@fonderie/adapter-express 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fonderie, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# @fonderie/adapter-express
+
+Run Fonderie bricks inside your existing Express app. `bridge()` builds the
+Fonderie context for every request, `adapt()` converts any Fonderie
+middleware into a native Express one, and `mount()` attaches whole modules.
+
+## Install
+
+```sh
+npm install @fonderie/adapter-express
+```
+
+## Use
+
+```ts
+import { bridge, adapt, requireAuth } from '@fonderie/adapter-express';
+```
+
+Register `bridge(fonderie)` as global middleware first, then use the
+re-exported guards (`requireAuth`, `requireWorkspace`, `requirePermission`,
+`requireFeature`) directly on routes.
+
+`expressRequestToWeb` converts Express requests to web-standard `Request`
+objects for the Fonderie pipeline.
+
+## Why this exists
+
+You've shipped this plumbing before — auth, teams, billing, messaging —
+and the next project will ask for it again. Fonderie packages it once:
+plain TypeScript modules for
+[`@fonderie/core`](https://github.com/fonderie-js/sdk/tree/main/packages/core),
+PostgreSQL-backed, self-hosted, MIT. No external control plane, no
+per-seat anything. Register the modules you need; skip the ones you don't.
+
+**This package owns** the border crossing. It translates Express requests and
+middleware conventions into Fonderie's, so the bricks run inside an app you
+already have instead of demanding a rewrite.
+
+Browse the whole set at
+[fonderie-js/sdk](https://github.com/fonderie-js/sdk) · follow
+[@fonderiejs](https://x.com/fonderiejs)
+
+## License
+
+MIT © Fonderie, Inc.

package/dist/index.cjs

@@ -0,0 +1,156 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  OPERATIONS: () => import_permissions2.OPERATIONS,
+  adapt: () => adapt,
+  bridge: () => bridge,
+  expressRequestToWeb: () => expressRequestToWeb,
+  mount: () => mount,
+  requireAuth: () => requireAuth,
+  requireFeature: () => requireFeature,
+  requirePermission: () => requirePermission,
+  webResponseToExpress: () => webResponseToExpress,
+  withWorkspace: () => withWorkspace
+});
+module.exports = __toCommonJS(index_exports);
+var import_middlewares = require("@fonderie/core/middlewares");
+var import_workspaces = require("@fonderie/workspaces");
+var import_permissions = require("@fonderie/permissions");
+var import_billing = require("@fonderie/billing");
+var import_permissions2 = require("@fonderie/permissions");
+async function expressRequestToWeb(req) {
+  const encrypted = req.socket.encrypted;
+  const protocol = encrypted ? "https" : "http";
+  const host = req.headers["host"] ?? "localhost";
+  const url = `${protocol}://${host}${req.url ?? "/"}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(req.headers)) {
+    if (!value) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = req.method ?? "GET";
+  const hasBody = !["GET", "HEAD", "OPTIONS"].includes(method.toUpperCase());
+  const body = hasBody ? await readStream(req) : null;
+  return new Request(url, { method, headers, body });
+}
+async function webResponseToExpress(webRes, res) {
+  res.statusCode = webRes.status;
+  webRes.headers.forEach((value, key) => res.setHeader(key, value));
+  res.end(Buffer.from(await webRes.arrayBuffer()));
+}
+function readStream(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    req.on("data", (chunk) => chunks.push(chunk));
+    req.on("end", () => {
+      const buf = Buffer.concat(chunks);
+      resolve(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength));
+    });
+    req.on("error", reject);
+  });
+}
+function bridge(fonderie) {
+  return async (req, _res, next) => {
+    try {
+      const webReq = await expressRequestToWeb(req);
+      req._fonterieReq = webReq;
+      req._fonderie = await fonderie.buildContext(webReq.clone());
+      if (req._fonderie.meta["body"] !== void 0) {
+        req.body = req._fonderie.meta["body"];
+      }
+      next();
+    } catch (err) {
+      next(err);
+    }
+  };
+}
+function adapt(middleware) {
+  return async (req, res, next) => {
+    const ctx = req._fonderie;
+    if (!ctx) {
+      next(new Error("[fonderie] bridge() must be registered before adapt()"));
+      return;
+    }
+    let continued = false;
+    const result = await middleware(ctx, async () => {
+      continued = true;
+      return new Response();
+    });
+    if (continued) {
+      next();
+    } else {
+      await webResponseToExpress(result, res);
+    }
+  };
+}
+var requireAuth = adapt(import_middlewares.requireAuth);
+function withWorkspace(store) {
+  return adapt((0, import_workspaces.withWorkspace)(store));
+}
+function requirePermission(operation, permissionKey) {
+  return adapt((0, import_permissions.requirePermission)(operation, permissionKey));
+}
+function requireFeature(key) {
+  return adapt((0, import_billing.requireFeature)(key));
+}
+function mount(app, fonderie, register) {
+  const infraHandler = async (req, res) => {
+    const webReq = req._fonterieReq ?? await expressRequestToWeb(req);
+    const webRes = await fonderie.handle(webReq);
+    await webResponseToExpress(webRes, res);
+  };
+  app.use(bridge(fonderie));
+  if (register) {
+    register(app);
+    app.use(infraHandler);
+  } else {
+    let sealed = false;
+    const origListen = app.listen.bind(app);
+    app.listen = (...args) => {
+      if (!sealed) {
+        sealed = true;
+        app.use(infraHandler);
+      }
+      app.listen = origListen;
+      return origListen(...args);
+    };
+  }
+  return app;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  OPERATIONS,
+  adapt,
+  bridge,
+  expressRequestToWeb,
+  mount,
+  requireAuth,
+  requireFeature,
+  requirePermission,
+  webResponseToExpress,
+  withWorkspace
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http';\n\nimport type { FonderieApp, IFonderieContext, Middleware } from '@fonderie/core';\nimport { requireAuth as _requireAuth } from '@fonderie/core/middlewares';\nimport { withWorkspace as _withWorkspace } from '@fonderie/workspaces';\nimport { requirePermission as _requirePermission } from '@fonderie/permissions';\nimport { requireFeature as _requireFeature } from '@fonderie/billing';\n\nexport { OPERATIONS } from '@fonderie/permissions';\n\nexport type ExpressRequest = IncomingMessage & { body?: unknown; _fonderie?: IFonderieContext };\nexport type ExpressResponse = ServerResponse;\nexport type ExpressNext = (err?: unknown) => void;\n\n// ── Web Standard ↔ Express translation ───────────────────────────\n\nexport async function expressRequestToWeb(req: ExpressRequest): Promise<Request> {\n\tconst encrypted = (req.socket as { encrypted?: boolean }).encrypted;\n\tconst protocol = encrypted ? 'https' : 'http';\n\tconst host = req.headers['host'] ?? 'localhost';\n\tconst url = `${protocol}://${host}${req.url ?? '/'}`;\n\n\tconst headers = new Headers();\n\tfor (const [key, value] of Object.entries(req.headers)) {\n\t\tif (!value) continue;\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const v of value) headers.append(key, v);\n\t\t} else {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\n\tconst method = req.method ?? 'GET';\n\tconst hasBody = !['GET', 'HEAD', 'OPTIONS'].includes(method.toUpperCase());\n\tconst body = hasBody ? await readStream(req) : null;\n\n\treturn new Request(url, { method, headers, body });\n}\n\nexport async function webResponseToExpress(webRes: Response, res: ExpressResponse): Promise<void> {\n\tres.statusCode = webRes.status;\n\twebRes.headers.forEach((value, key) => res.setHeader(key, value));\n\tres.end(Buffer.from(await webRes.arrayBuffer()));\n}\n\nfunction readStream(req: IncomingMessage): Promise<ArrayBuffer> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst chunks: Buffer[] = [];\n\t\treq.on('data', (chunk: Buffer) => chunks.push(chunk));\n\t\treq.on('end', () => {\n\t\t\tconst buf = Buffer.concat(chunks);\n\t\t\t// slice creates a correctly-sized ArrayBuffer (buf.buffer is a shared pool)\n\t\t\tresolve(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength) as ArrayBuffer);\n\t\t});\n\t\treq.on('error', reject);\n\t});\n}\n\n// ── bridge ────────────────────────────────────────────────────────\n//\n// Express middleware. Populates req._fonderie with the fonderie context\n// (user, workspace, meta) for all subsequent route handlers.\n// Also forwards the parsed body to req.body.\n//\n//   app.use(bridge(fonderie))\n\nexport function bridge(fonderie: FonderieApp) {\n\treturn async (req: ExpressRequest, _res: ExpressResponse, next: ExpressNext) => {\n\t\ttry {\n\t\t\tconst webReq = await expressRequestToWeb(req);\n\t\t\t// Cache so the infra handler in mount() can reuse it without re-reading\n\t\t\t// the body stream (which can only be consumed once).\n\t\t\t(req as any)._fonterieReq = webReq;\n\t\t\treq._fonderie = await fonderie.buildContext(webReq.clone());\n\t\t\tif (req._fonderie.meta['body'] !== undefined) {\n\t\t\t\treq.body = req._fonderie.meta['body'];\n\t\t\t}\n\t\t\tnext();\n\t\t} catch (err) {\n\t\t\tnext(err);\n\t\t}\n\t};\n}\n\n// ── adapt ─────────────────────────────────────────────────────────\n//\n// Low-level escape hatch — wraps any fonderie Middleware into an Express\n// middleware function. Use this for custom fonderie middleware; prefer the\n// named exports below for the built-in fonderie guards.\n\nexport function adapt(middleware: Middleware) {\n\treturn async (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => {\n\t\tconst ctx = req._fonderie;\n\t\tif (!ctx) {\n\t\t\tnext(new Error('[fonderie] bridge() must be registered before adapt()'));\n\t\t\treturn;\n\t\t}\n\n\t\tlet continued = false;\n\t\tconst result = await middleware(ctx, async () => {\n\t\t\tcontinued = true;\n\t\t\treturn new Response();\n\t\t});\n\n\t\tif (continued) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tawait webResponseToExpress(result, res);\n\t\t}\n\t};\n}\n\n// ── Pre-adapted middleware ────────────────────────────────────────\n//\n// Drop-in replacements for the fonderie middleware functions — no adapt()\n// needed. Import directly from this package instead of from the source\n// packages, and use them as native Express middleware.\n//\n//   app.get('/jobs', requireAuth, withWorkspace(store), ...)\n\nexport const requireAuth = adapt(_requireAuth);\n\nexport function withWorkspace(store: Parameters<typeof _withWorkspace>[0]) {\n\treturn adapt(_withWorkspace(store));\n}\n\nexport function requirePermission(\n\toperation: Parameters<typeof _requirePermission>[0],\n\tpermissionKey: Parameters<typeof _requirePermission>[1],\n) {\n\treturn adapt(_requirePermission(operation, permissionKey));\n}\n\nexport function requireFeature(key: string) {\n\treturn adapt(_requireFeature(key));\n}\n\n// ── mount ─────────────────────────────────────────────────────────\n//\n// Wires up fonderie to an Express app. Returns the same app so you can add\n// routes after mount() and before app.listen() — infra is sealed lazily\n// when app.listen() is first called:\n//\n//   const api = mount(app, fonderie)\n//   api.use(buildTodoRouter(store))\n//   app.listen(port)\n//\n// Alternatively pass a register callback to be explicit about ordering:\n//\n//   mount(app, fonderie, (app) => {\n//     app.use(buildTodoRouter(store))\n//   })\n\ntype ExpressApp = {\n\tuse:    (...args: any[]) => any;\n\tall:    (path: string, handler: (req: ExpressRequest, res: ExpressResponse) => void) => void;\n\tlisten: (...args: any[]) => any;\n};\n\nexport function mount<T extends ExpressApp>(\n\tapp: T,\n\tfonderie: FonderieApp,\n\tregister?: (app: T) => void,\n): T {\n\tconst infraHandler = async (req: ExpressRequest, res: ExpressResponse) => {\n\t\tconst webReq = (req as any)._fonterieReq as Request ?? await expressRequestToWeb(req);\n\t\tconst webRes = await fonderie.handle(webReq);\n\t\tawait webResponseToExpress(webRes, res);\n\t};\n\n\tapp.use(bridge(fonderie));\n\n\tif (register) {\n\t\tregister(app);\n\t\tapp.use(infraHandler);\n\t} else {\n\t\tlet sealed = false;\n\t\tconst origListen = app.listen.bind(app);\n\t\t(app as ExpressApp).listen = (...args: any[]) => {\n\t\t\tif (!sealed) {\n\t\t\t\tsealed = true;\n\t\t\t\tapp.use(infraHandler);\n\t\t\t}\n\t\t\t(app as ExpressApp).listen = origListen;\n\t\t\treturn origListen(...args);\n\t\t};\n\t}\n\n\treturn app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA4C;AAC5C,wBAAgD;AAChD,yBAAwD;AACxD,qBAAkD;AAElD,IAAAA,sBAA2B;AAQ3B,eAAsB,oBAAoB,KAAuC;AAChF,QAAM,YAAa,IAAI,OAAmC;AAC1D,QAAM,WAAW,YAAY,UAAU;AACvC,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK;AACpC,QAAM,MAAM,GAAG,QAAQ,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG;AAElD,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,OAAO,GAAG;AACvD,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,iBAAW,KAAK,MAAO,SAAQ,OAAO,KAAK,CAAC;AAAA,IAC7C,OAAO;AACN,cAAQ,IAAI,KAAK,KAAK;AAAA,IACvB;AAAA,EACD;AAEA,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,UAAU,CAAC,CAAC,OAAO,QAAQ,SAAS,EAAE,SAAS,OAAO,YAAY,CAAC;AACzE,QAAM,OAAO,UAAU,MAAM,WAAW,GAAG,IAAI;AAE/C,SAAO,IAAI,QAAQ,KAAK,EAAE,QAAQ,SAAS,KAAK,CAAC;AAClD;AAEA,eAAsB,qBAAqB,QAAkB,KAAqC;AACjG,MAAI,aAAa,OAAO;AACxB,SAAO,QAAQ,QAAQ,CAAC,OAAO,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAChE,MAAI,IAAI,OAAO,KAAK,MAAM,OAAO,YAAY,CAAC,CAAC;AAChD;AAEA,SAAS,WAAW,KAA4C;AAC/D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACvC,UAAM,SAAmB,CAAC;AAC1B,QAAI,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AACpD,QAAI,GAAG,OAAO,MAAM;AACnB,YAAM,MAAM,OAAO,OAAO,MAAM;AAEhC,cAAQ,IAAI,OAAO,MAAM,IAAI,YAAY,IAAI,aAAa,IAAI,UAAU,CAAgB;AAAA,IACzF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACvB,CAAC;AACF;AAUO,SAAS,OAAO,UAAuB;AAC7C,SAAO,OAAO,KAAqB,MAAuB,SAAsB;AAC/E,QAAI;AACH,YAAM,SAAS,MAAM,oBAAoB,GAAG;AAG5C,MAAC,IAAY,eAAe;AAC5B,UAAI,YAAY,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AAC1D,UAAI,IAAI,UAAU,KAAK,MAAM,MAAM,QAAW;AAC7C,YAAI,OAAO,IAAI,UAAU,KAAK,MAAM;AAAA,MACrC;AACA,WAAK;AAAA,IACN,SAAS,KAAK;AACb,WAAK,GAAG;AAAA,IACT;AAAA,EACD;AACD;AAQO,SAAS,MAAM,YAAwB;AAC7C,SAAO,OAAO,KAAqB,KAAsB,SAAsB;AAC9E,UAAM,MAAM,IAAI;AAChB,QAAI,CAAC,KAAK;AACT,WAAK,IAAI,MAAM,uDAAuD,CAAC;AACvE;AAAA,IACD;AAEA,QAAI,YAAY;AAChB,UAAM,SAAS,MAAM,WAAW,KAAK,YAAY;AAChD,kBAAY;AACZ,aAAO,IAAI,SAAS;AAAA,IACrB,CAAC;AAED,QAAI,WAAW;AACd,WAAK;AAAA,IACN,OAAO;AACN,YAAM,qBAAqB,QAAQ,GAAG;AAAA,IACvC;AAAA,EACD;AACD;AAUO,IAAM,cAAc,MAAM,mBAAAC,WAAY;AAEtC,SAAS,cAAc,OAA6C;AAC1E,SAAO,UAAM,kBAAAC,eAAe,KAAK,CAAC;AACnC;AAEO,SAAS,kBACf,WACA,eACC;AACD,SAAO,UAAM,mBAAAC,mBAAmB,WAAW,aAAa,CAAC;AAC1D;AAEO,SAAS,eAAe,KAAa;AAC3C,SAAO,UAAM,eAAAC,gBAAgB,GAAG,CAAC;AAClC;AAwBO,SAAS,MACf,KACA,UACA,UACI;AACJ,QAAM,eAAe,OAAO,KAAqB,QAAyB;AACzE,UAAM,SAAU,IAAY,gBAA2B,MAAM,oBAAoB,GAAG;AACpF,UAAM,SAAS,MAAM,SAAS,OAAO,MAAM;AAC3C,UAAM,qBAAqB,QAAQ,GAAG;AAAA,EACvC;AAEA,MAAI,IAAI,OAAO,QAAQ,CAAC;AAExB,MAAI,UAAU;AACb,aAAS,GAAG;AACZ,QAAI,IAAI,YAAY;AAAA,EACrB,OAAO;AACN,QAAI,SAAS;AACb,UAAM,aAAa,IAAI,OAAO,KAAK,GAAG;AACtC,IAAC,IAAmB,SAAS,IAAI,SAAgB;AAChD,UAAI,CAAC,QAAQ;AACZ,iBAAS;AACT,YAAI,IAAI,YAAY;AAAA,MACrB;AACA,MAAC,IAAmB,SAAS;AAC7B,aAAO,WAAW,GAAG,IAAI;AAAA,IAC1B;AAAA,EACD;AAEA,SAAO;AACR;","names":["import_permissions","_requireAuth","_withWorkspace","_requirePermission","_requireFeature"]}

package/dist/index.d.cts

@@ -0,0 +1,28 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { IFonderieContext, Middleware, FonderieApp } from '@fonderie/core';
+import { withWorkspace as withWorkspace$1 } from '@fonderie/workspaces';
+import { requirePermission as requirePermission$1 } from '@fonderie/permissions';
+export { OPERATIONS } from '@fonderie/permissions';
+
+type ExpressRequest = IncomingMessage & {
+    body?: unknown;
+    _fonderie?: IFonderieContext;
+};
+type ExpressResponse = ServerResponse;
+type ExpressNext = (err?: unknown) => void;
+declare function expressRequestToWeb(req: ExpressRequest): Promise<Request>;
+declare function webResponseToExpress(webRes: Response, res: ExpressResponse): Promise<void>;
+declare function bridge(fonderie: FonderieApp): (req: ExpressRequest, _res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function adapt(middleware: Middleware): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare const requireAuth: (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function withWorkspace(store: Parameters<typeof withWorkspace$1>[0]): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function requirePermission(operation: Parameters<typeof requirePermission$1>[0], permissionKey: Parameters<typeof requirePermission$1>[1]): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function requireFeature(key: string): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+type ExpressApp = {
+    use: (...args: any[]) => any;
+    all: (path: string, handler: (req: ExpressRequest, res: ExpressResponse) => void) => void;
+    listen: (...args: any[]) => any;
+};
+declare function mount<T extends ExpressApp>(app: T, fonderie: FonderieApp, register?: (app: T) => void): T;
+
+export { type ExpressNext, type ExpressRequest, type ExpressResponse, adapt, bridge, expressRequestToWeb, mount, requireAuth, requireFeature, requirePermission, webResponseToExpress, withWorkspace };

package/dist/index.d.ts

@@ -0,0 +1,28 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { IFonderieContext, Middleware, FonderieApp } from '@fonderie/core';
+import { withWorkspace as withWorkspace$1 } from '@fonderie/workspaces';
+import { requirePermission as requirePermission$1 } from '@fonderie/permissions';
+export { OPERATIONS } from '@fonderie/permissions';
+
+type ExpressRequest = IncomingMessage & {
+    body?: unknown;
+    _fonderie?: IFonderieContext;
+};
+type ExpressResponse = ServerResponse;
+type ExpressNext = (err?: unknown) => void;
+declare function expressRequestToWeb(req: ExpressRequest): Promise<Request>;
+declare function webResponseToExpress(webRes: Response, res: ExpressResponse): Promise<void>;
+declare function bridge(fonderie: FonderieApp): (req: ExpressRequest, _res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function adapt(middleware: Middleware): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare const requireAuth: (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function withWorkspace(store: Parameters<typeof withWorkspace$1>[0]): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function requirePermission(operation: Parameters<typeof requirePermission$1>[0], permissionKey: Parameters<typeof requirePermission$1>[1]): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+declare function requireFeature(key: string): (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => Promise<void>;
+type ExpressApp = {
+    use: (...args: any[]) => any;
+    all: (path: string, handler: (req: ExpressRequest, res: ExpressResponse) => void) => void;
+    listen: (...args: any[]) => any;
+};
+declare function mount<T extends ExpressApp>(app: T, fonderie: FonderieApp, register?: (app: T) => void): T;
+
+export { type ExpressNext, type ExpressRequest, type ExpressResponse, adapt, bridge, expressRequestToWeb, mount, requireAuth, requireFeature, requirePermission, webResponseToExpress, withWorkspace };

package/dist/index.js

@@ -0,0 +1,122 @@
+// src/index.ts
+import { requireAuth as _requireAuth } from "@fonderie/core/middlewares";
+import { withWorkspace as _withWorkspace } from "@fonderie/workspaces";
+import { requirePermission as _requirePermission } from "@fonderie/permissions";
+import { requireFeature as _requireFeature } from "@fonderie/billing";
+import { OPERATIONS } from "@fonderie/permissions";
+async function expressRequestToWeb(req) {
+  const encrypted = req.socket.encrypted;
+  const protocol = encrypted ? "https" : "http";
+  const host = req.headers["host"] ?? "localhost";
+  const url = `${protocol}://${host}${req.url ?? "/"}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(req.headers)) {
+    if (!value) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = req.method ?? "GET";
+  const hasBody = !["GET", "HEAD", "OPTIONS"].includes(method.toUpperCase());
+  const body = hasBody ? await readStream(req) : null;
+  return new Request(url, { method, headers, body });
+}
+async function webResponseToExpress(webRes, res) {
+  res.statusCode = webRes.status;
+  webRes.headers.forEach((value, key) => res.setHeader(key, value));
+  res.end(Buffer.from(await webRes.arrayBuffer()));
+}
+function readStream(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    req.on("data", (chunk) => chunks.push(chunk));
+    req.on("end", () => {
+      const buf = Buffer.concat(chunks);
+      resolve(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength));
+    });
+    req.on("error", reject);
+  });
+}
+function bridge(fonderie) {
+  return async (req, _res, next) => {
+    try {
+      const webReq = await expressRequestToWeb(req);
+      req._fonterieReq = webReq;
+      req._fonderie = await fonderie.buildContext(webReq.clone());
+      if (req._fonderie.meta["body"] !== void 0) {
+        req.body = req._fonderie.meta["body"];
+      }
+      next();
+    } catch (err) {
+      next(err);
+    }
+  };
+}
+function adapt(middleware) {
+  return async (req, res, next) => {
+    const ctx = req._fonderie;
+    if (!ctx) {
+      next(new Error("[fonderie] bridge() must be registered before adapt()"));
+      return;
+    }
+    let continued = false;
+    const result = await middleware(ctx, async () => {
+      continued = true;
+      return new Response();
+    });
+    if (continued) {
+      next();
+    } else {
+      await webResponseToExpress(result, res);
+    }
+  };
+}
+var requireAuth = adapt(_requireAuth);
+function withWorkspace(store) {
+  return adapt(_withWorkspace(store));
+}
+function requirePermission(operation, permissionKey) {
+  return adapt(_requirePermission(operation, permissionKey));
+}
+function requireFeature(key) {
+  return adapt(_requireFeature(key));
+}
+function mount(app, fonderie, register) {
+  const infraHandler = async (req, res) => {
+    const webReq = req._fonterieReq ?? await expressRequestToWeb(req);
+    const webRes = await fonderie.handle(webReq);
+    await webResponseToExpress(webRes, res);
+  };
+  app.use(bridge(fonderie));
+  if (register) {
+    register(app);
+    app.use(infraHandler);
+  } else {
+    let sealed = false;
+    const origListen = app.listen.bind(app);
+    app.listen = (...args) => {
+      if (!sealed) {
+        sealed = true;
+        app.use(infraHandler);
+      }
+      app.listen = origListen;
+      return origListen(...args);
+    };
+  }
+  return app;
+}
+export {
+  OPERATIONS,
+  adapt,
+  bridge,
+  expressRequestToWeb,
+  mount,
+  requireAuth,
+  requireFeature,
+  requirePermission,
+  webResponseToExpress,
+  withWorkspace
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http';\n\nimport type { FonderieApp, IFonderieContext, Middleware } from '@fonderie/core';\nimport { requireAuth as _requireAuth } from '@fonderie/core/middlewares';\nimport { withWorkspace as _withWorkspace } from '@fonderie/workspaces';\nimport { requirePermission as _requirePermission } from '@fonderie/permissions';\nimport { requireFeature as _requireFeature } from '@fonderie/billing';\n\nexport { OPERATIONS } from '@fonderie/permissions';\n\nexport type ExpressRequest = IncomingMessage & { body?: unknown; _fonderie?: IFonderieContext };\nexport type ExpressResponse = ServerResponse;\nexport type ExpressNext = (err?: unknown) => void;\n\n// ── Web Standard ↔ Express translation ───────────────────────────\n\nexport async function expressRequestToWeb(req: ExpressRequest): Promise<Request> {\n\tconst encrypted = (req.socket as { encrypted?: boolean }).encrypted;\n\tconst protocol = encrypted ? 'https' : 'http';\n\tconst host = req.headers['host'] ?? 'localhost';\n\tconst url = `${protocol}://${host}${req.url ?? '/'}`;\n\n\tconst headers = new Headers();\n\tfor (const [key, value] of Object.entries(req.headers)) {\n\t\tif (!value) continue;\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const v of value) headers.append(key, v);\n\t\t} else {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\n\tconst method = req.method ?? 'GET';\n\tconst hasBody = !['GET', 'HEAD', 'OPTIONS'].includes(method.toUpperCase());\n\tconst body = hasBody ? await readStream(req) : null;\n\n\treturn new Request(url, { method, headers, body });\n}\n\nexport async function webResponseToExpress(webRes: Response, res: ExpressResponse): Promise<void> {\n\tres.statusCode = webRes.status;\n\twebRes.headers.forEach((value, key) => res.setHeader(key, value));\n\tres.end(Buffer.from(await webRes.arrayBuffer()));\n}\n\nfunction readStream(req: IncomingMessage): Promise<ArrayBuffer> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst chunks: Buffer[] = [];\n\t\treq.on('data', (chunk: Buffer) => chunks.push(chunk));\n\t\treq.on('end', () => {\n\t\t\tconst buf = Buffer.concat(chunks);\n\t\t\t// slice creates a correctly-sized ArrayBuffer (buf.buffer is a shared pool)\n\t\t\tresolve(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength) as ArrayBuffer);\n\t\t});\n\t\treq.on('error', reject);\n\t});\n}\n\n// ── bridge ────────────────────────────────────────────────────────\n//\n// Express middleware. Populates req._fonderie with the fonderie context\n// (user, workspace, meta) for all subsequent route handlers.\n// Also forwards the parsed body to req.body.\n//\n//   app.use(bridge(fonderie))\n\nexport function bridge(fonderie: FonderieApp) {\n\treturn async (req: ExpressRequest, _res: ExpressResponse, next: ExpressNext) => {\n\t\ttry {\n\t\t\tconst webReq = await expressRequestToWeb(req);\n\t\t\t// Cache so the infra handler in mount() can reuse it without re-reading\n\t\t\t// the body stream (which can only be consumed once).\n\t\t\t(req as any)._fonterieReq = webReq;\n\t\t\treq._fonderie = await fonderie.buildContext(webReq.clone());\n\t\t\tif (req._fonderie.meta['body'] !== undefined) {\n\t\t\t\treq.body = req._fonderie.meta['body'];\n\t\t\t}\n\t\t\tnext();\n\t\t} catch (err) {\n\t\t\tnext(err);\n\t\t}\n\t};\n}\n\n// ── adapt ─────────────────────────────────────────────────────────\n//\n// Low-level escape hatch — wraps any fonderie Middleware into an Express\n// middleware function. Use this for custom fonderie middleware; prefer the\n// named exports below for the built-in fonderie guards.\n\nexport function adapt(middleware: Middleware) {\n\treturn async (req: ExpressRequest, res: ExpressResponse, next: ExpressNext) => {\n\t\tconst ctx = req._fonderie;\n\t\tif (!ctx) {\n\t\t\tnext(new Error('[fonderie] bridge() must be registered before adapt()'));\n\t\t\treturn;\n\t\t}\n\n\t\tlet continued = false;\n\t\tconst result = await middleware(ctx, async () => {\n\t\t\tcontinued = true;\n\t\t\treturn new Response();\n\t\t});\n\n\t\tif (continued) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tawait webResponseToExpress(result, res);\n\t\t}\n\t};\n}\n\n// ── Pre-adapted middleware ────────────────────────────────────────\n//\n// Drop-in replacements for the fonderie middleware functions — no adapt()\n// needed. Import directly from this package instead of from the source\n// packages, and use them as native Express middleware.\n//\n//   app.get('/jobs', requireAuth, withWorkspace(store), ...)\n\nexport const requireAuth = adapt(_requireAuth);\n\nexport function withWorkspace(store: Parameters<typeof _withWorkspace>[0]) {\n\treturn adapt(_withWorkspace(store));\n}\n\nexport function requirePermission(\n\toperation: Parameters<typeof _requirePermission>[0],\n\tpermissionKey: Parameters<typeof _requirePermission>[1],\n) {\n\treturn adapt(_requirePermission(operation, permissionKey));\n}\n\nexport function requireFeature(key: string) {\n\treturn adapt(_requireFeature(key));\n}\n\n// ── mount ─────────────────────────────────────────────────────────\n//\n// Wires up fonderie to an Express app. Returns the same app so you can add\n// routes after mount() and before app.listen() — infra is sealed lazily\n// when app.listen() is first called:\n//\n//   const api = mount(app, fonderie)\n//   api.use(buildTodoRouter(store))\n//   app.listen(port)\n//\n// Alternatively pass a register callback to be explicit about ordering:\n//\n//   mount(app, fonderie, (app) => {\n//     app.use(buildTodoRouter(store))\n//   })\n\ntype ExpressApp = {\n\tuse:    (...args: any[]) => any;\n\tall:    (path: string, handler: (req: ExpressRequest, res: ExpressResponse) => void) => void;\n\tlisten: (...args: any[]) => any;\n};\n\nexport function mount<T extends ExpressApp>(\n\tapp: T,\n\tfonderie: FonderieApp,\n\tregister?: (app: T) => void,\n): T {\n\tconst infraHandler = async (req: ExpressRequest, res: ExpressResponse) => {\n\t\tconst webReq = (req as any)._fonterieReq as Request ?? await expressRequestToWeb(req);\n\t\tconst webRes = await fonderie.handle(webReq);\n\t\tawait webResponseToExpress(webRes, res);\n\t};\n\n\tapp.use(bridge(fonderie));\n\n\tif (register) {\n\t\tregister(app);\n\t\tapp.use(infraHandler);\n\t} else {\n\t\tlet sealed = false;\n\t\tconst origListen = app.listen.bind(app);\n\t\t(app as ExpressApp).listen = (...args: any[]) => {\n\t\t\tif (!sealed) {\n\t\t\t\tsealed = true;\n\t\t\t\tapp.use(infraHandler);\n\t\t\t}\n\t\t\t(app as ExpressApp).listen = origListen;\n\t\t\treturn origListen(...args);\n\t\t};\n\t}\n\n\treturn app;\n}\n"],"mappings":";AAGA,SAAS,eAAe,oBAAoB;AAC5C,SAAS,iBAAiB,sBAAsB;AAChD,SAAS,qBAAqB,0BAA0B;AACxD,SAAS,kBAAkB,uBAAuB;AAElD,SAAS,kBAAkB;AAQ3B,eAAsB,oBAAoB,KAAuC;AAChF,QAAM,YAAa,IAAI,OAAmC;AAC1D,QAAM,WAAW,YAAY,UAAU;AACvC,QAAM,OAAO,IAAI,QAAQ,MAAM,KAAK;AACpC,QAAM,MAAM,GAAG,QAAQ,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG;AAElD,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,OAAO,GAAG;AACvD,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,iBAAW,KAAK,MAAO,SAAQ,OAAO,KAAK,CAAC;AAAA,IAC7C,OAAO;AACN,cAAQ,IAAI,KAAK,KAAK;AAAA,IACvB;AAAA,EACD;AAEA,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,UAAU,CAAC,CAAC,OAAO,QAAQ,SAAS,EAAE,SAAS,OAAO,YAAY,CAAC;AACzE,QAAM,OAAO,UAAU,MAAM,WAAW,GAAG,IAAI;AAE/C,SAAO,IAAI,QAAQ,KAAK,EAAE,QAAQ,SAAS,KAAK,CAAC;AAClD;AAEA,eAAsB,qBAAqB,QAAkB,KAAqC;AACjG,MAAI,aAAa,OAAO;AACxB,SAAO,QAAQ,QAAQ,CAAC,OAAO,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAChE,MAAI,IAAI,OAAO,KAAK,MAAM,OAAO,YAAY,CAAC,CAAC;AAChD;AAEA,SAAS,WAAW,KAA4C;AAC/D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACvC,UAAM,SAAmB,CAAC;AAC1B,QAAI,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AACpD,QAAI,GAAG,OAAO,MAAM;AACnB,YAAM,MAAM,OAAO,OAAO,MAAM;AAEhC,cAAQ,IAAI,OAAO,MAAM,IAAI,YAAY,IAAI,aAAa,IAAI,UAAU,CAAgB;AAAA,IACzF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACvB,CAAC;AACF;AAUO,SAAS,OAAO,UAAuB;AAC7C,SAAO,OAAO,KAAqB,MAAuB,SAAsB;AAC/E,QAAI;AACH,YAAM,SAAS,MAAM,oBAAoB,GAAG;AAG5C,MAAC,IAAY,eAAe;AAC5B,UAAI,YAAY,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AAC1D,UAAI,IAAI,UAAU,KAAK,MAAM,MAAM,QAAW;AAC7C,YAAI,OAAO,IAAI,UAAU,KAAK,MAAM;AAAA,MACrC;AACA,WAAK;AAAA,IACN,SAAS,KAAK;AACb,WAAK,GAAG;AAAA,IACT;AAAA,EACD;AACD;AAQO,SAAS,MAAM,YAAwB;AAC7C,SAAO,OAAO,KAAqB,KAAsB,SAAsB;AAC9E,UAAM,MAAM,IAAI;AAChB,QAAI,CAAC,KAAK;AACT,WAAK,IAAI,MAAM,uDAAuD,CAAC;AACvE;AAAA,IACD;AAEA,QAAI,YAAY;AAChB,UAAM,SAAS,MAAM,WAAW,KAAK,YAAY;AAChD,kBAAY;AACZ,aAAO,IAAI,SAAS;AAAA,IACrB,CAAC;AAED,QAAI,WAAW;AACd,WAAK;AAAA,IACN,OAAO;AACN,YAAM,qBAAqB,QAAQ,GAAG;AAAA,IACvC;AAAA,EACD;AACD;AAUO,IAAM,cAAc,MAAM,YAAY;AAEtC,SAAS,cAAc,OAA6C;AAC1E,SAAO,MAAM,eAAe,KAAK,CAAC;AACnC;AAEO,SAAS,kBACf,WACA,eACC;AACD,SAAO,MAAM,mBAAmB,WAAW,aAAa,CAAC;AAC1D;AAEO,SAAS,eAAe,KAAa;AAC3C,SAAO,MAAM,gBAAgB,GAAG,CAAC;AAClC;AAwBO,SAAS,MACf,KACA,UACA,UACI;AACJ,QAAM,eAAe,OAAO,KAAqB,QAAyB;AACzE,UAAM,SAAU,IAAY,gBAA2B,MAAM,oBAAoB,GAAG;AACpF,UAAM,SAAS,MAAM,SAAS,OAAO,MAAM;AAC3C,UAAM,qBAAqB,QAAQ,GAAG;AAAA,EACvC;AAEA,MAAI,IAAI,OAAO,QAAQ,CAAC;AAExB,MAAI,UAAU;AACb,aAAS,GAAG;AACZ,QAAI,IAAI,YAAY;AAAA,EACrB,OAAO;AACN,QAAI,SAAS;AACb,UAAM,aAAa,IAAI,OAAO,KAAK,GAAG;AACtC,IAAC,IAAmB,SAAS,IAAI,SAAgB;AAChD,UAAI,CAAC,QAAQ;AACZ,iBAAS;AACT,YAAI,IAAI,YAAY;AAAA,MACrB;AACA,MAAC,IAAmB,SAAS;AAC7B,aAAO,WAAW,GAAG,IAAI;AAAA,IAC1B;AAAA,EACD;AAEA,SAAO;AACR;","names":[]}

package/package.json

@@ -0,0 +1,82 @@
+{
+	"name": "@fonderie/adapter-express",
+	"version": "1.0.0",
+	"description": "Express adapter for fonderie-js — bridge(), adapt(), mount() to use fonderie middleware in native Express routes.",
+	"keywords": [
+		"fonderie-js",
+		"express",
+		"adapter",
+		"middleware",
+		"saas",
+		"typescript"
+	],
+	"license": "MIT",
+	"type": "module",
+	"engines": {
+		"node": ">=20"
+	},
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"require": "./dist/index.cjs"
+		}
+	},
+	"main": "./dist/index.cjs",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"scripts": {
+		"build": "tsup",
+		"dev": "tsup --watch",
+		"test": "tsx --test src/__tests__/*.test.ts",
+		"typecheck": "tsc --noEmit",
+		"lint": "biome lint src",
+		"format": "biome format --write src",
+		"check": "biome check --write src"
+	},
+	"peerDependencies": {
+		"@fonderie/core": "^0.1.0",
+		"@fonderie/workspaces": "^1.0.0",
+		"@fonderie/permissions": "^1.0.0",
+		"@fonderie/billing": "^1.0.0",
+		"express": "^4.0.0 || ^5.0.0"
+	},
+	"peerDependenciesMeta": {
+		"@fonderie/workspaces": {
+			"optional": true
+		},
+		"@fonderie/permissions": {
+			"optional": true
+		},
+		"@fonderie/billing": {
+			"optional": true
+		}
+	},
+	"devDependencies": {
+		"@fonderie/core": "../core",
+		"@fonderie/workspaces": "../workspaces",
+		"@fonderie/permissions": "../permissions",
+		"@fonderie/billing": "../billing",
+		"@types/node": "^25.6.0",
+		"tsx": "^4.21.0",
+		"tsup": "^8.5.1",
+		"typescript": "^6.0.3"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"files": [
+		"dist",
+		"LICENSE",
+		"README.md"
+	],
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/fonderie-js/sdk.git",
+		"directory": "packages/adapter-express"
+	},
+	"homepage": "https://github.com/fonderie-js/sdk/tree/main/packages/adapter-express#readme",
+	"bugs": {
+		"url": "https://github.com/fonderie-js/sdk/issues"
+	}
+}