@getstrata/core 1.1.8 → 2.0.0

package/dist/entries/auth/accessControl.js

@@ -1,6 +1,15 @@
 // @bun
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -15,8 +24,13 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {

package/dist/entries/auth/basicAuthGuard.js

@@ -1,51 +1,17 @@
 // @bun
-// ../../src/core/contracts/serviceTokens.ts
-var CORE_CONFIG_TOKEN = "core.config";
-var CORE_CACHE_TOKEN = "core.cache";
-var CORE_QUEUE_TOKEN = "core.queue";
-var CORE_EVENT_BUS_TOKEN = "core.eventBus";
-var CORE_POLICY_GATE_TOKEN = "core.policyGate";
-var CORE_AUTH_TOKEN = "core.auth";
-var CORE_TOKEN_SERVICE_TOKEN = "core.tokenService";
-var CORE_ABILITY_CHECKER_TOKEN = "core.abilityChecker";
-var CORE_AUTH_USER_DIRECTORY_TOKEN = "core.authUserDirectory";
-function isAbilityChecker(value) {
-  if (!value || typeof value !== "object") {
-    return false;
-  }
-  const candidate = value;
-  return typeof candidate.tokenCan === "function" && typeof candidate.requireAbility === "function";
-}
-function isAuthUserDirectory(value) {
-  if (!value || typeof value !== "object") {
-    return false;
-  }
-  return typeof value.findByIdOrThrow === "function";
-}
-function resolveAbilityChecker(container) {
-  if (container.has(CORE_ABILITY_CHECKER_TOKEN)) {
-    return container.resolve(CORE_ABILITY_CHECKER_TOKEN);
-  }
-  return container.resolve(CORE_TOKEN_SERVICE_TOKEN);
-}
-function resolveAuthUserDirectory(container) {
-  if (container.has(CORE_AUTH_USER_DIRECTORY_TOKEN)) {
-    const directory = container.resolve(CORE_AUTH_USER_DIRECTORY_TOKEN);
-    if (isAuthUserDirectory(directory)) {
-      return directory;
-    }
-  }
-  if (container.has(CORE_TOKEN_SERVICE_TOKEN)) {
-    const tokenService = container.resolve(CORE_TOKEN_SERVICE_TOKEN);
-    if (isAuthUserDirectory(tokenService)) {
-      return tokenService;
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
     }
-  }
-  return null;
-}
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/database/boundConnection.ts
-var BOUND_CONNECTION_KEY = Symbol.for("@getstrata/boundDatabaseConnection");
 function boundConnectionState() {
   const globalRecord = globalThis;
   const existing = globalRecord[BOUND_CONNECTION_KEY];
@@ -59,6 +25,10 @@ function boundConnectionState() {
 function getBoundDatabaseConnection() {
   return boundConnectionState().connection;
 }
+var BOUND_CONNECTION_KEY;
+var init_boundConnection = __esm(() => {
+  BOUND_CONNECTION_KEY = Symbol.for("@getstrata/boundDatabaseConnection");
+});
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -73,9 +43,9 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
 
 // ../../src/core/database/connectionContext.ts
-var activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
 function runWithDatabaseConnection(connection, callback) {
   return activeConnection.run(connection, callback);
 }
@@ -85,12 +55,20 @@ function getActiveDatabaseConnection(fallback) {
 function hasActiveDatabaseConnection() {
   return activeConnection.getStore() !== undefined;
 }
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
 
 // ../../src/core/database/queryProxy.ts
-var POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
+var POOL_CONNECTION_METHODS;
+var init_queryProxy = __esm(() => {
+  init_connectionContext();
+  POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
+});
 
 // ../../src/core/database/defaultConnection.ts
-var DEFAULT_CONNECTION_KEY = Symbol.for("@getstrata/defaultDatabaseConnection");
 function defaultConnectionState() {
   const globalRecord = globalThis;
   const existing = globalRecord[DEFAULT_CONNECTION_KEY];
@@ -108,6 +86,250 @@ function getDefaultDatabasePool() {
   }
   return pool;
 }
+function getDefaultDatabaseQuery() {
+  const query = defaultConnectionState().query;
+  if (!query) {
+    throw new Error("Default database query handle is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
+  }
+  return query;
+}
+var DEFAULT_CONNECTION_KEY;
+var init_defaultConnection = __esm(() => {
+  init_queryProxy();
+  DEFAULT_CONNECTION_KEY = Symbol.for("@getstrata/defaultDatabaseConnection");
+});
+
+// ../../src/core/database/schema/driver.ts
+function normalizeConnectionName(connection) {
+  const normalized = connection.trim().toLowerCase();
+  if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
+    return "pgsql";
+  }
+  if (normalized === "mysql" || normalized === "mariadb") {
+    return "mysql";
+  }
+  if (normalized === "sqlite") {
+    return "sqlite";
+  }
+  throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
+}
+function resolveDriverFromUrl(url) {
+  const normalized = url.trim().toLowerCase();
+  if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
+    return "pgsql";
+  }
+  if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
+    return "mysql";
+  }
+  if (normalized.startsWith("sqlite:")) {
+    return "sqlite";
+  }
+  return null;
+}
+function resolveDatabaseDriver(options = {}) {
+  const connection = options.connection ?? process.env.DB_CONNECTION;
+  if (connection) {
+    return normalizeConnectionName(connection);
+  }
+  const url = options.url ?? process.env.DATABASE_URL ?? "";
+  const fromUrl = resolveDriverFromUrl(url);
+  if (fromUrl) {
+    return fromUrl;
+  }
+  return "pgsql";
+}
+var init_driver = () => {};
+
+// ../../src/core/database/dialect.ts
+function assertSafeIdentifier(identifier) {
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
+    throw new Error(`Invalid SQL identifier: ${identifier}`);
+  }
+  return identifier;
+}
+function quoteIdentifierFor(dialect, column) {
+  return dialect.quoteIdentifier(column);
+}
+function dialectFor(driver) {
+  return dialects[driver];
+}
+function currentSqlDialect() {
+  return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
+}
+var postgresDialect, mysqlDialect, sqliteDialect, dialects, dialectContext, dialectOverride = null;
+var init_dialect = __esm(() => {
+  init_asyncContextStore();
+  init_driver();
+  postgresDialect = {
+    driver: "pgsql",
+    placeholder(index) {
+      return `$${index}`;
+    },
+    quoteIdentifier(identifier) {
+      return `"${assertSafeIdentifier(identifier)}"`;
+    },
+    nowExpression() {
+      return "NOW()";
+    },
+    timestampValue(value) {
+      return value.toISOString();
+    },
+    returningClause(columns) {
+      return ` RETURNING ${columns}`;
+    },
+    ilikeOperator() {
+      return "ILIKE";
+    },
+    nullsLastSuffix() {
+      return " NULLS LAST";
+    },
+    castToText(expression) {
+      return `${expression}::text`;
+    },
+    upsertSuffix(conflictColumns, updateColumns) {
+      const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
+      if (updateColumns.length === 0) {
+        return ` ON CONFLICT (${target}) DO NOTHING`;
+      }
+      const assignments = updateColumns.map((column) => {
+        const quoted = quoteIdentifierFor(this, column);
+        return `${quoted} = excluded.${quoted}`;
+      }).join(", ");
+      return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
+    }
+  };
+  mysqlDialect = {
+    driver: "mysql",
+    placeholder() {
+      return "?";
+    },
+    quoteIdentifier(identifier) {
+      return `\`${assertSafeIdentifier(identifier)}\``;
+    },
+    nowExpression() {
+      return "CURRENT_TIMESTAMP";
+    },
+    timestampValue(value) {
+      return value.toISOString().slice(0, 19).replace("T", " ");
+    },
+    returningClause() {
+      return "";
+    },
+    ilikeOperator() {
+      return "LIKE";
+    },
+    nullsLastSuffix() {
+      return "";
+    },
+    castToText(expression) {
+      return `CAST(${expression} AS CHAR)`;
+    },
+    upsertSuffix(conflictColumns, updateColumns) {
+      if (updateColumns.length === 0) {
+        const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
+        return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
+      }
+      const assignments = updateColumns.map((column) => {
+        const quoted = quoteIdentifierFor(this, column);
+        return `${quoted} = VALUES(${quoted})`;
+      }).join(", ");
+      return ` ON DUPLICATE KEY UPDATE ${assignments}`;
+    }
+  };
+  sqliteDialect = {
+    driver: "sqlite",
+    placeholder() {
+      return "?";
+    },
+    quoteIdentifier(identifier) {
+      return `"${assertSafeIdentifier(identifier)}"`;
+    },
+    nowExpression() {
+      return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
+    },
+    timestampValue(value) {
+      return value.toISOString();
+    },
+    returningClause(columns) {
+      return ` RETURNING ${columns}`;
+    },
+    ilikeOperator() {
+      return "LIKE";
+    },
+    nullsLastSuffix() {
+      return "";
+    },
+    castToText(expression) {
+      return `CAST(${expression} AS TEXT)`;
+    },
+    upsertSuffix(conflictColumns, updateColumns) {
+      const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
+      if (updateColumns.length === 0) {
+        return ` ON CONFLICT (${target}) DO NOTHING`;
+      }
+      const assignments = updateColumns.map((column) => {
+        const quoted = quoteIdentifierFor(this, column);
+        return `${quoted} = excluded.${quoted}`;
+      }).join(", ");
+      return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
+    }
+  };
+  dialects = {
+    pgsql: postgresDialect,
+    mysql: mysqlDialect,
+    sqlite: sqliteDialect
+  };
+  dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
+});
+
+// ../../src/core/contracts/serviceTokens.ts
+var CORE_CONFIG_TOKEN = "core.config";
+var CORE_CACHE_TOKEN = "core.cache";
+var CORE_QUEUE_TOKEN = "core.queue";
+var CORE_EVENT_BUS_TOKEN = "core.eventBus";
+var CORE_POLICY_GATE_TOKEN = "core.policyGate";
+var CORE_AUTH_TOKEN = "core.auth";
+var CORE_TOKEN_SERVICE_TOKEN = "core.tokenService";
+var CORE_ABILITY_CHECKER_TOKEN = "core.abilityChecker";
+var CORE_AUTH_USER_DIRECTORY_TOKEN = "core.authUserDirectory";
+function isAbilityChecker(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const candidate = value;
+  return typeof candidate.tokenCan === "function" && typeof candidate.requireAbility === "function";
+}
+function isAuthUserDirectory(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  return typeof value.findByIdOrThrow === "function";
+}
+function resolveAbilityChecker(container) {
+  if (container.has(CORE_ABILITY_CHECKER_TOKEN)) {
+    return container.resolve(CORE_ABILITY_CHECKER_TOKEN);
+  }
+  return container.resolve(CORE_TOKEN_SERVICE_TOKEN);
+}
+function resolveAuthUserDirectory(container) {
+  if (container.has(CORE_AUTH_USER_DIRECTORY_TOKEN)) {
+    const directory = container.resolve(CORE_AUTH_USER_DIRECTORY_TOKEN);
+    if (isAuthUserDirectory(directory)) {
+      return directory;
+    }
+  }
+  if (container.has(CORE_TOKEN_SERVICE_TOKEN)) {
+    const tokenService = container.resolve(CORE_TOKEN_SERVICE_TOKEN);
+    if (isAuthUserDirectory(tokenService)) {
+      return tokenService;
+    }
+  }
+  return null;
+}
+
+// ../../src/core/auth/basicAuthGuard.ts
+init_boundConnection();
+init_defaultConnection();
 
 // ../../src/core/http/statelessAuth.ts
 function authorizationScheme(request) {
@@ -289,183 +511,8 @@ function revealMfaSecret(stored) {
   return decryptField(stored, key);
 }
 
-// ../../src/core/database/schema/driver.ts
-function normalizeConnectionName(connection) {
-  const normalized = connection.trim().toLowerCase();
-  if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
-    return "pgsql";
-  }
-  if (normalized === "mysql" || normalized === "mariadb") {
-    return "mysql";
-  }
-  if (normalized === "sqlite") {
-    return "sqlite";
-  }
-  throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
-}
-function resolveDriverFromUrl(url) {
-  const normalized = url.trim().toLowerCase();
-  if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
-    return "pgsql";
-  }
-  if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
-    return "mysql";
-  }
-  if (normalized.startsWith("sqlite:")) {
-    return "sqlite";
-  }
-  return null;
-}
-function resolveDatabaseDriver(options = {}) {
-  const connection = options.connection ?? process.env.DB_CONNECTION;
-  if (connection) {
-    return normalizeConnectionName(connection);
-  }
-  const url = options.url ?? process.env.DATABASE_URL ?? "";
-  const fromUrl = resolveDriverFromUrl(url);
-  if (fromUrl) {
-    return fromUrl;
-  }
-  return "pgsql";
-}
-
-// ../../src/core/database/dialect.ts
-function assertSafeIdentifier(identifier) {
-  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
-    throw new Error(`Invalid SQL identifier: ${identifier}`);
-  }
-  return identifier;
-}
-function quoteIdentifierFor(dialect, column) {
-  return dialect.quoteIdentifier(column);
-}
-var postgresDialect = {
-  driver: "pgsql",
-  placeholder(index) {
-    return `$${index}`;
-  },
-  quoteIdentifier(identifier) {
-    return `"${assertSafeIdentifier(identifier)}"`;
-  },
-  nowExpression() {
-    return "NOW()";
-  },
-  timestampValue(value) {
-    return value.toISOString();
-  },
-  returningClause(columns) {
-    return ` RETURNING ${columns}`;
-  },
-  ilikeOperator() {
-    return "ILIKE";
-  },
-  nullsLastSuffix() {
-    return " NULLS LAST";
-  },
-  castToText(expression) {
-    return `${expression}::text`;
-  },
-  upsertSuffix(conflictColumns, updateColumns) {
-    const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
-    if (updateColumns.length === 0) {
-      return ` ON CONFLICT (${target}) DO NOTHING`;
-    }
-    const assignments = updateColumns.map((column) => {
-      const quoted = quoteIdentifierFor(this, column);
-      return `${quoted} = excluded.${quoted}`;
-    }).join(", ");
-    return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
-  }
-};
-var mysqlDialect = {
-  driver: "mysql",
-  placeholder() {
-    return "?";
-  },
-  quoteIdentifier(identifier) {
-    return `\`${assertSafeIdentifier(identifier)}\``;
-  },
-  nowExpression() {
-    return "CURRENT_TIMESTAMP";
-  },
-  timestampValue(value) {
-    return value.toISOString().slice(0, 19).replace("T", " ");
-  },
-  returningClause() {
-    return "";
-  },
-  ilikeOperator() {
-    return "LIKE";
-  },
-  nullsLastSuffix() {
-    return "";
-  },
-  castToText(expression) {
-    return `CAST(${expression} AS CHAR)`;
-  },
-  upsertSuffix(conflictColumns, updateColumns) {
-    if (updateColumns.length === 0) {
-      const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
-      return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
-    }
-    const assignments = updateColumns.map((column) => {
-      const quoted = quoteIdentifierFor(this, column);
-      return `${quoted} = VALUES(${quoted})`;
-    }).join(", ");
-    return ` ON DUPLICATE KEY UPDATE ${assignments}`;
-  }
-};
-var sqliteDialect = {
-  driver: "sqlite",
-  placeholder() {
-    return "?";
-  },
-  quoteIdentifier(identifier) {
-    return `"${assertSafeIdentifier(identifier)}"`;
-  },
-  nowExpression() {
-    return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
-  },
-  timestampValue(value) {
-    return value.toISOString();
-  },
-  returningClause(columns) {
-    return ` RETURNING ${columns}`;
-  },
-  ilikeOperator() {
-    return "LIKE";
-  },
-  nullsLastSuffix() {
-    return "";
-  },
-  castToText(expression) {
-    return `CAST(${expression} AS TEXT)`;
-  },
-  upsertSuffix(conflictColumns, updateColumns) {
-    const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
-    if (updateColumns.length === 0) {
-      return ` ON CONFLICT (${target}) DO NOTHING`;
-    }
-    const assignments = updateColumns.map((column) => {
-      const quoted = quoteIdentifierFor(this, column);
-      return `${quoted} = excluded.${quoted}`;
-    }).join(", ");
-    return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
-  }
-};
-var dialects = {
-  pgsql: postgresDialect,
-  mysql: mysqlDialect,
-  sqlite: sqliteDialect
-};
-var dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
-var dialectOverride = null;
-function dialectFor(driver) {
-  return dialects[driver];
-}
-function currentSqlDialect() {
-  return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
-}
+// ../../src/core/auth/passwordLogin.ts
+init_dialect();
 
 // ../../src/core/security/recoveryCodes.ts
 import { randomBytes as randomBytes2 } from "crypto";

package/dist/entries/auth/membershipMiddleware.js

@@ -1,4 +1,16 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
 function createAsyncContextStore(key) {
@@ -12,11 +24,16 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 
 // ../../src/core/auth/accessControl.ts
 import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {

package/dist/entries/auth/membershipScope.js

@@ -1,10 +1,15 @@
 // @bun
-// ../../src/core/auth/membershipScope.ts
-import { NotFoundError } from "@getstrata/core/errors/http";
-import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
-
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -19,8 +24,17 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipScope.ts
+import { NotFoundError } from "@getstrata/core/errors/http";
+import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {
@@ -58,6 +72,7 @@ function resolveUserId(user) {
 }
 
 // ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
 var uninitializedMembershipLookup = {
   async listForUser() {

package/dist/entries/auth/membershipService.js

@@ -1,9 +1,15 @@
 // @bun
-// ../../src/core/auth/membershipService.ts
-import { ForbiddenError as ForbiddenError2 } from "@getstrata/core/errors/http";
-
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -18,8 +24,16 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipService.ts
+import { ForbiddenError as ForbiddenError2 } from "@getstrata/core/errors/http";
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {
@@ -57,6 +71,7 @@ function resolveUserId(user) {
 }
 
 // ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
 var uninitializedMembershipLookup = {
   async listForUser() {