@fonderie/adapter-koa 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fonderie, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# @fonderie/adapter-koa
+
+Run Fonderie bricks inside your existing Koa app. `bridge()` builds the
+Fonderie context for every request, `adapt()` converts any Fonderie
+middleware into a native Koa one, and `mount()` attaches whole modules.
+
+## Install
+
+```sh
+npm install @fonderie/adapter-koa
+```
+
+## Use
+
+```ts
+import { bridge, adapt, requireAuth } from '@fonderie/adapter-koa';
+```
+
+Register `bridge(fonderie)` as global middleware first, then use the
+re-exported guards (`requireAuth`, `requireWorkspace`, `requirePermission`,
+`requireFeature`) directly on routes.
+
+`koaContextToWeb` converts Koa contexts to web-standard `Request` objects
+for the Fonderie pipeline.
+
+## Why this exists
+
+You've shipped this plumbing before — auth, teams, billing, messaging —
+and the next project will ask for it again. Fonderie packages it once:
+plain TypeScript modules for
+[`@fonderie/core`](https://github.com/fonderie-js/sdk/tree/main/packages/core),
+PostgreSQL-backed, self-hosted, MIT. No external control plane, no
+per-seat anything. Register the modules you need; skip the ones you don't.
+
+**This package owns** the border crossing. It translates Koa contexts and
+middleware conventions into Fonderie's, so the bricks run inside an app you
+already have instead of demanding a rewrite.
+
+Browse the whole set at
+[fonderie-js/sdk](https://github.com/fonderie-js/sdk) · follow
+[@fonderiejs](https://x.com/fonderiejs)
+
+## License
+
+MIT © Fonderie, Inc.

package/dist/index.cjs

@@ -0,0 +1,125 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  OPERATIONS: () => import_permissions2.OPERATIONS,
+  adapt: () => adapt,
+  bridge: () => bridge,
+  koaContextToWeb: () => koaContextToWeb,
+  mount: () => mount,
+  requireAuth: () => requireAuth,
+  requireFeature: () => requireFeature,
+  requirePermission: () => requirePermission,
+  webResponseToKoa: () => webResponseToKoa,
+  withWorkspace: () => withWorkspace
+});
+module.exports = __toCommonJS(index_exports);
+var import_middlewares = require("@fonderie/core/middlewares");
+var import_workspaces = require("@fonderie/workspaces");
+var import_permissions = require("@fonderie/permissions");
+var import_billing = require("@fonderie/billing");
+var import_permissions2 = require("@fonderie/permissions");
+function koaContextToWeb(ctx) {
+  const encrypted = ctx.req.socket.encrypted;
+  const protocol = encrypted ? "https" : "http";
+  const host = ctx.request.headers["host"] ?? "localhost";
+  const url = `${protocol}://${host}${ctx.request.url}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(ctx.request.headers)) {
+    if (!value) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = ctx.request.method.toUpperCase();
+  const hasBody = method !== "GET" && method !== "HEAD";
+  return new Request(url, {
+    headers,
+    method,
+    body: hasBody ? ctx.request.rawBody ?? null : null
+  });
+}
+async function webResponseToKoa(webRes, ctx) {
+  ctx.response.status = webRes.status;
+  webRes.headers.forEach((value, key) => ctx.response.set(key, value));
+  ctx.response.body = await webRes.text();
+}
+function bridge(fonderie) {
+  return async (ctx, next) => {
+    const webReq = koaContextToWeb(ctx);
+    ctx.state["_fonderie"] = await fonderie.buildContext(webReq.clone());
+    await next();
+  };
+}
+function adapt(middleware) {
+  return async (ctx, next) => {
+    const fCtx = ctx.state["_fonderie"];
+    if (!fCtx) throw new Error("[fonderie] bridge() must be registered before adapt()");
+    let continued = false;
+    const result = await middleware(fCtx, async () => {
+      continued = true;
+      return new Response();
+    });
+    if (continued) {
+      await next();
+    } else {
+      await webResponseToKoa(result, ctx);
+    }
+  };
+}
+var requireAuth = adapt(import_middlewares.requireAuth);
+function withWorkspace(store) {
+  return adapt((0, import_workspaces.withWorkspace)(store));
+}
+function requirePermission(operation, permissionKey) {
+  return adapt((0, import_permissions.requirePermission)(operation, permissionKey));
+}
+function requireFeature(key) {
+  return adapt((0, import_billing.requireFeature)(key));
+}
+function mount(app, fonderie) {
+  app.use(async (ctx, next) => {
+    const webReq = koaContextToWeb(ctx);
+    ctx.state["_fonderie"] = await fonderie.buildContext(webReq.clone());
+    await next();
+    if (ctx.body === void 0) {
+      const webRes = await fonderie.handle(webReq);
+      await webResponseToKoa(webRes, ctx);
+    }
+  });
+  return app;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  OPERATIONS,
+  adapt,
+  bridge,
+  koaContextToWeb,
+  mount,
+  requireAuth,
+  requireFeature,
+  requirePermission,
+  webResponseToKoa,
+  withWorkspace
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport type Koa                from 'koa';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\ntype KoaMiddleware<S = any, C = any> = Koa.Middleware<S, C>;\n\nimport type { FonderieApp, IFonderieContext, Middleware } from '@fonderie/core';\nimport { requireAuth as _requireAuth } from '@fonderie/core/middlewares';\nimport { withWorkspace as _withWorkspace } from '@fonderie/workspaces';\nimport { requirePermission as _requirePermission } from '@fonderie/permissions';\nimport { requireFeature as _requireFeature } from '@fonderie/billing';\n\nexport { OPERATIONS } from '@fonderie/permissions';\n\n// Minimal Koa shape used internally for Web Standard translation.\n// Application code uses Koa's own context types (Koa.ParameterizedContext).\nexport interface KoaContext {\n\trequest: {\n\t\turl: string;\n\t\tmethod: string;\n\t\trawBody?: string;\n\t\theaders: Record<string, string | string[] | undefined>;\n\t};\n\tresponse: {\n\t\tbody: unknown;\n\t\tstatus: number;\n\t\tset(key: string, value: string): void;\n\t};\n\treq: IncomingMessage;\n\tstate: Record<string, unknown>;\n}\n\nexport type KoaNext = () => Promise<void>;\n\n// ── Web Standard ↔ Koa translation ───────────────────────────────\n\nexport function koaContextToWeb(ctx: KoaContext): Request {\n\tconst encrypted = (ctx.req.socket as { encrypted?: boolean }).encrypted;\n\tconst protocol = encrypted ? 'https' : 'http';\n\tconst host = ctx.request.headers['host'] ?? 'localhost';\n\tconst url = `${protocol}://${host}${ctx.request.url}`;\n\n\tconst headers = new Headers();\n\tfor (const [key, value] of Object.entries(ctx.request.headers)) {\n\t\tif (!value) continue;\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const v of value) headers.append(key, v);\n\t\t} else {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\n\tconst method = ctx.request.method.toUpperCase();\n\tconst hasBody = method !== 'GET' && method !== 'HEAD';\n\n\treturn new Request(url, {\n\t\theaders,\n\t\tmethod,\n\t\tbody: hasBody ? (ctx.request.rawBody ?? null) : null,\n\t});\n}\n\nexport async function webResponseToKoa(webRes: Response, ctx: KoaContext): Promise<void> {\n\tctx.response.status = webRes.status;\n\twebRes.headers.forEach((value, key) => ctx.response.set(key, value));\n\tctx.response.body = await webRes.text();\n}\n\n// ── bridge ────────────────────────────────────────────────────────\n//\n// Koa middleware. Populates ctx.state._fonderie with the fonderie context\n// (user, workspace, meta) for all subsequent route handlers.\n// Requires koa-bodyparser (or equivalent) to run first so rawBody is set.\n//\n//   app.use(bodyParser())\n//   app.use(bridge(fonderie))\n\nexport function bridge(fonderie: FonderieApp): KoaMiddleware {\n\treturn async (ctx, next) => {\n\t\tconst webReq = koaContextToWeb(ctx as unknown as KoaContext);\n\t\tctx.state['_fonderie'] = await fonderie.buildContext(webReq.clone());\n\t\tawait next();\n\t};\n}\n\n// ── adapt ─────────────────────────────────────────────────────────\n//\n// Low-level escape hatch — wraps any fonderie Middleware into a Koa\n// middleware function. Use this for custom fonderie middleware; prefer the\n// named exports below for the built-in fonderie guards.\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function adapt(middleware: Middleware): KoaMiddleware<any, any> {\n\treturn async (ctx, next) => {\n\t\tconst fCtx = (ctx.state as Record<string, unknown>)['_fonderie'] as\n\t\t\t| IFonderieContext\n\t\t\t| undefined;\n\t\tif (!fCtx) throw new Error('[fonderie] bridge() must be registered before adapt()');\n\n\t\tlet continued = false;\n\t\tconst result = await middleware(fCtx, async () => {\n\t\t\tcontinued = true;\n\t\t\treturn new Response();\n\t\t});\n\n\t\tif (continued) {\n\t\t\tawait next();\n\t\t} else {\n\t\t\tawait webResponseToKoa(result, ctx as unknown as KoaContext);\n\t\t}\n\t};\n}\n\n// ── Pre-adapted middleware ────────────────────────────────────────\n//\n// Drop-in replacements for the fonderie middleware functions — no adapt()\n// needed. Import directly from this package instead of from the source\n// packages, and use them as native Koa middleware.\n//\n//   router.get('/jobs', requireAuth, withWorkspace(store), ...)\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const requireAuth: KoaMiddleware<any, any> = adapt(_requireAuth);\n\nexport function withWorkspace(\n\tstore: Parameters<typeof _withWorkspace>[0],\n\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n): KoaMiddleware<any, any> {\n\treturn adapt(_withWorkspace(store));\n}\n\nexport function requirePermission(\n\toperation: Parameters<typeof _requirePermission>[0],\n\tpermissionKey: Parameters<typeof _requirePermission>[1],\n\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n): KoaMiddleware<any, any> {\n\treturn adapt(_requirePermission(operation, permissionKey));\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function requireFeature(key: string): KoaMiddleware<any, any> {\n\treturn adapt(_requireFeature(key));\n}\n\n// ── mount ─────────────────────────────────────────────────────────\n//\n// Wires up fonderie to a Koa app. Uses Koa's onion model to register a\n// single wrap-around middleware: builds fonderie context, calls next()\n// so user routes run, then falls back to fonderie infra only if the\n// request was not handled (ctx.body is still undefined).\n//\n// Routes registered after mount() are included automatically — Koa\n// composes all middlewares lazily at request time, not at registration.\n//\n//   app.use(bodyParser())\n//   const api = mount(app, fonderie)   // returns same app\n//   api.use(router.routes())\n//   api.use(router.allowedMethods())\n//   app.listen(port)\n\nexport function mount(app: Koa, fonderie: FonderieApp): Koa {\n\tapp.use(async (ctx, next) => {\n\t\tconst webReq = koaContextToWeb(ctx as unknown as KoaContext);\n\t\tctx.state['_fonderie'] = await fonderie.buildContext(webReq.clone());\n\t\tawait next();\n\t\tif (ctx.body === undefined) {\n\t\t\tconst webRes = await fonderie.handle(webReq);\n\t\t\tawait webResponseToKoa(webRes, ctx as unknown as KoaContext);\n\t\t}\n\t});\n\treturn app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,yBAA4C;AAC5C,wBAAgD;AAChD,yBAAwD;AACxD,qBAAkD;AAElD,IAAAA,sBAA2B;AAwBpB,SAAS,gBAAgB,KAA0B;AACzD,QAAM,YAAa,IAAI,IAAI,OAAmC;AAC9D,QAAM,WAAW,YAAY,UAAU;AACvC,QAAM,OAAO,IAAI,QAAQ,QAAQ,MAAM,KAAK;AAC5C,QAAM,MAAM,GAAG,QAAQ,MAAM,IAAI,GAAG,IAAI,QAAQ,GAAG;AAEnD,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,QAAQ,OAAO,GAAG;AAC/D,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,iBAAW,KAAK,MAAO,SAAQ,OAAO,KAAK,CAAC;AAAA,IAC7C,OAAO;AACN,cAAQ,IAAI,KAAK,KAAK;AAAA,IACvB;AAAA,EACD;AAEA,QAAM,SAAS,IAAI,QAAQ,OAAO,YAAY;AAC9C,QAAM,UAAU,WAAW,SAAS,WAAW;AAE/C,SAAO,IAAI,QAAQ,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,UAAW,IAAI,QAAQ,WAAW,OAAQ;AAAA,EACjD,CAAC;AACF;AAEA,eAAsB,iBAAiB,QAAkB,KAAgC;AACxF,MAAI,SAAS,SAAS,OAAO;AAC7B,SAAO,QAAQ,QAAQ,CAAC,OAAO,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,CAAC;AACnE,MAAI,SAAS,OAAO,MAAM,OAAO,KAAK;AACvC;AAWO,SAAS,OAAO,UAAsC;AAC5D,SAAO,OAAO,KAAK,SAAS;AAC3B,UAAM,SAAS,gBAAgB,GAA4B;AAC3D,QAAI,MAAM,WAAW,IAAI,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AACnE,UAAM,KAAK;AAAA,EACZ;AACD;AASO,SAAS,MAAM,YAAiD;AACtE,SAAO,OAAO,KAAK,SAAS;AAC3B,UAAM,OAAQ,IAAI,MAAkC,WAAW;AAG/D,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uDAAuD;AAElF,QAAI,YAAY;AAChB,UAAM,SAAS,MAAM,WAAW,MAAM,YAAY;AACjD,kBAAY;AACZ,aAAO,IAAI,SAAS;AAAA,IACrB,CAAC;AAED,QAAI,WAAW;AACd,YAAM,KAAK;AAAA,IACZ,OAAO;AACN,YAAM,iBAAiB,QAAQ,GAA4B;AAAA,IAC5D;AAAA,EACD;AACD;AAWO,IAAM,cAAuC,MAAM,mBAAAC,WAAY;AAE/D,SAAS,cACf,OAE0B;AAC1B,SAAO,UAAM,kBAAAC,eAAe,KAAK,CAAC;AACnC;AAEO,SAAS,kBACf,WACA,eAE0B;AAC1B,SAAO,UAAM,mBAAAC,mBAAmB,WAAW,aAAa,CAAC;AAC1D;AAGO,SAAS,eAAe,KAAsC;AACpE,SAAO,UAAM,eAAAC,gBAAgB,GAAG,CAAC;AAClC;AAkBO,SAAS,MAAM,KAAU,UAA4B;AAC3D,MAAI,IAAI,OAAO,KAAK,SAAS;AAC5B,UAAM,SAAS,gBAAgB,GAA4B;AAC3D,QAAI,MAAM,WAAW,IAAI,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AACnE,UAAM,KAAK;AACX,QAAI,IAAI,SAAS,QAAW;AAC3B,YAAM,SAAS,MAAM,SAAS,OAAO,MAAM;AAC3C,YAAM,iBAAiB,QAAQ,GAA4B;AAAA,IAC5D;AAAA,EACD,CAAC;AACD,SAAO;AACR;","names":["import_permissions","_requireAuth","_withWorkspace","_requirePermission","_requireFeature"]}

package/dist/index.d.cts

@@ -0,0 +1,36 @@
+import { IncomingMessage } from 'node:http';
+import Koa from 'koa';
+import { Middleware, FonderieApp } from '@fonderie/core';
+import { withWorkspace as withWorkspace$1 } from '@fonderie/workspaces';
+import { requirePermission as requirePermission$1 } from '@fonderie/permissions';
+export { OPERATIONS } from '@fonderie/permissions';
+
+type KoaMiddleware<S = any, C = any> = Koa.Middleware<S, C>;
+
+interface KoaContext {
+    request: {
+        url: string;
+        method: string;
+        rawBody?: string;
+        headers: Record<string, string | string[] | undefined>;
+    };
+    response: {
+        body: unknown;
+        status: number;
+        set(key: string, value: string): void;
+    };
+    req: IncomingMessage;
+    state: Record<string, unknown>;
+}
+type KoaNext = () => Promise<void>;
+declare function koaContextToWeb(ctx: KoaContext): Request;
+declare function webResponseToKoa(webRes: Response, ctx: KoaContext): Promise<void>;
+declare function bridge(fonderie: FonderieApp): KoaMiddleware;
+declare function adapt(middleware: Middleware): KoaMiddleware<any, any>;
+declare const requireAuth: KoaMiddleware<any, any>;
+declare function withWorkspace(store: Parameters<typeof withWorkspace$1>[0]): KoaMiddleware<any, any>;
+declare function requirePermission(operation: Parameters<typeof requirePermission$1>[0], permissionKey: Parameters<typeof requirePermission$1>[1]): KoaMiddleware<any, any>;
+declare function requireFeature(key: string): KoaMiddleware<any, any>;
+declare function mount(app: Koa, fonderie: FonderieApp): Koa;
+
+export { type KoaContext, type KoaNext, adapt, bridge, koaContextToWeb, mount, requireAuth, requireFeature, requirePermission, webResponseToKoa, withWorkspace };

package/dist/index.d.ts

@@ -0,0 +1,36 @@
+import { IncomingMessage } from 'node:http';
+import Koa from 'koa';
+import { Middleware, FonderieApp } from '@fonderie/core';
+import { withWorkspace as withWorkspace$1 } from '@fonderie/workspaces';
+import { requirePermission as requirePermission$1 } from '@fonderie/permissions';
+export { OPERATIONS } from '@fonderie/permissions';
+
+type KoaMiddleware<S = any, C = any> = Koa.Middleware<S, C>;
+
+interface KoaContext {
+    request: {
+        url: string;
+        method: string;
+        rawBody?: string;
+        headers: Record<string, string | string[] | undefined>;
+    };
+    response: {
+        body: unknown;
+        status: number;
+        set(key: string, value: string): void;
+    };
+    req: IncomingMessage;
+    state: Record<string, unknown>;
+}
+type KoaNext = () => Promise<void>;
+declare function koaContextToWeb(ctx: KoaContext): Request;
+declare function webResponseToKoa(webRes: Response, ctx: KoaContext): Promise<void>;
+declare function bridge(fonderie: FonderieApp): KoaMiddleware;
+declare function adapt(middleware: Middleware): KoaMiddleware<any, any>;
+declare const requireAuth: KoaMiddleware<any, any>;
+declare function withWorkspace(store: Parameters<typeof withWorkspace$1>[0]): KoaMiddleware<any, any>;
+declare function requirePermission(operation: Parameters<typeof requirePermission$1>[0], permissionKey: Parameters<typeof requirePermission$1>[1]): KoaMiddleware<any, any>;
+declare function requireFeature(key: string): KoaMiddleware<any, any>;
+declare function mount(app: Koa, fonderie: FonderieApp): Koa;
+
+export { type KoaContext, type KoaNext, adapt, bridge, koaContextToWeb, mount, requireAuth, requireFeature, requirePermission, webResponseToKoa, withWorkspace };

package/dist/index.js

@@ -0,0 +1,91 @@
+// src/index.ts
+import { requireAuth as _requireAuth } from "@fonderie/core/middlewares";
+import { withWorkspace as _withWorkspace } from "@fonderie/workspaces";
+import { requirePermission as _requirePermission } from "@fonderie/permissions";
+import { requireFeature as _requireFeature } from "@fonderie/billing";
+import { OPERATIONS } from "@fonderie/permissions";
+function koaContextToWeb(ctx) {
+  const encrypted = ctx.req.socket.encrypted;
+  const protocol = encrypted ? "https" : "http";
+  const host = ctx.request.headers["host"] ?? "localhost";
+  const url = `${protocol}://${host}${ctx.request.url}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(ctx.request.headers)) {
+    if (!value) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = ctx.request.method.toUpperCase();
+  const hasBody = method !== "GET" && method !== "HEAD";
+  return new Request(url, {
+    headers,
+    method,
+    body: hasBody ? ctx.request.rawBody ?? null : null
+  });
+}
+async function webResponseToKoa(webRes, ctx) {
+  ctx.response.status = webRes.status;
+  webRes.headers.forEach((value, key) => ctx.response.set(key, value));
+  ctx.response.body = await webRes.text();
+}
+function bridge(fonderie) {
+  return async (ctx, next) => {
+    const webReq = koaContextToWeb(ctx);
+    ctx.state["_fonderie"] = await fonderie.buildContext(webReq.clone());
+    await next();
+  };
+}
+function adapt(middleware) {
+  return async (ctx, next) => {
+    const fCtx = ctx.state["_fonderie"];
+    if (!fCtx) throw new Error("[fonderie] bridge() must be registered before adapt()");
+    let continued = false;
+    const result = await middleware(fCtx, async () => {
+      continued = true;
+      return new Response();
+    });
+    if (continued) {
+      await next();
+    } else {
+      await webResponseToKoa(result, ctx);
+    }
+  };
+}
+var requireAuth = adapt(_requireAuth);
+function withWorkspace(store) {
+  return adapt(_withWorkspace(store));
+}
+function requirePermission(operation, permissionKey) {
+  return adapt(_requirePermission(operation, permissionKey));
+}
+function requireFeature(key) {
+  return adapt(_requireFeature(key));
+}
+function mount(app, fonderie) {
+  app.use(async (ctx, next) => {
+    const webReq = koaContextToWeb(ctx);
+    ctx.state["_fonderie"] = await fonderie.buildContext(webReq.clone());
+    await next();
+    if (ctx.body === void 0) {
+      const webRes = await fonderie.handle(webReq);
+      await webResponseToKoa(webRes, ctx);
+    }
+  });
+  return app;
+}
+export {
+  OPERATIONS,
+  adapt,
+  bridge,
+  koaContextToWeb,
+  mount,
+  requireAuth,
+  requireFeature,
+  requirePermission,
+  webResponseToKoa,
+  withWorkspace
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport type Koa                from 'koa';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\ntype KoaMiddleware<S = any, C = any> = Koa.Middleware<S, C>;\n\nimport type { FonderieApp, IFonderieContext, Middleware } from '@fonderie/core';\nimport { requireAuth as _requireAuth } from '@fonderie/core/middlewares';\nimport { withWorkspace as _withWorkspace } from '@fonderie/workspaces';\nimport { requirePermission as _requirePermission } from '@fonderie/permissions';\nimport { requireFeature as _requireFeature } from '@fonderie/billing';\n\nexport { OPERATIONS } from '@fonderie/permissions';\n\n// Minimal Koa shape used internally for Web Standard translation.\n// Application code uses Koa's own context types (Koa.ParameterizedContext).\nexport interface KoaContext {\n\trequest: {\n\t\turl: string;\n\t\tmethod: string;\n\t\trawBody?: string;\n\t\theaders: Record<string, string | string[] | undefined>;\n\t};\n\tresponse: {\n\t\tbody: unknown;\n\t\tstatus: number;\n\t\tset(key: string, value: string): void;\n\t};\n\treq: IncomingMessage;\n\tstate: Record<string, unknown>;\n}\n\nexport type KoaNext = () => Promise<void>;\n\n// ── Web Standard ↔ Koa translation ───────────────────────────────\n\nexport function koaContextToWeb(ctx: KoaContext): Request {\n\tconst encrypted = (ctx.req.socket as { encrypted?: boolean }).encrypted;\n\tconst protocol = encrypted ? 'https' : 'http';\n\tconst host = ctx.request.headers['host'] ?? 'localhost';\n\tconst url = `${protocol}://${host}${ctx.request.url}`;\n\n\tconst headers = new Headers();\n\tfor (const [key, value] of Object.entries(ctx.request.headers)) {\n\t\tif (!value) continue;\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const v of value) headers.append(key, v);\n\t\t} else {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\n\tconst method = ctx.request.method.toUpperCase();\n\tconst hasBody = method !== 'GET' && method !== 'HEAD';\n\n\treturn new Request(url, {\n\t\theaders,\n\t\tmethod,\n\t\tbody: hasBody ? (ctx.request.rawBody ?? null) : null,\n\t});\n}\n\nexport async function webResponseToKoa(webRes: Response, ctx: KoaContext): Promise<void> {\n\tctx.response.status = webRes.status;\n\twebRes.headers.forEach((value, key) => ctx.response.set(key, value));\n\tctx.response.body = await webRes.text();\n}\n\n// ── bridge ────────────────────────────────────────────────────────\n//\n// Koa middleware. Populates ctx.state._fonderie with the fonderie context\n// (user, workspace, meta) for all subsequent route handlers.\n// Requires koa-bodyparser (or equivalent) to run first so rawBody is set.\n//\n//   app.use(bodyParser())\n//   app.use(bridge(fonderie))\n\nexport function bridge(fonderie: FonderieApp): KoaMiddleware {\n\treturn async (ctx, next) => {\n\t\tconst webReq = koaContextToWeb(ctx as unknown as KoaContext);\n\t\tctx.state['_fonderie'] = await fonderie.buildContext(webReq.clone());\n\t\tawait next();\n\t};\n}\n\n// ── adapt ─────────────────────────────────────────────────────────\n//\n// Low-level escape hatch — wraps any fonderie Middleware into a Koa\n// middleware function. Use this for custom fonderie middleware; prefer the\n// named exports below for the built-in fonderie guards.\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function adapt(middleware: Middleware): KoaMiddleware<any, any> {\n\treturn async (ctx, next) => {\n\t\tconst fCtx = (ctx.state as Record<string, unknown>)['_fonderie'] as\n\t\t\t| IFonderieContext\n\t\t\t| undefined;\n\t\tif (!fCtx) throw new Error('[fonderie] bridge() must be registered before adapt()');\n\n\t\tlet continued = false;\n\t\tconst result = await middleware(fCtx, async () => {\n\t\t\tcontinued = true;\n\t\t\treturn new Response();\n\t\t});\n\n\t\tif (continued) {\n\t\t\tawait next();\n\t\t} else {\n\t\t\tawait webResponseToKoa(result, ctx as unknown as KoaContext);\n\t\t}\n\t};\n}\n\n// ── Pre-adapted middleware ────────────────────────────────────────\n//\n// Drop-in replacements for the fonderie middleware functions — no adapt()\n// needed. Import directly from this package instead of from the source\n// packages, and use them as native Koa middleware.\n//\n//   router.get('/jobs', requireAuth, withWorkspace(store), ...)\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const requireAuth: KoaMiddleware<any, any> = adapt(_requireAuth);\n\nexport function withWorkspace(\n\tstore: Parameters<typeof _withWorkspace>[0],\n\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n): KoaMiddleware<any, any> {\n\treturn adapt(_withWorkspace(store));\n}\n\nexport function requirePermission(\n\toperation: Parameters<typeof _requirePermission>[0],\n\tpermissionKey: Parameters<typeof _requirePermission>[1],\n\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n): KoaMiddleware<any, any> {\n\treturn adapt(_requirePermission(operation, permissionKey));\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function requireFeature(key: string): KoaMiddleware<any, any> {\n\treturn adapt(_requireFeature(key));\n}\n\n// ── mount ─────────────────────────────────────────────────────────\n//\n// Wires up fonderie to a Koa app. Uses Koa's onion model to register a\n// single wrap-around middleware: builds fonderie context, calls next()\n// so user routes run, then falls back to fonderie infra only if the\n// request was not handled (ctx.body is still undefined).\n//\n// Routes registered after mount() are included automatically — Koa\n// composes all middlewares lazily at request time, not at registration.\n//\n//   app.use(bodyParser())\n//   const api = mount(app, fonderie)   // returns same app\n//   api.use(router.routes())\n//   api.use(router.allowedMethods())\n//   app.listen(port)\n\nexport function mount(app: Koa, fonderie: FonderieApp): Koa {\n\tapp.use(async (ctx, next) => {\n\t\tconst webReq = koaContextToWeb(ctx as unknown as KoaContext);\n\t\tctx.state['_fonderie'] = await fonderie.buildContext(webReq.clone());\n\t\tawait next();\n\t\tif (ctx.body === undefined) {\n\t\t\tconst webRes = await fonderie.handle(webReq);\n\t\t\tawait webResponseToKoa(webRes, ctx as unknown as KoaContext);\n\t\t}\n\t});\n\treturn app;\n}\n"],"mappings":";AAOA,SAAS,eAAe,oBAAoB;AAC5C,SAAS,iBAAiB,sBAAsB;AAChD,SAAS,qBAAqB,0BAA0B;AACxD,SAAS,kBAAkB,uBAAuB;AAElD,SAAS,kBAAkB;AAwBpB,SAAS,gBAAgB,KAA0B;AACzD,QAAM,YAAa,IAAI,IAAI,OAAmC;AAC9D,QAAM,WAAW,YAAY,UAAU;AACvC,QAAM,OAAO,IAAI,QAAQ,QAAQ,MAAM,KAAK;AAC5C,QAAM,MAAM,GAAG,QAAQ,MAAM,IAAI,GAAG,IAAI,QAAQ,GAAG;AAEnD,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,QAAQ,OAAO,GAAG;AAC/D,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,iBAAW,KAAK,MAAO,SAAQ,OAAO,KAAK,CAAC;AAAA,IAC7C,OAAO;AACN,cAAQ,IAAI,KAAK,KAAK;AAAA,IACvB;AAAA,EACD;AAEA,QAAM,SAAS,IAAI,QAAQ,OAAO,YAAY;AAC9C,QAAM,UAAU,WAAW,SAAS,WAAW;AAE/C,SAAO,IAAI,QAAQ,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,UAAW,IAAI,QAAQ,WAAW,OAAQ;AAAA,EACjD,CAAC;AACF;AAEA,eAAsB,iBAAiB,QAAkB,KAAgC;AACxF,MAAI,SAAS,SAAS,OAAO;AAC7B,SAAO,QAAQ,QAAQ,CAAC,OAAO,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,CAAC;AACnE,MAAI,SAAS,OAAO,MAAM,OAAO,KAAK;AACvC;AAWO,SAAS,OAAO,UAAsC;AAC5D,SAAO,OAAO,KAAK,SAAS;AAC3B,UAAM,SAAS,gBAAgB,GAA4B;AAC3D,QAAI,MAAM,WAAW,IAAI,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AACnE,UAAM,KAAK;AAAA,EACZ;AACD;AASO,SAAS,MAAM,YAAiD;AACtE,SAAO,OAAO,KAAK,SAAS;AAC3B,UAAM,OAAQ,IAAI,MAAkC,WAAW;AAG/D,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uDAAuD;AAElF,QAAI,YAAY;AAChB,UAAM,SAAS,MAAM,WAAW,MAAM,YAAY;AACjD,kBAAY;AACZ,aAAO,IAAI,SAAS;AAAA,IACrB,CAAC;AAED,QAAI,WAAW;AACd,YAAM,KAAK;AAAA,IACZ,OAAO;AACN,YAAM,iBAAiB,QAAQ,GAA4B;AAAA,IAC5D;AAAA,EACD;AACD;AAWO,IAAM,cAAuC,MAAM,YAAY;AAE/D,SAAS,cACf,OAE0B;AAC1B,SAAO,MAAM,eAAe,KAAK,CAAC;AACnC;AAEO,SAAS,kBACf,WACA,eAE0B;AAC1B,SAAO,MAAM,mBAAmB,WAAW,aAAa,CAAC;AAC1D;AAGO,SAAS,eAAe,KAAsC;AACpE,SAAO,MAAM,gBAAgB,GAAG,CAAC;AAClC;AAkBO,SAAS,MAAM,KAAU,UAA4B;AAC3D,MAAI,IAAI,OAAO,KAAK,SAAS;AAC5B,UAAM,SAAS,gBAAgB,GAA4B;AAC3D,QAAI,MAAM,WAAW,IAAI,MAAM,SAAS,aAAa,OAAO,MAAM,CAAC;AACnE,UAAM,KAAK;AACX,QAAI,IAAI,SAAS,QAAW;AAC3B,YAAM,SAAS,MAAM,SAAS,OAAO,MAAM;AAC3C,YAAM,iBAAiB,QAAQ,GAA4B;AAAA,IAC5D;AAAA,EACD,CAAC;AACD,SAAO;AACR;","names":[]}

package/package.json

@@ -0,0 +1,84 @@
+{
+	"name": "@fonderie/adapter-koa",
+	"version": "1.0.0",
+	"description": "Koa adapter for fonderie-js — bridge(), adapt(), mount() to use fonderie middleware in native Koa routes.",
+	"keywords": [
+		"fonderie-js",
+		"koa",
+		"adapter",
+		"middleware",
+		"saas",
+		"typescript"
+	],
+	"license": "MIT",
+	"type": "module",
+	"engines": {
+		"node": ">=20"
+	},
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"require": "./dist/index.cjs"
+		}
+	},
+	"main": "./dist/index.cjs",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"scripts": {
+		"build": "tsup",
+		"dev": "tsup --watch",
+		"test": "tsx --test src/__tests__/*.test.ts",
+		"typecheck": "tsc --noEmit",
+		"lint": "biome lint src",
+		"format": "biome format --write src",
+		"check": "biome check --write src"
+	},
+	"peerDependencies": {
+		"@fonderie/core": "^0.1.0",
+		"@fonderie/workspaces": "^1.0.0",
+		"@fonderie/permissions": "^1.0.0",
+		"@fonderie/billing": "^1.0.0",
+		"koa": "^2.0.0"
+	},
+	"peerDependenciesMeta": {
+		"@fonderie/workspaces": {
+			"optional": true
+		},
+		"@fonderie/permissions": {
+			"optional": true
+		},
+		"@fonderie/billing": {
+			"optional": true
+		}
+	},
+	"devDependencies": {
+		"@fonderie/core": "../core",
+		"@fonderie/workspaces": "../workspaces",
+		"@fonderie/permissions": "../permissions",
+		"@fonderie/billing": "../billing",
+		"koa": "^2.16.1",
+		"@types/koa": "^2.15.0",
+		"@types/node": "^25.6.0",
+		"tsx": "^4.21.0",
+		"tsup": "^8.5.1",
+		"typescript": "^6.0.3"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"files": [
+		"dist",
+		"LICENSE",
+		"README.md"
+	],
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/fonderie-js/sdk.git",
+		"directory": "packages/adapter-koa"
+	},
+	"homepage": "https://github.com/fonderie-js/sdk/tree/main/packages/adapter-koa#readme",
+	"bugs": {
+		"url": "https://github.com/fonderie-js/sdk/issues"
+	}
+}