@geekmidas/constructs 10.0.0-alpha.4 → 10.0.0-alpha.41

package/dist/{Endpoint-DrD8a1yH.d.cts → Endpoint-DtI7heFm.d.mts}

@@ -1,16 +1,17 @@
-import { Function, FunctionHandler } from "./index-AIfVzkhi.cjs";
-import { HttpMethod, LowerHttpMethod } from "./types-BlAkSuGI.cjs";
+import { t as StandardSchemaV1 } from "./index-CeEtxDmK.mjs";
+import { o as TopicEvent } from "./Construct-QXnl3VqT.mjs";
+import { a as FunctionHandler, r as Function } from "./index-CjVEjOw0.mjs";
+import { t as Authenticator } from "./construct-interface-_3zgxzXl.mjs";
+import { n as LowerHttpMethod, t as HttpMethod } from "./types-DMuSQeLL.mjs";
+import { n as AuthSession } from "./auth-CMwml9QN.mjs";
+import { ComponentCollector, OpenApiSchemaOptions } from "@geekmidas/schema/openapi";
 import { EnvironmentParser } from "@geekmidas/envkit";
-import { EventPublisher, ExtractPublisherMessage, MappedEvent } from "@geekmidas/events";
-import { Logger } from "@geekmidas/logger";
-import { InferComposableStandardSchema, InferStandardSchema, InferStandardSchemaInput } from "@geekmidas/schema";
+import { RateLimitConfig } from "@geekmidas/rate-limit";
 import { Service, ServiceRecord } from "@geekmidas/services";
-import { StandardSchemaV1 } from "@standard-schema/spec";
 import { AuditActor, AuditStorage, AuditableAction, Auditor, ExtractAuditPayload, ExtractAuditType } from "@geekmidas/audit";
-import { RateLimitConfig } from "@geekmidas/rate-limit";
-import { ComponentCollector, OpenApiSchemaOptions } from "@geekmidas/schema/openapi";
+import { Logger } from "@geekmidas/logger";
+import { InferComposableStandardSchema, InferStandardSchema, InferStandardSchemaInput } from "@geekmidas/schema";
 import { OpenAPIV3_1 } from "openapi-types";
-
 //#region src/endpoints/Authorizer.d.ts
 /**
  * OpenAPI 3.1 compliant security scheme definition.
@@ -57,38 +58,38 @@ interface OAuthFlow {
  */
 declare const BUILT_IN_SECURITY_SCHEMES: {
   readonly jwt: {
-    readonly type: "http";
-    readonly scheme: "bearer";
-    readonly bearerFormat: "JWT";
-    readonly description: "JWT Bearer token authentication";
+    readonly type: 'http';
+    readonly scheme: 'bearer';
+    readonly bearerFormat: 'JWT';
+    readonly description: 'JWT Bearer token authentication';
   };
   readonly bearer: {
-    readonly type: "http";
-    readonly scheme: "bearer";
-    readonly description: "Bearer token authentication";
+    readonly type: 'http';
+    readonly scheme: 'bearer';
+    readonly description: 'Bearer token authentication';
   };
   readonly apiKey: {
-    readonly type: "apiKey";
-    readonly in: "header";
-    readonly name: "X-API-Key";
-    readonly description: "API key authentication via header";
+    readonly type: 'apiKey';
+    readonly in: 'header';
+    readonly name: 'X-API-Key';
+    readonly description: 'API key authentication via header';
   };
   readonly oauth2: {
-    readonly type: "oauth2";
+    readonly type: 'oauth2';
     readonly flows: {};
-    readonly description: "OAuth 2.0 authentication";
+    readonly description: 'OAuth 2.0 authentication';
   };
   readonly oidc: {
-    readonly type: "openIdConnect";
-    readonly openIdConnectUrl: "";
-    readonly description: "OpenID Connect authentication";
+    readonly type: 'openIdConnect';
+    readonly openIdConnectUrl: '';
+    readonly description: 'OpenID Connect authentication';
   };
   readonly iam: {
-    readonly type: "apiKey";
-    readonly in: "header";
-    readonly name: "Authorization";
-    readonly description: "AWS IAM Signature Version 4 authentication";
-    readonly 'x-amazon-apigateway-authtype': "awsSigv4";
+    readonly type: 'apiKey';
+    readonly in: 'header';
+    readonly name: 'Authorization';
+    readonly description: 'AWS IAM Signature Version 4 authentication';
+    readonly 'x-amazon-apigateway-authtype': 'awsSigv4';
   };
 };
 /** Names of built-in security schemes */
@@ -133,7 +134,6 @@ declare function isBuiltInSecurityScheme(name: string): name is BuiltInSecurityS
  * Get a security scheme by name (built-in or custom)
  */
 declare function getSecurityScheme(name: string, customSchemes?: Record<string, SecurityScheme>): SecurityScheme | undefined;
-//# sourceMappingURL=Authorizer.d.ts.map
 //#endregion
 //#region src/endpoints/audit.d.ts
 /**
@@ -169,9 +169,6 @@ type ActorExtractor<TServices extends Service[] = [], TSession = unknown, TLogge
   cookie: CookieFn;
   logger: TLogger;
 }) => AuditActor | Promise<AuditActor>;
-/**
- * Configuration for the auditor on an endpoint.
- */
 //#endregion
 //#region src/endpoints/rls.d.ts
 /**
@@ -225,7 +222,23 @@ declare const RLS_BYPASS: unique symbol;
  * Type for RLS bypass marker.
  */
 type RlsBypass = typeof RLS_BYPASS;
-//# sourceMappingURL=rls.d.ts.map
+//#endregion
+//#region src/endpoints/sessionAuth.d.ts
+/**
+ * The surface's authenticator, as a session callback sees it.
+ *
+ * Bound to the request being handled, so reading the session takes no
+ * argument: `session(async ({ auth }) => auth.getSession())`.
+ */
+interface SessionAuth {
+  /** This request's session, verified by the `.auth()` construct — or `null`. */
+  getSession(): Promise<AuthSession | null>;
+}
+/** `auth.getSession()` was called on a surface that names no authenticator. */
+declare class NoAuthenticator extends Error {
+  readonly surface: string | undefined;
+  constructor(surface: string | undefined);
+}
 //#endregion
 //#region src/endpoints/Endpoint.d.ts
 /**
@@ -253,7 +266,7 @@ type RlsBypass = typeof RLS_BYPASS;
  * });
  * ```
  */
-declare class Endpoint<TRoute extends string, TMethod extends HttpMethod, TInput extends EndpointSchemas = {}, OutSchema extends StandardSchemaV1 | undefined = undefined, TServices extends Service[] = [], TLogger extends Logger = Logger, TSession = unknown, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>, TDatabase = undefined, TDatabaseServiceName extends string = string> extends Function<TInput, TServices, TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TAuditStorage, TAuditStorageServiceName, TDatabase, TDatabaseServiceName, TAuditAction, FunctionHandler<TInput, TServices, TLogger, OutSchema, TDatabase, TAuditStorage, TAuditAction>> {
+declare class Endpoint<TRoute extends string, TMethod extends HttpMethod, TInput extends EndpointSchemas = {}, OutSchema extends StandardSchemaV1 | undefined = undefined, TServices extends Service[] = [], TLogger extends Logger = Logger, TSession = unknown, TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>, TDatabase = undefined, TDatabaseServiceName extends string = string> extends Function<TInput, TServices, TLogger, OutSchema, TAuditStorage, TAuditStorageServiceName, TDatabase, TDatabaseServiceName, TAuditAction, FunctionHandler<TInput, TServices, TLogger, OutSchema, TDatabase, TAuditStorage, TAuditAction>> {
   operationId?: string;
   /** The route path pattern with parameter placeholders */
   route: TRoute;
@@ -319,7 +332,7 @@ declare class Endpoint<TRoute extends string, TMethod extends HttpMethod, TInput
    * });
    * ```
    */
-  static buildOpenApiSchema(endpoints: Endpoint<any, any, any, any, any, any>[], options?: OpenApiSchemaOptions): Promise<OpenAPIV3_1.Document<{}>>;
+  static buildOpenApiSchema(endpoints: Endpoint<any, any, any, any, any, any>[], options?: OpenApiSchemaOptions): Promise<any>;
   /**
    * Gets the full path including HTTP method and route.
    * @returns Formatted string like 'GET /users/{id}'
@@ -441,53 +454,8 @@ declare class Endpoint<TRoute extends string, TMethod extends HttpMethod, TInput
    * @param options.status - Success HTTP status code (default: 200)
    * @param options.authorizer - Optional authorizer configuration
    */
-  constructor({
-    fn,
-    method,
-    route,
-    description,
-    tags,
-    input,
-    logger,
-    output: outputSchema,
-    services,
-    constructs,
-    timeout,
-    memorySize,
-    getSession,
-    authorize,
-    rateLimit,
-    status,
-    publisherService,
-    events,
-    authorizer,
-    surface,
-    auditorStorageService,
-    actorExtractor,
-    audits,
-    databaseService,
-    rlsConfig,
-    rlsBypass,
-    responseType
-  }: EndpointOptions<TRoute, TMethod, TInput, OutSchema, TServices, TLogger, TSession, OutSchema, TEventPublisher, TEventPublisherServiceName, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>);
+  constructor({ fn, method, route, description, tags, input, logger, output: outputSchema, services, constructs, timeout, memorySize, getSession, authorize, rateLimit, status, events, authorizer, surface, auditorStorageService, actorExtractor, audits, databaseService, rlsConfig, rlsBypass, responseType }: EndpointOptions<TRoute, TMethod, TInput, OutSchema, TServices, TLogger, TSession, OutSchema, TAuditStorage, TAuditStorageServiceName, TAuditAction, TDatabase, TDatabaseServiceName>);
 }
-/**
- * Defines the input schema structure for an endpoint.
- *
- * @template TBody - Schema for request body validation
- * @template TSearch - Schema for query string validation
- * @template TParams - Schema for URL path parameters validation
- *
- * @example
- * ```typescript
- * type UserInput = EndpointInput<
- *   typeof createUserBodySchema,
- *   typeof userQuerySchema,
- *   typeof userParamsSchema
- * >;
- * ```
- */
-
 /**
  * The surface an endpoint was built from.
  *
@@ -516,6 +484,11 @@ interface EndpointSurface {
    * file or throws on a missing variable would do it at build time.
    */
   envParser: EnvironmentParser<{}>;
+  /**
+   * What authenticates requests to this surface — the construct named in
+   * `RestApi.auth()`, which session callbacks read from as `auth`.
+   */
+  auth?: Authenticator;
 }
 /**
  * Configuration options for creating an Endpoint instance.
@@ -528,7 +501,7 @@ interface EndpointSurface {
  * @template TLogger - Logger type
  * @template TSession - Session data type
  */
-interface EndpointOptions<TRoute extends string, TMethod extends HttpMethod, TInput extends EndpointSchemas = {}, TOutput extends StandardSchemaV1 | undefined = undefined, TServices extends Service[] = [], TLogger extends Logger = Logger, TSession = unknown, OutSchema extends StandardSchemaV1 | undefined = undefined, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>, TDatabase = undefined, TDatabaseServiceName extends string = string> {
+interface EndpointOptions<TRoute extends string, TMethod extends HttpMethod, TInput extends EndpointSchemas = {}, TOutput extends StandardSchemaV1 | undefined = undefined, TServices extends Service[] = [], TLogger extends Logger = Logger, TSession = unknown, OutSchema extends StandardSchemaV1 | undefined = undefined, TAuditStorage extends AuditStorage | undefined = undefined, TAuditStorageServiceName extends string = string, TAuditAction extends AuditableAction<string, unknown> = AuditableAction<string, unknown>, TDatabase = undefined, TDatabaseServiceName extends string = string> {
   /** The route path with parameter placeholders */
   route: TRoute;
   /** The HTTP method for this endpoint */
@@ -566,11 +539,8 @@ interface EndpointOptions<TRoute extends string, TMethod extends HttpMethod, TIn
   rateLimit?: RateLimitConfig;
   /** Success HTTP status code */
   status: SuccessStatus | undefined;
-  /**
-   * Event publisher service for publishing events from this endpoint
-   */
-  publisherService?: Service<TEventPublisherServiceName, TEventPublisher>;
-  events?: MappedEvent<TEventPublisher, OutSchema>[];
+  /** What it publishes once its handler succeeds, each to its own topic. */
+  events?: TopicEvent[];
   /** Optional authorizer configuration */
   authorizer?: Authorizer;
   /** The surface this endpoint was built from. Every endpoint has one. */
@@ -640,6 +610,12 @@ type BaseSessionContext<TServices extends Service[] = [], TLogger extends Logger
   logger: TLogger;
   header: HeaderFn;
   cookie: CookieFn;
+  /**
+   * The surface's authenticator — the construct named in `.auth()` — bound to
+   * this request: `await auth.getSession()` is this request's session, or
+   * `null`.
+   */
+  auth: SessionAuth;
 };
 /**
  * Conditional database context for session - only present when database service is configured
@@ -706,9 +682,9 @@ type ConvertRouteParams<T extends string> = T extends `${infer Start}:${infer Pa
  * // Results in: { '/users/{id}': { get: OperationObject, parameters?: ParameterObject[] } }
  * ```
  */
-type EndpointOpenApiSchema<TRoute extends string, TMethod extends HttpMethod> = { [key in ConvertRouteParams<TRoute>]: { [key in LowerHttpMethod<TMethod>]: OpenAPIV3_1.OperationObject<{}> } & {
+type EndpointOpenApiSchema<TRoute extends string, TMethod extends HttpMethod> = { [key in ConvertRouteParams<TRoute>]: { [key in LowerHttpMethod<TMethod>]: OpenAPIV3_1.OperationObject<{}>; } & {
   parameters?: OpenAPIV3_1.ParameterObject[];
-} };
+}; };
 /**
  * Function type for retrieving HTTP header values.
  * Supports two calling patterns:
@@ -888,9 +864,9 @@ declare enum SuccessStatus {
   /** Server successfully processed the request and is not returning any content, client should reset the document view */
   ResetContent = 205,
   /** Server is delivering only part of the resource due to a range header */
-  PartialContent = 206,
+  PartialContent = 206
 }
 type EndpointOutput<T> = T extends Endpoint<any, any, any, infer OutSchema, any, any, any, any> ? InferStandardSchema<OutSchema> : never;
 //#endregion
-export { ActorExtractor, AuthorizeFn, Authorizer, BUILT_IN_SECURITY_SCHEMES, BuiltInSecuritySchemeId, CookieFn, Endpoint, EndpointContext, EndpointHandler, EndpointOutput, EndpointSchemas, EndpointSurface, HeaderFn, MappedAudit, OAuthFlow, OAuthFlows, RLS_BYPASS, ResponseBuilder, RlsBypass, RlsConfig, RlsContext, RlsContextExtractor, SecurityScheme, SessionFn, SuccessStatus, createAuthorizer, getSecurityScheme, isBuiltInSecurityScheme };
-//# sourceMappingURL=Endpoint-DrD8a1yH.d.cts.map
+export { getSecurityScheme as A, Authorizer as C, OAuthFlows as D, OAuthFlow as E, SecurityScheme as O, MappedAudit as S, BuiltInSecuritySchemeId as T, RlsBypass as _, EndpointContext as a, RlsContextExtractor as b, EndpointSchemas as c, ResponseBuilder as d, SessionFn as f, RLS_BYPASS as g, SessionAuth as h, Endpoint as i, isBuiltInSecurityScheme as j, createAuthorizer as k, EndpointSurface as l, NoAuthenticator as m, ConvertRouteParams as n, EndpointHandler as o, SuccessStatus as p, CookieFn as r, EndpointOutput as s, AuthorizeFn as t, HeaderFn as u, RlsConfig as v, BUILT_IN_SECURITY_SCHEMES as w, ActorExtractor as x, RlsContext as y };
+//# sourceMappingURL=Endpoint-DtI7heFm.d.mts.map

package/dist/Endpoint-DtI7heFm.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Endpoint-DtI7heFm.d.mts","names":[],"sources":["../src/endpoints/Authorizer.ts","../src/endpoints/audit.ts","../src/endpoints/rls.ts","../src/endpoints/sessionAuth.ts","../src/endpoints/Endpoint.ts"],"mappings":";;;;;;;;;;;;;;;;;;;UAIiB;;EAEhB;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,QAAQ;;EAER;;GAEC;;;;;UAMe;EAChB,WAAW;EACX,WAAW;EACX,oBAAoB;EACpB,oBAAoB;;UAGJ;EAChB;EACA;EACA;EACA,QAAQ;;;;;;cAOI;;aAEX;aACA;aACA;aACA;;;aAGA;aACA;aACA;;;aAGA;aACA;aACA;aACA;;;aAGA;aACA;aACA;;;aAGA;aACA;aACA;;;aAGA;aACA;aACA;aACA;aACA;;;;KAKU,uCAAuC;;;;UAKlC;;;;EAIhB;;;;EAIA,iBAAiB;;;;;EAKjB;;;;;EAKA;;;;;EAKA,WAAW;;;;;iBAMI,iBACf,cACA,UAAU,KAAK,sBACb;;;;iBAUa,wBACf,eACE,QAAQ;;;;iBAOK,kBACf,cACA,gBAAgB,eAAe,kBAC7B;;;;;;;;;;UC3Hc,YAChB,qBAAqB,kCACrB,gBAAgB,8BAChB,cAAc,iBAAiB,gBAAgB,iBAAiB;;EAGhE,MAAM;;EAEN,UACC,UAAU,gBAAgB,mBACvB,oBAAoB,uBAEnB,oBAAoB,cAAc;;EAEvC,QACC,UAAU,gBAAgB,mBACvB,oBAAoB;;EAIxB,YACC,UAAU,gBAAgB,mBACvB,oBAAoB,gCAEV;;EAEd;;;;;;;;;KAUW,eACX,kBAAkB,gBAClB,oBACA,gBAAgB,SAAS,WACrB;EACJ,UAAU,cAAc;EACxB,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,QAAQ;MACH,aAAa,QAAQ;;;;;;;UC1DV;GACf;;;;;;;;;;;;;;;;;;KAmBU,oBACX,kBAAkB,gBAClB,oBACA,gBAAgB,SAAS,WACrB;EACJ,UAAU,cAAc;EACxB,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,QAAQ;MACH,aAAa,QAAQ;;;;;;;;UASV,UAChB,kBAAkB,gBAClB,oBACA,gBAAgB,SAAS;;EAGzB,WAAW,oBAAoB,WAAW,UAAU;;EAEpD;;;;;cAMY;;;;KAKD,mBAAmB;;;;;;;;;UCzDd;;EAEhB,cAAc,QAAQ;;;cAiCV,wBAAwB;WACf;EAArB,YAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cCaT,SACZ,uBACA,gBAAgB,YAChB,eAAe,sBACf,kBAAkB,0CAClB,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,sBAAsB,sCACtB,kDACA,qBAAqB,mCAAmC,kCAIxD,uBACA,sDACS,SACT,QACA,WACA,SACA,WACA,eACA,0BACA,WACA,sBACA,cACA,gBACC,QACA,WACA,SACA,WACA,WACA,eACA;EAGD;;EAEA,OAAO;;EAEP,QAAQ;;;;;;;;EAQR,SAAS;;EAET;;EAEA;;WAEgB,QAAQ;;;;;;WAMR;;WAEA,gBAAgB;;EAEzB,YAAY,UAAU,WAAW,SAAS,UAAU;;EAGpD,WAAW,YACjB,WACA,SACA,UACA,QACA;;EAGM,YAAY;;EAEZ,aAAa;;EAEb,iBAAiB,eAAe,WAAW,UAAU;;EAErD,QAAQ,YAAY,cAAc;;EAE1B,kBAAkB,QAAQ,sBAAsB;;EAExD,YAAY,UAAU,WAAW,UAAU;;EAE3C;;UAEC;;;;;;;;;;;;;;;;;;;SA6BK,mBACZ,WAAW,0CACX,UAAU,uBAAoB;;;;;MAS3B,eAAQ,WAAA,mBAAA;;;;;;;;;EAYN,WAAW,gBAAgB,QAChC,gBACA,KAAK,IACH,QAAQ,8BAA8B,OAAO;;;;;;;;EAc1C,UAAU,gBAAgB,QAAQ,oBAAoB;SAMrD,gBAAgB;;;;;;;;;;;;;;SAiBhB,cAAc,SAAS,yBAAyB;;;;;;;;;;;;;;SAiChD,cAAc,mCAAmC;;;;;;;;;;;;;;;;;;;;SA+CjD,mBACN,cACA,eACA,UAAU;;;;;;;;EA2BX,YACC,KAAK,gBAAgB,QAAQ,WAAW,SAAS,YAC/C,8BAA8B;EAUjC,UAAO,KACD,gBACJ,QACA,WACA,SACA,UACA,cACA,WACA,gBACA,UACS,oBACR,kBAAkB,mBAGhB,yBAAyB,aACzB,qBAAqB,yBAAyB,cAC9C,QAAQ,yBAAyB,cACjC,QAAQ,qBAAqB,yBAAyB,qBAGtD,4BACA,eACA,QAAQ;;;;;;;SAoCN,WAAW,WAAW,OAAO;;;;SAW7B,YAAY,GAClB,UAAU,IAAI,qBAAqB,KACjC,YAAY,qBAAqB;;;;;;MAchC,SAC6C,mBAAmB;;;;;;EAQ9D,gBACL,qBAAqB,qBACnB,QAAQ,sBAAsB,QAAQ;;;;;;;;;;;;;;;;;;;EAuJzC,cACC,IACA,QACA,OACA,aACA,MACA,OACA,QACA,QAAQ,cACR,UACA,YACA,SACA,YACA,YACA,WACA,WACA,QACA,QACA,YACA,SACA,uBACA,gBACA,QACA,iBACA,WACA,WACA,gBACE,gBACF,QACA,SACA,QACA,WACA,WACA,SACA,UACA,WACA,eACA,0BACA,cACA,WACA;;;;;;;;;;;;;;;;;;;UAgHe;;EAEhB;;;;;;;;EAQA,WAAW;;;;;EAKX,OAAO;;;;;;;;;;;;;UAcS,gBAChB,uBACA,gBAAgB,YAChB,eAAe,sBACf,gBAAgB,0CAChB,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,kBAAkB,0CAClB,sBAAsB,sCACtB,kDACA,qBAAqB,mCAAmC,kCAIxD,uBACA;;EAGA,OAAO;;EAEP,QAAQ;;EAER,IAAI,gBACH,QACA,WACA,SACA,SACA,UACA,WACA,eACA;;EAGD,WACG,YAAY,WAAW,SAAS,UAAU,QAAQ;;EAGrD;;EAEA;;EAEA;;EAEA;;EAEA,OAAO;;EAEP,QAAQ;;EAER,UAAU;;;;;;;EAOV;;EAEA,QAAQ;;EAER,YAAY,UAAU,WAAW,SAAS,UAAU;;EAEpD,YAAY;;EAEZ,QAAQ;;EAER,SAAS;;EAET,aAAa;;EAEb,SAAS;;;;EAIT,wBAAwB,QAAQ,0BAA0B;;EAE1D,iBAAiB,eAAe,WAAW,UAAU;;EAErD,SAAS,YAAY,cAAc;;EAEnC,kBAAkB,QAAQ,sBAAsB;;EAEhD,YAAY,UAAU,WAAW,UAAU;;EAE3C;;;;;EAKA;;;;;;KAOW,kBAAkB;;EAE7B,QAAQ;;EAER,OAAO;;EAEP,MAAM;;KAGK,iBACX,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,eAAe,yCACf;EAEA,UAAU,cAAc;EACxB,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,SAAS;IACN,8BAA8B,UACjC,uBAAuB;;;;;;;;;;;;;;;;;;KAkBZ,YACX,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,eAAe,yCACf,0BAEA,KAAK,iBAAiB,WAAW,SAAS,UAAU,QAAQ,eACxD;;;;KAKA,mBACJ,kBAAkB,gBAClB,gBAAgB,SAAS;EAEzB,UAAU,cAAc;EACxB,QAAQ;EACR,QAAQ;EACR,QAAQ;;;;;;EAMR,MAAM;;;;;KAMF,uBAAuB,yBAAyB;;;;;;EAQlD,IAAI;;KAGK,eACX,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,yBACG,mBAAmB,WAAW,WAAW,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4BxD,UACX,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,0BAEA,KAAK,eAAe,WAAW,SAAS,eACpC,QAAQ,YAAY;;;;;;;;;;;;;KAcb,mBAAmB,oBAC9B,mBAAmB,eAAe,eAAe,YAC3C,SAAS,UAAU,mBAAmB,UACzC,mBAAmB,eAAe,aAC9B,SAAS,WACZ;;;;;;;;;;;;;KAcO,sBACX,uBACA,gBAAgB,iBAEf,OAAO,mBAAmB,aACzB,OAAO,gBAAgB,WAAW,YAAY;EAE/C,aAAa,YAAY;;;;;;;;;;;;;;;;;;UA2BV;MACZ;GACH;;;;;;;;;;;;;;;;;;UAmBe;MACZ;GACH;;;;;UAMe;EAChB;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;;;;;UAMgB;EAChB,UAAU;EACV,UAAU;IAAc;IAAe,UAAU;;EACjD,SAAS;;;;;UAMO,qBAAqB;EACrC,MAAM;EACN,UAAU;;;;;cAME;UACJ;EAKR,OAAO,aAAa;EAKpB,OAAO,cAAc,eAAe,UAAU;EAK9C,aACC,cACA,UAAU,KAAK;EAShB,OAAO,MAAM;EAKb,KAAK,GAAG,MAAM,IAAI,qBAAqB;EAIvC,eAAe;;;;;KAQX,oBACJ,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB;;EAGA,UAAU,cAAc;;EAExB,QAAQ;;EAER,QAAQ;;EAER,QAAQ;;EAER,SAAS;;;;;KAML,eACJ,qBAAqB,mCAAmC,kCAIxD,6BACG;;;;;;;EASD,SAAS,QAAQ;;;;;KAMf,gBAAgB,yBAAyB;;;;;;;EAS3C,IAAI;;;;;;;;;;;;;;KAeK,gBACX,cAAc,yCACd,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,oBACA,qBAAqB,mCAAmC,kCAIxD,uBACA,6BACG,oBAAoB,WAAW,SAAS,YAC3C,8BAA8B,SAC9B,eAAe,cAAc,iBAC7B,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA+BL,gBACX,eAAe,yCACf,kBAAkB,gBAClB,gBAAgB,SAAS,QACzB,kBAAkB,0CAClB,oBACA,uBACA,2BACA,qBAAqB,mCAAmC,qCAKxD,KAAK,gBACJ,QACA,WACA,SACA,UACA,cACA,WACA,gBAED,UAAU,oBACN,kBAAkB,mBAMlB,yBAAyB,aACzB,qBAAqB,yBAAyB,cAC9C,QAAQ,yBAAyB,cACjC,QAAQ,qBAAqB,yBAAyB,yBAGtD,gCACA,mBACA,QAAQ;;;;aAKD;;EAEX;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;KAGW,eAAe,KAC1B,UAAU,8BAA8B,iCACrC,oBAAoB"}

package/dist/{EndpointFactory-b4ituq-s.mjs → EndpointFactory-BBdNeaGJ.mjs}

@@ -1,10 +1,9 @@
-import { ConstructType, __toESM } from "./Construct-BD5neF7w.mjs";
-import { idsOf, serviceOf, servicesOf } from "./construct-interface-Z4CpS8tK.mjs";
-import { BaseFunctionBuilder, require_lodash } from "./functions-Ck21Uyq0.mjs";
-import { cloneWith } from "./clone-DblgEZZa.mjs";
-import { Endpoint } from "./Endpoint-Dij_wOcc.mjs";
+import { o as __toESM } from "./Construct-BO1X-kt9.mjs";
+import { idsOf, isConsumable, serviceOf, servicesOf } from "./construct-interface.mjs";
+import { o as require_lodash_uniqby, r as BaseFunctionBuilder } from "./functions-DCIfCRR-.mjs";
+import { t as cloneWith } from "./clone-EKNovYHu.mjs";
+import { t as Endpoint } from "./Endpoint-CQAeh1Rh.mjs";
 import { DEFAULT_LOGGER } from "@geekmidas/logger/console";
-
 //#region src/endpoints/Authorizer.ts
 /**
 * Built-in security schemes available by default.
@@ -67,20 +66,19 @@ function isBuiltInSecurityScheme(name) {
 function getSecurityScheme(name, customSchemes) {
 	if (customSchemes && name in customSchemes) return customSchemes[name];
 	if (isBuiltInSecurityScheme(name)) return BUILT_IN_SECURITY_SCHEMES[name];
-	return void 0;
 }
-
 //#endregion
 //#region src/endpoints/rls.ts
+var import_lodash_uniqby = /* @__PURE__ */ __toESM(require_lodash_uniqby(), 1);
 /**
 * Symbol used to bypass RLS for an endpoint.
 */
 const RLS_BYPASS = Symbol.for("geekmidas.rls.bypass");
-
 //#endregion
 //#region src/endpoints/EndpointBuilder.ts
-var import_lodash$1 = __toESM(require_lodash(), 1);
 var EndpointBuilder = class extends BaseFunctionBuilder {
+	route;
+	method;
 	schemas = {};
 	_description;
 	_status;
@@ -105,13 +103,10 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 	_rlsConfig;
 	_rlsBypass;
 	constructor(route, method) {
-		super(ConstructType.Endpoint);
+		super("dev.geekmidas.function.endpoint");
 		this.route = route;
 		this.method = method;
 	}
-	_setPublisher(publisher) {
-		this._publisher = publisher;
-	}
 	_setAuditorStorage(storage) {
 		this._auditorStorage = storage;
 	}
@@ -124,8 +119,23 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 	status(status) {
 		return cloneWith(this, { _status: status });
 	}
-	event(event) {
-		return cloneWith(this, { _events: [...this._events, event] });
+	/**
+	* Publish `event` to `topic` once the handler has succeeded — repeatable,
+	* one call per event, to as many topics as the endpoint names. The topic
+	* becomes a dependency as with `.dependsOn([topic])`, so `services.<topic>`
+	* is there for events the handler decides on itself.
+	*
+	* @example
+	* ```ts
+	* router.post('/users')
+	*   .event(users, {
+	*     type: 'user.created',
+	*     payload: (user) => ({ userId: user.id, email: user.email }),
+	*   })
+	* ```
+	*/
+	event(topic, event) {
+		return this.withEvent(topic, event);
 	}
 	tags(tags) {
 		return cloneWith(this, { _tags: tags });
@@ -154,9 +164,6 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 	responseType(type) {
 		return cloneWith(this, { _responseType: type });
 	}
-	publisher(publisher) {
-		return cloneWith(this, { _publisher: publisher });
-	}
 	body(schema) {
 		this.schemas.body = schema;
 		return this;
@@ -180,8 +187,7 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 	}
 	authorizer(name) {
 		if (name === "none") return cloneWith(this, { _authorizerName: void 0 });
-		const authorizerExists = this._availableAuthorizers.some((a) => a.name === name);
-		if (!authorizerExists && this._availableAuthorizers.length > 0) {
+		if (!this._availableAuthorizers.some((a) => a.name === name) && this._availableAuthorizers.length > 0) {
 			const available = this._availableAuthorizers.map((a) => a.name).join(", ");
 			throw new Error(`Authorizer "${name}" not found in available authorizers: ${available}`);
 		}
@@ -201,12 +207,12 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 	dependsOn(constructs) {
 		const services = servicesOf(constructs);
 		return cloneWith(this, {
-			_services: (0, import_lodash$1.default)([...this._services, ...services], (service) => service.serviceName),
+			_services: (0, import_lodash_uniqby.default)([...this._services, ...services], (service) => service.serviceName),
 			_constructs: idsOf(constructs, this._constructs)
 		});
 	}
 	services(services) {
-		return cloneWith(this, { _services: (0, import_lodash$1.default)([...this._services, ...services], (s) => s.serviceName) });
+		return cloneWith(this, { _services: (0, import_lodash_uniqby.default)([...this._services, ...services], (s) => s.serviceName) });
 	}
 	logger(logger) {
 		return cloneWith(this, { _logger: logger });
@@ -349,7 +355,6 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 			status: this._status,
 			getSession: this._getSession,
 			rateLimit: this._rateLimit,
-			publisherService: this._publisher,
 			events: this._events,
 			authorizer,
 			surface: this._surface,
@@ -365,10 +370,8 @@ var EndpointBuilder = class extends BaseFunctionBuilder {
 		return endpoint;
 	}
 };
-
 //#endregion
 //#region src/endpoints/EndpointFactory.ts
-var import_lodash = __toESM(require_lodash(), 1);
 var EndpointFactory = class EndpointFactory {
 	defaultServices = [];
 	/**
@@ -384,7 +387,6 @@ var EndpointFactory = class EndpointFactory {
 	defaultConstructs = [];
 	basePath = "";
 	defaultAuthorizeFn;
-	defaultEventPublisher;
 	defaultSessionExtractor;
 	defaultLogger;
 	/**
@@ -402,14 +404,13 @@ var EndpointFactory = class EndpointFactory {
 	defaultActorExtractor;
 	customSecuritySchemes;
 	defaultRlsConfig;
-	constructor({ basePath, defaultAuthorizeFn, defaultLogger = DEFAULT_LOGGER, defaultSessionExtractor, defaultServices = [], defaultConstructs = [], defaultEventPublisher, availableAuthorizers = [], defaultAuthorizerName, defaultAuditorStorage, defaultDatabaseService, defaultActorExtractor, customSecuritySchemes = {}, defaultRlsConfig, surface }) {
+	constructor({ basePath, defaultAuthorizeFn, defaultLogger = DEFAULT_LOGGER, defaultSessionExtractor, defaultServices = [], defaultConstructs = [], availableAuthorizers = [], defaultAuthorizerName, defaultAuditorStorage, defaultDatabaseService, defaultActorExtractor, customSecuritySchemes = {}, defaultRlsConfig, surface }) {
 		this.defaultConstructs = [...new Set(defaultConstructs)];
-		this.defaultServices = (0, import_lodash.default)(defaultServices, (s) => s.serviceName);
+		this.defaultServices = (0, import_lodash_uniqby.default)(defaultServices, (s) => s.serviceName);
 		this.basePath = basePath || "";
 		this.defaultAuthorizeFn = defaultAuthorizeFn;
 		this.defaultLogger = defaultLogger;
 		this.defaultSessionExtractor = defaultSessionExtractor;
-		this.defaultEventPublisher = defaultEventPublisher;
 		this.availableAuthorizers = availableAuthorizers;
 		this.defaultAuthorizerName = defaultAuthorizerName;
 		this.defaultAuditorStorage = defaultAuditorStorage;
@@ -423,9 +424,7 @@ var EndpointFactory = class EndpointFactory {
 		if (!basePath && !path) return "/";
 		if (!basePath) return path.startsWith("/") ? path : `/${path}`;
 		if (!path) return basePath.startsWith("/") ? basePath : `/${basePath}`;
-		const base = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
-		const segment = path.startsWith("/") ? path : `/${path}`;
-		let result = base + segment;
+		let result = (basePath.endsWith("/") ? basePath.slice(0, -1) : basePath) + (path.startsWith("/") ? path : `/${path}`);
 		if (!result.startsWith("/")) result = `/${result}`;
 		result = result.replace(/^\/+/g, "/");
 		if (result.length > 1 && result.endsWith("/")) result = result.slice(0, -1);
@@ -443,7 +442,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: authorizerConfigs,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -478,7 +476,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -504,8 +501,7 @@ var EndpointFactory = class EndpointFactory {
 	*/
 	authorizer(name) {
 		if (name !== "none" && this.availableAuthorizers.length > 0) {
-			const authorizerExists = this.availableAuthorizers.some((a) => a.name === name);
-			if (!authorizerExists) {
+			if (!this.availableAuthorizers.some((a) => a.name === name)) {
 				const available = this.availableAuthorizers.map((a) => a.name).join(", ");
 				throw new Error(`Authorizer "${name}" not found in available authorizers: ${available}`);
 			}
@@ -517,7 +513,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: name === "none" ? void 0 : name,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -537,7 +532,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -556,7 +550,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: fn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -580,7 +573,7 @@ var EndpointFactory = class EndpointFactory {
 	*/
 	dependsOn(constructs) {
 		const next = this.services(servicesOf(constructs));
-		next.defaultConstructs = [...new Set([...this.defaultConstructs, ...constructs.map((construct) => construct.id)])];
+		next.defaultConstructs = [.../* @__PURE__ */ new Set([...this.defaultConstructs, ...constructs.map((construct) => construct.id)])];
 		return next;
 	}
 	services(services) {
@@ -591,7 +584,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -610,26 +602,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: logger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
-			availableAuthorizers: this.availableAuthorizers,
-			defaultAuthorizerName: this.defaultAuthorizerName,
-			defaultAuditorStorage: this.defaultAuditorStorage,
-			defaultDatabaseService: this.defaultDatabaseService,
-			defaultActorExtractor: this.defaultActorExtractor,
-			customSecuritySchemes: this.customSecuritySchemes,
-			surface: this.surface,
-			defaultRlsConfig: this.defaultRlsConfig
-		});
-	}
-	publisher(publisher) {
-		return new EndpointFactory({
-			defaultServices: this.defaultServices,
-			defaultConstructs: this.defaultConstructs,
-			basePath: this.basePath,
-			defaultAuthorizeFn: this.defaultAuthorizeFn,
-			defaultLogger: this.defaultLogger,
-			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: publisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -648,7 +620,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: session,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -667,12 +638,11 @@ var EndpointFactory = class EndpointFactory {
 		const service = serviceOf(source);
 		return new EndpointFactory({
 			defaultServices: this.defaultServices,
-			defaultConstructs: this.defaultConstructs,
+			defaultConstructs: isConsumable(source) ? idsOf([source], this.defaultConstructs) : this.defaultConstructs,
 			basePath: this.basePath,
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -695,7 +665,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: storage,
@@ -718,7 +687,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -755,7 +723,6 @@ var EndpointFactory = class EndpointFactory {
 			defaultAuthorizeFn: this.defaultAuthorizeFn,
 			defaultLogger: this.defaultLogger,
 			defaultSessionExtractor: this.defaultSessionExtractor,
-			defaultEventPublisher: this.defaultEventPublisher,
 			availableAuthorizers: this.availableAuthorizers,
 			defaultAuthorizerName: this.defaultAuthorizerName,
 			defaultAuditorStorage: this.defaultAuditorStorage,
@@ -767,15 +734,13 @@ var EndpointFactory = class EndpointFactory {
 		});
 	}
 	createBuilder(method, path) {
-		const fullPath = EndpointFactory.joinPaths(path, this.basePath);
-		const builder = new EndpointBuilder(fullPath, method);
+		const builder = new EndpointBuilder(EndpointFactory.joinPaths(path, this.basePath), method);
 		if (this.defaultAuthorizeFn) builder._authorize = this.defaultAuthorizeFn;
 		if (this.defaultServices.length) builder._services = [...this.defaultServices];
 		if (this.defaultConstructs.length) builder._constructs = [...this.defaultConstructs];
 		if (this.defaultLogger) builder._logger = this.defaultLogger;
 		builder._surface = this.surface;
 		if (this.defaultSessionExtractor) builder._getSession = this.defaultSessionExtractor;
-		if (this.defaultEventPublisher) builder._setPublisher(this.defaultEventPublisher);
 		builder._availableAuthorizers = this.availableAuthorizers;
 		if (this.defaultAuthorizerName) builder._authorizerName = this.defaultAuthorizerName;
 		if (this.defaultAuditorStorage) builder._setAuditorStorage(this.defaultAuditorStorage);
@@ -804,7 +769,7 @@ var EndpointFactory = class EndpointFactory {
 		return this.createBuilder("OPTIONS", path);
 	}
 };
-
 //#endregion
-export { BUILT_IN_SECURITY_SCHEMES, EndpointBuilder, EndpointFactory, RLS_BYPASS, createAuthorizer, getSecurityScheme, isBuiltInSecurityScheme };
-//# sourceMappingURL=EndpointFactory-b4ituq-s.mjs.map
+export { createAuthorizer as a, BUILT_IN_SECURITY_SCHEMES as i, EndpointBuilder as n, getSecurityScheme as o, RLS_BYPASS as r, isBuiltInSecurityScheme as s, EndpointFactory as t };
+
+//# sourceMappingURL=EndpointFactory-BBdNeaGJ.mjs.map