@m5kdev/backend 0.6.0 → 0.8.0

package/dist/src/modules/auth/auth.utils.js

@@ -1,97 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getActiveOrganizationAndTeam = getActiveOrganizationAndTeam;
-exports.createOrganizationAndTeam = createOrganizationAndTeam;
-const tslib_1 = require("tslib");
-const drizzle_orm_1 = require("drizzle-orm");
-const uuid_1 = require("uuid");
-const auth = tslib_1.__importStar(require("./auth.db"));
-const schema = { ...auth };
-async function getActiveOrganizationAndTeam(orm, schema, userId) {
-    let organizationId;
-    let teamId;
-    let organizationRole;
-    let teamRole;
-    const [lastSession] = await orm
-        .select({
-        activeOrganizationId: schema.sessions.activeOrganizationId,
-        activeTeamId: schema.sessions.activeTeamId,
-        activeOrganizationRole: schema.sessions.activeOrganizationRole,
-        activeTeamRole: schema.sessions.activeTeamRole,
-    })
-        .from(schema.sessions)
-        .where((0, drizzle_orm_1.eq)(schema.sessions.userId, userId))
-        .orderBy((0, drizzle_orm_1.desc)(schema.sessions.createdAt))
-        .limit(1);
-    if (lastSession) {
-        organizationId = lastSession.activeOrganizationId ?? undefined;
-        teamId = lastSession.activeTeamId ?? undefined;
-        organizationRole = lastSession.activeOrganizationRole ?? undefined;
-        teamRole = lastSession.activeTeamRole ?? undefined;
-    }
-    if (!organizationId || !organizationRole) {
-        const [member] = await orm
-            .select({ organizationId: schema.members.organizationId, role: schema.members.role })
-            .from(schema.members)
-            .orderBy((0, drizzle_orm_1.desc)(schema.members.createdAt))
-            .where((0, drizzle_orm_1.eq)(schema.members.userId, userId))
-            .limit(1);
-        organizationId = member?.organizationId;
-        organizationRole = member?.role;
-    }
-    if (!teamId || !teamRole) {
-        const [teamMember] = await orm
-            .select({ teamId: schema.teamMembers.teamId, role: schema.teamMembers.role })
-            .from(schema.teamMembers)
-            .orderBy((0, drizzle_orm_1.desc)(schema.teamMembers.createdAt))
-            .where((0, drizzle_orm_1.eq)(schema.teamMembers.userId, userId))
-            .limit(1);
-        teamId = teamMember?.teamId;
-        teamRole = teamMember?.role;
-    }
-    return { organizationId, teamId, organizationRole, teamRole };
-}
-async function createOrganizationAndTeam(orm, schema, user) {
-    const organizationId = (0, uuid_1.v4)();
-    await orm.transaction(async (tx) => {
-        const [organization] = await tx
-            .insert(schema.organizations)
-            .values({
-            id: organizationId,
-            name: organizationId,
-            slug: organizationId,
-        })
-            .returning();
-        if (!organization)
-            throw new Error("createOrganizationAndTeam: Failed to create organization");
-        const [member] = await tx
-            .insert(schema.members)
-            .values({
-            userId: user.id,
-            organizationId: organization.id,
-            role: "owner",
-        })
-            .returning();
-        if (!member)
-            throw new Error("createOrganizationAndTeam: Failed to create member");
-        const [team] = await tx
-            .insert(schema.teams)
-            .values({
-            name: organization.id,
-            organizationId: organization.id,
-        })
-            .returning();
-        if (!team)
-            throw new Error("createOrganizationAndTeam: Failed to create team");
-        const [teamMember] = await tx
-            .insert(schema.teamMembers)
-            .values({
-            userId: user.id,
-            teamId: team.id,
-            role: "owner",
-        })
-            .returning();
-        if (!teamMember)
-            throw new Error("createOrganizationAndTeam: Failed to create team member");
-    });
-}

package/dist/src/modules/base/base.abstract.d.ts

@@ -1,19 +0,0 @@
-import type { TRPC_ERROR_CODE_KEY } from "@trpc/server";
-import { ServerError } from "../../utils/errors";
-import { logger } from "../../utils/logger";
-import type { ServerResult, ServerResultAsync } from "./base.dto";
-import type { ServerErrorLayer } from "./base.types";
-export declare abstract class Base {
-    layer: ServerErrorLayer;
-    logger: ReturnType<typeof logger.child>;
-    constructor(layer: ServerErrorLayer);
-    error(code: TRPC_ERROR_CODE_KEY, message?: string, { cause, clientMessage, log, }?: {
-        cause?: unknown;
-        clientMessage?: string;
-        log?: boolean;
-    }): import("neverthrow").Err<never, ServerError>;
-    handleUnknownError(error: unknown): ServerError;
-    throwable<T>(fn: () => ServerResult<T>): ServerResult<T>;
-    throwableAsync<T>(fn: () => ServerResultAsync<T>): ServerResultAsync<T>;
-    throwablePromise<T>(fn: () => Promise<T>, errorHandler?: (error: unknown) => ServerError): ServerResultAsync<T>;
-}

package/dist/src/modules/base/base.abstract.js

@@ -1,62 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Base = void 0;
-const neverthrow_1 = require("neverthrow");
-const errors_1 = require("../../utils/errors");
-const logger_1 = require("../../utils/logger");
-class Base {
-    layer;
-    logger;
-    constructor(layer) {
-        this.layer = layer;
-        this.logger = logger_1.logger.child({ layer: this.layer, layerName: this.constructor.name });
-    }
-    error(code, message, { cause, clientMessage, log = process.env.NODE_ENV === "development", } = {}) {
-        const serverError = new errors_1.ServerError({
-            code,
-            layer: this.layer,
-            layerName: this.constructor.name,
-            message,
-            clientMessage,
-            cause,
-            captureBoundary: true,
-        });
-        if (serverError.is5xxError())
-            (0, errors_1.reportError)(serverError);
-        if (log)
-            logger_1.logger.error(serverError);
-        return (0, neverthrow_1.err)(serverError);
-    }
-    handleUnknownError(error) {
-        return errors_1.ServerError.fromUnknown("INTERNAL_SERVER_ERROR", error, {
-            layer: this.layer,
-            layerName: this.constructor.name,
-        });
-    }
-    throwable(fn) {
-        try {
-            return fn();
-        }
-        catch (error) {
-            return (0, neverthrow_1.err)(this.handleUnknownError(error));
-        }
-    }
-    async throwableAsync(fn) {
-        try {
-            return await fn();
-        }
-        catch (error) {
-            return (0, neverthrow_1.err)(this.handleUnknownError(error));
-        }
-    }
-    async throwablePromise(fn, errorHandler) {
-        try {
-            const result = await fn();
-            return (0, neverthrow_1.ok)(result);
-        }
-        catch (error) {
-            return (0, neverthrow_1.err)(errorHandler ? errorHandler(error) : this.handleUnknownError(error));
-        }
-    }
-}
-exports.Base = Base;

package/dist/src/modules/base/base.dto.d.ts

@@ -1,69 +0,0 @@
-import { getTableColumns, type InferSelectModel, type Table } from "drizzle-orm";
-import type { Result } from "neverthrow";
-import { z } from "zod";
-import type { ServerError } from "../../utils/errors";
-type Simplify<T> = {
-    [K in keyof T]: T[K];
-} & {};
-type StringKeys<T> = Extract<keyof T, string>;
-export type ServerResult<T> = Result<T, ServerError>;
-export type ServerResultAsync<T> = Promise<ServerResult<T>>;
-export declare const createTableSelectSchema: <T extends Table>(table: T) => import("drizzle-zod").BuildSchema<"select", T["_"]["columns"], undefined, undefined>;
-export type ExtractColumnTypes<T extends Table, C extends Record<string, unknown>> = Simplify<Pick<InferSelectModel<T>, Extract<keyof C, keyof InferSelectModel<T>>>>;
-export declare function toZodFilter<const T extends readonly string[]>(array: T): Record<T[number], true>;
-export declare function pickSchema<Shape extends z.ZodRawShape, const Keys extends readonly StringKeys<Shape>[]>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Pick<Shape, Keys[number]>>;
-export declare function pickTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): z.ZodObject<Pick<(T["_"]["columns"] extends infer T_2 extends Record<string, any> ? { [K_2 in keyof T_2 as import("drizzle-zod").ColumnIsGeneratedAlwaysAs<T["_"]["columns"][K_2]> extends true ? K_2 : K_2]: T_2[K_2] extends infer TColumn extends import("drizzle-orm").Column<import("drizzle-orm").ColumnBaseConfig<import("drizzle-orm").ColumnDataType, string>, object, object> ? (TRefinements extends object ? TRefinements[K_2] extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> | ((schema: any) => any) ? true : false : false) extends true ? import("drizzle-orm").Assume<TRefinements[K_2 & keyof TRefinements] extends infer T_3 ? T_3 extends TRefinements[K_2 & keyof TRefinements] ? T_3 extends (schema: any) => z.ZodType ? (TColumn["_"]["notNull"] extends true ? ReturnType<T_3> : z.ZodNullable<ReturnType<T_3>>) extends infer TSchema extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> ? TType extends "update" ? z.ZodOptional<TSchema> : TSchema : z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> : T_3 : never : never, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>> : import("drizzle-zod").HandleColumn<TType, TColumn, TCoerce> : T_2[K_2] extends infer TObject extends Table<import("drizzle-orm").TableConfig<import("drizzle-orm").Column<any, object, object>>> | import("drizzle-orm").View<string, boolean, import("drizzle-orm").ColumnsSelection> | import("drizzle-orm").SelectedFieldsFlat<import("drizzle-orm").Column<import("drizzle-orm").ColumnBaseConfig<import("drizzle-orm").ColumnDataType, string>, object, object>> ? import("drizzle-zod").BuildSchema<TType, import("drizzle-zod").GetSelection<TObject>, TRefinements extends object ? TRefinements[K_2 & keyof TRefinements] : undefined, TCoerce> : z.ZodAny; } : never) extends infer T_1 ? { [K_1 in keyof T_1]: T_1[K_1]; } : never, K>, z.core.$strip>;
-export declare function omitSchema<Shape extends z.ZodRawShape, const Keys extends readonly StringKeys<Shape>[]>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Omit<Shape, Keys[number]>>;
-export declare function omitTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): z.ZodObject<Omit<(T["_"]["columns"] extends infer T_2 extends Record<string, any> ? { [K_2 in keyof T_2 as import("drizzle-zod").ColumnIsGeneratedAlwaysAs<T["_"]["columns"][K_2]> extends true ? K_2 : K_2]: T_2[K_2] extends infer TColumn extends import("drizzle-orm").Column<import("drizzle-orm").ColumnBaseConfig<import("drizzle-orm").ColumnDataType, string>, object, object> ? (TRefinements extends object ? TRefinements[K_2] extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> | ((schema: any) => any) ? true : false : false) extends true ? import("drizzle-orm").Assume<TRefinements[K_2 & keyof TRefinements] extends infer T_3 ? T_3 extends TRefinements[K_2 & keyof TRefinements] ? T_3 extends (schema: any) => z.ZodType ? (TColumn["_"]["notNull"] extends true ? ReturnType<T_3> : z.ZodNullable<ReturnType<T_3>>) extends infer TSchema extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> ? TType extends "update" ? z.ZodOptional<TSchema> : TSchema : z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> : T_3 : never : never, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>> : import("drizzle-zod").HandleColumn<TType, TColumn, TCoerce> : T_2[K_2] extends infer TObject extends Table<import("drizzle-orm").TableConfig<import("drizzle-orm").Column<any, object, object>>> | import("drizzle-orm").View<string, boolean, import("drizzle-orm").ColumnsSelection> | import("drizzle-orm").SelectedFieldsFlat<import("drizzle-orm").Column<import("drizzle-orm").ColumnBaseConfig<import("drizzle-orm").ColumnDataType, string>, object, object>> ? import("drizzle-zod").BuildSchema<TType, import("drizzle-zod").GetSelection<TObject>, TRefinements extends object ? TRefinements[K_2 & keyof TRefinements] : undefined, TCoerce> : z.ZodAny; } : never) extends infer T_1 ? { [K_1 in keyof T_1]: T_1[K_1]; } : never, K>, z.core.$strip>;
-export { getTableColumns };
-export declare function pickColumns<T extends Table, Shape extends z.ZodRawShape>(table: T, schema: z.ZodObject<Shape>): Pick<ReturnType<typeof getTableColumns<T>>, Extract<keyof Shape, string>>;
-export declare function pickTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): Pick<ReturnType<typeof getTableColumns<T>>, K>;
-export declare function omitTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): Omit<ReturnType<typeof getTableColumns<T>>, K>;
-export declare function createSelectDTO<T extends Table>(table: T): {
-    columns: ReturnType<typeof getTableColumns<T>>;
-    schema: ReturnType<typeof createTableSelectSchema<T>>;
-};
-export declare function createSelectDTO<T extends Table, K extends Extract<keyof InferSelectModel<T>, string>>(table: T, partial: {
-    omit: readonly K[];
-}): {
-    columns: ReturnType<typeof omitTableColumns<T, K>>;
-    schema: ReturnType<typeof omitTableSchema<T, K>>;
-};
-export declare function createSelectDTO<T extends Table, K extends Extract<keyof InferSelectModel<T>, string>>(table: T, partial: {
-    pick: readonly K[];
-}): {
-    columns: ReturnType<typeof pickTableColumns<T, K>>;
-    schema: ReturnType<typeof pickTableSchema<T, K>>;
-};
-export declare function createSelectUtils<T extends Record<string, {
-    columns: unknown;
-    schema: z.ZodTypeAny;
-}>, S extends z.ZodTypeAny>(dtos: T, output: S, transformer: (rows: Array<{
-    [K in keyof T]: z.infer<T[K]["schema"]>;
-}>) => z.infer<S>): {
-    select: {
-        [K in keyof T]: T[K]["columns"];
-    };
-    output: S;
-    transformer: (rows: Array<{
-        [K in keyof T]: z.infer<T[K]["schema"]>;
-    }>) => z.infer<S>;
-};
-export declare const uuidOutput: z.ZodObject<{
-    id: z.ZodUUID;
-}, z.core.$strip>;
-export declare const uuidManyOutput: z.ZodObject<{
-    ids: z.ZodArray<z.ZodUUID>;
-}, z.core.$strip>;
-export declare const scheduleOutput: z.ZodObject<{
-    jobId: z.ZodString;
-}, z.core.$strip>;
-export declare const scheduleManyOutput: z.ZodObject<{
-    jobIds: z.ZodArray<z.ZodString>;
-}, z.core.$strip>;
-export declare const deleteOutput: z.ZodObject<{
-    id: z.ZodUUID;
-}, z.core.$strip>;
-export declare const deleteManyOutput: z.ZodObject<{
-    ids: z.ZodArray<z.ZodUUID>;
-}, z.core.$strip>;

package/dist/src/modules/base/base.dto.js

@@ -1,112 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteManyOutput = exports.deleteOutput = exports.scheduleManyOutput = exports.scheduleOutput = exports.uuidManyOutput = exports.uuidOutput = exports.getTableColumns = exports.createTableSelectSchema = void 0;
-exports.toZodFilter = toZodFilter;
-exports.pickSchema = pickSchema;
-exports.pickTableSchema = pickTableSchema;
-exports.omitSchema = omitSchema;
-exports.omitTableSchema = omitTableSchema;
-exports.pickColumns = pickColumns;
-exports.pickTableColumns = pickTableColumns;
-exports.omitTableColumns = omitTableColumns;
-exports.createSelectDTO = createSelectDTO;
-exports.createSelectUtils = createSelectUtils;
-const drizzle_orm_1 = require("drizzle-orm");
-Object.defineProperty(exports, "getTableColumns", { enumerable: true, get: function () { return drizzle_orm_1.getTableColumns; } });
-const drizzle_zod_1 = require("drizzle-zod");
-const zod_1 = require("zod");
-// Wrapper to force the drizzle-zod overload to the Table version
-const createTableSelectSchema = (table) => (0, drizzle_zod_1.createSelectSchema)(table);
-exports.createTableSelectSchema = createTableSelectSchema;
-function toZodFilter(array) {
-    return array.reduce((acc, column) => {
-        acc[column] = true;
-        return acc;
-    }, {});
-}
-function pickSchema(schema, keys) {
-    const mask = {};
-    for (const k of keys) {
-        mask[k] = true;
-    }
-    return schema.pick(mask);
-}
-function pickTableSchema(table, columns) {
-    return pickSchema((0, drizzle_zod_1.createSelectSchema)(table), columns);
-}
-function omitSchema(schema, keys) {
-    const mask = {};
-    for (const k of keys) {
-        mask[k] = true;
-    }
-    return schema.omit(mask);
-}
-function omitTableSchema(table, columns) {
-    return omitSchema((0, drizzle_zod_1.createSelectSchema)(table), columns);
-}
-function pickColumns(table, schema) {
-    const allColumns = (0, drizzle_orm_1.getTableColumns)(table);
-    const schemaKeys = Object.keys(schema.shape);
-    const result = {};
-    for (const key of schemaKeys) {
-        if (key in allColumns) {
-            result[key] = allColumns[key];
-        }
-    }
-    return result;
-}
-function pickTableColumns(table, columns) {
-    const allColumns = (0, drizzle_orm_1.getTableColumns)(table);
-    const result = {};
-    for (const key of columns) {
-        if (key in allColumns) {
-            result[key] = allColumns[key];
-        }
-    }
-    return result;
-}
-function omitTableColumns(table, columns) {
-    const allColumns = (0, drizzle_orm_1.getTableColumns)(table);
-    const columnsToOmit = new Set(columns);
-    const filteredEntries = Object.entries(allColumns).filter(([key]) => !columnsToOmit.has(key));
-    return Object.fromEntries(filteredEntries);
-}
-// Implementation
-function createSelectDTO(table, partial) {
-    if (partial) {
-        if ("omit" in partial && partial.omit) {
-            return {
-                columns: omitTableColumns(table, partial.omit),
-                schema: omitTableSchema(table, partial.omit),
-            };
-        }
-        if ("pick" in partial && partial.pick) {
-            return {
-                columns: pickTableColumns(table, partial.pick),
-                schema: pickTableSchema(table, partial.pick),
-            };
-        }
-    }
-    return { columns: (0, drizzle_orm_1.getTableColumns)(table), schema: (0, exports.createTableSelectSchema)(table) };
-}
-function createSelectUtils(dtos, output, transformer) {
-    return {
-        select: Object.fromEntries(Object.entries(dtos).map(([key, dto]) => [key, dto.columns])),
-        output,
-        transformer,
-    };
-}
-exports.uuidOutput = zod_1.z.object({
-    id: zod_1.z.uuid(),
-});
-exports.uuidManyOutput = zod_1.z.object({
-    ids: zod_1.z.array(zod_1.z.uuid()),
-});
-exports.scheduleOutput = zod_1.z.object({
-    jobId: zod_1.z.string(),
-});
-exports.scheduleManyOutput = zod_1.z.object({
-    jobIds: zod_1.z.array(zod_1.z.string()),
-});
-exports.deleteOutput = exports.uuidOutput;
-exports.deleteManyOutput = exports.uuidManyOutput;

package/dist/src/modules/base/base.grants.d.ts

@@ -1,28 +0,0 @@
-import type { Session, User } from "../auth/auth.lib";
-import type { ServerResultAsync } from "./base.dto";
-type Level = "user" | "team" | "organization";
-type Access = "all" | "own";
-export type Entity = Partial<{
-    userId: string | null;
-    teamId: string | null;
-    organizationId: string | null;
-}>;
-export type Grant = {
-    level: Level;
-    role: string;
-    action: string;
-    resource: string;
-    access: Access;
-    attributes?: string[];
-};
-export type NestedGrants = Record<string, Partial<Record<Level, Record<string, Record<string, Access>>>>>;
-export type ResourceGrant = Omit<Grant, "resource">;
-export type ResourceActionGrant = Omit<ResourceGrant, "action">;
-export declare function flattenNestedGrants(nestedGrants: NestedGrants): Grant[];
-interface PermissionContext {
-    session: Session;
-    user: User;
-}
-export declare function checkPermissionSync<T extends Entity>(ctx: PermissionContext, grants: ResourceActionGrant[], entities?: T | T[]): boolean;
-export declare function checkPermissionAsync<T extends Entity>(ctx: PermissionContext, grants: ResourceActionGrant[], getEntities: () => ServerResultAsync<T | T[] | undefined>): ServerResultAsync<boolean>;
-export {};

package/dist/src/modules/base/base.grants.js

@@ -1,123 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.flattenNestedGrants = flattenNestedGrants;
-exports.checkPermissionSync = checkPermissionSync;
-exports.checkPermissionAsync = checkPermissionAsync;
-const neverthrow_1 = require("neverthrow");
-function flattenNestedGrants(nestedGrants) {
-    return Object.entries(nestedGrants).flatMap(([resource, levels]) => {
-        return Object.entries(levels).flatMap(([level, roles]) => {
-            return Object.entries(roles).flatMap(([role, actions]) => {
-                return Object.entries(actions).map(([action, access]) => {
-                    return {
-                        resource,
-                        level: level,
-                        role,
-                        action,
-                        access,
-                    };
-                });
-            });
-        });
-    });
-}
-function checkOwnership(entityField, contextValue, entities) {
-    if (!contextValue)
-        return false;
-    if (!entities)
-        return false;
-    return Array.isArray(entities)
-        ? entities.every((e) => e[entityField] === contextValue)
-        : entities[entityField] === contextValue;
-}
-// Level priority: user -> team -> organization (bottom-up)
-const LEVEL_PRIORITY = ["user", "team", "organization"];
-function getRoleForLevel(level, ctx) {
-    switch (level) {
-        case "user":
-            return ctx.userRole;
-        case "team":
-            return ctx.teamRole;
-        case "organization":
-            return ctx.organizationRole;
-    }
-}
-function getContextValueForLevel(level, ctx) {
-    switch (level) {
-        case "user":
-            return ctx.userId;
-        case "team":
-            return ctx.teamId;
-        case "organization":
-            return ctx.organizationId;
-    }
-}
-function getOwnershipFieldForLevel(level) {
-    switch (level) {
-        case "user":
-            return "userId";
-        case "team":
-            return "teamId";
-        case "organization":
-            return "organizationId";
-    }
-}
-function hasAllAccess(grants, roles) {
-    for (const level of LEVEL_PRIORITY) {
-        for (const grant of grants) {
-            if (grant.level !== level)
-                continue;
-            if (grant.access !== "all")
-                continue;
-            if (grant.role === getRoleForLevel(level, roles))
-                return true;
-        }
-    }
-    return false;
-}
-function checkOwnAccess(grants, roles, contextValues, entities) {
-    for (const level of LEVEL_PRIORITY) {
-        for (const grant of grants) {
-            if (grant.level !== level)
-                continue;
-            if (grant.access !== "own")
-                continue;
-            if (grant.role !== getRoleForLevel(level, roles))
-                continue;
-            const ownershipField = getOwnershipFieldForLevel(level);
-            const contextValue = getContextValueForLevel(level, contextValues);
-            if (checkOwnership(ownershipField, contextValue, entities))
-                return true;
-        }
-    }
-    return false;
-}
-function checkPermissionSync(ctx, grants, entities) {
-    if (!grants || grants.length === 0)
-        return false;
-    const { id: userId, role: userRole } = ctx.user;
-    const { activeOrganizationRole: organizationRole, activeTeamRole: teamRole, activeOrganizationId: organizationId, activeTeamId: teamId, } = ctx.session;
-    const roles = { userRole, teamRole, organizationRole };
-    const contextValues = { userId, teamId, organizationId };
-    // Pass 1: Check for "all" access first (no ownership check needed)
-    if (hasAllAccess(grants, roles))
-        return true;
-    // Pass 2: Check "own" access with ownership validation
-    return checkOwnAccess(grants, roles, contextValues, entities);
-}
-async function checkPermissionAsync(ctx, grants, getEntities) {
-    if (!grants || grants.length === 0)
-        return (0, neverthrow_1.ok)(false);
-    const { id: userId, role: userRole } = ctx.user;
-    const { activeOrganizationRole: organizationRole, activeTeamRole: teamRole, activeOrganizationId: organizationId, activeTeamId: teamId, } = ctx.session;
-    const roles = { userRole, teamRole, organizationRole };
-    const contextValues = { userId, teamId, organizationId };
-    // Pass 1: Check for "all" access first (no entity fetch needed)
-    if (hasAllAccess(grants, roles))
-        return (0, neverthrow_1.ok)(true);
-    // Pass 2: Only fetch entities if we need to check ownership
-    const entities = await getEntities();
-    if (entities.isErr())
-        return (0, neverthrow_1.err)(entities.error);
-    return (0, neverthrow_1.ok)(checkOwnAccess(grants, roles, contextValues, entities.value));
-}