@m5kdev/backend 0.6.0 → 0.8.0

package/dist/src/utils/errors.mjs

@@ -0,0 +1,96 @@
+import { logger } from "./logger.mjs";
+import { TRPCError } from "@trpc/server";
+import { getHTTPStatusCodeFromError } from "@trpc/server/http";
+import { camel } from "radashi";
+//#region src/utils/errors.ts
+var ServerError = class ServerError extends Error {
+	code;
+	layer;
+	layerName;
+	clientMessage;
+	context;
+	boundaryStack;
+	constructor({ code, layer, layerName, message, clientMessage, cause, context, captureBoundary = true }) {
+		super(message ?? `server.error.${layer}.${camel(code)}`, { cause: cause instanceof Error ? cause : void 0 });
+		this.code = code;
+		this.layer = layer ?? "unknown";
+		this.layerName = layerName ?? "UnknownLayer";
+		this.clientMessage = clientMessage ?? `server.error.${layer}.${camel(code)}`;
+		this.context = context;
+		if (captureBoundary) this.boundaryStack = (/* @__PURE__ */ new Error()).stack;
+		Error.captureStackTrace?.(this, ServerError);
+		Object.setPrototypeOf(this, new.target.prototype);
+	}
+	is5xxError() {
+		const statusCode = this.getHTTPStatusCode();
+		return statusCode >= 500 && statusCode < 600;
+	}
+	getHTTPStatusCode() {
+		return getHTTPStatusCodeFromError(this.toTRPC());
+	}
+	toTRPC() {
+		return new TRPCError({
+			code: this.code,
+			message: this.message,
+			cause: this.cause
+		});
+	}
+	toJSON() {
+		return {
+			code: this.code,
+			layer: this.layer,
+			layerName: this.layerName,
+			message: this.message,
+			context: this.context,
+			stack: process.env.NODE_ENV !== "production" ? this.stack : void 0,
+			boundaryStack: process.env.NODE_ENV !== "production" ? this.boundaryStack : void 0,
+			cause: this.cause instanceof Error ? {
+				name: this.cause.name,
+				message: this.cause.message,
+				stack: this.cause.stack
+			} : this.cause
+		};
+	}
+	static fromUnknown(code, cause, opts) {
+		const msg = cause instanceof Error ? cause.message : void 0;
+		return new ServerError({
+			code,
+			layer: opts?.layer,
+			layerName: opts?.layerName,
+			message: msg,
+			cause,
+			context: opts?.context,
+			captureBoundary: true
+		});
+	}
+};
+function getErrorReporter() {
+	return globalThis.m5ErrorReporter;
+}
+function setErrorReporter(reporter) {
+	globalThis.m5ErrorReporter = reporter;
+}
+function reportError(err, hint) {
+	let eventHint = hint;
+	const reporter = getErrorReporter();
+	if (!reporter) {
+		logger.error("[reportError] No error reporter set!");
+		return;
+	}
+	if (err instanceof ServerError) eventHint = {
+		...hint,
+		captureContext: {
+			...hint?.captureContext,
+			extra: {
+				...hint?.captureContext?.extra ?? {},
+				layer: err.layer,
+				layerName: err.layerName
+			}
+		}
+	};
+	return reporter.captureException(err, eventHint);
+}
+//#endregion
+export { ServerError, getErrorReporter, reportError, setErrorReporter };
+
+//# sourceMappingURL=errors.mjs.map

package/dist/src/utils/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../src/utils/errors.ts"],"sourcesContent":["import type { captureException } from \"@sentry/node\";\r\nimport { type TRPC_ERROR_CODE_KEY, TRPCError } from \"@trpc/server\";\r\nimport { getHTTPStatusCodeFromError } from \"@trpc/server/http\";\r\nimport { camel } from \"radashi\";\r\nimport type { ServerErrorLayer } from \"../modules/base/base.types\";\r\nimport { logger } from \"./logger\";\r\n\r\nexport type { ServerErrorLayer };\r\nexport class ServerError extends Error {\r\n  readonly code: TRPC_ERROR_CODE_KEY;\r\n  readonly layer: ServerErrorLayer;\r\n  readonly layerName: string;\r\n  readonly clientMessage?: string;\r\n  readonly context?: Record<string, unknown>;\r\n  readonly boundaryStack?: string; // where we wrapped it\r\n\r\n  constructor({\r\n    code,\r\n    layer,\r\n    layerName,\r\n    message,\r\n    clientMessage,\r\n    cause,\r\n    context,\r\n    captureBoundary = true,\r\n  }: {\r\n    code: TRPC_ERROR_CODE_KEY;\r\n    layer?: ServerErrorLayer;\r\n    layerName?: string;\r\n    message?: string;\r\n    clientMessage?: string;\r\n    cause?: unknown;\r\n    context?: Record<string, unknown>;\r\n    captureBoundary?: boolean;\r\n  }) {\r\n    // keep native cause chain when the cause is an Error\r\n    super(message ?? `server.error.${layer}.${camel(code)}`, {\r\n      cause: cause instanceof Error ? cause : undefined,\r\n    });\r\n\r\n    this.code = code;\r\n    this.layer = layer ?? \"unknown\";\r\n    this.layerName = layerName ?? \"UnknownLayer\";\r\n    this.clientMessage = clientMessage ?? `server.error.${layer}.${camel(code)}`;\r\n    this.context = context;\r\n    if (captureBoundary) this.boundaryStack = new Error().stack;\r\n\r\n    Error.captureStackTrace?.(this, ServerError);\r\n    Object.setPrototypeOf(this, new.target.prototype);\r\n  }\r\n\r\n  is5xxError(): boolean {\r\n    const statusCode = this.getHTTPStatusCode();\r\n    return statusCode >= 500 && statusCode < 600;\r\n  }\r\n\r\n  getHTTPStatusCode(): number {\r\n    return getHTTPStatusCodeFromError(this.toTRPC());\r\n  }\r\n\r\n  toTRPC(): TRPCError {\r\n    return new TRPCError({\r\n      code: this.code,\r\n      message: this.message,\r\n      cause: this.cause,\r\n    });\r\n  }\r\n\r\n  toJSON() {\r\n    return {\r\n      code: this.code,\r\n      layer: this.layer,\r\n      layerName: this.layerName,\r\n      message: this.message,\r\n      context: this.context,\r\n      stack: process.env.NODE_ENV !== \"production\" ? this.stack : undefined,\r\n      boundaryStack: process.env.NODE_ENV !== \"production\" ? this.boundaryStack : undefined,\r\n      // Shallow representation of cause to avoid cycles\r\n      cause:\r\n        this.cause instanceof Error\r\n          ? { name: this.cause.name, message: this.cause.message, stack: this.cause.stack }\r\n          : this.cause,\r\n    };\r\n  }\r\n\r\n  static fromUnknown(\r\n    code: TRPC_ERROR_CODE_KEY,\r\n    cause: unknown,\r\n    opts?: { layer?: ServerErrorLayer; layerName?: string; context?: Record<string, unknown> }\r\n  ) {\r\n    const msg = cause instanceof Error ? cause.message : undefined;\r\n    return new ServerError({\r\n      code,\r\n      layer: opts?.layer,\r\n      layerName: opts?.layerName,\r\n      message: msg,\r\n      cause,\r\n      context: opts?.context,\r\n      captureBoundary: true,\r\n    });\r\n  }\r\n}\r\n\r\nexport type ErrorReporter = {\r\n  captureException: (\r\n    err: Parameters<typeof captureException>[0],\r\n    hint?: Parameters<typeof captureException>[1]\r\n  ) => string;\r\n};\r\ndeclare global {\r\n  // eslint-disable-next-line no-var\r\n  var m5ErrorReporter: ErrorReporter | undefined;\r\n}\r\n\r\nexport function getErrorReporter(): ErrorReporter | undefined {\r\n  return globalThis.m5ErrorReporter;\r\n}\r\n\r\nexport function setErrorReporter(reporter: ErrorReporter) {\r\n  globalThis.m5ErrorReporter = reporter;\r\n}\r\n\r\nexport function reportError(\r\n  err: ServerError | Error | unknown,\r\n  hint?: Parameters<typeof captureException>[1]\r\n): string | undefined {\r\n  let eventHint = hint;\r\n  const reporter = getErrorReporter();\r\n  if (!reporter) {\r\n    logger.error(\"[reportError] No error reporter set!\");\r\n    return;\r\n  }\r\n  if (err instanceof ServerError) {\r\n    // Merge - don't clobber caller-provided hint\r\n    eventHint = {\r\n      ...hint,\r\n      captureContext: {\r\n        ...(hint as any)?.captureContext,\r\n        extra: {\r\n          ...((hint as any)?.captureContext?.extra ?? {}),\r\n          layer: err.layer,\r\n          layerName: err.layerName,\r\n        },\r\n      },\r\n    };\r\n  }\r\n  return reporter.captureException(err, eventHint);\r\n}\r\n"],"mappings":";;;;;AAQA,IAAa,cAAb,MAAa,oBAAoB,MAAM;CACrC;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,MACA,OACA,WACA,SACA,eACA,OACA,SACA,kBAAkB,QAUjB;AAED,QAAM,WAAW,gBAAgB,MAAM,GAAG,MAAM,KAAK,IAAI,EACvD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,GACzC,CAAC;AAEF,OAAK,OAAO;AACZ,OAAK,QAAQ,SAAS;AACtB,OAAK,YAAY,aAAa;AAC9B,OAAK,gBAAgB,iBAAiB,gBAAgB,MAAM,GAAG,MAAM,KAAK;AAC1E,OAAK,UAAU;AACf,MAAI,gBAAiB,MAAK,iCAAgB,IAAI,OAAO,EAAC;AAEtD,QAAM,oBAAoB,MAAM,YAAY;AAC5C,SAAO,eAAe,MAAM,IAAI,OAAO,UAAU;;CAGnD,aAAsB;EACpB,MAAM,aAAa,KAAK,mBAAmB;AAC3C,SAAO,cAAc,OAAO,aAAa;;CAG3C,oBAA4B;AAC1B,SAAO,2BAA2B,KAAK,QAAQ,CAAC;;CAGlD,SAAoB;AAClB,SAAO,IAAI,UAAU;GACnB,MAAM,KAAK;GACX,SAAS,KAAK;GACd,OAAO,KAAK;GACb,CAAC;;CAGJ,SAAS;AACP,SAAO;GACL,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,WAAW,KAAK;GAChB,SAAS,KAAK;GACd,SAAS,KAAK;GACd,OAAO,QAAQ,IAAI,aAAa,eAAe,KAAK,QAAQ,KAAA;GAC5D,eAAe,QAAQ,IAAI,aAAa,eAAe,KAAK,gBAAgB,KAAA;GAE5E,OACE,KAAK,iBAAiB,QAClB;IAAE,MAAM,KAAK,MAAM;IAAM,SAAS,KAAK,MAAM;IAAS,OAAO,KAAK,MAAM;IAAO,GAC/E,KAAK;GACZ;;CAGH,OAAO,YACL,MACA,OACA,MACA;EACA,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,KAAA;AACrD,SAAO,IAAI,YAAY;GACrB;GACA,OAAO,MAAM;GACb,WAAW,MAAM;GACjB,SAAS;GACT;GACA,SAAS,MAAM;GACf,iBAAiB;GAClB,CAAC;;;AAeN,SAAgB,mBAA8C;AAC5D,QAAO,WAAW;;AAGpB,SAAgB,iBAAiB,UAAyB;AACxD,YAAW,kBAAkB;;AAG/B,SAAgB,YACd,KACA,MACoB;CACpB,IAAI,YAAY;CAChB,MAAM,WAAW,kBAAkB;AACnC,KAAI,CAAC,UAAU;AACb,SAAO,MAAM,uCAAuC;AACpD;;AAEF,KAAI,eAAe,YAEjB,aAAY;EACV,GAAG;EACH,gBAAgB;GACd,GAAI,MAAc;GAClB,OAAO;IACL,GAAK,MAAc,gBAAgB,SAAS,EAAE;IAC9C,OAAO,IAAI;IACX,WAAW,IAAI;IAChB;GACF;EACF;AAEH,QAAO,SAAS,iBAAiB,KAAK,UAAU"}

package/dist/src/utils/logger.d.mts

@@ -0,0 +1,7 @@
+import * as _$pino from "pino";
+
+//#region src/utils/logger.d.ts
+declare const logger: _$pino.Logger<never, boolean>;
+//#endregion
+export { logger };
+//# sourceMappingURL=logger.d.mts.map

package/dist/src/utils/logger.mjs

@@ -0,0 +1,10 @@
+import pino from "pino";
+//#region src/utils/logger.ts
+const logger = pino({
+	transport: { target: "pino-pretty" },
+	level: "debug"
+});
+//#endregion
+export { logger };
+
+//# sourceMappingURL=logger.mjs.map

package/dist/src/utils/logger.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.mjs","names":[],"sources":["../../../src/utils/logger.ts"],"sourcesContent":["import pino from \"pino\";\r\n\r\nexport const logger = pino({\r\n  transport: {\r\n    target: \"pino-pretty\",\r\n  },\r\n  level: \"debug\",\r\n});\r\n"],"mappings":";;AAEA,MAAa,SAAS,KAAK;CACzB,WAAW,EACT,QAAQ,eACT;CACD,OAAO;CACR,CAAC"}

package/dist/src/utils/posthog.d.mts

@@ -0,0 +1,17 @@
+import { PostHog } from "posthog-node";
+
+//#region src/utils/posthog.d.ts
+declare global {
+  var m5Posthog: PostHog | undefined;
+}
+declare function getPosthog(): PostHog | undefined;
+declare function setPosthog(posthog: PostHog): void;
+type PosthogRequestState = {
+  disableCapture: boolean;
+};
+declare function runWithPosthogRequestState<T>(state: PosthogRequestState, callback: () => T): T;
+declare function isPosthogCaptureDisabled(): boolean;
+declare function posthogCapture(event: Parameters<PostHog["capture"]>[0]): ReturnType<PostHog["capture"]> | undefined;
+//#endregion
+export { getPosthog, isPosthogCaptureDisabled, posthogCapture, runWithPosthogRequestState, setPosthog };
+//# sourceMappingURL=posthog.d.mts.map

package/dist/src/utils/posthog.mjs

@@ -0,0 +1,25 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/utils/posthog.ts
+function getPosthog() {
+	return globalThis.m5Posthog;
+}
+function setPosthog(posthog) {
+	globalThis.m5Posthog = posthog;
+}
+const posthogRequestState = new AsyncLocalStorage();
+function runWithPosthogRequestState(state, callback) {
+	return posthogRequestState.run(state, callback);
+}
+function isPosthogCaptureDisabled() {
+	return posthogRequestState.getStore()?.disableCapture ?? false;
+}
+function posthogCapture(event) {
+	if (isPosthogCaptureDisabled()) return;
+	const posthog = getPosthog();
+	if (!posthog) return;
+	return posthog.capture(event);
+}
+//#endregion
+export { getPosthog, isPosthogCaptureDisabled, posthogCapture, runWithPosthogRequestState, setPosthog };
+
+//# sourceMappingURL=posthog.mjs.map

package/dist/src/utils/posthog.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"posthog.mjs","names":[],"sources":["../../../src/utils/posthog.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\r\nimport type { PostHog } from \"posthog-node\";\r\n\r\ndeclare global {\r\n  // eslint-disable-next-line no-var\r\n  var m5Posthog: PostHog | undefined;\r\n}\r\n\r\nexport function getPosthog(): PostHog | undefined {\r\n  return globalThis.m5Posthog;\r\n}\r\n\r\nexport function setPosthog(posthog: PostHog) {\r\n  globalThis.m5Posthog = posthog;\r\n}\r\n\r\ntype PosthogRequestState = {\r\n  disableCapture: boolean;\r\n};\r\n\r\nconst posthogRequestState = new AsyncLocalStorage<PosthogRequestState>();\r\n\r\nexport function runWithPosthogRequestState<T>(state: PosthogRequestState, callback: () => T): T {\r\n  return posthogRequestState.run(state, callback);\r\n}\r\n\r\nexport function isPosthogCaptureDisabled(): boolean {\r\n  return posthogRequestState.getStore()?.disableCapture ?? false;\r\n}\r\n\r\nexport function posthogCapture(\r\n  event: Parameters<PostHog[\"capture\"]>[0]\r\n): ReturnType<PostHog[\"capture\"]> | undefined {\r\n  if (isPosthogCaptureDisabled()) {\r\n    return undefined;\r\n  }\r\n\r\n  const posthog = getPosthog();\r\n  if (!posthog) {\r\n    return undefined;\r\n  }\r\n  return posthog.capture(event);\r\n}\r\n"],"mappings":";;AAQA,SAAgB,aAAkC;AAChD,QAAO,WAAW;;AAGpB,SAAgB,WAAW,SAAkB;AAC3C,YAAW,YAAY;;AAOzB,MAAM,sBAAsB,IAAI,mBAAwC;AAExE,SAAgB,2BAA8B,OAA4B,UAAsB;AAC9F,QAAO,oBAAoB,IAAI,OAAO,SAAS;;AAGjD,SAAgB,2BAAoC;AAClD,QAAO,oBAAoB,UAAU,EAAE,kBAAkB;;AAG3D,SAAgB,eACd,OAC4C;AAC5C,KAAI,0BAA0B,CAC5B;CAGF,MAAM,UAAU,YAAY;AAC5B,KAAI,CAAC,QACH;AAEF,QAAO,QAAQ,QAAQ,MAAM"}

package/dist/src/utils/trpc.d.mts

@@ -0,0 +1,54 @@
+import { ServerError } from "./errors.mjs";
+import { BetterAuth, Session, User } from "../modules/auth/auth.lib.mjs";
+import { OrganizationActor, TeamActor, UserActor } from "../modules/base/base.actor.mjs";
+import { TRPCRootObject } from "@trpc/server";
+import { Result } from "neverthrow";
+import { transformer } from "@m5kdev/commons/utils/trpc";
+import { CreateExpressContextOptions } from "@trpc/server/adapters/express";
+
+//#region src/utils/trpc.d.ts
+type RequestContext = {
+  session: Session | null;
+  user: User | null;
+  actor: UserActor | null;
+};
+type Context = {
+  session: Session;
+  user: User;
+  actor: UserActor;
+};
+type OrganizationContext = {
+  session: Session;
+  user: User;
+  actor: OrganizationActor;
+};
+type TeamContext = {
+  session: Session;
+  user: User;
+  actor: TeamActor;
+};
+type TRPCCreate = TRPCRootObject<Context, any, {
+  transformer: typeof transformer;
+}>;
+type TRPCMethods = {
+  router: TRPCCreate["router"];
+  publicProcedure: TRPCCreate["procedure"];
+  privateProcedure: TRPCCreate["procedure"];
+  adminProcedure: TRPCCreate["procedure"];
+};
+declare function createAuthContext(auth: BetterAuth): ({
+  req
+}: CreateExpressContextOptions) => Promise<RequestContext>;
+declare function handleAsyncTRPCResult<T>(result: Promise<Result<T, ServerError>>): Promise<T>;
+declare function handleTRPCResult<T>(result: Result<T, ServerError>): T;
+declare function verifyProtectedProcedureContext(ctx: RequestContext): Context;
+declare function verifyOrganizationProcedureContext(ctx: Context): OrganizationContext;
+declare function verifyTeamProcedureContext(ctx: Context): TeamContext;
+declare function verifyAdminProcedureContext(ctx: RequestContext): Context;
+declare function requireRequestUser(ctx: RequestContext): User;
+declare function requireRequestActor(ctx: RequestContext): UserActor;
+declare function requireRequestActor(ctx: RequestContext, scope: "organization"): OrganizationActor;
+declare function requireRequestActor(ctx: RequestContext, scope: "team"): TeamActor;
+//#endregion
+export { Context, OrganizationContext, RequestContext, TRPCMethods, TeamContext, createAuthContext, handleAsyncTRPCResult, handleTRPCResult, requireRequestActor, requireRequestUser, verifyAdminProcedureContext, verifyOrganizationProcedureContext, verifyProtectedProcedureContext, verifyTeamProcedureContext };
+//# sourceMappingURL=trpc.d.mts.map

package/dist/src/utils/trpc.mjs

@@ -0,0 +1,146 @@
+import { logger } from "./logger.mjs";
+import { ServerError } from "./errors.mjs";
+import { createActorFromContext, validateActor } from "../modules/base/base.actor.mjs";
+import { fromNodeHeaders } from "better-auth/node";
+//#region src/utils/trpc.ts
+function createAuthContext(auth) {
+	return async function createContext({ req }) {
+		const data = await auth.api.getSession({ headers: fromNodeHeaders(req.headers) });
+		const user = data?.user || null;
+		const session = data?.session || null;
+		return {
+			session,
+			user,
+			actor: user && session ? createActorFromContext({
+				user,
+				session
+			}, "user") : null
+		};
+	};
+}
+async function handleAsyncTRPCResult(result) {
+	return handleTRPCResult(await result);
+}
+function handleTRPCResult(result) {
+	if (result.isErr()) {
+		logger.debug("Is tRPC Error");
+		logger.error({
+			layer: result.error.layer,
+			layerName: result.error.layerName,
+			error: result.error.toJSON()
+		});
+		throw result.error.toTRPC();
+	}
+	return result.value;
+}
+function verifyProtectedProcedureContext(ctx) {
+	if (!ctx.user || !ctx.session || !ctx.actor) throw new ServerError({
+		code: "UNAUTHORIZED",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	return ctx;
+}
+function verifyOrganizationProcedureContext(ctx) {
+	if (!ctx.user || !ctx.session) throw new ServerError({
+		code: "UNAUTHORIZED",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	try {
+		const actor = createActorFromContext({
+			user: ctx.user,
+			session: ctx.session
+		}, "organization");
+		return {
+			...ctx,
+			actor
+		};
+	} catch (e) {
+		if (e instanceof ServerError) throw e.toTRPC();
+		throw e;
+	}
+}
+function verifyTeamProcedureContext(ctx) {
+	if (!ctx.user || !ctx.session) throw new ServerError({
+		code: "UNAUTHORIZED",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	try {
+		const actor = createActorFromContext({
+			user: ctx.user,
+			session: ctx.session
+		}, "team");
+		return {
+			...ctx,
+			actor
+		};
+	} catch (e) {
+		if (e instanceof ServerError) throw e.toTRPC();
+		throw e;
+	}
+}
+function verifyAdminProcedureContext(ctx) {
+	if (!ctx.user || !ctx.session) throw new ServerError({
+		code: "UNAUTHORIZED",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	if (ctx.user.role !== "admin") throw new ServerError({
+		code: "FORBIDDEN",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	if (!ctx.actor) throw new ServerError({
+		code: "UNAUTHORIZED",
+		layer: "controller",
+		layerName: "TRPCController"
+	}).toTRPC();
+	return ctx;
+}
+function requireRequestUser(ctx) {
+	return verifyProtectedProcedureContext(ctx).user;
+}
+function requireRequestActor(ctx, scope = "user") {
+	const verified = verifyProtectedProcedureContext(ctx);
+	if (scope === "user") {
+		if (!validateActor(verified.actor, "user")) throw new ServerError({
+			code: "FORBIDDEN",
+			layer: "controller",
+			layerName: "TRPCController"
+		}).toTRPC();
+		return verified.actor;
+	}
+	try {
+		if (scope === "organization") {
+			const actor = createActorFromContext({
+				user: verified.user,
+				session: verified.session
+			}, "organization");
+			if (!validateActor(actor, "organization")) throw new ServerError({
+				code: "FORBIDDEN",
+				layer: "controller",
+				layerName: "TRPCController"
+			}).toTRPC();
+			return actor;
+		}
+		const actor = createActorFromContext({
+			user: verified.user,
+			session: verified.session
+		}, "team");
+		if (!validateActor(actor, "team")) throw new ServerError({
+			code: "FORBIDDEN",
+			layer: "controller",
+			layerName: "TRPCController"
+		}).toTRPC();
+		return actor;
+	} catch (e) {
+		if (e instanceof ServerError) throw e.toTRPC();
+		throw e;
+	}
+}
+//#endregion
+export { createAuthContext, handleAsyncTRPCResult, handleTRPCResult, requireRequestActor, requireRequestUser, verifyAdminProcedureContext, verifyOrganizationProcedureContext, verifyProtectedProcedureContext, verifyTeamProcedureContext };
+
+//# sourceMappingURL=trpc.mjs.map

package/dist/src/utils/trpc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trpc.mjs","names":[],"sources":["../../../src/utils/trpc.ts"],"sourcesContent":["import type { transformer } from \"@m5kdev/commons/utils/trpc\";\r\nimport type { TRPCRootObject } from \"@trpc/server\";\r\nimport type { CreateExpressContextOptions } from \"@trpc/server/adapters/express\";\r\nimport { fromNodeHeaders } from \"better-auth/node\";\r\nimport type { Result } from \"neverthrow\";\r\nimport type { BetterAuth, Session, User } from \"../modules/auth/auth.lib\";\r\nimport {\r\n  createActorFromContext,\r\n  validateActor,\r\n  type ActorScope,\r\n  type AuthenticatedActor,\r\n  type OrganizationActor,\r\n  type TeamActor,\r\n  type UserActor,\r\n} from \"../modules/base/base.actor\";\r\nimport { ServerError } from \"./errors\";\r\nimport { logger } from \"./logger\";\r\n\r\nexport type RequestContext = {\r\n  session: Session | null;\r\n  user: User | null;\r\n  actor: UserActor | null;\r\n};\r\n\r\nexport type Context = {\r\n  session: Session;\r\n  user: User;\r\n  actor: UserActor;\r\n};\r\n\r\nexport type OrganizationContext = {\r\n  session: Session;\r\n  user: User;\r\n  actor: OrganizationActor;\r\n};\r\n\r\nexport type TeamContext = {\r\n  session: Session;\r\n  user: User;\r\n  actor: TeamActor;\r\n};\r\n\r\ntype TRPCCreate = TRPCRootObject<Context, any, { transformer: typeof transformer }>;\r\n\r\nexport type TRPCMethods = {\r\n  router: TRPCCreate[\"router\"];\r\n  publicProcedure: TRPCCreate[\"procedure\"];\r\n  privateProcedure: TRPCCreate[\"procedure\"];\r\n  adminProcedure: TRPCCreate[\"procedure\"];\r\n};\r\n\r\nexport function createAuthContext(auth: BetterAuth) {\r\n  return async function createContext({ req }: CreateExpressContextOptions): Promise<RequestContext> {\r\n    const data = await auth.api.getSession({\r\n      headers: fromNodeHeaders(req.headers),\r\n    });\r\n\r\n    const user = (data?.user as User) || null;\r\n    const session = (data?.session as Session) || null;\r\n    const actor =\r\n      user && session ? createActorFromContext({ user, session }, \"user\") : null;\r\n\r\n    return {\r\n      session,\r\n      user,\r\n      actor,\r\n    };\r\n  };\r\n}\r\n\r\nexport async function handleAsyncTRPCResult<T>(result: Promise<Result<T, ServerError>>) {\r\n  return handleTRPCResult(await result);\r\n}\r\n\r\nexport function handleTRPCResult<T>(result: Result<T, ServerError>) {\r\n  if (result.isErr()) {\r\n    logger.debug(\"Is tRPC Error\");\r\n    logger.error({\r\n      layer: result.error.layer,\r\n      layerName: result.error.layerName,\r\n      error: result.error.toJSON(),\r\n    });\r\n    throw result.error.toTRPC();\r\n  }\r\n  return result.value;\r\n}\r\n\r\nexport function verifyProtectedProcedureContext(ctx: RequestContext): Context {\r\n  if (!ctx.user || !ctx.session || !ctx.actor) {\r\n    throw new ServerError({\r\n      code: \"UNAUTHORIZED\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n  return ctx as Context;\r\n}\r\n\r\nexport function verifyOrganizationProcedureContext(ctx: Context): OrganizationContext {\r\n  if (!ctx.user || !ctx.session) {\r\n    throw new ServerError({\r\n      code: \"UNAUTHORIZED\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n  try {\r\n    const actor = createActorFromContext({ user: ctx.user, session: ctx.session }, \"organization\");\r\n    return { ...ctx, actor };\r\n  } catch (e) {\r\n    if (e instanceof ServerError) throw e.toTRPC();\r\n    throw e;\r\n  }\r\n}\r\n\r\nexport function verifyTeamProcedureContext(ctx: Context): TeamContext {\r\n  if (!ctx.user || !ctx.session) {\r\n    throw new ServerError({\r\n      code: \"UNAUTHORIZED\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n  try {\r\n    const actor = createActorFromContext({ user: ctx.user, session: ctx.session }, \"team\");\r\n    return { ...ctx, actor };\r\n  } catch (e) {\r\n    if (e instanceof ServerError) throw e.toTRPC();\r\n    throw e;\r\n  }\r\n}\r\n\r\nexport function verifyAdminProcedureContext(ctx: RequestContext): Context {\r\n  if (!ctx.user || !ctx.session) {\r\n    throw new ServerError({\r\n      code: \"UNAUTHORIZED\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n\r\n  if (ctx.user.role !== \"admin\") {\r\n    throw new ServerError({\r\n      code: \"FORBIDDEN\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n  if (!ctx.actor) {\r\n    throw new ServerError({\r\n      code: \"UNAUTHORIZED\",\r\n      layer: \"controller\",\r\n      layerName: \"TRPCController\",\r\n    }).toTRPC();\r\n  }\r\n  return ctx as Context;\r\n}\r\n\r\nexport function requireRequestUser(ctx: RequestContext): User {\r\n  return verifyProtectedProcedureContext(ctx).user;\r\n}\r\n\r\nexport function requireRequestActor(ctx: RequestContext): UserActor;\r\nexport function requireRequestActor(ctx: RequestContext, scope: \"organization\"): OrganizationActor;\r\nexport function requireRequestActor(ctx: RequestContext, scope: \"team\"): TeamActor;\r\nexport function requireRequestActor(\r\n  ctx: RequestContext,\r\n  scope: ActorScope = \"user\"\r\n): AuthenticatedActor {\r\n  const verified = verifyProtectedProcedureContext(ctx);\r\n\r\n  if (scope === \"user\") {\r\n    if (!validateActor(verified.actor, \"user\")) {\r\n      throw new ServerError({\r\n        code: \"FORBIDDEN\",\r\n        layer: \"controller\",\r\n        layerName: \"TRPCController\",\r\n      }).toTRPC();\r\n    }\r\n    return verified.actor;\r\n  }\r\n\r\n  try {\r\n    if (scope === \"organization\") {\r\n      const actor = createActorFromContext(\r\n        { user: verified.user, session: verified.session },\r\n        \"organization\"\r\n      );\r\n      if (!validateActor(actor, \"organization\")) {\r\n        throw new ServerError({\r\n          code: \"FORBIDDEN\",\r\n          layer: \"controller\",\r\n          layerName: \"TRPCController\",\r\n        }).toTRPC();\r\n      }\r\n      return actor;\r\n    }\r\n\r\n    const actor = createActorFromContext(\r\n      { user: verified.user, session: verified.session },\r\n      \"team\"\r\n    );\r\n    if (!validateActor(actor, \"team\")) {\r\n      throw new ServerError({\r\n        code: \"FORBIDDEN\",\r\n        layer: \"controller\",\r\n        layerName: \"TRPCController\",\r\n      }).toTRPC();\r\n    }\r\n    return actor;\r\n  } catch (e) {\r\n    if (e instanceof ServerError) throw e.toTRPC();\r\n    throw e;\r\n  }\r\n}\r\n"],"mappings":";;;;;AAmDA,SAAgB,kBAAkB,MAAkB;AAClD,QAAO,eAAe,cAAc,EAAE,OAA6D;EACjG,MAAM,OAAO,MAAM,KAAK,IAAI,WAAW,EACrC,SAAS,gBAAgB,IAAI,QAAQ,EACtC,CAAC;EAEF,MAAM,OAAQ,MAAM,QAAiB;EACrC,MAAM,UAAW,MAAM,WAAuB;AAI9C,SAAO;GACL;GACA;GACA,OALA,QAAQ,UAAU,uBAAuB;IAAE;IAAM;IAAS,EAAE,OAAO,GAAG;GAMvE;;;AAIL,eAAsB,sBAAyB,QAAyC;AACtF,QAAO,iBAAiB,MAAM,OAAO;;AAGvC,SAAgB,iBAAoB,QAAgC;AAClE,KAAI,OAAO,OAAO,EAAE;AAClB,SAAO,MAAM,gBAAgB;AAC7B,SAAO,MAAM;GACX,OAAO,OAAO,MAAM;GACpB,WAAW,OAAO,MAAM;GACxB,OAAO,OAAO,MAAM,QAAQ;GAC7B,CAAC;AACF,QAAM,OAAO,MAAM,QAAQ;;AAE7B,QAAO,OAAO;;AAGhB,SAAgB,gCAAgC,KAA8B;AAC5E,KAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,MACpC,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAEb,QAAO;;AAGT,SAAgB,mCAAmC,KAAmC;AACpF,KAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,QACpB,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAEb,KAAI;EACF,MAAM,QAAQ,uBAAuB;GAAE,MAAM,IAAI;GAAM,SAAS,IAAI;GAAS,EAAE,eAAe;AAC9F,SAAO;GAAE,GAAG;GAAK;GAAO;UACjB,GAAG;AACV,MAAI,aAAa,YAAa,OAAM,EAAE,QAAQ;AAC9C,QAAM;;;AAIV,SAAgB,2BAA2B,KAA2B;AACpE,KAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,QACpB,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAEb,KAAI;EACF,MAAM,QAAQ,uBAAuB;GAAE,MAAM,IAAI;GAAM,SAAS,IAAI;GAAS,EAAE,OAAO;AACtF,SAAO;GAAE,GAAG;GAAK;GAAO;UACjB,GAAG;AACV,MAAI,aAAa,YAAa,OAAM,EAAE,QAAQ;AAC9C,QAAM;;;AAIV,SAAgB,4BAA4B,KAA8B;AACxE,KAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,QACpB,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAGb,KAAI,IAAI,KAAK,SAAS,QACpB,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAEb,KAAI,CAAC,IAAI,MACP,OAAM,IAAI,YAAY;EACpB,MAAM;EACN,OAAO;EACP,WAAW;EACZ,CAAC,CAAC,QAAQ;AAEb,QAAO;;AAGT,SAAgB,mBAAmB,KAA2B;AAC5D,QAAO,gCAAgC,IAAI,CAAC;;AAM9C,SAAgB,oBACd,KACA,QAAoB,QACA;CACpB,MAAM,WAAW,gCAAgC,IAAI;AAErD,KAAI,UAAU,QAAQ;AACpB,MAAI,CAAC,cAAc,SAAS,OAAO,OAAO,CACxC,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,OAAO;GACP,WAAW;GACZ,CAAC,CAAC,QAAQ;AAEb,SAAO,SAAS;;AAGlB,KAAI;AACF,MAAI,UAAU,gBAAgB;GAC5B,MAAM,QAAQ,uBACZ;IAAE,MAAM,SAAS;IAAM,SAAS,SAAS;IAAS,EAClD,eACD;AACD,OAAI,CAAC,cAAc,OAAO,eAAe,CACvC,OAAM,IAAI,YAAY;IACpB,MAAM;IACN,OAAO;IACP,WAAW;IACZ,CAAC,CAAC,QAAQ;AAEb,UAAO;;EAGT,MAAM,QAAQ,uBACZ;GAAE,MAAM,SAAS;GAAM,SAAS,SAAS;GAAS,EAClD,OACD;AACD,MAAI,CAAC,cAAc,OAAO,OAAO,CAC/B,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,OAAO;GACP,WAAW;GACZ,CAAC,CAAC,QAAQ;AAEb,SAAO;UACA,GAAG;AACV,MAAI,aAAa,YAAa,OAAM,EAAE,QAAQ;AAC9C,QAAM"}

package/dist/src/utils/types.d.mts

@@ -0,0 +1,9 @@
+import { ServerError } from "./errors.mjs";
+import { Result } from "neverthrow";
+
+//#region src/utils/types.d.ts
+type ServerResult<T> = Result<T, ServerError>;
+type ServerResultAsync<T> = Promise<ServerResult<T>>;
+//#endregion
+export { ServerResult, ServerResultAsync };
+//# sourceMappingURL=types.d.mts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m5kdev/backend",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Composable Express server stack with Drizzle ORM and tRPC.",
   "license": "GPL-3.0-only",
   "repository": {
@@ -59,8 +59,8 @@
     "trpc-to-openapi": "2.3.0",
     "uuid": "11.0.5",
     "zod": "4.2.1",
-    "@m5kdev/commons": "0.6.0",
-    "@m5kdev/config": "0.6.0"
+    "@m5kdev/commons": "0.8.0",
+    "@m5kdev/config": "0.8.0"
   },
   "devDependencies": {
     "@jest/globals": "30.2.0",
@@ -78,6 +78,7 @@
     "jest": "30.1.3",
     "ts-jest": "29.4.4",
     "tslib": "2.8.1",
+    "tsdown": "0.21.7",
     "tsup": "8.4.0",
     "tsx": "4.19.2",
     "typescript": "5.9.2"
@@ -171,7 +172,7 @@
   "scripts": {
     "lint": "biome check .",
     "lint:fix": "biome check . --write",
-    "build": "tsc --build",
+    "build": "tsdown",
     "check-types": "tsc --noEmit",
     "test": "jest -c jest.config.ts",
     "test:watch": "jest -c jest.config.ts --watch"

package/dist/src/lib/posthog.d.ts

@@ -1,2 +0,0 @@
-import { PostHog } from "posthog-node";
-export declare const posthogClient: PostHog;

package/dist/src/lib/posthog.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.posthogClient = void 0;
-const posthog_node_1 = require("posthog-node");
-exports.posthogClient = new posthog_node_1.PostHog(process.env.VITE_PUBLIC_POSTHOG_KEY, {
-    host: process.env.VITE_PUBLIC_POSTHOG_HOST,
-});

package/dist/src/lib/sentry.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-const Sentry = tslib_1.__importStar(require("@sentry/node"));
-Sentry.init({
-    dsn: process.env.SENTRY_SERVER_DNS,
-    // Set sampling rate for profiling - this is evaluated only once per SDK.init
-    profileSessionSampleRate: 1.0,
-});