@protobase/server 0.3.4 → 0.4.1

package/dist/assistant/assistant-settings.js

@@ -13,6 +13,7 @@ const openRouterModel = "openrouter/auto";
 /** The roles that see the assistant: `/meta` names it, and the built-in one answers, only for a caller with one of them. */
 const assistantRoles = ["admin", "ai"];
 const seesAssistant = (roles) => assistantRoles.some((role) => roles.includes(role));
+/** `url` without a trailing slash; anything but an http(s) URL stops the server, naming `source`. */
 const checkedUrl = (url, source) => {
 	if (!URL.canParse(url)) throw new Error(`${source} is not a URL; use https://...`);
 	const { protocol } = new URL(url);
@@ -52,4 +53,4 @@ const assistantSettings = (option, env) => {
 	};
 };
 //#endregion
-export { assistantRoles, assistantSettings, assistantVariables, defaultChatsDirectory, openRouterModel, openRouterUrl, seesAssistant };
+export { assistantRoles, assistantSettings, assistantVariables, checkedUrl, defaultChatsDirectory, openRouterModel, openRouterUrl, seesAssistant };

package/dist/better-auth/admin-only.js

@@ -0,0 +1,13 @@
+import { parseRoles } from "./parse-roles.js";
+import { APIError, createAuthMiddleware, sessionMiddleware } from "better-auth/api";
+//#region src/better-auth/admin-only.ts
+/** Lets a request through only with the session of an admin; others get `403 ADMIN_ONLY` with `message`. */
+const adminOnly = (message) => createAuthMiddleware({ use: [sessionMiddleware] }, async (ctx) => {
+	if (!parseRoles(ctx.context.session.user.role).includes("admin")) throw new APIError("FORBIDDEN", {
+		code: "ADMIN_ONLY",
+		message
+	});
+	return { session: ctx.context.session };
+});
+//#endregion
+export { adminOnly };