@m5kdev/backend 0.8.7 → 0.8.8

package/dist/src/modules/base/base.abstract.cjs

@@ -0,0 +1,62 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../../_virtual/_rolldown/runtime.cjs");
+const require_src_utils_logger = require("../../utils/logger.cjs");
+const require_src_utils_errors = require("../../utils/errors.cjs");
+let neverthrow = require("neverthrow");
+//#region src/modules/base/base.abstract.ts
+var Base = class {
+	layer;
+	logger;
+	constructor(layer) {
+		this.layer = layer;
+		this.logger = require_src_utils_logger.logger.child({
+			layer: this.layer,
+			layerName: this.constructor.name
+		});
+	}
+	error(code, message, { cause, clientMessage, log = process.env.NODE_ENV === "development" } = {}) {
+		const serverError = new require_src_utils_errors.ServerError({
+			code,
+			layer: this.layer,
+			layerName: this.constructor.name,
+			message,
+			clientMessage,
+			cause,
+			captureBoundary: true
+		});
+		if (serverError.is5xxError()) require_src_utils_errors.reportError(serverError);
+		if (log) require_src_utils_logger.logger.error(serverError);
+		return (0, neverthrow.err)(serverError);
+	}
+	handleUnknownError(error) {
+		return require_src_utils_errors.ServerError.fromUnknown("INTERNAL_SERVER_ERROR", error, {
+			layer: this.layer,
+			layerName: this.constructor.name
+		});
+	}
+	throwable(fn) {
+		try {
+			return fn();
+		} catch (error) {
+			return (0, neverthrow.err)(this.handleUnknownError(error));
+		}
+	}
+	async throwableAsync(fn) {
+		try {
+			return await fn();
+		} catch (error) {
+			return (0, neverthrow.err)(this.handleUnknownError(error));
+		}
+	}
+	async throwablePromise(fn, errorHandler) {
+		try {
+			return (0, neverthrow.ok)(await fn());
+		} catch (error) {
+			return (0, neverthrow.err)(errorHandler ? errorHandler(error) : this.handleUnknownError(error));
+		}
+	}
+};
+//#endregion
+exports.Base = Base;
+
+//# sourceMappingURL=base.abstract.cjs.map

package/dist/src/modules/base/base.abstract.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.abstract.cjs","names":["logger","ServerError"],"sources":["../../../../src/modules/base/base.abstract.ts"],"sourcesContent":["import type { TRPC_ERROR_CODE_KEY } from \"@trpc/server\";\r\nimport { err, ok } from \"neverthrow\";\r\nimport { reportError, ServerError } from \"../../utils/errors\";\r\nimport { logger } from \"../../utils/logger\";\r\nimport type { ServerResult, ServerResultAsync } from \"./base.dto\";\r\nimport type { ServerErrorLayer } from \"./base.types\";\r\n\r\nexport abstract class Base {\r\n  public layer: ServerErrorLayer;\r\n  public logger: ReturnType<typeof logger.child>;\r\n\r\n  constructor(layer: ServerErrorLayer) {\r\n    this.layer = layer;\r\n    this.logger = logger.child({ layer: this.layer, layerName: this.constructor.name });\r\n  }\r\n\r\n  error(\r\n    code: TRPC_ERROR_CODE_KEY,\r\n    message?: string,\r\n    {\r\n      cause,\r\n      clientMessage,\r\n      log = process.env.NODE_ENV === \"development\",\r\n    }: { cause?: unknown; clientMessage?: string; log?: boolean } = {}\r\n  ) {\r\n    const serverError = new ServerError({\r\n      code,\r\n      layer: this.layer,\r\n      layerName: this.constructor.name,\r\n      message,\r\n      clientMessage,\r\n      cause,\r\n      captureBoundary: true,\r\n    });\r\n    if (serverError.is5xxError()) reportError(serverError);\r\n    if (log) logger.error(serverError);\r\n    return err(serverError);\r\n  }\r\n\r\n  handleUnknownError(error: unknown) {\r\n    return ServerError.fromUnknown(\"INTERNAL_SERVER_ERROR\", error, {\r\n      layer: this.layer,\r\n      layerName: this.constructor.name,\r\n    });\r\n  }\r\n\r\n  throwable<T>(fn: () => ServerResult<T>): ServerResult<T> {\r\n    try {\r\n      return fn();\r\n    } catch (error) {\r\n      return err(this.handleUnknownError(error));\r\n    }\r\n  }\r\n\r\n  async throwableAsync<T>(fn: () => ServerResultAsync<T>): ServerResultAsync<T> {\r\n    try {\r\n      return await fn();\r\n    } catch (error) {\r\n      return err(this.handleUnknownError(error));\r\n    }\r\n  }\r\n\r\n  async throwablePromise<T>(\r\n    fn: () => Promise<T>,\r\n    errorHandler?: (error: unknown) => ServerError\r\n  ): ServerResultAsync<T> {\r\n    try {\r\n      const result = await fn();\r\n      return ok(result);\r\n    } catch (error) {\r\n      return err(errorHandler ? errorHandler(error) : this.handleUnknownError(error));\r\n    }\r\n  }\r\n}\r\n"],"mappings":";;;;;;AAOA,IAAsB,OAAtB,MAA2B;CACzB;CACA;CAEA,YAAY,OAAyB;AACnC,OAAK,QAAQ;AACb,OAAK,SAASA,yBAAAA,OAAO,MAAM;GAAE,OAAO,KAAK;GAAO,WAAW,KAAK,YAAY;GAAM,CAAC;;CAGrF,MACE,MACA,SACA,EACE,OACA,eACA,MAAM,QAAQ,IAAI,aAAa,kBAC+B,EAAE,EAClE;EACA,MAAM,cAAc,IAAIC,yBAAAA,YAAY;GAClC;GACA,OAAO,KAAK;GACZ,WAAW,KAAK,YAAY;GAC5B;GACA;GACA;GACA,iBAAiB;GAClB,CAAC;AACF,MAAI,YAAY,YAAY,CAAE,0BAAA,YAAY,YAAY;AACtD,MAAI,IAAK,0BAAA,OAAO,MAAM,YAAY;AAClC,UAAA,GAAA,WAAA,KAAW,YAAY;;CAGzB,mBAAmB,OAAgB;AACjC,SAAOA,yBAAAA,YAAY,YAAY,yBAAyB,OAAO;GAC7D,OAAO,KAAK;GACZ,WAAW,KAAK,YAAY;GAC7B,CAAC;;CAGJ,UAAa,IAA4C;AACvD,MAAI;AACF,UAAO,IAAI;WACJ,OAAO;AACd,WAAA,GAAA,WAAA,KAAW,KAAK,mBAAmB,MAAM,CAAC;;;CAI9C,MAAM,eAAkB,IAAsD;AAC5E,MAAI;AACF,UAAO,MAAM,IAAI;WACV,OAAO;AACd,WAAA,GAAA,WAAA,KAAW,KAAK,mBAAmB,MAAM,CAAC;;;CAI9C,MAAM,iBACJ,IACA,cACsB;AACtB,MAAI;AAEF,WAAA,GAAA,WAAA,IADe,MAAM,IAAI,CACR;WACV,OAAO;AACd,WAAA,GAAA,WAAA,KAAW,eAAe,aAAa,MAAM,GAAG,KAAK,mBAAmB,MAAM,CAAC"}

package/dist/src/modules/base/base.abstract.d.cts

@@ -0,0 +1,29 @@
+import { ServerErrorLayer } from "./base.types.cjs";
+import { ServerError } from "../../utils/errors.cjs";
+import { ServerResult, ServerResultAsync } from "./base.dto.cjs";
+import { logger } from "../../utils/logger.cjs";
+import * as _$neverthrow from "neverthrow";
+import { TRPC_ERROR_CODE_KEY } from "@trpc/server";
+
+//#region src/modules/base/base.abstract.d.ts
+declare abstract class Base {
+  layer: ServerErrorLayer;
+  logger: ReturnType<typeof logger.child>;
+  constructor(layer: ServerErrorLayer);
+  error(code: TRPC_ERROR_CODE_KEY, message?: string, {
+    cause,
+    clientMessage,
+    log
+  }?: {
+    cause?: unknown;
+    clientMessage?: string;
+    log?: boolean;
+  }): _$neverthrow.Err<never, ServerError>;
+  handleUnknownError(error: unknown): ServerError;
+  throwable<T>(fn: () => ServerResult<T>): ServerResult<T>;
+  throwableAsync<T>(fn: () => ServerResultAsync<T>): ServerResultAsync<T>;
+  throwablePromise<T>(fn: () => Promise<T>, errorHandler?: (error: unknown) => ServerError): ServerResultAsync<T>;
+}
+//#endregion
+export { Base };
+//# sourceMappingURL=base.abstract.d.cts.map

package/dist/src/modules/base/base.actor.cjs

@@ -0,0 +1,83 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_src_utils_errors = require("../../utils/errors.cjs");
+//#region src/modules/base/base.actor.ts
+function createActorFromContext(context, scope) {
+	if (!context.user.role) throw new require_src_utils_errors.ServerError({
+		code: "BAD_REQUEST",
+		message: "User role not found in context",
+		layer: "controller",
+		layerName: "ActorValidation"
+	});
+	if (scope === "organization") {
+		if (!context.session.activeOrganizationId || !context.session.activeOrganizationRole) throw new require_src_utils_errors.ServerError({
+			code: "FORBIDDEN",
+			message: "Active organization context required",
+			layer: "controller",
+			layerName: "ActorValidation"
+		});
+	}
+	if (scope === "team") {
+		if (!context.session.activeOrganizationId || !context.session.activeOrganizationRole) throw new require_src_utils_errors.ServerError({
+			code: "FORBIDDEN",
+			message: "Active organization context required for team scope",
+			layer: "controller",
+			layerName: "ActorValidation"
+		});
+		if (!context.session.activeTeamId || !context.session.activeTeamRole) throw new require_src_utils_errors.ServerError({
+			code: "FORBIDDEN",
+			message: "Active team context required",
+			layer: "controller",
+			layerName: "ActorValidation"
+		});
+	}
+	return {
+		userId: context.user.id,
+		userRole: context.user.role,
+		organizationId: context.session.activeOrganizationId,
+		organizationRole: context.session.activeOrganizationRole,
+		teamId: context.session.activeTeamId,
+		teamRole: context.session.activeTeamRole
+	};
+}
+function validateActor(actor, scope) {
+	if (!actor.userId || !actor.userRole) return false;
+	if (scope === "user") return true;
+	if (scope === "organization") return Boolean(actor.organizationId && actor.organizationRole);
+	return Boolean(actor.organizationId && actor.organizationRole && actor.teamId && actor.teamRole);
+}
+/**
+* Builds a flat actor for tests / grants without session. Validates that team scope implies organization.
+*/
+function createServiceActor(claims) {
+	const organizationId = claims.organizationId ?? null;
+	const organizationRole = claims.organizationRole ?? null;
+	const teamId = claims.teamId ?? null;
+	const teamRole = claims.teamRole ?? null;
+	if ((teamId || teamRole) && (!organizationId || !organizationRole)) throw new Error("organization access before team access");
+	return {
+		userId: claims.userId,
+		userRole: claims.userRole,
+		organizationId,
+		organizationRole,
+		teamId,
+		teamRole
+	};
+}
+function getServiceActorScope(actor) {
+	if (validateActor(actor, "team")) return "team";
+	if (validateActor(actor, "organization")) return "organization";
+	return "user";
+}
+function hasServiceActorScope(actor, scope) {
+	if (scope === "team") return validateActor(actor, "team");
+	if (scope === "organization") return validateActor(actor, "organization") || validateActor(actor, "team");
+	return validateActor(actor, "user");
+}
+//#endregion
+exports.createActorFromContext = createActorFromContext;
+exports.createServiceActor = createServiceActor;
+exports.getServiceActorScope = getServiceActorScope;
+exports.hasServiceActorScope = hasServiceActorScope;
+exports.validateActor = validateActor;
+
+//# sourceMappingURL=base.actor.cjs.map

package/dist/src/modules/base/base.actor.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.actor.cjs","names":["ServerError"],"sources":["../../../../src/modules/base/base.actor.ts"],"sourcesContent":["import { ServerError } from \"../../utils/errors\";\r\nimport type { Session, User } from \"../auth/auth.lib\";\r\n\r\nexport type UserActor = {\r\n  userId: string;\r\n  userRole: string;\r\n  organizationId: string | null;\r\n  organizationRole: string | null;\r\n  teamId: string | null;\r\n  teamRole: string | null;\r\n};\r\n\r\nexport type OrganizationActor = {\r\n  userId: string;\r\n  userRole: string;\r\n  organizationId: string;\r\n  organizationRole: string;\r\n  teamId: string | null;\r\n  teamRole: string | null;\r\n};\r\n\r\nexport type TeamActor = {\r\n  userId: string;\r\n  userRole: string;\r\n  organizationId: string;\r\n  organizationRole: string;\r\n  teamId: string;\r\n  teamRole: string;\r\n};\r\n\r\nexport type AuthenticatedActor = UserActor | OrganizationActor | TeamActor;\r\n\r\n/** @deprecated Prefer `AuthenticatedActor` — kept for grants and legacy call sites */\r\nexport type ServiceActor = AuthenticatedActor;\r\n\r\nexport type Actor = {\r\n  user: UserActor;\r\n  organization: OrganizationActor;\r\n  team: TeamActor;\r\n  authenticated: AuthenticatedActor;\r\n};\r\n\r\nexport type ActorScope = \"user\" | \"organization\" | \"team\";\r\n\r\nexport type RequiredServiceActor<Scope extends ActorScope> = Actor[Scope];\r\n\r\n/** Claims shape used by tests and factories */\r\nexport type ServiceActorClaims = {\r\n  userId: string;\r\n  userRole: string;\r\n  organizationId?: string | null;\r\n  organizationRole?: string | null;\r\n  teamId?: string | null;\r\n  teamRole?: string | null;\r\n};\r\n\r\n/** @deprecated Prefer `OrganizationActor` */\r\nexport type ServiceOrganizationActor = OrganizationActor;\r\n/** @deprecated Prefer `TeamActor` */\r\nexport type ServiceTeamActor = TeamActor;\r\n\r\nexport function createActorFromContext(\r\n  context: { user: User; session: Session },\r\n  scope: \"team\"\r\n): TeamActor;\r\nexport function createActorFromContext(\r\n  context: { user: User; session: Session },\r\n  scope: \"organization\"\r\n): OrganizationActor;\r\nexport function createActorFromContext(\r\n  context: { user: User; session: Session },\r\n  scope: \"user\"\r\n): UserActor;\r\nexport function createActorFromContext(\r\n  context: { user: User; session: Session },\r\n  scope: ActorScope\r\n): AuthenticatedActor {\r\n  if (!context.user.role) {\r\n    throw new ServerError({\r\n      code: \"BAD_REQUEST\",\r\n      message: \"User role not found in context\",\r\n      layer: \"controller\",\r\n      layerName: \"ActorValidation\",\r\n    });\r\n  }\r\n\r\n  if (scope === \"organization\") {\r\n    if (!context.session.activeOrganizationId || !context.session.activeOrganizationRole) {\r\n      throw new ServerError({\r\n        code: \"FORBIDDEN\",\r\n        message: \"Active organization context required\",\r\n        layer: \"controller\",\r\n        layerName: \"ActorValidation\",\r\n      });\r\n    }\r\n  }\r\n\r\n  if (scope === \"team\") {\r\n    if (!context.session.activeOrganizationId || !context.session.activeOrganizationRole) {\r\n      throw new ServerError({\r\n        code: \"FORBIDDEN\",\r\n        message: \"Active organization context required for team scope\",\r\n        layer: \"controller\",\r\n        layerName: \"ActorValidation\",\r\n      });\r\n    }\r\n    if (!context.session.activeTeamId || !context.session.activeTeamRole) {\r\n      throw new ServerError({\r\n        code: \"FORBIDDEN\",\r\n        message: \"Active team context required\",\r\n        layer: \"controller\",\r\n        layerName: \"ActorValidation\",\r\n      });\r\n    }\r\n  }\r\n\r\n  return {\r\n    userId: context.user.id,\r\n    userRole: context.user.role,\r\n    organizationId: context.session.activeOrganizationId,\r\n    organizationRole: context.session.activeOrganizationRole,\r\n    teamId: context.session.activeTeamId,\r\n    teamRole: context.session.activeTeamRole,\r\n  };\r\n}\r\n\r\nexport function validateActor(actor: AuthenticatedActor, scope: ActorScope): boolean {\r\n  if (!actor.userId || !actor.userRole) return false;\r\n  if (scope === \"user\") return true;\r\n  if (scope === \"organization\") {\r\n    return Boolean(actor.organizationId && actor.organizationRole);\r\n  }\r\n  return Boolean(\r\n    actor.organizationId && actor.organizationRole && actor.teamId && actor.teamRole\r\n  );\r\n}\r\n\r\n/**\r\n * Builds a flat actor for tests / grants without session. Validates that team scope implies organization.\r\n */\r\nexport function createServiceActor(claims: ServiceActorClaims): AuthenticatedActor {\r\n  const organizationId = claims.organizationId ?? null;\r\n  const organizationRole = claims.organizationRole ?? null;\r\n  const teamId = claims.teamId ?? null;\r\n  const teamRole = claims.teamRole ?? null;\r\n\r\n  if ((teamId || teamRole) && (!organizationId || !organizationRole)) {\r\n    throw new Error(\"organization access before team access\");\r\n  }\r\n\r\n  return {\r\n    userId: claims.userId,\r\n    userRole: claims.userRole,\r\n    organizationId,\r\n    organizationRole,\r\n    teamId,\r\n    teamRole,\r\n  };\r\n}\r\n\r\nexport function getServiceActorScope(actor: AuthenticatedActor): ActorScope {\r\n  if (validateActor(actor, \"team\")) return \"team\";\r\n  if (validateActor(actor, \"organization\")) return \"organization\";\r\n  return \"user\";\r\n}\r\n\r\nexport function hasServiceActorScope(actor: AuthenticatedActor, scope: ActorScope): boolean {\r\n  if (scope === \"team\") return validateActor(actor, \"team\");\r\n  if (scope === \"organization\") {\r\n    return validateActor(actor, \"organization\") || validateActor(actor, \"team\");\r\n  }\r\n  return validateActor(actor, \"user\");\r\n}\r\n"],"mappings":";;;AAyEA,SAAgB,uBACd,SACA,OACoB;AACpB,KAAI,CAAC,QAAQ,KAAK,KAChB,OAAM,IAAIA,yBAAAA,YAAY;EACpB,MAAM;EACN,SAAS;EACT,OAAO;EACP,WAAW;EACZ,CAAC;AAGJ,KAAI,UAAU;MACR,CAAC,QAAQ,QAAQ,wBAAwB,CAAC,QAAQ,QAAQ,uBAC5D,OAAM,IAAIA,yBAAAA,YAAY;GACpB,MAAM;GACN,SAAS;GACT,OAAO;GACP,WAAW;GACZ,CAAC;;AAIN,KAAI,UAAU,QAAQ;AACpB,MAAI,CAAC,QAAQ,QAAQ,wBAAwB,CAAC,QAAQ,QAAQ,uBAC5D,OAAM,IAAIA,yBAAAA,YAAY;GACpB,MAAM;GACN,SAAS;GACT,OAAO;GACP,WAAW;GACZ,CAAC;AAEJ,MAAI,CAAC,QAAQ,QAAQ,gBAAgB,CAAC,QAAQ,QAAQ,eACpD,OAAM,IAAIA,yBAAAA,YAAY;GACpB,MAAM;GACN,SAAS;GACT,OAAO;GACP,WAAW;GACZ,CAAC;;AAIN,QAAO;EACL,QAAQ,QAAQ,KAAK;EACrB,UAAU,QAAQ,KAAK;EACvB,gBAAgB,QAAQ,QAAQ;EAChC,kBAAkB,QAAQ,QAAQ;EAClC,QAAQ,QAAQ,QAAQ;EACxB,UAAU,QAAQ,QAAQ;EAC3B;;AAGH,SAAgB,cAAc,OAA2B,OAA4B;AACnF,KAAI,CAAC,MAAM,UAAU,CAAC,MAAM,SAAU,QAAO;AAC7C,KAAI,UAAU,OAAQ,QAAO;AAC7B,KAAI,UAAU,eACZ,QAAO,QAAQ,MAAM,kBAAkB,MAAM,iBAAiB;AAEhE,QAAO,QACL,MAAM,kBAAkB,MAAM,oBAAoB,MAAM,UAAU,MAAM,SACzE;;;;;AAMH,SAAgB,mBAAmB,QAAgD;CACjF,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,mBAAmB,OAAO,oBAAoB;CACpD,MAAM,SAAS,OAAO,UAAU;CAChC,MAAM,WAAW,OAAO,YAAY;AAEpC,MAAK,UAAU,cAAc,CAAC,kBAAkB,CAAC,kBAC/C,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;EACL,QAAQ,OAAO;EACf,UAAU,OAAO;EACjB;EACA;EACA;EACA;EACD;;AAGH,SAAgB,qBAAqB,OAAuC;AAC1E,KAAI,cAAc,OAAO,OAAO,CAAE,QAAO;AACzC,KAAI,cAAc,OAAO,eAAe,CAAE,QAAO;AACjD,QAAO;;AAGT,SAAgB,qBAAqB,OAA2B,OAA4B;AAC1F,KAAI,UAAU,OAAQ,QAAO,cAAc,OAAO,OAAO;AACzD,KAAI,UAAU,eACZ,QAAO,cAAc,OAAO,eAAe,IAAI,cAAc,OAAO,OAAO;AAE7E,QAAO,cAAc,OAAO,OAAO"}

package/dist/src/modules/base/base.actor.d.cts

@@ -0,0 +1,73 @@
+import { Session, User } from "../auth/auth.lib.cjs";
+
+//#region src/modules/base/base.actor.d.ts
+type UserActor = {
+  userId: string;
+  userRole: string;
+  organizationId: string | null;
+  organizationRole: string | null;
+  teamId: string | null;
+  teamRole: string | null;
+};
+type OrganizationActor = {
+  userId: string;
+  userRole: string;
+  organizationId: string;
+  organizationRole: string;
+  teamId: string | null;
+  teamRole: string | null;
+};
+type TeamActor = {
+  userId: string;
+  userRole: string;
+  organizationId: string;
+  organizationRole: string;
+  teamId: string;
+  teamRole: string;
+};
+type AuthenticatedActor = UserActor | OrganizationActor | TeamActor;
+/** @deprecated Prefer `AuthenticatedActor` — kept for grants and legacy call sites */
+type ServiceActor = AuthenticatedActor;
+type Actor = {
+  user: UserActor;
+  organization: OrganizationActor;
+  team: TeamActor;
+  authenticated: AuthenticatedActor;
+};
+type ActorScope = "user" | "organization" | "team";
+type RequiredServiceActor<Scope extends ActorScope> = Actor[Scope];
+/** Claims shape used by tests and factories */
+type ServiceActorClaims = {
+  userId: string;
+  userRole: string;
+  organizationId?: string | null;
+  organizationRole?: string | null;
+  teamId?: string | null;
+  teamRole?: string | null;
+};
+/** @deprecated Prefer `OrganizationActor` */
+type ServiceOrganizationActor = OrganizationActor;
+/** @deprecated Prefer `TeamActor` */
+type ServiceTeamActor = TeamActor;
+declare function createActorFromContext(context: {
+  user: User;
+  session: Session;
+}, scope: "team"): TeamActor;
+declare function createActorFromContext(context: {
+  user: User;
+  session: Session;
+}, scope: "organization"): OrganizationActor;
+declare function createActorFromContext(context: {
+  user: User;
+  session: Session;
+}, scope: "user"): UserActor;
+declare function validateActor(actor: AuthenticatedActor, scope: ActorScope): boolean;
+/**
+ * Builds a flat actor for tests / grants without session. Validates that team scope implies organization.
+ */
+declare function createServiceActor(claims: ServiceActorClaims): AuthenticatedActor;
+declare function getServiceActorScope(actor: AuthenticatedActor): ActorScope;
+declare function hasServiceActorScope(actor: AuthenticatedActor, scope: ActorScope): boolean;
+//#endregion
+export { Actor, ActorScope, AuthenticatedActor, OrganizationActor, RequiredServiceActor, ServiceActor, ServiceActorClaims, ServiceOrganizationActor, ServiceTeamActor, TeamActor, UserActor, createActorFromContext, createServiceActor, getServiceActorScope, hasServiceActorScope, validateActor };
+//# sourceMappingURL=base.actor.d.cts.map

package/dist/src/modules/base/base.dto.cjs

@@ -0,0 +1,98 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../../_virtual/_rolldown/runtime.cjs");
+let zod = require("zod");
+let drizzle_orm = require("drizzle-orm");
+let drizzle_zod = require("drizzle-zod");
+//#region src/modules/base/base.dto.ts
+const createTableSelectSchema = (table) => (0, drizzle_zod.createSelectSchema)(table);
+function toZodFilter(array) {
+	return array.reduce((acc, column) => {
+		acc[column] = true;
+		return acc;
+	}, {});
+}
+function pickSchema(schema, keys) {
+	const mask = {};
+	for (const k of keys) mask[k] = true;
+	return schema.pick(mask);
+}
+function pickTableSchema(table, columns) {
+	return pickSchema((0, drizzle_zod.createSelectSchema)(table), columns);
+}
+function omitSchema(schema, keys) {
+	const mask = {};
+	for (const k of keys) mask[k] = true;
+	return schema.omit(mask);
+}
+function omitTableSchema(table, columns) {
+	return omitSchema((0, drizzle_zod.createSelectSchema)(table), columns);
+}
+function pickColumns(table, schema) {
+	const allColumns = (0, drizzle_orm.getTableColumns)(table);
+	const schemaKeys = Object.keys(schema.shape);
+	const result = {};
+	for (const key of schemaKeys) if (key in allColumns) result[key] = allColumns[key];
+	return result;
+}
+function pickTableColumns(table, columns) {
+	const allColumns = (0, drizzle_orm.getTableColumns)(table);
+	const result = {};
+	for (const key of columns) if (key in allColumns) result[key] = allColumns[key];
+	return result;
+}
+function omitTableColumns(table, columns) {
+	const allColumns = (0, drizzle_orm.getTableColumns)(table);
+	const columnsToOmit = new Set(columns);
+	const filteredEntries = Object.entries(allColumns).filter(([key]) => !columnsToOmit.has(key));
+	return Object.fromEntries(filteredEntries);
+}
+function createSelectDTO(table, partial) {
+	if (partial) {
+		if ("omit" in partial && partial.omit) return {
+			columns: omitTableColumns(table, partial.omit),
+			schema: omitTableSchema(table, partial.omit)
+		};
+		if ("pick" in partial && partial.pick) return {
+			columns: pickTableColumns(table, partial.pick),
+			schema: pickTableSchema(table, partial.pick)
+		};
+	}
+	return {
+		columns: (0, drizzle_orm.getTableColumns)(table),
+		schema: createTableSelectSchema(table)
+	};
+}
+function createSelectUtils(dtos, output, transformer) {
+	return {
+		select: Object.fromEntries(Object.entries(dtos).map(([key, dto]) => [key, dto.columns])),
+		output,
+		transformer
+	};
+}
+const uuidOutput = zod.z.object({ id: zod.z.uuid() });
+const uuidManyOutput = zod.z.object({ ids: zod.z.array(zod.z.uuid()) });
+const scheduleOutput = zod.z.object({ jobId: zod.z.string() });
+const scheduleManyOutput = zod.z.object({ jobIds: zod.z.array(zod.z.string()) });
+const deleteOutput = uuidOutput;
+const deleteManyOutput = uuidManyOutput;
+//#endregion
+exports.createSelectDTO = createSelectDTO;
+exports.createSelectUtils = createSelectUtils;
+exports.createTableSelectSchema = createTableSelectSchema;
+exports.deleteManyOutput = deleteManyOutput;
+exports.deleteOutput = deleteOutput;
+exports.getTableColumns = drizzle_orm.getTableColumns;
+exports.omitSchema = omitSchema;
+exports.omitTableColumns = omitTableColumns;
+exports.omitTableSchema = omitTableSchema;
+exports.pickColumns = pickColumns;
+exports.pickSchema = pickSchema;
+exports.pickTableColumns = pickTableColumns;
+exports.pickTableSchema = pickTableSchema;
+exports.scheduleManyOutput = scheduleManyOutput;
+exports.scheduleOutput = scheduleOutput;
+exports.toZodFilter = toZodFilter;
+exports.uuidManyOutput = uuidManyOutput;
+exports.uuidOutput = uuidOutput;
+
+//# sourceMappingURL=base.dto.cjs.map

package/dist/src/modules/base/base.dto.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.dto.cjs","names":["z"],"sources":["../../../../src/modules/base/base.dto.ts"],"sourcesContent":["import { getTableColumns, type InferSelectModel, type Table } from \"drizzle-orm\";\r\nimport { createSelectSchema } from \"drizzle-zod\";\r\nimport type { Result } from \"neverthrow\";\r\nimport { z } from \"zod\";\r\nimport type { ServerError } from \"../../utils/errors\";\r\n\r\ntype Simplify<T> = { [K in keyof T]: T[K] } & {};\r\ntype StringKeys<T> = Extract<keyof T, string>;\r\n\r\nexport type ServerResult<T> = Result<T, ServerError>;\r\nexport type ServerResultAsync<T> = Promise<ServerResult<T>>;\r\n\r\n// Wrapper to force the drizzle-zod overload to the Table version\r\nexport const createTableSelectSchema = <T extends Table>(table: T) => createSelectSchema(table);\r\n\r\nexport type ExtractColumnTypes<T extends Table, C extends Record<string, unknown>> = Simplify<\r\n  Pick<InferSelectModel<T>, Extract<keyof C, keyof InferSelectModel<T>>>\r\n>;\r\n\r\nexport function toZodFilter<const T extends readonly string[]>(array: T): Record<T[number], true> {\r\n  return array.reduce(\r\n    (acc, column) => {\r\n      acc[column as T[number]] = true;\r\n      return acc;\r\n    },\r\n    {} as Record<T[number], true>\r\n  );\r\n}\r\n\r\nexport function pickSchema<\r\n  Shape extends z.ZodRawShape,\r\n  const Keys extends readonly StringKeys<Shape>[],\r\n>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Pick<Shape, Keys[number]>> {\r\n  const mask: Record<keyof Shape, true> = {} as Record<keyof Shape, true>;\r\n  for (const k of keys) {\r\n    mask[k] = true;\r\n  }\r\n  return schema.pick(mask) as z.ZodObject<Pick<Shape, Keys[number]>>;\r\n}\r\n\r\nexport function pickTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(\r\n  table: T,\r\n  columns: readonly K[]\r\n) {\r\n  return pickSchema(createSelectSchema(table), columns);\r\n}\r\n\r\nexport function omitSchema<\r\n  Shape extends z.ZodRawShape,\r\n  const Keys extends readonly StringKeys<Shape>[],\r\n>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Omit<Shape, Keys[number]>> {\r\n  const mask: Record<keyof Shape, true> = {} as Record<keyof Shape, true>;\r\n  for (const k of keys) {\r\n    mask[k] = true;\r\n  }\r\n  return schema.omit(mask) as z.ZodObject<Omit<Shape, Keys[number]>>;\r\n}\r\n\r\nexport function omitTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(\r\n  table: T,\r\n  columns: readonly K[]\r\n) {\r\n  return omitSchema(createSelectSchema(table), columns);\r\n}\r\n\r\nexport { getTableColumns };\r\n\r\nexport function pickColumns<T extends Table, Shape extends z.ZodRawShape>(\r\n  table: T,\r\n  schema: z.ZodObject<Shape>\r\n): Pick<ReturnType<typeof getTableColumns<T>>, Extract<keyof Shape, string>> {\r\n  const allColumns = getTableColumns(table);\r\n  const schemaKeys = Object.keys(schema.shape) as Array<Extract<keyof Shape, string>>;\r\n\r\n  const result = {} as Pick<typeof allColumns, Extract<keyof Shape, string>>;\r\n  for (const key of schemaKeys) {\r\n    if (key in allColumns) {\r\n      (result as any)[key] = allColumns[key as keyof typeof allColumns];\r\n    }\r\n  }\r\n\r\n  return result;\r\n}\r\n\r\nexport function pickTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(\r\n  table: T,\r\n  columns: readonly K[]\r\n): Pick<ReturnType<typeof getTableColumns<T>>, K> {\r\n  const allColumns = getTableColumns(table);\r\n  const result = {} as Pick<typeof allColumns, K>;\r\n  for (const key of columns) {\r\n    if (key in allColumns) {\r\n      result[key] = allColumns[key];\r\n    }\r\n  }\r\n  return result;\r\n}\r\n\r\nexport function omitTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(\r\n  table: T,\r\n  columns: readonly K[]\r\n): Omit<ReturnType<typeof getTableColumns<T>>, K> {\r\n  const allColumns = getTableColumns(table);\r\n  const columnsToOmit = new Set(columns as readonly string[]);\r\n  const filteredEntries = Object.entries(allColumns).filter(([key]) => !columnsToOmit.has(key));\r\n  return Object.fromEntries(filteredEntries) as Omit<typeof allColumns, K>;\r\n}\r\n\r\n// Overloads to narrow return type based on provided partial\r\nexport function createSelectDTO<T extends Table>(\r\n  table: T\r\n): {\r\n  columns: ReturnType<typeof getTableColumns<T>>;\r\n  schema: ReturnType<typeof createTableSelectSchema<T>>;\r\n};\r\nexport function createSelectDTO<\r\n  T extends Table,\r\n  K extends Extract<keyof InferSelectModel<T>, string>,\r\n>(\r\n  table: T,\r\n  partial: { omit: readonly K[] }\r\n): {\r\n  columns: ReturnType<typeof omitTableColumns<T, K>>;\r\n  schema: ReturnType<typeof omitTableSchema<T, K>>;\r\n};\r\nexport function createSelectDTO<\r\n  T extends Table,\r\n  K extends Extract<keyof InferSelectModel<T>, string>,\r\n>(\r\n  table: T,\r\n  partial: { pick: readonly K[] }\r\n): {\r\n  columns: ReturnType<typeof pickTableColumns<T, K>>;\r\n  schema: ReturnType<typeof pickTableSchema<T, K>>;\r\n};\r\n\r\n// Implementation\r\nexport function createSelectDTO<T extends Table>(\r\n  table: T,\r\n  partial?:\r\n    | { omit: readonly (keyof InferSelectModel<T>)[] }\r\n    | { pick: readonly (keyof InferSelectModel<T>)[] }\r\n): { columns: unknown; schema: unknown } {\r\n  if (partial) {\r\n    if (\"omit\" in partial && partial.omit) {\r\n      return {\r\n        columns: omitTableColumns(table, partial.omit),\r\n        schema: omitTableSchema(table, partial.omit),\r\n      };\r\n    }\r\n    if (\"pick\" in partial && partial.pick) {\r\n      return {\r\n        columns: pickTableColumns(table, partial.pick),\r\n        schema: pickTableSchema(table, partial.pick),\r\n      };\r\n    }\r\n  }\r\n  return { columns: getTableColumns(table), schema: createTableSelectSchema(table) };\r\n}\r\n\r\nexport function createSelectUtils<\r\n  T extends Record<\r\n    string,\r\n    {\r\n      columns: unknown;\r\n      schema: z.ZodTypeAny;\r\n    }\r\n  >,\r\n  S extends z.ZodTypeAny,\r\n>(\r\n  dtos: T,\r\n  output: S,\r\n  transformer: (rows: Array<{ [K in keyof T]: z.infer<T[K][\"schema\"]> }>) => z.infer<S>\r\n): {\r\n  select: { [K in keyof T]: T[K][\"columns\"] };\r\n  output: S;\r\n  transformer: (rows: Array<{ [K in keyof T]: z.infer<T[K][\"schema\"]> }>) => z.infer<S>;\r\n} {\r\n  return {\r\n    select: Object.fromEntries(Object.entries(dtos).map(([key, dto]) => [key, dto.columns])) as {\r\n      [K in keyof T]: T[K][\"columns\"];\r\n    },\r\n    output,\r\n    transformer,\r\n  };\r\n}\r\n\r\nexport const uuidOutput = z.object({\r\n  id: z.uuid(),\r\n});\r\n\r\nexport const uuidManyOutput = z.object({\r\n  ids: z.array(z.uuid()),\r\n});\r\n\r\nexport const scheduleOutput = z.object({\r\n  jobId: z.string(),\r\n});\r\n\r\nexport const scheduleManyOutput = z.object({\r\n  jobIds: z.array(z.string()),\r\n});\r\n\r\nexport const deleteOutput = uuidOutput;\r\n\r\nexport const deleteManyOutput = uuidManyOutput;\r\n"],"mappings":";;;;;;AAaA,MAAa,2BAA4C,WAAA,GAAA,YAAA,oBAAgC,MAAM;AAM/F,SAAgB,YAA+C,OAAmC;AAChG,QAAO,MAAM,QACV,KAAK,WAAW;AACf,MAAI,UAAuB;AAC3B,SAAO;IAET,EAAE,CACH;;AAGH,SAAgB,WAGd,QAA4B,MAAoD;CAChF,MAAM,OAAkC,EAAE;AAC1C,MAAK,MAAM,KAAK,KACd,MAAK,KAAK;AAEZ,QAAO,OAAO,KAAK,KAAK;;AAG1B,SAAgB,gBACd,OACA,SACA;AACA,QAAO,YAAA,GAAA,YAAA,oBAA8B,MAAM,EAAE,QAAQ;;AAGvD,SAAgB,WAGd,QAA4B,MAAoD;CAChF,MAAM,OAAkC,EAAE;AAC1C,MAAK,MAAM,KAAK,KACd,MAAK,KAAK;AAEZ,QAAO,OAAO,KAAK,KAAK;;AAG1B,SAAgB,gBACd,OACA,SACA;AACA,QAAO,YAAA,GAAA,YAAA,oBAA8B,MAAM,EAAE,QAAQ;;AAKvD,SAAgB,YACd,OACA,QAC2E;CAC3E,MAAM,cAAA,GAAA,YAAA,iBAA6B,MAAM;CACzC,MAAM,aAAa,OAAO,KAAK,OAAO,MAAM;CAE5C,MAAM,SAAS,EAAE;AACjB,MAAK,MAAM,OAAO,WAChB,KAAI,OAAO,WACR,QAAe,OAAO,WAAW;AAItC,QAAO;;AAGT,SAAgB,iBACd,OACA,SACgD;CAChD,MAAM,cAAA,GAAA,YAAA,iBAA6B,MAAM;CACzC,MAAM,SAAS,EAAE;AACjB,MAAK,MAAM,OAAO,QAChB,KAAI,OAAO,WACT,QAAO,OAAO,WAAW;AAG7B,QAAO;;AAGT,SAAgB,iBACd,OACA,SACgD;CAChD,MAAM,cAAA,GAAA,YAAA,iBAA6B,MAAM;CACzC,MAAM,gBAAgB,IAAI,IAAI,QAA6B;CAC3D,MAAM,kBAAkB,OAAO,QAAQ,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;AAC7F,QAAO,OAAO,YAAY,gBAAgB;;AAgC5C,SAAgB,gBACd,OACA,SAGuC;AACvC,KAAI,SAAS;AACX,MAAI,UAAU,WAAW,QAAQ,KAC/B,QAAO;GACL,SAAS,iBAAiB,OAAO,QAAQ,KAAK;GAC9C,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;GAC7C;AAEH,MAAI,UAAU,WAAW,QAAQ,KAC/B,QAAO;GACL,SAAS,iBAAiB,OAAO,QAAQ,KAAK;GAC9C,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;GAC7C;;AAGL,QAAO;EAAE,UAAA,GAAA,YAAA,iBAAyB,MAAM;EAAE,QAAQ,wBAAwB,MAAM;EAAE;;AAGpF,SAAgB,kBAUd,MACA,QACA,aAKA;AACA,QAAO;EACL,QAAQ,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;EAGxF;EACA;EACD;;AAGH,MAAa,aAAaA,IAAAA,EAAE,OAAO,EACjC,IAAIA,IAAAA,EAAE,MAAM,EACb,CAAC;AAEF,MAAa,iBAAiBA,IAAAA,EAAE,OAAO,EACrC,KAAKA,IAAAA,EAAE,MAAMA,IAAAA,EAAE,MAAM,CAAC,EACvB,CAAC;AAEF,MAAa,iBAAiBA,IAAAA,EAAE,OAAO,EACrC,OAAOA,IAAAA,EAAE,QAAQ,EAClB,CAAC;AAEF,MAAa,qBAAqBA,IAAAA,EAAE,OAAO,EACzC,QAAQA,IAAAA,EAAE,MAAMA,IAAAA,EAAE,QAAQ,CAAC,EAC5B,CAAC;AAEF,MAAa,eAAe;AAE5B,MAAa,mBAAmB"}

package/dist/src/modules/base/base.dto.d.cts

@@ -0,0 +1,67 @@
+import { ServerError } from "../../utils/errors.cjs";
+import * as _$drizzle_zod0 from "drizzle-zod";
+import * as _$drizzle_orm0 from "drizzle-orm";
+import { InferSelectModel, Table, getTableColumns } from "drizzle-orm";
+import { Result } from "neverthrow";
+import { z } from "zod";
+
+//#region src/modules/base/base.dto.d.ts
+type Simplify<T> = { [K in keyof T]: T[K] } & {};
+type StringKeys<T> = Extract<keyof T, string>;
+type ServerResult<T> = Result<T, ServerError>;
+type ServerResultAsync<T> = Promise<ServerResult<T>>;
+declare const createTableSelectSchema: <T extends Table>(table: T) => _$drizzle_zod0.BuildSchema<"select", T["_"]["columns"], undefined, undefined>;
+type ExtractColumnTypes<T extends Table, C extends Record<string, unknown>> = Simplify<Pick<InferSelectModel<T>, Extract<keyof C, keyof InferSelectModel<T>>>>;
+declare function toZodFilter<const T extends readonly string[]>(array: T): Record<T[number], true>;
+declare function pickSchema<Shape extends z.ZodRawShape, const Keys extends readonly StringKeys<Shape>[]>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Pick<Shape, Keys[number]>>;
+declare function pickTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): z.ZodObject<Pick<(T["_"]["columns"] extends infer T_2 extends Record<string, any> ? { [K_2 in keyof T_2 as _$drizzle_zod0.ColumnIsGeneratedAlwaysAs<T["_"]["columns"][K_2]> extends true ? K_2 : K_2]: T_2[K_2] extends infer TColumn extends _$drizzle_orm0.Column<_$drizzle_orm0.ColumnBaseConfig<_$drizzle_orm0.ColumnDataType, string>, object, object> ? (TRefinements extends object ? TRefinements[K_2] extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> | ((schema: any) => any) ? true : false : false) extends true ? _$drizzle_orm0.Assume<TRefinements[K_2 & keyof TRefinements] extends infer T_3 ? T_3 extends TRefinements[K_2 & keyof TRefinements] ? T_3 extends ((schema: any) => z.ZodType) ? (TColumn["_"]["notNull"] extends true ? ReturnType<T_3> : z.ZodNullable<ReturnType<T_3>>) extends infer TSchema extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> ? TType extends "update" ? z.ZodOptional<TSchema> : TSchema : z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> : T_3 : never : never, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>> : _$drizzle_zod0.HandleColumn<TType, TColumn, TCoerce> : T_2[K_2] extends infer TObject extends Table<_$drizzle_orm0.TableConfig<_$drizzle_orm0.Column<any, object, object>>> | _$drizzle_orm0.SelectedFieldsFlat<_$drizzle_orm0.Column<_$drizzle_orm0.ColumnBaseConfig<_$drizzle_orm0.ColumnDataType, string>, object, object>> | _$drizzle_orm0.View<string, boolean, _$drizzle_orm0.ColumnsSelection> ? _$drizzle_zod0.BuildSchema<TType, _$drizzle_zod0.GetSelection<TObject>, TRefinements extends object ? TRefinements[K_2 & keyof TRefinements] : undefined, TCoerce> : z.ZodAny } : never) extends infer T_1 ? { [K_1 in keyof T_1]: T_1[K_1] } : never, K>, z.core.$strip>;
+declare function omitSchema<Shape extends z.ZodRawShape, const Keys extends readonly StringKeys<Shape>[]>(schema: z.ZodObject<Shape>, keys: Keys): z.ZodObject<Omit<Shape, Keys[number]>>;
+declare function omitTableSchema<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): z.ZodObject<Omit<(T["_"]["columns"] extends infer T_2 extends Record<string, any> ? { [K_2 in keyof T_2 as _$drizzle_zod0.ColumnIsGeneratedAlwaysAs<T["_"]["columns"][K_2]> extends true ? K_2 : K_2]: T_2[K_2] extends infer TColumn extends _$drizzle_orm0.Column<_$drizzle_orm0.ColumnBaseConfig<_$drizzle_orm0.ColumnDataType, string>, object, object> ? (TRefinements extends object ? TRefinements[K_2] extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> | ((schema: any) => any) ? true : false : false) extends true ? _$drizzle_orm0.Assume<TRefinements[K_2 & keyof TRefinements] extends infer T_3 ? T_3 extends TRefinements[K_2 & keyof TRefinements] ? T_3 extends ((schema: any) => z.ZodType) ? (TColumn["_"]["notNull"] extends true ? ReturnType<T_3> : z.ZodNullable<ReturnType<T_3>>) extends infer TSchema extends z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> ? TType extends "update" ? z.ZodOptional<TSchema> : TSchema : z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>> : T_3 : never : never, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>> : _$drizzle_zod0.HandleColumn<TType, TColumn, TCoerce> : T_2[K_2] extends infer TObject extends Table<_$drizzle_orm0.TableConfig<_$drizzle_orm0.Column<any, object, object>>> | _$drizzle_orm0.SelectedFieldsFlat<_$drizzle_orm0.Column<_$drizzle_orm0.ColumnBaseConfig<_$drizzle_orm0.ColumnDataType, string>, object, object>> | _$drizzle_orm0.View<string, boolean, _$drizzle_orm0.ColumnsSelection> ? _$drizzle_zod0.BuildSchema<TType, _$drizzle_zod0.GetSelection<TObject>, TRefinements extends object ? TRefinements[K_2 & keyof TRefinements] : undefined, TCoerce> : z.ZodAny } : never) extends infer T_1 ? { [K_1 in keyof T_1]: T_1[K_1] } : never, K>, z.core.$strip>;
+declare function pickColumns<T extends Table, Shape extends z.ZodRawShape>(table: T, schema: z.ZodObject<Shape>): Pick<ReturnType<typeof getTableColumns<T>>, Extract<keyof Shape, string>>;
+declare function pickTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): Pick<ReturnType<typeof getTableColumns<T>>, K>;
+declare function omitTableColumns<T extends Table, K extends keyof InferSelectModel<T>>(table: T, columns: readonly K[]): Omit<ReturnType<typeof getTableColumns<T>>, K>;
+declare function createSelectDTO<T extends Table>(table: T): {
+  columns: ReturnType<typeof getTableColumns<T>>;
+  schema: ReturnType<typeof createTableSelectSchema<T>>;
+};
+declare function createSelectDTO<T extends Table, K extends Extract<keyof InferSelectModel<T>, string>>(table: T, partial: {
+  omit: readonly K[];
+}): {
+  columns: ReturnType<typeof omitTableColumns<T, K>>;
+  schema: ReturnType<typeof omitTableSchema<T, K>>;
+};
+declare function createSelectDTO<T extends Table, K extends Extract<keyof InferSelectModel<T>, string>>(table: T, partial: {
+  pick: readonly K[];
+}): {
+  columns: ReturnType<typeof pickTableColumns<T, K>>;
+  schema: ReturnType<typeof pickTableSchema<T, K>>;
+};
+declare function createSelectUtils<T extends Record<string, {
+  columns: unknown;
+  schema: z.ZodTypeAny;
+}>, S extends z.ZodTypeAny>(dtos: T, output: S, transformer: (rows: Array<{ [K in keyof T]: z.infer<T[K]["schema"]> }>) => z.infer<S>): {
+  select: { [K in keyof T]: T[K]["columns"] };
+  output: S;
+  transformer: (rows: Array<{ [K in keyof T]: z.infer<T[K]["schema"]> }>) => z.infer<S>;
+};
+declare const uuidOutput: z.ZodObject<{
+  id: z.ZodUUID;
+}, z.core.$strip>;
+declare const uuidManyOutput: z.ZodObject<{
+  ids: z.ZodArray<z.ZodUUID>;
+}, z.core.$strip>;
+declare const scheduleOutput: z.ZodObject<{
+  jobId: z.ZodString;
+}, z.core.$strip>;
+declare const scheduleManyOutput: z.ZodObject<{
+  jobIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+declare const deleteOutput: z.ZodObject<{
+  id: z.ZodUUID;
+}, z.core.$strip>;
+declare const deleteManyOutput: z.ZodObject<{
+  ids: z.ZodArray<z.ZodUUID>;
+}, z.core.$strip>;
+//#endregion
+export { ExtractColumnTypes, ServerResult, ServerResultAsync, createSelectDTO, createSelectUtils, createTableSelectSchema, deleteManyOutput, deleteOutput, getTableColumns, omitSchema, omitTableColumns, omitTableSchema, pickColumns, pickSchema, pickTableColumns, pickTableSchema, scheduleManyOutput, scheduleOutput, toZodFilter, uuidManyOutput, uuidOutput };
+//# sourceMappingURL=base.dto.d.cts.map

package/dist/src/modules/base/base.grants.cjs

@@ -0,0 +1,107 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../../_virtual/_rolldown/runtime.cjs");
+let neverthrow = require("neverthrow");
+//#region src/modules/base/base.grants.ts
+function flattenNestedGrants(nestedGrants) {
+	return Object.entries(nestedGrants).flatMap(([resource, levels]) => {
+		return Object.entries(levels).flatMap(([level, roles]) => {
+			return Object.entries(roles).flatMap(([role, actions]) => {
+				return Object.entries(actions).map(([action, access]) => {
+					return {
+						resource,
+						level,
+						role,
+						action,
+						access
+					};
+				});
+			});
+		});
+	});
+}
+function checkOwnership(entityField, contextValue, entities) {
+	if (!contextValue) return false;
+	if (!entities) return false;
+	return Array.isArray(entities) ? entities.every((e) => e[entityField] === contextValue) : entities[entityField] === contextValue;
+}
+const LEVEL_PRIORITY = [
+	"user",
+	"team",
+	"organization"
+];
+function getRoleForLevel(level, ctx) {
+	switch (level) {
+		case "user": return ctx.userRole;
+		case "team": return ctx.teamRole;
+		case "organization": return ctx.organizationRole;
+	}
+}
+function getContextValueForLevel(level, ctx) {
+	switch (level) {
+		case "user": return ctx.userId;
+		case "team": return ctx.teamId;
+		case "organization": return ctx.organizationId;
+	}
+}
+function getOwnershipFieldForLevel(level) {
+	switch (level) {
+		case "user": return "userId";
+		case "team": return "teamId";
+		case "organization": return "organizationId";
+	}
+}
+function hasAllAccess(grants, roles) {
+	for (const level of LEVEL_PRIORITY) for (const grant of grants) {
+		if (grant.level !== level) continue;
+		if (grant.access !== "all") continue;
+		if (grant.role === getRoleForLevel(level, roles)) return true;
+	}
+	return false;
+}
+function checkOwnAccess(grants, roles, contextValues, entities) {
+	for (const level of LEVEL_PRIORITY) for (const grant of grants) {
+		if (grant.level !== level) continue;
+		if (grant.access !== "own") continue;
+		if (grant.role !== getRoleForLevel(level, roles)) continue;
+		if (checkOwnership(getOwnershipFieldForLevel(level), getContextValueForLevel(level, contextValues), entities)) return true;
+	}
+	return false;
+}
+function checkPermissionSync(actor, grants, entities) {
+	if (!grants || grants.length === 0) return false;
+	const roles = {
+		userRole: actor.userRole,
+		teamRole: actor.teamRole,
+		organizationRole: actor.organizationRole
+	};
+	const contextValues = {
+		userId: actor.userId,
+		teamId: actor.teamId,
+		organizationId: actor.organizationId
+	};
+	if (hasAllAccess(grants, roles)) return true;
+	return checkOwnAccess(grants, roles, contextValues, entities);
+}
+async function checkPermissionAsync(actor, grants, getEntities) {
+	if (!grants || grants.length === 0) return (0, neverthrow.ok)(false);
+	const roles = {
+		userRole: actor.userRole,
+		teamRole: actor.teamRole,
+		organizationRole: actor.organizationRole
+	};
+	const contextValues = {
+		userId: actor.userId,
+		teamId: actor.teamId,
+		organizationId: actor.organizationId
+	};
+	if (hasAllAccess(grants, roles)) return (0, neverthrow.ok)(true);
+	const entities = await getEntities();
+	if (entities.isErr()) return (0, neverthrow.err)(entities.error);
+	return (0, neverthrow.ok)(checkOwnAccess(grants, roles, contextValues, entities.value));
+}
+//#endregion
+exports.checkPermissionAsync = checkPermissionAsync;
+exports.checkPermissionSync = checkPermissionSync;
+exports.flattenNestedGrants = flattenNestedGrants;
+
+//# sourceMappingURL=base.grants.cjs.map

package/dist/src/modules/base/base.grants.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.grants.cjs","names":[],"sources":["../../../../src/modules/base/base.grants.ts"],"sourcesContent":["import { err, ok } from \"neverthrow\";\r\nimport type { ServiceActor } from \"./base.actor\";\r\nimport type { ServerResultAsync } from \"./base.dto\";\r\n\r\ntype Level = \"user\" | \"team\" | \"organization\";\r\ntype Access = \"all\" | \"own\";\r\n\r\nexport type Entity = Partial<{\r\n  userId: string | null;\r\n  teamId: string | null;\r\n  organizationId: string | null;\r\n}>;\r\n\r\nexport type Grant = {\r\n  level: Level;\r\n  role: string;\r\n  action: string;\r\n  resource: string;\r\n  access: Access;\r\n  attributes?: string[];\r\n};\r\n\r\nexport type NestedGrants = Record<\r\n  string,\r\n  Partial<Record<Level, Record<string, Record<string, Access>>>>\r\n>;\r\n\r\nexport type ResourceGrant = Omit<Grant, \"resource\">;\r\n\r\nexport type ResourceActionGrant = Omit<ResourceGrant, \"action\">;\r\n\r\nexport function flattenNestedGrants(nestedGrants: NestedGrants): Grant[] {\r\n  return Object.entries(nestedGrants).flatMap(([resource, levels]) => {\r\n    return Object.entries(levels).flatMap(([level, roles]) => {\r\n      return Object.entries(roles).flatMap(([role, actions]) => {\r\n        return Object.entries(actions).map(([action, access]) => {\r\n          return {\r\n            resource,\r\n            level: level as Level,\r\n            role,\r\n            action,\r\n            access,\r\n          };\r\n        });\r\n      });\r\n    });\r\n  });\r\n}\r\n\r\nfunction checkOwnership(\r\n  entityField: keyof Entity,\r\n  contextValue: string | null | undefined,\r\n  entities?: Entity | Entity[]\r\n): boolean {\r\n  if (!contextValue) return false;\r\n  if (!entities) return false;\r\n  return Array.isArray(entities)\r\n    ? entities.every((e) => e[entityField] === contextValue)\r\n    : entities[entityField] === contextValue;\r\n}\r\n\r\ntype GrantLevel = \"user\" | \"team\" | \"organization\";\r\n\r\n// Level priority: user -> team -> organization (bottom-up)\r\nconst LEVEL_PRIORITY: readonly GrantLevel[] = [\"user\", \"team\", \"organization\"];\r\n\r\ninterface RoleContext {\r\n  userRole: string | null;\r\n  teamRole: string | null;\r\n  organizationRole: string | null;\r\n}\r\n\r\ninterface ContextValues {\r\n  userId: string;\r\n  teamId: string | null;\r\n  organizationId: string | null;\r\n}\r\n\r\nfunction getRoleForLevel(level: GrantLevel, ctx: RoleContext): string | null {\r\n  switch (level) {\r\n    case \"user\":\r\n      return ctx.userRole;\r\n    case \"team\":\r\n      return ctx.teamRole;\r\n    case \"organization\":\r\n      return ctx.organizationRole;\r\n  }\r\n}\r\n\r\nfunction getContextValueForLevel(level: GrantLevel, ctx: ContextValues): string | null {\r\n  switch (level) {\r\n    case \"user\":\r\n      return ctx.userId;\r\n    case \"team\":\r\n      return ctx.teamId;\r\n    case \"organization\":\r\n      return ctx.organizationId;\r\n  }\r\n}\r\n\r\nfunction getOwnershipFieldForLevel(level: GrantLevel): keyof Entity {\r\n  switch (level) {\r\n    case \"user\":\r\n      return \"userId\";\r\n    case \"team\":\r\n      return \"teamId\";\r\n    case \"organization\":\r\n      return \"organizationId\";\r\n  }\r\n}\r\n\r\nfunction hasAllAccess(grants: ResourceActionGrant[], roles: RoleContext): boolean {\r\n  for (const level of LEVEL_PRIORITY) {\r\n    for (const grant of grants) {\r\n      if (grant.level !== level) continue;\r\n      if (grant.access !== \"all\") continue;\r\n      if (grant.role === getRoleForLevel(level, roles)) return true;\r\n    }\r\n  }\r\n  return false;\r\n}\r\n\r\nfunction checkOwnAccess(\r\n  grants: ResourceActionGrant[],\r\n  roles: RoleContext,\r\n  contextValues: ContextValues,\r\n  entities: Entity | Entity[] | undefined\r\n): boolean {\r\n  for (const level of LEVEL_PRIORITY) {\r\n    for (const grant of grants) {\r\n      if (grant.level !== level) continue;\r\n      if (grant.access !== \"own\") continue;\r\n      if (grant.role !== getRoleForLevel(level, roles)) continue;\r\n\r\n      const ownershipField = getOwnershipFieldForLevel(level);\r\n      const contextValue = getContextValueForLevel(level, contextValues);\r\n\r\n      if (checkOwnership(ownershipField, contextValue, entities)) return true;\r\n    }\r\n  }\r\n  return false;\r\n}\r\n\r\nexport function checkPermissionSync<T extends Entity>(\r\n  actor: ServiceActor,\r\n  grants: ResourceActionGrant[],\r\n  entities?: T | T[]\r\n): boolean {\r\n  if (!grants || grants.length === 0) return false;\r\n\r\n  const roles = {\r\n    userRole: actor.userRole,\r\n    teamRole: actor.teamRole,\r\n    organizationRole: actor.organizationRole,\r\n  };\r\n  const contextValues = {\r\n    userId: actor.userId,\r\n    teamId: actor.teamId,\r\n    organizationId: actor.organizationId,\r\n  };\r\n\r\n  // Pass 1: Check for \"all\" access first (no ownership check needed)\r\n  if (hasAllAccess(grants, roles)) return true;\r\n\r\n  // Pass 2: Check \"own\" access with ownership validation\r\n  return checkOwnAccess(grants, roles, contextValues, entities);\r\n}\r\n\r\nexport async function checkPermissionAsync<T extends Entity>(\r\n  actor: ServiceActor,\r\n  grants: ResourceActionGrant[],\r\n  getEntities: () => ServerResultAsync<T | T[] | undefined>\r\n): ServerResultAsync<boolean> {\r\n  if (!grants || grants.length === 0) return ok(false);\r\n\r\n  const roles = {\r\n    userRole: actor.userRole,\r\n    teamRole: actor.teamRole,\r\n    organizationRole: actor.organizationRole,\r\n  };\r\n  const contextValues = {\r\n    userId: actor.userId,\r\n    teamId: actor.teamId,\r\n    organizationId: actor.organizationId,\r\n  };\r\n\r\n  // Pass 1: Check for \"all\" access first (no entity fetch needed)\r\n  if (hasAllAccess(grants, roles)) return ok(true);\r\n\r\n  // Pass 2: Only fetch entities if we need to check ownership\r\n  const entities = await getEntities();\r\n  if (entities.isErr()) return err(entities.error);\r\n  return ok(checkOwnAccess(grants, roles, contextValues, entities.value));\r\n}\r\n"],"mappings":";;;;AA+BA,SAAgB,oBAAoB,cAAqC;AACvE,QAAO,OAAO,QAAQ,aAAa,CAAC,SAAS,CAAC,UAAU,YAAY;AAClE,SAAO,OAAO,QAAQ,OAAO,CAAC,SAAS,CAAC,OAAO,WAAW;AACxD,UAAO,OAAO,QAAQ,MAAM,CAAC,SAAS,CAAC,MAAM,aAAa;AACxD,WAAO,OAAO,QAAQ,QAAQ,CAAC,KAAK,CAAC,QAAQ,YAAY;AACvD,YAAO;MACL;MACO;MACP;MACA;MACA;MACD;MACD;KACF;IACF;GACF;;AAGJ,SAAS,eACP,aACA,cACA,UACS;AACT,KAAI,CAAC,aAAc,QAAO;AAC1B,KAAI,CAAC,SAAU,QAAO;AACtB,QAAO,MAAM,QAAQ,SAAS,GAC1B,SAAS,OAAO,MAAM,EAAE,iBAAiB,aAAa,GACtD,SAAS,iBAAiB;;AAMhC,MAAM,iBAAwC;CAAC;CAAQ;CAAQ;CAAe;AAc9E,SAAS,gBAAgB,OAAmB,KAAiC;AAC3E,SAAQ,OAAR;EACE,KAAK,OACH,QAAO,IAAI;EACb,KAAK,OACH,QAAO,IAAI;EACb,KAAK,eACH,QAAO,IAAI;;;AAIjB,SAAS,wBAAwB,OAAmB,KAAmC;AACrF,SAAQ,OAAR;EACE,KAAK,OACH,QAAO,IAAI;EACb,KAAK,OACH,QAAO,IAAI;EACb,KAAK,eACH,QAAO,IAAI;;;AAIjB,SAAS,0BAA0B,OAAiC;AAClE,SAAQ,OAAR;EACE,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,eACH,QAAO;;;AAIb,SAAS,aAAa,QAA+B,OAA6B;AAChF,MAAK,MAAM,SAAS,eAClB,MAAK,MAAM,SAAS,QAAQ;AAC1B,MAAI,MAAM,UAAU,MAAO;AAC3B,MAAI,MAAM,WAAW,MAAO;AAC5B,MAAI,MAAM,SAAS,gBAAgB,OAAO,MAAM,CAAE,QAAO;;AAG7D,QAAO;;AAGT,SAAS,eACP,QACA,OACA,eACA,UACS;AACT,MAAK,MAAM,SAAS,eAClB,MAAK,MAAM,SAAS,QAAQ;AAC1B,MAAI,MAAM,UAAU,MAAO;AAC3B,MAAI,MAAM,WAAW,MAAO;AAC5B,MAAI,MAAM,SAAS,gBAAgB,OAAO,MAAM,CAAE;AAKlD,MAAI,eAHmB,0BAA0B,MAAM,EAClC,wBAAwB,OAAO,cAAc,EAEjB,SAAS,CAAE,QAAO;;AAGvE,QAAO;;AAGT,SAAgB,oBACd,OACA,QACA,UACS;AACT,KAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;CAE3C,MAAM,QAAQ;EACZ,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,kBAAkB,MAAM;EACzB;CACD,MAAM,gBAAgB;EACpB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,gBAAgB,MAAM;EACvB;AAGD,KAAI,aAAa,QAAQ,MAAM,CAAE,QAAO;AAGxC,QAAO,eAAe,QAAQ,OAAO,eAAe,SAAS;;AAG/D,eAAsB,qBACpB,OACA,QACA,aAC4B;AAC5B,KAAI,CAAC,UAAU,OAAO,WAAW,EAAG,SAAA,GAAA,WAAA,IAAU,MAAM;CAEpD,MAAM,QAAQ;EACZ,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,kBAAkB,MAAM;EACzB;CACD,MAAM,gBAAgB;EACpB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,gBAAgB,MAAM;EACvB;AAGD,KAAI,aAAa,QAAQ,MAAM,CAAE,SAAA,GAAA,WAAA,IAAU,KAAK;CAGhD,MAAM,WAAW,MAAM,aAAa;AACpC,KAAI,SAAS,OAAO,CAAE,SAAA,GAAA,WAAA,KAAW,SAAS,MAAM;AAChD,SAAA,GAAA,WAAA,IAAU,eAAe,QAAQ,OAAO,eAAe,SAAS,MAAM,CAAC"}

package/dist/src/modules/base/base.grants.d.cts

@@ -0,0 +1,28 @@
+import { ServerResultAsync } from "./base.dto.cjs";
+import { ServiceActor } from "./base.actor.cjs";
+
+//#region src/modules/base/base.grants.d.ts
+type Level = "user" | "team" | "organization";
+type Access = "all" | "own";
+type Entity = Partial<{
+  userId: string | null;
+  teamId: string | null;
+  organizationId: string | null;
+}>;
+type Grant = {
+  level: Level;
+  role: string;
+  action: string;
+  resource: string;
+  access: Access;
+  attributes?: string[];
+};
+type NestedGrants = Record<string, Partial<Record<Level, Record<string, Record<string, Access>>>>>;
+type ResourceGrant = Omit<Grant, "resource">;
+type ResourceActionGrant = Omit<ResourceGrant, "action">;
+declare function flattenNestedGrants(nestedGrants: NestedGrants): Grant[];
+declare function checkPermissionSync<T extends Entity>(actor: ServiceActor, grants: ResourceActionGrant[], entities?: T | T[]): boolean;
+declare function checkPermissionAsync<T extends Entity>(actor: ServiceActor, grants: ResourceActionGrant[], getEntities: () => ServerResultAsync<T | T[] | undefined>): ServerResultAsync<boolean>;
+//#endregion
+export { Entity, Grant, NestedGrants, ResourceActionGrant, ResourceGrant, checkPermissionAsync, checkPermissionSync, flattenNestedGrants };
+//# sourceMappingURL=base.grants.d.cts.map