@grantjs/server 1.0.0 → 1.1.0

package/README.md

@@ -2,7 +2,7 @@
 
 Server SDK for Grant authorization platform. Provides middleware and guards for **Express**, **Fastify**, **NestJS**, and **Next.js** applications.
 
-**Documentation:** [Server SDK](https://github.com/logusgraphics/grant/blob/main/docs/integration/server-sdk.md) in the official docs.
+**Documentation:** [Server SDK](https://github.com/grant-js/grant/blob/main/docs/integration/server-sdk.md) in the official docs.
 
 ## Features
 

package/dist/debug-DICR8lwQ.js

@@ -0,0 +1,15 @@
+//#region src/utils/debug.ts
+var DEBUG_GRANT_ENV = "DEBUG_GRANT";
+/**
+* Log Grant integration debug info when DEBUG_GRANT=1.
+* Used by Express middleware, Fastify grant hook, Next withGrant, and Nest GrantGuard.
+* Set DEBUG_GRANT=1 in .env or the environment to see resource, action, and outcome in development.
+*/
+function debugGrant(integration, data) {
+	if (process.env[DEBUG_GRANT_ENV] !== "1") return;
+	console.debug(`[Grant ${integration}]`, data);
+}
+//#endregion
+export { debugGrant as t };
+
+//# sourceMappingURL=debug-DICR8lwQ.js.map

package/dist/debug-DICR8lwQ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-DICR8lwQ.js","names":[],"sources":["../src/utils/debug.ts"],"sourcesContent":["const DEBUG_GRANT_ENV = 'DEBUG_GRANT';\n\n/** Whether Grant debug logging is enabled (set DEBUG_GRANT=1 in development). */\nexport function isDebugGrant(): boolean {\n  return process.env[DEBUG_GRANT_ENV] === '1';\n}\n\n/**\n * Log Grant integration debug info when DEBUG_GRANT=1.\n * Used by Express middleware, Fastify grant hook, Next withGrant, and Nest GrantGuard.\n * Set DEBUG_GRANT=1 in .env or the environment to see resource, action, and outcome in development.\n */\nexport function debugGrant(integration: string, data: Record<string, unknown>): void {\n  if (process.env[DEBUG_GRANT_ENV] !== '1') return;\n  console.debug(`[Grant ${integration}]`, data);\n}\n"],"mappings":";AAAA,IAAM,kBAAkB;;;;;;AAYxB,SAAgB,WAAW,aAAqB,MAAqC;AACnF,KAAI,QAAQ,IAAI,qBAAqB,IAAK;AAC1C,SAAQ,MAAM,UAAU,YAAY,IAAI,KAAK"}

package/dist/debug-DInHA4QB.cjs

@@ -0,0 +1,20 @@
+//#region src/utils/debug.ts
+var DEBUG_GRANT_ENV = "DEBUG_GRANT";
+/**
+* Log Grant integration debug info when DEBUG_GRANT=1.
+* Used by Express middleware, Fastify grant hook, Next withGrant, and Nest GrantGuard.
+* Set DEBUG_GRANT=1 in .env or the environment to see resource, action, and outcome in development.
+*/
+function debugGrant(integration, data) {
+	if (process.env[DEBUG_GRANT_ENV] !== "1") return;
+	console.debug(`[Grant ${integration}]`, data);
+}
+//#endregion
+Object.defineProperty(exports, "debugGrant", {
+	enumerable: true,
+	get: function() {
+		return debugGrant;
+	}
+});
+
+//# sourceMappingURL=debug-DInHA4QB.cjs.map

package/dist/debug-DInHA4QB.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-DInHA4QB.cjs","names":[],"sources":["../src/utils/debug.ts"],"sourcesContent":["const DEBUG_GRANT_ENV = 'DEBUG_GRANT';\n\n/** Whether Grant debug logging is enabled (set DEBUG_GRANT=1 in development). */\nexport function isDebugGrant(): boolean {\n  return process.env[DEBUG_GRANT_ENV] === '1';\n}\n\n/**\n * Log Grant integration debug info when DEBUG_GRANT=1.\n * Used by Express middleware, Fastify grant hook, Next withGrant, and Nest GrantGuard.\n * Set DEBUG_GRANT=1 in .env or the environment to see resource, action, and outcome in development.\n */\nexport function debugGrant(integration: string, data: Record<string, unknown>): void {\n  if (process.env[DEBUG_GRANT_ENV] !== '1') return;\n  console.debug(`[Grant ${integration}]`, data);\n}\n"],"mappings":";AAAA,IAAM,kBAAkB;;;;;;AAYxB,SAAgB,WAAW,aAAqB,MAAqC;AACnF,KAAI,QAAQ,IAAI,qBAAqB,IAAK;AAC1C,SAAQ,MAAM,UAAU,YAAY,IAAI,KAAK"}

package/dist/errors-BUeTn_3G.cjs

@@ -0,0 +1,91 @@
+//#region src/errors.ts
+/**
+* Base error class for Grant server errors
+*/
+var GrantServerError = class GrantServerError extends Error {
+	constructor(message, code, statusCode = 500) {
+		super(message);
+		this.code = code;
+		this.statusCode = statusCode;
+		this.name = "GrantServerError";
+		Object.setPrototypeOf(this, GrantServerError.prototype);
+	}
+};
+/**
+* Authentication error (401)
+* Thrown when user is not authenticated
+*/
+var AuthenticationError = class AuthenticationError extends GrantServerError {
+	constructor(message = "Unauthorized", code = "UNAUTHENTICATED") {
+		super(message, code, 401);
+		this.name = "AuthenticationError";
+		Object.setPrototypeOf(this, AuthenticationError.prototype);
+	}
+};
+/**
+* Authorization error (403)
+* Thrown when user is authenticated but lacks required permission
+*/
+var AuthorizationError = class AuthorizationError extends GrantServerError {
+	constructor(message = "Forbidden", code = "FORBIDDEN", reason) {
+		super(message, code, 403);
+		this.reason = reason;
+		this.name = "AuthorizationError";
+		Object.setPrototypeOf(this, AuthorizationError.prototype);
+	}
+};
+/**
+* Bad request error (400)
+* Thrown when request is malformed or missing required data
+*/
+var BadRequestError = class BadRequestError extends GrantServerError {
+	constructor(message = "Bad Request", code = "BAD_REQUEST") {
+		super(message, code, 400);
+		this.name = "BadRequestError";
+		Object.setPrototypeOf(this, BadRequestError.prototype);
+	}
+};
+/**
+* Not found error (404)
+* Thrown when resource is not found
+*/
+var NotFoundError = class NotFoundError extends GrantServerError {
+	constructor(message = "Not Found", code = "NOT_FOUND") {
+		super(message, code, 404);
+		this.name = "NotFoundError";
+		Object.setPrototypeOf(this, NotFoundError.prototype);
+	}
+};
+//#endregion
+Object.defineProperty(exports, "AuthenticationError", {
+	enumerable: true,
+	get: function() {
+		return AuthenticationError;
+	}
+});
+Object.defineProperty(exports, "AuthorizationError", {
+	enumerable: true,
+	get: function() {
+		return AuthorizationError;
+	}
+});
+Object.defineProperty(exports, "BadRequestError", {
+	enumerable: true,
+	get: function() {
+		return BadRequestError;
+	}
+});
+Object.defineProperty(exports, "GrantServerError", {
+	enumerable: true,
+	get: function() {
+		return GrantServerError;
+	}
+});
+Object.defineProperty(exports, "NotFoundError", {
+	enumerable: true,
+	get: function() {
+		return NotFoundError;
+	}
+});
+
+//# sourceMappingURL=errors-BUeTn_3G.cjs.map

package/dist/errors-BUeTn_3G.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-BUeTn_3G.cjs","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Base error class for Grant server errors\n */\nexport class GrantServerError extends Error {\n  constructor(\n    message: string,\n    public readonly code: string,\n    public readonly statusCode: number = 500\n  ) {\n    super(message);\n    this.name = 'GrantServerError';\n    Object.setPrototypeOf(this, GrantServerError.prototype);\n  }\n}\n\n/**\n * Authentication error (401)\n * Thrown when user is not authenticated\n */\nexport class AuthenticationError extends GrantServerError {\n  constructor(message: string = 'Unauthorized', code: string = 'UNAUTHENTICATED') {\n    super(message, code, 401);\n    this.name = 'AuthenticationError';\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n\n/**\n * Authorization error (403)\n * Thrown when user is authenticated but lacks required permission\n */\nexport class AuthorizationError extends GrantServerError {\n  constructor(\n    message: string = 'Forbidden',\n    code: string = 'FORBIDDEN',\n    public readonly reason?: string\n  ) {\n    super(message, code, 403);\n    this.name = 'AuthorizationError';\n    Object.setPrototypeOf(this, AuthorizationError.prototype);\n  }\n}\n\n/**\n * Bad request error (400)\n * Thrown when request is malformed or missing required data\n */\nexport class BadRequestError extends GrantServerError {\n  constructor(message: string = 'Bad Request', code: string = 'BAD_REQUEST') {\n    super(message, code, 400);\n    this.name = 'BadRequestError';\n    Object.setPrototypeOf(this, BadRequestError.prototype);\n  }\n}\n\n/**\n * Not found error (404)\n * Thrown when resource is not found\n */\nexport class NotFoundError extends GrantServerError {\n  constructor(message: string = 'Not Found', code: string = 'NOT_FOUND') {\n    super(message, code, 404);\n    this.name = 'NotFoundError';\n    Object.setPrototypeOf(this, NotFoundError.prototype);\n  }\n}\n"],"mappings":";;;;AAGA,IAAa,mBAAb,MAAa,yBAAyB,MAAM;CAC1C,YACE,SACA,MACA,aAAqC,KACrC;AACA,QAAM,QAAQ;AAHE,OAAA,OAAA;AACA,OAAA,aAAA;AAGhB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,iBAAiB,UAAU;;;;;;;AAQ3D,IAAa,sBAAb,MAAa,4BAA4B,iBAAiB;CACxD,YAAY,UAAkB,gBAAgB,OAAe,mBAAmB;AAC9E,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,oBAAoB,UAAU;;;;;;;AAQ9D,IAAa,qBAAb,MAAa,2BAA2B,iBAAiB;CACvD,YACE,UAAkB,aAClB,OAAe,aACf,QACA;AACA,QAAM,SAAS,MAAM,IAAI;AAFT,OAAA,SAAA;AAGhB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,mBAAmB,UAAU;;;;;;;AAQ7D,IAAa,kBAAb,MAAa,wBAAwB,iBAAiB;CACpD,YAAY,UAAkB,eAAe,OAAe,eAAe;AACzE,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,gBAAgB,UAAU;;;;;;;AAQ1D,IAAa,gBAAb,MAAa,sBAAsB,iBAAiB;CAClD,YAAY,UAAkB,aAAa,OAAe,aAAa;AACrE,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,cAAc,UAAU"}

package/dist/errors-CSC_Z_KP.js

@@ -0,0 +1,62 @@
+//#region src/errors.ts
+/**
+* Base error class for Grant server errors
+*/
+var GrantServerError = class GrantServerError extends Error {
+	constructor(message, code, statusCode = 500) {
+		super(message);
+		this.code = code;
+		this.statusCode = statusCode;
+		this.name = "GrantServerError";
+		Object.setPrototypeOf(this, GrantServerError.prototype);
+	}
+};
+/**
+* Authentication error (401)
+* Thrown when user is not authenticated
+*/
+var AuthenticationError = class AuthenticationError extends GrantServerError {
+	constructor(message = "Unauthorized", code = "UNAUTHENTICATED") {
+		super(message, code, 401);
+		this.name = "AuthenticationError";
+		Object.setPrototypeOf(this, AuthenticationError.prototype);
+	}
+};
+/**
+* Authorization error (403)
+* Thrown when user is authenticated but lacks required permission
+*/
+var AuthorizationError = class AuthorizationError extends GrantServerError {
+	constructor(message = "Forbidden", code = "FORBIDDEN", reason) {
+		super(message, code, 403);
+		this.reason = reason;
+		this.name = "AuthorizationError";
+		Object.setPrototypeOf(this, AuthorizationError.prototype);
+	}
+};
+/**
+* Bad request error (400)
+* Thrown when request is malformed or missing required data
+*/
+var BadRequestError = class BadRequestError extends GrantServerError {
+	constructor(message = "Bad Request", code = "BAD_REQUEST") {
+		super(message, code, 400);
+		this.name = "BadRequestError";
+		Object.setPrototypeOf(this, BadRequestError.prototype);
+	}
+};
+/**
+* Not found error (404)
+* Thrown when resource is not found
+*/
+var NotFoundError = class NotFoundError extends GrantServerError {
+	constructor(message = "Not Found", code = "NOT_FOUND") {
+		super(message, code, 404);
+		this.name = "NotFoundError";
+		Object.setPrototypeOf(this, NotFoundError.prototype);
+	}
+};
+//#endregion
+export { NotFoundError as a, GrantServerError as i, AuthorizationError as n, BadRequestError as r, AuthenticationError as t };
+
+//# sourceMappingURL=errors-CSC_Z_KP.js.map

package/dist/errors-CSC_Z_KP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-CSC_Z_KP.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Base error class for Grant server errors\n */\nexport class GrantServerError extends Error {\n  constructor(\n    message: string,\n    public readonly code: string,\n    public readonly statusCode: number = 500\n  ) {\n    super(message);\n    this.name = 'GrantServerError';\n    Object.setPrototypeOf(this, GrantServerError.prototype);\n  }\n}\n\n/**\n * Authentication error (401)\n * Thrown when user is not authenticated\n */\nexport class AuthenticationError extends GrantServerError {\n  constructor(message: string = 'Unauthorized', code: string = 'UNAUTHENTICATED') {\n    super(message, code, 401);\n    this.name = 'AuthenticationError';\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n\n/**\n * Authorization error (403)\n * Thrown when user is authenticated but lacks required permission\n */\nexport class AuthorizationError extends GrantServerError {\n  constructor(\n    message: string = 'Forbidden',\n    code: string = 'FORBIDDEN',\n    public readonly reason?: string\n  ) {\n    super(message, code, 403);\n    this.name = 'AuthorizationError';\n    Object.setPrototypeOf(this, AuthorizationError.prototype);\n  }\n}\n\n/**\n * Bad request error (400)\n * Thrown when request is malformed or missing required data\n */\nexport class BadRequestError extends GrantServerError {\n  constructor(message: string = 'Bad Request', code: string = 'BAD_REQUEST') {\n    super(message, code, 400);\n    this.name = 'BadRequestError';\n    Object.setPrototypeOf(this, BadRequestError.prototype);\n  }\n}\n\n/**\n * Not found error (404)\n * Thrown when resource is not found\n */\nexport class NotFoundError extends GrantServerError {\n  constructor(message: string = 'Not Found', code: string = 'NOT_FOUND') {\n    super(message, code, 404);\n    this.name = 'NotFoundError';\n    Object.setPrototypeOf(this, NotFoundError.prototype);\n  }\n}\n"],"mappings":";;;;AAGA,IAAa,mBAAb,MAAa,yBAAyB,MAAM;CAC1C,YACE,SACA,MACA,aAAqC,KACrC;AACA,QAAM,QAAQ;AAHE,OAAA,OAAA;AACA,OAAA,aAAA;AAGhB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,iBAAiB,UAAU;;;;;;;AAQ3D,IAAa,sBAAb,MAAa,4BAA4B,iBAAiB;CACxD,YAAY,UAAkB,gBAAgB,OAAe,mBAAmB;AAC9E,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,oBAAoB,UAAU;;;;;;;AAQ9D,IAAa,qBAAb,MAAa,2BAA2B,iBAAiB;CACvD,YACE,UAAkB,aAClB,OAAe,aACf,QACA;AACA,QAAM,SAAS,MAAM,IAAI;AAFT,OAAA,SAAA;AAGhB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,mBAAmB,UAAU;;;;;;;AAQ7D,IAAa,kBAAb,MAAa,wBAAwB,iBAAiB;CACpD,YAAY,UAAkB,eAAe,OAAe,eAAe;AACzE,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,gBAAgB,UAAU;;;;;;;AAQ1D,IAAa,gBAAb,MAAa,sBAAsB,iBAAiB;CAClD,YAAY,UAAkB,aAAa,OAAe,aAAa;AACrE,QAAM,SAAS,MAAM,IAAI;AACzB,OAAK,OAAO;AACZ,SAAO,eAAe,MAAM,cAAc,UAAU"}

package/dist/express/index.d.ts

@@ -1,6 +1,6 @@
+export type { AuthorizedRequest, GrantOptions } from './middleware';
 export { grant } from './middleware';
-export type { GrantOptions, AuthorizedRequest } from './middleware';
-export type { GrantServerConfig, AuthorizationResult, PermissionCheckOptions, Scope, ResourceResolver, } from '../types';
-export { GrantServerError, AuthenticationError, AuthorizationError, BadRequestError, NotFoundError, } from '../errors';
+export type { AuthorizationResult, GrantServerConfig, PermissionCheckOptions, ResourceResolver, Scope, } from '../types';
+export { AuthenticationError, AuthorizationError, BadRequestError, GrantServerError, NotFoundError, } from '../errors';
 export { GrantClient } from '../grant-client';
 //# sourceMappingURL=index.d.ts.map

package/dist/express/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/express/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGpE,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,EACL,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/express/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAGrC,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,GACN,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/express/middleware.d.ts

@@ -1,6 +1,6 @@
+import { NextFunction, Request, Response } from 'express';
 import { GrantClient } from '../grant-client';
-import { ResourceResolver, AuthorizationResult } from '../types';
-import { Request, Response, NextFunction } from 'express';
+import { AuthorizationResult, ResourceResolver } from '../types';
 /**
  * Extended Express Request with authorization result
  */

package/dist/express/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/express/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACpB,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAyG9E"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/express/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAItE;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,OAAO;IAChD,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACpB,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAyG9E"}

package/dist/express.cjs

@@ -1,99 +1,110 @@
-"use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const index = require("./index.cjs");
-const debug = require("./debug-Crb5gNDM.cjs");
-const grantClient = require("./grant-client-DywfJN5P.cjs");
+const require_grant_client = require("./grant-client-f6IKMyk5.cjs");
+const require_errors = require("./errors-BUeTn_3G.cjs");
+const require_debug = require("./debug-DInHA4QB.cjs");
+//#region src/express/middleware.ts
+/**
+* Create Express middleware to check if user is granted permission
+*
+* @example
+* ```ts
+* import { grant } from '@grantjs/server/express';
+* import { GrantClient } from '@grantjs/server';
+*
+* const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });
+*
+* router.get('/organizations', grant(grantClient, {
+*   resource: 'Organization',
+*   action: 'Query',
+* }), handler);
+* ```
+*/
 function grant(client, options) {
-  return async (req, res, next) => {
-    try {
-      debug.debugGrant("Express", { resource: options.resource, action: options.action });
-      const token = await grantClient.extractTokenFromRequest(req, client.config);
-      if (!token) {
-        res.status(401).json({
-          error: "Unauthorized",
-          code: "UNAUTHENTICATED"
-        });
-        return;
-      }
-      let resolvedResource = null;
-      if (options.resourceResolver) {
-        resolvedResource = await options.resourceResolver({
-          resourceSlug: options.resource,
-          request: req
-        });
-        if (!resolvedResource) {
-          res.status(404).json({
-            error: "Resource not found",
-            code: "NOT_FOUND"
-          });
-          return;
-        }
-      }
-      const result = await client.isAuthorized(
-        options.resource,
-        options.action,
-        {
-          context: {
-            resource: resolvedResource || void 0
-          }
-        },
-        req
-      );
-      debug.debugGrant("Express", {
-        resource: options.resource,
-        action: options.action,
-        authorized: result.authorized,
-        ...result.authorized ? {} : { reason: result.reason }
-      });
-      if (!result.authorized) {
-        res.status(403).json({
-          error: "Forbidden",
-          code: "FORBIDDEN",
-          reason: result.reason
-        });
-        return;
-      }
-      req.authorization = result;
-      next();
-    } catch (error) {
-      if (error instanceof index.AuthenticationError) {
-        res.status(401).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof index.AuthorizationError) {
-        res.status(403).json({
-          error: error.message,
-          code: error.code,
-          reason: error.reason
-        });
-        return;
-      }
-      if (error instanceof index.BadRequestError) {
-        res.status(400).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof index.NotFoundError) {
-        res.status(404).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      next(error);
-    }
-  };
+	return async (req, res, next) => {
+		try {
+			require_debug.debugGrant("Express", {
+				resource: options.resource,
+				action: options.action
+			});
+			if (!await require_grant_client.extractTokenFromRequest(req, client.config)) {
+				res.status(401).json({
+					error: "Unauthorized",
+					code: "UNAUTHENTICATED"
+				});
+				return;
+			}
+			let resolvedResource = null;
+			if (options.resourceResolver) {
+				resolvedResource = await options.resourceResolver({
+					resourceSlug: options.resource,
+					request: req
+				});
+				if (!resolvedResource) {
+					res.status(404).json({
+						error: "Resource not found",
+						code: "NOT_FOUND"
+					});
+					return;
+				}
+			}
+			const result = await client.isAuthorized(options.resource, options.action, { context: { resource: resolvedResource || void 0 } }, req);
+			require_debug.debugGrant("Express", {
+				resource: options.resource,
+				action: options.action,
+				authorized: result.authorized,
+				...result.authorized ? {} : { reason: result.reason }
+			});
+			if (!result.authorized) {
+				res.status(403).json({
+					error: "Forbidden",
+					code: "FORBIDDEN",
+					reason: result.reason
+				});
+				return;
+			}
+			req.authorization = result;
+			next();
+		} catch (error) {
+			if (error instanceof require_errors.AuthenticationError) {
+				res.status(401).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof require_errors.AuthorizationError) {
+				res.status(403).json({
+					error: error.message,
+					code: error.code,
+					reason: error.reason
+				});
+				return;
+			}
+			if (error instanceof require_errors.BadRequestError) {
+				res.status(400).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof require_errors.NotFoundError) {
+				res.status(404).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			next(error);
+		}
+	};
 }
-exports.AuthenticationError = index.AuthenticationError;
-exports.AuthorizationError = index.AuthorizationError;
-exports.BadRequestError = index.BadRequestError;
-exports.GrantServerError = index.GrantServerError;
-exports.NotFoundError = index.NotFoundError;
-exports.GrantClient = grantClient.GrantClient;
+//#endregion
+exports.AuthenticationError = require_errors.AuthenticationError;
+exports.AuthorizationError = require_errors.AuthorizationError;
+exports.BadRequestError = require_errors.BadRequestError;
+exports.GrantClient = require_grant_client.GrantClient;
+exports.GrantServerError = require_errors.GrantServerError;
+exports.NotFoundError = require_errors.NotFoundError;
 exports.grant = grant;
-//# sourceMappingURL=express.cjs.map
+
+//# sourceMappingURL=express.cjs.map

package/dist/express.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"express.cjs","sources":["../src/express/middleware.ts"],"sourcesContent":["import { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\nimport type { ResourceResolver, AuthorizationResult } from '../types';\nimport type { Request, Response, NextFunction } from 'express';\n\n/**\n * Extended Express Request with authorization result\n */\nexport interface AuthorizedRequest extends Request {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Express middleware\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create Express middleware to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/express';\n * import { GrantClient } from '@grantjs/server';\n *\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * router.get('/organizations', grant(grantClient, {\n *   resource: 'Organization',\n *   action: 'Query',\n * }), handler);\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (req: AuthorizedRequest, res: Response, next: NextFunction) => Promise<void> {\n  return async (req: AuthorizedRequest, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      debugGrant('Express', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(req, client.config);\n      if (!token) {\n        res.status(401).json({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: req,\n        });\n\n        if (!resolvedResource) {\n          res.status(404).json({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        req\n      );\n\n      debugGrant('Express', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        res.status(403).json({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      (req as AuthorizedRequest).authorization = result;\n\n      // 5. Proceed to next middleware/handler\n      next();\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        res.status(401).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        res.status(403).json({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        res.status(400).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        res.status(404).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - pass to Express error handler\n      next(error);\n    }\n  };\n}\n"],"names":["debugGrant","extractTokenFromRequest","AuthenticationError","AuthorizationError","BadRequestError","NotFoundError"],"mappings":";;;;;AA2CO,SAAS,MACd,QACA,SAC8E;AAC9E,SAAO,OAAO,KAAwB,KAAe,SAAsC;AACzF,QAAI;AACFA,uBAAW,WAAW,EAAE,UAAU,QAAQ,UAAU,QAAQ,QAAQ,QAAQ;AAG5E,YAAM,QAAQ,MAAMC,YAAAA,wBAAwB,KAAK,OAAO,MAAM;AAC9D,UAAI,CAAC,OAAO;AACV,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,QAAA,CACP;AACD;AAAA,MACF;AAGA,UAAI,mBAAmD;AAEvD,UAAI,QAAQ,kBAAkB;AAC5B,2BAAmB,MAAM,QAAQ,iBAAiB;AAAA,UAChD,cAAc,QAAQ;AAAA,UACtB,SAAS;AAAA,QAAA,CACV;AAED,YAAI,CAAC,kBAAkB;AACrB,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,UAAA,CACP;AACD;AAAA,QACF;AAAA,MACF;AAGA,YAAM,SAAS,MAAM,OAAO;AAAA,QAC1B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,UACE,SAAS;AAAA,YACP,UAAU,oBAAoB;AAAA,UAAA;AAAA,QAChC;AAAA,QAEF;AAAA,MAAA;AAGFD,YAAAA,WAAW,WAAW;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,GAAI,OAAO,aAAa,CAAA,IAAK,EAAE,QAAQ,OAAO,OAAA;AAAA,MAAO,CACtD;AAED,UAAI,CAAC,OAAO,YAAY;AACtB,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,UACN,QAAQ,OAAO;AAAA,QAAA,CAChB;AACD;AAAA,MACF;AAGC,UAA0B,gBAAgB;AAG3C,WAAA;AAAA,IACF,SAAS,OAAO;AAEd,UAAI,iBAAiBE,MAAAA,qBAAqB;AACxC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,oBAAoB;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,UACZ,QAAQ,MAAM;AAAA,QAAA,CACf;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,iBAAiB;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,eAAe;AAClC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAGA,WAAK,KAAK;AAAA,IACZ;AAAA,EACF;AACF;;;;;;;;"}
+{"version":3,"file":"express.cjs","names":[],"sources":["../src/express/middleware.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from 'express';\n\nimport { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport type { AuthorizationResult, ResourceResolver } from '../types';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\n/**\n * Extended Express Request with authorization result\n */\nexport interface AuthorizedRequest extends Request {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Express middleware\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create Express middleware to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/express';\n * import { GrantClient } from '@grantjs/server';\n *\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * router.get('/organizations', grant(grantClient, {\n *   resource: 'Organization',\n *   action: 'Query',\n * }), handler);\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (req: AuthorizedRequest, res: Response, next: NextFunction) => Promise<void> {\n  return async (req: AuthorizedRequest, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      debugGrant('Express', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(req, client.config);\n      if (!token) {\n        res.status(401).json({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: req,\n        });\n\n        if (!resolvedResource) {\n          res.status(404).json({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        req\n      );\n\n      debugGrant('Express', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        res.status(403).json({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      (req as AuthorizedRequest).authorization = result;\n\n      // 5. Proceed to next middleware/handler\n      next();\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        res.status(401).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        res.status(403).json({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        res.status(400).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        res.status(404).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - pass to Express error handler\n      next(error);\n    }\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2CA,SAAgB,MACd,QACA,SAC8E;AAC9E,QAAO,OAAO,KAAwB,KAAe,SAAsC;AACzF,MAAI;AACF,iBAAA,WAAW,WAAW;IAAE,UAAU,QAAQ;IAAU,QAAQ,QAAQ;IAAQ,CAAC;AAI7E,OAAI,CAAC,MADe,qBAAA,wBAAwB,KAAK,OAAO,OAAO,EACnD;AACV,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,MAAM;KACP,CAAC;AACF;;GAIF,IAAI,mBAAmD;AAEvD,OAAI,QAAQ,kBAAkB;AAC5B,uBAAmB,MAAM,QAAQ,iBAAiB;KAChD,cAAc,QAAQ;KACtB,SAAS;KACV,CAAC;AAEF,QAAI,CAAC,kBAAkB;AACrB,SAAI,OAAO,IAAI,CAAC,KAAK;MACnB,OAAO;MACP,MAAM;MACP,CAAC;AACF;;;GAKJ,MAAM,SAAS,MAAM,OAAO,aAC1B,QAAQ,UACR,QAAQ,QACR,EACE,SAAS,EACP,UAAU,oBAAoB,KAAA,GAC/B,EACF,EACD,IACD;AAED,iBAAA,WAAW,WAAW;IACpB,UAAU,QAAQ;IAClB,QAAQ,QAAQ;IAChB,YAAY,OAAO;IACnB,GAAI,OAAO,aAAa,EAAE,GAAG,EAAE,QAAQ,OAAO,QAAQ;IACvD,CAAC;AAEF,OAAI,CAAC,OAAO,YAAY;AACtB,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,MAAM;KACN,QAAQ,OAAO;KAChB,CAAC;AACF;;AAID,OAA0B,gBAAgB;AAG3C,SAAM;WACC,OAAO;AAEd,OAAI,iBAAiB,eAAA,qBAAqB;AACxC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,oBAAoB;AACvC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACZ,QAAQ,MAAM;KACf,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,iBAAiB;AACpC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,eAAe;AAClC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAIF,QAAK,MAAM"}