@objectstack/core 15.0.0 → 15.1.1

package/dist/index.cjs

@@ -30,6 +30,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ANONYMOUS_DENY_BODY: () => ANONYMOUS_DENY_BODY,
+  ANONYMOUS_DENY_CODE: () => ANONYMOUS_DENY_CODE,
+  ANONYMOUS_DENY_MESSAGE: () => ANONYMOUS_DENY_MESSAGE,
+  ANONYMOUS_DENY_STATUS: () => ANONYMOUS_DENY_STATUS,
   API_KEY_PREFIX: () => API_KEY_PREFIX,
   ApiRegistry: () => ApiRegistry,
   CORE_FALLBACK_FACTORIES: () => CORE_FALLBACK_FACTORIES,
@@ -94,6 +98,7 @@ __export(index_exports, {
   resolveLocale: () => resolveLocale,
   resolveLocalizationContext: () => resolveLocalizationContext,
   safeExit: () => safeExit,
+  shouldDenyAnonymous: () => shouldDenyAnonymous,
   signPayload: () => signPayload,
   verifyPayload: () => verifyPayload,
   verifyPlatformSignature: () => verifyPlatformSignature,
@@ -1642,6 +1647,8 @@ var ObjectKernel = class {
       this.validateSystemRequirements();
       this.logger.debug("Triggering kernel:ready hook");
       await this.context.trigger("kernel:ready");
+      this.logger.debug("Triggering kernel:bootstrapped hook");
+      await this.context.trigger("kernel:bootstrapped");
       this.logger.debug("Triggering kernel:listening hook");
       await this.context.trigger("kernel:listening");
       this.logger.info("\u2705 Bootstrap complete");
@@ -1925,6 +1932,7 @@ var LiteKernel = class extends ObjectKernelBase {
       await this.runPluginStart(plugin);
     }
     await this.triggerHook("kernel:ready");
+    await this.triggerHook("kernel:bootstrapped");
     await this.triggerHook("kernel:listening");
     this.logger.info("\u2705 Bootstrap complete", {
       pluginCount: this.plugins.size
@@ -4539,6 +4547,26 @@ function evaluateAuthGate(sessionUser, path) {
   };
 }
 
+// src/security/anonymous-deny.ts
+var ANONYMOUS_DENY_STATUS = 401;
+var ANONYMOUS_DENY_CODE = "unauthenticated";
+var ANONYMOUS_DENY_MESSAGE = "Authentication is required to access this endpoint.";
+var ANONYMOUS_DENY_BODY = {
+  error: ANONYMOUS_DENY_CODE,
+  message: ANONYMOUS_DENY_MESSAGE
+};
+function shouldDenyAnonymous(input) {
+  if (!input.requireAuth) return false;
+  if (typeof input.method === "string" && input.method.toUpperCase() === "OPTIONS") {
+    return false;
+  }
+  if (input.userId || input.isSystem) return false;
+  if (typeof input.path === "string" && input.path.length > 0 && isAuthGateAllowlisted(input.path)) {
+    return false;
+  }
+  return true;
+}
+
 // src/utils/datetime.ts
 function calendarPartsInTz(d, tz) {
   const parts = new Intl.DateTimeFormat("en-US", {
@@ -5560,6 +5588,10 @@ var NamespaceResolver = class {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ANONYMOUS_DENY_BODY,
+  ANONYMOUS_DENY_CODE,
+  ANONYMOUS_DENY_MESSAGE,
+  ANONYMOUS_DENY_STATUS,
   API_KEY_PREFIX,
   ApiRegistry,
   CORE_FALLBACK_FACTORIES,
@@ -5624,6 +5656,7 @@ var NamespaceResolver = class {
   resolveLocale,
   resolveLocalizationContext,
   safeExit,
+  shouldDenyAnonymous,
   signPayload,
   verifyPayload,
   verifyPlatformSignature,