@lastshotlabs/bunshot 0.0.27 → 0.0.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (742) hide show
  1. package/.oclif.manifest.json +39 -0
  2. package/README.md +8282 -2147
  3. package/dist/cli/commands/init.js +690 -0
  4. package/dist/cli/index.js +6 -0
  5. package/dist/cli.js +4 -4
  6. package/dist/packages/bunshot-admin/src/index.d.ts +15 -0
  7. package/dist/packages/bunshot-admin/src/index.js +11 -0
  8. package/dist/packages/bunshot-admin/src/lib/resourceTypes.d.ts +8 -0
  9. package/dist/packages/bunshot-admin/src/lib/resourceTypes.js +33 -0
  10. package/dist/packages/bunshot-admin/src/lib/typedRoute.d.ts +14 -0
  11. package/dist/packages/bunshot-admin/src/lib/typedRoute.js +17 -0
  12. package/dist/packages/bunshot-admin/src/plugin.d.ts +4 -0
  13. package/dist/packages/bunshot-admin/src/plugin.js +46 -0
  14. package/dist/packages/bunshot-admin/src/providers/auth0Access.d.ts +6 -0
  15. package/dist/packages/bunshot-admin/src/providers/auth0Access.js +32 -0
  16. package/dist/packages/bunshot-admin/src/routes/admin.d.ts +10 -0
  17. package/dist/packages/bunshot-admin/src/routes/admin.js +923 -0
  18. package/dist/packages/bunshot-admin/src/routes/mail.d.ts +6 -0
  19. package/dist/packages/bunshot-admin/src/routes/mail.js +114 -0
  20. package/dist/packages/bunshot-admin/src/routes/permissions.d.ts +8 -0
  21. package/dist/packages/bunshot-admin/src/routes/permissions.js +315 -0
  22. package/dist/packages/bunshot-admin/src/types/config.d.ts +16 -0
  23. package/dist/packages/bunshot-admin/src/types/config.js +37 -0
  24. package/dist/packages/bunshot-admin/src/types/env.d.ts +14 -0
  25. package/dist/packages/bunshot-admin/src/types/provider.d.ts +1 -0
  26. package/dist/packages/bunshot-admin/src/types/provider.js +4 -0
  27. package/dist/packages/bunshot-auth/src/adapters/memoryAuth.d.ts +66 -0
  28. package/dist/packages/bunshot-auth/src/adapters/memoryAuth.js +1063 -0
  29. package/dist/packages/bunshot-auth/src/adapters/mongoAuth.d.ts +2 -0
  30. package/dist/packages/bunshot-auth/src/adapters/mongoAuth.js +536 -0
  31. package/dist/packages/bunshot-auth/src/adapters/sqliteAuth.d.ts +88 -0
  32. package/dist/packages/bunshot-auth/src/adapters/sqliteAuth.js +1366 -0
  33. package/dist/packages/bunshot-auth/src/admin/bunshotAccess.d.ts +2 -0
  34. package/dist/packages/bunshot-auth/src/admin/bunshotAccess.js +23 -0
  35. package/dist/packages/bunshot-auth/src/admin/bunshotUsers.d.ts +5 -0
  36. package/dist/packages/bunshot-auth/src/admin/bunshotUsers.js +131 -0
  37. package/dist/packages/bunshot-auth/src/bootstrap.d.ts +38 -0
  38. package/dist/packages/bunshot-auth/src/bootstrap.js +384 -0
  39. package/dist/packages/bunshot-auth/src/config/appConfig.d.ts +3 -0
  40. package/dist/packages/bunshot-auth/src/config/appConfig.js +4 -0
  41. package/dist/packages/bunshot-auth/src/config/authConfig.d.ts +478 -0
  42. package/dist/packages/bunshot-auth/src/config/authConfig.js +46 -0
  43. package/dist/packages/bunshot-auth/src/config/configLock.d.ts +2 -0
  44. package/dist/packages/bunshot-auth/src/config/configLock.js +10 -0
  45. package/dist/packages/bunshot-auth/src/index.d.ts +25 -0
  46. package/dist/packages/bunshot-auth/src/index.js +23 -0
  47. package/dist/packages/bunshot-auth/src/infra/mongo.d.ts +15 -0
  48. package/dist/packages/bunshot-auth/src/infra/mongo.js +44 -0
  49. package/dist/packages/bunshot-auth/src/infra/queue.d.ts +14 -0
  50. package/dist/packages/bunshot-auth/src/infra/queue.js +27 -0
  51. package/dist/packages/bunshot-auth/src/infra/redis.d.ts +5 -0
  52. package/dist/packages/bunshot-auth/src/infra/redis.js +15 -0
  53. package/dist/packages/bunshot-auth/src/infra/signing.d.ts +7 -0
  54. package/dist/packages/bunshot-auth/src/infra/signing.js +8 -0
  55. package/dist/packages/bunshot-auth/src/lib/accountLockout.d.ts +34 -0
  56. package/dist/packages/bunshot-auth/src/lib/accountLockout.js +244 -0
  57. package/dist/packages/bunshot-auth/src/lib/adapterTiers.d.ts +1 -0
  58. package/dist/packages/bunshot-auth/src/lib/adapterTiers.js +1 -0
  59. package/dist/packages/bunshot-auth/src/lib/authAdapter.d.ts +1 -0
  60. package/dist/packages/bunshot-auth/src/lib/authAdapter.js +1 -0
  61. package/dist/packages/bunshot-auth/src/lib/authContext.d.ts +15 -0
  62. package/dist/packages/bunshot-auth/src/lib/authContext.js +1 -0
  63. package/dist/packages/bunshot-auth/src/lib/authEventBus.d.ts +4 -0
  64. package/dist/packages/bunshot-auth/src/lib/authEventBus.js +15 -0
  65. package/dist/packages/bunshot-auth/src/lib/authRateLimit.d.ts +28 -0
  66. package/dist/packages/bunshot-auth/src/lib/authRateLimit.js +205 -0
  67. package/dist/{lib → packages/bunshot-auth/src/lib}/breachedPassword.d.ts +8 -2
  68. package/dist/{lib → packages/bunshot-auth/src/lib}/breachedPassword.js +22 -9
  69. package/dist/packages/bunshot-auth/src/lib/cache.d.ts +12 -0
  70. package/dist/packages/bunshot-auth/src/lib/cache.js +120 -0
  71. package/dist/packages/bunshot-auth/src/lib/clientIp.d.ts +4 -0
  72. package/dist/{lib → packages/bunshot-auth/src/lib}/clientIp.js +14 -7
  73. package/dist/packages/bunshot-auth/src/lib/cookieOptions.d.ts +27 -0
  74. package/dist/packages/bunshot-auth/src/lib/cookieOptions.js +33 -0
  75. package/dist/packages/bunshot-auth/src/lib/credentialStuffing.d.ts +40 -0
  76. package/dist/packages/bunshot-auth/src/lib/credentialStuffing.js +221 -0
  77. package/dist/packages/bunshot-auth/src/lib/deletionCancelToken.d.ts +19 -0
  78. package/dist/packages/bunshot-auth/src/lib/deletionCancelToken.js +148 -0
  79. package/dist/packages/bunshot-auth/src/lib/emailTemplates.d.ts +23 -0
  80. package/dist/packages/bunshot-auth/src/lib/emailTemplates.js +265 -0
  81. package/dist/packages/bunshot-auth/src/lib/emailVerification.d.ts +30 -0
  82. package/dist/packages/bunshot-auth/src/lib/emailVerification.js +200 -0
  83. package/dist/packages/bunshot-auth/src/lib/env.d.ts +1 -0
  84. package/dist/packages/bunshot-auth/src/lib/env.js +3 -0
  85. package/dist/packages/bunshot-auth/src/lib/fingerprint.js +36 -0
  86. package/dist/{lib → packages/bunshot-auth/src/lib}/groups.d.ts +15 -16
  87. package/dist/{lib → packages/bunshot-auth/src/lib}/groups.js +22 -34
  88. package/dist/packages/bunshot-auth/src/lib/jwks.d.ts +28 -0
  89. package/dist/packages/bunshot-auth/src/lib/jwks.js +79 -0
  90. package/dist/packages/bunshot-auth/src/lib/jwt.d.ts +12 -0
  91. package/dist/packages/bunshot-auth/src/lib/jwt.js +86 -0
  92. package/dist/{lib → packages/bunshot-auth/src/lib}/logger.js +3 -3
  93. package/dist/{lib → packages/bunshot-auth/src/lib}/m2m.d.ts +5 -4
  94. package/dist/{lib → packages/bunshot-auth/src/lib}/m2m.js +6 -10
  95. package/dist/packages/bunshot-auth/src/lib/magicLink.d.ts +13 -0
  96. package/dist/packages/bunshot-auth/src/lib/magicLink.js +145 -0
  97. package/dist/packages/bunshot-auth/src/lib/mfaChallenge.d.ts +60 -0
  98. package/dist/packages/bunshot-auth/src/lib/mfaChallenge.js +419 -0
  99. package/dist/packages/bunshot-auth/src/lib/oauth.d.ts +82 -0
  100. package/dist/packages/bunshot-auth/src/lib/oauth.js +177 -0
  101. package/dist/packages/bunshot-auth/src/lib/oauthCode.d.ts +19 -0
  102. package/dist/packages/bunshot-auth/src/lib/oauthCode.js +182 -0
  103. package/dist/packages/bunshot-auth/src/lib/oauthReauth.d.ts +19 -0
  104. package/dist/packages/bunshot-auth/src/lib/oauthReauth.js +255 -0
  105. package/dist/packages/bunshot-auth/src/lib/organization.d.ts +66 -0
  106. package/dist/packages/bunshot-auth/src/lib/organization.js +225 -0
  107. package/dist/packages/bunshot-auth/src/lib/passwordHistory.d.ts +12 -0
  108. package/dist/packages/bunshot-auth/src/lib/passwordHistory.js +31 -0
  109. package/dist/packages/bunshot-auth/src/lib/resetPassword.d.ts +20 -0
  110. package/dist/packages/bunshot-auth/src/lib/resetPassword.js +148 -0
  111. package/dist/packages/bunshot-auth/src/lib/roles.d.ts +9 -0
  112. package/dist/packages/bunshot-auth/src/lib/roles.js +93 -0
  113. package/dist/packages/bunshot-auth/src/lib/saml.d.ts +29 -0
  114. package/dist/packages/bunshot-auth/src/lib/saml.js +73 -0
  115. package/dist/packages/bunshot-auth/src/lib/samlRequestId.d.ts +13 -0
  116. package/dist/packages/bunshot-auth/src/lib/samlRequestId.js +129 -0
  117. package/dist/{lib → packages/bunshot-auth/src/lib}/scim.d.ts +7 -7
  118. package/dist/{lib → packages/bunshot-auth/src/lib}/scim.js +15 -13
  119. package/dist/packages/bunshot-auth/src/lib/securityEventWiring.d.ts +22 -0
  120. package/dist/packages/bunshot-auth/src/lib/securityEventWiring.js +65 -0
  121. package/dist/packages/bunshot-auth/src/lib/session.d.ts +45 -0
  122. package/dist/packages/bunshot-auth/src/lib/session.js +1211 -0
  123. package/dist/packages/bunshot-auth/src/lib/storeInfra.d.ts +26 -0
  124. package/dist/packages/bunshot-auth/src/lib/storeInfra.js +18 -0
  125. package/dist/{lib → packages/bunshot-auth/src/lib}/suspension.d.ts +3 -2
  126. package/dist/{lib → packages/bunshot-auth/src/lib}/suspension.js +2 -5
  127. package/dist/packages/bunshot-auth/src/lib/validateAdapter.d.ts +16 -0
  128. package/dist/packages/bunshot-auth/src/lib/validateAdapter.js +161 -0
  129. package/dist/packages/bunshot-auth/src/middleware/bearerAuth.d.ts +13 -0
  130. package/dist/packages/bunshot-auth/src/middleware/bearerAuth.js +58 -0
  131. package/dist/{middleware → packages/bunshot-auth/src/middleware}/csrf.d.ts +5 -4
  132. package/dist/packages/bunshot-auth/src/middleware/csrf.js +138 -0
  133. package/dist/packages/bunshot-auth/src/middleware/identify.d.ts +4 -0
  134. package/dist/packages/bunshot-auth/src/middleware/identify.js +124 -0
  135. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireMfaSetup.d.ts +2 -2
  136. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireMfaSetup.js +10 -8
  137. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireRole.d.ts +2 -2
  138. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireRole.js +20 -16
  139. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireScope.d.ts +2 -2
  140. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireScope.js +6 -6
  141. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireStepUp.d.ts +2 -2
  142. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireStepUp.js +8 -7
  143. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireVerifiedEmail.d.ts +2 -2
  144. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireVerifiedEmail.js +7 -6
  145. package/dist/packages/bunshot-auth/src/middleware/scimAuth.d.ts +8 -0
  146. package/dist/packages/bunshot-auth/src/middleware/scimAuth.js +29 -0
  147. package/dist/packages/bunshot-auth/src/middleware/userAuth.d.ts +3 -0
  148. package/dist/packages/bunshot-auth/src/middleware/userAuth.js +6 -0
  149. package/dist/{models → packages/bunshot-auth/src/models}/AuthUser.d.ts +12 -8
  150. package/dist/packages/bunshot-auth/src/models/AuthUser.js +53 -0
  151. package/dist/packages/bunshot-auth/src/models/Group.d.ts +19 -0
  152. package/dist/packages/bunshot-auth/src/models/Group.js +22 -0
  153. package/dist/{models → packages/bunshot-auth/src/models}/GroupMembership.d.ts +6 -8
  154. package/dist/packages/bunshot-auth/src/models/GroupMembership.js +19 -0
  155. package/dist/{models → packages/bunshot-auth/src/models}/M2MClient.d.ts +1 -1
  156. package/dist/{models → packages/bunshot-auth/src/models}/M2MClient.js +5 -5
  157. package/dist/packages/bunshot-auth/src/models/TenantRole.d.ts +13 -0
  158. package/dist/packages/bunshot-auth/src/models/TenantRole.js +17 -0
  159. package/dist/packages/bunshot-auth/src/plugin.d.ts +4 -0
  160. package/dist/packages/bunshot-auth/src/plugin.js +274 -0
  161. package/dist/packages/bunshot-auth/src/routes/auth.d.ts +15 -0
  162. package/dist/packages/bunshot-auth/src/routes/auth.js +1624 -0
  163. package/dist/packages/bunshot-auth/src/routes/groups.d.ts +4 -0
  164. package/dist/packages/bunshot-auth/src/routes/groups.js +481 -0
  165. package/dist/packages/bunshot-auth/src/routes/m2m.d.ts +2 -0
  166. package/dist/packages/bunshot-auth/src/routes/m2m.js +145 -0
  167. package/dist/packages/bunshot-auth/src/routes/mfa.d.ts +6 -0
  168. package/dist/packages/bunshot-auth/src/routes/mfa.js +991 -0
  169. package/dist/packages/bunshot-auth/src/routes/oauth.d.ts +3 -0
  170. package/dist/packages/bunshot-auth/src/routes/oauth.js +1727 -0
  171. package/dist/packages/bunshot-auth/src/routes/oidc.d.ts +2 -0
  172. package/dist/packages/bunshot-auth/src/routes/oidc.js +84 -0
  173. package/dist/packages/bunshot-auth/src/routes/organizations.d.ts +3 -0
  174. package/dist/packages/bunshot-auth/src/routes/organizations.js +741 -0
  175. package/dist/packages/bunshot-auth/src/routes/passkey.d.ts +2 -0
  176. package/dist/packages/bunshot-auth/src/routes/passkey.js +199 -0
  177. package/dist/packages/bunshot-auth/src/routes/saml.d.ts +2 -0
  178. package/dist/packages/bunshot-auth/src/routes/saml.js +226 -0
  179. package/dist/packages/bunshot-auth/src/routes/scim.d.ts +3 -0
  180. package/dist/packages/bunshot-auth/src/routes/scim.js +588 -0
  181. package/dist/packages/bunshot-auth/src/runtime.d.ts +52 -0
  182. package/dist/packages/bunshot-auth/src/runtime.js +11 -0
  183. package/dist/{schemas → packages/bunshot-auth/src/schemas}/auth.d.ts +4 -5
  184. package/dist/packages/bunshot-auth/src/schemas/auth.js +24 -0
  185. package/dist/packages/bunshot-auth/src/schemas/error.d.ts +10 -0
  186. package/dist/packages/bunshot-auth/src/schemas/error.js +10 -0
  187. package/dist/packages/bunshot-auth/src/schemas/success.d.ts +10 -0
  188. package/dist/packages/bunshot-auth/src/schemas/success.js +10 -0
  189. package/dist/packages/bunshot-auth/src/services/auth.d.ts +39 -0
  190. package/dist/packages/bunshot-auth/src/services/auth.js +378 -0
  191. package/dist/{services → packages/bunshot-auth/src/services}/mfa.d.ts +41 -17
  192. package/dist/{services → packages/bunshot-auth/src/services}/mfa.js +259 -183
  193. package/dist/packages/bunshot-auth/src/testing.d.ts +31 -0
  194. package/dist/packages/bunshot-auth/src/testing.js +23 -0
  195. package/dist/packages/bunshot-auth/src/types/adapter.d.ts +1 -0
  196. package/dist/packages/bunshot-auth/src/types/adapter.js +1 -0
  197. package/dist/packages/bunshot-auth/src/types/config.d.ts +152 -0
  198. package/dist/packages/bunshot-auth/src/types/config.js +179 -0
  199. package/dist/{routes → packages/bunshot-auth/src/types}/groups.d.ts +2 -3
  200. package/dist/packages/bunshot-auth/src/types/groups.js +1 -0
  201. package/dist/packages/bunshot-auth/src/types/oauthCode.d.ts +6 -0
  202. package/dist/packages/bunshot-auth/src/types/oauthCode.js +1 -0
  203. package/dist/packages/bunshot-auth/src/types/oauthReauth.d.ts +13 -0
  204. package/dist/packages/bunshot-auth/src/types/oauthReauth.js +1 -0
  205. package/dist/packages/bunshot-auth/src/types/redis.d.ts +1 -0
  206. package/dist/packages/bunshot-auth/src/types/redis.js +1 -0
  207. package/dist/packages/bunshot-auth/src/types/saml.d.ts +10 -0
  208. package/dist/packages/bunshot-auth/src/types/saml.js +1 -0
  209. package/dist/packages/bunshot-auth/src/types/session.d.ts +18 -0
  210. package/dist/packages/bunshot-auth/src/types/session.js +1 -0
  211. package/dist/packages/bunshot-auth/src/types/store.d.ts +1 -0
  212. package/dist/packages/bunshot-auth/src/types/store.js +1 -0
  213. package/dist/packages/bunshot-core/src/adminProvider.d.ts +95 -0
  214. package/dist/packages/bunshot-core/src/adminProvider.js +1 -0
  215. package/dist/packages/bunshot-core/src/auditLog.d.ts +34 -0
  216. package/dist/packages/bunshot-core/src/auditLog.js +1 -0
  217. package/dist/packages/bunshot-core/src/auth-adapter.d.ts +227 -0
  218. package/dist/packages/bunshot-core/src/auth-adapter.js +4 -0
  219. package/dist/packages/bunshot-core/src/authVariables.d.ts +14 -0
  220. package/dist/packages/bunshot-core/src/authVariables.js +4 -0
  221. package/dist/packages/bunshot-core/src/cache.d.ts +12 -0
  222. package/dist/packages/bunshot-core/src/cache.js +21 -0
  223. package/dist/{lib → packages/bunshot-core/src}/captcha.d.ts +1 -10
  224. package/dist/packages/bunshot-core/src/captcha.js +1 -0
  225. package/dist/packages/bunshot-core/src/clearRegistry.d.ts +6 -0
  226. package/dist/packages/bunshot-core/src/clearRegistry.js +17 -0
  227. package/dist/packages/bunshot-core/src/clientIp.d.ts +3 -0
  228. package/dist/packages/bunshot-core/src/clientIp.js +45 -0
  229. package/dist/packages/bunshot-core/src/configLock.d.ts +4 -0
  230. package/dist/packages/bunshot-core/src/configLock.js +7 -0
  231. package/dist/packages/bunshot-core/src/configValidation.d.ts +22 -0
  232. package/dist/packages/bunshot-core/src/configValidation.js +39 -0
  233. package/dist/packages/bunshot-core/src/constants.js +10 -0
  234. package/dist/packages/bunshot-core/src/context/bunshotContext.d.ts +232 -0
  235. package/dist/packages/bunshot-core/src/context/bunshotContext.js +1 -0
  236. package/dist/packages/bunshot-core/src/context/contextAccess.d.ts +3 -0
  237. package/dist/packages/bunshot-core/src/context/contextAccess.js +16 -0
  238. package/dist/packages/bunshot-core/src/context/contextStore.d.ts +16 -0
  239. package/dist/packages/bunshot-core/src/context/contextStore.js +31 -0
  240. package/dist/packages/bunshot-core/src/context/frameworkConfig.d.ts +38 -0
  241. package/dist/packages/bunshot-core/src/context/frameworkConfig.js +1 -0
  242. package/dist/packages/bunshot-core/src/context/index.d.ts +4 -0
  243. package/dist/packages/bunshot-core/src/context/index.js +2 -0
  244. package/dist/packages/bunshot-core/src/context.d.ts +40 -0
  245. package/dist/packages/bunshot-core/src/context.js +35 -0
  246. package/dist/packages/bunshot-core/src/coreContracts.d.ts +47 -0
  247. package/dist/packages/bunshot-core/src/coreContracts.js +1 -0
  248. package/dist/packages/bunshot-core/src/coreRegistrar.d.ts +6 -0
  249. package/dist/packages/bunshot-core/src/coreRegistrar.js +42 -0
  250. package/dist/{lib → packages/bunshot-core/src}/createRoute.d.ts +4 -30
  251. package/dist/{lib → packages/bunshot-core/src}/createRoute.js +39 -88
  252. package/dist/packages/bunshot-core/src/cronRegistry.d.ts +11 -0
  253. package/dist/packages/bunshot-core/src/cronRegistry.js +1 -0
  254. package/dist/packages/bunshot-core/src/crypto.d.ts +43 -0
  255. package/dist/packages/bunshot-core/src/crypto.js +74 -0
  256. package/dist/packages/bunshot-core/src/csrf.d.ts +8 -0
  257. package/dist/packages/bunshot-core/src/csrf.js +1 -0
  258. package/dist/packages/bunshot-core/src/defaults/defaultFingerprint.d.ts +7 -0
  259. package/dist/packages/bunshot-core/src/defaults/defaultFingerprint.js +19 -0
  260. package/dist/packages/bunshot-core/src/defaults/memoryCacheAdapter.d.ts +6 -0
  261. package/dist/packages/bunshot-core/src/defaults/memoryCacheAdapter.js +40 -0
  262. package/dist/packages/bunshot-core/src/defaults/memoryRateLimit.d.ts +6 -0
  263. package/dist/packages/bunshot-core/src/defaults/memoryRateLimit.js +24 -0
  264. package/dist/packages/bunshot-core/src/emailTemplates.d.ts +5 -0
  265. package/dist/packages/bunshot-core/src/emailTemplates.js +10 -0
  266. package/dist/{lib/HttpError.d.ts → packages/bunshot-core/src/errors.d.ts} +4 -1
  267. package/dist/{lib/HttpError.js → packages/bunshot-core/src/errors.js} +7 -1
  268. package/dist/packages/bunshot-core/src/eventBus.d.ts +270 -0
  269. package/dist/packages/bunshot-core/src/eventBus.js +143 -0
  270. package/dist/packages/bunshot-core/src/idempotency.d.ts +18 -0
  271. package/dist/packages/bunshot-core/src/idempotency.js +1 -0
  272. package/dist/packages/bunshot-core/src/index.d.ts +60 -0
  273. package/dist/packages/bunshot-core/src/index.js +34 -0
  274. package/dist/packages/bunshot-core/src/mail.d.ts +14 -0
  275. package/dist/packages/bunshot-core/src/mail.js +8 -0
  276. package/dist/packages/bunshot-core/src/memoryEviction.d.ts +24 -0
  277. package/dist/packages/bunshot-core/src/memoryEviction.js +52 -0
  278. package/dist/packages/bunshot-core/src/pagination.d.ts +45 -0
  279. package/dist/packages/bunshot-core/src/pagination.js +61 -0
  280. package/dist/packages/bunshot-core/src/permissions.d.ts +64 -0
  281. package/dist/packages/bunshot-core/src/permissions.js +27 -0
  282. package/dist/packages/bunshot-core/src/plugin.d.ts +44 -0
  283. package/dist/packages/bunshot-core/src/plugin.js +1 -0
  284. package/dist/packages/bunshot-core/src/rateLimit.d.ts +5 -0
  285. package/dist/packages/bunshot-core/src/rateLimit.js +18 -0
  286. package/dist/packages/bunshot-core/src/redis.d.ts +21 -0
  287. package/dist/packages/bunshot-core/src/redis.js +1 -0
  288. package/dist/packages/bunshot-core/src/routeAuth.d.ts +5 -0
  289. package/dist/packages/bunshot-core/src/routeAuth.js +11 -0
  290. package/dist/packages/bunshot-core/src/routeOverrides.d.ts +24 -0
  291. package/dist/packages/bunshot-core/src/routeOverrides.js +25 -0
  292. package/dist/packages/bunshot-core/src/routerAdapter.d.ts +6 -0
  293. package/dist/packages/bunshot-core/src/routerAdapter.js +56 -0
  294. package/dist/packages/bunshot-core/src/secrets.d.ts +48 -0
  295. package/dist/packages/bunshot-core/src/secrets.js +8 -0
  296. package/dist/packages/bunshot-core/src/signing.d.ts +41 -0
  297. package/dist/packages/bunshot-core/src/signing.js +1 -0
  298. package/dist/packages/bunshot-core/src/sse.d.ts +36 -0
  299. package/dist/packages/bunshot-core/src/sse.js +1 -0
  300. package/dist/packages/bunshot-core/src/storageAdapter.js +1 -0
  301. package/dist/packages/bunshot-core/src/storeInfra.d.ts +44 -0
  302. package/dist/packages/bunshot-core/src/storeInfra.js +18 -0
  303. package/dist/packages/bunshot-core/src/storeType.d.ts +7 -0
  304. package/dist/packages/bunshot-core/src/storeType.js +1 -0
  305. package/dist/packages/bunshot-core/src/testing.d.ts +1 -0
  306. package/dist/packages/bunshot-core/src/testing.js +1 -0
  307. package/dist/packages/bunshot-core/src/uploadRegistry.d.ts +23 -0
  308. package/dist/packages/bunshot-core/src/uploadRegistry.js +4 -0
  309. package/dist/packages/bunshot-core/src/userResolver.d.ts +5 -0
  310. package/dist/packages/bunshot-core/src/userResolver.js +14 -0
  311. package/dist/packages/bunshot-core/src/wsMessages.d.ts +42 -0
  312. package/dist/packages/bunshot-core/src/wsMessages.js +4 -0
  313. package/dist/packages/bunshot-permissions/src/adapters/memory.d.ts +7 -0
  314. package/dist/packages/bunshot-permissions/src/adapters/memory.js +73 -0
  315. package/dist/packages/bunshot-permissions/src/index.d.ts +10 -0
  316. package/dist/packages/bunshot-permissions/src/index.js +5 -0
  317. package/dist/packages/bunshot-permissions/src/lib/bootstrap.d.ts +7 -0
  318. package/dist/packages/bunshot-permissions/src/lib/bootstrap.js +12 -0
  319. package/dist/packages/bunshot-permissions/src/lib/evaluator.d.ts +10 -0
  320. package/dist/packages/bunshot-permissions/src/lib/evaluator.js +165 -0
  321. package/dist/packages/bunshot-permissions/src/lib/registry.d.ts +2 -0
  322. package/dist/packages/bunshot-permissions/src/lib/registry.js +31 -0
  323. package/dist/packages/bunshot-permissions/src/lib/validation.d.ts +1 -0
  324. package/dist/packages/bunshot-permissions/src/lib/validation.js +1 -0
  325. package/dist/packages/bunshot-permissions/src/types/adapter.d.ts +1 -0
  326. package/dist/packages/bunshot-permissions/src/types/adapter.js +1 -0
  327. package/dist/packages/bunshot-permissions/src/types/evaluator.d.ts +1 -0
  328. package/dist/packages/bunshot-permissions/src/types/evaluator.js +1 -0
  329. package/dist/packages/bunshot-permissions/src/types/models.d.ts +1 -0
  330. package/dist/packages/bunshot-permissions/src/types/models.js +1 -0
  331. package/dist/packages/bunshot-permissions/src/types/registry.d.ts +1 -0
  332. package/dist/packages/bunshot-permissions/src/types/registry.js +1 -0
  333. package/dist/packages/bunshot-postgres/src/adapter.d.ts +6 -0
  334. package/dist/packages/bunshot-postgres/src/adapter.js +794 -0
  335. package/dist/packages/bunshot-postgres/src/connection.d.ts +15 -0
  336. package/dist/packages/bunshot-postgres/src/connection.js +16 -0
  337. package/dist/packages/bunshot-postgres/src/index.d.ts +4 -0
  338. package/dist/packages/bunshot-postgres/src/index.js +2 -0
  339. package/dist/packages/bunshot-postgres/src/schema.d.ts +997 -0
  340. package/dist/packages/bunshot-postgres/src/schema.js +105 -0
  341. package/dist/src/app.d.ts +230 -0
  342. package/dist/src/app.js +182 -0
  343. package/dist/src/cli/commands/init.d.ts +10 -0
  344. package/dist/src/cli/commands/init.js +709 -0
  345. package/dist/src/cli/index.d.ts +1 -0
  346. package/dist/src/cli/index.js +3 -0
  347. package/dist/src/entrypoints/mongo.d.ts +6 -0
  348. package/dist/src/entrypoints/mongo.js +4 -0
  349. package/dist/src/entrypoints/queue.d.ts +2 -0
  350. package/dist/src/entrypoints/queue.js +1 -0
  351. package/dist/src/entrypoints/redis.d.ts +1 -0
  352. package/dist/src/entrypoints/redis.js +1 -0
  353. package/dist/{adapters → src/framework/adapters}/localStorage.d.ts +1 -1
  354. package/dist/{adapters → src/framework/adapters}/localStorage.js +10 -10
  355. package/dist/src/framework/adapters/memoryStorage.d.ts +2 -0
  356. package/dist/src/framework/adapters/memoryStorage.js +45 -0
  357. package/dist/{adapters → src/framework/adapters}/s3Storage.d.ts +1 -1
  358. package/dist/{adapters → src/framework/adapters}/s3Storage.js +12 -12
  359. package/dist/src/framework/admin/bunshotAccess.d.ts +2 -0
  360. package/dist/src/framework/admin/bunshotAccess.js +23 -0
  361. package/dist/src/framework/admin/bunshotUsers.d.ts +2 -0
  362. package/dist/src/framework/admin/bunshotUsers.js +103 -0
  363. package/dist/src/framework/admin/index.d.ts +7 -0
  364. package/dist/src/framework/admin/index.js +21 -0
  365. package/dist/src/framework/boundaryAdapters/cacheFactories.d.ts +13 -0
  366. package/dist/src/framework/boundaryAdapters/cacheFactories.js +86 -0
  367. package/dist/src/framework/boundaryAdapters/index.d.ts +2 -0
  368. package/dist/src/framework/boundaryAdapters/index.js +1 -0
  369. package/dist/src/framework/boundaryAdapters.d.ts +17 -0
  370. package/dist/src/framework/boundaryAdapters.js +62 -0
  371. package/dist/src/framework/buildContext.d.ts +33 -0
  372. package/dist/src/framework/buildContext.js +119 -0
  373. package/dist/src/framework/config/schema.d.ts +447 -0
  374. package/dist/src/framework/config/schema.js +528 -0
  375. package/dist/src/framework/createInfrastructure.d.ts +76 -0
  376. package/dist/src/framework/createInfrastructure.js +221 -0
  377. package/dist/src/framework/lib/auditLog.d.ts +23 -0
  378. package/dist/src/framework/lib/auditLog.js +416 -0
  379. package/dist/src/framework/lib/captcha.d.ts +11 -0
  380. package/dist/{lib → src/framework/lib}/captcha.js +13 -10
  381. package/dist/{lib → src/framework/lib}/createDtoMapper.js +4 -4
  382. package/dist/src/framework/lib/createRoute.d.ts +1 -0
  383. package/dist/src/framework/lib/createRoute.js +2 -0
  384. package/dist/{lib → src/framework/lib}/idempotency.d.ts +2 -6
  385. package/dist/src/framework/lib/idempotency.js +74 -0
  386. package/dist/src/framework/lib/logger.d.ts +3 -0
  387. package/dist/src/framework/lib/logger.js +14 -0
  388. package/dist/src/framework/lib/metrics.d.ts +34 -0
  389. package/dist/{lib → src/framework/lib}/metrics.js +49 -57
  390. package/dist/src/framework/lib/pagination.d.ts +42 -0
  391. package/dist/src/framework/lib/pagination.js +51 -0
  392. package/dist/src/framework/lib/redisTransport.d.ts +38 -0
  393. package/dist/src/framework/lib/redisTransport.js +107 -0
  394. package/dist/src/framework/lib/resolveUserId.d.ts +2 -0
  395. package/dist/src/framework/lib/resolveUserId.js +5 -0
  396. package/dist/src/framework/lib/sseCollision.d.ts +6 -0
  397. package/dist/src/framework/lib/sseCollision.js +26 -0
  398. package/dist/src/framework/lib/storageAdapter.d.ts +1 -0
  399. package/dist/src/framework/lib/storageAdapter.js +1 -0
  400. package/dist/{lib → src/framework/lib}/stripUnreferencedSchemas.js +4 -4
  401. package/dist/src/framework/lib/tenant.d.ts +21 -0
  402. package/dist/src/framework/lib/tenant.js +70 -0
  403. package/dist/{lib → src/framework/lib}/upload.d.ts +11 -10
  404. package/dist/src/framework/lib/upload.js +132 -0
  405. package/dist/src/framework/lib/uploadRegistry.d.ts +23 -0
  406. package/dist/src/framework/lib/uploadRegistry.js +34 -0
  407. package/dist/{lib → src/framework/lib}/validate.d.ts +1 -1
  408. package/dist/{lib → src/framework/lib}/validate.js +2 -2
  409. package/dist/src/framework/lib/ws.d.ts +19 -0
  410. package/dist/src/framework/lib/ws.js +130 -0
  411. package/dist/src/framework/lib/wsHeartbeat.d.ts +12 -0
  412. package/dist/src/framework/lib/wsHeartbeat.js +53 -0
  413. package/dist/src/framework/lib/wsMessages.d.ts +25 -0
  414. package/dist/src/framework/lib/wsMessages.js +45 -0
  415. package/dist/src/framework/lib/wsNamespace.d.ts +17 -0
  416. package/dist/src/framework/lib/wsNamespace.js +19 -0
  417. package/dist/src/framework/lib/wsPresence.d.ts +17 -0
  418. package/dist/src/framework/lib/wsPresence.js +84 -0
  419. package/dist/src/framework/lib/wsTransport.d.ts +38 -0
  420. package/dist/src/framework/lib/wsTransport.js +9 -0
  421. package/dist/{lib → src/framework/lib}/zodToMongoose.d.ts +1 -1
  422. package/dist/{lib → src/framework/lib}/zodToMongoose.js +11 -11
  423. package/dist/{middleware → src/framework/middleware}/auditLog.d.ts +4 -3
  424. package/dist/src/framework/middleware/auditLog.js +42 -0
  425. package/dist/{middleware → src/framework/middleware}/botProtection.d.ts +2 -2
  426. package/dist/{middleware → src/framework/middleware}/botProtection.js +8 -9
  427. package/dist/src/framework/middleware/cacheResponse.d.ts +35 -0
  428. package/dist/src/framework/middleware/cacheResponse.js +126 -0
  429. package/dist/{middleware → src/framework/middleware}/captcha.d.ts +2 -3
  430. package/dist/src/framework/middleware/captcha.js +37 -0
  431. package/dist/{middleware → src/framework/middleware}/errorHandler.d.ts +1 -1
  432. package/dist/{middleware → src/framework/middleware}/errorHandler.js +2 -2
  433. package/dist/src/framework/middleware/index.js +1 -0
  434. package/dist/{middleware → src/framework/middleware}/logger.d.ts +1 -1
  435. package/dist/src/framework/middleware/metrics.d.ts +12 -0
  436. package/dist/src/framework/middleware/metrics.js +26 -0
  437. package/dist/{middleware → src/framework/middleware}/rateLimit.d.ts +2 -2
  438. package/dist/src/framework/middleware/rateLimit.js +22 -0
  439. package/dist/src/framework/middleware/requestId.d.ts +3 -0
  440. package/dist/{middleware → src/framework/middleware}/requestId.js +2 -2
  441. package/dist/{middleware → src/framework/middleware}/requestLogger.d.ts +3 -3
  442. package/dist/{middleware → src/framework/middleware}/requestLogger.js +17 -12
  443. package/dist/{middleware → src/framework/middleware}/requestSigning.d.ts +2 -2
  444. package/dist/{middleware → src/framework/middleware}/requestSigning.js +18 -20
  445. package/dist/src/framework/middleware/tenant.d.ts +14 -0
  446. package/dist/{middleware → src/framework/middleware}/tenant.js +31 -27
  447. package/dist/src/framework/middleware/upload.d.ts +5 -0
  448. package/dist/{middleware → src/framework/middleware}/upload.js +4 -4
  449. package/dist/{middleware → src/framework/middleware}/webhookAuth.d.ts +3 -3
  450. package/dist/{middleware → src/framework/middleware}/webhookAuth.js +11 -12
  451. package/dist/src/framework/models/AuditLog.d.ts +21 -0
  452. package/dist/src/framework/models/AuditLog.js +31 -0
  453. package/dist/src/framework/mountMiddleware.d.ts +91 -0
  454. package/dist/src/framework/mountMiddleware.js +128 -0
  455. package/dist/src/framework/mountOptionalEndpoints.d.ts +103 -0
  456. package/dist/src/framework/mountOptionalEndpoints.js +47 -0
  457. package/dist/src/framework/mountRoutes.d.ts +21 -0
  458. package/dist/src/framework/mountRoutes.js +144 -0
  459. package/dist/src/framework/persistence/cronRegistry.d.ts +28 -0
  460. package/dist/src/framework/persistence/cronRegistry.js +139 -0
  461. package/dist/src/framework/persistence/idempotency.d.ts +26 -0
  462. package/dist/src/framework/persistence/idempotency.js +178 -0
  463. package/dist/src/framework/persistence/index.d.ts +6 -0
  464. package/dist/src/framework/persistence/index.js +8 -0
  465. package/dist/src/framework/persistence/storeInfra.d.ts +9 -0
  466. package/dist/src/framework/persistence/storeInfra.js +1 -0
  467. package/dist/src/framework/persistence/uploadRegistry.d.ts +35 -0
  468. package/dist/src/framework/persistence/uploadRegistry.js +235 -0
  469. package/dist/src/framework/persistence/wsMessages.d.ts +22 -0
  470. package/dist/src/framework/persistence/wsMessages.js +296 -0
  471. package/dist/src/framework/preloadSchemas.d.ts +24 -0
  472. package/dist/src/framework/preloadSchemas.js +42 -0
  473. package/dist/src/framework/registerBoundaryAdapters.d.ts +23 -0
  474. package/dist/src/framework/registerBoundaryAdapters.js +46 -0
  475. package/dist/src/framework/routes/admin.d.ts +9 -0
  476. package/dist/src/framework/routes/admin.js +361 -0
  477. package/dist/src/framework/routes/health.d.ts +1 -0
  478. package/dist/src/framework/routes/health.js +21 -0
  479. package/dist/src/framework/routes/home.d.ts +1 -0
  480. package/dist/src/framework/routes/home.js +18 -0
  481. package/dist/src/framework/routes/jobs.d.ts +3 -0
  482. package/dist/{routes → src/framework/routes}/jobs.js +128 -103
  483. package/dist/src/framework/routes/metrics.d.ts +10 -0
  484. package/dist/src/framework/routes/metrics.js +57 -0
  485. package/dist/{routes → src/framework/routes}/uploads.d.ts +3 -3
  486. package/dist/src/framework/routes/uploads.js +262 -0
  487. package/dist/src/framework/runPluginLifecycle.d.ts +27 -0
  488. package/dist/src/framework/runPluginLifecycle.js +121 -0
  489. package/dist/src/framework/secrets/frameworkSecretSchema.d.ts +58 -0
  490. package/dist/src/framework/secrets/frameworkSecretSchema.js +20 -0
  491. package/dist/src/framework/secrets/index.d.ts +9 -0
  492. package/dist/src/framework/secrets/index.js +7 -0
  493. package/dist/src/framework/secrets/providers/envProvider.d.ts +15 -0
  494. package/dist/src/framework/secrets/providers/envProvider.js +18 -0
  495. package/dist/src/framework/secrets/providers/fileProvider.d.ts +8 -0
  496. package/dist/src/framework/secrets/providers/fileProvider.js +82 -0
  497. package/dist/src/framework/secrets/providers/ssmProvider.d.ts +20 -0
  498. package/dist/src/framework/secrets/providers/ssmProvider.js +127 -0
  499. package/dist/src/framework/secrets/resolveSecretBundle.d.ts +53 -0
  500. package/dist/src/framework/secrets/resolveSecretBundle.js +84 -0
  501. package/dist/src/framework/secrets/resolveSecrets.d.ts +18 -0
  502. package/dist/src/framework/secrets/resolveSecrets.js +34 -0
  503. package/dist/src/framework/sse/index.d.ts +21 -0
  504. package/dist/src/framework/sse/index.js +109 -0
  505. package/dist/src/framework/ws/index.d.ts +11 -0
  506. package/dist/src/framework/ws/index.js +8 -0
  507. package/dist/src/index.d.ts +87 -0
  508. package/dist/src/index.js +58 -0
  509. package/dist/src/lib/appConfig.d.ts +7 -0
  510. package/dist/src/lib/appConfig.js +27 -0
  511. package/dist/src/lib/appMeta.d.ts +7 -0
  512. package/dist/src/lib/appMeta.js +3 -0
  513. package/dist/src/lib/authConfig.d.ts +532 -0
  514. package/dist/{lib/appConfig.js → src/lib/authConfig.js} +75 -17
  515. package/dist/{lib → src/lib}/context.d.ts +6 -12
  516. package/dist/{lib → src/lib}/context.js +5 -5
  517. package/dist/src/lib/logger.d.ts +1 -0
  518. package/dist/src/lib/logger.js +1 -0
  519. package/dist/src/lib/mongo.d.ts +58 -0
  520. package/dist/src/lib/mongo.js +96 -0
  521. package/dist/src/lib/queue.d.ts +72 -0
  522. package/dist/src/lib/queue.js +152 -0
  523. package/dist/src/lib/redis.d.ts +28 -0
  524. package/dist/src/lib/redis.js +72 -0
  525. package/dist/{lib → src/lib}/signing.d.ts +2 -2
  526. package/dist/src/lib/signing.js +210 -0
  527. package/dist/src/lib/signingConfig.d.ts +40 -0
  528. package/dist/src/lib/signingConfig.js +28 -0
  529. package/dist/src/server.d.ts +146 -0
  530. package/dist/src/server.js +469 -0
  531. package/dist/src/shared/lib/HttpError.d.ts +1 -0
  532. package/dist/src/shared/lib/HttpError.js +2 -0
  533. package/dist/src/shared/lib/constants.d.ts +10 -0
  534. package/dist/src/shared/lib/crypto.d.ts +43 -0
  535. package/dist/src/shared/lib/crypto.js +74 -0
  536. package/dist/src/shared/lib/signing.d.ts +52 -0
  537. package/dist/{lib → src/shared/lib}/signing.js +35 -8
  538. package/dist/src/testing.d.ts +34 -0
  539. package/dist/src/testing.js +93 -0
  540. package/package.json +60 -24
  541. package/dist/adapters/memoryAuth.d.ts +0 -52
  542. package/dist/adapters/memoryAuth.js +0 -749
  543. package/dist/adapters/memoryStorage.d.ts +0 -3
  544. package/dist/adapters/memoryStorage.js +0 -44
  545. package/dist/adapters/mongoAuth.d.ts +0 -2
  546. package/dist/adapters/mongoAuth.js +0 -403
  547. package/dist/adapters/sqliteAuth.d.ts +0 -72
  548. package/dist/adapters/sqliteAuth.js +0 -858
  549. package/dist/app.d.ts +0 -559
  550. package/dist/app.js +0 -651
  551. package/dist/entrypoints/mongo.d.ts +0 -5
  552. package/dist/entrypoints/mongo.js +0 -4
  553. package/dist/entrypoints/queue.d.ts +0 -2
  554. package/dist/entrypoints/queue.js +0 -1
  555. package/dist/entrypoints/redis.d.ts +0 -1
  556. package/dist/entrypoints/redis.js +0 -1
  557. package/dist/index.d.ts +0 -117
  558. package/dist/index.js +0 -88
  559. package/dist/lib/appConfig.d.ts +0 -275
  560. package/dist/lib/auditLog.d.ts +0 -58
  561. package/dist/lib/auditLog.js +0 -218
  562. package/dist/lib/authAdapter.d.ts +0 -246
  563. package/dist/lib/authAdapter.js +0 -7
  564. package/dist/lib/authRateLimit.d.ts +0 -13
  565. package/dist/lib/authRateLimit.js +0 -117
  566. package/dist/lib/clientIp.d.ts +0 -14
  567. package/dist/lib/credentialStuffing.d.ts +0 -31
  568. package/dist/lib/credentialStuffing.js +0 -77
  569. package/dist/lib/crypto.d.ts +0 -11
  570. package/dist/lib/crypto.js +0 -22
  571. package/dist/lib/deletionCancelToken.d.ts +0 -12
  572. package/dist/lib/deletionCancelToken.js +0 -88
  573. package/dist/lib/emailVerification.d.ts +0 -19
  574. package/dist/lib/emailVerification.js +0 -129
  575. package/dist/lib/fingerprint.js +0 -36
  576. package/dist/lib/idempotency.js +0 -182
  577. package/dist/lib/jwks.d.ts +0 -25
  578. package/dist/lib/jwks.js +0 -51
  579. package/dist/lib/jwt.d.ts +0 -15
  580. package/dist/lib/jwt.js +0 -111
  581. package/dist/lib/metrics.d.ts +0 -14
  582. package/dist/lib/mfaChallenge.d.ts +0 -55
  583. package/dist/lib/mfaChallenge.js +0 -398
  584. package/dist/lib/mongo.d.ts +0 -39
  585. package/dist/lib/mongo.js +0 -124
  586. package/dist/lib/oauth.d.ts +0 -40
  587. package/dist/lib/oauth.js +0 -101
  588. package/dist/lib/oauthCode.d.ts +0 -15
  589. package/dist/lib/oauthCode.js +0 -95
  590. package/dist/lib/pagination.d.ts +0 -119
  591. package/dist/lib/pagination.js +0 -166
  592. package/dist/lib/queue.d.ts +0 -37
  593. package/dist/lib/queue.js +0 -117
  594. package/dist/lib/redis.d.ts +0 -9
  595. package/dist/lib/redis.js +0 -61
  596. package/dist/lib/resetPassword.d.ts +0 -12
  597. package/dist/lib/resetPassword.js +0 -93
  598. package/dist/lib/roles.d.ts +0 -7
  599. package/dist/lib/roles.js +0 -49
  600. package/dist/lib/saml.d.ts +0 -25
  601. package/dist/lib/saml.js +0 -64
  602. package/dist/lib/securityEvents.d.ts +0 -28
  603. package/dist/lib/securityEvents.js +0 -26
  604. package/dist/lib/session.d.ts +0 -49
  605. package/dist/lib/session.js +0 -597
  606. package/dist/lib/tenant.d.ts +0 -15
  607. package/dist/lib/tenant.js +0 -65
  608. package/dist/lib/upload.js +0 -112
  609. package/dist/lib/uploadRegistry.d.ts +0 -18
  610. package/dist/lib/uploadRegistry.js +0 -83
  611. package/dist/lib/ws.d.ts +0 -22
  612. package/dist/lib/ws.js +0 -96
  613. package/dist/lib/wsHeartbeat.d.ts +0 -12
  614. package/dist/lib/wsHeartbeat.js +0 -57
  615. package/dist/lib/wsMessages.d.ts +0 -40
  616. package/dist/lib/wsMessages.js +0 -330
  617. package/dist/lib/wsPresence.d.ts +0 -25
  618. package/dist/lib/wsPresence.js +0 -99
  619. package/dist/middleware/auditLog.js +0 -39
  620. package/dist/middleware/bearerAuth.d.ts +0 -2
  621. package/dist/middleware/bearerAuth.js +0 -11
  622. package/dist/middleware/cacheResponse.d.ts +0 -15
  623. package/dist/middleware/cacheResponse.js +0 -178
  624. package/dist/middleware/captcha.js +0 -36
  625. package/dist/middleware/csrf.js +0 -129
  626. package/dist/middleware/identify.d.ts +0 -3
  627. package/dist/middleware/identify.js +0 -122
  628. package/dist/middleware/index.js +0 -1
  629. package/dist/middleware/metrics.d.ts +0 -9
  630. package/dist/middleware/metrics.js +0 -26
  631. package/dist/middleware/rateLimit.js +0 -22
  632. package/dist/middleware/requestId.d.ts +0 -3
  633. package/dist/middleware/scimAuth.d.ts +0 -8
  634. package/dist/middleware/scimAuth.js +0 -29
  635. package/dist/middleware/tenant.d.ts +0 -5
  636. package/dist/middleware/upload.d.ts +0 -5
  637. package/dist/middleware/userAuth.d.ts +0 -3
  638. package/dist/middleware/userAuth.js +0 -6
  639. package/dist/models/AuditLog.d.ts +0 -30
  640. package/dist/models/AuditLog.js +0 -39
  641. package/dist/models/AuthUser.js +0 -55
  642. package/dist/models/Group.d.ts +0 -21
  643. package/dist/models/Group.js +0 -28
  644. package/dist/models/GroupMembership.js +0 -25
  645. package/dist/models/TenantRole.d.ts +0 -15
  646. package/dist/models/TenantRole.js +0 -23
  647. package/dist/routes/auth.d.ts +0 -12
  648. package/dist/routes/auth.js +0 -744
  649. package/dist/routes/groups.js +0 -346
  650. package/dist/routes/health.d.ts +0 -1
  651. package/dist/routes/health.js +0 -22
  652. package/dist/routes/home.d.ts +0 -1
  653. package/dist/routes/home.js +0 -16
  654. package/dist/routes/jobs.d.ts +0 -2
  655. package/dist/routes/m2m.d.ts +0 -2
  656. package/dist/routes/m2m.js +0 -72
  657. package/dist/routes/metrics.d.ts +0 -8
  658. package/dist/routes/metrics.js +0 -55
  659. package/dist/routes/mfa.d.ts +0 -5
  660. package/dist/routes/mfa.js +0 -628
  661. package/dist/routes/oauth.d.ts +0 -2
  662. package/dist/routes/oauth.js +0 -520
  663. package/dist/routes/oidc.d.ts +0 -2
  664. package/dist/routes/oidc.js +0 -29
  665. package/dist/routes/passkey.d.ts +0 -1
  666. package/dist/routes/passkey.js +0 -157
  667. package/dist/routes/saml.d.ts +0 -2
  668. package/dist/routes/saml.js +0 -86
  669. package/dist/routes/scim.d.ts +0 -2
  670. package/dist/routes/scim.js +0 -255
  671. package/dist/routes/uploads.js +0 -227
  672. package/dist/schemas/auth.js +0 -30
  673. package/dist/server.d.ts +0 -57
  674. package/dist/server.js +0 -112
  675. package/dist/services/auth.d.ts +0 -29
  676. package/dist/services/auth.js +0 -238
  677. package/dist/ws/index.d.ts +0 -10
  678. package/dist/ws/index.js +0 -39
  679. package/docs/sections/adding-middleware/full.md +0 -35
  680. package/docs/sections/adding-models/full.md +0 -125
  681. package/docs/sections/adding-models/overview.md +0 -13
  682. package/docs/sections/adding-routes/full.md +0 -182
  683. package/docs/sections/adding-routes/overview.md +0 -23
  684. package/docs/sections/auth-flow/full.md +0 -790
  685. package/docs/sections/auth-flow/overview.md +0 -10
  686. package/docs/sections/auth-security-examples/full.md +0 -388
  687. package/docs/sections/authentication/full.md +0 -130
  688. package/docs/sections/authentication/overview.md +0 -5
  689. package/docs/sections/cli/full.md +0 -42
  690. package/docs/sections/configuration/full.md +0 -172
  691. package/docs/sections/configuration/overview.md +0 -18
  692. package/docs/sections/configuration-example/full.md +0 -117
  693. package/docs/sections/configuration-example/overview.md +0 -30
  694. package/docs/sections/documentation/full.md +0 -171
  695. package/docs/sections/environment-variables/full.md +0 -55
  696. package/docs/sections/exports/full.md +0 -123
  697. package/docs/sections/extending-context/full.md +0 -59
  698. package/docs/sections/header.md +0 -3
  699. package/docs/sections/installation/full.md +0 -6
  700. package/docs/sections/jobs/full.md +0 -140
  701. package/docs/sections/jobs/overview.md +0 -15
  702. package/docs/sections/logging/full.md +0 -83
  703. package/docs/sections/metrics/full.md +0 -131
  704. package/docs/sections/mongodb-connections/full.md +0 -45
  705. package/docs/sections/mongodb-connections/overview.md +0 -7
  706. package/docs/sections/multi-tenancy/full.md +0 -66
  707. package/docs/sections/multi-tenancy/overview.md +0 -15
  708. package/docs/sections/oauth/full.md +0 -189
  709. package/docs/sections/oauth/overview.md +0 -16
  710. package/docs/sections/package-development/full.md +0 -7
  711. package/docs/sections/pagination/full.md +0 -93
  712. package/docs/sections/passkey-login/full.md +0 -90
  713. package/docs/sections/passkey-login/overview.md +0 -1
  714. package/docs/sections/peer-dependencies/full.md +0 -47
  715. package/docs/sections/quick-start/full.md +0 -43
  716. package/docs/sections/response-caching/full.md +0 -117
  717. package/docs/sections/response-caching/overview.md +0 -13
  718. package/docs/sections/roles/full.md +0 -225
  719. package/docs/sections/roles/overview.md +0 -14
  720. package/docs/sections/running-without-redis/full.md +0 -16
  721. package/docs/sections/running-without-redis-or-mongodb/full.md +0 -60
  722. package/docs/sections/signing/full.md +0 -203
  723. package/docs/sections/stack/full.md +0 -10
  724. package/docs/sections/uploads/full.md +0 -208
  725. package/docs/sections/versioning/full.md +0 -85
  726. package/docs/sections/webhook-auth/full.md +0 -100
  727. package/docs/sections/websocket/full.md +0 -196
  728. package/docs/sections/websocket/overview.md +0 -5
  729. package/docs/sections/websocket-rooms/full.md +0 -102
  730. package/docs/sections/websocket-rooms/overview.md +0 -5
  731. /package/dist/{lib/storageAdapter.js → packages/bunshot-admin/src/types/env.js} +0 -0
  732. /package/dist/{lib → packages/bunshot-auth/src/lib}/fingerprint.d.ts +0 -0
  733. /package/dist/{lib → packages/bunshot-auth/src/lib}/logger.d.ts +0 -0
  734. /package/dist/{lib → packages/bunshot-core/src}/constants.d.ts +0 -0
  735. /package/dist/{lib → packages/bunshot-core/src}/storageAdapter.d.ts +0 -0
  736. /package/dist/{lib → src/framework/lib}/createDtoMapper.d.ts +0 -0
  737. /package/dist/{lib → src/framework/lib}/stripUnreferencedSchemas.d.ts +0 -0
  738. /package/dist/{middleware → src/framework/middleware}/cors.d.ts +0 -0
  739. /package/dist/{middleware → src/framework/middleware}/cors.js +0 -0
  740. /package/dist/{middleware → src/framework/middleware}/index.d.ts +0 -0
  741. /package/dist/{middleware → src/framework/middleware}/logger.js +0 -0
  742. /package/dist/{lib → src/shared/lib}/constants.js +0 -0
@@ -0,0 +1,690 @@
1
+ #!/usr/bin/env node
2
+ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
3
+ get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
4
+ }) : x)(function(x) {
5
+ if (typeof require !== "undefined") return require.apply(this, arguments);
6
+ throw Error('Dynamic require of "' + x + '" is not supported');
7
+ });
8
+
9
+ // src/cli/commands/init.ts
10
+ import { Args, Command } from "@oclif/core";
11
+ import { spawnSync } from "child_process";
12
+ import { existsSync, mkdirSync, readSync, rmSync, writeFileSync } from "fs";
13
+ import { join } from "path";
14
+ function ask(question) {
15
+ process.stdout.write(question);
16
+ const buf = Buffer.alloc(1024);
17
+ const n = readSync(0, buf, 0, buf.length, null);
18
+ return buf.subarray(0, n).toString().trim().replace(/\r/g, "");
19
+ }
20
+ function choose(question, options, defaultIndex = 0) {
21
+ let selected = defaultIndex;
22
+ function render(initial = false) {
23
+ if (!initial) {
24
+ process.stdout.write(`\x1B[${options.length}A`);
25
+ }
26
+ for (let i = 0; i < options.length; i++) {
27
+ const active = i === selected;
28
+ const marker = active ? "\x1B[36m>\x1B[0m" : " ";
29
+ const label = active ? `\x1B[1m${options[i]}\x1B[0m` : `\x1B[2m${options[i]}\x1B[0m`;
30
+ process.stdout.write(`\x1B[2K ${marker} ${label}
31
+ `);
32
+ }
33
+ }
34
+ if (!process.stdin.isTTY) {
35
+ console.log(question);
36
+ options.forEach((opt, i) => console.log(` ${i + 1}) ${opt}`));
37
+ const raw = ask(` Choose [${defaultIndex + 1}]: `);
38
+ if (!raw) return defaultIndex;
39
+ const num = parseInt(raw);
40
+ if (num >= 1 && num <= options.length) return num - 1;
41
+ return defaultIndex;
42
+ }
43
+ console.log(question);
44
+ process.stdout.write("\x1B[?25l");
45
+ render(true);
46
+ process.stdin.setRawMode(true);
47
+ const buf = Buffer.alloc(16);
48
+ try {
49
+ while (true) {
50
+ const n = readSync(0, buf, 0, buf.length, null);
51
+ const key = buf.subarray(0, n).toString();
52
+ if (key === "\r" || key === "\n") {
53
+ break;
54
+ } else if (key === "\x1B[A" || key === "\x1BOA") {
55
+ selected = (selected - 1 + options.length) % options.length;
56
+ render();
57
+ } else if (key === "\x1B[B" || key === "\x1BOB") {
58
+ selected = (selected + 1) % options.length;
59
+ render();
60
+ } else if (key === "") {
61
+ process.stdout.write("\x1B[?25h\n");
62
+ process.stdin.setRawMode(false);
63
+ process.exit(0);
64
+ } else {
65
+ const num = parseInt(key);
66
+ if (num >= 1 && num <= options.length) {
67
+ selected = num - 1;
68
+ render();
69
+ break;
70
+ }
71
+ }
72
+ }
73
+ } finally {
74
+ process.stdin.setRawMode(false);
75
+ process.stdout.write("\x1B[?25h");
76
+ }
77
+ return selected;
78
+ }
79
+ var Init = class _Init extends Command {
80
+ static description = "Scaffold a new Bunshot application";
81
+ static examples = [
82
+ "<%= config.bin %> init my-app",
83
+ "<%= config.bin %> init my-app ./apps/my-app"
84
+ ];
85
+ static args = {
86
+ name: Args.string({ description: "App name" }),
87
+ dir: Args.string({ description: "Output directory" })
88
+ };
89
+ async run() {
90
+ const { args } = await this.parse(_Init);
91
+ const argTitle = args.name;
92
+ const argDir = args.dir;
93
+ const appTitle = argTitle || ask("App name: ");
94
+ if (!appTitle) {
95
+ console.error("App name is required.");
96
+ process.exit(1);
97
+ }
98
+ const dirDefault = appTitle.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9-]/g, "");
99
+ const dirName = argDir || (argTitle ? dirDefault : ask(`Directory (${dirDefault}): `)) || dirDefault;
100
+ let mongoMode = false;
101
+ let useRedis = false;
102
+ let authStore = "mongo";
103
+ let sessionStore = "redis";
104
+ let cacheStore = "redis";
105
+ let oauthStateStore = "redis";
106
+ console.log("");
107
+ const presetChoice = choose("Database setup:", [
108
+ "Full stack (MongoDB + Redis \u2014 production ready)",
109
+ "SQLite (single file, no external services)",
110
+ "Memory (ephemeral, great for prototyping/tests)",
111
+ "Custom (choose each store individually)"
112
+ ]);
113
+ if (presetChoice === 0) {
114
+ const mongoChoice = choose("MongoDB connection mode:", [
115
+ "Single (auth + app data share one connection)",
116
+ "Separate (auth on its own cluster)"
117
+ ]);
118
+ mongoMode = mongoChoice === 0 ? "single" : "separate";
119
+ useRedis = true;
120
+ authStore = "mongo";
121
+ sessionStore = "redis";
122
+ cacheStore = "redis";
123
+ oauthStateStore = "redis";
124
+ } else if (presetChoice === 1) {
125
+ mongoMode = false;
126
+ useRedis = false;
127
+ authStore = "sqlite";
128
+ sessionStore = "sqlite";
129
+ cacheStore = "sqlite";
130
+ oauthStateStore = "sqlite";
131
+ } else if (presetChoice === 2) {
132
+ mongoMode = false;
133
+ useRedis = false;
134
+ authStore = "memory";
135
+ sessionStore = "memory";
136
+ cacheStore = "memory";
137
+ oauthStateStore = "memory";
138
+ } else {
139
+ console.log("\n Configure each store:\n");
140
+ const mongoChoice = choose("MongoDB:", [
141
+ "Single (one connection for auth + app data)",
142
+ "Separate (auth on its own cluster)",
143
+ "None (no MongoDB)"
144
+ ]);
145
+ if (mongoChoice === 0) mongoMode = "single";
146
+ else if (mongoChoice === 1) mongoMode = "separate";
147
+ else mongoMode = false;
148
+ const redisChoice = choose("Redis:", ["Yes", "No"]);
149
+ useRedis = redisChoice === 0;
150
+ const storeOptions = [];
151
+ const storeLabels = [];
152
+ if (useRedis) {
153
+ storeOptions.push("redis");
154
+ storeLabels.push("Redis");
155
+ }
156
+ if (mongoMode) {
157
+ storeOptions.push("mongo");
158
+ storeLabels.push("MongoDB");
159
+ }
160
+ storeOptions.push("sqlite", "memory");
161
+ storeLabels.push("SQLite", "Memory");
162
+ const authOptions = [];
163
+ const authLabels = [];
164
+ if (mongoMode) {
165
+ authOptions.push("mongo");
166
+ authLabels.push("MongoDB");
167
+ }
168
+ authOptions.push("sqlite", "memory");
169
+ authLabels.push("SQLite", "Memory");
170
+ const authChoice = choose("Auth store:", authLabels);
171
+ authStore = authOptions[authChoice];
172
+ const sessChoice = choose("Sessions store:", storeLabels);
173
+ sessionStore = storeOptions[sessChoice];
174
+ const cacheChoice = choose("Cache store:", storeLabels);
175
+ cacheStore = storeOptions[cacheChoice];
176
+ const oauthChoice = choose("OAuth state store:", storeLabels);
177
+ oauthStateStore = storeOptions[oauthChoice];
178
+ }
179
+ const usesSqlite = authStore === "sqlite" || sessionStore === "sqlite" || cacheStore === "sqlite" || oauthStateStore === "sqlite";
180
+ console.log("");
181
+ let authPosture = "web-saas";
182
+ let stepByStep = null;
183
+ const authConfigMode = choose("How would you like to configure auth?", [
184
+ "Use a preset (pick a security posture, get sensible defaults)",
185
+ "Step by step (choose features individually)"
186
+ ]);
187
+ if (authConfigMode === 0) {
188
+ const presetIndex = choose("Which best describes your app?", [
189
+ `Web app / SaaS (CSRF, refresh tokens, botProtection)`,
190
+ `Internal / admin (MFA required, no refresh tokens, tight limits)`,
191
+ `Mobile / API only (no CSRF, cors: "*", header auth)`,
192
+ `Dev / prototype (permissive \u2014 iterate fast, no rate limits)`
193
+ ]);
194
+ const presets = ["web-saas", "internal", "mobile-api", "dev"];
195
+ authPosture = presets[presetIndex];
196
+ } else {
197
+ authPosture = "custom";
198
+ const pwPolicyIndex = choose("Password policy:", [
199
+ "Relaxed (8 chars)",
200
+ "Strong (12+ chars, special required)",
201
+ "Minimal (dev only)"
202
+ ]);
203
+ const passwordPolicy = ["relaxed", "strong", "minimal"][pwPolicyIndex];
204
+ const emailVerifIndex = choose("Email verification:", ["Yes", "No"]);
205
+ const emailVerification = emailVerifIndex === 0;
206
+ const pwResetIndex = choose("Password reset:", ["Yes", "No"]);
207
+ const passwordReset = pwResetIndex === 0;
208
+ const refreshIndex = choose("Refresh tokens:", ["Yes", "No"]);
209
+ const refreshTokens = refreshIndex === 0;
210
+ const mfaIndex = choose("MFA:", ["None", "Optional (users opt in)", "Required (all users)"]);
211
+ const mfa = ["none", "optional", "required"][mfaIndex];
212
+ const csrfIndex = choose("CSRF protection:", ["Yes", "No"]);
213
+ const csrf = csrfIndex === 0;
214
+ const oauthProviders = [];
215
+ const allProviders = ["Google", "GitHub", "Apple", "Microsoft"];
216
+ while (true) {
217
+ const remaining = [...allProviders.filter((p) => !oauthProviders.includes(p)), "None (done)"];
218
+ const pIdx = choose("OAuth providers (select all that apply):", remaining);
219
+ const picked = remaining[pIdx];
220
+ if (picked === "None (done)") break;
221
+ oauthProviders.push(picked);
222
+ }
223
+ stepByStep = {
224
+ passwordPolicy,
225
+ emailVerification,
226
+ passwordReset,
227
+ refreshTokens,
228
+ mfa,
229
+ csrf,
230
+ oauthProviders
231
+ };
232
+ }
233
+ const projectDir = join(process.cwd(), dirName);
234
+ const srcDir = join(projectDir, "src");
235
+ const configDir = join(srcDir, "config");
236
+ const libDir = join(srcDir, "lib");
237
+ const routesDir = join(srcDir, "routes");
238
+ const workersDir = join(srcDir, "workers");
239
+ const queuesDir = join(srcDir, "queues");
240
+ const wsDir = join(srcDir, "ws");
241
+ const servicesDir = join(srcDir, "services");
242
+ const middlewareDir = join(srcDir, "middleware");
243
+ const modelsDir = join(srcDir, "models");
244
+ if (existsSync(projectDir)) {
245
+ console.error(`Directory "${dirName}" already exists.`);
246
+ process.exit(1);
247
+ }
248
+ function buildDbConfig() {
249
+ const lines = [];
250
+ if (mongoMode) {
251
+ lines.push(` mongo: "${mongoMode}",`);
252
+ } else {
253
+ lines.push(` mongo: false,`);
254
+ }
255
+ lines.push(` redis: ${useRedis},`);
256
+ lines.push(` auth: "${authStore}",`);
257
+ lines.push(` sessions: "${sessionStore}",`);
258
+ lines.push(` oauthState: "${oauthStateStore}",`);
259
+ lines.push(` cache: "${cacheStore}",`);
260
+ if (usesSqlite) {
261
+ lines.push(` sqlite: path.join(import.meta.dir, "../../data.db"),`);
262
+ }
263
+ return `{
264
+ ${lines.join("\n")}
265
+ }`;
266
+ }
267
+ function buildAuthSecurityConfig() {
268
+ if (authPosture === "web-saas") {
269
+ return `export const auth: AuthConfig = {
270
+ roles: Object.values(USER_ROLES),
271
+ defaultRole: USER_ROLES.USER,
272
+ passwordPolicy: { minLength: 8, requireLetter: true, requireDigit: true },
273
+ // Uncomment to require email verification before login:
274
+ // emailVerification: {
275
+ // required: true,
276
+ // // Listen to auth:delivery.email_verification bus event to send the email
277
+ // },
278
+ // Uncomment to enable password reset:
279
+ // passwordReset: {
280
+ // // Listen to auth:delivery.password_reset bus event to send the reset email
281
+ // },
282
+ refreshTokens: { accessTokenExpiry: 900, refreshTokenExpiry: 2_592_000 },
283
+ sessionPolicy: { trackLastActive: true },
284
+ // Uncomment to enable opt-in MFA (TOTP + email OTP):
285
+ // mfa: { issuer: APP_NAME },
286
+ };
287
+
288
+ export const security: SecurityConfig = {
289
+ cors: ["https://myapp.com"], // TODO: replace with your domain
290
+ trustProxy: 1,
291
+ csrf: { enabled: true },
292
+ botProtection: { fingerprintRateLimit: true },
293
+ };`;
294
+ }
295
+ if (authPosture === "internal") {
296
+ return `export const auth: AuthConfig = {
297
+ roles: ["superadmin", "admin", "viewer"],
298
+ defaultRole: "viewer",
299
+ passwordPolicy: { minLength: 14, requireLetter: true, requireDigit: true, requireSpecial: true },
300
+ mfa: { issuer: APP_NAME, required: true },
301
+ sessionPolicy: {
302
+ maxSessions: 2,
303
+ trackLastActive: true,
304
+ persistSessionMetadata: true,
305
+ includeInactiveSessions: true,
306
+ },
307
+ rateLimit: { login: { windowMs: 15 * 60 * 1000, max: 5 } },
308
+ };
309
+
310
+ export const security: SecurityConfig = {
311
+ cors: ["https://admin.myapp.com"], // TODO: replace with your domain
312
+ trustProxy: 1,
313
+ csrf: { enabled: true },
314
+ rateLimit: { windowMs: 60_000, max: 30 },
315
+ };`;
316
+ }
317
+ if (authPosture === "mobile-api") {
318
+ return `export const auth: AuthConfig = {
319
+ roles: Object.values(USER_ROLES),
320
+ defaultRole: USER_ROLES.USER,
321
+ refreshTokens: { accessTokenExpiry: 900, refreshTokenExpiry: 2_592_000, rotationGraceSeconds: 60 },
322
+ sessionPolicy: { maxSessions: 5 },
323
+ };
324
+
325
+ export const security: SecurityConfig = {
326
+ cors: "*",
327
+ trustProxy: 1,
328
+ botProtection: { fingerprintRateLimit: true },
329
+ };`;
330
+ }
331
+ if (authPosture === "dev") {
332
+ return `export const auth: AuthConfig = {
333
+ roles: Object.values(USER_ROLES),
334
+ defaultRole: USER_ROLES.USER,
335
+ passwordPolicy: { minLength: 1, requireLetter: false, requireDigit: false, requireSpecial: false },
336
+ rateLimit: {
337
+ login: { windowMs: 60_000, max: 10_000 },
338
+ register: { windowMs: 60_000, max: 10_000 },
339
+ },
340
+ };
341
+
342
+ export const security: SecurityConfig = {
343
+ cors: "*",
344
+ bearerAuth: false,
345
+ };`;
346
+ }
347
+ const c = stepByStep;
348
+ const authLines = [
349
+ ` roles: Object.values(USER_ROLES),`,
350
+ ` defaultRole: USER_ROLES.USER,`
351
+ ];
352
+ if (c.passwordPolicy === "relaxed") {
353
+ authLines.push(
354
+ ` passwordPolicy: { minLength: 8, requireLetter: true, requireDigit: true },`
355
+ );
356
+ } else if (c.passwordPolicy === "strong") {
357
+ authLines.push(
358
+ ` passwordPolicy: { minLength: 12, requireLetter: true, requireDigit: true, requireSpecial: true },`
359
+ );
360
+ } else {
361
+ authLines.push(
362
+ ` passwordPolicy: { minLength: 1, requireLetter: false, requireDigit: false, requireSpecial: false },`
363
+ );
364
+ }
365
+ if (c.emailVerification) {
366
+ authLines.push(` emailVerification: {`);
367
+ authLines.push(` required: true,`);
368
+ authLines.push(
369
+ ` // Listen to auth:delivery.email_verification bus event to send the email`
370
+ );
371
+ authLines.push(` },`);
372
+ }
373
+ if (c.passwordReset) {
374
+ authLines.push(` passwordReset: {`);
375
+ authLines.push(
376
+ ` // Listen to auth:delivery.password_reset bus event to send the reset email`
377
+ );
378
+ authLines.push(` },`);
379
+ }
380
+ if (c.refreshTokens) {
381
+ authLines.push(
382
+ ` refreshTokens: { accessTokenExpiry: 900, refreshTokenExpiry: 2_592_000 },`
383
+ );
384
+ }
385
+ if (c.mfa === "optional") {
386
+ authLines.push(` mfa: { issuer: APP_NAME },`);
387
+ } else if (c.mfa === "required") {
388
+ authLines.push(` mfa: { issuer: APP_NAME, required: true },`);
389
+ }
390
+ authLines.push(` sessionPolicy: { trackLastActive: true },`);
391
+ const authBlock = `export const auth: AuthConfig = {
392
+ ${authLines.join("\n")}
393
+ };`;
394
+ const secLines = [` cors: "*",`];
395
+ if (c.csrf) {
396
+ secLines.push(` csrf: { enabled: true },`);
397
+ }
398
+ const secBlock = `export const security: SecurityConfig = {
399
+ ${secLines.join("\n")}
400
+ };`;
401
+ return `${authBlock}
402
+
403
+ ${secBlock}`;
404
+ }
405
+ const constantsContent = `export const APP_NAME = "${appTitle}";
406
+ export const APP_VERSION = "1.0.0";
407
+
408
+ export const USER_ROLES = {
409
+ ADMIN: "admin",
410
+ USER: "user",
411
+ };
412
+ `;
413
+ const configContent = `import path from "path";
414
+ import {
415
+ type AppMeta,
416
+ type AuthConfig,
417
+ type CreateServerConfig,
418
+ type DbConfig,
419
+ type SecurityConfig,
420
+ } from "@lastshotlabs/bunshot";
421
+ import { APP_NAME, APP_VERSION, USER_ROLES } from "@shared/constants";
422
+
423
+ export const app: AppMeta = {
424
+ name: APP_NAME,
425
+ version: APP_VERSION,
426
+ };
427
+
428
+ export const routesDir = path.join(import.meta.dir, "../routes");
429
+
430
+ export const workersDir = path.join(import.meta.dir, "../workers");
431
+
432
+ export const port = process.env.PORT ? parseInt(process.env.PORT) : 3000;
433
+
434
+ export const db: DbConfig = ${buildDbConfig()};
435
+
436
+ ${buildAuthSecurityConfig()}
437
+
438
+ export const appConfig: CreateServerConfig = {
439
+ app,
440
+ routesDir,
441
+ workersDir,
442
+ port,
443
+ db,
444
+ auth,
445
+ security,
446
+ };
447
+ `;
448
+ const indexContent = `import { createServer } from "@lastshotlabs/bunshot";
449
+ import { appConfig } from "@config/index";
450
+
451
+ await createServer(appConfig);
452
+ `;
453
+ const readmeContent = `# ${appTitle}
454
+
455
+ Built with [@lastshotlabs/bunshot](https://github.com/Last-Shot-Labs/bunshot).
456
+
457
+ ## Getting started
458
+
459
+ \`\`\`bash
460
+ # fill in .env with your values
461
+ bun dev
462
+ \`\`\`
463
+
464
+ | Endpoint | Description |
465
+ |---|---|
466
+ | \`POST /auth/register\` | Create account |
467
+ | \`POST /auth/login\` | Sign in, returns JWT |
468
+ | \`GET /docs\` | OpenAPI docs (Scalar) |
469
+ | \`GET /health\` | Health check |
470
+
471
+ ## Project structure
472
+
473
+ \`\`\`
474
+ src/
475
+ index.ts # server entry point
476
+ config/index.ts # centralized app configuration
477
+ lib/constants.ts # app name, version, roles
478
+ routes/ # file-based routing (each file = a router)
479
+ workers/ # BullMQ workers (auto-imported on start)
480
+ middleware/ # custom middleware
481
+ models/ # data models
482
+ services/ # business logic
483
+ \`\`\`
484
+
485
+ ## Adding routes
486
+
487
+ Create a file in \`src/routes/\`:
488
+
489
+ \`\`\`ts
490
+ // src/routes/products.ts
491
+ import { createRouter } from "@lastshotlabs/bunshot";
492
+ import { z } from "zod";
493
+
494
+ export const router = createRouter();
495
+
496
+ router.get("/products", (c) => c.json({ products: [] }));
497
+ \`\`\`
498
+ ${mongoMode ? `
499
+ ## Adding models
500
+
501
+ \`\`\`ts
502
+ // src/models/Product.ts
503
+ import { getMongooseModule, getMongoFromApp } from "@lastshotlabs/bunshot";
504
+
505
+ const mongoose = getMongooseModule();
506
+
507
+ const ProductSchema = new mongoose.Schema({
508
+ name: { type: String, required: true },
509
+ price: { type: Number, required: true },
510
+ }, { timestamps: true });
511
+
512
+ // Use getMongoFromApp(app) to get connections from context
513
+ // export const Product = appConn.model("Product", ProductSchema);
514
+ \`\`\`
515
+ ` : ""}
516
+ ## Environment variables
517
+
518
+ See \`.env\` \u2014 fill in the values before running.
519
+ `;
520
+ function buildEnv() {
521
+ const sections = [`NODE_ENV=development`, `PORT=3000`];
522
+ if (mongoMode === "single") {
523
+ sections.push(`
524
+ # MongoDB
525
+ MONGO_USER=
526
+ MONGO_PASSWORD=
527
+ MONGO_HOST=
528
+ MONGO_DB=`);
529
+ } else if (mongoMode === "separate") {
530
+ sections.push(`
531
+ # MongoDB (app data)
532
+ MONGO_USER=
533
+ MONGO_PASSWORD=
534
+ MONGO_HOST=
535
+ MONGO_DB=
536
+
537
+ # MongoDB (auth \u2014 separate cluster)
538
+ MONGO_AUTH_USER=
539
+ MONGO_AUTH_PASSWORD=
540
+ MONGO_AUTH_HOST=
541
+ MONGO_AUTH_DB=`);
542
+ }
543
+ if (useRedis) {
544
+ sections.push(`
545
+ # Redis
546
+ REDIS_HOST=
547
+ REDIS_USER=
548
+ REDIS_PASSWORD=`);
549
+ }
550
+ sections.push(`
551
+ # JWT
552
+ JWT_SECRET=
553
+
554
+ # Bearer API key
555
+ BEARER_TOKEN=
556
+
557
+ # OAuth \u2014 Google (optional)
558
+ # GOOGLE_CLIENT_ID=
559
+ # GOOGLE_CLIENT_SECRET=
560
+ # GOOGLE_REDIRECT_URI=
561
+
562
+ # OAuth \u2014 Apple (optional)
563
+ # APPLE_CLIENT_ID=
564
+ # APPLE_TEAM_ID=
565
+ # APPLE_KEY_ID=
566
+ # APPLE_PRIVATE_KEY=
567
+ # APPLE_REDIRECT_URI=
568
+
569
+ # OAuth \u2014 GitHub (optional)
570
+ # GITHUB_CLIENT_ID=
571
+ # GITHUB_CLIENT_SECRET=
572
+ # GITHUB_REDIRECT_URI=
573
+
574
+ # OAuth \u2014 Microsoft (optional)
575
+ # MICROSOFT_TENANT_ID=
576
+ # MICROSOFT_CLIENT_ID=
577
+ # MICROSOFT_CLIENT_SECRET=
578
+ # MICROSOFT_REDIRECT_URI=`);
579
+ return sections.join("\n") + "\n";
580
+ }
581
+ console.log(`
582
+ @lastshotlabs/bunshot \u2014 creating ${dirName}
583
+ `);
584
+ mkdirSync(projectDir, { recursive: true });
585
+ console.log(" Running bun init...");
586
+ spawnSync("bun", ["init", "-y"], { cwd: projectDir, stdio: "inherit" });
587
+ const rootIndex = join(projectDir, "index.ts");
588
+ if (existsSync(rootIndex)) rmSync(rootIndex);
589
+ const pkgPath = join(projectDir, "package.json");
590
+ const pkg = JSON.parse(__require("fs").readFileSync(pkgPath, "utf-8"));
591
+ pkg.module = "src/index.ts";
592
+ pkg.scripts = { dev: "bun --watch src/index.ts", start: "bun src/index.ts" };
593
+ pkg.dependencies = { ...pkg.dependencies, "@lastshotlabs/bunshot": "*" };
594
+ writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
595
+ const tsconfigPath = join(projectDir, "tsconfig.json");
596
+ const tsconfigContent = {
597
+ compilerOptions: {
598
+ lib: ["ESNext"],
599
+ target: "ESNext",
600
+ module: "Preserve",
601
+ moduleDetection: "force",
602
+ jsx: "react-jsx",
603
+ allowJs: true,
604
+ moduleResolution: "bundler",
605
+ allowImportingTsExtensions: true,
606
+ verbatimModuleSyntax: true,
607
+ noEmit: true,
608
+ strict: true,
609
+ skipLibCheck: true,
610
+ noFallthroughCasesInSwitch: true,
611
+ noUncheckedIndexedAccess: true,
612
+ noImplicitOverride: true,
613
+ noUnusedLocals: false,
614
+ noUnusedParameters: false,
615
+ noPropertyAccessFromIndexSignature: false,
616
+ paths: {
617
+ "@lib/*": ["./src/lib/*"],
618
+ "@middleware/*": ["./src/middleware/*"],
619
+ "@models/*": ["./src/models/*"],
620
+ "@queues/*": ["./src/queues/*"],
621
+ "@routes/*": ["./src/routes/*"],
622
+ "@scripts/*": ["./src/scripts/*"],
623
+ "@services/*": ["./src/services/*"],
624
+ "@workers/*": ["./src/workers/*"],
625
+ "@service-facades/*": ["./src/service-facades/*"],
626
+ "@config/*": ["./src/config/*"],
627
+ "@constants/*": ["./src/lib/constants/*"]
628
+ }
629
+ }
630
+ };
631
+ writeFileSync(tsconfigPath, JSON.stringify(tsconfigContent, null, 2) + "\n", "utf-8");
632
+ mkdirSync(configDir, { recursive: true });
633
+ mkdirSync(libDir, { recursive: true });
634
+ mkdirSync(routesDir, { recursive: true });
635
+ mkdirSync(workersDir, { recursive: true });
636
+ mkdirSync(queuesDir, { recursive: true });
637
+ mkdirSync(wsDir, { recursive: true });
638
+ mkdirSync(servicesDir, { recursive: true });
639
+ mkdirSync(middlewareDir, { recursive: true });
640
+ mkdirSync(modelsDir, { recursive: true });
641
+ writeFileSync(join(libDir, "constants.ts"), constantsContent, "utf-8");
642
+ writeFileSync(join(configDir, "index.ts"), configContent, "utf-8");
643
+ writeFileSync(join(srcDir, "index.ts"), indexContent, "utf-8");
644
+ writeFileSync(join(projectDir, ".env"), buildEnv(), "utf-8");
645
+ writeFileSync(join(projectDir, "README.md"), readmeContent, "utf-8");
646
+ console.log(" Created:");
647
+ console.log(` + ${dirName}/src/index.ts`);
648
+ console.log(` + ${dirName}/src/config/index.ts`);
649
+ console.log(` + ${dirName}/src/lib/constants.ts`);
650
+ console.log(` + ${dirName}/src/routes/`);
651
+ console.log(` + ${dirName}/src/workers/`);
652
+ console.log(` + ${dirName}/src/queues/`);
653
+ console.log(` + ${dirName}/src/ws/`);
654
+ console.log(` + ${dirName}/src/services/`);
655
+ console.log(` + ${dirName}/src/middleware/`);
656
+ console.log(` + ${dirName}/src/models/`);
657
+ console.log(` + ${dirName}/.env`);
658
+ console.log(` + ${dirName}/README.md`);
659
+ console.log(`
660
+ DB config:`);
661
+ console.log(` mongo: ${mongoMode || "none"} | redis: ${useRedis}`);
662
+ console.log(
663
+ ` auth: ${authStore} | sessions: ${sessionStore} | cache: ${cacheStore} | oauthState: ${oauthStateStore}`
664
+ );
665
+ console.log(`
666
+ Auth config:`);
667
+ console.log(` posture: ${authPosture}`);
668
+ console.log("\n Initializing git...");
669
+ const git = spawnSync("git", ["init"], { cwd: projectDir, stdio: "inherit" });
670
+ if (git.status !== 0) {
671
+ console.error(" git init failed \u2014 skipping.");
672
+ }
673
+ console.log("\n Installing dependencies...");
674
+ const install = spawnSync("bun", ["install"], { cwd: projectDir, stdio: "inherit" });
675
+ if (install.status !== 0) {
676
+ console.error("\n bun install failed. Run it manually inside the directory.");
677
+ process.exit(1);
678
+ }
679
+ console.log(`
680
+ Done! Next steps:
681
+ `);
682
+ console.log(` cd ${dirName}`);
683
+ console.log(` # fill in .env`);
684
+ console.log(` bun dev
685
+ `);
686
+ }
687
+ };
688
+ export {
689
+ Init as default
690
+ };
@@ -0,0 +1,6 @@
1
+ #!/usr/bin/env node
2
+
3
+ // src/cli/index.ts
4
+ import { flush, run } from "@oclif/core";
5
+ await run(process.argv.slice(2), import.meta.url);
6
+ await flush();