@grantjs/server 1.0.0

package/dist/types.d.ts

@@ -0,0 +1,92 @@
+export type { Scope, Tenant } from '../../schema/src/index.ts';
+/**
+ * Configuration for the Grant server client
+ */
+export interface GrantServerConfig {
+    /**
+     * Grant API URL (e.g., "https://api.grant.com")
+     */
+    apiUrl: string;
+    /**
+     * Cookie name for access token (if using cookie-based auth)
+     * Default: 'grant-access-token'
+     */
+    cookieName?: string;
+    /**
+     * Custom function to extract token from request
+     * If provided, this takes precedence over default extraction (header/cookie)
+     */
+    getToken?: (request: unknown) => string | null | Promise<string | null>;
+    /**
+     * Custom fetch implementation
+     * Defaults to globalThis.fetch (Node.js 18+) or node-fetch
+     */
+    fetch?: typeof fetch;
+    /**
+     * Credentials mode for fetch requests
+     * Defaults to 'include' for cookie support
+     */
+    credentials?: RequestCredentials;
+}
+/**
+ * Result of an authorization check
+ */
+export interface AuthorizationResult {
+    /** Whether the action is authorized */
+    authorized: boolean;
+    /** Human-readable reason for the decision */
+    reason?: string;
+    /** The permission that matched (if authorized) */
+    matchedPermission?: Permission;
+}
+/**
+ * Options for permission checks
+ */
+export interface PermissionCheckOptions {
+    /** Resource context for condition evaluation */
+    context?: {
+        resource?: Record<string, unknown> | null;
+    };
+}
+/**
+ * Permission entity
+ */
+export interface Permission {
+    id: string;
+    name: string;
+    description?: string | null;
+    action: string;
+    resourceId?: string | null;
+    resource?: Resource | null;
+    condition?: unknown;
+}
+/**
+ * Resource entity
+ */
+export interface Resource {
+    id: string;
+    name: string;
+    slug: string;
+    description?: string | null;
+    actions: string[];
+}
+/**
+ * Error response from the API
+ */
+export interface ApiError {
+    error: string;
+    message?: string;
+    statusCode?: number;
+}
+/**
+ * Resource resolver function type
+ * Used to resolve resource data for condition evaluation
+ */
+export interface ResourceResolverParams {
+    resourceSlug: string;
+    request: unknown;
+    [key: string]: unknown;
+}
+export type ResourceResolverResult<T = Record<string, unknown>> = T | null;
+export type ResourceResolver<TResult = Record<string, unknown>> = (params: ResourceResolverParams) => Promise<ResourceResolverResult<TResult>>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAExE;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,UAAU,EAAE,OAAO,CAAC;IACpB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,UAAU,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,gDAAgD;IAChD,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC3C,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE3E,MAAM,MAAM,gBAAgB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAChE,MAAM,EAAE,sBAAsB,KAC3B,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/utils/debug.d.ts

@@ -0,0 +1,9 @@
+/** Whether Grant debug logging is enabled (set DEBUG_GRANT=1 in development). */
+export declare function isDebugGrant(): boolean;
+/**
+ * Log Grant integration debug info when DEBUG_GRANT=1.
+ * Used by Express middleware, Fastify grant hook, Next withGrant, and Nest GrantGuard.
+ * Set DEBUG_GRANT=1 in .env or the environment to see resource, action, and outcome in development.
+ */
+export declare function debugGrant(integration: string, data: Record<string, unknown>): void;
+//# sourceMappingURL=debug.d.ts.map

package/dist/utils/debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAEA,iFAAiF;AACjF,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGnF"}

package/dist/utils/token-extractor.d.ts

@@ -0,0 +1,14 @@
+import { GrantServerConfig } from '../types';
+/**
+ * Extract Bearer token from Authorization header
+ */
+export declare function extractBearerToken(authHeader: string | undefined): string | null;
+/**
+ * Extract token from cookies
+ */
+export declare function extractTokenFromCookies(cookieHeader: string | undefined, cookieName: string): string | null;
+/**
+ * Extract token from Express request
+ */
+export declare function extractTokenFromRequest(request: unknown, config: GrantServerConfig): Promise<string | null>;
+//# sourceMappingURL=token-extractor.d.ts.map

package/dist/utils/token-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-extractor.d.ts","sourceRoot":"","sources":["../../src/utils/token-extractor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAShF;AAkBD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAKf;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmDxB"}

package/package.json

@@ -0,0 +1,109 @@
+{
+  "name": "@grantjs/server",
+  "version": "1.0.0",
+  "description": "Server SDK for Grant authorization - Middleware and guards for Express, Fastify, NestJS, and Next.js",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./express": {
+      "types": "./dist/express/index.d.ts",
+      "import": "./dist/express.mjs",
+      "require": "./dist/express.cjs"
+    },
+    "./fastify": {
+      "types": "./dist/fastify/index.d.ts",
+      "import": "./dist/fastify.mjs",
+      "require": "./dist/fastify.cjs"
+    },
+    "./next": {
+      "types": "./dist/next/index.d.ts",
+      "import": "./dist/next.mjs",
+      "require": "./dist/next.cjs"
+    },
+    "./nest": {
+      "types": "./dist/nest/index.d.ts",
+      "import": "./dist/nest.mjs",
+      "require": "./dist/nest.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "keywords": [
+    "grant",
+    "authorization",
+    "permissions",
+    "rbac",
+    "role-based-access-control",
+    "express",
+    "fastify",
+    "nestjs",
+    "nextjs",
+    "middleware",
+    "access-control",
+    "typescript",
+    "multi-tenant",
+    "sdk",
+    "server"
+  ],
+  "author": {
+    "name": "Alejandro Heredia",
+    "email": "ale@logus.graphics",
+    "url": "https://logus.graphics"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/logusgraphics/grant.git",
+    "directory": "packages/@grantjs/server"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "@grantjs/schema": "1.0.0"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/node": "^24.7.2",
+    "@vitest/coverage-v8": "^3.2.4",
+    "eslint": "^9.37.0",
+    "express": "^5.1.0",
+    "fastify": "^5.7.2",
+    "next": "^16.0.0",
+    "@nestjs/common": "^11.0.0",
+    "@nestjs/core": "^11.0.0",
+    "typescript": "^5",
+    "vite": "^6.0.0",
+    "vite-plugin-dts": "^4.3.0",
+    "vitest": "^3.2.4"
+  },
+  "peerDependencies": {
+    "express": "^4 || ^5",
+    "fastify": "^4 || ^5",
+    "next": ">=13.0.0 <17.0.0",
+    "@nestjs/common": ">=10.0.0",
+    "@nestjs/core": ">=10.0.0"
+  },
+  "scripts": {
+    "build": "vite build",
+    "build:watch": "vite build --watch",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src --ext .ts",
+    "lint:fix": "eslint src --ext .ts --fix",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage"
+  }
+}