@grantjs/server 1.0.0 → 1.1.0

package/dist/express.mjs

@@ -1,101 +1,103 @@
-import { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from "./index.mjs";
-import { GrantServerError } from "./index.mjs";
-import { d as debugGrant } from "./debug-C8ibbrE5.js";
-import { e as extractTokenFromRequest } from "./grant-client-D1LZI2f4.js";
-import { G } from "./grant-client-D1LZI2f4.js";
+import { i as extractTokenFromRequest, t as GrantClient } from "./grant-client-t3KadxFo.js";
+import { a as NotFoundError, i as GrantServerError, n as AuthorizationError, r as BadRequestError, t as AuthenticationError } from "./errors-CSC_Z_KP.js";
+import { t as debugGrant } from "./debug-DICR8lwQ.js";
+//#region src/express/middleware.ts
+/**
+* Create Express middleware to check if user is granted permission
+*
+* @example
+* ```ts
+* import { grant } from '@grantjs/server/express';
+* import { GrantClient } from '@grantjs/server';
+*
+* const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });
+*
+* router.get('/organizations', grant(grantClient, {
+*   resource: 'Organization',
+*   action: 'Query',
+* }), handler);
+* ```
+*/
 function grant(client, options) {
-  return async (req, res, next) => {
-    try {
-      debugGrant("Express", { resource: options.resource, action: options.action });
-      const token = await extractTokenFromRequest(req, client.config);
-      if (!token) {
-        res.status(401).json({
-          error: "Unauthorized",
-          code: "UNAUTHENTICATED"
-        });
-        return;
-      }
-      let resolvedResource = null;
-      if (options.resourceResolver) {
-        resolvedResource = await options.resourceResolver({
-          resourceSlug: options.resource,
-          request: req
-        });
-        if (!resolvedResource) {
-          res.status(404).json({
-            error: "Resource not found",
-            code: "NOT_FOUND"
-          });
-          return;
-        }
-      }
-      const result = await client.isAuthorized(
-        options.resource,
-        options.action,
-        {
-          context: {
-            resource: resolvedResource || void 0
-          }
-        },
-        req
-      );
-      debugGrant("Express", {
-        resource: options.resource,
-        action: options.action,
-        authorized: result.authorized,
-        ...result.authorized ? {} : { reason: result.reason }
-      });
-      if (!result.authorized) {
-        res.status(403).json({
-          error: "Forbidden",
-          code: "FORBIDDEN",
-          reason: result.reason
-        });
-        return;
-      }
-      req.authorization = result;
-      next();
-    } catch (error) {
-      if (error instanceof AuthenticationError) {
-        res.status(401).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof AuthorizationError) {
-        res.status(403).json({
-          error: error.message,
-          code: error.code,
-          reason: error.reason
-        });
-        return;
-      }
-      if (error instanceof BadRequestError) {
-        res.status(400).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof NotFoundError) {
-        res.status(404).json({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      next(error);
-    }
-  };
+	return async (req, res, next) => {
+		try {
+			debugGrant("Express", {
+				resource: options.resource,
+				action: options.action
+			});
+			if (!await extractTokenFromRequest(req, client.config)) {
+				res.status(401).json({
+					error: "Unauthorized",
+					code: "UNAUTHENTICATED"
+				});
+				return;
+			}
+			let resolvedResource = null;
+			if (options.resourceResolver) {
+				resolvedResource = await options.resourceResolver({
+					resourceSlug: options.resource,
+					request: req
+				});
+				if (!resolvedResource) {
+					res.status(404).json({
+						error: "Resource not found",
+						code: "NOT_FOUND"
+					});
+					return;
+				}
+			}
+			const result = await client.isAuthorized(options.resource, options.action, { context: { resource: resolvedResource || void 0 } }, req);
+			debugGrant("Express", {
+				resource: options.resource,
+				action: options.action,
+				authorized: result.authorized,
+				...result.authorized ? {} : { reason: result.reason }
+			});
+			if (!result.authorized) {
+				res.status(403).json({
+					error: "Forbidden",
+					code: "FORBIDDEN",
+					reason: result.reason
+				});
+				return;
+			}
+			req.authorization = result;
+			next();
+		} catch (error) {
+			if (error instanceof AuthenticationError) {
+				res.status(401).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof AuthorizationError) {
+				res.status(403).json({
+					error: error.message,
+					code: error.code,
+					reason: error.reason
+				});
+				return;
+			}
+			if (error instanceof BadRequestError) {
+				res.status(400).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof NotFoundError) {
+				res.status(404).json({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			next(error);
+		}
+	};
 }
-export {
-  AuthenticationError,
-  AuthorizationError,
-  BadRequestError,
-  G as GrantClient,
-  GrantServerError,
-  NotFoundError,
-  grant
-};
-//# sourceMappingURL=express.mjs.map
+//#endregion
+export { AuthenticationError, AuthorizationError, BadRequestError, GrantClient, GrantServerError, NotFoundError, grant };
+
+//# sourceMappingURL=express.mjs.map

package/dist/express.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"express.mjs","sources":["../src/express/middleware.ts"],"sourcesContent":["import { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\nimport type { ResourceResolver, AuthorizationResult } from '../types';\nimport type { Request, Response, NextFunction } from 'express';\n\n/**\n * Extended Express Request with authorization result\n */\nexport interface AuthorizedRequest extends Request {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Express middleware\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create Express middleware to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/express';\n * import { GrantClient } from '@grantjs/server';\n *\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * router.get('/organizations', grant(grantClient, {\n *   resource: 'Organization',\n *   action: 'Query',\n * }), handler);\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (req: AuthorizedRequest, res: Response, next: NextFunction) => Promise<void> {\n  return async (req: AuthorizedRequest, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      debugGrant('Express', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(req, client.config);\n      if (!token) {\n        res.status(401).json({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: req,\n        });\n\n        if (!resolvedResource) {\n          res.status(404).json({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        req\n      );\n\n      debugGrant('Express', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        res.status(403).json({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      (req as AuthorizedRequest).authorization = result;\n\n      // 5. Proceed to next middleware/handler\n      next();\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        res.status(401).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        res.status(403).json({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        res.status(400).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        res.status(404).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - pass to Express error handler\n      next(error);\n    }\n  };\n}\n"],"names":[],"mappings":";;;;;AA2CO,SAAS,MACd,QACA,SAC8E;AAC9E,SAAO,OAAO,KAAwB,KAAe,SAAsC;AACzF,QAAI;AACF,iBAAW,WAAW,EAAE,UAAU,QAAQ,UAAU,QAAQ,QAAQ,QAAQ;AAG5E,YAAM,QAAQ,MAAM,wBAAwB,KAAK,OAAO,MAAM;AAC9D,UAAI,CAAC,OAAO;AACV,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,QAAA,CACP;AACD;AAAA,MACF;AAGA,UAAI,mBAAmD;AAEvD,UAAI,QAAQ,kBAAkB;AAC5B,2BAAmB,MAAM,QAAQ,iBAAiB;AAAA,UAChD,cAAc,QAAQ;AAAA,UACtB,SAAS;AAAA,QAAA,CACV;AAED,YAAI,CAAC,kBAAkB;AACrB,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,UAAA,CACP;AACD;AAAA,QACF;AAAA,MACF;AAGA,YAAM,SAAS,MAAM,OAAO;AAAA,QAC1B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,UACE,SAAS;AAAA,YACP,UAAU,oBAAoB;AAAA,UAAA;AAAA,QAChC;AAAA,QAEF;AAAA,MAAA;AAGF,iBAAW,WAAW;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,GAAI,OAAO,aAAa,CAAA,IAAK,EAAE,QAAQ,OAAO,OAAA;AAAA,MAAO,CACtD;AAED,UAAI,CAAC,OAAO,YAAY;AACtB,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,UACN,QAAQ,OAAO;AAAA,QAAA,CAChB;AACD;AAAA,MACF;AAGC,UAA0B,gBAAgB;AAG3C,WAAA;AAAA,IACF,SAAS,OAAO;AAEd,UAAI,iBAAiB,qBAAqB;AACxC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiB,oBAAoB;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,UACZ,QAAQ,MAAM;AAAA,QAAA,CACf;AACD;AAAA,MACF;AAEA,UAAI,iBAAiB,iBAAiB;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiB,eAAe;AAClC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAGA,WAAK,KAAK;AAAA,IACZ;AAAA,EACF;AACF;"}
+{"version":3,"file":"express.mjs","names":[],"sources":["../src/express/middleware.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from 'express';\n\nimport { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport type { AuthorizationResult, ResourceResolver } from '../types';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\n/**\n * Extended Express Request with authorization result\n */\nexport interface AuthorizedRequest extends Request {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Express middleware\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create Express middleware to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/express';\n * import { GrantClient } from '@grantjs/server';\n *\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * router.get('/organizations', grant(grantClient, {\n *   resource: 'Organization',\n *   action: 'Query',\n * }), handler);\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (req: AuthorizedRequest, res: Response, next: NextFunction) => Promise<void> {\n  return async (req: AuthorizedRequest, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      debugGrant('Express', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(req, client.config);\n      if (!token) {\n        res.status(401).json({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: req,\n        });\n\n        if (!resolvedResource) {\n          res.status(404).json({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        req\n      );\n\n      debugGrant('Express', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        res.status(403).json({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      (req as AuthorizedRequest).authorization = result;\n\n      // 5. Proceed to next middleware/handler\n      next();\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        res.status(401).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        res.status(403).json({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        res.status(400).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        res.status(404).json({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - pass to Express error handler\n      next(error);\n    }\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA2CA,SAAgB,MACd,QACA,SAC8E;AAC9E,QAAO,OAAO,KAAwB,KAAe,SAAsC;AACzF,MAAI;AACF,cAAW,WAAW;IAAE,UAAU,QAAQ;IAAU,QAAQ,QAAQ;IAAQ,CAAC;AAI7E,OAAI,CAAC,MADe,wBAAwB,KAAK,OAAO,OAAO,EACnD;AACV,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,MAAM;KACP,CAAC;AACF;;GAIF,IAAI,mBAAmD;AAEvD,OAAI,QAAQ,kBAAkB;AAC5B,uBAAmB,MAAM,QAAQ,iBAAiB;KAChD,cAAc,QAAQ;KACtB,SAAS;KACV,CAAC;AAEF,QAAI,CAAC,kBAAkB;AACrB,SAAI,OAAO,IAAI,CAAC,KAAK;MACnB,OAAO;MACP,MAAM;MACP,CAAC;AACF;;;GAKJ,MAAM,SAAS,MAAM,OAAO,aAC1B,QAAQ,UACR,QAAQ,QACR,EACE,SAAS,EACP,UAAU,oBAAoB,KAAA,GAC/B,EACF,EACD,IACD;AAED,cAAW,WAAW;IACpB,UAAU,QAAQ;IAClB,QAAQ,QAAQ;IAChB,YAAY,OAAO;IACnB,GAAI,OAAO,aAAa,EAAE,GAAG,EAAE,QAAQ,OAAO,QAAQ;IACvD,CAAC;AAEF,OAAI,CAAC,OAAO,YAAY;AACtB,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO;KACP,MAAM;KACN,QAAQ,OAAO;KAChB,CAAC;AACF;;AAID,OAA0B,gBAAgB;AAG3C,SAAM;WACC,OAAO;AAEd,OAAI,iBAAiB,qBAAqB;AACxC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,oBAAoB;AACvC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACZ,QAAQ,MAAM;KACf,CAAC;AACF;;AAGF,OAAI,iBAAiB,iBAAiB;AACpC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAe;AAClC,QAAI,OAAO,IAAI,CAAC,KAAK;KACnB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAIF,QAAK,MAAM"}

package/dist/fastify/index.d.ts

@@ -1,6 +1,6 @@
-export { grantPlugin, grant } from './plugin';
-export type { GrantOptions, AuthorizedFastifyRequest, GrantPluginOptions } from './plugin';
-export type { GrantServerConfig, AuthorizationResult, PermissionCheckOptions, Scope, ResourceResolver, } from '../types';
-export { GrantServerError, AuthenticationError, AuthorizationError, BadRequestError, NotFoundError, } from '../errors';
+export type { AuthorizedFastifyRequest, GrantOptions, GrantPluginOptions } from './plugin';
+export { grant, grantPlugin } from './plugin';
+export type { AuthorizationResult, GrantServerConfig, PermissionCheckOptions, ResourceResolver, Scope, } from '../types';
+export { AuthenticationError, AuthorizationError, BadRequestError, GrantServerError, NotFoundError, } from '../errors';
 export { GrantClient } from '../grant-client';
 //# sourceMappingURL=index.d.ts.map

package/dist/fastify/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fastify/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAG3F,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,EACL,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fastify/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,wBAAwB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3F,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAG9C,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,GACN,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/fastify/plugin.d.ts

@@ -1,6 +1,6 @@
-import { FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify';
+import { FastifyPluginAsync, FastifyReply, FastifyRequest } from 'fastify';
 import { GrantClient } from '../grant-client';
-import { ResourceResolver, AuthorizationResult, GrantServerConfig } from '../types';
+import { AuthorizationResult, GrantServerConfig, ResourceResolver } from '../types';
 /**
  * Extended Fastify Request with authorization result
  */

package/dist/fastify/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/fastify/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACpB,CAAC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAsG3E;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,kBAAkB,CAK9D,CAAC;AAIF,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,KAAK,EAAE,WAAW,CAAC;KACpB;CACF"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/fastify/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAIzF;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACpB,CAAC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAsG3E;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,kBAAkB,CAK9D,CAAC;AAIF,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,KAAK,EAAE,WAAW,CAAC;KACpB;CACF"}

package/dist/fastify.cjs

@@ -1,103 +1,139 @@
-"use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const index = require("./index.cjs");
-const grantClient = require("./grant-client-DywfJN5P.cjs");
-const debug = require("./debug-Crb5gNDM.cjs");
+const require_grant_client = require("./grant-client-f6IKMyk5.cjs");
+const require_errors = require("./errors-BUeTn_3G.cjs");
+const require_debug = require("./debug-DInHA4QB.cjs");
+//#region src/fastify/plugin.ts
+/**
+* Create a Fastify preHandler hook to check if user is granted permission
+*
+* @example
+* ```ts
+* import { grant } from '@grantjs/server/fastify';
+* import { GrantClient } from '@grantjs/server';
+* import Fastify from 'fastify';
+*
+* const fastify = Fastify();
+* const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });
+*
+* fastify.get('/organizations', {
+*   preHandler: grant(grantClient, {
+*     resource: 'Organization',
+*     action: 'Query',
+*   }),
+* }, async (request, reply) => {
+*   return { organizations: [] };
+* });
+* ```
+*/
 function grant(client, options) {
-  return async (request, reply) => {
-    try {
-      debug.debugGrant("Fastify", { resource: options.resource, action: options.action });
-      const token = await grantClient.extractTokenFromRequest(request, client.config);
-      if (!token) {
-        reply.status(401).send({
-          error: "Unauthorized",
-          code: "UNAUTHENTICATED"
-        });
-        return;
-      }
-      let resolvedResource = null;
-      if (options.resourceResolver) {
-        resolvedResource = await options.resourceResolver({
-          resourceSlug: options.resource,
-          request
-        });
-        if (!resolvedResource) {
-          reply.status(404).send({
-            error: "Resource not found",
-            code: "NOT_FOUND"
-          });
-          return;
-        }
-      }
-      const result = await client.isAuthorized(
-        options.resource,
-        options.action,
-        {
-          context: {
-            resource: resolvedResource || void 0
-          }
-        },
-        request
-      );
-      debug.debugGrant("Fastify", {
-        resource: options.resource,
-        action: options.action,
-        authorized: result.authorized,
-        ...result.authorized ? {} : { reason: result.reason }
-      });
-      if (!result.authorized) {
-        reply.status(403).send({
-          error: "Forbidden",
-          code: "FORBIDDEN",
-          reason: result.reason
-        });
-        return;
-      }
-      request.authorization = result;
-    } catch (error) {
-      if (error instanceof index.AuthenticationError) {
-        reply.status(401).send({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof index.AuthorizationError) {
-        reply.status(403).send({
-          error: error.message,
-          code: error.code,
-          reason: error.reason
-        });
-        return;
-      }
-      if (error instanceof index.BadRequestError) {
-        reply.status(400).send({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      if (error instanceof index.NotFoundError) {
-        reply.status(404).send({
-          error: error.message,
-          code: error.code
-        });
-        return;
-      }
-      throw error;
-    }
-  };
+	return async (request, reply) => {
+		try {
+			require_debug.debugGrant("Fastify", {
+				resource: options.resource,
+				action: options.action
+			});
+			if (!await require_grant_client.extractTokenFromRequest(request, client.config)) {
+				reply.status(401).send({
+					error: "Unauthorized",
+					code: "UNAUTHENTICATED"
+				});
+				return;
+			}
+			let resolvedResource = null;
+			if (options.resourceResolver) {
+				resolvedResource = await options.resourceResolver({
+					resourceSlug: options.resource,
+					request
+				});
+				if (!resolvedResource) {
+					reply.status(404).send({
+						error: "Resource not found",
+						code: "NOT_FOUND"
+					});
+					return;
+				}
+			}
+			const result = await client.isAuthorized(options.resource, options.action, { context: { resource: resolvedResource || void 0 } }, request);
+			require_debug.debugGrant("Fastify", {
+				resource: options.resource,
+				action: options.action,
+				authorized: result.authorized,
+				...result.authorized ? {} : { reason: result.reason }
+			});
+			if (!result.authorized) {
+				reply.status(403).send({
+					error: "Forbidden",
+					code: "FORBIDDEN",
+					reason: result.reason
+				});
+				return;
+			}
+			request.authorization = result;
+		} catch (error) {
+			if (error instanceof require_errors.AuthenticationError) {
+				reply.status(401).send({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof require_errors.AuthorizationError) {
+				reply.status(403).send({
+					error: error.message,
+					code: error.code,
+					reason: error.reason
+				});
+				return;
+			}
+			if (error instanceof require_errors.BadRequestError) {
+				reply.status(400).send({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			if (error instanceof require_errors.NotFoundError) {
+				reply.status(404).send({
+					error: error.message,
+					code: error.code
+				});
+				return;
+			}
+			throw error;
+		}
+	};
 }
-const grantPlugin = async (fastify, options) => {
-  const grant2 = new grantClient.GrantClient(options);
-  fastify.decorate("grant", grant2);
+/**
+* Fastify plugin that decorates the instance with GrantClient
+*
+* @example
+* ```ts
+* import Fastify from 'fastify';
+* import { grantPlugin } from '@grantjs/server/fastify';
+*
+* const fastify = Fastify();
+*
+* await fastify.register(grantPlugin, {
+*   apiUrl: 'https://api.grant.com',
+*   cookieName: 'grant-access-token',
+* });
+*
+* // GrantClient is now available on fastify.grant
+* const canEdit = await fastify.grant.isGranted('Document', 'Update', { scope });
+* ```
+*/
+var grantPlugin = async (fastify, options) => {
+	const grant = new require_grant_client.GrantClient(options);
+	fastify.decorate("grant", grant);
 };
-exports.AuthenticationError = index.AuthenticationError;
-exports.AuthorizationError = index.AuthorizationError;
-exports.BadRequestError = index.BadRequestError;
-exports.GrantServerError = index.GrantServerError;
-exports.NotFoundError = index.NotFoundError;
-exports.GrantClient = grantClient.GrantClient;
+//#endregion
+exports.AuthenticationError = require_errors.AuthenticationError;
+exports.AuthorizationError = require_errors.AuthorizationError;
+exports.BadRequestError = require_errors.BadRequestError;
+exports.GrantClient = require_grant_client.GrantClient;
+exports.GrantServerError = require_errors.GrantServerError;
+exports.NotFoundError = require_errors.NotFoundError;
 exports.grant = grant;
 exports.grantPlugin = grantPlugin;
-//# sourceMappingURL=fastify.cjs.map
+
+//# sourceMappingURL=fastify.cjs.map

package/dist/fastify.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"fastify.cjs","sources":["../src/fastify/plugin.ts"],"sourcesContent":["import { FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify';\n\nimport { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\nimport type { ResourceResolver, AuthorizationResult, GrantServerConfig } from '../types';\n\n/**\n * Extended Fastify Request with authorization result\n */\nexport interface AuthorizedFastifyRequest extends FastifyRequest {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Fastify preHandler hook\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create a Fastify preHandler hook to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/fastify';\n * import { GrantClient } from '@grantjs/server';\n * import Fastify from 'fastify';\n *\n * const fastify = Fastify();\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * fastify.get('/organizations', {\n *   preHandler: grant(grantClient, {\n *     resource: 'Organization',\n *     action: 'Query',\n *   }),\n * }, async (request, reply) => {\n *   return { organizations: [] };\n * });\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (request: AuthorizedFastifyRequest, reply: FastifyReply) => Promise<void> {\n  return async (request: AuthorizedFastifyRequest, reply: FastifyReply): Promise<void> => {\n    try {\n      debugGrant('Fastify', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(request, client.config);\n      if (!token) {\n        reply.status(401).send({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: request,\n        });\n\n        if (!resolvedResource) {\n          reply.status(404).send({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        request\n      );\n\n      debugGrant('Fastify', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        reply.status(403).send({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      request.authorization = result;\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        reply.status(401).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        reply.status(403).send({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        reply.status(400).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        reply.status(404).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - rethrow to let Fastify handle it\n      throw error;\n    }\n  };\n}\n\n/**\n * Fastify plugin options\n * Extends GrantServerConfig - plugin-specific options can be added here in the future\n */\nexport type GrantPluginOptions = GrantServerConfig;\n\n/**\n * Fastify plugin that decorates the instance with GrantClient\n *\n * @example\n * ```ts\n * import Fastify from 'fastify';\n * import { grantPlugin } from '@grantjs/server/fastify';\n *\n * const fastify = Fastify();\n *\n * await fastify.register(grantPlugin, {\n *   apiUrl: 'https://api.grant.com',\n *   cookieName: 'grant-access-token',\n * });\n *\n * // GrantClient is now available on fastify.grant\n * const canEdit = await fastify.grant.isGranted('Document', 'Update', { scope });\n * ```\n */\nexport const grantPlugin: FastifyPluginAsync<GrantPluginOptions> = async (fastify, options) => {\n  const grant = new GrantClient(options);\n\n  // Decorate Fastify instance with GrantClient\n  fastify.decorate('grant', grant);\n};\n\n// Type declaration for TypeScript\n// This will work once Fastify is installed (it's a peer dependency)\ndeclare module 'fastify' {\n  interface FastifyInstance {\n    grant: GrantClient;\n  }\n}\n"],"names":["debugGrant","extractTokenFromRequest","AuthenticationError","AuthorizationError","BadRequestError","NotFoundError","grant","GrantClient"],"mappings":";;;;;AAkDO,SAAS,MACd,QACA,SAC2E;AAC3E,SAAO,OAAO,SAAmC,UAAuC;AACtF,QAAI;AACFA,uBAAW,WAAW,EAAE,UAAU,QAAQ,UAAU,QAAQ,QAAQ,QAAQ;AAG5E,YAAM,QAAQ,MAAMC,YAAAA,wBAAwB,SAAS,OAAO,MAAM;AAClE,UAAI,CAAC,OAAO;AACV,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO;AAAA,UACP,MAAM;AAAA,QAAA,CACP;AACD;AAAA,MACF;AAGA,UAAI,mBAAmD;AAEvD,UAAI,QAAQ,kBAAkB;AAC5B,2BAAmB,MAAM,QAAQ,iBAAiB;AAAA,UAChD,cAAc,QAAQ;AAAA,UACtB;AAAA,QAAA,CACD;AAED,YAAI,CAAC,kBAAkB;AACrB,gBAAM,OAAO,GAAG,EAAE,KAAK;AAAA,YACrB,OAAO;AAAA,YACP,MAAM;AAAA,UAAA,CACP;AACD;AAAA,QACF;AAAA,MACF;AAGA,YAAM,SAAS,MAAM,OAAO;AAAA,QAC1B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,UACE,SAAS;AAAA,YACP,UAAU,oBAAoB;AAAA,UAAA;AAAA,QAChC;AAAA,QAEF;AAAA,MAAA;AAGFD,YAAAA,WAAW,WAAW;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,GAAI,OAAO,aAAa,CAAA,IAAK,EAAE,QAAQ,OAAO,OAAA;AAAA,MAAO,CACtD;AAED,UAAI,CAAC,OAAO,YAAY;AACtB,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO;AAAA,UACP,MAAM;AAAA,UACN,QAAQ,OAAO;AAAA,QAAA,CAChB;AACD;AAAA,MACF;AAGA,cAAQ,gBAAgB;AAAA,IAC1B,SAAS,OAAO;AAEd,UAAI,iBAAiBE,MAAAA,qBAAqB;AACxC,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,oBAAoB;AACvC,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,UACZ,QAAQ,MAAM;AAAA,QAAA,CACf;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,iBAAiB;AACpC,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAEA,UAAI,iBAAiBC,MAAAA,eAAe;AAClC,cAAM,OAAO,GAAG,EAAE,KAAK;AAAA,UACrB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QAAA,CACb;AACD;AAAA,MACF;AAGA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AA2BO,MAAM,cAAsD,OAAO,SAAS,YAAY;AAC7F,QAAMC,SAAQ,IAAIC,YAAAA,YAAY,OAAO;AAGrC,UAAQ,SAAS,SAASD,MAAK;AACjC;;;;;;;;;"}
+{"version":3,"file":"fastify.cjs","names":[],"sources":["../src/fastify/plugin.ts"],"sourcesContent":["import { FastifyPluginAsync, FastifyReply, FastifyRequest } from 'fastify';\n\nimport { AuthenticationError, AuthorizationError, BadRequestError, NotFoundError } from '../errors';\nimport { GrantClient } from '../grant-client';\nimport type { AuthorizationResult, GrantServerConfig, ResourceResolver } from '../types';\nimport { debugGrant } from '../utils/debug';\nimport { extractTokenFromRequest } from '../utils/token-extractor';\n\n/**\n * Extended Fastify Request with authorization result\n */\nexport interface AuthorizedFastifyRequest extends FastifyRequest {\n  authorization?: AuthorizationResult;\n}\n\n/**\n * Options for Fastify preHandler hook\n */\nexport interface GrantOptions {\n  /** The resource slug to check (e.g., \"Organization\", \"Project\", \"Document\") */\n  resource: string;\n  /** The action to check (e.g., \"Query\", \"Create\", \"Update\", \"Delete\") */\n  action: string;\n  /** Custom resource resolver for condition evaluation */\n  resourceResolver?: ResourceResolver;\n}\n\n/**\n * Create a Fastify preHandler hook to check if user is granted permission\n *\n * @example\n * ```ts\n * import { grant } from '@grantjs/server/fastify';\n * import { GrantClient } from '@grantjs/server';\n * import Fastify from 'fastify';\n *\n * const fastify = Fastify();\n * const grantClient = new GrantClient({ apiUrl: 'https://api.grant.com' });\n *\n * fastify.get('/organizations', {\n *   preHandler: grant(grantClient, {\n *     resource: 'Organization',\n *     action: 'Query',\n *   }),\n * }, async (request, reply) => {\n *   return { organizations: [] };\n * });\n * ```\n */\nexport function grant(\n  client: GrantClient,\n  options: GrantOptions\n): (request: AuthorizedFastifyRequest, reply: FastifyReply) => Promise<void> {\n  return async (request: AuthorizedFastifyRequest, reply: FastifyReply): Promise<void> => {\n    try {\n      debugGrant('Fastify', { resource: options.resource, action: options.action });\n\n      // 1. Check authentication (token must be present)\n      const token = await extractTokenFromRequest(request, client.config);\n      if (!token) {\n        reply.status(401).send({\n          error: 'Unauthorized',\n          code: 'UNAUTHENTICATED',\n        });\n        return;\n      }\n\n      // 2. Optionally resolve resource for condition evaluation\n      let resolvedResource: Record<string, unknown> | null = null;\n\n      if (options.resourceResolver) {\n        resolvedResource = await options.resourceResolver({\n          resourceSlug: options.resource,\n          request: request,\n        });\n\n        if (!resolvedResource) {\n          reply.status(404).send({\n            error: 'Resource not found',\n            code: 'NOT_FOUND',\n          });\n          return;\n        }\n      }\n\n      // 3. Check authorization (pass request for token extraction; scope comes from JWT claims)\n      const result = await client.isAuthorized(\n        options.resource,\n        options.action,\n        {\n          context: {\n            resource: resolvedResource || undefined,\n          },\n        },\n        request\n      );\n\n      debugGrant('Fastify', {\n        resource: options.resource,\n        action: options.action,\n        authorized: result.authorized,\n        ...(result.authorized ? {} : { reason: result.reason }),\n      });\n\n      if (!result.authorized) {\n        reply.status(403).send({\n          error: 'Forbidden',\n          code: 'FORBIDDEN',\n          reason: result.reason,\n        });\n        return;\n      }\n\n      // 4. Attach authorization result to request for downstream use\n      request.authorization = result;\n    } catch (error) {\n      // Handle known errors\n      if (error instanceof AuthenticationError) {\n        reply.status(401).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof AuthorizationError) {\n        reply.status(403).send({\n          error: error.message,\n          code: error.code,\n          reason: error.reason,\n        });\n        return;\n      }\n\n      if (error instanceof BadRequestError) {\n        reply.status(400).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      if (error instanceof NotFoundError) {\n        reply.status(404).send({\n          error: error.message,\n          code: error.code,\n        });\n        return;\n      }\n\n      // Unknown error - rethrow to let Fastify handle it\n      throw error;\n    }\n  };\n}\n\n/**\n * Fastify plugin options\n * Extends GrantServerConfig - plugin-specific options can be added here in the future\n */\nexport type GrantPluginOptions = GrantServerConfig;\n\n/**\n * Fastify plugin that decorates the instance with GrantClient\n *\n * @example\n * ```ts\n * import Fastify from 'fastify';\n * import { grantPlugin } from '@grantjs/server/fastify';\n *\n * const fastify = Fastify();\n *\n * await fastify.register(grantPlugin, {\n *   apiUrl: 'https://api.grant.com',\n *   cookieName: 'grant-access-token',\n * });\n *\n * // GrantClient is now available on fastify.grant\n * const canEdit = await fastify.grant.isGranted('Document', 'Update', { scope });\n * ```\n */\nexport const grantPlugin: FastifyPluginAsync<GrantPluginOptions> = async (fastify, options) => {\n  const grant = new GrantClient(options);\n\n  // Decorate Fastify instance with GrantClient\n  fastify.decorate('grant', grant);\n};\n\n// Type declaration for TypeScript\n// This will work once Fastify is installed (it's a peer dependency)\ndeclare module 'fastify' {\n  interface FastifyInstance {\n    grant: GrantClient;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAgB,MACd,QACA,SAC2E;AAC3E,QAAO,OAAO,SAAmC,UAAuC;AACtF,MAAI;AACF,iBAAA,WAAW,WAAW;IAAE,UAAU,QAAQ;IAAU,QAAQ,QAAQ;IAAQ,CAAC;AAI7E,OAAI,CAAC,MADe,qBAAA,wBAAwB,SAAS,OAAO,OAAO,EACvD;AACV,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO;KACP,MAAM;KACP,CAAC;AACF;;GAIF,IAAI,mBAAmD;AAEvD,OAAI,QAAQ,kBAAkB;AAC5B,uBAAmB,MAAM,QAAQ,iBAAiB;KAChD,cAAc,QAAQ;KACb;KACV,CAAC;AAEF,QAAI,CAAC,kBAAkB;AACrB,WAAM,OAAO,IAAI,CAAC,KAAK;MACrB,OAAO;MACP,MAAM;MACP,CAAC;AACF;;;GAKJ,MAAM,SAAS,MAAM,OAAO,aAC1B,QAAQ,UACR,QAAQ,QACR,EACE,SAAS,EACP,UAAU,oBAAoB,KAAA,GAC/B,EACF,EACD,QACD;AAED,iBAAA,WAAW,WAAW;IACpB,UAAU,QAAQ;IAClB,QAAQ,QAAQ;IAChB,YAAY,OAAO;IACnB,GAAI,OAAO,aAAa,EAAE,GAAG,EAAE,QAAQ,OAAO,QAAQ;IACvD,CAAC;AAEF,OAAI,CAAC,OAAO,YAAY;AACtB,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO;KACP,MAAM;KACN,QAAQ,OAAO;KAChB,CAAC;AACF;;AAIF,WAAQ,gBAAgB;WACjB,OAAO;AAEd,OAAI,iBAAiB,eAAA,qBAAqB;AACxC,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,oBAAoB;AACvC,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO,MAAM;KACb,MAAM,MAAM;KACZ,QAAQ,MAAM;KACf,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,iBAAiB;AACpC,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAGF,OAAI,iBAAiB,eAAA,eAAe;AAClC,UAAM,OAAO,IAAI,CAAC,KAAK;KACrB,OAAO,MAAM;KACb,MAAM,MAAM;KACb,CAAC;AACF;;AAIF,SAAM;;;;;;;;;;;;;;;;;;;;;;;AA8BZ,IAAa,cAAsD,OAAO,SAAS,YAAY;CAC7F,MAAM,QAAQ,IAAI,qBAAA,YAAY,QAAQ;AAGtC,SAAQ,SAAS,SAAS,MAAM"}