, roles } });
+    }
+    catch (err) {
+        console.error('[AUTH] Login failed:', err.message);
+        return c.json({ error: 'Authentication failed' }, 500);
+    }
+});
+/**
+ * GET /api/auth/me — returns current session user info
+ */
+authRouter.get('/me', async (c) => {
+    const authHeader = c.req.header('Authorization');
+    if (!authHeader?.startsWith('Bearer ')) {
+        return c.json({ error: 'Not authenticated' }, 401);
+    }
+    const token = authHeader.split(' ')[1];
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return c.json({ error: 'Invalid token' }, 401);
+        const sig = crypto.createHmac('sha256', config.jwtSecret).update(`${parts[0]}.${parts[1]}`).digest('base64url');
+        if (sig !== parts[2])
+            return c.json({ error: 'Invalid token' }, 401);
+        const payload = JSON.parse(Buffer.from(parts[1].replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString());
+        if (payload.exp && Date.now() / 1000 > payload.exp)
+            return c.json({ error: 'Token expired' }, 401);
+        const res = await query('SELECT name, email, full_name, roles, enabled, last_login FROM _users WHERE email = $1', [payload.email]);
+        if (res.rows.length === 0)
+            return c.json({ error: 'User not found' }, 404);
+        const user = res.rows[0];
+        user.roles = Array.isArray(user.roles) ? user.roles : JSON.parse(user.roles || '[]');
+        return c.json(user);
+    }
+    catch {
+        return c.json({ error: 'Invalid token' }, 401);
+    }
+});
+//# sourceMappingURL=auth.js.map

package/dist/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;AAErC;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACjD,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACjD,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,OAA4B;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,GAAG,OAAO;QACV,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;KAC/B,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;SACtC,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAE1D,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,0CAA0C,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAChG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEnC,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,CAAC,KAAK,CAChB;8DACsD,EACtD,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAClF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAE/C,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,kFAAkF,EAClF,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CACtB,CAAC;QAEF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAExE,oBAAoB;QACpB,MAAM,KAAK,CAAC,sDAAsD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAChC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChH,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7G,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAEnG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,wFAAwF,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACnI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/routes/crud.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+export declare const crudRouter: Hono<{
+    Variables: {
+        user: any;
+    };
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=crud.d.ts.map

package/dist/routes/crud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.d.ts","sourceRoot":"","sources":["../../src/routes/crud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,eAAO,MAAM,UAAU;eAAyB;QAAE,IAAI,EAAE,GAAG,CAAA;KAAE;yCAAK,CAAC"}