@stratal/framework 0.0.1

package/dist/factory/factory.d.ts

@@ -0,0 +1,56 @@
+import { type Faker } from '@faker-js/faker';
+import type { DatabaseService } from '../database';
+/**
+ * Factory
+ *
+ * Abstract base class for creating test data.
+ * Integrates with Faker.js for data generation.
+ *
+ * @example Define a factory
+ * ```typescript
+ * import { Factory } from '@stratal/framework/factory'
+ * import type { User, UserCreateInput } from '@your-app/db'
+ *
+ * export class UserFactory extends Factory<User, UserCreateInput> {
+ *   protected model = 'user'
+ *
+ *   protected definition(): UserCreateInput {
+ *     return {
+ *       email: this.faker.internet.email(),
+ *       firstName: this.faker.person.firstName(),
+ *       lastName: this.faker.person.lastName(),
+ *       emailVerified: true,
+ *     }
+ *   }
+ *
+ *   admin() {
+ *     return this.state(attrs => ({ ...attrs, role: 'admin' }))
+ *   }
+ * }
+ * ```
+ *
+ * @example Usage
+ * ```typescript
+ * const user = await new UserFactory().create(ctx.db)
+ * const admin = await new UserFactory().admin().create(ctx.db)
+ * const users = await new UserFactory().count(10).createManyAndReturn(ctx.db)
+ * ```
+ */
+export declare abstract class Factory<TModel, TCreateInput> {
+    protected readonly faker: Faker;
+    protected abstract model: string;
+    protected abstract definition(): TCreateInput;
+    private states;
+    private _count;
+    state(modifier: (attrs: TCreateInput) => Partial<TCreateInput>): this;
+    count(n: number): this;
+    make(): TCreateInput;
+    makeMany(count?: number): TCreateInput[];
+    create(db: DatabaseService): Promise<TModel>;
+    createMany(db: DatabaseService, count?: number): Promise<{
+        count: number;
+    }>;
+    createManyAndReturn(db: DatabaseService, count?: number): Promise<TModel[]>;
+    protected clone(): this;
+}
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/factory/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,8BAAsB,OAAO,CAAC,MAAM,EAAE,YAAY;IAChD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAQ;IACvC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IAChC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,YAAY;IAE7C,OAAO,CAAC,MAAM,CAAyD;IACvE,OAAO,CAAC,MAAM,CAAI;IAElB,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAMrE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAMtB,IAAI,IAAI,YAAY;IAQpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAKlC,MAAM,CAAC,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAM5C,UAAU,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAM3E,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAMjF,SAAS,CAAC,KAAK,IAAI,IAAI;CAOxB"}

package/dist/factory/factory.js

@@ -0,0 +1,86 @@
+import { faker } from '@faker-js/faker';
+/**
+ * Factory
+ *
+ * Abstract base class for creating test data.
+ * Integrates with Faker.js for data generation.
+ *
+ * @example Define a factory
+ * ```typescript
+ * import { Factory } from '@stratal/framework/factory'
+ * import type { User, UserCreateInput } from '@your-app/db'
+ *
+ * export class UserFactory extends Factory<User, UserCreateInput> {
+ *   protected model = 'user'
+ *
+ *   protected definition(): UserCreateInput {
+ *     return {
+ *       email: this.faker.internet.email(),
+ *       firstName: this.faker.person.firstName(),
+ *       lastName: this.faker.person.lastName(),
+ *       emailVerified: true,
+ *     }
+ *   }
+ *
+ *   admin() {
+ *     return this.state(attrs => ({ ...attrs, role: 'admin' }))
+ *   }
+ * }
+ * ```
+ *
+ * @example Usage
+ * ```typescript
+ * const user = await new UserFactory().create(ctx.db)
+ * const admin = await new UserFactory().admin().create(ctx.db)
+ * const users = await new UserFactory().count(10).createManyAndReturn(ctx.db)
+ * ```
+ */
+export class Factory {
+    faker = faker;
+    states = [];
+    _count = 1;
+    state(modifier) {
+        const clone = this.clone();
+        clone.states.push(modifier);
+        return clone;
+    }
+    count(n) {
+        const clone = this.clone();
+        clone._count = n;
+        return clone;
+    }
+    make() {
+        let attrs = this.definition();
+        for (const modifier of this.states) {
+            attrs = { ...attrs, ...modifier(attrs) };
+        }
+        return attrs;
+    }
+    makeMany(count) {
+        const n = count ?? this._count;
+        return Array.from({ length: n }, () => this.make());
+    }
+    async create(db) {
+        const data = this.make();
+        const model = db[this.model];
+        return model.create({ data });
+    }
+    async createMany(db, count) {
+        const data = this.makeMany(count);
+        const model = db[this.model];
+        return model.createMany({ data });
+    }
+    async createManyAndReturn(db, count) {
+        const data = this.makeMany(count);
+        const model = db[this.model];
+        return model.createManyAndReturn({ data });
+    }
+    clone() {
+        const FactoryClass = this.constructor;
+        const clone = new FactoryClass();
+        clone.states = [...this.states];
+        clone._count = this._count;
+        return clone;
+    }
+}
+//# sourceMappingURL=factory.js.map

package/dist/factory/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/factory/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAc,MAAM,iBAAiB,CAAA;AAGnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,OAAgB,OAAO;IACR,KAAK,GAAU,KAAK,CAAA;IAI/B,MAAM,GAAuD,EAAE,CAAA;IAC/D,MAAM,GAAG,CAAC,CAAA;IAElB,KAAK,CAAC,QAAwD;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,CAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAC1B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI;QACF,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAC7B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,QAAQ,CAAC,KAAc;QACrB,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAA;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAmB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACxB,MAAM,KAAK,GAAI,EAA+F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1H,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAmB,EAAE,KAAc;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACjC,MAAM,KAAK,GAAI,EAAgH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3I,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,EAAmB,EAAE,KAAc;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACjC,MAAM,KAAK,GAAI,EAAgH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3I,OAAO,KAAK,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,CAAC;IAES,KAAK;QACb,MAAM,YAAY,GAAG,IAAI,CAAC,WAA6B,CAAA;QACvD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAA;QAChC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,OAAO,KAAK,CAAA;IACd,CAAC;CACF"}

package/dist/factory/index.d.ts

@@ -0,0 +1,3 @@
+export { Factory } from './factory';
+export { Sequence } from './sequence';
+//# sourceMappingURL=index.d.ts.map

package/dist/factory/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/factory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA"}

package/dist/factory/index.js

@@ -0,0 +1,3 @@
+export { Factory } from './factory';
+export { Sequence } from './sequence';
+//# sourceMappingURL=index.js.map

package/dist/factory/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/factory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA"}

package/dist/factory/sequence.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Sequence
+ *
+ * Auto-incrementing sequence generator for creating unique values.
+ *
+ * @example Basic usage
+ * ```typescript
+ * const emailSeq = new Sequence((n) => `user${n}@example.com`)
+ *
+ * emailSeq.next() // 'user1@example.com'
+ * emailSeq.next() // 'user2@example.com'
+ * emailSeq.reset()
+ * emailSeq.next() // 'user1@example.com'
+ * ```
+ *
+ * @example With factory
+ * ```typescript
+ * const orderSeq = new Sequence((n) => `ORD-${String(n).padStart(6, '0')}`)
+ *
+ * export class OrderFactory extends Factory<Order, OrderCreateInput> {
+ *   protected definition() {
+ *     return {
+ *       orderNumber: orderSeq.next(),
+ *       // ...
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export declare class Sequence<T = number> {
+    private readonly generator?;
+    private current;
+    constructor(generator?: ((n: number) => T) | undefined);
+    next(): T;
+    peek(): T;
+    reset(): void;
+}
+//# sourceMappingURL=sequence.d.ts.map

package/dist/factory/sequence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.d.ts","sourceRoot":"","sources":["../../src/factory/sequence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,QAAQ,CAAC,CAAC,GAAG,MAAM;IAGlB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAFvC,OAAO,CAAC,OAAO,CAAI;gBAEU,SAAS,CAAC,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC,aAAA;IAEzD,IAAI,IAAI,CAAC;IAQT,IAAI,IAAI,CAAC;IAQT,KAAK,IAAI,IAAI;CAGd"}

package/dist/factory/sequence.js

@@ -0,0 +1,54 @@
+/**
+ * Sequence
+ *
+ * Auto-incrementing sequence generator for creating unique values.
+ *
+ * @example Basic usage
+ * ```typescript
+ * const emailSeq = new Sequence((n) => `user${n}@example.com`)
+ *
+ * emailSeq.next() // 'user1@example.com'
+ * emailSeq.next() // 'user2@example.com'
+ * emailSeq.reset()
+ * emailSeq.next() // 'user1@example.com'
+ * ```
+ *
+ * @example With factory
+ * ```typescript
+ * const orderSeq = new Sequence((n) => `ORD-${String(n).padStart(6, '0')}`)
+ *
+ * export class OrderFactory extends Factory<Order, OrderCreateInput> {
+ *   protected definition() {
+ *     return {
+ *       orderNumber: orderSeq.next(),
+ *       // ...
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export class Sequence {
+    generator;
+    current = 0;
+    constructor(generator) {
+        this.generator = generator;
+    }
+    next() {
+        this.current++;
+        if (this.generator) {
+            return this.generator(this.current);
+        }
+        return this.current;
+    }
+    peek() {
+        const value = this.current + 1;
+        if (this.generator) {
+            return this.generator(value);
+        }
+        return value;
+    }
+    reset() {
+        this.current = 0;
+    }
+}
+//# sourceMappingURL=sequence.js.map

package/dist/factory/sequence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.js","sourceRoot":"","sources":["../../src/factory/sequence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,QAAQ;IAGU;IAFrB,OAAO,GAAG,CAAC,CAAA;IAEnB,YAA6B,SAA4B;QAA5B,cAAS,GAAT,SAAS,CAAmB;IAAG,CAAC;IAE7D,IAAI;QACF,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,OAAY,CAAA;IAC1B,CAAC;IAED,IAAI;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,KAAU,CAAA;IACnB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IAClB,CAAC;CACF"}

package/dist/guards/auth.guard.d.ts

@@ -0,0 +1,33 @@
+import type { AuthGuardOptions, GuardClass } from 'stratal/guards';
+/**
+ * AuthGuard Factory
+ *
+ * Creates a guard class that enforces authentication and optional authorization.
+ *
+ * **Authentication (no scopes):**
+ * - Checks if user is authenticated via AuthContext.isAuthenticated()
+ * - Throws UserNotAuthenticatedError (401) if not authenticated
+ *
+ * **Authorization (with scopes):**
+ * - First verifies authentication
+ * - Then checks permissions via CasbinService
+ * - Throws InsufficientPermissionsError (403) if unauthorized
+ *
+ * @param options - Configuration options
+ * @param options.scopes - Required permissions for authorization
+ * @returns Guard class for use with @UseGuards decorator
+ *
+ * @example Authentication only
+ * ```typescript
+ * @UseGuards(AuthGuard())
+ * export class ProfileController { }
+ * ```
+ *
+ * @example Authentication with permissions
+ * ```typescript
+ * @UseGuards(AuthGuard({ scopes: ['students:read'] }))
+ * export class StudentsController { }
+ * ```
+ */
+export declare function AuthGuard(options?: AuthGuardOptions): GuardClass;
+//# sourceMappingURL=auth.guard.d.ts.map

package/dist/guards/auth.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../src/guards/auth.guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAe,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAU/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAsDhE"}

package/dist/guards/auth.guard.js

@@ -0,0 +1,99 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { DI_TOKENS, Transient } from 'stratal/di';
+import { LOGGER_TOKENS } from 'stratal/logger';
+import { inject } from 'tsyringe';
+import { UserNotAuthenticatedError } from '../context/errors';
+import { InsufficientPermissionsError } from '../rbac/errors/insufficient-permissions.error';
+import { RBAC_TOKENS } from '../rbac/tokens';
+/**
+ * AuthGuard Factory
+ *
+ * Creates a guard class that enforces authentication and optional authorization.
+ *
+ * **Authentication (no scopes):**
+ * - Checks if user is authenticated via AuthContext.isAuthenticated()
+ * - Throws UserNotAuthenticatedError (401) if not authenticated
+ *
+ * **Authorization (with scopes):**
+ * - First verifies authentication
+ * - Then checks permissions via CasbinService
+ * - Throws InsufficientPermissionsError (403) if unauthorized
+ *
+ * @param options - Configuration options
+ * @param options.scopes - Required permissions for authorization
+ * @returns Guard class for use with @UseGuards decorator
+ *
+ * @example Authentication only
+ * ```typescript
+ * @UseGuards(AuthGuard())
+ * export class ProfileController { }
+ * ```
+ *
+ * @example Authentication with permissions
+ * ```typescript
+ * @UseGuards(AuthGuard({ scopes: ['students:read'] }))
+ * export class StudentsController { }
+ * ```
+ */
+export function AuthGuard(options) {
+    const scopes = options?.scopes;
+    let ConfiguredAuthGuard = class ConfiguredAuthGuard {
+        authContext;
+        logger;
+        casbinService;
+        constructor(authContext, logger, casbinService) {
+            this.authContext = authContext;
+            this.logger = logger;
+            this.casbinService = casbinService;
+        }
+        async canActivate(context) {
+            if (!this.authContext.isAuthenticated()) {
+                this.logger.debug('Auth guard: User not authenticated');
+                throw new UserNotAuthenticatedError();
+            }
+            if (!scopes || scopes.length === 0) {
+                this.logger.debug('Auth guard: Authentication passed (no scopes required)');
+                return true;
+            }
+            const userId = this.authContext.getUserId();
+            if (!userId) {
+                this.logger.debug('Auth guard: No user ID in context');
+                throw new InsufficientPermissionsError(scopes, undefined);
+            }
+            const httpMethod = context.c.req.method.toLowerCase();
+            if (this.casbinService) {
+                const hasPermission = await this.casbinService.hasAnyPermission(userId, scopes, httpMethod);
+                this.logger.debug('Auth guard: Authorization check', {
+                    userId,
+                    scopes,
+                    httpMethod,
+                    hasPermission,
+                });
+                if (!hasPermission) {
+                    throw new InsufficientPermissionsError(scopes, userId);
+                }
+            }
+            return true;
+        }
+    };
+    ConfiguredAuthGuard = __decorate([
+        Transient(),
+        __param(0, inject(DI_TOKENS.AuthContext)),
+        __param(1, inject(LOGGER_TOKENS.LoggerService)),
+        __param(2, inject(RBAC_TOKENS.CasbinService, { isOptional: true })),
+        __metadata("design:paramtypes", [Function, Function, Function])
+    ], ConfiguredAuthGuard);
+    return ConfiguredAuthGuard;
+}
+//# sourceMappingURL=auth.guard.js.map

package/dist/guards/auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../src/guards/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAsB,MAAM,gBAAgB,CAAA;AAElE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAEjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAA;AAE5F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,SAAS,CAAC,OAA0B;IAClD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAA;IAE9B,IACM,mBAAmB,GADzB,MACM,mBAAmB;QAE2B;QACM;QACoB;QAH5E,YACkD,WAAwB,EAClB,MAAqB,EACD,aAA6B;YAFvD,gBAAW,GAAX,WAAW,CAAa;YAClB,WAAM,GAAN,MAAM,CAAe;YACD,kBAAa,GAAb,aAAa,CAAgB;QACrG,CAAC;QAEL,KAAK,CAAC,WAAW,CAAC,OAAsB;YACtC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;gBACvD,MAAM,IAAI,yBAAyB,EAAE,CAAA;YACvC,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;gBAC3E,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAA;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBACtD,MAAM,IAAI,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;YAErD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAC7D,MAAM,EACN,MAAM,EACN,UAAU,CACX,CAAA;gBAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBACnD,MAAM;oBACN,MAAM;oBACN,UAAU;oBACV,aAAa;iBACd,CAAC,CAAA;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBACxD,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;IA/CK,mBAAmB;QADxB,SAAS,EAAE;QAGP,WAAA,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAC7B,WAAA,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;QACnC,WAAA,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;;OAJtD,mBAAmB,CA+CxB;IAED,OAAO,mBAAmB,CAAA;AAC5B,CAAC"}

package/dist/guards/index.d.ts

@@ -0,0 +1,3 @@
+export { UseGuards, getControllerGuards, getMethodGuards, GuardExecutionService, GUARD_METADATA_KEY, type CanActivate, type Guard, type GuardClass, type GuardMetadata, type AuthGuardOptions, } from 'stratal/guards';
+export { AuthGuard } from './auth.guard';
+//# sourceMappingURL=index.d.ts.map

package/dist/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA"}

package/dist/guards/index.js

@@ -0,0 +1,5 @@
+// Re-export guard utilities from stratal core
+export { UseGuards, getControllerGuards, getMethodGuards, GuardExecutionService, GUARD_METADATA_KEY, } from 'stratal/guards';
+// Export framework-specific guards
+export { AuthGuard } from './auth.guard';
+//# sourceMappingURL=index.js.map

package/dist/guards/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,kBAAkB,GAMnB,MAAM,gBAAgB,CAAA;AAEvB,mCAAmC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export type { DatabaseSchemaRegistry, DefaultDatabaseConnection, ConnectionName, DefaultConnectionName, InferConnectionSchema, InferDatabaseSchema } from './database/types';
+export type { CustomEventRegistry, EventName } from 'stratal/events';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,cAAc,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC5K,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/rbac/adapters/custom-zenstack-adapter.d.ts

@@ -0,0 +1,61 @@
+import type { Adapter, Model } from 'casbin';
+/**
+ * Minimal interface for the database client used by the adapter.
+ * The actual DatabaseService extends ZenStackClient which provides these methods
+ * when the schema includes a `casbinRule` model.
+ */
+export interface CasbinDbClient {
+    casbinRule: {
+        findMany(args?: {
+            where?: Record<string, unknown>;
+        }): Promise<unknown[]>;
+        create(args: {
+            data: CasbinRuleCreateInput;
+        }): Promise<unknown>;
+        createMany(args: {
+            data: CasbinRuleCreateInput[];
+        }): Promise<unknown>;
+        deleteMany(args: {
+            where: CasbinRuleCreateInput;
+        }): Promise<{
+            count: number;
+        }>;
+    };
+    $executeRawUnsafe(query: string, ...values: unknown[]): Promise<unknown>;
+}
+interface CasbinRuleCreateInput {
+    ptype: string;
+    v0?: string | null;
+    v1?: string | null;
+    v2?: string | null;
+    v3?: string | null;
+    v4?: string | null;
+    v5?: string | null;
+}
+/**
+ * Custom ZenStack adapter for Casbin that works with Cloudflare Workers.
+ *
+ * Based on the original casbin-prisma-adapter but modified to:
+ * - Work with ZenStack v3 ORM clients
+ * - Avoid bundling errors in Cloudflare Workers
+ * - Accept pre-connected ZenStack clients (request-scoped)
+ */
+export declare class CustomZenStackAdapter implements Adapter {
+    #private;
+    filtered: boolean;
+    isFiltered(): boolean;
+    enableFiltered(enabled: boolean): void;
+    constructor(db: CasbinDbClient);
+    loadPolicy(model: Model): Promise<void>;
+    loadFilteredPolicy(model: Model, filter: Record<string, string[][]>): Promise<void>;
+    savePolicy(model: Model): Promise<boolean>;
+    addPolicy(_sec: string, ptype: string, rule: string[]): Promise<void>;
+    addPolicies(_sec: string, ptype: string, rules: string[][]): Promise<void>;
+    removePolicy(_sec: string, ptype: string, rule: string[]): Promise<void>;
+    removePolicies(_sec: string, ptype: string, rules: string[][]): Promise<void>;
+    removeFilteredPolicy(_sec: string, ptype: string, fieldIndex: number, ...fieldValues: string[]): Promise<void>;
+    close(): Promise<void>;
+    static newAdapter(db: CasbinDbClient): CustomZenStackAdapter;
+}
+export {};
+//# sourceMappingURL=custom-zenstack-adapter.d.ts.map

package/dist/rbac/adapters/custom-zenstack-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-zenstack-adapter.d.ts","sourceRoot":"","sources":["../../../src/rbac/adapters/custom-zenstack-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAI5C;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE;QACV,QAAQ,CAAC,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QACxE,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,qBAAqB,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/D,UAAU,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACrE,UAAU,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,qBAAqB,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAC/E,CAAA;IACD,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACzE;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACnB;AAaD;;;;;;;GAOG;AACH,qBAAa,qBAAsB,YAAW,OAAO;;IAGnD,QAAQ,UAAQ;IAET,UAAU,IAAI,OAAO;IAIrB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;gBAIjC,EAAE,EAAE,cAAc;IAIxB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvC,kBAAkB,CACtB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IA0BV,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;IAyB1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrE,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC;IAWV,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC;IAWV,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,GAAG,WAAW,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC;IA0BV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,cAAc,GAAG,qBAAqB;CA0C7D"}