@korajs/server 0.1.7 → 0.3.1

package/dist/index.d.cts

@@ -420,6 +420,100 @@ declare class TokenAuthProvider implements AuthProvider {
     authenticate(token: string): Promise<AuthContext | null>;
 }
 
+/**
+ * Validates a Kora auth JWT and returns identity claims.
+ * This interface matches the signature of TokenManager.validateToken()
+ * from @korajs/auth without requiring a direct import.
+ */
+interface TokenValidator {
+    validateToken(token: string): {
+        sub: string;
+        dev: string;
+        type: string;
+    } | null;
+}
+/**
+ * Looks up a user by ID. Returns null if the user doesn't exist.
+ * This interface matches InMemoryUserStore.findById() from @korajs/auth
+ * without requiring a direct import.
+ */
+interface UserLookup {
+    findById(userId: string): Promise<{
+        id: string;
+        email: string;
+        name: string;
+    } | null>;
+}
+/**
+ * Optional device touch callback for updating last-seen timestamps.
+ */
+interface DeviceToucher {
+    touchDevice(deviceId: string): Promise<void>;
+}
+/**
+ * Configuration for creating a KoraAuthProvider.
+ */
+interface KoraAuthProviderOptions {
+    /**
+     * Token validator that verifies JWT signatures and returns claims.
+     * Typically a `TokenManager` instance from `@korajs/auth/server`.
+     */
+    tokenValidator: TokenValidator;
+    /**
+     * User lookup for verifying the user still exists.
+     * Typically an `InMemoryUserStore` instance from `@korajs/auth/server`.
+     */
+    userLookup: UserLookup;
+    /**
+     * Optional device tracker for updating last-seen timestamps.
+     * Typically the same `InMemoryUserStore` if it implements `touchDevice`.
+     */
+    deviceTracker?: DeviceToucher;
+    /**
+     * Optional scope resolver. Called with the user ID to determine
+     * which collections/records the user can sync.
+     */
+    resolveScopes?: (userId: string) => Promise<Record<string, Record<string, unknown>>>;
+}
+/**
+ * Auth provider that bridges `@korajs/auth` token management with the
+ * sync server's authentication layer.
+ *
+ * Validates access tokens issued by `@korajs/auth`'s `TokenManager`,
+ * verifies the user still exists, and optionally computes per-user
+ * sync scopes. This is the recommended way to connect @korajs/auth
+ * to @korajs/server.
+ *
+ * @example
+ * ```typescript
+ * import { TokenManager, InMemoryUserStore } from '@korajs/auth/server'
+ * import { KoraAuthProvider, KoraSyncServer } from '@korajs/server'
+ *
+ * const tokenManager = new TokenManager({ secret: 'my-secret' })
+ * const userStore = new InMemoryUserStore()
+ *
+ * const auth = new KoraAuthProvider({
+ *   tokenValidator: tokenManager,
+ *   userLookup: userStore,
+ *   deviceTracker: userStore,
+ *   resolveScopes: async (userId) => ({
+ *     forms: { userId },
+ *     responses: { formOwnerId: userId },
+ *   }),
+ * })
+ *
+ * const server = new KoraSyncServer({ store, auth })
+ * ```
+ */
+declare class KoraAuthProvider implements AuthProvider {
+    private readonly tokenValidator;
+    private readonly userLookup;
+    private readonly deviceTracker;
+    private readonly resolveScopes;
+    constructor(options: KoraAuthProviderOptions);
+    authenticate(token: string): Promise<AuthContext | null>;
+}
+
 /**
  * In-memory server store for testing and quick prototyping.
  * Not suitable for production — data does not survive process restart.
@@ -557,4 +651,4 @@ declare class NoAuthProvider implements AuthProvider {
  */
 declare function createKoraServer(config: KoraSyncServerConfig): KoraSyncServer;
 
-export { type AuthContext, type AuthProvider, ClientSession, type ClientSessionOptions, type HttpPollResponse, HttpServerTransport, type HttpSyncRequest, type HttpSyncResponse, KoraSyncServer, type KoraSyncServerConfig, MemoryServerStore, NoAuthProvider, PostgresServerStore, type ProductionServer, type ProductionServerConfig, type RelayCallback, ServerCloseHandler, ServerErrorHandler, ServerMessageHandler, type ServerStatus, type ServerStore, ServerTransport, type SessionState, SqliteServerStore, TokenAuthProvider, type TokenAuthProviderOptions, type WsServerConstructor, type WsServerLike, WsServerTransport, type WsServerTransportOptions, type WsWebSocket, createKoraServer, createPostgresServerStore, createProductionServer, createSqliteServerStore };
+export { type AuthContext, type AuthProvider, ClientSession, type ClientSessionOptions, type HttpPollResponse, HttpServerTransport, type HttpSyncRequest, type HttpSyncResponse, KoraAuthProvider, type KoraAuthProviderOptions, KoraSyncServer, type KoraSyncServerConfig, MemoryServerStore, NoAuthProvider, PostgresServerStore, type ProductionServer, type ProductionServerConfig, type RelayCallback, ServerCloseHandler, ServerErrorHandler, ServerMessageHandler, type ServerStatus, type ServerStore, ServerTransport, type SessionState, SqliteServerStore, TokenAuthProvider, type TokenAuthProviderOptions, type WsServerConstructor, type WsServerLike, WsServerTransport, type WsServerTransportOptions, type WsWebSocket, createKoraServer, createPostgresServerStore, createProductionServer, createSqliteServerStore };

package/dist/index.d.ts

@@ -420,6 +420,100 @@ declare class TokenAuthProvider implements AuthProvider {
     authenticate(token: string): Promise<AuthContext | null>;
 }
 
+/**
+ * Validates a Kora auth JWT and returns identity claims.
+ * This interface matches the signature of TokenManager.validateToken()
+ * from @korajs/auth without requiring a direct import.
+ */
+interface TokenValidator {
+    validateToken(token: string): {
+        sub: string;
+        dev: string;
+        type: string;
+    } | null;
+}
+/**
+ * Looks up a user by ID. Returns null if the user doesn't exist.
+ * This interface matches InMemoryUserStore.findById() from @korajs/auth
+ * without requiring a direct import.
+ */
+interface UserLookup {
+    findById(userId: string): Promise<{
+        id: string;
+        email: string;
+        name: string;
+    } | null>;
+}
+/**
+ * Optional device touch callback for updating last-seen timestamps.
+ */
+interface DeviceToucher {
+    touchDevice(deviceId: string): Promise<void>;
+}
+/**
+ * Configuration for creating a KoraAuthProvider.
+ */
+interface KoraAuthProviderOptions {
+    /**
+     * Token validator that verifies JWT signatures and returns claims.
+     * Typically a `TokenManager` instance from `@korajs/auth/server`.
+     */
+    tokenValidator: TokenValidator;
+    /**
+     * User lookup for verifying the user still exists.
+     * Typically an `InMemoryUserStore` instance from `@korajs/auth/server`.
+     */
+    userLookup: UserLookup;
+    /**
+     * Optional device tracker for updating last-seen timestamps.
+     * Typically the same `InMemoryUserStore` if it implements `touchDevice`.
+     */
+    deviceTracker?: DeviceToucher;
+    /**
+     * Optional scope resolver. Called with the user ID to determine
+     * which collections/records the user can sync.
+     */
+    resolveScopes?: (userId: string) => Promise<Record<string, Record<string, unknown>>>;
+}
+/**
+ * Auth provider that bridges `@korajs/auth` token management with the
+ * sync server's authentication layer.
+ *
+ * Validates access tokens issued by `@korajs/auth`'s `TokenManager`,
+ * verifies the user still exists, and optionally computes per-user
+ * sync scopes. This is the recommended way to connect @korajs/auth
+ * to @korajs/server.
+ *
+ * @example
+ * ```typescript
+ * import { TokenManager, InMemoryUserStore } from '@korajs/auth/server'
+ * import { KoraAuthProvider, KoraSyncServer } from '@korajs/server'
+ *
+ * const tokenManager = new TokenManager({ secret: 'my-secret' })
+ * const userStore = new InMemoryUserStore()
+ *
+ * const auth = new KoraAuthProvider({
+ *   tokenValidator: tokenManager,
+ *   userLookup: userStore,
+ *   deviceTracker: userStore,
+ *   resolveScopes: async (userId) => ({
+ *     forms: { userId },
+ *     responses: { formOwnerId: userId },
+ *   }),
+ * })
+ *
+ * const server = new KoraSyncServer({ store, auth })
+ * ```
+ */
+declare class KoraAuthProvider implements AuthProvider {
+    private readonly tokenValidator;
+    private readonly userLookup;
+    private readonly deviceTracker;
+    private readonly resolveScopes;
+    constructor(options: KoraAuthProviderOptions);
+    authenticate(token: string): Promise<AuthContext | null>;
+}
+
 /**
  * In-memory server store for testing and quick prototyping.
  * Not suitable for production — data does not survive process restart.
@@ -557,4 +651,4 @@ declare class NoAuthProvider implements AuthProvider {
  */
 declare function createKoraServer(config: KoraSyncServerConfig): KoraSyncServer;
 
-export { type AuthContext, type AuthProvider, ClientSession, type ClientSessionOptions, type HttpPollResponse, HttpServerTransport, type HttpSyncRequest, type HttpSyncResponse, KoraSyncServer, type KoraSyncServerConfig, MemoryServerStore, NoAuthProvider, PostgresServerStore, type ProductionServer, type ProductionServerConfig, type RelayCallback, ServerCloseHandler, ServerErrorHandler, ServerMessageHandler, type ServerStatus, type ServerStore, ServerTransport, type SessionState, SqliteServerStore, TokenAuthProvider, type TokenAuthProviderOptions, type WsServerConstructor, type WsServerLike, WsServerTransport, type WsServerTransportOptions, type WsWebSocket, createKoraServer, createPostgresServerStore, createProductionServer, createSqliteServerStore };
+export { type AuthContext, type AuthProvider, ClientSession, type ClientSessionOptions, type HttpPollResponse, HttpServerTransport, type HttpSyncRequest, type HttpSyncResponse, KoraAuthProvider, type KoraAuthProviderOptions, KoraSyncServer, type KoraSyncServerConfig, MemoryServerStore, NoAuthProvider, PostgresServerStore, type ProductionServer, type ProductionServerConfig, type RelayCallback, ServerCloseHandler, ServerErrorHandler, ServerMessageHandler, type ServerStatus, type ServerStore, ServerTransport, type SessionState, SqliteServerStore, TokenAuthProvider, type TokenAuthProviderOptions, type WsServerConstructor, type WsServerLike, WsServerTransport, type WsServerTransportOptions, type WsWebSocket, createKoraServer, createPostgresServerStore, createProductionServer, createSqliteServerStore };

package/dist/index.js

@@ -60,7 +60,7 @@ import { generateUUIDv7 as generateUUIDv72 } from "@korajs/core";
 import { and, asc, between, count, eq, sql } from "drizzle-orm";
 
 // src/store/drizzle-pg-schema.ts
-import { index, integer, pgTable, text } from "drizzle-orm/pg-core";
+import { bigint, index, integer, pgTable, text } from "drizzle-orm/pg-core";
 var pgOperations = pgTable(
   "operations",
   {
@@ -73,14 +73,14 @@ var pgOperations = pgTable(
     // JSON-serialized, null for deletes
     previousData: text("previous_data"),
     // JSON-serialized, null for insert/delete
-    wallTime: integer("wall_time").notNull(),
+    wallTime: bigint("wall_time", { mode: "number" }).notNull(),
     logical: integer("logical").notNull(),
     timestampNodeId: text("timestamp_node_id").notNull(),
     sequenceNumber: integer("sequence_number").notNull(),
     causalDeps: text("causal_deps").notNull().default("[]"),
     // JSON array of op IDs
     schemaVersion: integer("schema_version").notNull(),
-    receivedAt: integer("received_at").notNull()
+    receivedAt: bigint("received_at", { mode: "number" }).notNull()
   },
   (table) => ({
     nodeSeqIdx: index("idx_pg_node_seq").on(table.nodeId, table.sequenceNumber),
@@ -91,7 +91,7 @@ var pgOperations = pgTable(
 var pgSyncState = pgTable("sync_state", {
   nodeId: text("node_id").primaryKey(),
   maxSequenceNumber: integer("max_sequence_number").notNull(),
-  lastSeenAt: integer("last_seen_at").notNull()
+  lastSeenAt: bigint("last_seen_at", { mode: "number" }).notNull()
 });
 
 // src/store/postgres-server-store.ts
@@ -186,13 +186,13 @@ var PostgresServerStore = class {
 				record_id TEXT NOT NULL,
 				data TEXT,
 				previous_data TEXT,
-				wall_time INTEGER NOT NULL,
+				wall_time BIGINT NOT NULL,
 				logical INTEGER NOT NULL,
 				timestamp_node_id TEXT NOT NULL,
 				sequence_number INTEGER NOT NULL,
 				causal_deps TEXT NOT NULL DEFAULT '[]',
 				schema_version INTEGER NOT NULL,
-				received_at INTEGER NOT NULL
+				received_at BIGINT NOT NULL
 			)
 		`);
     await this.db.execute(
@@ -208,7 +208,7 @@ var PostgresServerStore = class {
 			CREATE TABLE IF NOT EXISTS sync_state (
 				node_id TEXT PRIMARY KEY,
 				max_sequence_number INTEGER NOT NULL,
-				last_seen_at INTEGER NOT NULL
+				last_seen_at BIGINT NOT NULL
 			)
 		`);
   }
@@ -1138,6 +1138,46 @@ var TokenAuthProvider = class {
   }
 };
 
+// src/auth/kora-auth-provider.ts
+var KoraAuthProvider = class {
+  tokenValidator;
+  userLookup;
+  deviceTracker;
+  resolveScopes;
+  constructor(options) {
+    this.tokenValidator = options.tokenValidator;
+    this.userLookup = options.userLookup;
+    this.deviceTracker = options.deviceTracker;
+    this.resolveScopes = options.resolveScopes;
+  }
+  async authenticate(token) {
+    const payload = this.tokenValidator.validateToken(token);
+    if (payload === null) {
+      return null;
+    }
+    if (payload.type !== "access") {
+      return null;
+    }
+    const user = await this.userLookup.findById(payload.sub);
+    if (user === null) {
+      return null;
+    }
+    if (this.deviceTracker) {
+      await this.deviceTracker.touchDevice(payload.dev);
+    }
+    const scopes = this.resolveScopes ? await this.resolveScopes(payload.sub) : void 0;
+    return {
+      userId: payload.sub,
+      scopes,
+      metadata: {
+        deviceId: payload.dev,
+        email: user.email,
+        name: user.name
+      }
+    };
+  }
+};
+
 // src/server/create-server.ts
 function createKoraServer(config) {
   return new KoraSyncServer(config);
@@ -1178,6 +1218,11 @@ function createProductionServer(config) {
         res.setHeader("Cross-Origin-Opener-Policy", "same-origin");
         res.setHeader("Cross-Origin-Embedder-Policy", "require-corp");
         const url = new URL(req.url || "/", `http://${req.headers.host}`);
+        if (url.pathname === "/health") {
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ status: "ok", timestamp: Date.now() }));
+          return;
+        }
         let filePath = join(distDir, url.pathname);
         if (!extname(filePath)) {
           const indexPath = join(filePath, "index.html");
@@ -1240,6 +1285,7 @@ function createProductionServer(config) {
 export {
   ClientSession,
   HttpServerTransport,
+  KoraAuthProvider,
   KoraSyncServer,
   MemoryServerStore,
   NoAuthProvider,