@btst/stack 2.12.2 → 3.0.0-rc.2

package/dist/shared/{stack.BrNVff5Q.d.cts → stack.C5Y5lViI.d.cts}

@@ -1,15 +1,84 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import { S as StorageAdapter, b as S3UploadToken } from './stack.lkebw2nj.cjs';
-import { d as AssetListResult, l as listAssets, a as listFolders, A as AssetListParams } from './stack.jU2iG86n.cjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { A as Asset, F as Folder } from './stack.BMlLOMED.cjs';
 import { DBAdapter } from '@btst/db';
 
+/**
+ * Parameters for filtering and paginating the asset list.
+ */
+interface AssetListParams {
+    folderId?: string;
+    mimeType?: string;
+    query?: string;
+    offset?: number;
+    limit?: number;
+    tenantId?: string;
+}
+/**
+ * Paginated result returned by {@link listAssets}.
+ */
+interface AssetListResult {
+    items: Asset[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Parameters for filtering the folder list.
+ */
+interface FolderListParams {
+    parentId?: string | null;
+    tenantId?: string;
+}
+/**
+ * Retrieve all assets matching optional filter criteria.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ */
+declare function listAssets(adapter: DBAdapter, params?: AssetListParams): Promise<AssetListResult>;
+/**
+ * Retrieve a single asset by its ID.
+ * Returns `null` if no asset is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getAssetById(adapter: DBAdapter, id: string): Promise<Asset | null>;
+/**
+ * Retrieve all folders, optionally filtered by `parentId`.
+ * Pass `null` to list root-level folders (those without a parent).
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function listFolders(adapter: DBAdapter, params?: FolderListParams): Promise<Folder[]>;
+/**
+ * Retrieve a single folder by its ID.
+ * Returns `null` if no folder is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getFolderById(adapter: DBAdapter, id: string): Promise<Folder | null>;
+/**
+ * Find a single folder by name, optionally scoped to a specific parent and/or tenant.
+ * Pass `null` for `parentId` to search only root-level folders.
+ * Pass `undefined` for `parentId` to search regardless of parent.
+ * Returns `null` if no matching folder is found.
+ *
+ * Pure DB function — no hooks, no HTTP context.
+ * The caller is responsible for any access-control checks.
+ */
+declare function getFolderByName(adapter: DBAdapter, name: string, parentId?: string | null, tenantId?: string): Promise<Folder | null>;
+
 declare const AssetListQuerySchema: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodString>;
     mimeType: z.ZodOptional<z.ZodString>;
-    query: z.ZodOptional<z.ZodString>;
+    query: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
     offset: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
@@ -140,7 +209,7 @@ interface MediaBackendHooks {
      * Called before listing folders. Throw to deny access.
      */
     onBeforeListFolders?: (filter: {
-        parentId?: string;
+        parentId?: string | null;
     }, context: MediaApiContext) => Promise<void> | void;
     /**
      * Called before creating a folder. Throw to deny access.
@@ -299,8 +368,12 @@ declare const mediaBackendPlugin: (config: MediaBackendConfig) => _btst_stack_pl
         method: "GET";
     } & {
         query: better_call.StandardSchemaV1<{
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }, {
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }>;
     }, Folder[]>;
@@ -375,12 +448,14 @@ interface AssetListDiscriminator {
     offset: number | undefined;
 }
 declare function assetListDiscriminator(params?: AssetListParams): AssetListDiscriminator;
+type FolderListDiscriminator = "all" | "root" | string;
+declare function folderListDiscriminator(parentId?: string | null): FolderListDiscriminator;
 /** Full query key builders — use these with `queryClient.setQueryData()`. */
 declare const MEDIA_QUERY_KEYS: {
-    assetsList: (params?: AssetListParams) => readonly ["media", "assets", "list", AssetListDiscriminator];
-    assetDetail: (id: string) => readonly ["media", "assets", "detail", string];
-    foldersList: (parentId?: string | null) => readonly ["media", "folders", "list", string];
+    assetsList: (params?: AssetListParams) => readonly ["mediaAssets", "list", AssetListDiscriminator];
+    assetDetail: (id: string) => readonly ["mediaAssets", "detail", string];
+    foldersList: (parentId?: string | null) => readonly ["mediaFolders", "list", string];
 };
 
-export { MEDIA_QUERY_KEYS as M, createFolder as a, deleteFolder as b, createAsset as c, deleteAsset as d, assetListDiscriminator as f, mediaBackendPlugin as m, updateAsset as u };
-export type { AssetListDiscriminator as A, CreateAssetInput as C, UpdateAssetInput as U, CreateFolderInput as e, MediaApiContext as g, MediaBackendHooks as h, MediaBackendConfig as i, MediaApiRouter as j };
+export { MEDIA_QUERY_KEYS as M, listFolders as a, getFolderById as b, getFolderByName as c, createAsset as e, deleteAsset as f, getAssetById as g, createFolder as h, deleteFolder as i, assetListDiscriminator as k, listAssets as l, folderListDiscriminator as m, mediaBackendPlugin as q, updateAsset as u };
+export type { AssetListParams as A, CreateAssetInput as C, FolderListParams as F, UpdateAssetInput as U, AssetListResult as d, CreateFolderInput as j, MediaApiContext as n, MediaBackendHooks as o, MediaBackendConfig as p, MediaApiRouter as r, AssetListDiscriminator as s };

package/dist/shared/{stack.COetIi--.d.ts → stack.C8SwdUz8.d.ts}

@@ -1,15 +1,84 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import { S as StorageAdapter, b as S3UploadToken } from './stack.lkebw2nj.js';
-import { d as AssetListResult, l as listAssets, a as listFolders, A as AssetListParams } from './stack.DD-ZORI7.js';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { A as Asset, F as Folder } from './stack.BMlLOMED.js';
 import { DBAdapter } from '@btst/db';
 
+/**
+ * Parameters for filtering and paginating the asset list.
+ */
+interface AssetListParams {
+    folderId?: string;
+    mimeType?: string;
+    query?: string;
+    offset?: number;
+    limit?: number;
+    tenantId?: string;
+}
+/**
+ * Paginated result returned by {@link listAssets}.
+ */
+interface AssetListResult {
+    items: Asset[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Parameters for filtering the folder list.
+ */
+interface FolderListParams {
+    parentId?: string | null;
+    tenantId?: string;
+}
+/**
+ * Retrieve all assets matching optional filter criteria.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ */
+declare function listAssets(adapter: DBAdapter, params?: AssetListParams): Promise<AssetListResult>;
+/**
+ * Retrieve a single asset by its ID.
+ * Returns `null` if no asset is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getAssetById(adapter: DBAdapter, id: string): Promise<Asset | null>;
+/**
+ * Retrieve all folders, optionally filtered by `parentId`.
+ * Pass `null` to list root-level folders (those without a parent).
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function listFolders(adapter: DBAdapter, params?: FolderListParams): Promise<Folder[]>;
+/**
+ * Retrieve a single folder by its ID.
+ * Returns `null` if no folder is found.
+ * Pure DB function — no hooks, no HTTP context.
+ *
+ * @remarks **Security:** Authorization hooks are NOT called.
+ */
+declare function getFolderById(adapter: DBAdapter, id: string): Promise<Folder | null>;
+/**
+ * Find a single folder by name, optionally scoped to a specific parent and/or tenant.
+ * Pass `null` for `parentId` to search only root-level folders.
+ * Pass `undefined` for `parentId` to search regardless of parent.
+ * Returns `null` if no matching folder is found.
+ *
+ * Pure DB function — no hooks, no HTTP context.
+ * The caller is responsible for any access-control checks.
+ */
+declare function getFolderByName(adapter: DBAdapter, name: string, parentId?: string | null, tenantId?: string): Promise<Folder | null>;
+
 declare const AssetListQuerySchema: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodString>;
     mimeType: z.ZodOptional<z.ZodString>;
-    query: z.ZodOptional<z.ZodString>;
+    query: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
     offset: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
@@ -140,7 +209,7 @@ interface MediaBackendHooks {
      * Called before listing folders. Throw to deny access.
      */
     onBeforeListFolders?: (filter: {
-        parentId?: string;
+        parentId?: string | null;
     }, context: MediaApiContext) => Promise<void> | void;
     /**
      * Called before creating a folder. Throw to deny access.
@@ -299,8 +368,12 @@ declare const mediaBackendPlugin: (config: MediaBackendConfig) => _btst_stack_pl
         method: "GET";
     } & {
         query: better_call.StandardSchemaV1<{
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }, {
+            parentId: string | null | undefined;
+        } | {
             parentId?: string | undefined;
         }>;
     }, Folder[]>;
@@ -375,12 +448,14 @@ interface AssetListDiscriminator {
     offset: number | undefined;
 }
 declare function assetListDiscriminator(params?: AssetListParams): AssetListDiscriminator;
+type FolderListDiscriminator = "all" | "root" | string;
+declare function folderListDiscriminator(parentId?: string | null): FolderListDiscriminator;
 /** Full query key builders — use these with `queryClient.setQueryData()`. */
 declare const MEDIA_QUERY_KEYS: {
-    assetsList: (params?: AssetListParams) => readonly ["media", "assets", "list", AssetListDiscriminator];
-    assetDetail: (id: string) => readonly ["media", "assets", "detail", string];
-    foldersList: (parentId?: string | null) => readonly ["media", "folders", "list", string];
+    assetsList: (params?: AssetListParams) => readonly ["mediaAssets", "list", AssetListDiscriminator];
+    assetDetail: (id: string) => readonly ["mediaAssets", "detail", string];
+    foldersList: (parentId?: string | null) => readonly ["mediaFolders", "list", string];
 };
 
-export { MEDIA_QUERY_KEYS as M, createFolder as a, deleteFolder as b, createAsset as c, deleteAsset as d, assetListDiscriminator as f, mediaBackendPlugin as m, updateAsset as u };
-export type { AssetListDiscriminator as A, CreateAssetInput as C, UpdateAssetInput as U, CreateFolderInput as e, MediaApiContext as g, MediaBackendHooks as h, MediaBackendConfig as i, MediaApiRouter as j };
+export { MEDIA_QUERY_KEYS as M, listFolders as a, getFolderById as b, getFolderByName as c, createAsset as e, deleteAsset as f, getAssetById as g, createFolder as h, deleteFolder as i, assetListDiscriminator as k, listAssets as l, folderListDiscriminator as m, mediaBackendPlugin as q, updateAsset as u };
+export type { AssetListParams as A, CreateAssetInput as C, FolderListParams as F, UpdateAssetInput as U, AssetListResult as d, CreateFolderInput as j, MediaApiContext as n, MediaBackendHooks as o, MediaBackendConfig as p, MediaApiRouter as r, AssetListDiscriminator as s };

package/dist/shared/{stack.CQnwAN7x.d.cts → stack.CBsp9rDM.d.cts}

@@ -1,6 +1,7 @@
 import { Route, createRouter } from '@btst/yar';
 import { DBAdapter, DbPlugin, DatabaseDefinition } from '@btst/db';
 import { Endpoint, Router } from 'better-call';
+import { S as StackServerAuthProvider } from './stack.C4_gEENS.cjs';
 
 /**
  * Context passed to backend plugins during route creation
@@ -13,6 +14,8 @@ interface StackContext {
     basePath: string;
     /** The database adapter */
     adapter: DBAdapter;
+    /** The server-side auth provider, when configured on `stack()` */
+    auth?: StackServerAuthProvider;
 }
 /**
  * Context passed to client plugins during route creation
@@ -100,6 +103,13 @@ interface BackendLibConfig<TPlugins extends Record<string, BackendPlugin<any, an
     dbSchema?: DatabaseDefinition;
     plugins: TPlugins;
     adapter: (db: DatabaseDefinition) => DBAdapter;
+    /**
+     * Optional server-side auth provider. When set, `stack()` resolves the
+     * request identity lazily and at most once per request; plugin lifecycle
+     * hooks and route handlers can read it via `getRequestIdentity(headers)`
+     * from `@btst/stack/api`. When omitted, behavior is unchanged.
+     */
+    auth?: StackServerAuthProvider;
 }
 /**
  * Configuration for creating the client library