@flaredev/core 0.9.1 → 0.10.0

package/dist/{chunk-AAXNSIZG.js → chunk-TB53VHXY.js}

@@ -91,6 +91,60 @@ var field = {
   hasMany: (target, options) => ({ kind: "hasMany", target, ...options, required: false })
 };
 
+// src/resource/money.ts
+var EXPONENTS = {
+  // No minor unit at all.
+  BIF: 0,
+  CLP: 0,
+  DJF: 0,
+  GNF: 0,
+  ISK: 0,
+  JPY: 0,
+  KMF: 0,
+  KRW: 0,
+  PYG: 0,
+  RWF: 0,
+  UGX: 0,
+  UYI: 0,
+  VND: 0,
+  VUV: 0,
+  XAF: 0,
+  XOF: 0,
+  XPF: 0,
+  // Thousandths.
+  BHD: 3,
+  IQD: 3,
+  JOD: 3,
+  KWD: 3,
+  LYD: 3,
+  OMR: 3,
+  TND: 3,
+  // Ten-thousandths.
+  CLF: 4
+};
+var DEFAULT_MONEY_EXPONENT = 2;
+function moneyExponent(currency) {
+  if (!currency) return DEFAULT_MONEY_EXPONENT;
+  return EXPONENTS[currency.toUpperCase()] ?? DEFAULT_MONEY_EXPONENT;
+}
+var factor = (exponent) => 10 ** exponent;
+function toMinorUnits(amount, currency) {
+  if (!Number.isFinite(amount)) throw new TypeError(`Not an amount: ${amount}`);
+  return Number(amount.toFixed(moneyExponent(currency)).replace(".", ""));
+}
+function fromMinorUnits(minor, currency) {
+  const exponent = moneyExponent(currency);
+  if (exponent === 0) return minor;
+  return Number((minor / factor(exponent)).toFixed(exponent));
+}
+function hasTooManyPlaces(amount, currency) {
+  const exponent = moneyExponent(currency);
+  const text = String(amount);
+  if (text.includes("e") || text.includes("E")) return true;
+  const places = text.includes(".") ? text.length - text.indexOf(".") - 1 : 0;
+  return places > exponent;
+}
+
 // src/resource/naming.ts
 function words(value) {
   return value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean).map((word) => word.toLowerCase());
@@ -367,7 +421,14 @@ function fieldSchema(def) {
       if (def.format === "rating") {
         s = s.min(def.min ?? 0, `At least ${def.min ?? 0}`).max(def.max ?? 5, `At most ${def.max ?? 5}`);
       }
-      if (def.format === "money" && def.min === void 0) s = s.min(0, "Cannot be negative");
+      if (def.format === "money") {
+        if (def.min === void 0) s = s.min(0, "Cannot be negative");
+        const places = moneyExponent(def.currency);
+        s = s.refine(
+          (value) => !hasTooManyPlaces(value, def.currency),
+          places === 0 ? "A whole amount, with no decimal places" : `At most ${places} decimal place${places === 1 ? "" : "s"}`
+        );
+      }
       if (def.min !== void 0) s = s.min(def.min, `Must be at least ${def.min}`);
       if (def.max !== void 0) s = s.max(def.max, `Must be at most ${def.max}`);
       return s;
@@ -501,6 +562,11 @@ export {
   DEFAULT_FILE_MAX_BYTES,
   fileMaxBytes,
   field,
+  DEFAULT_MONEY_EXPONENT,
+  moneyExponent,
+  toMinorUnits,
+  fromMinorUnits,
+  hasTooManyPlaces,
   words,
   pascalCase,
   camelCase,

package/dist/index.d.ts

@@ -285,6 +285,52 @@ declare const checkoutPaid: (session: {
 /** `8 random lowercase letters`, the suffix Stripe asks for on `integration_identifier`. */
 declare function randomLetters(length?: number): string;
 
+/**
+ * Money, stored exactly.
+ *
+ * A `money` field used to be a `float`, and `0.1 + 0.2` is the reason that was a bug
+ * waiting for a shop with a till in it. Binary floating point cannot represent most
+ * decimal fractions, so a column of them drifts: sum a few thousand prices and the total
+ * is wrong by a cent, which is the kind of wrong nobody can explain to an accountant.
+ *
+ * So the column holds **minor units** — whole cents, whole fils, whole yen — and an
+ * integer column is exact. The store converts at the boundary, so everything above it
+ * still works in the units people write and read: the API sends 19.99, the form shows
+ * 19.99, and only the database sees 1999.
+ *
+ * Flare's own billing code has always done this (`amount:int`, formatted as `cents / 100`).
+ * This brings `money` fields in line with it.
+ */
+/** The default when a field names no currency: two places, which is almost everywhere. */
+declare const DEFAULT_MONEY_EXPONENT = 2;
+/** Decimal places for an ISO 4217 code. Unknown codes get two, which is the common case. */
+declare function moneyExponent(currency?: string): number;
+/**
+ * A decimal amount as whole minor units: 19.99 → 1999.
+ *
+ * Through `toFixed` rather than `Math.round(amount * 100)`, because multiplying first adds
+ * an error of its own: `2.675 * 100` is 267.50000000000006, which rounds to 268, while the
+ * double behind `2.675` is 2.67499999999999982 and rounds to 267. `toFixed` asks the
+ * runtime to round the value that is actually there, so this agrees with what every other
+ * tool prints for the same number.
+ *
+ * Neither approach can rescue a value the double never held — `1.005` is 1.00499999999999989
+ * and becomes 100, not 101. Nothing short of decimal arithmetic all the way from the client
+ * fixes that, which is why the validator refuses an amount with more places than its
+ * currency has: the place to catch it is before it is a double at all.
+ */
+declare function toMinorUnits(amount: number, currency?: string): number;
+/** Whole minor units as a decimal amount: 1999 → 19.99. */
+declare function fromMinorUnits(minor: number, currency?: string): number;
+/**
+ * Whether an amount has more decimal places than its currency has.
+ *
+ * 19.999 in a two-place currency is not a rounding problem to solve quietly — it is a
+ * caller sending something they did not mean, and storing 20.00 instead would be a silent
+ * change to a number that matters.
+ */
+declare function hasTooManyPlaces(amount: number, currency?: string): boolean;
+
 /**
  * Zod schemas derived from a descriptor at runtime. Unknown keys are rejected,
  * so clients can't set `id`, timestamps or undeclared columns (no mass assignment).
@@ -525,10 +571,61 @@ interface SeedContext {
     insertMany: InsertMany;
     /** Sample values: names, emails, sentences, dates. */
     fake: Fake;
+    /**
+     * Creates a user with a credential account, so you can sign in as them straight away:
+     *
+     *   await seedUser({ email: "ada@example.com", password: "correct-horse-battery", role: "admin" });
+     */
+    seedUser: SeedUser;
+}
+/** What `seedUser` needs to make somebody who can sign in. */
+interface SeedUserInput {
+    email: string;
+    /** Stored as the same PBKDF2 hash the sign-up route writes, so sign-in verifies it. */
+    password: string;
+    name?: string;
+    /** Seeded users are verified by default: an unverified one cannot sign in. */
+    emailVerified?: boolean;
+    /** e.g. "admin", which the dashboard's policies read. */
+    role?: string;
 }
+/** A user row and the credential account row that lets them sign in. */
+interface CredentialUserRows {
+    user: {
+        id: string;
+        name: string;
+        email: string;
+        emailVerified: boolean;
+        role: string | undefined;
+        createdAt: Date;
+        updatedAt: Date;
+    };
+    account: {
+        id: string;
+        accountId: string;
+        providerId: string;
+        userId: string;
+        password: string;
+        createdAt: Date;
+        updatedAt: Date;
+    };
+}
+/**
+ * The two rows Better Auth looks for when somebody signs in with a password.
+ *
+ * `accountId` is the one that is easy to get wrong. It is not the provider's name and it is
+ * not the email: for a credential account Better Auth writes the user's own id into that
+ * column at sign-up, and looks the account up by it at sign-in. Put the email there instead
+ * and everything looks right — the row exists, the hash is correct — but signing in answers
+ * "User not found", which is a long afternoon. Both rows are built here so that rule lives
+ * in one place rather than in every seed somebody writes by hand.
+ */
+declare function credentialUserRows(input: SeedUserInput): Promise<CredentialUserRows>;
+/** Creates a user who can actually sign in, and returns the row. */
+type SeedUser = (user: SeedUserInput) => Promise<CredentialUserRows["user"]>;
 type Seed = (context: SeedContext) => void | Promise<void>;
 declare function defineSeed(seed: Seed): Seed;
 
-declare const FLARE_VERSION = "0.9.1";
+declare const FLARE_VERSION = "0.10.0";
 
-export { type BelongsToRelation, type Country, CreateInput, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type Storage, type StorageBucket, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, currentPeriodEnd, defineSeed, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, grantsAccess, hashPassword, humanize, importSigningKey, initialFormValues, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toSubscriptionStatus, verifyPassword, verifyToken, words };
+export { type BelongsToRelation, type Country, CreateInput, type CredentialUserRows, DEFAULT_MONEY_EXPONENT, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type SeedUser, type SeedUserInput, type Storage, type StorageBucket, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, credentialUserRows, currentPeriodEnd, defineSeed, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, fromMinorUnits, grantsAccess, hasTooManyPlaces, hashPassword, humanize, importSigningKey, initialFormValues, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, moneyExponent, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toMinorUnits, toSubscriptionStatus, verifyPassword, verifyToken, words };

package/dist/index.js

@@ -1,5 +1,6 @@
 import {
   DEFAULT_FILE_MAX_BYTES,
+  DEFAULT_MONEY_EXPONENT,
   FILE_CATEGORIES,
   NUMBER_FORMATS,
   PolicyError,
@@ -24,6 +25,8 @@ import {
   fileMaxBytes,
   flagEmoji,
   formatPhone,
+  fromMinorUnits,
+  hasTooManyPlaces,
   humanize,
   isColor,
   isCountryCode,
@@ -32,6 +35,7 @@ import {
   isSlug,
   kebabCase,
   mimeTypesFor,
+  moneyExponent,
   normalizeDomain,
   ownershipFilter,
   pascalCase,
@@ -41,8 +45,9 @@ import {
   splitPhone,
   storedFields,
   toE164,
+  toMinorUnits,
   words
-} from "./chunk-AAXNSIZG.js";
+} from "./chunk-TB53VHXY.js";
 
 // src/password.ts
 var ALGORITHM = "pbkdf2-sha256";
@@ -705,6 +710,34 @@ function issuesByField(issues) {
 }
 
 // src/seed.ts
+async function credentialUserRows(input) {
+  const email = input.email.trim().toLowerCase();
+  if (!email.includes("@")) throw new Error(`seedUser needs an email address, got "${input.email}".`);
+  if (!input.password) throw new Error(`seedUser needs a password for ${email}.`);
+  const id = crypto.randomUUID();
+  const now = /* @__PURE__ */ new Date();
+  return {
+    user: {
+      id,
+      name: input.name ?? email.split("@")[0],
+      email,
+      emailVerified: input.emailVerified ?? true,
+      role: input.role,
+      createdAt: now,
+      updatedAt: now
+    },
+    account: {
+      id: crypto.randomUUID(),
+      // Not the email. See above.
+      accountId: id,
+      providerId: "credential",
+      userId: id,
+      password: await hashPassword(input.password),
+      createdAt: now,
+      updatedAt: now
+    }
+  };
+}
 function defineSeed(seed) {
   return seed;
 }
@@ -1019,9 +1052,10 @@ function createFake(seed = 20260101) {
 var fake = createFake();
 
 // src/index.ts
-var FLARE_VERSION = "0.9.1";
+var FLARE_VERSION = "0.10.0";
 export {
   DEFAULT_FILE_MAX_BYTES,
+  DEFAULT_MONEY_EXPONENT,
   FILE_CATEGORIES,
   FLARE_VERSION,
   NUMBER_FORMATS,
@@ -1047,6 +1081,7 @@ export {
   createObjectKey,
   createStorage,
   createValidators,
+  credentialUserRows,
   currentPeriodEnd,
   defaultFieldLabel,
   definePolicy,
@@ -1061,7 +1096,9 @@ export {
   formValuesToInput,
   formatPhone,
   formatValue,
+  fromMinorUnits,
   grantsAccess,
+  hasTooManyPlaces,
   hashPassword,
   humanize,
   importSigningKey,
@@ -1076,6 +1113,7 @@ export {
   kebabCase,
   matchesContentType,
   mimeTypesFor,
+  moneyExponent,
   normalizeDomain,
   optionLabel,
   ownershipFilter,
@@ -1096,6 +1134,7 @@ export {
   subscriptionPriceId,
   subscriptionState,
   toE164,
+  toMinorUnits,
   toSubscriptionStatus,
   verifyPassword,
   verifyToken,

package/dist/server.js

@@ -2,8 +2,9 @@ import {
   can,
   columnName,
   createValidators,
+  moneyExponent,
   storedFields
-} from "./chunk-AAXNSIZG.js";
+} from "./chunk-TB53VHXY.js";
 
 // ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/entity.js
 var entityKind = /* @__PURE__ */ Symbol.for("drizzle:entityKind");
@@ -1783,6 +1784,12 @@ function fieldJsonSchema(def) {
       const schema = { ...base, type: def.kind === "int" ? "integer" : "number" };
       if (def.min !== void 0) schema.minimum = def.min;
       if (def.max !== void 0) schema.maximum = def.max;
+      if (def.format === "money") {
+        const places = moneyExponent(def.currency);
+        schema.multipleOf = places === 0 ? 1 : Number(`1e-${places}`);
+        schema.description = base.description ?? `An amount in ${def.currency ?? "the app's currency"}, to ${places} decimal place${places === 1 ? "" : "s"}.`;
+        schema.examples = [places === 0 ? 1500 : 19.99];
+      }
       return schema;
     }
     case "boolean":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/core",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Flare runtime: resource descriptors, field grammar, and Cloudflare-native helpers",
   "license": "MIT",
   "author": "Muke Johnbaptist",