@stratal/framework 0.0.1

package/dist/auth/middleware/index.js

@@ -0,0 +1,3 @@
+export * from './auth-context.middleware';
+export * from './session-verification.middleware';
+//# sourceMappingURL=index.js.map

package/dist/auth/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAA;AACzC,cAAc,mCAAmC,CAAA"}

package/dist/auth/middleware/session-verification.middleware.d.ts

@@ -0,0 +1,18 @@
+import type { Middleware, RouterContext } from 'stratal/router';
+import type { AuthService } from '../services/auth.service';
+/**
+ * Session Verification Middleware
+ *
+ * Verifies user session via Better Auth and populates AuthContext with userId.
+ *
+ * **Responsibilities:**
+ * - Calls Better Auth's getSession() API
+ * - Populates AuthContext with userId if session is valid
+ * - Continues request chain regardless of session status
+ */
+export declare class SessionVerificationMiddleware implements Middleware {
+    private readonly authService;
+    constructor(authService: AuthService);
+    handle(ctx: RouterContext, next: () => Promise<void>): Promise<void>;
+}
+//# sourceMappingURL=session-verification.middleware.d.ts.map

package/dist/auth/middleware/session-verification.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-verification.middleware.d.ts","sourceRoot":"","sources":["../../../src/auth/middleware/session-verification.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAG/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE3D;;;;;;;;;GASG;AACH,qBACa,6BAA8B,YAAW,UAAU;IAG5D,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,WAAW;IAGrC,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAY3E"}

package/dist/auth/middleware/session-verification.middleware.js

@@ -0,0 +1,48 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject } from 'tsyringe';
+import { Transient, DI_TOKENS } from 'stratal/di';
+import { AUTH_SERVICE } from '../auth.tokens';
+/**
+ * Session Verification Middleware
+ *
+ * Verifies user session via Better Auth and populates AuthContext with userId.
+ *
+ * **Responsibilities:**
+ * - Calls Better Auth's getSession() API
+ * - Populates AuthContext with userId if session is valid
+ * - Continues request chain regardless of session status
+ */
+let SessionVerificationMiddleware = class SessionVerificationMiddleware {
+    authService;
+    constructor(authService) {
+        this.authService = authService;
+    }
+    async handle(ctx, next) {
+        const session = await this.authService.auth.api.getSession({
+            headers: ctx.c.req.raw.headers
+        });
+        if (session) {
+            const authContext = ctx.getContainer().resolve(DI_TOKENS.AuthContext);
+            authContext.setAuthContext({ userId: session.user.id });
+        }
+        await next();
+    }
+};
+SessionVerificationMiddleware = __decorate([
+    Transient(),
+    __param(0, inject(AUTH_SERVICE)),
+    __metadata("design:paramtypes", [Function])
+], SessionVerificationMiddleware);
+export { SessionVerificationMiddleware };
+//# sourceMappingURL=session-verification.middleware.js.map

package/dist/auth/middleware/session-verification.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-verification.middleware.js","sourceRoot":"","sources":["../../../src/auth/middleware/session-verification.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAG7C;;;;;;;;;GASG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGrB;IAFnB,YAEmB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,GAAkB,EAAE,IAAyB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACzD,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;SAC/B,CAAC,CAAA;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,CAAc,SAAS,CAAC,WAAW,CAAC,CAAA;YAClF,WAAW,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,IAAI,EAAE,CAAA;IACd,CAAC;CACF,CAAA;AAlBY,6BAA6B;IADzC,SAAS,EAAE;IAGP,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;;GAFZ,6BAA6B,CAkBzC"}

package/dist/auth/services/auth.service.d.ts

@@ -0,0 +1,32 @@
+import type { Auth, BetterAuthOptions } from 'better-auth';
+/**
+ * AuthService
+ *
+ * Base authentication service using Better Auth.
+ * Configured via AuthModule.withRootAsync() from the application layer.
+ *
+ * **Extensibility:**
+ * Extend this class in application layer to add custom methods.
+ *
+ * @example
+ * ```typescript
+ * @Transient(AUTH_SERVICE)
+ * export class AppAuthService extends AuthService<AuthOptions> {
+ *   async signInMagicLink(email: string) {
+ *     return wrapBetterAuth(async () => {
+ *       return this.auth.api.signInMagicLink({ body: { email }, headers: new Headers() })
+ *     })
+ *   }
+ * }
+ * ```
+ */
+export declare class AuthService<TOptions extends BetterAuthOptions = BetterAuthOptions> {
+    protected readonly options: TOptions;
+    private authInstance;
+    constructor(options: TOptions);
+    /**
+     * Get the Better Auth instance
+     */
+    get auth(): Auth<TOptions>;
+}
+//# sourceMappingURL=auth.service.d.ts.map

package/dist/auth/services/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../src/auth/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAO1D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBACa,WAAW,CAAC,QAAQ,SAAS,iBAAiB,GAAG,iBAAiB;IAIrD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ;IAH5D,OAAO,CAAC,YAAY,CAAgB;gBAGO,OAAO,EAAE,QAAQ;IAQ5D;;OAEG;IACH,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAEzB;CACF"}

package/dist/auth/services/auth.service.js

@@ -0,0 +1,62 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { betterAuth } from 'better-auth';
+import { inject } from 'tsyringe';
+import { Transient } from 'stratal/di';
+import { AUTH_OPTIONS, AUTH_SERVICE } from '../auth.tokens';
+import { getErrorHandlerConfig } from '../utils';
+/**
+ * AuthService
+ *
+ * Base authentication service using Better Auth.
+ * Configured via AuthModule.withRootAsync() from the application layer.
+ *
+ * **Extensibility:**
+ * Extend this class in application layer to add custom methods.
+ *
+ * @example
+ * ```typescript
+ * @Transient(AUTH_SERVICE)
+ * export class AppAuthService extends AuthService<AuthOptions> {
+ *   async signInMagicLink(email: string) {
+ *     return wrapBetterAuth(async () => {
+ *       return this.auth.api.signInMagicLink({ body: { email }, headers: new Headers() })
+ *     })
+ *   }
+ * }
+ * ```
+ */
+let AuthService = class AuthService {
+    options;
+    authInstance;
+    constructor(options) {
+        this.options = options;
+        this.authInstance = betterAuth({
+            ...this.options,
+            onAPIError: getErrorHandlerConfig()
+        });
+    }
+    /**
+     * Get the Better Auth instance
+     */
+    get auth() {
+        return this.authInstance;
+    }
+};
+AuthService = __decorate([
+    Transient(AUTH_SERVICE),
+    __param(0, inject(AUTH_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], AuthService);
+export { AuthService };
+//# sourceMappingURL=auth.service.js.map

package/dist/auth/services/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../src/auth/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IAIqB;IAHnC,YAAY,CAAgB;IAEpC,YAC2C,OAAiB;QAAjB,YAAO,GAAP,OAAO,CAAU;QAE1D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;YAC7B,GAAG,IAAI,CAAC,OAAO;YACf,UAAU,EAAE,qBAAqB,EAAE;SACpC,CAAmB,CAAA;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;CACF,CAAA;AAlBY,WAAW;IADvB,SAAS,CAAC,YAAY,CAAC;IAKnB,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;;GAJZ,WAAW,CAkBvB"}

package/dist/auth/services/index.d.ts

@@ -0,0 +1,2 @@
+export * from './auth.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA"}

package/dist/auth/services/index.js

@@ -0,0 +1,2 @@
+export * from './auth.service';
+//# sourceMappingURL=index.js.map

package/dist/auth/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA"}

package/dist/auth/utils/auth-helpers.d.ts

@@ -0,0 +1,11 @@
+import type { BetterAuthOptions } from 'better-auth';
+/**
+ * Get shared Better Auth error handler configuration.
+ * Use this in Better Auth config's onAPIError option.
+ */
+export declare function getErrorHandlerConfig(): BetterAuthOptions['onAPIError'];
+/**
+ * Wrap a Better Auth function in a try/catch block and map errors to ApplicationError.
+ */
+export declare const wrapBetterAuth: <T>(fn: () => Promise<T>) => Promise<T>;
+//# sourceMappingURL=auth-helpers.d.ts.map

package/dist/auth/utils/auth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helpers.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/auth-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGpD;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAUvE;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,GAAU,CAAC,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CASvE,CAAA"}

package/dist/auth/utils/auth-helpers.js

@@ -0,0 +1,31 @@
+import { isAPIError, mapBetterAuthError } from './better-auth-error-handler';
+/**
+ * Get shared Better Auth error handler configuration.
+ * Use this in Better Auth config's onAPIError option.
+ */
+export function getErrorHandlerConfig() {
+    return {
+        throw: false,
+        onError: (error) => {
+            if (isAPIError(error)) {
+                throw mapBetterAuthError(error);
+            }
+            throw error;
+        },
+    };
+}
+/**
+ * Wrap a Better Auth function in a try/catch block and map errors to ApplicationError.
+ */
+export const wrapBetterAuth = async (fn) => {
+    try {
+        return await fn();
+    }
+    catch (error) {
+        if (isAPIError(error)) {
+            throw mapBetterAuthError(error);
+        }
+        throw error;
+    }
+};
+//# sourceMappingURL=auth-helpers.js.map

package/dist/auth/utils/auth-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helpers.js","sourceRoot":"","sources":["../../../src/auth/utils/auth-helpers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAE5E;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAA;YACjC,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAK,EAAoB,EAAc,EAAE;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACjC,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/auth/utils/better-auth-error-handler.d.ts

@@ -0,0 +1,11 @@
+import { APIError } from 'better-auth/api';
+import type { ApplicationError } from 'stratal/errors';
+/**
+ * Maps Better Auth API error codes to ApplicationError instances.
+ */
+export declare function mapBetterAuthError(error: APIError): ApplicationError;
+/**
+ * Type guard to check if an error is a Better Auth APIError
+ */
+export declare function isAPIError(error: unknown): error is APIError;
+//# sourceMappingURL=better-auth-error-handler.d.ts.map

package/dist/auth/utils/better-auth-error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-error-handler.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/better-auth-error-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AA8BtD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,GAAG,gBAAgB,CAuEpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D"}

package/dist/auth/utils/better-auth-error-handler.js

@@ -0,0 +1,95 @@
+import { APIError } from 'better-auth/api';
+import { InternalError } from 'stratal/errors';
+import { AccountAlreadyExistsError, AccountNotFoundError, CannotUnlinkLastAccountError, CredentialAccountNotFoundError, EmailCannotBeUpdatedError, EmailNotVerifiedError, FailedToCreateSessionError, FailedToCreateUserError, FailedToGetSessionError, FailedToGetUserInfoError, FailedToUpdateUserError, IdTokenNotSupportedError, InvalidCredentialsError, InvalidEmailError, InvalidPasswordError, InvalidTokenError, PasswordTooLongError, PasswordTooShortError, ProviderNotFoundError, SessionExpiredError, SocialAccountLinkedError, TokenExpiredError, UserAlreadyHasPasswordError, UserEmailNotFoundError, UserNotFoundError, } from '../errors';
+/**
+ * Maps Better Auth API error codes to ApplicationError instances.
+ */
+export function mapBetterAuthError(error) {
+    const errorCode = error.body?.code;
+    if (error.status === 'FOUND') {
+        const headers = error.headers;
+        const hasInvalidToken = headers.get('location')?.includes('INVALID_TOKEN');
+        if (hasInvalidToken) {
+            return new InvalidTokenError();
+        }
+    }
+    if (!errorCode) {
+        return new InternalError({
+            originalError: `Better Auth error: ${error.message}`,
+            stack: error.stack,
+        });
+    }
+    // User errors
+    if (errorCode === 'USER_NOT_FOUND')
+        return new UserNotFoundError();
+    if (errorCode === 'USER_EMAIL_NOT_FOUND')
+        return new UserEmailNotFoundError();
+    // Credential errors
+    if (errorCode === 'INVALID_EMAIL_OR_PASSWORD')
+        return new InvalidCredentialsError();
+    if (errorCode === 'INVALID_PASSWORD')
+        return new InvalidPasswordError();
+    if (errorCode === 'INVALID_EMAIL')
+        return new InvalidEmailError();
+    // Session errors
+    if (errorCode === 'SESSION_EXPIRED')
+        return new SessionExpiredError();
+    if (errorCode === 'FAILED_TO_CREATE_SESSION')
+        return new FailedToCreateSessionError();
+    if (errorCode === 'FAILED_TO_GET_SESSION')
+        return new FailedToGetSessionError();
+    // Email verification
+    if (errorCode === 'EMAIL_NOT_VERIFIED')
+        return new EmailNotVerifiedError();
+    if (errorCode === 'EMAIL_CAN_NOT_BE_UPDATED')
+        return new EmailCannotBeUpdatedError();
+    // Password validation
+    if (errorCode === 'PASSWORD_TOO_SHORT')
+        return new PasswordTooShortError(8);
+    if (errorCode === 'PASSWORD_TOO_LONG')
+        return new PasswordTooLongError(128);
+    // Account errors
+    if (errorCode === 'USER_ALREADY_EXISTS' || errorCode === 'USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL') {
+        return new AccountAlreadyExistsError();
+    }
+    if (errorCode === 'ACCOUNT_NOT_FOUND')
+        return new AccountNotFoundError();
+    if (errorCode === 'CREDENTIAL_ACCOUNT_NOT_FOUND')
+        return new CredentialAccountNotFoundError();
+    if (errorCode === 'FAILED_TO_UNLINK_LAST_ACCOUNT')
+        return new CannotUnlinkLastAccountError();
+    // User creation/update errors
+    if (errorCode === 'FAILED_TO_CREATE_USER')
+        return new FailedToCreateUserError();
+    if (errorCode === 'FAILED_TO_UPDATE_USER')
+        return new FailedToUpdateUserError();
+    if (errorCode === 'FAILED_TO_GET_USER_INFO')
+        return new FailedToGetUserInfoError();
+    // Social account errors
+    if (errorCode === 'SOCIAL_ACCOUNT_ALREADY_LINKED')
+        return new SocialAccountLinkedError();
+    if (errorCode === 'PROVIDER_NOT_FOUND')
+        return new ProviderNotFoundError();
+    // Token errors
+    if (errorCode === 'ID_TOKEN_NOT_SUPPORTED')
+        return new IdTokenNotSupportedError();
+    if (errorCode === 'INVALID_TOKEN')
+        return new IdTokenNotSupportedError();
+    if (errorCode === 'TOKEN_EXPIRED')
+        return new TokenExpiredError();
+    // Password management
+    if (errorCode === 'USER_ALREADY_HAS_PASSWORD')
+        return new UserAlreadyHasPasswordError();
+    // Unknown error code
+    return new InternalError({
+        originalError: `Better Auth error [${errorCode}]: ${error.message}`,
+        stack: error.stack,
+    });
+}
+/**
+ * Type guard to check if an error is a Better Auth APIError
+ */
+export function isAPIError(error) {
+    return error instanceof APIError;
+}
+//# sourceMappingURL=better-auth-error-handler.js.map

package/dist/auth/utils/better-auth-error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-error-handler.js","sourceRoot":"","sources":["../../../src/auth/utils/better-auth-error-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAElB;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAe;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,IAAmE,CAAA;IAEjG,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkB,CAAA;QACxC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;QAE1E,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,IAAI,iBAAiB,EAAE,CAAA;QAChC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,aAAa,CAAC;YACvB,aAAa,EAAE,sBAAsB,KAAK,CAAC,OAAO,EAAE;YACpD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;IACJ,CAAC;IAED,cAAc;IACd,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAA;IAClE,IAAI,SAAS,KAAK,sBAAsB;QAAE,OAAO,IAAI,sBAAsB,EAAE,CAAA;IAE7E,oBAAoB;IACpB,IAAI,SAAS,KAAK,2BAA2B;QAAE,OAAO,IAAI,uBAAuB,EAAE,CAAA;IACnF,IAAI,SAAS,KAAK,kBAAkB;QAAE,OAAO,IAAI,oBAAoB,EAAE,CAAA;IACvE,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAA;IAEjE,iBAAiB;IACjB,IAAI,SAAS,KAAK,iBAAiB;QAAE,OAAO,IAAI,mBAAmB,EAAE,CAAA;IACrE,IAAI,SAAS,KAAK,0BAA0B;QAAE,OAAO,IAAI,0BAA0B,EAAE,CAAA;IACrF,IAAI,SAAS,KAAK,uBAAuB;QAAE,OAAO,IAAI,uBAAuB,EAAE,CAAA;IAE/E,qBAAqB;IACrB,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,IAAI,qBAAqB,EAAE,CAAA;IAC1E,IAAI,SAAS,KAAK,0BAA0B;QAAE,OAAO,IAAI,yBAAyB,EAAE,CAAA;IAEpF,sBAAsB;IACtB,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC3E,IAAI,SAAS,KAAK,mBAAmB;QAAE,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAA;IAE3E,iBAAiB;IACjB,IAAI,SAAS,KAAK,qBAAqB,IAAI,SAAS,KAAK,uCAAuC,EAAE,CAAC;QACjG,OAAO,IAAI,yBAAyB,EAAE,CAAA;IACxC,CAAC;IACD,IAAI,SAAS,KAAK,mBAAmB;QAAE,OAAO,IAAI,oBAAoB,EAAE,CAAA;IACxE,IAAI,SAAS,KAAK,8BAA8B;QAAE,OAAO,IAAI,8BAA8B,EAAE,CAAA;IAC7F,IAAI,SAAS,KAAK,+BAA+B;QAAE,OAAO,IAAI,4BAA4B,EAAE,CAAA;IAE5F,8BAA8B;IAC9B,IAAI,SAAS,KAAK,uBAAuB;QAAE,OAAO,IAAI,uBAAuB,EAAE,CAAA;IAC/E,IAAI,SAAS,KAAK,uBAAuB;QAAE,OAAO,IAAI,uBAAuB,EAAE,CAAA;IAC/E,IAAI,SAAS,KAAK,yBAAyB;QAAE,OAAO,IAAI,wBAAwB,EAAE,CAAA;IAElF,wBAAwB;IACxB,IAAI,SAAS,KAAK,+BAA+B;QAAE,OAAO,IAAI,wBAAwB,EAAE,CAAA;IACxF,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,IAAI,qBAAqB,EAAE,CAAA;IAE1E,eAAe;IACf,IAAI,SAAS,KAAK,wBAAwB;QAAE,OAAO,IAAI,wBAAwB,EAAE,CAAA;IACjF,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,IAAI,wBAAwB,EAAE,CAAA;IACxE,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAA;IAEjE,sBAAsB;IACtB,IAAI,SAAS,KAAK,2BAA2B;QAAE,OAAO,IAAI,2BAA2B,EAAE,CAAA;IAEvF,qBAAqB;IACrB,OAAO,IAAI,aAAa,CAAC;QACvB,aAAa,EAAE,sBAAsB,SAAS,MAAM,KAAK,CAAC,OAAO,EAAE;QACnE,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,QAAQ,CAAA;AAClC,CAAC"}

package/dist/auth/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './auth-helpers';
+export * from './better-auth-error-handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,6BAA6B,CAAA"}

package/dist/auth/utils/index.js

@@ -0,0 +1,3 @@
+export * from './auth-helpers';
+export * from './better-auth-error-handler';
+//# sourceMappingURL=index.js.map

package/dist/auth/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,6BAA6B,CAAA"}

package/dist/context/auth-context.d.ts

@@ -0,0 +1,35 @@
+export interface AuthInfo {
+    userId?: string;
+}
+export declare class AuthContext {
+    protected userId?: string;
+    /**
+     * Set authentication context.
+     * This should be called once per request with user information.
+     */
+    setAuthContext(info: AuthInfo): void;
+    /**
+     * Get user ID if available.
+     * Returns undefined if no user is authenticated.
+     */
+    getUserId(): string | undefined;
+    /**
+     * Get user ID or throw if not authenticated.
+     * Use this when authentication is required.
+     */
+    requireUserId(): string;
+    /**
+     * Get full authentication context or throw if not initialized.
+     */
+    getAuthContext(): AuthInfo;
+    /**
+     * Check if user is authenticated.
+     */
+    isAuthenticated(): boolean;
+    /**
+     * Clear authentication context.
+     * Useful for testing or cleanup.
+     */
+    clearAuthContext(): void;
+}
+//# sourceMappingURL=auth-context.d.ts.map

package/dist/context/auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../src/context/auth-context.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBACa,WAAW;IACtB,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IAEzB;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAIpC;;;OAGG;IACH,SAAS,IAAI,MAAM,GAAG,SAAS;IAI/B;;;OAGG;IACH,aAAa,IAAI,MAAM;IAQvB;;OAEG;IACH,cAAc,IAAI,QAAQ;IAS1B;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;;OAGG;IACH,gBAAgB,IAAI,IAAI;CAGzB"}

package/dist/context/auth-context.js

@@ -0,0 +1,65 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Transient, DI_TOKENS } from 'stratal/di';
+import { ContextNotInitializedError, UserNotAuthenticatedError } from './errors';
+let AuthContext = class AuthContext {
+    userId;
+    /**
+     * Set authentication context.
+     * This should be called once per request with user information.
+     */
+    setAuthContext(info) {
+        this.userId = info.userId;
+    }
+    /**
+     * Get user ID if available.
+     * Returns undefined if no user is authenticated.
+     */
+    getUserId() {
+        return this.userId;
+    }
+    /**
+     * Get user ID or throw if not authenticated.
+     * Use this when authentication is required.
+     */
+    requireUserId() {
+        const userId = this.getUserId();
+        if (!userId) {
+            throw new UserNotAuthenticatedError();
+        }
+        return userId;
+    }
+    /**
+     * Get full authentication context or throw if not initialized.
+     */
+    getAuthContext() {
+        if (!this.userId) {
+            throw new ContextNotInitializedError('Authentication');
+        }
+        return {
+            userId: this.userId
+        };
+    }
+    /**
+     * Check if user is authenticated.
+     */
+    isAuthenticated() {
+        return !!this.userId;
+    }
+    /**
+     * Clear authentication context.
+     * Useful for testing or cleanup.
+     */
+    clearAuthContext() {
+        this.userId = undefined;
+    }
+};
+AuthContext = __decorate([
+    Transient(DI_TOKENS.AuthContext)
+], AuthContext);
+export { AuthContext };
+//# sourceMappingURL=auth-context.js.map

package/dist/context/auth-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../src/context/auth-context.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAA;AAOV,IAAM,WAAW,GAAjB,MAAM,WAAW;IACZ,MAAM,CAAS;IAEzB;;;OAGG;IACH,cAAc,CAAC,IAAc;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,yBAAyB,EAAE,CAAA;QACvC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAA;QACxD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAA;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;IACzB,CAAC;CACF,CAAA;AAzDY,WAAW;IADvB,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC;GACpB,WAAW,CAyDvB"}

package/dist/context/errors/context-not-initialized.error.d.ts

@@ -0,0 +1,5 @@
+import { ApplicationError } from 'stratal/errors';
+export declare class ContextNotInitializedError extends ApplicationError {
+    constructor(contextType?: string);
+}
+//# sourceMappingURL=context-not-initialized.error.d.ts.map

package/dist/context/errors/context-not-initialized.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-not-initialized.error.d.ts","sourceRoot":"","sources":["../../../src/context/errors/context-not-initialized.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,gBAAgB,CAAA;AAE9D,qBAAa,0BAA2B,SAAQ,gBAAgB;gBAClD,WAAW,SAAY;CAOpC"}

package/dist/context/errors/context-not-initialized.error.js

@@ -0,0 +1,7 @@
+import { ApplicationError, ERROR_CODES } from 'stratal/errors';
+export class ContextNotInitializedError extends ApplicationError {
+    constructor(contextType = 'Context') {
+        super('errors.contextNotInitialized', ERROR_CODES.AUTH.CONTEXT_NOT_INITIALIZED, { contextType });
+    }
+}
+//# sourceMappingURL=context-not-initialized.error.js.map

package/dist/context/errors/context-not-initialized.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-not-initialized.error.js","sourceRoot":"","sources":["../../../src/context/errors/context-not-initialized.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE9D,MAAM,OAAO,0BAA2B,SAAQ,gBAAgB;IAC9D,YAAY,WAAW,GAAG,SAAS;QACjC,KAAK,CACH,8BAA8B,EAC9B,WAAW,CAAC,IAAI,CAAC,uBAAuB,EACxC,EAAE,WAAW,EAAE,CAChB,CAAA;IACH,CAAC;CACF"}

package/dist/context/errors/index.d.ts

@@ -0,0 +1,4 @@
+export { ContextNotInitializedError } from './context-not-initialized.error';
+export { UserNotAuthenticatedError } from './user-not-authenticated.error';
+export { UserNotAuthorizedError } from './user-not-authorized.error';
+//# sourceMappingURL=index.d.ts.map

package/dist/context/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/context/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA"}

package/dist/context/errors/index.js

@@ -0,0 +1,4 @@
+export { ContextNotInitializedError } from './context-not-initialized.error';
+export { UserNotAuthenticatedError } from './user-not-authenticated.error';
+export { UserNotAuthorizedError } from './user-not-authorized.error';
+//# sourceMappingURL=index.js.map

package/dist/context/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/context/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA"}

package/dist/context/errors/user-not-authenticated.error.d.ts

@@ -0,0 +1,5 @@
+import { ApplicationError } from 'stratal/errors';
+export declare class UserNotAuthenticatedError extends ApplicationError {
+    constructor();
+}
+//# sourceMappingURL=user-not-authenticated.error.d.ts.map

package/dist/context/errors/user-not-authenticated.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-not-authenticated.error.d.ts","sourceRoot":"","sources":["../../../src/context/errors/user-not-authenticated.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,gBAAgB,CAAA;AAE9D,qBAAa,yBAA0B,SAAQ,gBAAgB;;CAO9D"}

package/dist/context/errors/user-not-authenticated.error.js

@@ -0,0 +1,7 @@
+import { ApplicationError, ERROR_CODES } from 'stratal/errors';
+export class UserNotAuthenticatedError extends ApplicationError {
+    constructor() {
+        super('errors.userNotAuthenticated', ERROR_CODES.AUTH.USER_NOT_AUTHENTICATED);
+    }
+}
+//# sourceMappingURL=user-not-authenticated.error.js.map

package/dist/context/errors/user-not-authenticated.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-not-authenticated.error.js","sourceRoot":"","sources":["../../../src/context/errors/user-not-authenticated.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE9D,MAAM,OAAO,yBAA0B,SAAQ,gBAAgB;IAC7D;QACE,KAAK,CACH,6BAA6B,EAC7B,WAAW,CAAC,IAAI,CAAC,sBAAsB,CACxC,CAAA;IACH,CAAC;CACF"}

package/dist/context/errors/user-not-authorized.error.d.ts

@@ -0,0 +1,5 @@
+import { ApplicationError } from 'stratal/errors';
+export declare class UserNotAuthorizedError extends ApplicationError {
+    constructor();
+}
+//# sourceMappingURL=user-not-authorized.error.d.ts.map

package/dist/context/errors/user-not-authorized.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-not-authorized.error.d.ts","sourceRoot":"","sources":["../../../src/context/errors/user-not-authorized.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,gBAAgB,CAAA;AAE9D,qBAAa,sBAAuB,SAAQ,gBAAgB;;CAO3D"}

package/dist/context/errors/user-not-authorized.error.js

@@ -0,0 +1,7 @@
+import { ApplicationError, ERROR_CODES } from 'stratal/errors';
+export class UserNotAuthorizedError extends ApplicationError {
+    constructor() {
+        super('errors.unauthorized', ERROR_CODES.AUTHZ.FORBIDDEN);
+    }
+}
+//# sourceMappingURL=user-not-authorized.error.js.map

package/dist/context/errors/user-not-authorized.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-not-authorized.error.js","sourceRoot":"","sources":["../../../src/context/errors/user-not-authorized.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE9D,MAAM,OAAO,sBAAuB,SAAQ,gBAAgB;IAC1D;QACE,KAAK,CACH,qBAAqB,EACrB,WAAW,CAAC,KAAK,CAAC,SAAS,CAC5B,CAAA;IACH,CAAC;CACF"}

package/dist/context/index.d.ts

@@ -0,0 +1,3 @@
+export * from './auth-context';
+export * from './errors';
+//# sourceMappingURL=index.d.ts.map

package/dist/context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,UAAU,CAAA"}

package/dist/context/index.js

@@ -0,0 +1,3 @@
+export * from './auth-context';
+export * from './errors';
+//# sourceMappingURL=index.js.map

package/dist/context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,UAAU,CAAA"}