@btst/stack 2.12.2 → 3.0.0-rc.1

package/dist/shared/stack.C3GBG8in.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Comment status values
+ */
+type CommentStatus = "pending" | "approved" | "spam";
+/**
+ * A comment record as stored in the database
+ */
+type Comment = {
+    id: string;
+    resourceId: string;
+    resourceType: string;
+    parentId: string | null;
+    authorId: string;
+    body: string;
+    status: CommentStatus;
+    likes: number;
+    editedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+};
+/**
+ * A comment enriched with server-resolved author info and like status.
+ * All dates are ISO strings (safe for serialisation over HTTP / React Query cache).
+ */
+interface SerializedComment {
+    id: string;
+    resourceId: string;
+    resourceType: string;
+    parentId: string | null;
+    authorId: string;
+    /** Resolved from resolveUser(authorId). Falls back to "[deleted]" when user cannot be found. */
+    resolvedAuthorName: string;
+    /** Resolved avatar URL or null */
+    resolvedAvatarUrl: string | null;
+    body: string;
+    status: CommentStatus;
+    /** Denormalized counter — updated atomically on toggleLike */
+    likes: number;
+    /** True when the currentUserId query param matches an existing commentLike row */
+    isLikedByCurrentUser: boolean;
+    /** ISO string set when the comment body was edited; null for unedited comments */
+    editedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    /**
+     * Number of direct replies visible to the requesting user.
+     * Includes approved replies plus any pending replies authored by `currentUserId`.
+     * Always 0 for reply comments (non-null parentId).
+     */
+    replyCount: number;
+}
+/**
+ * Paginated list result for comments
+ */
+interface CommentListResult {
+    items: SerializedComment[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+
+export type { CommentListResult as C, SerializedComment as S, Comment as a };

package/dist/shared/stack.C4_gEENS.d.cts

@@ -0,0 +1,97 @@
+/**
+ * Shared auth contract types used by both the client provider
+ * (`@btst/stack/context`) and the backend (`@btst/stack/api`).
+ *
+ * This module is intentionally type-only so it can be imported from server
+ * and client code alike.
+ */
+/**
+ * The identity of the current user as resolved by an auth provider.
+ * Extra provider-specific fields are allowed.
+ */
+interface StackIdentity {
+    /** Unique user id */
+    id: string;
+    /** Display name */
+    name?: string;
+    /** Email address */
+    email?: string;
+    /** Avatar image URL */
+    image?: string;
+    /** Additional provider-specific fields */
+    [key: string]: unknown;
+}
+/**
+ * A permission check request: "can the current user perform `action` on
+ * `resource`?" (e.g. resource `"blog:post"`, action `"delete"`).
+ */
+interface CanParams {
+    /** The resource being accessed (e.g. "blog:post", "comments:moderate") */
+    resource: string;
+    /** The action being performed (e.g. "read", "create", "delete") */
+    action: string;
+    /** Optional extra parameters (e.g. the specific record id) */
+    params?: Record<string, unknown>;
+}
+/**
+ * Client-side auth provider, passed to `StackProvider` via the `auth` prop.
+ *
+ * All fields besides `getIdentity` are optional:
+ * - Without `can`, every permission check resolves to `true`.
+ * - Without `loginPath`, denied route access is not redirected.
+ *
+ * @example
+ * ```tsx
+ * const authProvider: StackAuthProvider = {
+ *   getIdentity: () => authClient.getSession().then((s) => s?.user ?? null),
+ *   can: ({ resource, action }) => checkPermission(resource, action),
+ *   loginPath: "/login",
+ * };
+ *
+ * <StackProvider auth={authProvider} ...>
+ * ```
+ */
+interface StackAuthProvider {
+    /**
+     * Resolve the current user's identity. Return `null` when unauthenticated.
+     */
+    getIdentity: () => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Permission check. When omitted, all `useCan()` / `<CanAccess>` checks
+     * resolve to `true`.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+    }) => Promise<boolean> | boolean;
+    /**
+     * Path unauthenticated users are redirected to when route-level permission
+     * checks deny access (e.g. "/login").
+     */
+    loginPath?: string;
+}
+/**
+ * Server-side auth provider, passed to `stack()` via the `auth` config option.
+ * `stack()` resolves the identity lazily and at most once per request; plugin
+ * lifecycle hooks can read it via `getRequestIdentity(headers)` from
+ * `@btst/stack/api`.
+ */
+interface StackServerAuthProvider {
+    /**
+     * Resolve the identity for an incoming request (e.g. from a session
+     * cookie). Return `null` when unauthenticated.
+     */
+    getIdentity: (ctx: {
+        headers: Headers;
+        request: Request;
+    }) => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Optional server-side permission check, for consumers and plugins that
+     * want to share one `can` implementation across lifecycle hooks.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+        headers: Headers;
+    }) => Promise<boolean> | boolean;
+}
+
+export type { CanParams as C, StackServerAuthProvider as S, StackAuthProvider as a, StackIdentity as b };

package/dist/shared/stack.C4_gEENS.d.mts

@@ -0,0 +1,97 @@
+/**
+ * Shared auth contract types used by both the client provider
+ * (`@btst/stack/context`) and the backend (`@btst/stack/api`).
+ *
+ * This module is intentionally type-only so it can be imported from server
+ * and client code alike.
+ */
+/**
+ * The identity of the current user as resolved by an auth provider.
+ * Extra provider-specific fields are allowed.
+ */
+interface StackIdentity {
+    /** Unique user id */
+    id: string;
+    /** Display name */
+    name?: string;
+    /** Email address */
+    email?: string;
+    /** Avatar image URL */
+    image?: string;
+    /** Additional provider-specific fields */
+    [key: string]: unknown;
+}
+/**
+ * A permission check request: "can the current user perform `action` on
+ * `resource`?" (e.g. resource `"blog:post"`, action `"delete"`).
+ */
+interface CanParams {
+    /** The resource being accessed (e.g. "blog:post", "comments:moderate") */
+    resource: string;
+    /** The action being performed (e.g. "read", "create", "delete") */
+    action: string;
+    /** Optional extra parameters (e.g. the specific record id) */
+    params?: Record<string, unknown>;
+}
+/**
+ * Client-side auth provider, passed to `StackProvider` via the `auth` prop.
+ *
+ * All fields besides `getIdentity` are optional:
+ * - Without `can`, every permission check resolves to `true`.
+ * - Without `loginPath`, denied route access is not redirected.
+ *
+ * @example
+ * ```tsx
+ * const authProvider: StackAuthProvider = {
+ *   getIdentity: () => authClient.getSession().then((s) => s?.user ?? null),
+ *   can: ({ resource, action }) => checkPermission(resource, action),
+ *   loginPath: "/login",
+ * };
+ *
+ * <StackProvider auth={authProvider} ...>
+ * ```
+ */
+interface StackAuthProvider {
+    /**
+     * Resolve the current user's identity. Return `null` when unauthenticated.
+     */
+    getIdentity: () => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Permission check. When omitted, all `useCan()` / `<CanAccess>` checks
+     * resolve to `true`.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+    }) => Promise<boolean> | boolean;
+    /**
+     * Path unauthenticated users are redirected to when route-level permission
+     * checks deny access (e.g. "/login").
+     */
+    loginPath?: string;
+}
+/**
+ * Server-side auth provider, passed to `stack()` via the `auth` config option.
+ * `stack()` resolves the identity lazily and at most once per request; plugin
+ * lifecycle hooks can read it via `getRequestIdentity(headers)` from
+ * `@btst/stack/api`.
+ */
+interface StackServerAuthProvider {
+    /**
+     * Resolve the identity for an incoming request (e.g. from a session
+     * cookie). Return `null` when unauthenticated.
+     */
+    getIdentity: (ctx: {
+        headers: Headers;
+        request: Request;
+    }) => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Optional server-side permission check, for consumers and plugins that
+     * want to share one `can` implementation across lifecycle hooks.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+        headers: Headers;
+    }) => Promise<boolean> | boolean;
+}
+
+export type { CanParams as C, StackServerAuthProvider as S, StackAuthProvider as a, StackIdentity as b };

package/dist/shared/stack.C4_gEENS.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Shared auth contract types used by both the client provider
+ * (`@btst/stack/context`) and the backend (`@btst/stack/api`).
+ *
+ * This module is intentionally type-only so it can be imported from server
+ * and client code alike.
+ */
+/**
+ * The identity of the current user as resolved by an auth provider.
+ * Extra provider-specific fields are allowed.
+ */
+interface StackIdentity {
+    /** Unique user id */
+    id: string;
+    /** Display name */
+    name?: string;
+    /** Email address */
+    email?: string;
+    /** Avatar image URL */
+    image?: string;
+    /** Additional provider-specific fields */
+    [key: string]: unknown;
+}
+/**
+ * A permission check request: "can the current user perform `action` on
+ * `resource`?" (e.g. resource `"blog:post"`, action `"delete"`).
+ */
+interface CanParams {
+    /** The resource being accessed (e.g. "blog:post", "comments:moderate") */
+    resource: string;
+    /** The action being performed (e.g. "read", "create", "delete") */
+    action: string;
+    /** Optional extra parameters (e.g. the specific record id) */
+    params?: Record<string, unknown>;
+}
+/**
+ * Client-side auth provider, passed to `StackProvider` via the `auth` prop.
+ *
+ * All fields besides `getIdentity` are optional:
+ * - Without `can`, every permission check resolves to `true`.
+ * - Without `loginPath`, denied route access is not redirected.
+ *
+ * @example
+ * ```tsx
+ * const authProvider: StackAuthProvider = {
+ *   getIdentity: () => authClient.getSession().then((s) => s?.user ?? null),
+ *   can: ({ resource, action }) => checkPermission(resource, action),
+ *   loginPath: "/login",
+ * };
+ *
+ * <StackProvider auth={authProvider} ...>
+ * ```
+ */
+interface StackAuthProvider {
+    /**
+     * Resolve the current user's identity. Return `null` when unauthenticated.
+     */
+    getIdentity: () => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Permission check. When omitted, all `useCan()` / `<CanAccess>` checks
+     * resolve to `true`.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+    }) => Promise<boolean> | boolean;
+    /**
+     * Path unauthenticated users are redirected to when route-level permission
+     * checks deny access (e.g. "/login").
+     */
+    loginPath?: string;
+}
+/**
+ * Server-side auth provider, passed to `stack()` via the `auth` config option.
+ * `stack()` resolves the identity lazily and at most once per request; plugin
+ * lifecycle hooks can read it via `getRequestIdentity(headers)` from
+ * `@btst/stack/api`.
+ */
+interface StackServerAuthProvider {
+    /**
+     * Resolve the identity for an incoming request (e.g. from a session
+     * cookie). Return `null` when unauthenticated.
+     */
+    getIdentity: (ctx: {
+        headers: Headers;
+        request: Request;
+    }) => Promise<StackIdentity | null> | StackIdentity | null;
+    /**
+     * Optional server-side permission check, for consumers and plugins that
+     * want to share one `can` implementation across lifecycle hooks.
+     */
+    can?: (params: CanParams & {
+        identity: StackIdentity | null;
+        headers: Headers;
+    }) => Promise<boolean> | boolean;
+}
+
+export type { CanParams as C, StackServerAuthProvider as S, StackAuthProvider as a, StackIdentity as b };

package/dist/shared/{stack.BrNVff5Q.d.cts → stack.C5Y5lViI.d.cts}

@@ -1,15 +1,84 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import { S as StorageAdapter, b as S3UploadToken } from './stack.lkebw2nj.cjs';
-import { d as AssetListResult, l as listAssets, a as listFolders, A as AssetListParams } from './stack.jU2iG86n.cjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { A as Asset, F as Folder } from './stack.BMlLOMED.cjs';
 import { DBAdapter } from '@btst/db';
 
+/**
+ * Parameters for filtering and paginating the asset list.
+ */
+interface AssetListParams {
+    folderId?: string;
+    mimeType?: string;
+    query?: string;
+    offset?: number;
+    limit?: number;
+    tenantId?: string;
+}
+/**
+ * Paginated result returned by {@link listAssets}.
+ */
+interface AssetListResult {
+    items: Asset[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Parameters for filtering the folder list.
+ */
+interface FolderListParams {
+    parentId?: string | null;
+    tenantId?: string;
+}
+/**
+ * Retrieve all assets matching optional filter criteria.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ */
+declare function listAssets(adapter: DBAdapter, params?: AssetListParams): Promise<AssetListResult>;
+/**
+ * Retrieve a single asset by its ID.
+ * Returns `null` if no asset is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getAssetById(adapter: DBAdapter, id: string): Promise<Asset | null>;
+/**
+ * Retrieve all folders, optionally filtered by `parentId`.
+ * Pass `null` to list root-level folders (those without a parent).
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function listFolders(adapter: DBAdapter, params?: FolderListParams): Promise<Folder[]>;
+/**
+ * Retrieve a single folder by its ID.
+ * Returns `null` if no folder is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getFolderById(adapter: DBAdapter, id: string): Promise<Folder | null>;
+/**
+ * Find a single folder by name, optionally scoped to a specific parent and/or tenant.
+ * Pass `null` for `parentId` to search only root-level folders.
+ * Pass `undefined` for `parentId` to search regardless of parent.
+ * Returns `null` if no matching folder is found.
+ *
+ * Pure DB function — no hooks, no HTTP context.
+ * The caller is responsible for any access-control checks.
+ */
+declare function getFolderByName(adapter: DBAdapter, name: string, parentId?: string | null, tenantId?: string): Promise<Folder | null>;
+
 declare const AssetListQuerySchema: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodString>;
     mimeType: z.ZodOptional<z.ZodString>;
-    query: z.ZodOptional<z.ZodString>;
+    query: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
     offset: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
@@ -140,7 +209,7 @@ interface MediaBackendHooks {
      * Called before listing folders. Throw to deny access.
      */
     onBeforeListFolders?: (filter: {
-        parentId?: string;
+        parentId?: string | null;
     }, context: MediaApiContext) => Promise<void> | void;
     /**
      * Called before creating a folder. Throw to deny access.
@@ -299,8 +368,12 @@ declare const mediaBackendPlugin: (config: MediaBackendConfig) => _btst_stack_pl
         method: "GET";
     } & {
         query: better_call.StandardSchemaV1<{
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }, {
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }>;
     }, Folder[]>;
@@ -375,12 +448,14 @@ interface AssetListDiscriminator {
     offset: number | undefined;
 }
 declare function assetListDiscriminator(params?: AssetListParams): AssetListDiscriminator;
+type FolderListDiscriminator = "all" | "root" | string;
+declare function folderListDiscriminator(parentId?: string | null): FolderListDiscriminator;
 /** Full query key builders — use these with `queryClient.setQueryData()`. */
 declare const MEDIA_QUERY_KEYS: {
-    assetsList: (params?: AssetListParams) => readonly ["media", "assets", "list", AssetListDiscriminator];
-    assetDetail: (id: string) => readonly ["media", "assets", "detail", string];
-    foldersList: (parentId?: string | null) => readonly ["media", "folders", "list", string];
+    assetsList: (params?: AssetListParams) => readonly ["mediaAssets", "list", AssetListDiscriminator];
+    assetDetail: (id: string) => readonly ["mediaAssets", "detail", string];
+    foldersList: (parentId?: string | null) => readonly ["mediaFolders", "list", string];
 };
 
-export { MEDIA_QUERY_KEYS as M, createFolder as a, deleteFolder as b, createAsset as c, deleteAsset as d, assetListDiscriminator as f, mediaBackendPlugin as m, updateAsset as u };
-export type { AssetListDiscriminator as A, CreateAssetInput as C, UpdateAssetInput as U, CreateFolderInput as e, MediaApiContext as g, MediaBackendHooks as h, MediaBackendConfig as i, MediaApiRouter as j };
+export { MEDIA_QUERY_KEYS as M, listFolders as a, getFolderById as b, getFolderByName as c, createAsset as e, deleteAsset as f, getAssetById as g, createFolder as h, deleteFolder as i, assetListDiscriminator as k, listAssets as l, folderListDiscriminator as m, mediaBackendPlugin as q, updateAsset as u };
+export type { AssetListParams as A, CreateAssetInput as C, FolderListParams as F, UpdateAssetInput as U, AssetListResult as d, CreateFolderInput as j, MediaApiContext as n, MediaBackendHooks as o, MediaBackendConfig as p, MediaApiRouter as r, AssetListDiscriminator as s };

package/dist/shared/{stack.COetIi--.d.ts → stack.C8SwdUz8.d.ts}

@@ -1,15 +1,84 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import { S as StorageAdapter, b as S3UploadToken } from './stack.lkebw2nj.js';
-import { d as AssetListResult, l as listAssets, a as listFolders, A as AssetListParams } from './stack.DD-ZORI7.js';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { A as Asset, F as Folder } from './stack.BMlLOMED.js';
 import { DBAdapter } from '@btst/db';
 
+/**
+ * Parameters for filtering and paginating the asset list.
+ */
+interface AssetListParams {
+    folderId?: string;
+    mimeType?: string;
+    query?: string;
+    offset?: number;
+    limit?: number;
+    tenantId?: string;
+}
+/**
+ * Paginated result returned by {@link listAssets}.
+ */
+interface AssetListResult {
+    items: Asset[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Parameters for filtering the folder list.
+ */
+interface FolderListParams {
+    parentId?: string | null;
+    tenantId?: string;
+}
+/**
+ * Retrieve all assets matching optional filter criteria.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ */
+declare function listAssets(adapter: DBAdapter, params?: AssetListParams): Promise<AssetListResult>;
+/**
+ * Retrieve a single asset by its ID.
+ * Returns `null` if no asset is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getAssetById(adapter: DBAdapter, id: string): Promise<Asset | null>;
+/**
+ * Retrieve all folders, optionally filtered by `parentId`.
+ * Pass `null` to list root-level folders (those without a parent).
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function listFolders(adapter: DBAdapter, params?: FolderListParams): Promise<Folder[]>;
+/**
+ * Retrieve a single folder by its ID.
+ * Returns `null` if no folder is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getFolderById(adapter: DBAdapter, id: string): Promise<Folder | null>;
+/**
+ * Find a single folder by name, optionally scoped to a specific parent and/or tenant.
+ * Pass `null` for `parentId` to search only root-level folders.
+ * Pass `undefined` for `parentId` to search regardless of parent.
+ * Returns `null` if no matching folder is found.
+ *
+ * Pure DB function — no hooks, no HTTP context.
+ * The caller is responsible for any access-control checks.
+ */
+declare function getFolderByName(adapter: DBAdapter, name: string, parentId?: string | null, tenantId?: string): Promise<Folder | null>;
+
 declare const AssetListQuerySchema: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodString>;
     mimeType: z.ZodOptional<z.ZodString>;
-    query: z.ZodOptional<z.ZodString>;
+    query: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
     offset: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
@@ -140,7 +209,7 @@ interface MediaBackendHooks {
      * Called before listing folders. Throw to deny access.
      */
     onBeforeListFolders?: (filter: {
-        parentId?: string;
+        parentId?: string | null;
     }, context: MediaApiContext) => Promise<void> | void;
     /**
      * Called before creating a folder. Throw to deny access.
@@ -299,8 +368,12 @@ declare const mediaBackendPlugin: (config: MediaBackendConfig) => _btst_stack_pl
         method: "GET";
     } & {
         query: better_call.StandardSchemaV1<{
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }, {
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }>;
     }, Folder[]>;
@@ -375,12 +448,14 @@ interface AssetListDiscriminator {
     offset: number | undefined;
 }
 declare function assetListDiscriminator(params?: AssetListParams): AssetListDiscriminator;
+type FolderListDiscriminator = "all" | "root" | string;
+declare function folderListDiscriminator(parentId?: string | null): FolderListDiscriminator;
 /** Full query key builders — use these with `queryClient.setQueryData()`. */
 declare const MEDIA_QUERY_KEYS: {
-    assetsList: (params?: AssetListParams) => readonly ["media", "assets", "list", AssetListDiscriminator];
-    assetDetail: (id: string) => readonly ["media", "assets", "detail", string];
-    foldersList: (parentId?: string | null) => readonly ["media", "folders", "list", string];
+    assetsList: (params?: AssetListParams) => readonly ["mediaAssets", "list", AssetListDiscriminator];
+    assetDetail: (id: string) => readonly ["mediaAssets", "detail", string];
+    foldersList: (parentId?: string | null) => readonly ["mediaFolders", "list", string];
 };
 
-export { MEDIA_QUERY_KEYS as M, createFolder as a, deleteFolder as b, createAsset as c, deleteAsset as d, assetListDiscriminator as f, mediaBackendPlugin as m, updateAsset as u };
-export type { AssetListDiscriminator as A, CreateAssetInput as C, UpdateAssetInput as U, CreateFolderInput as e, MediaApiContext as g, MediaBackendHooks as h, MediaBackendConfig as i, MediaApiRouter as j };
+export { MEDIA_QUERY_KEYS as M, listFolders as a, getFolderById as b, getFolderByName as c, createAsset as e, deleteAsset as f, getAssetById as g, createFolder as h, deleteFolder as i, assetListDiscriminator as k, listAssets as l, folderListDiscriminator as m, mediaBackendPlugin as q, updateAsset as u };
+export type { AssetListParams as A, CreateAssetInput as C, FolderListParams as F, UpdateAssetInput as U, AssetListResult as d, CreateFolderInput as j, MediaApiContext as n, MediaBackendHooks as o, MediaBackendConfig as p, MediaApiRouter as r, AssetListDiscriminator as s };

package/dist/shared/{stack.CQnwAN7x.d.cts → stack.CBsp9rDM.d.cts}

@@ -1,6 +1,7 @@
 import { Route, createRouter } from '@btst/yar';
 import { DBAdapter, DbPlugin, DatabaseDefinition } from '@btst/db';
 import { Endpoint, Router } from 'better-call';
+import { S as StackServerAuthProvider } from './stack.C4_gEENS.cjs';
 
 /**
  * Context passed to backend plugins during route creation
@@ -13,6 +14,8 @@ interface StackContext {
     basePath: string;
     /** The database adapter */
     adapter: DBAdapter;
+    /** The server-side auth provider, when configured on `stack()` */
+    auth?: StackServerAuthProvider;
 }
 /**
  * Context passed to client plugins during route creation
@@ -100,6 +103,13 @@ interface BackendLibConfig<TPlugins extends Record<string, BackendPlugin<any, an
     dbSchema?: DatabaseDefinition;
     plugins: TPlugins;
     adapter: (db: DatabaseDefinition) => DBAdapter;
+    /**
+     * Optional server-side auth provider. When set, `stack()` resolves the
+     * request identity lazily and at most once per request; plugin lifecycle
+     * hooks and route handlers can read it via `getRequestIdentity(headers)`
+     * from `@btst/stack/api`. When omitted, behavior is unchanged.
+     */
+    auth?: StackServerAuthProvider;
 }
 /**
  * Configuration for creating the client library