@geekmidas/constructs 0.0.22 → 0.2.0

package/dist/endpoints/processAudits.d.mts

@@ -1,11 +1,11 @@
-import "../Construct-DDR0295I.mjs";
-import "../types-DKf0juBf.mjs";
-import "../Function-CD3rXWfa.mjs";
-import "../BaseFunctionBuilder-Ct6zY6Jq.mjs";
-import "../FunctionBuilder-j2VkwuGf.mjs";
-import "../index-licEVXjh.mjs";
-import "../Authorizer-pmPvIVgv.mjs";
-import { CookieFn, Endpoint, HeaderFn } from "../Endpoint-PtQ-wLIS.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../types-CScirkHt.mjs";
+import "../Function-Vh1t-Qjj.mjs";
+import "../BaseFunctionBuilder-CoV7J45W.mjs";
+import "../FunctionBuilder-3jsoFffg.mjs";
+import "../index-CFyaRrck.mjs";
+import "../Authorizer-Cpx59w_q.mjs";
+import { CookieFn, Endpoint, HeaderFn } from "../Endpoint-C5djXyae.mjs";
 import { Service, ServiceDiscovery } from "@geekmidas/services";
 import { AuditStorage, AuditableAction, Auditor } from "@geekmidas/audit";
 import { Logger } from "@geekmidas/logger";
@@ -58,17 +58,36 @@ declare function createAuditContext<TServices extends Service[] = [], TSession =
   cookie: CookieFn;
   services: Record<string, unknown>;
 }): Promise<AuditExecutionContext<TAuditAction> | undefined>;
+/**
+ * Options for executeWithAuditTransaction.
+ */
+interface ExecuteWithAuditTransactionOptions {
+  /**
+   * Database connection to use for the transaction.
+   * If this is already a transaction, it will be reused instead of creating a nested one.
+   * If not provided, the storage's internal database is used.
+   */
+  db?: unknown;
+}
 /**
  * Execute a handler with automatic audit transaction support.
- * If the audit storage has a database (via getDatabase()), wraps execution
+ * If the audit storage provides a withTransaction method, wraps execution
  * in a transaction so audits are atomic with handler's database operations.
  *
+ * This is database-agnostic - each storage implementation provides its own
+ * transaction handling based on the underlying database (Kysely, Drizzle, etc.).
+ *
+ * If the db parameter is provided and is already a transaction, the storage
+ * will reuse it instead of creating a nested transaction (similar to
+ * packages/db/src/kysely.ts#withTransaction).
+ *
  * @param auditContext - The audit context from createAuditContext
  * @param handler - The handler function to execute (receives auditor)
  * @param onComplete - Called after handler with response, to process declarative audits
+ * @param options - Optional configuration including database connection
  * @returns The handler result
  */
-declare function executeWithAuditTransaction<T, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>>(auditContext: AuditExecutionContext<TAuditAction> | undefined, handler: (auditor?: Auditor<TAuditAction>) => Promise<T>, onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>): Promise<T>;
+declare function executeWithAuditTransaction<T, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>>(auditContext: AuditExecutionContext<TAuditAction> | undefined, handler: (auditor?: Auditor<TAuditAction>) => Promise<T>, onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>, options?: ExecuteWithAuditTransactionOptions): Promise<T>;
 //#endregion
-export { AuditExecutionContext, createAuditContext, executeWithAuditTransaction, processEndpointAudits };
+export { AuditExecutionContext, ExecuteWithAuditTransactionOptions, createAuditContext, executeWithAuditTransaction, processEndpointAudits };
 //# sourceMappingURL=processAudits.d.mts.map

package/dist/endpoints/processAudits.mjs

@@ -1,3 +1,3 @@
-import { createAuditContext, executeWithAuditTransaction, processEndpointAudits } from "../processAudits-DfcB-X-4.mjs";
+import { createAuditContext, executeWithAuditTransaction, processEndpointAudits } from "../processAudits-Dj8UGqcW.mjs";
 
 export { createAuditContext, executeWithAuditTransaction, processEndpointAudits };

package/dist/endpoints/rls.cjs

@@ -0,0 +1,3 @@
+const require_rls = require('../rls-CmJ7bRsz.cjs');
+
+exports.RLS_BYPASS = require_rls.RLS_BYPASS;

package/dist/endpoints/rls.d.cts

@@ -0,0 +1,9 @@
+import "../Construct-Dkd8Kvc9.cjs";
+import "../types-Bp9ysFXd.cjs";
+import "../Function-DHD1V9QW.cjs";
+import "../BaseFunctionBuilder-DaQA0uKE.cjs";
+import "../FunctionBuilder-FV6r3I7X.cjs";
+import "../index-Ceo-GuhJ.cjs";
+import "../Authorizer-CpSUMTIs.cjs";
+import { RLS_BYPASS, RlsBypass, RlsConfig, RlsContext, RlsContextExtractor } from "../Endpoint-CC2RGjkl.cjs";
+export { RLS_BYPASS, RlsBypass, RlsConfig, RlsContext, RlsContextExtractor };

package/dist/endpoints/rls.d.mts

@@ -0,0 +1,9 @@
+import "../Construct-jBKqb-Zi.mjs";
+import "../types-CScirkHt.mjs";
+import "../Function-Vh1t-Qjj.mjs";
+import "../BaseFunctionBuilder-CoV7J45W.mjs";
+import "../FunctionBuilder-3jsoFffg.mjs";
+import "../index-CFyaRrck.mjs";
+import "../Authorizer-Cpx59w_q.mjs";
+import { RLS_BYPASS, RlsBypass, RlsConfig, RlsContext, RlsContextExtractor } from "../Endpoint-C5djXyae.mjs";
+export { RLS_BYPASS, RlsBypass, RlsConfig, RlsContext, RlsContextExtractor };

package/dist/endpoints/rls.mjs

@@ -0,0 +1,3 @@
+import { RLS_BYPASS } from "../rls-Bf3FRwto.mjs";
+
+export { RLS_BYPASS };

package/dist/functions/AWSLambdaFunction.d.mts

@@ -1,5 +1,5 @@
-import "../Construct-DDR0295I.mjs";
-import "../Function-CD3rXWfa.mjs";
-import "../FunctionExecutionWrapper-B0WP-Vec.mjs";
-import { AWSLambdaFunction, AWSLambdaHandler } from "../AWSLambdaFunction-qWpalqfr.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../Function-Vh1t-Qjj.mjs";
+import "../FunctionExecutionWrapper-CI3CaoCo.mjs";
+import { AWSLambdaFunction, AWSLambdaHandler } from "../AWSLambdaFunction-D9RZhm0N.mjs";
 export { AWSLambdaFunction, AWSLambdaHandler };

package/dist/functions/BaseFunctionBuilder.d.mts

@@ -1,3 +1,3 @@
-import "../Construct-DDR0295I.mjs";
-import { BaseFunctionBuilder } from "../BaseFunctionBuilder-Ct6zY6Jq.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import { BaseFunctionBuilder } from "../BaseFunctionBuilder-CoV7J45W.mjs";
 export { BaseFunctionBuilder };

package/dist/functions/Function.d.mts

@@ -1,3 +1,3 @@
-import "../Construct-DDR0295I.mjs";
-import { Function, FunctionContext, FunctionFactory, FunctionHandler } from "../Function-CD3rXWfa.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import { Function, FunctionContext, FunctionFactory, FunctionHandler } from "../Function-Vh1t-Qjj.mjs";
 export { Function, FunctionContext, FunctionFactory, FunctionHandler };

package/dist/functions/FunctionBuilder.d.mts

@@ -1,5 +1,5 @@
-import "../Construct-DDR0295I.mjs";
-import "../Function-CD3rXWfa.mjs";
-import "../BaseFunctionBuilder-Ct6zY6Jq.mjs";
-import { FunctionBuilder } from "../FunctionBuilder-j2VkwuGf.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../Function-Vh1t-Qjj.mjs";
+import "../BaseFunctionBuilder-CoV7J45W.mjs";
+import { FunctionBuilder } from "../FunctionBuilder-3jsoFffg.mjs";
 export { FunctionBuilder };

package/dist/functions/FunctionExecutionWrapper.d.mts

@@ -1,4 +1,4 @@
-import "../Construct-DDR0295I.mjs";
-import "../Function-CD3rXWfa.mjs";
-import { FunctionExecutionWrapper } from "../FunctionExecutionWrapper-B0WP-Vec.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../Function-Vh1t-Qjj.mjs";
+import { FunctionExecutionWrapper } from "../FunctionExecutionWrapper-CI3CaoCo.mjs";
 export { FunctionExecutionWrapper };

package/dist/functions/TestFunctionAdaptor.d.mts

@@ -1,5 +1,5 @@
-import "../Construct-DDR0295I.mjs";
-import { Function } from "../Function-CD3rXWfa.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import { Function } from "../Function-Vh1t-Qjj.mjs";
 import { Service, ServiceDiscovery, ServiceRecord } from "@geekmidas/services";
 import { AuditStorage, AuditableAction, Auditor } from "@geekmidas/audit";
 import { EventPublisher } from "@geekmidas/events";

package/dist/functions/index.d.mts

@@ -1,6 +1,6 @@
-import "../Construct-DDR0295I.mjs";
-import { Function, FunctionContext, FunctionHandler } from "../Function-CD3rXWfa.mjs";
-import { BaseFunctionBuilder } from "../BaseFunctionBuilder-Ct6zY6Jq.mjs";
-import { FunctionBuilder } from "../FunctionBuilder-j2VkwuGf.mjs";
-import { f } from "../index-licEVXjh.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import { Function, FunctionContext, FunctionHandler } from "../Function-Vh1t-Qjj.mjs";
+import { BaseFunctionBuilder } from "../BaseFunctionBuilder-CoV7J45W.mjs";
+import { FunctionBuilder } from "../FunctionBuilder-3jsoFffg.mjs";
+import { f } from "../index-CFyaRrck.mjs";
 export { BaseFunctionBuilder, Function, FunctionBuilder, FunctionContext, FunctionHandler, f };

package/dist/{helpers-CrrdyA04.mjs → helpers-C3B2lVrM.mjs}

@@ -1,4 +1,4 @@
-import { Endpoint } from "./Endpoint-DbPsw13b.mjs";
+import { Endpoint } from "./Endpoint-B70_KKhu.mjs";
 import path from "node:path";
 import fg from "fast-glob";
 
@@ -80,4 +80,4 @@ async function getEndpointsFromRoutes(routes, cwd) {
 
 //#endregion
 export { getEndpointsFromRoutes, getProjectRoot };
-//# sourceMappingURL=helpers-CrrdyA04.mjs.map
+//# sourceMappingURL=helpers-C3B2lVrM.mjs.map

package/dist/{helpers-CrrdyA04.mjs.map → helpers-C3B2lVrM.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"helpers-CrrdyA04.mjs","names":["cwd: string","routes: string[]","endpoints: Endpoint<string, HttpMethod, any, any, TServices>[]"],"sources":["../src/endpoints/helpers.ts"],"sourcesContent":["import path from 'node:path';\nimport fg from 'fast-glob';\nimport { Endpoint } from './Endpoint';\n\nimport type { Service } from '@geekmidas/services';\nimport type { HttpMethod } from '../types';\n\n// Re-export utility functions\n\n/**\n * Recursively finds the project root directory by looking for lock files.\n * Traverses up the directory tree until it finds a package manager lock file.\n *\n * @param cwd - The current working directory to start searching from\n * @returns Promise resolving to the absolute path of the project root\n *\n * @example\n * ```typescript\n * const projectRoot = await getProjectRoot(process.cwd());\n * console.log(`Project root: ${projectRoot}`);\n * // Output: Project root: /Users/user/my-project\n * ```\n */\nexport async function getProjectRoot(cwd: string): Promise<string> {\n  if (cwd === '/') {\n    return cwd;\n  }\n\n  const stream = fg.stream(\n    ['yarn.lock', 'pnpm-lock.yaml', 'package-lock.json', 'deno.lock'],\n    { dot: true, cwd },\n  );\n\n  let isRoot = false;\n\n  for await (const _ of stream) {\n    isRoot = true;\n    break;\n  }\n\n  if (isRoot) {\n    return cwd;\n  }\n\n  return getProjectRoot(path.resolve(cwd, '..'));\n}\n\n/**\n * Discovers and imports all Endpoint instances from the specified route patterns.\n * Uses fast-glob to find files matching the patterns and extracts exported Endpoints.\n *\n * @template TServices - Array of service types used by the endpoints\n * @param routes - Array of glob patterns to match route files (e.g., ['src/routes/*.ts'])\n * @param cwd - The current working directory to resolve paths from\n * @returns Promise resolving to an array of Endpoint instances found in the matched files\n *\n * @example\n * ```typescript\n * // Find all endpoints in the routes directory\n * const endpoints = await getEndpointsFromRoutes(\n *   ['src/routes/**\\/*.ts'],\n *   process.cwd()\n * );\n *\n * // Register endpoints with your server\n * for (const endpoint of endpoints) {\n *   server.register(endpoint);\n * }\n * ```\n *\n * @remarks\n * - Only exports that are valid Endpoint instances are included\n * - Files are imported dynamically, so they must be valid ES modules\n * - The function filters out non-Endpoint exports automatically\n */\nexport async function getEndpointsFromRoutes<TServices extends Service[]>(\n  routes: string[],\n  cwd: string,\n): Promise<Endpoint<string, HttpMethod, any, any, TServices>[]> {\n  const stream = fg.stream(routes, { cwd });\n\n  const endpoints: Endpoint<string, HttpMethod, any, any, TServices>[] = [];\n\n  for await (const f of stream) {\n    // Resolve the absolute path for the route file\n    const routePath = path.resolve(cwd, f.toString());\n    // Dynamically import the route module\n    const route = await import(routePath);\n\n    // Filter exported values to find only Endpoint instances\n    const handlers = Object.values(route).filter((value) => {\n      return Endpoint.isEndpoint(value);\n    }) as unknown as Endpoint<string, HttpMethod, any, any, TServices>[];\n\n    endpoints.push(...handlers);\n  }\n\n  return endpoints;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,eAAeA,KAA8B;AACjE,KAAI,QAAQ,IACV,QAAO;CAGT,MAAM,SAAS,GAAG,OAChB;EAAC;EAAa;EAAkB;EAAqB;CAAY,GACjE;EAAE,KAAK;EAAM;CAAK,EACnB;CAED,IAAI,SAAS;AAEb,YAAW,MAAM,KAAK,QAAQ;AAC5B,WAAS;AACT;CACD;AAED,KAAI,OACF,QAAO;AAGT,QAAO,eAAe,KAAK,QAAQ,KAAK,KAAK,CAAC;AAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BD,eAAsB,uBACpBC,QACAD,KAC8D;CAC9D,MAAM,SAAS,GAAG,OAAO,QAAQ,EAAE,IAAK,EAAC;CAEzC,MAAME,YAAiE,CAAE;AAEzE,YAAW,MAAM,KAAK,QAAQ;EAE5B,MAAM,YAAY,KAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;EAEjD,MAAM,QAAQ,MAAM,OAAO;EAG3B,MAAM,WAAW,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU;AACtD,UAAO,SAAS,WAAW,MAAM;EAClC,EAAC;AAEF,YAAU,KAAK,GAAG,SAAS;CAC5B;AAED,QAAO;AACR"}
+{"version":3,"file":"helpers-C3B2lVrM.mjs","names":["cwd: string","routes: string[]","endpoints: Endpoint<string, HttpMethod, any, any, TServices>[]"],"sources":["../src/endpoints/helpers.ts"],"sourcesContent":["import path from 'node:path';\nimport fg from 'fast-glob';\nimport { Endpoint } from './Endpoint';\n\nimport type { Service } from '@geekmidas/services';\nimport type { HttpMethod } from '../types';\n\n// Re-export utility functions\n\n/**\n * Recursively finds the project root directory by looking for lock files.\n * Traverses up the directory tree until it finds a package manager lock file.\n *\n * @param cwd - The current working directory to start searching from\n * @returns Promise resolving to the absolute path of the project root\n *\n * @example\n * ```typescript\n * const projectRoot = await getProjectRoot(process.cwd());\n * console.log(`Project root: ${projectRoot}`);\n * // Output: Project root: /Users/user/my-project\n * ```\n */\nexport async function getProjectRoot(cwd: string): Promise<string> {\n  if (cwd === '/') {\n    return cwd;\n  }\n\n  const stream = fg.stream(\n    ['yarn.lock', 'pnpm-lock.yaml', 'package-lock.json', 'deno.lock'],\n    { dot: true, cwd },\n  );\n\n  let isRoot = false;\n\n  for await (const _ of stream) {\n    isRoot = true;\n    break;\n  }\n\n  if (isRoot) {\n    return cwd;\n  }\n\n  return getProjectRoot(path.resolve(cwd, '..'));\n}\n\n/**\n * Discovers and imports all Endpoint instances from the specified route patterns.\n * Uses fast-glob to find files matching the patterns and extracts exported Endpoints.\n *\n * @template TServices - Array of service types used by the endpoints\n * @param routes - Array of glob patterns to match route files (e.g., ['src/routes/*.ts'])\n * @param cwd - The current working directory to resolve paths from\n * @returns Promise resolving to an array of Endpoint instances found in the matched files\n *\n * @example\n * ```typescript\n * // Find all endpoints in the routes directory\n * const endpoints = await getEndpointsFromRoutes(\n *   ['src/routes/**\\/*.ts'],\n *   process.cwd()\n * );\n *\n * // Register endpoints with your server\n * for (const endpoint of endpoints) {\n *   server.register(endpoint);\n * }\n * ```\n *\n * @remarks\n * - Only exports that are valid Endpoint instances are included\n * - Files are imported dynamically, so they must be valid ES modules\n * - The function filters out non-Endpoint exports automatically\n */\nexport async function getEndpointsFromRoutes<TServices extends Service[]>(\n  routes: string[],\n  cwd: string,\n): Promise<Endpoint<string, HttpMethod, any, any, TServices>[]> {\n  const stream = fg.stream(routes, { cwd });\n\n  const endpoints: Endpoint<string, HttpMethod, any, any, TServices>[] = [];\n\n  for await (const f of stream) {\n    // Resolve the absolute path for the route file\n    const routePath = path.resolve(cwd, f.toString());\n    // Dynamically import the route module\n    const route = await import(routePath);\n\n    // Filter exported values to find only Endpoint instances\n    const handlers = Object.values(route).filter((value) => {\n      return Endpoint.isEndpoint(value);\n    }) as unknown as Endpoint<string, HttpMethod, any, any, TServices>[];\n\n    endpoints.push(...handlers);\n  }\n\n  return endpoints;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,eAAeA,KAA8B;AACjE,KAAI,QAAQ,IACV,QAAO;CAGT,MAAM,SAAS,GAAG,OAChB;EAAC;EAAa;EAAkB;EAAqB;CAAY,GACjE;EAAE,KAAK;EAAM;CAAK,EACnB;CAED,IAAI,SAAS;AAEb,YAAW,MAAM,KAAK,QAAQ;AAC5B,WAAS;AACT;CACD;AAED,KAAI,OACF,QAAO;AAGT,QAAO,eAAe,KAAK,QAAQ,KAAK,KAAK,CAAC;AAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BD,eAAsB,uBACpBC,QACAD,KAC8D;CAC9D,MAAM,SAAS,GAAG,OAAO,QAAQ,EAAE,IAAK,EAAC;CAEzC,MAAME,YAAiE,CAAE;AAEzE,YAAW,MAAM,KAAK,QAAQ;EAE5B,MAAM,YAAY,KAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;EAEjD,MAAM,QAAQ,MAAM,OAAO;EAG3B,MAAM,WAAW,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU;AACtD,UAAO,SAAS,WAAW,MAAM;EAClC,EAAC;AAEF,YAAU,KAAK,GAAG,SAAS;CAC5B;AAED,QAAO;AACR"}

package/dist/{helpers-DiPZVJQC.cjs → helpers-DxxSpLfw.cjs}

@@ -1,5 +1,5 @@
 const require_chunk = require('./chunk-CUT6urMc.cjs');
-const require_Endpoint = require('./Endpoint-CA-byrDr.cjs');
+const require_Endpoint = require('./Endpoint-BJo9Hhwm.cjs');
 const node_path = require_chunk.__toESM(require("node:path"));
 const fast_glob = require_chunk.__toESM(require("fast-glob"));
 
@@ -92,4 +92,4 @@ Object.defineProperty(exports, 'getProjectRoot', {
     return getProjectRoot;
   }
 });
-//# sourceMappingURL=helpers-DiPZVJQC.cjs.map
+//# sourceMappingURL=helpers-DxxSpLfw.cjs.map

package/dist/{helpers-DiPZVJQC.cjs.map → helpers-DxxSpLfw.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"helpers-DiPZVJQC.cjs","names":["cwd: string","routes: string[]","endpoints: Endpoint<string, HttpMethod, any, any, TServices>[]"],"sources":["../src/endpoints/helpers.ts"],"sourcesContent":["import path from 'node:path';\nimport fg from 'fast-glob';\nimport { Endpoint } from './Endpoint';\n\nimport type { Service } from '@geekmidas/services';\nimport type { HttpMethod } from '../types';\n\n// Re-export utility functions\n\n/**\n * Recursively finds the project root directory by looking for lock files.\n * Traverses up the directory tree until it finds a package manager lock file.\n *\n * @param cwd - The current working directory to start searching from\n * @returns Promise resolving to the absolute path of the project root\n *\n * @example\n * ```typescript\n * const projectRoot = await getProjectRoot(process.cwd());\n * console.log(`Project root: ${projectRoot}`);\n * // Output: Project root: /Users/user/my-project\n * ```\n */\nexport async function getProjectRoot(cwd: string): Promise<string> {\n  if (cwd === '/') {\n    return cwd;\n  }\n\n  const stream = fg.stream(\n    ['yarn.lock', 'pnpm-lock.yaml', 'package-lock.json', 'deno.lock'],\n    { dot: true, cwd },\n  );\n\n  let isRoot = false;\n\n  for await (const _ of stream) {\n    isRoot = true;\n    break;\n  }\n\n  if (isRoot) {\n    return cwd;\n  }\n\n  return getProjectRoot(path.resolve(cwd, '..'));\n}\n\n/**\n * Discovers and imports all Endpoint instances from the specified route patterns.\n * Uses fast-glob to find files matching the patterns and extracts exported Endpoints.\n *\n * @template TServices - Array of service types used by the endpoints\n * @param routes - Array of glob patterns to match route files (e.g., ['src/routes/*.ts'])\n * @param cwd - The current working directory to resolve paths from\n * @returns Promise resolving to an array of Endpoint instances found in the matched files\n *\n * @example\n * ```typescript\n * // Find all endpoints in the routes directory\n * const endpoints = await getEndpointsFromRoutes(\n *   ['src/routes/**\\/*.ts'],\n *   process.cwd()\n * );\n *\n * // Register endpoints with your server\n * for (const endpoint of endpoints) {\n *   server.register(endpoint);\n * }\n * ```\n *\n * @remarks\n * - Only exports that are valid Endpoint instances are included\n * - Files are imported dynamically, so they must be valid ES modules\n * - The function filters out non-Endpoint exports automatically\n */\nexport async function getEndpointsFromRoutes<TServices extends Service[]>(\n  routes: string[],\n  cwd: string,\n): Promise<Endpoint<string, HttpMethod, any, any, TServices>[]> {\n  const stream = fg.stream(routes, { cwd });\n\n  const endpoints: Endpoint<string, HttpMethod, any, any, TServices>[] = [];\n\n  for await (const f of stream) {\n    // Resolve the absolute path for the route file\n    const routePath = path.resolve(cwd, f.toString());\n    // Dynamically import the route module\n    const route = await import(routePath);\n\n    // Filter exported values to find only Endpoint instances\n    const handlers = Object.values(route).filter((value) => {\n      return Endpoint.isEndpoint(value);\n    }) as unknown as Endpoint<string, HttpMethod, any, any, TServices>[];\n\n    endpoints.push(...handlers);\n  }\n\n  return endpoints;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,eAAeA,KAA8B;AACjE,KAAI,QAAQ,IACV,QAAO;CAGT,MAAM,SAAS,kBAAG,OAChB;EAAC;EAAa;EAAkB;EAAqB;CAAY,GACjE;EAAE,KAAK;EAAM;CAAK,EACnB;CAED,IAAI,SAAS;AAEb,YAAW,MAAM,KAAK,QAAQ;AAC5B,WAAS;AACT;CACD;AAED,KAAI,OACF,QAAO;AAGT,QAAO,eAAe,kBAAK,QAAQ,KAAK,KAAK,CAAC;AAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BD,eAAsB,uBACpBC,QACAD,KAC8D;CAC9D,MAAM,SAAS,kBAAG,OAAO,QAAQ,EAAE,IAAK,EAAC;CAEzC,MAAME,YAAiE,CAAE;AAEzE,YAAW,MAAM,KAAK,QAAQ;EAE5B,MAAM,YAAY,kBAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;EAEjD,MAAM,QAAQ,MAAM,OAAO;EAG3B,MAAM,WAAW,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU;AACtD,UAAO,0BAAS,WAAW,MAAM;EAClC,EAAC;AAEF,YAAU,KAAK,GAAG,SAAS;CAC5B;AAED,QAAO;AACR"}
+{"version":3,"file":"helpers-DxxSpLfw.cjs","names":["cwd: string","routes: string[]","endpoints: Endpoint<string, HttpMethod, any, any, TServices>[]"],"sources":["../src/endpoints/helpers.ts"],"sourcesContent":["import path from 'node:path';\nimport fg from 'fast-glob';\nimport { Endpoint } from './Endpoint';\n\nimport type { Service } from '@geekmidas/services';\nimport type { HttpMethod } from '../types';\n\n// Re-export utility functions\n\n/**\n * Recursively finds the project root directory by looking for lock files.\n * Traverses up the directory tree until it finds a package manager lock file.\n *\n * @param cwd - The current working directory to start searching from\n * @returns Promise resolving to the absolute path of the project root\n *\n * @example\n * ```typescript\n * const projectRoot = await getProjectRoot(process.cwd());\n * console.log(`Project root: ${projectRoot}`);\n * // Output: Project root: /Users/user/my-project\n * ```\n */\nexport async function getProjectRoot(cwd: string): Promise<string> {\n  if (cwd === '/') {\n    return cwd;\n  }\n\n  const stream = fg.stream(\n    ['yarn.lock', 'pnpm-lock.yaml', 'package-lock.json', 'deno.lock'],\n    { dot: true, cwd },\n  );\n\n  let isRoot = false;\n\n  for await (const _ of stream) {\n    isRoot = true;\n    break;\n  }\n\n  if (isRoot) {\n    return cwd;\n  }\n\n  return getProjectRoot(path.resolve(cwd, '..'));\n}\n\n/**\n * Discovers and imports all Endpoint instances from the specified route patterns.\n * Uses fast-glob to find files matching the patterns and extracts exported Endpoints.\n *\n * @template TServices - Array of service types used by the endpoints\n * @param routes - Array of glob patterns to match route files (e.g., ['src/routes/*.ts'])\n * @param cwd - The current working directory to resolve paths from\n * @returns Promise resolving to an array of Endpoint instances found in the matched files\n *\n * @example\n * ```typescript\n * // Find all endpoints in the routes directory\n * const endpoints = await getEndpointsFromRoutes(\n *   ['src/routes/**\\/*.ts'],\n *   process.cwd()\n * );\n *\n * // Register endpoints with your server\n * for (const endpoint of endpoints) {\n *   server.register(endpoint);\n * }\n * ```\n *\n * @remarks\n * - Only exports that are valid Endpoint instances are included\n * - Files are imported dynamically, so they must be valid ES modules\n * - The function filters out non-Endpoint exports automatically\n */\nexport async function getEndpointsFromRoutes<TServices extends Service[]>(\n  routes: string[],\n  cwd: string,\n): Promise<Endpoint<string, HttpMethod, any, any, TServices>[]> {\n  const stream = fg.stream(routes, { cwd });\n\n  const endpoints: Endpoint<string, HttpMethod, any, any, TServices>[] = [];\n\n  for await (const f of stream) {\n    // Resolve the absolute path for the route file\n    const routePath = path.resolve(cwd, f.toString());\n    // Dynamically import the route module\n    const route = await import(routePath);\n\n    // Filter exported values to find only Endpoint instances\n    const handlers = Object.values(route).filter((value) => {\n      return Endpoint.isEndpoint(value);\n    }) as unknown as Endpoint<string, HttpMethod, any, any, TServices>[];\n\n    endpoints.push(...handlers);\n  }\n\n  return endpoints;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,eAAeA,KAA8B;AACjE,KAAI,QAAQ,IACV,QAAO;CAGT,MAAM,SAAS,kBAAG,OAChB;EAAC;EAAa;EAAkB;EAAqB;CAAY,GACjE;EAAE,KAAK;EAAM;CAAK,EACnB;CAED,IAAI,SAAS;AAEb,YAAW,MAAM,KAAK,QAAQ;AAC5B,WAAS;AACT;CACD;AAED,KAAI,OACF,QAAO;AAGT,QAAO,eAAe,kBAAK,QAAQ,KAAK,KAAK,CAAC;AAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BD,eAAsB,uBACpBC,QACAD,KAC8D;CAC9D,MAAM,SAAS,kBAAG,OAAO,QAAQ,EAAE,IAAK,EAAC;CAEzC,MAAME,YAAiE,CAAE;AAEzE,YAAW,MAAM,KAAK,QAAQ;EAE5B,MAAM,YAAY,kBAAK,QAAQ,KAAK,EAAE,UAAU,CAAC;EAEjD,MAAM,QAAQ,MAAM,OAAO;EAG3B,MAAM,WAAW,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU;AACtD,UAAO,0BAAS,WAAW,MAAM;EAClC,EAAC;AAEF,YAAU,KAAK,GAAG,SAAS;CAC5B;AAED,QAAO;AACR"}

package/dist/index-CFyaRrck.d.mts

@@ -0,0 +1,10 @@
+import { FunctionBuilder } from "./FunctionBuilder-3jsoFffg.mjs";
+import * as _geekmidas_audit9 from "@geekmidas/audit";
+import * as _geekmidas_logger8 from "@geekmidas/logger";
+import * as _geekmidas_schema7 from "@geekmidas/schema";
+
+//#region src/functions/index.d.ts
+declare const f: FunctionBuilder<_geekmidas_schema7.ComposableStandardSchema, undefined, [], _geekmidas_logger8.Logger, undefined, string, undefined, string, undefined, string, _geekmidas_audit9.AuditableAction<string, unknown>>;
+//#endregion
+export { f };
+//# sourceMappingURL=index-CFyaRrck.d.mts.map

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { Construct, ConstructType } from "./Construct-DDR0295I.mjs";
-import { HttpMethod, LowerHttpMethod, RemoveUndefined } from "./types-DKf0juBf.mjs";
+import { Construct, ConstructType } from "./Construct-jBKqb-Zi.mjs";
+import { HttpMethod, LowerHttpMethod, RemoveUndefined } from "./types-CScirkHt.mjs";
 import { Service, ServiceRecord } from "@geekmidas/services";
 export { Construct, ConstructType, HttpMethod, LowerHttpMethod, RemoveUndefined, Service, ServiceRecord };

package/dist/{processAudits-BFokHhCO.cjs → processAudits-CzHkPokQ.cjs}

@@ -1,6 +1,5 @@
 const require_chunk = require('./chunk-CUT6urMc.cjs');
 const __geekmidas_audit = require_chunk.__toESM(require("@geekmidas/audit"));
-const __geekmidas_audit_kysely = require_chunk.__toESM(require("@geekmidas/audit/kysely"));
 
 //#region src/endpoints/processAudits.ts
 /**
@@ -129,23 +128,30 @@ async function createAuditContext(endpoint, serviceDiscovery, logger, ctx) {
 }
 /**
 * Execute a handler with automatic audit transaction support.
-* If the audit storage has a database (via getDatabase()), wraps execution
+* If the audit storage provides a withTransaction method, wraps execution
 * in a transaction so audits are atomic with handler's database operations.
 *
+* This is database-agnostic - each storage implementation provides its own
+* transaction handling based on the underlying database (Kysely, Drizzle, etc.).
+*
+* If the db parameter is provided and is already a transaction, the storage
+* will reuse it instead of creating a nested transaction (similar to
+* packages/db/src/kysely.ts#withTransaction).
+*
 * @param auditContext - The audit context from createAuditContext
 * @param handler - The handler function to execute (receives auditor)
 * @param onComplete - Called after handler with response, to process declarative audits
+* @param options - Optional configuration including database connection
 * @returns The handler result
 */
-async function executeWithAuditTransaction(auditContext, handler, onComplete) {
+async function executeWithAuditTransaction(auditContext, handler, onComplete, options) {
 	if (!auditContext) return handler(void 0);
 	const { auditor, storage } = auditContext;
-	const db = storage.getDatabase?.();
-	if (db) return (0, __geekmidas_audit_kysely.withAuditableTransaction)(db, auditor, async () => {
+	if (storage.withTransaction) return storage.withTransaction(auditor, async () => {
 		const response$1 = await handler(auditor);
 		if (onComplete) await onComplete(response$1, auditor);
 		return response$1;
-	});
+	}, options?.db);
 	const response = await handler(auditor);
 	if (onComplete) await onComplete(response, auditor);
 	await auditor.flush();
@@ -171,4 +177,4 @@ Object.defineProperty(exports, 'processEndpointAudits', {
     return processEndpointAudits;
   }
 });
-//# sourceMappingURL=processAudits-BFokHhCO.cjs.map
+//# sourceMappingURL=processAudits-CzHkPokQ.cjs.map

package/dist/processAudits-CzHkPokQ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"processAudits-CzHkPokQ.cjs","names":["endpoint: Endpoint<\n    any,\n    any,\n    any,\n    OutSchema,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction\n  >","response: InferStandardSchema<OutSchema>","serviceDiscovery: ServiceDiscovery<any, any>","logger: TLogger","ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  }","existingAuditor?: Auditor<TAuditAction>","auditor: Auditor<TAuditAction>","actor: AuditActor","DefaultAuditor","endpoint: Endpoint<\n    any,\n    any,\n    any,\n    any,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  >","auditContext: AuditExecutionContext<TAuditAction> | undefined","handler: (auditor?: Auditor<TAuditAction>) => Promise<T>","onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>","options?: ExecuteWithAuditTransactionOptions","response"],"sources":["../src/endpoints/processAudits.ts"],"sourcesContent":["import type {\n  AuditActor,\n  AuditStorage,\n  AuditableAction,\n  Auditor,\n} from '@geekmidas/audit';\nimport { DefaultAuditor } from '@geekmidas/audit';\nimport type { Logger } from '@geekmidas/logger';\nimport type { InferStandardSchema } from '@geekmidas/schema';\nimport type { Service, ServiceDiscovery } from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport type { CookieFn, Endpoint, HeaderFn } from './Endpoint';\nimport type { ActorExtractor, MappedAudit } from './audit';\n\n/**\n * Process declarative audit definitions after successful endpoint execution.\n * Similar to publishConstructEvents for events.\n *\n * @param endpoint - The endpoint with audit configuration\n * @param response - The handler response to generate audit payloads from\n * @param serviceDiscovery - Service discovery for registering audit storage\n * @param logger - Logger for debug/error messages\n * @param ctx - Request context (session, headers, cookies, services)\n * @param existingAuditor - Optional existing auditor instance (e.g., from handler context).\n *                          If provided, uses this auditor (with its stored transaction).\n *                          If not provided, creates a new auditor.\n */\nexport async function processEndpointAudits<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n  OutSchema extends StandardSchemaV1 | undefined = undefined,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n>(\n  endpoint: Endpoint<\n    any,\n    any,\n    any,\n    OutSchema,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction\n  >,\n  response: InferStandardSchema<OutSchema>,\n  serviceDiscovery: ServiceDiscovery<any, any>,\n  logger: TLogger,\n  ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  },\n  existingAuditor?: Auditor<TAuditAction>,\n): Promise<void> {\n  try {\n    const audits = endpoint.audits as MappedAudit<TAuditAction, OutSchema>[];\n\n    // If we have an existing auditor (from handler context), we need to flush\n    // any manual audits it collected, even if there are no declarative audits\n    const hasExistingRecords =\n      existingAuditor && existingAuditor.getRecords().length > 0;\n\n    // Skip if no declarative audits and no existing records to flush\n    if (!audits?.length && !hasExistingRecords) {\n      logger.debug('No audits to process');\n      return;\n    }\n\n    // If no auditor storage service and we have things to process, warn\n    if (!endpoint.auditorStorageService) {\n      if (hasExistingRecords || audits?.length) {\n        logger.warn('No auditor storage service available');\n      }\n      return;\n    }\n\n    // Get or create auditor\n    let auditor: Auditor<TAuditAction>;\n\n    if (existingAuditor) {\n      // Use existing auditor (preserves stored transaction and manual audits)\n      auditor = existingAuditor;\n      logger.debug('Using existing auditor from handler context');\n    } else {\n      // Create new auditor (backward compatibility)\n      const services = await serviceDiscovery.register([\n        endpoint.auditorStorageService,\n      ]);\n      const storage = services[\n        endpoint.auditorStorageService.serviceName\n      ] as AuditStorage;\n\n      // Extract actor if configured\n      let actor: AuditActor = { id: 'system', type: 'system' };\n      if (endpoint.actorExtractor) {\n        try {\n          actor = await (\n            endpoint.actorExtractor as ActorExtractor<\n              TServices,\n              TSession,\n              TLogger\n            >\n          )({\n            services: ctx.services as any,\n            session: ctx.session,\n            header: ctx.header,\n            cookie: ctx.cookie,\n            logger,\n          });\n        } catch (error) {\n          logger.error(error as Error, 'Failed to extract actor for audits');\n          // Continue with system actor\n        }\n      }\n\n      auditor = new DefaultAuditor<TAuditAction>({\n        actor,\n        storage,\n        metadata: {\n          endpoint: endpoint.route,\n          method: endpoint.method,\n        },\n      });\n    }\n\n    // Process each declarative audit\n    if (audits?.length) {\n      for (const audit of audits) {\n        logger.debug({ audit: audit.type }, 'Processing declarative audit');\n\n        // Check when condition\n        if (audit.when && !audit.when(response as any)) {\n          logger.debug(\n            { audit: audit.type },\n            'Audit skipped due to when condition',\n          );\n          continue;\n        }\n\n        // Extract payload\n        const payload = audit.payload(response as any);\n\n        // Extract entityId if configured\n        const entityId = audit.entityId?.(response as any);\n\n        // Record the audit\n        auditor.audit(audit.type as any, payload as any, {\n          table: audit.table,\n          entityId,\n        });\n      }\n    }\n\n    // Flush audits to storage\n    // Note: If existingAuditor has a stored transaction (via setTransaction),\n    // flush() will use it automatically\n    const recordCount = auditor.getRecords().length;\n    if (recordCount > 0) {\n      // Check if auditor has a stored transaction (for logging purposes)\n      const trx =\n        'getTransaction' in auditor\n          ? (auditor as { getTransaction(): unknown }).getTransaction()\n          : undefined;\n      logger.debug(\n        { auditCount: recordCount, hasTransaction: !!trx },\n        'Flushing audits',\n      );\n      await auditor.flush();\n    }\n  } catch (error) {\n    logger.error(error as Error, 'Failed to process audits');\n    // Don't rethrow - audit failures shouldn't fail the request\n  }\n}\n\n/**\n * Context for audit-aware handler execution.\n */\nexport interface AuditExecutionContext<\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n> {\n  /** The auditor instance for recording audits */\n  auditor: Auditor<TAuditAction>;\n  /** The audit storage instance */\n  storage: AuditStorage;\n}\n\n/**\n * Create audit context for handler execution.\n * Returns the auditor and storage for use in the handler.\n *\n * @param endpoint - The endpoint with audit configuration\n * @param serviceDiscovery - Service discovery for getting audit storage\n * @param logger - Logger for debug/error messages\n * @param ctx - Request context for actor extraction\n * @returns Audit context with auditor and storage, or undefined if not configured\n */\nexport async function createAuditContext<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n>(\n  endpoint: Endpoint<\n    any,\n    any,\n    any,\n    any,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  >,\n  serviceDiscovery: ServiceDiscovery<any, any>,\n  logger: TLogger,\n  ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  },\n): Promise<AuditExecutionContext<TAuditAction> | undefined> {\n  if (!endpoint.auditorStorageService) {\n    return undefined;\n  }\n\n  const services = await serviceDiscovery.register([\n    endpoint.auditorStorageService,\n  ]);\n  const storage = services[\n    endpoint.auditorStorageService.serviceName\n  ] as AuditStorage;\n\n  // Extract actor if configured\n  let actor: AuditActor = { id: 'system', type: 'system' };\n  if (endpoint.actorExtractor) {\n    try {\n      actor = await (\n        endpoint.actorExtractor as ActorExtractor<TServices, TSession, TLogger>\n      )({\n        services: ctx.services as any,\n        session: ctx.session,\n        header: ctx.header,\n        cookie: ctx.cookie,\n        logger,\n      });\n    } catch (error) {\n      logger.error(error as Error, 'Failed to extract actor for audits');\n    }\n  }\n\n  const auditor = new DefaultAuditor<TAuditAction>({\n    actor,\n    storage,\n    metadata: {\n      endpoint: endpoint.route,\n      method: endpoint.method,\n    },\n  });\n\n  return { auditor, storage };\n}\n\n/**\n * Options for executeWithAuditTransaction.\n */\nexport interface ExecuteWithAuditTransactionOptions {\n  /**\n   * Database connection to use for the transaction.\n   * If this is already a transaction, it will be reused instead of creating a nested one.\n   * If not provided, the storage's internal database is used.\n   */\n  db?: unknown;\n}\n\n/**\n * Execute a handler with automatic audit transaction support.\n * If the audit storage provides a withTransaction method, wraps execution\n * in a transaction so audits are atomic with handler's database operations.\n *\n * This is database-agnostic - each storage implementation provides its own\n * transaction handling based on the underlying database (Kysely, Drizzle, etc.).\n *\n * If the db parameter is provided and is already a transaction, the storage\n * will reuse it instead of creating a nested transaction (similar to\n * packages/db/src/kysely.ts#withTransaction).\n *\n * @param auditContext - The audit context from createAuditContext\n * @param handler - The handler function to execute (receives auditor)\n * @param onComplete - Called after handler with response, to process declarative audits\n * @param options - Optional configuration including database connection\n * @returns The handler result\n */\nexport async function executeWithAuditTransaction<\n  T,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n>(\n  auditContext: AuditExecutionContext<TAuditAction> | undefined,\n  handler: (auditor?: Auditor<TAuditAction>) => Promise<T>,\n  onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>,\n  options?: ExecuteWithAuditTransactionOptions,\n): Promise<T> {\n  // No audit context - just run handler\n  if (!auditContext) {\n    return handler(undefined);\n  }\n\n  const { auditor, storage } = auditContext;\n\n  // Check if storage provides a transaction wrapper\n  if (storage.withTransaction) {\n    // Wrap in transaction - audits are atomic with handler operations\n    // The storage's withTransaction handles setTransaction and flush\n    // Pass db so existing transactions are reused\n    return storage.withTransaction(\n      auditor,\n      async () => {\n        const response = await handler(auditor);\n\n        // Process declarative audits within the transaction\n        if (onComplete) {\n          await onComplete(response, auditor);\n        }\n\n        return response;\n      },\n      options?.db,\n    );\n  }\n\n  // No transaction support - run handler and flush audits after\n  const response = await handler(auditor);\n\n  if (onComplete) {\n    await onComplete(response, auditor);\n  }\n\n  // Flush audits (no transaction)\n  await auditor.flush();\n\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,eAAsB,sBAYpBA,UAcAC,UACAC,kBACAC,QACAC,KAMAC,iBACe;AACf,KAAI;EACF,MAAM,SAAS,SAAS;EAIxB,MAAM,qBACJ,mBAAmB,gBAAgB,YAAY,CAAC,SAAS;AAG3D,OAAK,QAAQ,WAAW,oBAAoB;AAC1C,UAAO,MAAM,uBAAuB;AACpC;EACD;AAGD,OAAK,SAAS,uBAAuB;AACnC,OAAI,sBAAsB,QAAQ,OAChC,QAAO,KAAK,uCAAuC;AAErD;EACD;EAGD,IAAIC;AAEJ,MAAI,iBAAiB;AAEnB,aAAU;AACV,UAAO,MAAM,8CAA8C;EAC5D,OAAM;GAEL,MAAM,WAAW,MAAM,iBAAiB,SAAS,CAC/C,SAAS,qBACV,EAAC;GACF,MAAM,UAAU,SACd,SAAS,sBAAsB;GAIjC,IAAIC,QAAoB;IAAE,IAAI;IAAU,MAAM;GAAU;AACxD,OAAI,SAAS,eACX,KAAI;AACF,YAAQ,MAAM,AACZ,SAAS,eAKT;KACA,UAAU,IAAI;KACd,SAAS,IAAI;KACb,QAAQ,IAAI;KACZ,QAAQ,IAAI;KACZ;IACD,EAAC;GACH,SAAQ,OAAO;AACd,WAAO,MAAM,OAAgB,qCAAqC;GAEnE;AAGH,aAAU,IAAIC,iCAA6B;IACzC;IACA;IACA,UAAU;KACR,UAAU,SAAS;KACnB,QAAQ,SAAS;IAClB;GACF;EACF;AAGD,MAAI,QAAQ,OACV,MAAK,MAAM,SAAS,QAAQ;AAC1B,UAAO,MAAM,EAAE,OAAO,MAAM,KAAM,GAAE,+BAA+B;AAGnE,OAAI,MAAM,SAAS,MAAM,KAAK,SAAgB,EAAE;AAC9C,WAAO,MACL,EAAE,OAAO,MAAM,KAAM,GACrB,sCACD;AACD;GACD;GAGD,MAAM,UAAU,MAAM,QAAQ,SAAgB;GAG9C,MAAM,WAAW,MAAM,WAAW,SAAgB;AAGlD,WAAQ,MAAM,MAAM,MAAa,SAAgB;IAC/C,OAAO,MAAM;IACb;GACD,EAAC;EACH;EAMH,MAAM,cAAc,QAAQ,YAAY,CAAC;AACzC,MAAI,cAAc,GAAG;GAEnB,MAAM,MACJ,oBAAoB,UAChB,AAAC,QAA0C,gBAAgB;AAEjE,UAAO,MACL;IAAE,YAAY;IAAa,kBAAkB;GAAK,GAClD,kBACD;AACD,SAAM,QAAQ,OAAO;EACtB;CACF,SAAQ,OAAO;AACd,SAAO,MAAM,OAAgB,2BAA2B;CAEzD;AACF;;;;;;;;;;;AA2BD,eAAsB,mBAapBC,UAgBAP,kBACAC,QACAC,KAM0D;AAC1D,MAAK,SAAS,sBACZ;CAGF,MAAM,WAAW,MAAM,iBAAiB,SAAS,CAC/C,SAAS,qBACV,EAAC;CACF,MAAM,UAAU,SACd,SAAS,sBAAsB;CAIjC,IAAIG,QAAoB;EAAE,IAAI;EAAU,MAAM;CAAU;AACxD,KAAI,SAAS,eACX,KAAI;AACF,UAAQ,MAAM,AACZ,SAAS,eACT;GACA,UAAU,IAAI;GACd,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,QAAQ,IAAI;GACZ;EACD,EAAC;CACH,SAAQ,OAAO;AACd,SAAO,MAAM,OAAgB,qCAAqC;CACnE;CAGH,MAAM,UAAU,IAAIC,iCAA6B;EAC/C;EACA;EACA,UAAU;GACR,UAAU,SAAS;GACnB,QAAQ,SAAS;EAClB;CACF;AAED,QAAO;EAAE;EAAS;CAAS;AAC5B;;;;;;;;;;;;;;;;;;;AAgCD,eAAsB,4BAOpBE,cACAC,SACAC,YACAC,SACY;AAEZ,MAAK,aACH,QAAO,eAAkB;CAG3B,MAAM,EAAE,SAAS,SAAS,GAAG;AAG7B,KAAI,QAAQ,gBAIV,QAAO,QAAQ,gBACb,SACA,YAAY;EACV,MAAMC,aAAW,MAAM,QAAQ,QAAQ;AAGvC,MAAI,WACF,OAAM,WAAWA,YAAU,QAAQ;AAGrC,SAAOA;CACR,GACD,SAAS,GACV;CAIH,MAAM,WAAW,MAAM,QAAQ,QAAQ;AAEvC,KAAI,WACF,OAAM,WAAW,UAAU,QAAQ;AAIrC,OAAM,QAAQ,OAAO;AAErB,QAAO;AACR"}

package/dist/{processAudits-DfcB-X-4.mjs → processAudits-Dj8UGqcW.mjs}

@@ -1,5 +1,4 @@
 import { DefaultAuditor } from "@geekmidas/audit";
-import { withAuditableTransaction } from "@geekmidas/audit/kysely";
 
 //#region src/endpoints/processAudits.ts
 /**
@@ -128,23 +127,30 @@ async function createAuditContext(endpoint, serviceDiscovery, logger, ctx) {
 }
 /**
 * Execute a handler with automatic audit transaction support.
-* If the audit storage has a database (via getDatabase()), wraps execution
+* If the audit storage provides a withTransaction method, wraps execution
 * in a transaction so audits are atomic with handler's database operations.
 *
+* This is database-agnostic - each storage implementation provides its own
+* transaction handling based on the underlying database (Kysely, Drizzle, etc.).
+*
+* If the db parameter is provided and is already a transaction, the storage
+* will reuse it instead of creating a nested transaction (similar to
+* packages/db/src/kysely.ts#withTransaction).
+*
 * @param auditContext - The audit context from createAuditContext
 * @param handler - The handler function to execute (receives auditor)
 * @param onComplete - Called after handler with response, to process declarative audits
+* @param options - Optional configuration including database connection
 * @returns The handler result
 */
-async function executeWithAuditTransaction(auditContext, handler, onComplete) {
+async function executeWithAuditTransaction(auditContext, handler, onComplete, options) {
 	if (!auditContext) return handler(void 0);
 	const { auditor, storage } = auditContext;
-	const db = storage.getDatabase?.();
-	if (db) return withAuditableTransaction(db, auditor, async () => {
+	if (storage.withTransaction) return storage.withTransaction(auditor, async () => {
 		const response$1 = await handler(auditor);
 		if (onComplete) await onComplete(response$1, auditor);
 		return response$1;
-	});
+	}, options?.db);
 	const response = await handler(auditor);
 	if (onComplete) await onComplete(response, auditor);
 	await auditor.flush();
@@ -153,4 +159,4 @@ async function executeWithAuditTransaction(auditContext, handler, onComplete) {
 
 //#endregion
 export { createAuditContext, executeWithAuditTransaction, processEndpointAudits };
-//# sourceMappingURL=processAudits-DfcB-X-4.mjs.map
+//# sourceMappingURL=processAudits-Dj8UGqcW.mjs.map

package/dist/processAudits-Dj8UGqcW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"processAudits-Dj8UGqcW.mjs","names":["endpoint: Endpoint<\n    any,\n    any,\n    any,\n    OutSchema,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction\n  >","response: InferStandardSchema<OutSchema>","serviceDiscovery: ServiceDiscovery<any, any>","logger: TLogger","ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  }","existingAuditor?: Auditor<TAuditAction>","auditor: Auditor<TAuditAction>","actor: AuditActor","endpoint: Endpoint<\n    any,\n    any,\n    any,\n    any,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  >","auditContext: AuditExecutionContext<TAuditAction> | undefined","handler: (auditor?: Auditor<TAuditAction>) => Promise<T>","onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>","options?: ExecuteWithAuditTransactionOptions","response"],"sources":["../src/endpoints/processAudits.ts"],"sourcesContent":["import type {\n  AuditActor,\n  AuditStorage,\n  AuditableAction,\n  Auditor,\n} from '@geekmidas/audit';\nimport { DefaultAuditor } from '@geekmidas/audit';\nimport type { Logger } from '@geekmidas/logger';\nimport type { InferStandardSchema } from '@geekmidas/schema';\nimport type { Service, ServiceDiscovery } from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport type { CookieFn, Endpoint, HeaderFn } from './Endpoint';\nimport type { ActorExtractor, MappedAudit } from './audit';\n\n/**\n * Process declarative audit definitions after successful endpoint execution.\n * Similar to publishConstructEvents for events.\n *\n * @param endpoint - The endpoint with audit configuration\n * @param response - The handler response to generate audit payloads from\n * @param serviceDiscovery - Service discovery for registering audit storage\n * @param logger - Logger for debug/error messages\n * @param ctx - Request context (session, headers, cookies, services)\n * @param existingAuditor - Optional existing auditor instance (e.g., from handler context).\n *                          If provided, uses this auditor (with its stored transaction).\n *                          If not provided, creates a new auditor.\n */\nexport async function processEndpointAudits<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n  OutSchema extends StandardSchemaV1 | undefined = undefined,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n>(\n  endpoint: Endpoint<\n    any,\n    any,\n    any,\n    OutSchema,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction\n  >,\n  response: InferStandardSchema<OutSchema>,\n  serviceDiscovery: ServiceDiscovery<any, any>,\n  logger: TLogger,\n  ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  },\n  existingAuditor?: Auditor<TAuditAction>,\n): Promise<void> {\n  try {\n    const audits = endpoint.audits as MappedAudit<TAuditAction, OutSchema>[];\n\n    // If we have an existing auditor (from handler context), we need to flush\n    // any manual audits it collected, even if there are no declarative audits\n    const hasExistingRecords =\n      existingAuditor && existingAuditor.getRecords().length > 0;\n\n    // Skip if no declarative audits and no existing records to flush\n    if (!audits?.length && !hasExistingRecords) {\n      logger.debug('No audits to process');\n      return;\n    }\n\n    // If no auditor storage service and we have things to process, warn\n    if (!endpoint.auditorStorageService) {\n      if (hasExistingRecords || audits?.length) {\n        logger.warn('No auditor storage service available');\n      }\n      return;\n    }\n\n    // Get or create auditor\n    let auditor: Auditor<TAuditAction>;\n\n    if (existingAuditor) {\n      // Use existing auditor (preserves stored transaction and manual audits)\n      auditor = existingAuditor;\n      logger.debug('Using existing auditor from handler context');\n    } else {\n      // Create new auditor (backward compatibility)\n      const services = await serviceDiscovery.register([\n        endpoint.auditorStorageService,\n      ]);\n      const storage = services[\n        endpoint.auditorStorageService.serviceName\n      ] as AuditStorage;\n\n      // Extract actor if configured\n      let actor: AuditActor = { id: 'system', type: 'system' };\n      if (endpoint.actorExtractor) {\n        try {\n          actor = await (\n            endpoint.actorExtractor as ActorExtractor<\n              TServices,\n              TSession,\n              TLogger\n            >\n          )({\n            services: ctx.services as any,\n            session: ctx.session,\n            header: ctx.header,\n            cookie: ctx.cookie,\n            logger,\n          });\n        } catch (error) {\n          logger.error(error as Error, 'Failed to extract actor for audits');\n          // Continue with system actor\n        }\n      }\n\n      auditor = new DefaultAuditor<TAuditAction>({\n        actor,\n        storage,\n        metadata: {\n          endpoint: endpoint.route,\n          method: endpoint.method,\n        },\n      });\n    }\n\n    // Process each declarative audit\n    if (audits?.length) {\n      for (const audit of audits) {\n        logger.debug({ audit: audit.type }, 'Processing declarative audit');\n\n        // Check when condition\n        if (audit.when && !audit.when(response as any)) {\n          logger.debug(\n            { audit: audit.type },\n            'Audit skipped due to when condition',\n          );\n          continue;\n        }\n\n        // Extract payload\n        const payload = audit.payload(response as any);\n\n        // Extract entityId if configured\n        const entityId = audit.entityId?.(response as any);\n\n        // Record the audit\n        auditor.audit(audit.type as any, payload as any, {\n          table: audit.table,\n          entityId,\n        });\n      }\n    }\n\n    // Flush audits to storage\n    // Note: If existingAuditor has a stored transaction (via setTransaction),\n    // flush() will use it automatically\n    const recordCount = auditor.getRecords().length;\n    if (recordCount > 0) {\n      // Check if auditor has a stored transaction (for logging purposes)\n      const trx =\n        'getTransaction' in auditor\n          ? (auditor as { getTransaction(): unknown }).getTransaction()\n          : undefined;\n      logger.debug(\n        { auditCount: recordCount, hasTransaction: !!trx },\n        'Flushing audits',\n      );\n      await auditor.flush();\n    }\n  } catch (error) {\n    logger.error(error as Error, 'Failed to process audits');\n    // Don't rethrow - audit failures shouldn't fail the request\n  }\n}\n\n/**\n * Context for audit-aware handler execution.\n */\nexport interface AuditExecutionContext<\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n> {\n  /** The auditor instance for recording audits */\n  auditor: Auditor<TAuditAction>;\n  /** The audit storage instance */\n  storage: AuditStorage;\n}\n\n/**\n * Create audit context for handler execution.\n * Returns the auditor and storage for use in the handler.\n *\n * @param endpoint - The endpoint with audit configuration\n * @param serviceDiscovery - Service discovery for getting audit storage\n * @param logger - Logger for debug/error messages\n * @param ctx - Request context for actor extraction\n * @returns Audit context with auditor and storage, or undefined if not configured\n */\nexport async function createAuditContext<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n>(\n  endpoint: Endpoint<\n    any,\n    any,\n    any,\n    any,\n    TServices,\n    TLogger,\n    TSession,\n    any,\n    any,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  >,\n  serviceDiscovery: ServiceDiscovery<any, any>,\n  logger: TLogger,\n  ctx: {\n    session: TSession;\n    header: HeaderFn;\n    cookie: CookieFn;\n    services: Record<string, unknown>;\n  },\n): Promise<AuditExecutionContext<TAuditAction> | undefined> {\n  if (!endpoint.auditorStorageService) {\n    return undefined;\n  }\n\n  const services = await serviceDiscovery.register([\n    endpoint.auditorStorageService,\n  ]);\n  const storage = services[\n    endpoint.auditorStorageService.serviceName\n  ] as AuditStorage;\n\n  // Extract actor if configured\n  let actor: AuditActor = { id: 'system', type: 'system' };\n  if (endpoint.actorExtractor) {\n    try {\n      actor = await (\n        endpoint.actorExtractor as ActorExtractor<TServices, TSession, TLogger>\n      )({\n        services: ctx.services as any,\n        session: ctx.session,\n        header: ctx.header,\n        cookie: ctx.cookie,\n        logger,\n      });\n    } catch (error) {\n      logger.error(error as Error, 'Failed to extract actor for audits');\n    }\n  }\n\n  const auditor = new DefaultAuditor<TAuditAction>({\n    actor,\n    storage,\n    metadata: {\n      endpoint: endpoint.route,\n      method: endpoint.method,\n    },\n  });\n\n  return { auditor, storage };\n}\n\n/**\n * Options for executeWithAuditTransaction.\n */\nexport interface ExecuteWithAuditTransactionOptions {\n  /**\n   * Database connection to use for the transaction.\n   * If this is already a transaction, it will be reused instead of creating a nested one.\n   * If not provided, the storage's internal database is used.\n   */\n  db?: unknown;\n}\n\n/**\n * Execute a handler with automatic audit transaction support.\n * If the audit storage provides a withTransaction method, wraps execution\n * in a transaction so audits are atomic with handler's database operations.\n *\n * This is database-agnostic - each storage implementation provides its own\n * transaction handling based on the underlying database (Kysely, Drizzle, etc.).\n *\n * If the db parameter is provided and is already a transaction, the storage\n * will reuse it instead of creating a nested transaction (similar to\n * packages/db/src/kysely.ts#withTransaction).\n *\n * @param auditContext - The audit context from createAuditContext\n * @param handler - The handler function to execute (receives auditor)\n * @param onComplete - Called after handler with response, to process declarative audits\n * @param options - Optional configuration including database connection\n * @returns The handler result\n */\nexport async function executeWithAuditTransaction<\n  T,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n>(\n  auditContext: AuditExecutionContext<TAuditAction> | undefined,\n  handler: (auditor?: Auditor<TAuditAction>) => Promise<T>,\n  onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>,\n  options?: ExecuteWithAuditTransactionOptions,\n): Promise<T> {\n  // No audit context - just run handler\n  if (!auditContext) {\n    return handler(undefined);\n  }\n\n  const { auditor, storage } = auditContext;\n\n  // Check if storage provides a transaction wrapper\n  if (storage.withTransaction) {\n    // Wrap in transaction - audits are atomic with handler operations\n    // The storage's withTransaction handles setTransaction and flush\n    // Pass db so existing transactions are reused\n    return storage.withTransaction(\n      auditor,\n      async () => {\n        const response = await handler(auditor);\n\n        // Process declarative audits within the transaction\n        if (onComplete) {\n          await onComplete(response, auditor);\n        }\n\n        return response;\n      },\n      options?.db,\n    );\n  }\n\n  // No transaction support - run handler and flush audits after\n  const response = await handler(auditor);\n\n  if (onComplete) {\n    await onComplete(response, auditor);\n  }\n\n  // Flush audits (no transaction)\n  await auditor.flush();\n\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA2BA,eAAsB,sBAYpBA,UAcAC,UACAC,kBACAC,QACAC,KAMAC,iBACe;AACf,KAAI;EACF,MAAM,SAAS,SAAS;EAIxB,MAAM,qBACJ,mBAAmB,gBAAgB,YAAY,CAAC,SAAS;AAG3D,OAAK,QAAQ,WAAW,oBAAoB;AAC1C,UAAO,MAAM,uBAAuB;AACpC;EACD;AAGD,OAAK,SAAS,uBAAuB;AACnC,OAAI,sBAAsB,QAAQ,OAChC,QAAO,KAAK,uCAAuC;AAErD;EACD;EAGD,IAAIC;AAEJ,MAAI,iBAAiB;AAEnB,aAAU;AACV,UAAO,MAAM,8CAA8C;EAC5D,OAAM;GAEL,MAAM,WAAW,MAAM,iBAAiB,SAAS,CAC/C,SAAS,qBACV,EAAC;GACF,MAAM,UAAU,SACd,SAAS,sBAAsB;GAIjC,IAAIC,QAAoB;IAAE,IAAI;IAAU,MAAM;GAAU;AACxD,OAAI,SAAS,eACX,KAAI;AACF,YAAQ,MAAM,AACZ,SAAS,eAKT;KACA,UAAU,IAAI;KACd,SAAS,IAAI;KACb,QAAQ,IAAI;KACZ,QAAQ,IAAI;KACZ;IACD,EAAC;GACH,SAAQ,OAAO;AACd,WAAO,MAAM,OAAgB,qCAAqC;GAEnE;AAGH,aAAU,IAAI,eAA6B;IACzC;IACA;IACA,UAAU;KACR,UAAU,SAAS;KACnB,QAAQ,SAAS;IAClB;GACF;EACF;AAGD,MAAI,QAAQ,OACV,MAAK,MAAM,SAAS,QAAQ;AAC1B,UAAO,MAAM,EAAE,OAAO,MAAM,KAAM,GAAE,+BAA+B;AAGnE,OAAI,MAAM,SAAS,MAAM,KAAK,SAAgB,EAAE;AAC9C,WAAO,MACL,EAAE,OAAO,MAAM,KAAM,GACrB,sCACD;AACD;GACD;GAGD,MAAM,UAAU,MAAM,QAAQ,SAAgB;GAG9C,MAAM,WAAW,MAAM,WAAW,SAAgB;AAGlD,WAAQ,MAAM,MAAM,MAAa,SAAgB;IAC/C,OAAO,MAAM;IACb;GACD,EAAC;EACH;EAMH,MAAM,cAAc,QAAQ,YAAY,CAAC;AACzC,MAAI,cAAc,GAAG;GAEnB,MAAM,MACJ,oBAAoB,UAChB,AAAC,QAA0C,gBAAgB;AAEjE,UAAO,MACL;IAAE,YAAY;IAAa,kBAAkB;GAAK,GAClD,kBACD;AACD,SAAM,QAAQ,OAAO;EACtB;CACF,SAAQ,OAAO;AACd,SAAO,MAAM,OAAgB,2BAA2B;CAEzD;AACF;;;;;;;;;;;AA2BD,eAAsB,mBAapBC,UAgBAN,kBACAC,QACAC,KAM0D;AAC1D,MAAK,SAAS,sBACZ;CAGF,MAAM,WAAW,MAAM,iBAAiB,SAAS,CAC/C,SAAS,qBACV,EAAC;CACF,MAAM,UAAU,SACd,SAAS,sBAAsB;CAIjC,IAAIG,QAAoB;EAAE,IAAI;EAAU,MAAM;CAAU;AACxD,KAAI,SAAS,eACX,KAAI;AACF,UAAQ,MAAM,AACZ,SAAS,eACT;GACA,UAAU,IAAI;GACd,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,QAAQ,IAAI;GACZ;EACD,EAAC;CACH,SAAQ,OAAO;AACd,SAAO,MAAM,OAAgB,qCAAqC;CACnE;CAGH,MAAM,UAAU,IAAI,eAA6B;EAC/C;EACA;EACA,UAAU;GACR,UAAU,SAAS;GACnB,QAAQ,SAAS;EAClB;CACF;AAED,QAAO;EAAE;EAAS;CAAS;AAC5B;;;;;;;;;;;;;;;;;;;AAgCD,eAAsB,4BAOpBE,cACAC,SACAC,YACAC,SACY;AAEZ,MAAK,aACH,QAAO,eAAkB;CAG3B,MAAM,EAAE,SAAS,SAAS,GAAG;AAG7B,KAAI,QAAQ,gBAIV,QAAO,QAAQ,gBACb,SACA,YAAY;EACV,MAAMC,aAAW,MAAM,QAAQ,QAAQ;AAGvC,MAAI,WACF,OAAM,WAAWA,YAAU,QAAQ;AAGrC,SAAOA;CACR,GACD,SAAS,GACV;CAIH,MAAM,WAAW,MAAM,QAAQ,QAAQ;AAEvC,KAAI,WACF,OAAM,WAAW,UAAU,QAAQ;AAIrC,OAAM,QAAQ,OAAO;AAErB,QAAO;AACR"}

package/dist/publisher.d.mts

@@ -1,4 +1,4 @@
-import { Construct } from "./Construct-DDR0295I.mjs";
+import { Construct } from "./Construct-jBKqb-Zi.mjs";
 import { Service, ServiceDiscovery } from "@geekmidas/services";
 import { AuditStorage } from "@geekmidas/audit";
 import { EventPublisher, MappedEvent } from "@geekmidas/events";

package/dist/rls-Bf3FRwto.mjs

@@ -0,0 +1,9 @@
+//#region src/endpoints/rls.ts
+/**
+* Symbol used to bypass RLS for an endpoint.
+*/
+const RLS_BYPASS = Symbol.for("geekmidas.rls.bypass");
+
+//#endregion
+export { RLS_BYPASS };
+//# sourceMappingURL=rls-Bf3FRwto.mjs.map

package/dist/rls-Bf3FRwto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-Bf3FRwto.mjs","names":[],"sources":["../src/endpoints/rls.ts"],"sourcesContent":["import type { Logger } from '@geekmidas/logger';\nimport type { Service, ServiceRecord } from '@geekmidas/services';\nimport type { CookieFn, HeaderFn } from './Endpoint';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n  [key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Function type for extracting RLS context from request context.\n *\n * @template TServices - Available service dependencies\n * @template TSession - Session data type\n * @template TLogger - Logger type\n *\n * @example\n * ```ts\n * const extractor: RlsContextExtractor<[], UserSession> = ({ session }) => ({\n *   user_id: session.userId,\n *   tenant_id: session.tenantId,\n *   roles: session.roles.join(','),\n * });\n * ```\n */\nexport type RlsContextExtractor<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n> = (ctx: {\n  services: ServiceRecord<TServices>;\n  session: TSession;\n  header: HeaderFn;\n  cookie: CookieFn;\n  logger: TLogger;\n}) => RlsContext | Promise<RlsContext>;\n\n/**\n * Configuration for RLS on an endpoint or factory.\n *\n * @template TServices - Available service dependencies\n * @template TSession - Session data type\n * @template TLogger - Logger type\n */\nexport interface RlsConfig<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n> {\n  /** Function to extract RLS context from request */\n  extractor: RlsContextExtractor<TServices, TSession, TLogger>;\n  /** Prefix for PostgreSQL session variables (default: 'app') */\n  prefix?: string;\n}\n\n/**\n * Symbol used to bypass RLS for an endpoint.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;AA6DA,MAAa,aAAa,OAAO,IAAI,uBAAuB"}

package/dist/rls-CmJ7bRsz.cjs

@@ -0,0 +1,15 @@
+
+//#region src/endpoints/rls.ts
+/**
+* Symbol used to bypass RLS for an endpoint.
+*/
+const RLS_BYPASS = Symbol.for("geekmidas.rls.bypass");
+
+//#endregion
+Object.defineProperty(exports, 'RLS_BYPASS', {
+  enumerable: true,
+  get: function () {
+    return RLS_BYPASS;
+  }
+});
+//# sourceMappingURL=rls-CmJ7bRsz.cjs.map

package/dist/rls-CmJ7bRsz.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-CmJ7bRsz.cjs","names":[],"sources":["../src/endpoints/rls.ts"],"sourcesContent":["import type { Logger } from '@geekmidas/logger';\nimport type { Service, ServiceRecord } from '@geekmidas/services';\nimport type { CookieFn, HeaderFn } from './Endpoint';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n  [key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Function type for extracting RLS context from request context.\n *\n * @template TServices - Available service dependencies\n * @template TSession - Session data type\n * @template TLogger - Logger type\n *\n * @example\n * ```ts\n * const extractor: RlsContextExtractor<[], UserSession> = ({ session }) => ({\n *   user_id: session.userId,\n *   tenant_id: session.tenantId,\n *   roles: session.roles.join(','),\n * });\n * ```\n */\nexport type RlsContextExtractor<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n> = (ctx: {\n  services: ServiceRecord<TServices>;\n  session: TSession;\n  header: HeaderFn;\n  cookie: CookieFn;\n  logger: TLogger;\n}) => RlsContext | Promise<RlsContext>;\n\n/**\n * Configuration for RLS on an endpoint or factory.\n *\n * @template TServices - Available service dependencies\n * @template TSession - Session data type\n * @template TLogger - Logger type\n */\nexport interface RlsConfig<\n  TServices extends Service[] = [],\n  TSession = unknown,\n  TLogger extends Logger = Logger,\n> {\n  /** Function to extract RLS context from request */\n  extractor: RlsContextExtractor<TServices, TSession, TLogger>;\n  /** Prefix for PostgreSQL session variables (default: 'app') */\n  prefix?: string;\n}\n\n/**\n * Symbol used to bypass RLS for an endpoint.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;;AA6DA,MAAa,aAAa,OAAO,IAAI,uBAAuB"}

package/dist/subscribers/AWSLambdaSubscriberAdaptor.d.mts

@@ -1,4 +1,4 @@
-import "../Construct-DDR0295I.mjs";
-import "../Subscriber-itwm7ugy.mjs";
-import { AWSLambdaHandler, AWSLambdaSubscriber } from "../AWSLambdaSubscriberAdaptor-CWbBNRz3.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../Subscriber-aNr1qkxR.mjs";
+import { AWSLambdaHandler, AWSLambdaSubscriber } from "../AWSLambdaSubscriberAdaptor-C0aZBU64.mjs";
 export { AWSLambdaHandler, AWSLambdaSubscriber };

package/dist/subscribers/Subscriber.cjs

@@ -1,4 +1,4 @@
 require('../Construct-BYSPikVm.cjs');
-const require_Subscriber = require('../Subscriber-D-FPWts6.cjs');
+const require_Subscriber = require('../Subscriber-DOt3svUC.cjs');
 
 exports.Subscriber = require_Subscriber.Subscriber;

package/dist/subscribers/Subscriber.d.mts

@@ -1,3 +1,3 @@
-import "../Construct-DDR0295I.mjs";
-import { Subscriber, SubscriberContext, SubscriberHandler } from "../Subscriber-itwm7ugy.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import { Subscriber, SubscriberContext, SubscriberHandler } from "../Subscriber-aNr1qkxR.mjs";
 export { Subscriber, SubscriberContext, SubscriberHandler };

package/dist/subscribers/Subscriber.mjs

@@ -1,4 +1,4 @@
 import "../Construct-LWeB1rSQ.mjs";
-import { Subscriber } from "../Subscriber-CGb8LjZa.mjs";
+import { Subscriber } from "../Subscriber-kCHbH2fZ.mjs";
 
 export { Subscriber };

package/dist/subscribers/SubscriberBuilder.cjs

@@ -1,5 +1,5 @@
 require('../Construct-BYSPikVm.cjs');
-require('../Subscriber-D-FPWts6.cjs');
-const require_SubscriberBuilder = require('../SubscriberBuilder-BfE2cL1q.cjs');
+require('../Subscriber-DOt3svUC.cjs');
+const require_SubscriberBuilder = require('../SubscriberBuilder-Cj2u9k5Q.cjs');
 
 exports.SubscriberBuilder = require_SubscriberBuilder.SubscriberBuilder;

package/dist/subscribers/SubscriberBuilder.d.mts

@@ -1,4 +1,4 @@
-import "../Construct-DDR0295I.mjs";
-import "../Subscriber-itwm7ugy.mjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-9j3JCu8-.mjs";
+import "../Construct-jBKqb-Zi.mjs";
+import "../Subscriber-aNr1qkxR.mjs";
+import { SubscriberBuilder } from "../SubscriberBuilder-CWS4tdbp.mjs";
 export { SubscriberBuilder };

package/dist/subscribers/SubscriberBuilder.mjs

@@ -1,5 +1,5 @@
 import "../Construct-LWeB1rSQ.mjs";
-import "../Subscriber-CGb8LjZa.mjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-BcAspHv9.mjs";
+import "../Subscriber-kCHbH2fZ.mjs";
+import { SubscriberBuilder } from "../SubscriberBuilder-DmxMU89X.mjs";
 
 export { SubscriberBuilder };

package/dist/subscribers/index.cjs

@@ -1,6 +1,6 @@
 require('../Construct-BYSPikVm.cjs');
-const require_Subscriber = require('../Subscriber-D-FPWts6.cjs');
-const require_SubscriberBuilder = require('../SubscriberBuilder-BfE2cL1q.cjs');
+const require_Subscriber = require('../Subscriber-DOt3svUC.cjs');
+const require_SubscriberBuilder = require('../SubscriberBuilder-Cj2u9k5Q.cjs');
 
 //#region src/subscribers/index.ts
 const s = new require_SubscriberBuilder.SubscriberBuilder();

package/dist/subscribers/index.d.cts

@@ -1,10 +1,10 @@
 import "../Construct-Dkd8Kvc9.cjs";
 import { Subscriber } from "../Subscriber-DMSzvO_J.cjs";
 import { SubscriberBuilder } from "../SubscriberBuilder-BxJM3Hz_.cjs";
-import * as _geekmidas_logger4 from "@geekmidas/logger";
+import * as _geekmidas_logger10 from "@geekmidas/logger";
 
 //#region src/subscribers/index.d.ts
-declare const s: SubscriberBuilder<[], _geekmidas_logger4.Logger, undefined, undefined, string, []>;
+declare const s: SubscriberBuilder<[], _geekmidas_logger10.Logger, undefined, undefined, string, []>;
 //#endregion
 export { Subscriber, SubscriberBuilder, s };
 //# sourceMappingURL=index.d.cts.map

package/dist/subscribers/index.d.mts

@@ -1,10 +1,10 @@
-import "../Construct-DDR0295I.mjs";
-import { Subscriber } from "../Subscriber-itwm7ugy.mjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-9j3JCu8-.mjs";
-import * as _geekmidas_logger9 from "@geekmidas/logger";
+import "../Construct-jBKqb-Zi.mjs";
+import { Subscriber } from "../Subscriber-aNr1qkxR.mjs";
+import { SubscriberBuilder } from "../SubscriberBuilder-CWS4tdbp.mjs";
+import * as _geekmidas_logger10 from "@geekmidas/logger";
 
 //#region src/subscribers/index.d.ts
-declare const s: SubscriberBuilder<[], _geekmidas_logger9.Logger, undefined, undefined, string, []>;
+declare const s: SubscriberBuilder<[], _geekmidas_logger10.Logger, undefined, undefined, string, []>;
 //#endregion
 export { Subscriber, SubscriberBuilder, s };
 //# sourceMappingURL=index.d.mts.map

package/dist/subscribers/index.mjs

@@ -1,6 +1,6 @@
 import "../Construct-LWeB1rSQ.mjs";
-import { Subscriber } from "../Subscriber-CGb8LjZa.mjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-BcAspHv9.mjs";
+import { Subscriber } from "../Subscriber-kCHbH2fZ.mjs";
+import { SubscriberBuilder } from "../SubscriberBuilder-DmxMU89X.mjs";
 
 //#region src/subscribers/index.ts
 const s = new SubscriberBuilder();

package/dist/{types-DKf0juBf.d.mts → types-CScirkHt.d.mts}

@@ -4,4 +4,4 @@ type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS';
 type LowerHttpMethod<T extends HttpMethod> = Lowercase<T>;
 //#endregion
 export { HttpMethod, LowerHttpMethod, RemoveUndefined };
-//# sourceMappingURL=types-DKf0juBf.d.mts.map
+//# sourceMappingURL=types-CScirkHt.d.mts.map