@porulle/core 0.11.0 → 0.14.0

package/dist/auth/actor.d.ts

@@ -0,0 +1,10 @@
+import type { CommerceConfig } from "../config/types.js";
+import type { Actor } from "./types.js";
+import type { AuthInstance } from "./setup.js";
+export declare const AUTH_COOKIE_PREFIX = "uc";
+export declare const SESSION_COOKIE_NAME = "uc.session_token";
+export declare const DEFAULT_CUSTOMER_PERMISSIONS: readonly ["catalog:read", "cart:create", "cart:read", "cart:update", "orders:create", "orders:read:own", "customers:read:self", "customers:update:self"];
+export declare function getCustomerPermissions(config: CommerceConfig): string[];
+/** Resolve a better-auth session and its porulle organization permissions. */
+export declare function resolveActor(headers: Headers, auth: AuthInstance, config: CommerceConfig, request?: Request): Promise<Actor | null>;
+//# sourceMappingURL=actor.d.ts.map

package/dist/auth/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../src/auth/actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC,eAAO,MAAM,mBAAmB,qBAAwC,CAAC;AAEzE,eAAO,MAAM,4BAA4B,0JAS/B,CAAC;AAEX,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,CAEvE;AAYD,8EAA8E;AAC9E,wBAAsB,YAAY,CAChC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,OAAsD,GAC9D,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAsEvB"}

package/dist/auth/actor.js

@@ -0,0 +1,91 @@
+import { DEFAULT_ORG_ID } from "./org.js";
+export const AUTH_COOKIE_PREFIX = "uc";
+export const SESSION_COOKIE_NAME = `${AUTH_COOKIE_PREFIX}.session_token`;
+export const DEFAULT_CUSTOMER_PERMISSIONS = [
+    "catalog:read",
+    "cart:create",
+    "cart:read",
+    "cart:update",
+    "orders:create",
+    "orders:read:own",
+    "customers:read:self",
+    "customers:update:self",
+];
+export function getCustomerPermissions(config) {
+    return config.auth?.customerPermissions ?? [...DEFAULT_CUSTOMER_PERMISSIONS];
+}
+function resolvePermissions(session, config) {
+    const role = session.session.activeOrganizationRole;
+    if (!role)
+        return getCustomerPermissions(config);
+    const roleConfig = config.auth?.roles?.[role];
+    return roleConfig ? roleConfig.permissions : [];
+}
+/** Resolve a better-auth session and its porulle organization permissions. */
+export async function resolveActor(headers, auth, config, request = new Request("http://localhost", { headers })) {
+    let session;
+    try {
+        session = (await auth.api.getSession({
+            headers,
+        }));
+    }
+    catch {
+        return null;
+    }
+    if (!session)
+        return null;
+    const defaultOrgId = config.auth?.defaultOrganizationId ?? DEFAULT_ORG_ID;
+    let role = session.session.activeOrganizationRole;
+    let orgId = session.session.activeOrganizationId;
+    if (!role && auth.api.getFullOrganization) {
+        try {
+            const org = await auth.api.getFullOrganization({
+                query: { organizationId: orgId ?? defaultOrgId },
+                headers,
+            });
+            if (org?.members) {
+                const membership = org.members.find((m) => m.userId === session.user.id);
+                if (membership) {
+                    role = membership.role;
+                    orgId = orgId ?? defaultOrgId;
+                }
+            }
+        }
+        catch {
+            // fall through — treat as customer
+        }
+    }
+    if (!role && orgId && auth.api.getActiveMemberRole) {
+        try {
+            const roleResult = await auth.api.getActiveMemberRole({ headers });
+            role = roleResult?.role;
+        }
+        catch {
+            // fall through — treat as customer
+        }
+    }
+    if (!orgId && config.auth?.storeResolver) {
+        try {
+            const resolved = await config.auth.storeResolver(request);
+            if (resolved)
+                orgId = resolved;
+        }
+        catch {
+            // fall through — use defaultOrgId
+        }
+    }
+    const enrichedSession = {
+        ...session,
+        session: { ...session.session, activeOrganizationRole: role ?? null },
+    };
+    return {
+        type: "user",
+        userId: session.user.id,
+        email: session.user.email ?? null,
+        name: session.user.name ?? "User",
+        vendorId: session.user.vendorId ?? null,
+        organizationId: orgId ?? defaultOrgId,
+        role: role ?? "customer",
+        permissions: resolvePermissions(enrichedSession, config),
+    };
+}