@hypersonic-js/core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Joaquim Dalton-Pereira
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/Readme.md

@@ -0,0 +1,52 @@
+# @hypersonic/core
+
+The core of **Hypersonic.js** — a modern Django-inspired full-stack TypeScript framework. One install gives you Express, Inertia + React + Vite + Tailwind, Prisma, and Better Auth, all pre-wired together.
+
+📖 **[hypersonic-js.com](https://hypersonic-js.com)**
+
+## Install
+
+```bash
+npm install @hypersonic/core
+npm install --save-dev prisma @prisma/client
+```
+
+For a single-package install of everything, use [`@hypersonic/complete`](https://www.npmjs.com/package/@hypersonic/complete) instead.
+
+## Quick start
+
+**`hypersonic.config.ts`** at your project root:
+
+```ts
+import { defineConfig } from '@hypersonic/core'
+
+export default defineConfig({
+  server: { port: 3000, host: 'localhost' },
+  auth: { trustedOrigins: ['http://localhost:3000'] },
+  inertia: { ssr: true },
+})
+```
+
+**`.env`**:
+
+```bash
+DATABASE_URL="postgresql://localhost:5432/myapp"
+BETTER_AUTH_SECRET="your-secret-at-least-32-characters-long"
+```
+
+**`server.ts`**:
+
+```ts
+import { PrismaClient } from '@prisma/client'
+import { createApp, loadConfig } from '@hypersonic/core'
+
+const { config, env } = await loadConfig()
+const app = await createApp({ config, env, prisma: new PrismaClient() })
+await app.start()
+```
+
+Full documentation at **[hypersonic-js.com](https://hypersonic-js.com)**.
+
+## License
+
+MIT © [Zesuperaker](https://github.com/Zesuperaker)

package/dist/auth/middleware.d.ts

@@ -0,0 +1,8 @@
+import type { Application } from 'express';
+import type { AuthInstance } from './setup.js';
+/**
+ * Mounts the Better Auth request handler on all /api/auth/* routes.
+ * Must be called before Inertia middleware so auth routes are handled first.
+ */
+export declare function mountAuth(app: Application, auth: AuthInstance): void;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/auth/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAGpE"}

package/dist/auth/middleware.js

@@ -0,0 +1,10 @@
+import { toNodeHandler } from 'better-auth/node';
+/**
+ * Mounts the Better Auth request handler on all /api/auth/* routes.
+ * Must be called before Inertia middleware so auth routes are handled first.
+ */
+export function mountAuth(app, auth) {
+    // Express 5 uses named wildcard params — *splat captures everything after /api/auth/
+    app.all('/api/auth/*splat', toNodeHandler(auth));
+}
+//# sourceMappingURL=middleware.js.map

package/dist/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAIhD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAgB,EAAE,IAAkB;IAC5D,qFAAqF;IACrF,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;AAClD,CAAC"}

package/dist/auth/setup.d.ts

@@ -0,0 +1,9 @@
+import { betterAuth } from 'better-auth';
+import type { AuthSetupOptions } from './types.js';
+export type AuthInstance = ReturnType<typeof betterAuth>;
+/**
+ * Creates and returns a configured Better Auth instance.
+ * OAuth social providers are only wired in when credentials are supplied.
+ */
+export declare function createAuth(options: AuthSetupOptions): AuthInstance;
+//# sourceMappingURL=setup.d.ts.map

package/dist/auth/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/auth/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAKxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;AAExD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CA2BlE"}

package/dist/auth/setup.js

@@ -0,0 +1,27 @@
+import { betterAuth } from 'better-auth';
+import { prismaAdapter } from 'better-auth/adapters/prisma';
+import { detectProvider } from '../utils/detect-provider.js';
+/**
+ * Creates and returns a configured Better Auth instance.
+ * OAuth social providers are only wired in when credentials are supplied.
+ */
+export function createAuth(options) {
+    const provider = detectProvider(options.databaseUrl);
+    const socialProviders = {};
+    if (options.providers?.github !== undefined) {
+        socialProviders.github = options.providers.github;
+    }
+    if (options.providers?.google !== undefined) {
+        socialProviders.google = options.providers.google;
+    }
+    const hasSocialProviders = Object.keys(socialProviders).length > 0;
+    const authOptions = {
+        secret: options.secret,
+        trustedOrigins: options.trustedOrigins,
+        database: prismaAdapter(options.prisma, { provider }),
+        emailAndPassword: { enabled: true },
+        ...(hasSocialProviders ? { socialProviders } : {}),
+    };
+    return betterAuth(authOptions);
+}
+//# sourceMappingURL=setup.js.map

package/dist/auth/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/auth/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAG3D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAK5D;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAyB;IAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAEpD,MAAM,eAAe,GAAoB,EAAE,CAAA;IAE3C,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,eAAe,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAmC,CAAA;IAChF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,eAAe,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAmC,CAAA;IAChF,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAElE,MAAM,WAAW,GAAsB;QACrC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,aAAa,CACrB,OAAO,CAAC,MAA6C,EACrD,EAAE,QAAQ,EAAE,CACb;QACD,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACnC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAA;IAED,OAAO,UAAU,CAAC,WAAW,CAAC,CAAA;AAChC,CAAC"}

package/dist/auth/types.d.ts

@@ -0,0 +1,16 @@
+export interface SocialProviderCredentials {
+    clientId: string;
+    clientSecret: string;
+}
+export interface AuthSetupOptions {
+    secret: string;
+    trustedOrigins: string[];
+    databaseUrl: string;
+    prisma: unknown;
+    providers?: {
+        github?: SocialProviderCredentials;
+        google?: SocialProviderCredentials;
+    };
+}
+export type { betterAuth as BetterAuth } from 'better-auth';
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,yBAAyB,CAAA;QAClC,MAAM,CAAC,EAAE,yBAAyB,CAAA;KACnC,CAAA;CACF;AAGD,YAAY,EAAE,UAAU,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/auth/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":""}

package/dist/config/define-config.d.ts

@@ -0,0 +1,7 @@
+import type { HypersonicConfig } from './types.js';
+/**
+ * Type-safe helper for defining your Hypersonic configuration.
+ * Use this as the default export in hypersonic.config.ts.
+ */
+export declare function defineConfig(config: HypersonicConfig): HypersonicConfig;
+//# sourceMappingURL=define-config.d.ts.map

package/dist/config/define-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-config.d.ts","sourceRoot":"","sources":["../../src/config/define-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAEvE"}

package/dist/config/define-config.js

@@ -0,0 +1,8 @@
+/**
+ * Type-safe helper for defining your Hypersonic configuration.
+ * Use this as the default export in hypersonic.config.ts.
+ */
+export function defineConfig(config) {
+    return config;
+}
+//# sourceMappingURL=define-config.js.map

package/dist/config/define-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-config.js","sourceRoot":"","sources":["../../src/config/define-config.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/config/env.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import type { HypersonicConfig } from './types.js';
+/**
+ * Builds a Zod schema for environment variables.
+ * Required vars are derived from what is enabled in the config —
+ * e.g. enabling GitHub OAuth makes GITHUB_CLIENT_ID required.
+ */
+export declare function buildEnvSchema(config: HypersonicConfig): z.ZodObject<z.ZodRawShape>;
+export type Env = {
+    DATABASE_URL: string;
+    BETTER_AUTH_SECRET: string;
+    GITHUB_CLIENT_ID?: string;
+    GITHUB_CLIENT_SECRET?: string;
+    GOOGLE_CLIENT_ID?: string;
+    GOOGLE_CLIENT_SECRET?: string;
+};
+/**
+ * Validates process.env against the config-derived schema.
+ * Throws a descriptive error listing every missing or invalid variable.
+ */
+export declare function validateEnv(config: HypersonicConfig, rawEnv?: NodeJS.ProcessEnv): Env;
+//# sourceMappingURL=env.d.ts.map

package/dist/config/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AASlD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAsBnF;AAED,MAAM,MAAM,GAAG,GAAG;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,gBAAgB,EACxB,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,GAAG,CAYL"}

package/dist/config/env.js

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+const baseShape = {
+    DATABASE_URL: z.string().min(1, 'DATABASE_URL is required'),
+    BETTER_AUTH_SECRET: z
+        .string()
+        .min(32, 'BETTER_AUTH_SECRET must be at least 32 characters'),
+};
+/**
+ * Builds a Zod schema for environment variables.
+ * Required vars are derived from what is enabled in the config —
+ * e.g. enabling GitHub OAuth makes GITHUB_CLIENT_ID required.
+ */
+export function buildEnvSchema(config) {
+    const shape = { ...baseShape };
+    if (config.auth.providers?.github === true) {
+        shape['GITHUB_CLIENT_ID'] = z
+            .string()
+            .min(1, 'GITHUB_CLIENT_ID is required when GitHub provider is enabled');
+        shape['GITHUB_CLIENT_SECRET'] = z
+            .string()
+            .min(1, 'GITHUB_CLIENT_SECRET is required when GitHub provider is enabled');
+    }
+    if (config.auth.providers?.google === true) {
+        shape['GOOGLE_CLIENT_ID'] = z
+            .string()
+            .min(1, 'GOOGLE_CLIENT_ID is required when Google provider is enabled');
+        shape['GOOGLE_CLIENT_SECRET'] = z
+            .string()
+            .min(1, 'GOOGLE_CLIENT_SECRET is required when Google provider is enabled');
+    }
+    return z.object(shape);
+}
+/**
+ * Validates process.env against the config-derived schema.
+ * Throws a descriptive error listing every missing or invalid variable.
+ */
+export function validateEnv(config, rawEnv = process.env) {
+    const schema = buildEnvSchema(config);
+    const result = schema.safeParse(rawEnv);
+    if (!result.success) {
+        const messages = result.error.issues
+            .map((i) => `  - ${i.path.join('.')}: ${i.message}`)
+            .join('\n');
+        throw new Error(`Hypersonic: Environment validation failed:\n${messages}`);
+    }
+    return result.data;
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,SAAS,GAAG;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC3D,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,EAAE,mDAAmD,CAAC;CAChE,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,MAAM,KAAK,GAA8B,EAAE,GAAG,SAAS,EAAE,CAAA;IAEzD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC;aAC1B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC,CAAA;QACzE,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC;aAC9B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,EAAE,kEAAkE,CAAC,CAAA;IAC/E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC;aAC1B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC,CAAA;QACzE,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC;aAC9B,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,EAAE,kEAAkE,CAAC,CAAA;IAC/E,CAAC;IAED,OAAO,CAAC,CAAC,MAAM,CAAC,KAAsB,CAAC,CAAA;AACzC,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAwB,EACxB,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAEvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC,IAAW,CAAA;AAC3B,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,24 @@
+import type { HypersonicConfig } from './types.js';
+import { type Env } from './env.js';
+export interface LoadedConfig {
+    config: HypersonicConfig;
+    env: Env;
+}
+/**
+ * Isolated so tests can inject a mock importer without touching the filesystem.
+ */
+export declare function importConfigFile(configUrl: string): Promise<{
+    default?: HypersonicConfig;
+}>;
+/**
+ * Loads hypersonic.config.ts from the project root, validates all required
+ * environment variables, and returns the resolved config + env.
+ *
+ * @param cwd       - project root (defaults to process.cwd())
+ * @param rawEnv    - environment variables (defaults to process.env)
+ * @param importer  - override the dynamic import for testing
+ */
+export declare function loadConfig(cwd?: string, rawEnv?: NodeJS.ProcessEnv, importer?: (url: string) => Promise<{
+    default?: HypersonicConfig;
+}>): Promise<LoadedConfig>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAe,KAAK,GAAG,EAAE,MAAM,UAAU,CAAA;AAEhD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,gBAAgB,CAAA;IACxB,GAAG,EAAE,GAAG,CAAA;CACT;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAEzC;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,GAAE,MAAsB,EAC3B,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,QAAQ,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAoB,GACpF,OAAO,CAAC,YAAY,CAAC,CA0BvB"}

package/dist/config/loader.js

@@ -0,0 +1,37 @@
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { validateEnv } from './env.js';
+/**
+ * Isolated so tests can inject a mock importer without touching the filesystem.
+ */
+export async function importConfigFile(configUrl) {
+    return import(configUrl);
+}
+/**
+ * Loads hypersonic.config.ts from the project root, validates all required
+ * environment variables, and returns the resolved config + env.
+ *
+ * @param cwd       - project root (defaults to process.cwd())
+ * @param rawEnv    - environment variables (defaults to process.env)
+ * @param importer  - override the dynamic import for testing
+ */
+export async function loadConfig(cwd = process.cwd(), rawEnv = process.env, importer = importConfigFile) {
+    const configPath = resolve(cwd, 'hypersonic.config.ts');
+    const configUrl = pathToFileURL(configPath).href;
+    let mod;
+    try {
+        mod = await importer(configUrl);
+    }
+    catch (err) {
+        throw new Error(`Hypersonic: Failed to load hypersonic.config.ts at ${configPath}.\n` +
+            `Make sure the file exists and has a valid default export.\n` +
+            `Detail: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (mod.default === undefined || mod.default === null) {
+        throw new Error('Hypersonic: hypersonic.config.ts must export a config via defineConfig() as the default export.');
+    }
+    const config = mod.default;
+    const env = validateEnv(config, rawEnv);
+    return { config, env };
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,WAAW,EAAY,MAAM,UAAU,CAAA;AAOhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB;IAEjB,OAAO,MAAM,CAAC,SAAS,CAA4C,CAAA;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,SAA4B,OAAO,CAAC,GAAG,EACvC,WAAqE,gBAAgB;IAErF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;IACvD,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAA;IAEhD,IAAI,GAAmC,CAAA;IAEvC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,KAAK;YACnE,6DAA6D;YAC7D,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChE,CAAA;IACH,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAA;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEvC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AACxB,CAAC"}

package/dist/config/types.d.ts

@@ -0,0 +1,22 @@
+export interface ServerConfig {
+    port: number;
+    host: string;
+}
+export interface AuthProviders {
+    github?: boolean;
+    google?: boolean;
+}
+export interface AuthConfig {
+    trustedOrigins: string[];
+    providers?: AuthProviders;
+}
+export interface InertiaConfig {
+    ssr: boolean;
+    version?: string;
+}
+export interface HypersonicConfig {
+    server: ServerConfig;
+    auth: AuthConfig;
+    inertia: InertiaConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,SAAS,CAAC,EAAE,aAAa,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,EAAE,aAAa,CAAA;CACvB"}

package/dist/config/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":""}

package/dist/database/client.d.ts

@@ -0,0 +1,19 @@
+export interface PrismaClientLike {
+    $disconnect(): Promise<void>;
+}
+/**
+ * Registers the application's PrismaClient instance.
+ * Called automatically by createApp() — pass your PrismaClient there.
+ */
+export declare function setPrismaClient(client: PrismaClientLike): void;
+/**
+ * Returns the registered PrismaClient instance.
+ * Throws if createApp() has not been called yet.
+ */
+export declare function getPrismaClient(): PrismaClientLike;
+/**
+ * Disconnects the PrismaClient and clears the singleton.
+ * Called automatically by app.stop().
+ */
+export declare function disconnectPrismaClient(): Promise<void>;
+//# sourceMappingURL=client.d.ts.map

package/dist/database/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/database/client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAE9D;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAQlD;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK5D"}

package/dist/database/client.js

@@ -0,0 +1,30 @@
+let instance = null;
+/**
+ * Registers the application's PrismaClient instance.
+ * Called automatically by createApp() — pass your PrismaClient there.
+ */
+export function setPrismaClient(client) {
+    instance = client;
+}
+/**
+ * Returns the registered PrismaClient instance.
+ * Throws if createApp() has not been called yet.
+ */
+export function getPrismaClient() {
+    if (instance === null) {
+        throw new Error('Hypersonic: PrismaClient has not been initialised. ' +
+            'Pass your PrismaClient instance to createApp({ prisma }).');
+    }
+    return instance;
+}
+/**
+ * Disconnects the PrismaClient and clears the singleton.
+ * Called automatically by app.stop().
+ */
+export async function disconnectPrismaClient() {
+    if (instance !== null) {
+        await instance.$disconnect();
+        instance = null;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/database/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/database/client.ts"],"names":[],"mappings":"AAIA,IAAI,QAAQ,GAA4B,IAAI,CAAA;AAE5C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,QAAQ,GAAG,MAAM,CAAA;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,2DAA2D,CAC9D,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QAC5B,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+export { defineConfig } from './config/define-config.js';
+export { loadConfig, importConfigFile } from './config/loader.js';
+export { validateEnv, buildEnvSchema } from './config/env.js';
+export type { HypersonicConfig, ServerConfig, AuthConfig, InertiaConfig, AuthProviders } from './config/types.js';
+export type { Env } from './config/env.js';
+export type { LoadedConfig } from './config/loader.js';
+export { createApp } from './server/app.js';
+export type { CreateAppOptions, HypersonicApp } from './server/types.js';
+export { getPrismaClient, setPrismaClient, disconnectPrismaClient } from './database/client.js';
+export type { PrismaClientLike } from './database/client.js';
+export { createAuth } from './auth/setup.js';
+export { mountAuth } from './auth/middleware.js';
+export type { AuthSetupOptions, SocialProviderCredentials } from './auth/types.js';
+export { createInertiaMiddleware, createInertiaErrorHandler } from './inertia/middleware.js';
+export { createViteSetup } from './inertia/vite.js';
+export type { InertiaPage, InertiaOptions, ViteSetup } from './inertia/types.js';
+export { HttpError, NotFoundError, UnauthorizedError, ForbiddenError, ValidationError } from './utils/errors.js';
+export { detectProvider } from './utils/detect-provider.js';
+export type { DatabaseProvider } from './utils/detect-provider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC7D,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjH,YAAY,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGxE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC/F,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAG5D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,YAAY,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAGlF,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAGhF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAChH,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA"}

package/dist/index.js

@@ -0,0 +1,18 @@
+// Config
+export { defineConfig } from './config/define-config.js';
+export { loadConfig, importConfigFile } from './config/loader.js';
+export { validateEnv, buildEnvSchema } from './config/env.js';
+// Server
+export { createApp } from './server/app.js';
+// Database
+export { getPrismaClient, setPrismaClient, disconnectPrismaClient } from './database/client.js';
+// Auth
+export { createAuth } from './auth/setup.js';
+export { mountAuth } from './auth/middleware.js';
+// Inertia
+export { createInertiaMiddleware, createInertiaErrorHandler } from './inertia/middleware.js';
+export { createViteSetup } from './inertia/vite.js';
+// Utils
+export { HttpError, NotFoundError, UnauthorizedError, ForbiddenError, ValidationError } from './utils/errors.js';
+export { detectProvider } from './utils/detect-provider.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAK7D,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAG3C,WAAW;AACX,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAG/F,OAAO;AACP,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAGhD,UAAU;AACV,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,QAAQ;AACR,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAChH,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA"}

package/dist/inertia/middleware.d.ts

@@ -0,0 +1,24 @@
+import type { Application, Request, Response, NextFunction } from 'express';
+import type { InertiaOptions } from './types.js';
+/**
+ * Returns an error-handling middleware that intercepts HttpErrors on Inertia
+ * requests and redirects back to the referring page (or '/' as a fallback)
+ * instead of returning a plain JSON response that Inertia cannot render.
+ *
+ * Register this AFTER your routes and BEFORE your plain-JSON error handler so
+ * that the Inertia client always receives a redirect it can follow.
+ *
+ * @example
+ * ```ts
+ * registerRoutes(app, prisma, auth)        // your routes
+ * app.use(createInertiaErrorHandler())     // Inertia-aware errors
+ * app.use(plainJsonErrorHandler)           // fallback for non-Inertia
+ * ```
+ */
+export declare function createInertiaErrorHandler(): (err: unknown, req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Mounts the Inertia middleware + Vite integration onto the Express app.
+ * This must be called before routes are registered.
+ */
+export declare function createInertiaMiddleware(app: Application, options: InertiaOptions): Promise<void>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/inertia/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/inertia/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAA;AAC3F,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,YAAY,CAAA;AA+B7D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,IAAI,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,KACf,IAAI,CAWR;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/inertia/middleware.js

@@ -0,0 +1,94 @@
+import { createViteSetup } from './vite.js';
+import { HttpError } from '../utils/errors.js';
+const INERTIA_HEADER = 'x-inertia';
+const INERTIA_VERSION_HEADER = 'x-inertia-version';
+function escapeJson(str) {
+    return str
+        .replace(/&/g, '\\u0026')
+        .replace(/</g, '\\u003c')
+        .replace(/>/g, '\\u003e')
+        .replace(/'/g, '\\u0027');
+}
+function buildHtml(page, assetTags) {
+    const pageJson = escapeJson(JSON.stringify(page));
+    return `<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    ${assetTags}
+  </head>
+  <body>
+    <script type="application/json" data-page="app">${pageJson}</script>
+    <div id="app"></div>
+  </body>
+</html>`;
+}
+/**
+ * Returns an error-handling middleware that intercepts HttpErrors on Inertia
+ * requests and redirects back to the referring page (or '/' as a fallback)
+ * instead of returning a plain JSON response that Inertia cannot render.
+ *
+ * Register this AFTER your routes and BEFORE your plain-JSON error handler so
+ * that the Inertia client always receives a redirect it can follow.
+ *
+ * @example
+ * ```ts
+ * registerRoutes(app, prisma, auth)        // your routes
+ * app.use(createInertiaErrorHandler())     // Inertia-aware errors
+ * app.use(plainJsonErrorHandler)           // fallback for non-Inertia
+ * ```
+ */
+export function createInertiaErrorHandler() {
+    return (err, req, res, next) => {
+        if (!(err instanceof HttpError) || !req.headers[INERTIA_HEADER]) {
+            next(err);
+            return;
+        }
+        const referer = req.headers['referer'];
+        const redirectUrl = typeof referer === 'string' && referer.length > 0 ? referer : '/';
+        res.redirect(303, redirectUrl);
+    };
+}
+/**
+ * Mounts the Inertia middleware + Vite integration onto the Express app.
+ * This must be called before routes are registered.
+ */
+export async function createInertiaMiddleware(app, options) {
+    const version = options.version ?? '1';
+    const vite = await createViteSetup(options.ssr);
+    // Mount Vite dev server or static file serving
+    app.use(vite.middleware);
+    // Inertia protocol middleware
+    const inertiaMiddleware = (req, res, next) => {
+        const isInertiaRequest = Boolean(req.headers[INERTIA_HEADER]);
+        // Asset version mismatch — force a full page reload
+        if (isInertiaRequest &&
+            req.method === 'GET' &&
+            req.headers[INERTIA_VERSION_HEADER] !== version) {
+            res.setHeader('X-Inertia-Location', req.url);
+            res.status(409).end();
+            return;
+        }
+        res.inertia = (component, props = {}) => {
+            const page = {
+                component,
+                props,
+                url: req.originalUrl,
+                version,
+            };
+            if (isInertiaRequest) {
+                res.setHeader('X-Inertia', 'true');
+                res.setHeader('Vary', 'X-Inertia');
+                res.status(200).json(page);
+                return;
+            }
+            const html = buildHtml(page, vite.assetTags());
+            res.setHeader('Content-Type', 'text/html; charset=utf-8');
+            res.status(200).send(html);
+        };
+        next();
+    };
+    app.use(inertiaMiddleware);
+}
+//# sourceMappingURL=middleware.js.map

package/dist/inertia/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/inertia/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,cAAc,GAAG,WAAW,CAAA;AAClC,MAAM,sBAAsB,GAAG,mBAAmB,CAAA;AAElD,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,IAAiB,EAAE,SAAiB;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IACjD,OAAO;;;;;MAKH,SAAS;;;sDAGuC,QAAQ;;;QAGtD,CAAA;AACR,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB;IAMvC,OAAO,CAAC,GAAY,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC7E,IAAI,CAAC,CAAC,GAAG,YAAY,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,CAAC,CAAA;YACT,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;QACrF,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAChC,CAAC,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAgB,EAChB,OAAuB;IAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAA;IACtC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAE/C,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAA4B,CAAC,CAAA;IAE1C,8BAA8B;IAC9B,MAAM,iBAAiB,GAAmB,CACxC,GAAY,EACZ,GAAa,EACb,IAAkB,EACZ,EAAE;QACR,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;QAE7D,oDAAoD;QACpD,IACE,gBAAgB;YAChB,GAAG,CAAC,MAAM,KAAK,KAAK;YACpB,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,OAAO,EAC/C,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YACrB,OAAM;QACR,CAAC;QAED,GAAG,CAAC,OAAO,GAAG,CAAC,SAAiB,EAAE,QAAiC,EAAE,EAAQ,EAAE;YAC7E,MAAM,IAAI,GAAgB;gBACxB,SAAS;gBACT,KAAK;gBACL,GAAG,EAAE,GAAG,CAAC,WAAW;gBACpB,OAAO;aACR,CAAA;YAED,IAAI,gBAAgB,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC1B,OAAM;YACR,CAAC;YAED,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;YAC9C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAA;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;AAC5B,CAAC"}

package/dist/inertia/types.d.ts

@@ -0,0 +1,26 @@
+import type { RequestHandler } from 'express';
+export interface InertiaPage {
+    component: string;
+    props: Record<string, unknown>;
+    url: string;
+    version: string;
+}
+export interface InertiaOptions {
+    ssr: boolean;
+    version?: string;
+}
+export interface ViteSetup {
+    middleware: RequestHandler;
+    assetTags: () => string;
+}
+/**
+ * Augment Express Response with an optional res.inertia() helper.
+ * It is optional in the type because it is added at runtime by the middleware.
+ * After createInertiaMiddleware() mounts, it is always present on res.
+ */
+declare module 'express' {
+    interface Response {
+        inertia?: (component: string, props?: Record<string, unknown>) => void;
+    }
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/inertia/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/inertia/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,OAAO,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,cAAc,CAAA;IAC1B,SAAS,EAAE,MAAM,MAAM,CAAA;CACxB;AAED;;;;GAIG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,QAAQ;QAChB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KACvE;CACF"}

package/dist/inertia/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/inertia/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/inertia/types.ts"],"names":[],"mappings":""}

package/dist/inertia/vite.d.ts

@@ -0,0 +1,7 @@
+import type { ViteSetup } from './types.js';
+/**
+ * Returns the correct Vite setup (dev server or static file serving)
+ * based on NODE_ENV. Isolated as a named export so tests can mock it.
+ */
+export declare function createViteSetup(_ssr: boolean): Promise<ViteSetup>;
+//# sourceMappingURL=vite.d.ts.map

package/dist/inertia/vite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../../src/inertia/vite.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAoD3C;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAKvE"}

package/dist/inertia/vite.js

@@ -0,0 +1,50 @@
+const DEV_ASSET_TAGS = [
+    '<script type="module" src="/@vite/client"></script>',
+    '<script type="module" src="/resources/js/app.tsx"></script>',
+].join('\n    ');
+async function createDevSetup() {
+    const { createServer } = await import('vite');
+    const viteServer = await createServer({
+        server: { middlewareMode: true },
+        appType: 'custom',
+    });
+    return {
+        middleware: viteServer.middlewares,
+        assetTags: () => DEV_ASSET_TAGS,
+    };
+}
+async function createProdSetup() {
+    const { readFileSync } = await import('node:fs');
+    const { static: expressStatic } = await import('express');
+    let tags = '';
+    try {
+        const raw = readFileSync('public/.vite/manifest.json', 'utf-8');
+        const manifest = JSON.parse(raw);
+        const entry = manifest['resources/js/app.tsx'];
+        if (entry !== undefined) {
+            const cssLinks = entry.css
+                ?.map((c) => `<link rel="stylesheet" href="/${c}" />`)
+                .join('\n    ') ?? '';
+            tags = `${cssLinks}\n    <script type="module" src="/${entry.file}"></script>`;
+        }
+    }
+    catch {
+        // No manifest found — assets will be missing but the server still boots
+    }
+    const captured = tags;
+    return {
+        middleware: expressStatic('public'),
+        assetTags: () => captured,
+    };
+}
+/**
+ * Returns the correct Vite setup (dev server or static file serving)
+ * based on NODE_ENV. Isolated as a named export so tests can mock it.
+ */
+export async function createViteSetup(_ssr) {
+    if (process.env['NODE_ENV'] === 'production') {
+        return createProdSetup();
+    }
+    return createDevSetup();
+}
+//# sourceMappingURL=vite.js.map

package/dist/inertia/vite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.js","sourceRoot":"","sources":["../../src/inertia/vite.ts"],"names":[],"mappings":"AAGA,MAAM,cAAc,GAAG;IACrB,qDAAqD;IACrD,6DAA6D;CAC9D,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAEhB,KAAK,UAAU,cAAc;IAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC;QACpC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;QAChC,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAA;IAEF,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,WAAwC;QAC/D,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc;KAChC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IAChD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IAEzD,IAAI,IAAI,GAAG,EAAE,CAAA;IAEb,IAAI,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkC,CAAA;QACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,QAAQ,GACZ,KAAK,CAAC,GAAG;gBACP,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC;iBACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;YACzB,IAAI,GAAG,GAAG,QAAQ,qCAAqC,KAAK,CAAC,IAAI,aAAa,CAAA;QAChF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAA;IAErB,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAmB;QACrD,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC1B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAa;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,EAAE,CAAC;QAC7C,OAAO,eAAe,EAAE,CAAA;IAC1B,CAAC;IACD,OAAO,cAAc,EAAE,CAAA;AACzB,CAAC"}

package/dist/server/app.d.ts

@@ -0,0 +1,19 @@
+import type { CreateAppOptions, HypersonicApp } from './types.js';
+/**
+ * Creates and returns a fully wired Hypersonic application.
+ * The auth instance created internally is returned on `app.auth` so
+ * callers can pass it to route registration without creating a second instance.
+ *
+ * @example
+ * ```ts
+ * import { PrismaClient } from '@prisma/client'
+ * import { createApp, loadConfig } from '@hypersonic/core'
+ *
+ * const { config, env } = await loadConfig()
+ * const app = await createApp({ config, env, prisma: new PrismaClient() })
+ * registerRoutes(app.express, prisma, app.auth)
+ * await app.start()
+ * ```
+ */
+export declare function createApp(options: CreateAppOptions): Promise<HypersonicApp>;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AA4BjE;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BjF"}

package/dist/server/app.js

@@ -0,0 +1,61 @@
+import express from 'express';
+import { setPrismaClient } from '../database/client.js';
+import { createAuth } from '../auth/setup.js';
+import { mountAuth } from '../auth/middleware.js';
+import { createInertiaMiddleware } from '../inertia/middleware.js';
+import { createLifecycle } from './lifecycle.js';
+function resolveProviders(config, env) {
+    const providers = {};
+    const e = env;
+    if (config.auth.providers?.github === true) {
+        providers['github'] = {
+            clientId: e['GITHUB_CLIENT_ID'],
+            clientSecret: e['GITHUB_CLIENT_SECRET'],
+        };
+    }
+    if (config.auth.providers?.google === true) {
+        providers['google'] = {
+            clientId: e['GOOGLE_CLIENT_ID'],
+            clientSecret: e['GOOGLE_CLIENT_SECRET'],
+        };
+    }
+    return Object.keys(providers).length > 0 ? providers : undefined;
+}
+/**
+ * Creates and returns a fully wired Hypersonic application.
+ * The auth instance created internally is returned on `app.auth` so
+ * callers can pass it to route registration without creating a second instance.
+ *
+ * @example
+ * ```ts
+ * import { PrismaClient } from '@prisma/client'
+ * import { createApp, loadConfig } from '@hypersonic/core'
+ *
+ * const { config, env } = await loadConfig()
+ * const app = await createApp({ config, env, prisma: new PrismaClient() })
+ * registerRoutes(app.express, prisma, app.auth)
+ * await app.start()
+ * ```
+ */
+export async function createApp(options) {
+    const { config, env, prisma } = options;
+    const app = express();
+    app.use(express.json());
+    app.use(express.urlencoded({ extended: true }));
+    setPrismaClient(prisma);
+    const auth = createAuth({
+        secret: env.BETTER_AUTH_SECRET,
+        trustedOrigins: config.auth.trustedOrigins,
+        databaseUrl: env.DATABASE_URL,
+        prisma,
+        providers: resolveProviders(config, env),
+    });
+    mountAuth(app, auth);
+    await createInertiaMiddleware(app, {
+        ssr: config.inertia.ssr,
+        version: config.inertia.version,
+    });
+    const { start, stop } = createLifecycle(app, config);
+    return { express: app, auth, start, stop };
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAKhD,SAAS,gBAAgB,CACvB,MAAwB,EACxB,GAAQ;IAER,MAAM,SAAS,GAA+D,EAAE,CAAA;IAChF,MAAM,CAAC,GAAG,GAAyC,CAAA;IAEnD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,SAAS,CAAC,QAAQ,CAAC,GAAG;YACpB,QAAQ,EAAE,CAAC,CAAC,kBAAkB,CAAW;YACzC,YAAY,EAAE,CAAC,CAAC,sBAAsB,CAAW;SAClD,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,SAAS,CAAC,QAAQ,CAAC,GAAG;YACpB,QAAQ,EAAE,CAAC,CAAC,kBAAkB,CAAW;YACzC,YAAY,EAAE,CAAC,CAAC,sBAAsB,CAAW;SAClD,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AAClE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAEvC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;IAErB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACvB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE/C,eAAe,CAAC,MAAM,CAAC,CAAA;IAEvB,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,kBAAkB;QAC9B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;QAC1C,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM;QACN,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC;KACzC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAEpB,MAAM,uBAAuB,CAAC,GAAG,EAAE;QACnC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;KAC9B,CAAC,CAAA;IAEF,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAEpD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC"}

package/dist/server/lifecycle.d.ts

@@ -0,0 +1,8 @@
+import type { Application } from 'express';
+import type { HypersonicConfig } from '../config/types.js';
+export interface Lifecycle {
+    start: () => Promise<void>;
+    stop: () => Promise<void>;
+}
+export declare function createLifecycle(app: Application, config: HypersonicConfig): Lifecycle;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/server/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/server/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAG1D,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAmCrF"}

package/dist/server/lifecycle.js

@@ -0,0 +1,33 @@
+import { disconnectPrismaClient } from '../database/client.js';
+export function createLifecycle(app, config) {
+    let server = null;
+    async function start() {
+        return new Promise((resolve, reject) => {
+            server = app.listen(config.server.port, config.server.host, () => {
+                resolve();
+            });
+            server.on('error', reject);
+        });
+    }
+    async function stop() {
+        await disconnectPrismaClient();
+        return new Promise((resolve, reject) => {
+            if (server === null) {
+                resolve();
+                return;
+            }
+            const closing = server;
+            server = null;
+            closing.close((err) => {
+                if (err !== undefined) {
+                    reject(err);
+                }
+                else {
+                    resolve();
+                }
+            });
+        });
+    }
+    return { start, stop };
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/server/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/server/lifecycle.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAO9D,MAAM,UAAU,eAAe,CAAC,GAAgB,EAAE,MAAwB;IACxE,IAAI,MAAM,GAAkB,IAAI,CAAA;IAEhC,KAAK,UAAU,KAAK;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC/D,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,MAAM,sBAAsB,EAAE,CAAA;QAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAA;gBACT,OAAM;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAA;YACtB,MAAM,GAAG,IAAI,CAAA;YAEb,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACpB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,MAAM,CAAC,GAAG,CAAC,CAAA;gBACb,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAA;gBACX,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/server/types.d.ts

@@ -0,0 +1,17 @@
+import type { Application } from 'express';
+import type { HypersonicConfig } from '../config/types.js';
+import type { Env } from '../config/env.js';
+import type { PrismaClientLike } from '../database/client.js';
+import type { AuthInstance } from '../auth/setup.js';
+export interface CreateAppOptions {
+    config: HypersonicConfig;
+    env: Env;
+    prisma: PrismaClientLike;
+}
+export interface HypersonicApp {
+    express: Application;
+    auth: AuthInstance;
+    start: () => Promise<void>;
+    stop: () => Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,gBAAgB,CAAA;IACxB,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,CAAA;IACpB,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B"}

package/dist/server/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":""}

package/dist/utils/detect-provider.d.ts

@@ -0,0 +1,14 @@
+export type DatabaseProvider = 'postgresql' | 'mysql' | 'sqlite' | 'mongodb';
+/**
+ * Infers the database provider from the DATABASE_URL scheme.
+ * Used internally to configure Better Auth's Prisma adapter
+ * without requiring the developer to repeat the provider in hypersonic.config.ts.
+ *
+ * Accepted forms:
+ *   postgresql:// | postgres://   → postgresql
+ *   mysql:// | mysql2://          → mysql
+ *   mongodb:// | mongodb+srv://   → mongodb
+ *   file:                         → sqlite
+ */
+export declare function detectProvider(databaseUrl: string): DatabaseProvider;
+//# sourceMappingURL=detect-provider.d.ts.map

package/dist/utils/detect-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-provider.d.ts","sourceRoot":"","sources":["../../src/utils/detect-provider.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE5E;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CA8BpE"}

package/dist/utils/detect-provider.js

@@ -0,0 +1,31 @@
+/**
+ * Infers the database provider from the DATABASE_URL scheme.
+ * Used internally to configure Better Auth's Prisma adapter
+ * without requiring the developer to repeat the provider in hypersonic.config.ts.
+ *
+ * Accepted forms:
+ *   postgresql:// | postgres://   → postgresql
+ *   mysql:// | mysql2://          → mysql
+ *   mongodb:// | mongodb+srv://   → mongodb
+ *   file:                         → sqlite
+ */
+export function detectProvider(databaseUrl) {
+    if (databaseUrl.startsWith('postgresql://') ||
+        databaseUrl.startsWith('postgres://')) {
+        return 'postgresql';
+    }
+    if (databaseUrl.startsWith('mysql://') ||
+        databaseUrl.startsWith('mysql2://')) {
+        return 'mysql';
+    }
+    if (databaseUrl.startsWith('mongodb://') ||
+        databaseUrl.startsWith('mongodb+srv://')) {
+        return 'mongodb';
+    }
+    if (databaseUrl.startsWith('file:')) {
+        return 'sqlite';
+    }
+    throw new Error(`Hypersonic: unrecognised DATABASE_URL scheme — could not detect a database provider.\n` +
+        `  Expected one of: postgresql://, postgres://, mysql://, mysql2://, mongodb://, mongodb+srv://, file:`);
+}
+//# sourceMappingURL=detect-provider.js.map

package/dist/utils/detect-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-provider.js","sourceRoot":"","sources":["../../src/utils/detect-provider.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,IACE,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;QACvC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,EACrC,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,IACE,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;QAClC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EACnC,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IACE,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC;QACpC,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACxC,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wFAAwF;QACxF,uGAAuG,CACxG,CAAA;AACH,CAAC"}

package/dist/utils/errors.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Base class for all HTTP errors thrown within a Hypersonic application.
+ */
+export declare class HttpError extends Error {
+    readonly statusCode: number;
+    constructor(statusCode: number, message: string);
+}
+export declare class NotFoundError extends HttpError {
+    constructor(message?: string);
+}
+export declare class UnauthorizedError extends HttpError {
+    constructor(message?: string);
+}
+export declare class ForbiddenError extends HttpError {
+    constructor(message?: string);
+}
+export declare class ValidationError extends HttpError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,SAAgB,UAAU,EAAE,MAAM,CAAA;gBAEtB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKhD;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAc;CAIlC;AAED,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,OAAO,SAAiB;CAIrC;AAED,qBAAa,cAAe,SAAQ,SAAS;gBAC/B,OAAO,SAAc;CAIlC;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,SAAyB;CAI7C"}

package/dist/utils/errors.js

@@ -0,0 +1,36 @@
+/**
+ * Base class for all HTTP errors thrown within a Hypersonic application.
+ */
+export class HttpError extends Error {
+    statusCode;
+    constructor(statusCode, message) {
+        super(message);
+        this.name = 'HttpError';
+        this.statusCode = statusCode;
+    }
+}
+export class NotFoundError extends HttpError {
+    constructor(message = 'Not Found') {
+        super(404, message);
+        this.name = 'NotFoundError';
+    }
+}
+export class UnauthorizedError extends HttpError {
+    constructor(message = 'Unauthorized') {
+        super(401, message);
+        this.name = 'UnauthorizedError';
+    }
+}
+export class ForbiddenError extends HttpError {
+    constructor(message = 'Forbidden') {
+        super(403, message);
+        this.name = 'ForbiddenError';
+    }
+}
+export class ValidationError extends HttpError {
+    constructor(message = 'Unprocessable Entity') {
+        super(422, message);
+        this.name = 'ValidationError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClB,UAAU,CAAQ;IAElC,YAAY,UAAkB,EAAE,OAAe;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAO,GAAG,WAAW;QAC/B,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAO,GAAG,cAAc;QAClC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C,YAAY,OAAO,GAAG,WAAW;QAC/B,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAO,GAAG,sBAAsB;QAC1C,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF"}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@hypersonic-js/core",
+  "version": "0.1.0",
+  "description": "The core of Hypersonic.js — a modern Django-inspired full-stack TypeScript framework",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Zesuperaker/hypersonic.git"
+  },
+  "author": "Zesuperaker",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": "^24.0.0"
+  },
+  "dependencies": {
+    "@inertiajs/core": "3.3.0",
+    "@inertiajs/react": "3.3.0",
+    "@tailwindcss/vite": "4.3.0",
+    "@vitejs/plugin-react": "6.0.2",
+    "better-auth": "1.6.11",
+    "express": "5.2.1",
+    "react": "19.2.6",
+    "react-dom": "19.2.6",
+    "tailwindcss": "4.3.0",
+    "vite": "8.0.14",
+    "zod": "4.4.3"
+  },
+  "peerDependencies": {
+    "@prisma/client": "7.8.0",
+    "prisma": "7.8.0"
+  },
+  "devDependencies": {
+    "@prisma/client": "7.8.0",
+    "@types/express": "5.0.6",
+    "@types/node": "25.9.1",
+    "@types/react": "19.2.15",
+    "@types/react-dom": "19.2.3",
+    "@types/supertest": "7.2.0",
+    "@vitest/coverage-v8": "4.1.7",
+    "prisma": "7.8.0",
+    "supertest": "7.2.2",
+    "typescript": "6.0.3",
+    "vitest": "4.1.7"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "clean": "rm -rf dist coverage"
+  }
+}