@env-hopper/backend-core 2.0.1-alpha.1 → 2.0.1-alpha.10

package/dist/index.d.ts

@@ -1,13 +1,14 @@
-import * as _trpc_server0 from "@trpc/server";
-import { TRPCRootObject } from "@trpc/server";
 import * as _prisma_client0 from "@prisma/client";
 import { Prisma, PrismaClient } from "@prisma/client";
+import * as _trpc_server0 from "@trpc/server";
+import { TRPCRootObject } from "@trpc/server";
 import * as better_auth0 from "better-auth";
 import { BetterAuthOptions, BetterAuthPlugin } from "better-auth";
 import { LanguageModel, Tool, tool } from "ai";
-import * as _prisma_client_runtime_library0 from "@prisma/client/runtime/library";
-import { DefaultWithOverridesAndTemplate } from "@env-hopper/shared-core";
 import { Express, Request, Response, Router } from "express";
+import { DefaultWithOverridesAndTemplate } from "@env-hopper/shared-core";
+import { User as User$1 } from "better-auth/types";
+import * as _prisma_client_runtime_library0 from "@prisma/client/runtime/library";
 
 //#region src/types/common/sharedTypes.d.ts
 interface EhMetaDictionary {
@@ -223,35 +224,139 @@ interface User {
   displayName: string;
 }
 //#endregion
-//#region src/types/common/appCatalogTypes.d.ts
+//#region src/types/common/approvalMethodTypes.d.ts
 /**
- * App Catalog Types - Universal Software Access Request Catalog
+ * Approval Method Types
  *
- * These types define a standardized catalog of software applications and their
- * access methods. The typing system is designed to be universal across companies,
- * abstracting away specific tools (Jira, Slack, etc.) into generic categories.
+ * Global approval method templates that apps can link to.
+ * Each method has a type (service, personTeam, custom) with type-specific config.
  */
+type ApprovalMethodType = 'service' | 'personTeam' | 'custom';
 /**
- * Bot provider configuration - for chat/AI bots that handle access requests
+ * Contact for reaching out (not necessarily the approver)
  */
-interface BotProvider {
-  id: string;
-  name: string;
-  platform?: 'slack' | 'teams' | 'web' | 'other';
+interface ReachOutContact {
+  displayName: string;
+  contact: string;
+}
+/**
+ * Service type config - for bots, ticketing systems, self-service portals
+ */
+interface ServiceConfig {
   url?: string;
   icon?: string;
-  instructions?: string;
 }
 /**
- * Ticketing system provider configuration
+ * Person/Team type config - for human approvers
+ */
+interface PersonTeamConfig {
+  reachOutContacts?: Array<ReachOutContact>;
+}
+/**
+ * Custom type config - generic, no additional fields
+ */
+interface CustomConfig {}
+/**
+ * Union of all config types
  */
-interface TicketingProvider {
+type ApprovalMethodConfig = ServiceConfig | PersonTeamConfig | CustomConfig;
+/**
+ * Approval Method - stored in DbApprovalMethod
+ */
+interface ApprovalMethod {
   id: string;
+  type: ApprovalMethodType;
+  displayName: string;
+  config?: ApprovalMethodConfig;
+  createdAt?: Date;
+  updatedAt?: Date;
+}
+/**
+ * Role that can be requested for an app
+ */
+interface AppRole {
   name: string;
-  system: 'jira' | 'servicenow' | 'zendesk' | 'freshdesk' | 'other';
-  baseUrl: string;
-  icon?: string;
+  description?: string;
 }
+/**
+ * Approver contact (person who approves, may differ from reach-out contact)
+ */
+interface ApproverContact {
+  displayName: string;
+  contact?: string;
+}
+/**
+ * URL link with optional label
+ */
+interface ApprovalUrl {
+  label?: string;
+  url: string;
+}
+/**
+ * Per-app approval details - stored as JSON in DbAppForCatalog
+ */
+interface AppApprovalDetails {
+  approvalMethodId: string;
+  comments?: string;
+  requestPrompt?: string;
+  postApprovalInstructions?: string;
+  roles?: Array<AppRole>;
+  approvers?: Array<ApproverContact>;
+  urls?: Array<ApprovalUrl>;
+  whoToReachOut?: string;
+}
+interface CreateApprovalMethodInput {
+  type: ApprovalMethodType;
+  displayName: string;
+  config?: ApprovalMethodConfig;
+}
+interface UpdateApprovalMethodInput {
+  id: string;
+  type?: ApprovalMethodType;
+  displayName?: string;
+  config?: ApprovalMethodConfig;
+}
+//#endregion
+//#region src/types/common/appCatalogTypes.d.ts
+/**
+ * Common fields for all approver types
+ */
+interface BaseApprover {
+  comment?: string;
+  roles?: Array<AppRole>;
+  approvalPolicy?: string;
+  postApprovalInstructions?: string;
+  seeMoreUrls?: Array<string>;
+}
+/**
+ * Bot approver configuration for an app
+ */
+interface BotApprover extends BaseApprover {
+  type: 'bot';
+  url?: string;
+  prompt?: string;
+}
+/**
+ * Ticket approver configuration for an app
+ */
+interface TicketApprover extends BaseApprover {
+  type: 'ticket';
+  url?: string;
+  requestFormTemplate?: string;
+}
+/**
+ * Person/Group approver configuration for an app
+ */
+interface PersonApprover extends BaseApprover {
+  type: 'person';
+  email?: string;
+  url?: string;
+  description?: string;
+}
+/**
+ * Union of all approver types
+ */
+type Approver = BotApprover | TicketApprover | PersonApprover;
 /**
  * Bot-based access - request access through a chat bot
  */
@@ -311,21 +416,6 @@ interface ManualAccess {
  * Union type for all access methods
  */
 type AccessMethod = BotAccess | TicketingAccess | EmailAccess | SelfServiceAccess | DocumentationAccess | ManualAccess;
-/**
- * Approver information for apps that require specific approval
- */
-interface Approver {
-  name: string;
-  email: string;
-}
-/**
- * Available roles for an application
- */
-interface AppRole {
-  id: string;
-  name: string;
-  description?: string;
-}
 /**
  * Application entry in the catalog
  */
@@ -336,8 +426,7 @@ interface AppForCatalog {
   description?: string;
   access?: AccessMethod;
   teams?: Array<string>;
-  roles?: Array<AppRole>;
-  approver?: Approver;
+  approvalDetails?: AppApprovalDetails;
   notes?: string;
   tags?: Array<string>;
   appUrl?: string;
@@ -418,6 +507,23 @@ interface EhBackendDeployment {
   version: EhBackendDataVersion;
 }
 //#endregion
+//#region src/server/ehTrpcContext.d.ts
+interface EhTrpcContext {
+  companySpecificBackend: EhBackendCompanySpecificBackend;
+  user: User$1 | null;
+  adminGroups: Array<string>;
+}
+interface EhTrpcContextOptions {
+  companySpecificBackend: EhBackendCompanySpecificBackend;
+  user?: User$1 | null;
+  adminGroups: Array<string>;
+}
+declare function createEhTrpcContext({
+  companySpecificBackend,
+  user,
+  adminGroups
+}: EhTrpcContextOptions): EhTrpcContext;
+//#endregion
 //#region src/modules/auth/auth.d.ts
 interface AuthConfig {
   appName?: string;
@@ -455,17 +561,6 @@ declare function createAuth(config: AuthConfig): better_auth0.Auth<{
 }>;
 type BetterAuth = ReturnType<typeof createAuth>;
 //#endregion
-//#region src/server/ehTrpcContext.d.ts
-interface EhTrpcContext {
-  companySpecificBackend: EhBackendCompanySpecificBackend;
-}
-interface EhTrpcContextOptions {
-  companySpecificBackend: EhBackendCompanySpecificBackend;
-}
-declare function createEhTrpcContext({
-  companySpecificBackend
-}: EhTrpcContextOptions): EhTrpcContext;
-//#endregion
 //#region src/server/controller.d.ts
 /**
  * Create the main tRPC router with optional auth instance
@@ -473,19 +568,26 @@ declare function createEhTrpcContext({
  */
 declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRouter<{
   ctx: EhTrpcContext;
-  meta: {};
+  meta: object;
   errorShape: _trpc_server0.TRPCDefaultErrorShape;
   transformer: false;
 }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
   bootstrap: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: BootstrapConfigData;
-    meta: {};
+    meta: object;
+  }>;
+  authConfig: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: {
+      adminGroups: string[];
+    };
+    meta: object;
   }>;
   availabilityMatrix: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: AvailabilityMatrixData;
-    meta: {};
+    meta: object;
   }>;
   tryFindRenameRule: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -493,17 +595,17 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       resourceSlug?: string | undefined;
     };
     output: false | RenameRule;
-    meta: {};
+    meta: object;
   }>;
   resourceJumps: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: ResourceJumpsData;
-    meta: {};
+    meta: object;
   }>;
   resourceJumpsExtended: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: ResourceJumpsExtendedData;
-    meta: {};
+    meta: object;
   }>;
   resourceJumpBySlugAndEnv: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -511,16 +613,16 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       envSlug: string;
     };
     output: ResourceJumpsData;
-    meta: {};
+    meta: object;
   }>;
   appCatalog: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: AppCatalogData;
-    meta: {};
+    meta: object;
   }>;
   icon: _trpc_server0.TRPCBuiltRouter<{
     ctx: EhTrpcContext;
-    meta: {};
+    meta: object;
     errorShape: _trpc_server0.TRPCDefaultErrorShape;
     transformer: false;
   }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
@@ -528,13 +630,13 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       input: void;
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         mimeType: string;
         fileSize: number;
-        createdAt: Date;
-        updatedAt: Date;
       }[];
-      meta: {};
+      meta: object;
     }>;
     getOne: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -542,18 +644,13 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
-        content: _prisma_client_runtime_library0.Bytes;
         mimeType: string;
         fileSize: number;
-        assetType: _prisma_client0.$Enums.AssetType;
-        checksum: string;
-        width: number | null;
-        height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       } | null;
-      meta: {};
+      meta: object;
     }>;
     create: _trpc_server0.TRPCMutationProcedure<{
       input: {
@@ -564,6 +661,8 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         content: _prisma_client_runtime_library0.Bytes;
         mimeType: string;
@@ -572,10 +671,8 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         checksum: string;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       };
-      meta: {};
+      meta: object;
     }>;
     update: _trpc_server0.TRPCMutationProcedure<{
       input: {
@@ -587,6 +684,8 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         content: _prisma_client_runtime_library0.Bytes;
         mimeType: string;
@@ -595,10 +694,8 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         checksum: string;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       };
-      meta: {};
+      meta: object;
     }>;
     delete: _trpc_server0.TRPCMutationProcedure<{
       input: {
@@ -606,6 +703,8 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         content: _prisma_client_runtime_library0.Bytes;
         mimeType: string;
@@ -614,17 +713,15 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         checksum: string;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       };
-      meta: {};
+      meta: object;
     }>;
     deleteMany: _trpc_server0.TRPCMutationProcedure<{
       input: {
         ids: string[];
       };
       output: _prisma_client0.Prisma.BatchPayload;
-      meta: {};
+      meta: object;
     }>;
     getContent: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -633,13 +730,14 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       output: {
         content: string;
         mimeType: string;
+        name: string;
       };
-      meta: {};
+      meta: object;
     }>;
   }>>;
   screenshot: _trpc_server0.TRPCBuiltRouter<{
     ctx: EhTrpcContext;
-    meta: {};
+    meta: object;
     errorShape: _trpc_server0.TRPCDefaultErrorShape;
     transformer: false;
   }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
@@ -647,15 +745,15 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       input: void;
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         mimeType: string;
         fileSize: number;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       }[];
-      meta: {};
+      meta: object;
     }>;
     getOne: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -663,15 +761,15 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         mimeType: string;
         fileSize: number;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       } | null;
-      meta: {};
+      meta: object;
     }>;
     getByAppSlug: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -679,15 +777,15 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         mimeType: string;
         fileSize: number;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       }[];
-      meta: {};
+      meta: object;
     }>;
     getFirstByAppSlug: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -695,20 +793,20 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
       };
       output: {
         id: string;
+        createdAt: Date;
+        updatedAt: Date;
         name: string;
         mimeType: string;
         fileSize: number;
         width: number | null;
         height: number | null;
-        createdAt: Date;
-        updatedAt: Date;
       } | null;
-      meta: {};
+      meta: object;
     }>;
   }>>;
   appCatalogAdmin: _trpc_server0.TRPCBuiltRouter<{
     ctx: EhTrpcContext;
-    meta: {};
+    meta: object;
     errorShape: _trpc_server0.TRPCDefaultErrorShape;
     transformer: false;
   }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
@@ -721,11 +819,9 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description: string;
         slug: string;
         displayName: string;
-        access: PrismaJson.AccessMethod;
+        access: PrismaJson.AccessMethod | null;
         teams: string[];
-        roles: PrismaJson.AppRole | null;
-        approverName: string | null;
-        approverEmail: string | null;
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
         notes: string | null;
         tags: string[];
         appUrl: string | null;
@@ -733,7 +829,7 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         iconName: string | null;
         screenshotIds: string[];
       }[];
-      meta: {};
+      meta: object;
     }>;
     getById: _trpc_server0.TRPCQueryProcedure<{
       input: {
@@ -746,11 +842,9 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description: string;
         slug: string;
         displayName: string;
-        access: PrismaJson.AccessMethod;
+        access: PrismaJson.AccessMethod | null;
         teams: string[];
-        roles: PrismaJson.AppRole | null;
-        approverName: string | null;
-        approverEmail: string | null;
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
         notes: string | null;
         tags: string[];
         appUrl: string | null;
@@ -758,26 +852,59 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         iconName: string | null;
         screenshotIds: string[];
       } | null;
-      meta: {};
+      meta: object;
+    }>;
+    getBySlug: _trpc_server0.TRPCQueryProcedure<{
+      input: {
+        slug: string;
+      };
+      output: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        description: string;
+        slug: string;
+        displayName: string;
+        access: PrismaJson.AccessMethod | null;
+        teams: string[];
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
+        notes: string | null;
+        tags: string[];
+        appUrl: string | null;
+        links: PrismaJson.AppLink[] | null;
+        iconName: string | null;
+        screenshotIds: string[];
+      } | null;
+      meta: object;
     }>;
     create: _trpc_server0.TRPCMutationProcedure<{
       input: {
         slug: string;
         displayName: string;
         description: string;
-        access: {
+        access?: {
           [x: string]: unknown;
-          type: "bot" | "ticketing" | "email" | "self-service" | "documentation" | "manual";
-        };
+          type: "email" | "bot" | "ticketing" | "self-service" | "documentation" | "manual";
+        } | undefined;
         teams?: string[] | undefined;
-        roles?: {
-          id: string;
-          name: string;
-          description?: string | undefined;
-        }[] | undefined;
-        approver?: {
-          name: string;
-          email: string;
+        approvalDetails?: {
+          approvalMethodId: string;
+          comments?: string | undefined;
+          requestPrompt?: string | undefined;
+          postApprovalInstructions?: string | undefined;
+          roles?: {
+            name: string;
+            description?: string | undefined;
+          }[] | undefined;
+          approvers?: {
+            displayName: string;
+            contact?: string | undefined;
+          }[] | undefined;
+          urls?: {
+            url: string;
+            label?: string | undefined;
+          }[] | undefined;
+          whoToReachOut?: string | undefined;
         } | undefined;
         notes?: string | undefined;
         tags?: string[] | undefined;
@@ -796,11 +923,9 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description: string;
         slug: string;
         displayName: string;
-        access: PrismaJson.AccessMethod;
+        access: PrismaJson.AccessMethod | null;
         teams: string[];
-        roles: PrismaJson.AppRole | null;
-        approverName: string | null;
-        approverEmail: string | null;
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
         notes: string | null;
         tags: string[];
         appUrl: string | null;
@@ -808,7 +933,7 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         iconName: string | null;
         screenshotIds: string[];
       };
-      meta: {};
+      meta: object;
     }>;
     update: _trpc_server0.TRPCMutationProcedure<{
       input: {
@@ -818,17 +943,27 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description?: string | undefined;
         access?: {
           [x: string]: unknown;
-          type: "bot" | "ticketing" | "email" | "self-service" | "documentation" | "manual";
+          type: "email" | "bot" | "ticketing" | "self-service" | "documentation" | "manual";
         } | undefined;
         teams?: string[] | undefined;
-        roles?: {
-          id: string;
-          name: string;
-          description?: string | undefined;
-        }[] | undefined;
-        approver?: {
-          name: string;
-          email: string;
+        approvalDetails?: {
+          approvalMethodId: string;
+          comments?: string | undefined;
+          requestPrompt?: string | undefined;
+          postApprovalInstructions?: string | undefined;
+          roles?: {
+            name: string;
+            description?: string | undefined;
+          }[] | undefined;
+          approvers?: {
+            displayName: string;
+            contact?: string | undefined;
+          }[] | undefined;
+          urls?: {
+            url: string;
+            label?: string | undefined;
+          }[] | undefined;
+          whoToReachOut?: string | undefined;
         } | undefined;
         notes?: string | undefined;
         tags?: string[] | undefined;
@@ -847,11 +982,9 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description: string;
         slug: string;
         displayName: string;
-        access: PrismaJson.AccessMethod;
+        access: PrismaJson.AccessMethod | null;
         teams: string[];
-        roles: PrismaJson.AppRole | null;
-        approverName: string | null;
-        approverEmail: string | null;
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
         notes: string | null;
         tags: string[];
         appUrl: string | null;
@@ -859,7 +992,31 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         iconName: string | null;
         screenshotIds: string[];
       };
-      meta: {};
+      meta: object;
+    }>;
+    updateScreenshots: _trpc_server0.TRPCMutationProcedure<{
+      input: {
+        id: string;
+        screenshotIds: string[];
+      };
+      output: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        description: string;
+        slug: string;
+        displayName: string;
+        access: PrismaJson.AccessMethod | null;
+        teams: string[];
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
+        notes: string | null;
+        tags: string[];
+        appUrl: string | null;
+        links: PrismaJson.AppLink[] | null;
+        iconName: string | null;
+        screenshotIds: string[];
+      };
+      meta: object;
     }>;
     delete: _trpc_server0.TRPCMutationProcedure<{
       input: {
@@ -872,11 +1029,9 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         description: string;
         slug: string;
         displayName: string;
-        access: PrismaJson.AccessMethod;
+        access: PrismaJson.AccessMethod | null;
         teams: string[];
-        roles: PrismaJson.AppRole | null;
-        approverName: string | null;
-        approverEmail: string | null;
+        approvalDetails: PrismaJson.AppApprovalDetails | null;
         notes: string | null;
         tags: string[];
         appUrl: string | null;
@@ -884,7 +1039,75 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
         iconName: string | null;
         screenshotIds: string[];
       };
-      meta: {};
+      meta: object;
+    }>;
+  }>>;
+  approvalMethod: _trpc_server0.TRPCBuiltRouter<{
+    ctx: EhTrpcContext;
+    meta: object;
+    errorShape: _trpc_server0.TRPCDefaultErrorShape;
+    transformer: false;
+  }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
+    list: _trpc_server0.TRPCQueryProcedure<{
+      input: void;
+      output: ApprovalMethod[];
+      meta: object;
+    }>;
+    getById: _trpc_server0.TRPCQueryProcedure<{
+      input: {
+        id: string;
+      };
+      output: ApprovalMethod | null;
+      meta: object;
+    }>;
+    create: _trpc_server0.TRPCMutationProcedure<{
+      input: {
+        type: "custom" | "service" | "personTeam";
+        displayName: string;
+        config?: Record<string, never> | {
+          url?: string | undefined;
+          icon?: string | undefined;
+        } | {
+          reachOutContacts?: {
+            displayName: string;
+            contact: string;
+          }[] | undefined;
+        } | undefined;
+      };
+      output: ApprovalMethod;
+      meta: object;
+    }>;
+    update: _trpc_server0.TRPCMutationProcedure<{
+      input: {
+        id: string;
+        type?: "custom" | "service" | "personTeam" | undefined;
+        displayName?: string | undefined;
+        config?: Record<string, never> | {
+          url?: string | undefined;
+          icon?: string | undefined;
+        } | {
+          reachOutContacts?: {
+            displayName: string;
+            contact: string;
+          }[] | undefined;
+        } | undefined;
+      };
+      output: ApprovalMethod;
+      meta: object;
+    }>;
+    delete: _trpc_server0.TRPCMutationProcedure<{
+      input: {
+        id: string;
+      };
+      output: ApprovalMethod;
+      meta: object;
+    }>;
+    listByType: _trpc_server0.TRPCQueryProcedure<{
+      input: {
+        type: "custom" | "service" | "personTeam";
+      };
+      output: ApprovalMethod[];
+      meta: object;
     }>;
   }>>;
   auth: _trpc_server0.TRPCBuiltRouter<{
@@ -896,7 +1119,15 @@ declare function createTrpcRouter(auth?: BetterAuth): _trpc_server0.TRPCBuiltRou
     getSession: _trpc_server0.TRPCQueryProcedure<{
       input: void;
       output: {
-        user: {} | null;
+        user: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        } | null;
         isAuthenticated: boolean;
       };
       meta: {};
@@ -951,7 +1182,15 @@ declare function createAuthRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>, auth
   getSession: _trpc_server0.TRPCQueryProcedure<{
     input: void;
     output: {
-      user: {} | null;
+      user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+      } | null;
       isAuthenticated: boolean;
     };
     meta: {};
@@ -966,35 +1205,6 @@ declare function createAuthRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>, auth
 }>>;
 type AuthRouter = ReturnType<typeof createAuthRouter>;
 //#endregion
-//#region src/modules/auth/authProviders.d.ts
-declare function getAuthProvidersFromEnv(): BetterAuthOptions['socialProviders'];
-/**
- * Get auth plugins from environment variables
- * Currently supports: Okta
- *
- * Example .env:
- * AUTH_OKTA_CLIENT_ID=your_okta_client_id
- * AUTH_OKTA_CLIENT_SECRET=your_okta_client_secret
- * AUTH_OKTA_ISSUER=https://your-org.okta.com/oauth2/ausxb83g4wY1x09ec0h7
- *
- * Note: If you get "User is not assigned to the client application" errors,
- * you need to configure your Okta application to allow all users:
- * 1. In Okta Admin Console, go to Applications → Your App
- * 2. Assignments tab → Assign to Groups → Add "Everyone" group
- * OR
- * 3. Edit the application → In "User consent" section, enable appropriate settings
- *
- * For group-based authorization:
- * 1. Add "groups" scope to your auth server policy rule
- * 2. Create a groups claim in your auth server
- * 3. Groups will be available in the user object after authentication
- */
-declare function getAuthPluginsFromEnv(): Array<BetterAuthPlugin>;
-/**
- * Validate required auth environment variables
- */
-declare function validateAuthConfig(): void;
-//#endregion
 //#region src/modules/auth/authorizationUtils.d.ts
 /**
  * Authorization utilities for checking user permissions based on groups
@@ -1032,19 +1242,18 @@ declare function isMemberOfAnyGroup(user: UserWithGroups | null | undefined, all
  * Check if user is a member of all specified groups
  */
 declare function isMemberOfAllGroups(user: UserWithGroups | null | undefined, requiredGroups: Array<string>): boolean;
-/**
- * Get admin group names from environment variables
- * Default: env_hopper_ui_super_admins
- */
-declare function getAdminGroupsFromEnv(): Array<string>;
 /**
  * Check if user has admin permissions
+ * @param user User object with groups
+ * @param adminGroups List of admin group names (default: ['env_hopper_ui_super_admins'])
  */
-declare function isAdmin(user: UserWithGroups | null | undefined): boolean;
+declare function isAdmin(user: UserWithGroups | null | undefined, adminGroups?: Array<string>): boolean;
 /**
  * Require admin permissions - throws error if not admin
+ * @param user User object with groups
+ * @param adminGroups List of admin group names (default: ['env_hopper_ui_super_admins'])
  */
-declare function requireAdmin(user: UserWithGroups | null | undefined): void;
+declare function requireAdmin(user: UserWithGroups | null | undefined, adminGroups?: Array<string>): void;
 /**
  * Require membership in specific groups - throws error if not member
  */
@@ -1164,6 +1373,8 @@ interface UpsertIconInput {
  */
 declare function upsertIcon(input: UpsertIconInput): Promise<{
   id: string;
+  createdAt: Date;
+  updatedAt: Date;
   name: string;
   content: _prisma_client_runtime_library0.Bytes;
   mimeType: string;
@@ -1172,8 +1383,6 @@ declare function upsertIcon(input: UpsertIconInput): Promise<{
   checksum: string;
   width: number | null;
   height: number | null;
-  createdAt: Date;
-  updatedAt: Date;
 }>;
 /**
  * Upsert multiple icons to the database.
@@ -1181,6 +1390,8 @@ declare function upsertIcon(input: UpsertIconInput): Promise<{
  */
 declare function upsertIcons(icons: Array<UpsertIconInput>): Promise<{
   id: string;
+  createdAt: Date;
+  updatedAt: Date;
   name: string;
   content: _prisma_client_runtime_library0.Bytes;
   mimeType: string;
@@ -1189,8 +1400,6 @@ declare function upsertIcons(icons: Array<UpsertIconInput>): Promise<{
   checksum: string;
   width: number | null;
   height: number | null;
-  createdAt: Date;
-  updatedAt: Date;
 }[]>;
 /**
  * Get an asset (icon or screenshot) by name from the database.
@@ -1238,9 +1447,9 @@ interface ScreenshotRestControllerConfig {
 declare function registerScreenshotRestController(router: Router, config: ScreenshotRestControllerConfig): void;
 //#endregion
 //#region src/modules/assets/screenshotRouter.d.ts
-declare function createScreenshotRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>): _trpc_server0.TRPCBuiltRouter<{
+declare function createScreenshotRouter(): _trpc_server0.TRPCBuiltRouter<{
   ctx: EhTrpcContext;
-  meta: {};
+  meta: object;
   errorShape: _trpc_server0.TRPCDefaultErrorShape;
   transformer: false;
 }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
@@ -1248,15 +1457,15 @@ declare function createScreenshotRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>
     input: void;
     output: {
       id: string;
+      createdAt: Date;
+      updatedAt: Date;
       name: string;
       mimeType: string;
       fileSize: number;
       width: number | null;
       height: number | null;
-      createdAt: Date;
-      updatedAt: Date;
     }[];
-    meta: {};
+    meta: object;
   }>;
   getOne: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -1264,15 +1473,15 @@ declare function createScreenshotRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>
     };
     output: {
       id: string;
+      createdAt: Date;
+      updatedAt: Date;
       name: string;
       mimeType: string;
       fileSize: number;
       width: number | null;
       height: number | null;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
-    meta: {};
+    meta: object;
   }>;
   getByAppSlug: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -1280,15 +1489,15 @@ declare function createScreenshotRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>
     };
     output: {
       id: string;
+      createdAt: Date;
+      updatedAt: Date;
       name: string;
       mimeType: string;
       fileSize: number;
       width: number | null;
       height: number | null;
-      createdAt: Date;
-      updatedAt: Date;
     }[];
-    meta: {};
+    meta: object;
   }>;
   getFirstByAppSlug: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -1296,15 +1505,15 @@ declare function createScreenshotRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>
     };
     output: {
       id: string;
+      createdAt: Date;
+      updatedAt: Date;
       name: string;
       mimeType: string;
       fileSize: number;
       width: number | null;
       height: number | null;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
-    meta: {};
+    meta: object;
   }>;
 }>>;
 //#endregion
@@ -1335,9 +1544,9 @@ declare function syncAssets(config: SyncAssetsConfig): Promise<{
 }>;
 //#endregion
 //#region src/modules/appCatalogAdmin/appCatalogAdminRouter.d.ts
-declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}, {}>): _trpc_server0.TRPCBuiltRouter<{
+declare function createAppCatalogAdminRouter(): _trpc_server0.TRPCBuiltRouter<{
   ctx: EhTrpcContext;
-  meta: {};
+  meta: object;
   errorShape: _trpc_server0.TRPCDefaultErrorShape;
   transformer: false;
 }, _trpc_server0.TRPCDecorateCreateRouterOptions<{
@@ -1350,11 +1559,9 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description: string;
       slug: string;
       displayName: string;
-      access: PrismaJson.AccessMethod;
+      access: PrismaJson.AccessMethod | null;
       teams: string[];
-      roles: PrismaJson.AppRole | null;
-      approverName: string | null;
-      approverEmail: string | null;
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
       notes: string | null;
       tags: string[];
       appUrl: string | null;
@@ -1362,7 +1569,7 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       iconName: string | null;
       screenshotIds: string[];
     }[];
-    meta: {};
+    meta: object;
   }>;
   getById: _trpc_server0.TRPCQueryProcedure<{
     input: {
@@ -1375,11 +1582,9 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description: string;
       slug: string;
       displayName: string;
-      access: PrismaJson.AccessMethod;
+      access: PrismaJson.AccessMethod | null;
       teams: string[];
-      roles: PrismaJson.AppRole | null;
-      approverName: string | null;
-      approverEmail: string | null;
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
       notes: string | null;
       tags: string[];
       appUrl: string | null;
@@ -1387,26 +1592,59 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       iconName: string | null;
       screenshotIds: string[];
     } | null;
-    meta: {};
+    meta: object;
+  }>;
+  getBySlug: _trpc_server0.TRPCQueryProcedure<{
+    input: {
+      slug: string;
+    };
+    output: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      description: string;
+      slug: string;
+      displayName: string;
+      access: PrismaJson.AccessMethod | null;
+      teams: string[];
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
+      notes: string | null;
+      tags: string[];
+      appUrl: string | null;
+      links: PrismaJson.AppLink[] | null;
+      iconName: string | null;
+      screenshotIds: string[];
+    } | null;
+    meta: object;
   }>;
   create: _trpc_server0.TRPCMutationProcedure<{
     input: {
       slug: string;
       displayName: string;
       description: string;
-      access: {
+      access?: {
         [x: string]: unknown;
-        type: "bot" | "ticketing" | "email" | "self-service" | "documentation" | "manual";
-      };
+        type: "email" | "bot" | "ticketing" | "self-service" | "documentation" | "manual";
+      } | undefined;
       teams?: string[] | undefined;
-      roles?: {
-        id: string;
-        name: string;
-        description?: string | undefined;
-      }[] | undefined;
-      approver?: {
-        name: string;
-        email: string;
+      approvalDetails?: {
+        approvalMethodId: string;
+        comments?: string | undefined;
+        requestPrompt?: string | undefined;
+        postApprovalInstructions?: string | undefined;
+        roles?: {
+          name: string;
+          description?: string | undefined;
+        }[] | undefined;
+        approvers?: {
+          displayName: string;
+          contact?: string | undefined;
+        }[] | undefined;
+        urls?: {
+          url: string;
+          label?: string | undefined;
+        }[] | undefined;
+        whoToReachOut?: string | undefined;
       } | undefined;
       notes?: string | undefined;
       tags?: string[] | undefined;
@@ -1425,11 +1663,9 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description: string;
       slug: string;
       displayName: string;
-      access: PrismaJson.AccessMethod;
+      access: PrismaJson.AccessMethod | null;
       teams: string[];
-      roles: PrismaJson.AppRole | null;
-      approverName: string | null;
-      approverEmail: string | null;
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
       notes: string | null;
       tags: string[];
       appUrl: string | null;
@@ -1437,7 +1673,7 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       iconName: string | null;
       screenshotIds: string[];
     };
-    meta: {};
+    meta: object;
   }>;
   update: _trpc_server0.TRPCMutationProcedure<{
     input: {
@@ -1447,17 +1683,27 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description?: string | undefined;
       access?: {
         [x: string]: unknown;
-        type: "bot" | "ticketing" | "email" | "self-service" | "documentation" | "manual";
+        type: "email" | "bot" | "ticketing" | "self-service" | "documentation" | "manual";
       } | undefined;
       teams?: string[] | undefined;
-      roles?: {
-        id: string;
-        name: string;
-        description?: string | undefined;
-      }[] | undefined;
-      approver?: {
-        name: string;
-        email: string;
+      approvalDetails?: {
+        approvalMethodId: string;
+        comments?: string | undefined;
+        requestPrompt?: string | undefined;
+        postApprovalInstructions?: string | undefined;
+        roles?: {
+          name: string;
+          description?: string | undefined;
+        }[] | undefined;
+        approvers?: {
+          displayName: string;
+          contact?: string | undefined;
+        }[] | undefined;
+        urls?: {
+          url: string;
+          label?: string | undefined;
+        }[] | undefined;
+        whoToReachOut?: string | undefined;
       } | undefined;
       notes?: string | undefined;
       tags?: string[] | undefined;
@@ -1476,11 +1722,9 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description: string;
       slug: string;
       displayName: string;
-      access: PrismaJson.AccessMethod;
+      access: PrismaJson.AccessMethod | null;
       teams: string[];
-      roles: PrismaJson.AppRole | null;
-      approverName: string | null;
-      approverEmail: string | null;
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
       notes: string | null;
       tags: string[];
       appUrl: string | null;
@@ -1488,7 +1732,31 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       iconName: string | null;
       screenshotIds: string[];
     };
-    meta: {};
+    meta: object;
+  }>;
+  updateScreenshots: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      id: string;
+      screenshotIds: string[];
+    };
+    output: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      description: string;
+      slug: string;
+      displayName: string;
+      access: PrismaJson.AccessMethod | null;
+      teams: string[];
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
+      notes: string | null;
+      tags: string[];
+      appUrl: string | null;
+      links: PrismaJson.AppLink[] | null;
+      iconName: string | null;
+      screenshotIds: string[];
+    };
+    meta: object;
   }>;
   delete: _trpc_server0.TRPCMutationProcedure<{
     input: {
@@ -1501,11 +1769,9 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       description: string;
       slug: string;
       displayName: string;
-      access: PrismaJson.AccessMethod;
+      access: PrismaJson.AccessMethod | null;
       teams: string[];
-      roles: PrismaJson.AppRole | null;
-      approverName: string | null;
-      approverEmail: string | null;
+      approvalDetails: PrismaJson.AppApprovalDetails | null;
       notes: string | null;
       tags: string[];
       appUrl: string | null;
@@ -1513,16 +1779,105 @@ declare function createAppCatalogAdminRouter(t: TRPCRootObject<EhTrpcContext, {}
       iconName: string | null;
       screenshotIds: string[];
     };
-    meta: {};
+    meta: object;
+  }>;
+}>>;
+//#endregion
+//#region src/modules/approvalMethod/approvalMethodRouter.d.ts
+declare function createApprovalMethodRouter(): _trpc_server0.TRPCBuiltRouter<{
+  ctx: EhTrpcContext;
+  meta: object;
+  errorShape: _trpc_server0.TRPCDefaultErrorShape;
+  transformer: false;
+}, _trpc_server0.TRPCDecorateCreateRouterOptions<{
+  list: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: ApprovalMethod[];
+    meta: object;
+  }>;
+  getById: _trpc_server0.TRPCQueryProcedure<{
+    input: {
+      id: string;
+    };
+    output: ApprovalMethod | null;
+    meta: object;
+  }>;
+  create: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      type: "custom" | "service" | "personTeam";
+      displayName: string;
+      config?: Record<string, never> | {
+        url?: string | undefined;
+        icon?: string | undefined;
+      } | {
+        reachOutContacts?: {
+          displayName: string;
+          contact: string;
+        }[] | undefined;
+      } | undefined;
+    };
+    output: ApprovalMethod;
+    meta: object;
+  }>;
+  update: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      id: string;
+      type?: "custom" | "service" | "personTeam" | undefined;
+      displayName?: string | undefined;
+      config?: Record<string, never> | {
+        url?: string | undefined;
+        icon?: string | undefined;
+      } | {
+        reachOutContacts?: {
+          displayName: string;
+          contact: string;
+        }[] | undefined;
+      } | undefined;
+    };
+    output: ApprovalMethod;
+    meta: object;
+  }>;
+  delete: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      id: string;
+    };
+    output: ApprovalMethod;
+    meta: object;
+  }>;
+  listByType: _trpc_server0.TRPCQueryProcedure<{
+    input: {
+      type: "custom" | "service" | "personTeam";
+    };
+    output: ApprovalMethod[];
+    meta: object;
   }>;
 }>>;
 //#endregion
+//#region src/modules/approvalMethod/syncApprovalMethods.d.ts
+interface ApprovalMethodSyncInput {
+  type: 'service' | 'personTeam' | 'custom';
+  displayName: string;
+  config?: Record<string, unknown>;
+}
+/**
+ * Syncs approval methods to the database using upsert logic based on type + displayName.
+ *
+ * @param prisma - The PrismaClient instance from the backend-core database
+ * @param methods - Array of approval methods to sync
+ */
+declare function syncApprovalMethods(prisma: PrismaClient, methods: Array<ApprovalMethodSyncInput>): Promise<void>;
+//#endregion
 //#region src/db/client.d.ts
 /**
  * Gets the internal Prisma client instance.
  * Creates one if it doesn't exist.
  */
 declare function getDbClient(): PrismaClient;
+/**
+ * Sets the internal Prisma client instance.
+ * Used by middleware to bridge with existing getDbClient() usage.
+ */
+declare function setDbClient(client: PrismaClient): void;
 /**
  * Connects to the database.
  * Call this before performing database operations.
@@ -1580,5 +1935,205 @@ interface SyncAppCatalogResult {
  */
 declare function syncAppCatalog(apps: Array<AppForCatalog>): Promise<SyncAppCatalogResult>;
 //#endregion
-export { AccessMethod, type AdminChatHandlerOptions, AppCatalogData, AppCategory, type AppForCatalog, AppRole, Approver, type AssetRestControllerConfig, type AuthConfig, type AuthRouter, AvailabilityMatrixData, AvailabilityVariant, type BetterAuth, BootstrapConfigData, BotAccess, BotProvider, DEFAULT_ADMIN_SYSTEM_PROMPT, type DatabaseClient, DisplayNamable, DocumentationAccess, EhAppCatalogData, EhAppCatalogDto, EhAppCatalogGroupDto, EhAppCatalogPageDto, EhAppIndexed, EhAppPageIndexed, EhAppUiIndexed, EhAppsMeta, EhBackendAppDto, EhBackendAppInput, EhBackendAppUIBaseInput, EhBackendAppUIInput, EhBackendCompanySpecificBackend, EhBackendCredentialInput, EhBackendDataFreshness, EhBackendDataSourceInput, EhBackendDataSourceInputCommon, EhBackendDataSourceInputDb, EhBackendDataSourceInputKafka, EhBackendDataVersion, EhBackendDeployableInput, EhBackendDeployment, EhBackendDeploymentInput, EhBackendEnvironmentInput, EhBackendPageInput, EhBackendTagDescriptionDataIndexed, EhBackendTagFixedTagValue, EhBackendTagsDescriptionDataIndexed, EhBackendUiDefaultsInput, EhBackendVersionsRequestParams, EhBackendVersionsReturn, EhContextIndexed, EhEnvIndexed, EhMetaDictionary, EhResourceIndexed, type EhStaticControllerContract, type EhTrpcContext, type EhTrpcContextOptions, EmailAccess, EnvBaseInfo, EnvInfoExtended, EnvSlug, type IconRestControllerConfig, JumpResourceSlug, LateResolvableParam, type MakeTFromPrismaModel, ManualAccess, type ObjectKeys, RenameRule, RenameRuleParams, ResourceJump, ResourceJumpGroup, ResourceJumpMetaInfo, ResourceJumpsData, ResourceJumpsExtendedData, type ScalarFilter, type ScalarKeys, type ScreenshotRestControllerConfig, SelfServiceAccess, SlugAndDisplayable, Sluggable, type SyncAppCatalogResult, type SyncAssetsConfig, TABLE_SYNC_MAGAZINE, type TRPCRouter, type TableSyncMagazine, type TableSyncMagazineModelNameKey, type TableSyncParamsPrisma, Tag, TicketingAccess, TicketingProvider, type UpsertIconInput, User, type UserWithGroups, connectDb, createAdminChatHandler, createAppCatalogAdminRouter, createAuth, createAuthRouter, createDatabaseTools, createEhTrpcContext, createPrismaDatabaseClient, createScreenshotRouter, createTrpcRouter, disconnectDb, getAdminGroupsFromEnv, getAssetByName, getAuthPluginsFromEnv, getAuthProvidersFromEnv, getDbClient, getUserGroups, isAdmin, isMemberOfAllGroups, isMemberOfAnyGroup, registerAssetRestController, registerAuthRoutes, registerIconRestController, registerScreenshotRestController, requireAdmin, requireGroups, staticControllerContract, syncAppCatalog, syncAssets, tableSyncPrisma, tool, upsertIcon, upsertIcons, validateAuthConfig };
+//#region src/middleware/types.d.ts
+/**
+ * Database connection configuration.
+ * Supports both connection URL and structured config.
+ */
+type EhDatabaseConfig = {
+  url: string;
+} | {
+  host: string;
+  port: number;
+  database: string;
+  username: string;
+  password: string;
+  schema?: string;
+};
+/**
+ * Mock user configuration for development/testing.
+ * When provided, bypasses authentication and injects this user into all requests.
+ */
+interface EhDevMockUser {
+  /** User ID */
+  id: string;
+  /** User email */
+  email: string;
+  /** User display name */
+  name: string;
+  /** User groups (for authorization) */
+  groups: Array<string>;
+}
+/**
+ * Auth configuration for Better Auth integration.
+ */
+interface EhAuthConfig {
+  /** Base URL for auth callbacks (e.g., 'http://localhost:4000') */
+  baseURL: string;
+  /** Secret for signing sessions (min 32 chars in production) */
+  secret: string;
+  /** OAuth providers configuration */
+  providers?: BetterAuthOptions['socialProviders'];
+  /** Additional Better Auth plugins (e.g., Okta) */
+  plugins?: Array<BetterAuthPlugin>;
+  /** Session expiration in seconds (default: 30 days) */
+  sessionExpiresIn?: number;
+  /** Session refresh threshold in seconds (default: 1 day) */
+  sessionUpdateAge?: number;
+  /** Application name shown in auth UI */
+  appName?: string;
+  /** Development mock user - bypasses auth when provided */
+  devMockUser?: EhDevMockUser;
+  /** Admin group names for authorization (default: ['env_hopper_ui_super_admins']) */
+  adminGroups?: Array<string>;
+}
+/**
+ * Admin chat (AI) configuration.
+ * When provided, enables the admin/chat endpoint.
+ */
+interface EhAdminChatConfig {
+  /** AI model instance from @ai-sdk/* packages */
+  model: LanguageModel;
+  /** System prompt for the AI assistant */
+  systemPrompt?: string;
+  /** Custom tools available to the AI */
+  tools?: Record<string, Tool>;
+  /** Validation function called before each request */
+  validateConfig?: () => void;
+}
+/**
+ * Feature toggles for enabling/disabling specific functionality.
+ *
+ * Note: Icons, assets, screenshots, and catalog backup are always enabled.
+ * Only these optional features can be toggled:
+ */
+interface EhFeatureToggles {
+  /** Enable tRPC endpoints (default: true) */
+  trpc?: boolean;
+  /** Enable auth endpoints (default: true) */
+  auth?: boolean;
+  /** Enable admin chat endpoint (default: true if adminChat config provided) */
+  adminChat?: boolean;
+  /** Enable legacy icon endpoint at /static/icon/:icon (default: false) */
+  legacyIconEndpoint?: boolean;
+}
+/**
+ * Company-specific backend can be provided as:
+ * 1. Direct object implementing the interface
+ * 2. Factory function called per-request (for DI integration)
+ * 3. Async factory function
+ */
+type EhBackendProvider = EhBackendCompanySpecificBackend | (() => EhBackendCompanySpecificBackend) | (() => Promise<EhBackendCompanySpecificBackend>);
+/**
+ * Lifecycle hooks for database and middleware events.
+ */
+interface EhLifecycleHooks {
+  /** Called after database connection is established */
+  onDatabaseConnected?: () => void | Promise<void>;
+  /** Called before database disconnection (for cleanup) */
+  onDatabaseDisconnecting?: () => void | Promise<void>;
+  /** Called after all routes are registered - use to add custom routes */
+  onRoutesRegistered?: (router: Router) => void | Promise<void>;
+  /** Custom error handler for middleware errors */
+  onError?: (error: Error, context: {
+    path: string;
+  }) => void;
+}
+/**
+ * Main configuration options for the env-hopper middleware.
+ */
+interface EhMiddlewareOptions {
+  /**
+   * Base path prefix for all routes (default: '/api')
+   * - tRPC: {basePath}/trpc
+   * - Auth: {basePath}/auth (note: auth basePath is hardcoded, this affects where router mounts)
+   * - Icons: {basePath}/icons
+   * - Assets: {basePath}/assets
+   * - Screenshots: {basePath}/screenshots
+   * - Admin Chat: {basePath}/admin/chat
+   */
+  basePath?: string;
+  /**
+   * Database connection configuration (required).
+   * Backend-core manages the database for all features.
+   */
+  database: EhDatabaseConfig;
+  /** Auth configuration (required) */
+  auth: EhAuthConfig;
+  /** Company-specific backend implementation (required) */
+  backend: EhBackendProvider;
+  /** AI admin chat configuration (optional) */
+  adminChat?: EhAdminChatConfig;
+  /** Feature toggles (all enabled by default) */
+  features?: EhFeatureToggles;
+  /** Lifecycle hooks */
+  hooks?: EhLifecycleHooks;
+}
+/**
+ * Result of middleware initialization.
+ *
+ * @example
+ * ```typescript
+ * const eh = await createEhMiddleware({ ... })
+ *
+ * // Mount routes
+ * app.use(eh.router)
+ *
+ * // Connect to database
+ * await eh.connect()
+ *
+ * // Cleanup on shutdown
+ * process.on('SIGTERM', async () => {
+ *   await eh.disconnect()
+ * })
+ * ```
+ */
+interface EhMiddlewareResult {
+  /** Express router with all env-hopper routes */
+  router: Router;
+  /** Better Auth instance (for extending auth functionality) */
+  auth: BetterAuth;
+  /** tRPC router (for extending with custom procedures) */
+  trpcRouter: TRPCRouter;
+  /** Connect to database (call during app startup) */
+  connect: () => Promise<void>;
+  /** Disconnect from database (call during app shutdown) */
+  disconnect: () => Promise<void>;
+  /** Add custom routes to the middleware router */
+  addRoutes: (callback: (router: Router) => void) => void;
+}
+/**
+ * Internal context passed to feature registration functions.
+ */
+interface MiddlewareContext {
+  auth: BetterAuth;
+  trpcRouter: TRPCRouter;
+  createContext: () => Promise<{
+    companySpecificBackend: EhBackendCompanySpecificBackend;
+  }>;
+  authConfig: EhAuthConfig;
+}
+//#endregion
+//#region src/middleware/createEhMiddleware.d.ts
+declare function createEhMiddleware(options: EhMiddlewareOptions): Promise<EhMiddlewareResult>;
+//#endregion
+//#region src/middleware/database.d.ts
+/**
+ * Internal database manager used by the middleware.
+ * Handles connection URL formatting and lifecycle.
+ */
+declare class EhDatabaseManager {
+  private client;
+  private config;
+  constructor(config: EhDatabaseConfig);
+  /**
+   * Get or create the Prisma client instance.
+   * Uses lazy initialization for flexibility.
+   */
+  getClient(): PrismaClient;
+  connect(): Promise<void>;
+  disconnect(): Promise<void>;
+}
+//#endregion
+export { AccessMethod, type AdminChatHandlerOptions, AppApprovalDetails, AppCatalogData, AppCategory, type AppForCatalog, AppRole, ApprovalMethod, ApprovalMethodConfig, type ApprovalMethodSyncInput, ApprovalMethodType, ApprovalUrl, Approver, ApproverContact, type AssetRestControllerConfig, type AuthConfig, type AuthRouter, AvailabilityMatrixData, AvailabilityVariant, BaseApprover, type BetterAuth, BootstrapConfigData, BotAccess, BotApprover, CreateApprovalMethodInput, CustomConfig, DEFAULT_ADMIN_SYSTEM_PROMPT, type DatabaseClient, DisplayNamable, DocumentationAccess, type EhAdminChatConfig, EhAppCatalogData, EhAppCatalogDto, EhAppCatalogGroupDto, EhAppCatalogPageDto, EhAppIndexed, EhAppPageIndexed, EhAppUiIndexed, EhAppsMeta, type EhAuthConfig, EhBackendAppDto, EhBackendAppInput, EhBackendAppUIBaseInput, EhBackendAppUIInput, EhBackendCompanySpecificBackend, EhBackendCredentialInput, EhBackendDataFreshness, EhBackendDataSourceInput, EhBackendDataSourceInputCommon, EhBackendDataSourceInputDb, EhBackendDataSourceInputKafka, EhBackendDataVersion, EhBackendDeployableInput, EhBackendDeployment, EhBackendDeploymentInput, EhBackendEnvironmentInput, EhBackendPageInput, type EhBackendProvider, EhBackendTagDescriptionDataIndexed, EhBackendTagFixedTagValue, EhBackendTagsDescriptionDataIndexed, EhBackendUiDefaultsInput, EhBackendVersionsRequestParams, EhBackendVersionsReturn, EhContextIndexed, type EhDatabaseConfig, EhDatabaseManager, EhEnvIndexed, type EhFeatureToggles, type EhLifecycleHooks, EhMetaDictionary, type EhMiddlewareOptions, type EhMiddlewareResult, EhResourceIndexed, type EhStaticControllerContract, type EhTrpcContext, type EhTrpcContextOptions, EmailAccess, EnvBaseInfo, EnvInfoExtended, EnvSlug, type IconRestControllerConfig, JumpResourceSlug, LateResolvableParam, type MakeTFromPrismaModel, ManualAccess, type MiddlewareContext, type ObjectKeys, PersonApprover, PersonTeamConfig, ReachOutContact, RenameRule, RenameRuleParams, ResourceJump, ResourceJumpGroup, ResourceJumpMetaInfo, ResourceJumpsData, ResourceJumpsExtendedData, type ScalarFilter, type ScalarKeys, type ScreenshotRestControllerConfig, SelfServiceAccess, ServiceConfig, SlugAndDisplayable, Sluggable, type SyncAppCatalogResult, type SyncAssetsConfig, TABLE_SYNC_MAGAZINE, type TRPCRouter, type TableSyncMagazine, type TableSyncMagazineModelNameKey, type TableSyncParamsPrisma, Tag, TicketApprover, TicketingAccess, UpdateApprovalMethodInput, type UpsertIconInput, User, type UserWithGroups, connectDb, createAdminChatHandler, createAppCatalogAdminRouter, createApprovalMethodRouter, createAuth, createAuthRouter, createDatabaseTools, createEhMiddleware, createEhTrpcContext, createPrismaDatabaseClient, createScreenshotRouter, createTrpcRouter, disconnectDb, getAssetByName, getDbClient, getUserGroups, isAdmin, isMemberOfAllGroups, isMemberOfAnyGroup, registerAssetRestController, registerAuthRoutes, registerIconRestController, registerScreenshotRestController, requireAdmin, requireGroups, setDbClient, staticControllerContract, syncAppCatalog, syncApprovalMethods, syncAssets, tableSyncPrisma, tool, upsertIcon, upsertIcons };
 //# sourceMappingURL=index.d.ts.map