@thebookingkit/server 0.1.1

package/.turbo/turbo-build.log

@@ -0,0 +1,6 @@
+
+
+> @thebookingkit/server@0.1.0 build
+> tsc
+
+⠙

package/.turbo/turbo-test.log

@@ -0,0 +1,20 @@
+
+> @thebookingkit/server@0.1.0 test
+> vitest run
+
+
+ RUN  v3.2.4 /Users/zain/Desktop/slotkit/packages/server
+
+ ✓ src/__tests__/multi-tenancy.test.ts (26 tests) 7ms
+ ✓ src/__tests__/webhooks.test.ts (35 tests) 10ms
+ ✓ src/__tests__/workflows.test.ts (37 tests) 14ms
+ ✓ src/__tests__/api.test.ts (40 tests) 15ms
+ ✓ src/__tests__/auth.test.ts (8 tests) 15ms
+ ✓ src/__tests__/serialization-retry.test.ts (6 tests) 106ms
+ ✓ src/__tests__/concurrent-booking.test.ts (5 tests) 167ms
+
+ Test Files  7 passed (7)
+      Tests  157 passed (157)
+   Start at  01:24:25
+   Duration  700ms (transform 315ms, setup 0ms, collect 1.10s, tests 335ms, environment 1ms, prepare 475ms)
+

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+# @thebookingkit/server
+
+## 0.1.1
+
+### Patch Changes
+
+- Initial release of The Booking Kit packages.
+- Updated dependencies
+  - @thebookingkit/core@0.1.1

package/dist/__tests__/api.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api.test.d.ts.map

package/dist/__tests__/api.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/api.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api.test.js

@@ -0,0 +1,280 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { createErrorResponse, createSuccessResponse, createPaginatedResponse, generateApiKey, hashApiKey, verifyApiKey, hasScope, isKeyExpired, checkRateLimit, encodeCursor, decodeCursor, validateSlotQueryParams, parseSortParam, API_ERROR_CODES, } from "../api.js";
+// Set the required env var for API key hashing in tests
+process.env.SLOTKIT_API_KEY_SECRET = "test-secret-for-unit-tests-only";
+// ---------------------------------------------------------------------------
+// Response Helpers
+// ---------------------------------------------------------------------------
+describe("createErrorResponse", () => {
+    it("creates a standard error envelope", () => {
+        const response = createErrorResponse("NOT_FOUND", "Booking not found");
+        expect(response).toEqual({
+            error: { code: "NOT_FOUND", message: "Booking not found" },
+        });
+    });
+    it("includes details when provided", () => {
+        const response = createErrorResponse("VALIDATION_ERROR", "Invalid input", { field: "email" });
+        expect(response.error.details).toEqual({ field: "email" });
+    });
+    it("omits details when not provided", () => {
+        const response = createErrorResponse("UNAUTHORIZED", "Invalid key");
+        expect(response.error.details).toBeUndefined();
+    });
+});
+describe("createSuccessResponse", () => {
+    it("wraps data in a success envelope", () => {
+        const response = createSuccessResponse({ id: "bk-1" });
+        expect(response).toEqual({ data: { id: "bk-1" } });
+    });
+    it("includes meta when provided", () => {
+        const response = createSuccessResponse([], {
+            nextCursor: "abc",
+            hasMore: true,
+        });
+        expect(response.meta?.nextCursor).toBe("abc");
+    });
+});
+describe("createPaginatedResponse", () => {
+    it("creates paginated response with cursor", () => {
+        const response = createPaginatedResponse(["a", "b"], "cursor123", 10);
+        expect(response.data).toEqual(["a", "b"]);
+        expect(response.meta.nextCursor).toBe("cursor123");
+        expect(response.meta.hasMore).toBe(true);
+        expect(response.meta.total).toBe(10);
+    });
+    it("marks hasMore false when nextCursor is null", () => {
+        const response = createPaginatedResponse(["a"], null);
+        expect(response.meta.hasMore).toBe(false);
+        expect(response.meta.nextCursor).toBeNull();
+    });
+});
+// ---------------------------------------------------------------------------
+// API Key Management
+// ---------------------------------------------------------------------------
+describe("generateApiKey", () => {
+    it("generates a key with the given prefix", () => {
+        const { key } = generateApiKey("sk_live_");
+        expect(key).toMatch(/^sk_live_[0-9a-f]{64}$/);
+    });
+    it("generates a display prefix", () => {
+        const { prefix } = generateApiKey("sk_live_");
+        expect(prefix).toContain("...");
+    });
+    it("generates a 64-char hex hash", () => {
+        const { hash } = generateApiKey();
+        expect(hash).toMatch(/^[0-9a-f]{64}$/);
+    });
+    it("generates unique keys each time", () => {
+        const { key: k1 } = generateApiKey();
+        const { key: k2 } = generateApiKey();
+        expect(k1).not.toBe(k2);
+    });
+});
+describe("hashApiKey", () => {
+    it("throws when SLOTKIT_API_KEY_SECRET is missing", () => {
+        const original = process.env.SLOTKIT_API_KEY_SECRET;
+        delete process.env.SLOTKIT_API_KEY_SECRET;
+        try {
+            expect(() => hashApiKey("sk_live_test")).toThrow("SLOTKIT_API_KEY_SECRET environment variable is required");
+        }
+        finally {
+            process.env.SLOTKIT_API_KEY_SECRET = original;
+        }
+    });
+    it("accepts an explicit secret parameter", () => {
+        const hash = hashApiKey("sk_live_test", "my-explicit-secret");
+        expect(hash).toMatch(/^[0-9a-f]{64}$/);
+    });
+});
+describe("verifyApiKey", () => {
+    it("returns true for correct key", () => {
+        const { key, hash } = generateApiKey();
+        expect(verifyApiKey(key, hash)).toBe(true);
+    });
+    it("returns false for tampered key", () => {
+        const { hash } = generateApiKey();
+        expect(verifyApiKey("sk_live_wrong", hash)).toBe(false);
+    });
+    it("returns false for wrong hash", () => {
+        const { key } = generateApiKey();
+        const { hash: otherHash } = generateApiKey();
+        expect(verifyApiKey(key, otherHash)).toBe(false);
+    });
+});
+describe("hasScope", () => {
+    it("returns true when scope is present", () => {
+        const scopes = ["read:bookings", "write:bookings"];
+        expect(hasScope(scopes, "read:bookings")).toBe(true);
+    });
+    it("returns false when scope is absent", () => {
+        const scopes = ["read:bookings"];
+        expect(hasScope(scopes, "write:bookings")).toBe(false);
+    });
+    it("admin scope grants all permissions", () => {
+        const scopes = ["admin"];
+        expect(hasScope(scopes, "read:bookings")).toBe(true);
+        expect(hasScope(scopes, "write:event-types")).toBe(true);
+        expect(hasScope(scopes, "write:webhooks")).toBe(true);
+    });
+});
+describe("isKeyExpired", () => {
+    it("returns false for no expiry", () => {
+        expect(isKeyExpired(undefined)).toBe(false);
+        expect(isKeyExpired(null)).toBe(false);
+    });
+    it("returns true for past expiry", () => {
+        expect(isKeyExpired(new Date(Date.now() - 1000))).toBe(true);
+    });
+    it("returns false for future expiry", () => {
+        expect(isKeyExpired(new Date(Date.now() + 86400000))).toBe(false);
+    });
+});
+// ---------------------------------------------------------------------------
+// Rate Limiting
+// ---------------------------------------------------------------------------
+describe("checkRateLimit", () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+        vi.setSystemTime(new Date("2026-03-15T14:00:00.000Z"));
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it("allows first request", () => {
+        const { result } = checkRateLimit(null, 120);
+        expect(result.allowed).toBe(true);
+        expect(result.remaining).toBe(119);
+        expect(result.limit).toBe(120);
+    });
+    it("tracks requests within a window", () => {
+        const { newState } = checkRateLimit(null, 120);
+        const { result } = checkRateLimit(newState, 120);
+        expect(result.allowed).toBe(true);
+        expect(result.remaining).toBe(118);
+    });
+    it("blocks requests when limit exceeded", () => {
+        let state = checkRateLimit(null, 2).newState;
+        state = checkRateLimit(state, 2).newState;
+        const { result } = checkRateLimit(state, 2);
+        expect(result.allowed).toBe(false);
+        expect(result.remaining).toBe(0);
+    });
+    it("resets counter in new window", () => {
+        let state = checkRateLimit(null, 2).newState;
+        state = checkRateLimit(state, 2).newState;
+        // Advance to next minute
+        vi.advanceTimersByTime(60 * 1000);
+        const { result } = checkRateLimit(state, 2);
+        expect(result.allowed).toBe(true);
+        expect(result.remaining).toBe(1);
+    });
+});
+// ---------------------------------------------------------------------------
+// Cursor Pagination
+// ---------------------------------------------------------------------------
+describe("encodeCursor / decodeCursor", () => {
+    it("round-trips cursor data", () => {
+        const data = { id: "bk-1", createdAt: "2026-03-15T14:00:00Z" };
+        const cursor = encodeCursor(data);
+        const decoded = decodeCursor(cursor);
+        expect(decoded).toEqual(data);
+    });
+    it("returns null for invalid cursor", () => {
+        expect(decodeCursor("not-valid-base64!!!")).toBeNull();
+    });
+    it("returns null for non-JSON cursor", () => {
+        const cursor = Buffer.from("not json").toString("base64url");
+        expect(decodeCursor(cursor)).toBeNull();
+    });
+});
+// ---------------------------------------------------------------------------
+// validateSlotQueryParams
+// ---------------------------------------------------------------------------
+describe("validateSlotQueryParams", () => {
+    const validParams = {
+        providerId: "prov-1",
+        start: "2026-03-15",
+        end: "2026-04-15",
+        timezone: "America/New_York",
+    };
+    it("accepts valid params", () => {
+        const result = validateSlotQueryParams(validParams);
+        expect(result.valid).toBe(true);
+        expect(result.errors).toHaveLength(0);
+    });
+    it("accepts teamId instead of providerId", () => {
+        const result = validateSlotQueryParams({
+            teamId: "team-1",
+            start: "2026-03-15",
+            end: "2026-04-15",
+        });
+        expect(result.valid).toBe(true);
+    });
+    it("rejects missing providerId and teamId", () => {
+        const result = validateSlotQueryParams({
+            start: "2026-03-15",
+            end: "2026-04-15",
+        });
+        expect(result.valid).toBe(false);
+        expect(result.errors[0].field).toBe("providerId");
+    });
+    it("rejects missing start date", () => {
+        const result = validateSlotQueryParams({
+            providerId: "p1",
+            end: "2026-04-15",
+        });
+        expect(result.valid).toBe(false);
+        expect(result.errors.some((e) => e.field === "start")).toBe(true);
+    });
+    it("rejects invalid start date", () => {
+        const result = validateSlotQueryParams({
+            providerId: "p1",
+            start: "not-a-date",
+            end: "2026-04-15",
+        });
+        expect(result.valid).toBe(false);
+    });
+    it("rejects end before start", () => {
+        const result = validateSlotQueryParams({
+            providerId: "p1",
+            start: "2026-04-15",
+            end: "2026-03-15",
+        });
+        expect(result.valid).toBe(false);
+        expect(result.errors.some((e) => e.message.includes("after start"))).toBe(true);
+    });
+});
+// ---------------------------------------------------------------------------
+// parseSortParam
+// ---------------------------------------------------------------------------
+describe("parseSortParam", () => {
+    const allowedFields = ["createdAt", "startsAt", "status"];
+    it("parses ascending sort", () => {
+        const result = parseSortParam("startsAt", allowedFields);
+        expect(result).toEqual({ field: "startsAt", direction: "asc" });
+    });
+    it("parses descending sort with leading minus", () => {
+        const result = parseSortParam("-createdAt", allowedFields);
+        expect(result).toEqual({ field: "createdAt", direction: "desc" });
+    });
+    it("returns null for invalid field", () => {
+        expect(parseSortParam("unknownField", allowedFields)).toBeNull();
+    });
+    it("returns null for undefined input", () => {
+        expect(parseSortParam(undefined, allowedFields)).toBeNull();
+    });
+});
+// ---------------------------------------------------------------------------
+// API_ERROR_CODES
+// ---------------------------------------------------------------------------
+describe("API_ERROR_CODES", () => {
+    it("exports all standard error codes", () => {
+        expect(API_ERROR_CODES.NOT_FOUND).toBe("NOT_FOUND");
+        expect(API_ERROR_CODES.UNAUTHORIZED).toBe("UNAUTHORIZED");
+        expect(API_ERROR_CODES.FORBIDDEN).toBe("FORBIDDEN");
+        expect(API_ERROR_CODES.VALIDATION_ERROR).toBe("VALIDATION_ERROR");
+        expect(API_ERROR_CODES.RATE_LIMITED).toBe("RATE_LIMITED");
+        expect(API_ERROR_CODES.CONFLICT).toBe("CONFLICT");
+    });
+});
+//# sourceMappingURL=api.test.js.map

package/dist/__tests__/api.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.test.js","sourceRoot":"","sources":["../../src/__tests__/api.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,uBAAuB,EACvB,cAAc,EACd,eAAe,GAEhB,MAAM,WAAW,CAAC;AAEnB,wDAAwD;AACxD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,iCAAiC,CAAC;AAEvE,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,QAAQ,GAAG,mBAAmB,CAClC,kBAAkB,EAClB,eAAe,EACf,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,EAAE;YACzC,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACpD,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAC9C,yDAAyD,CAC1D,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,QAAQ,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;QACvC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAkB,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAkB,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,IAAI,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7C,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,IAAI,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7C,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,yBAAyB;QACzB,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,WAAW,GAAG;QAClB,UAAU,EAAE,QAAQ;QACpB,KAAK,EAAE,YAAY;QACnB,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,kBAAkB;KAC7B,CAAC;IAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CACvE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE1D,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.test.d.ts.map

package/dist/__tests__/auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth.test.js

@@ -0,0 +1,78 @@
+import { describe, it, expect, vi } from "vitest";
+import { withAuth, assertProviderOwnership, assertCustomerAccess, ForbiddenError, } from "../index.js";
+function mockAdapter(user) {
+    return {
+        getCurrentUser: vi.fn().mockResolvedValue(user),
+        getSession: vi.fn().mockResolvedValue(user ? { user, expires: new Date() } : null),
+        verifyToken: vi.fn().mockResolvedValue(user),
+    };
+}
+function mockRequest(headers = {}) {
+    return new Request("http://localhost/api/test", {
+        headers: new Headers(headers),
+    });
+}
+describe("withAuth", () => {
+    it("injects user and calls handler on valid session", async () => {
+        const user = { id: "user1", email: "test@test.com" };
+        const adapter = mockAdapter(user);
+        const handler = vi.fn().mockResolvedValue(Response.json({ ok: true }));
+        const wrapped = withAuth(adapter, handler);
+        const response = await wrapped(mockRequest());
+        expect(response.status).toBe(200);
+        expect(handler).toHaveBeenCalledTimes(1);
+        const calledReq = handler.mock.calls[0][0];
+        expect(calledReq.user).toEqual(user);
+    });
+    it("returns 401 when no user is authenticated", async () => {
+        const adapter = mockAdapter(null);
+        // verifyToken also returns null
+        adapter.verifyToken = vi.fn().mockResolvedValue(null);
+        const handler = vi.fn();
+        const wrapped = withAuth(adapter, handler);
+        const response = await wrapped(mockRequest());
+        expect(response.status).toBe(401);
+        expect(handler).not.toHaveBeenCalled();
+    });
+    it("falls back to Bearer token when session returns null", async () => {
+        const user = { id: "user2", email: "api@test.com" };
+        const adapter = mockAdapter(null);
+        adapter.getCurrentUser = vi.fn().mockResolvedValue(null);
+        adapter.verifyToken = vi.fn().mockResolvedValue(user);
+        const handler = vi.fn().mockResolvedValue(Response.json({ ok: true }));
+        const wrapped = withAuth(adapter, handler);
+        const response = await wrapped(mockRequest({ Authorization: "Bearer test-token-123" }));
+        expect(response.status).toBe(200);
+        expect(adapter.verifyToken).toHaveBeenCalledWith("test-token-123");
+    });
+    it("returns 403 when role does not match", async () => {
+        const user = {
+            id: "user3",
+            email: "member@test.com",
+            role: "customer",
+        };
+        const adapter = mockAdapter(user);
+        const handler = vi.fn();
+        const wrapped = withAuth(adapter, handler, { requiredRole: "admin" });
+        const response = await wrapped(mockRequest());
+        expect(response.status).toBe(403);
+        expect(handler).not.toHaveBeenCalled();
+    });
+});
+describe("assertProviderOwnership", () => {
+    it("does not throw when user IDs match", () => {
+        expect(() => assertProviderOwnership("user1", "user1")).not.toThrow();
+    });
+    it("throws ForbiddenError when user IDs do not match", () => {
+        expect(() => assertProviderOwnership("user1", "user2")).toThrow(ForbiddenError);
+    });
+});
+describe("assertCustomerAccess", () => {
+    it("does not throw when emails match", () => {
+        expect(() => assertCustomerAccess("a@test.com", "a@test.com")).not.toThrow();
+    });
+    it("throws ForbiddenError when emails do not match", () => {
+        expect(() => assertCustomerAccess("a@test.com", "b@test.com")).toThrow(ForbiddenError);
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/dist/__tests__/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,QAAQ,EACR,uBAAuB,EACvB,oBAAoB,EAEpB,cAAc,GAGf,MAAM,aAAa,CAAC;AAErB,SAAS,WAAW,CAAC,IAAqB;IACxC,OAAO;QACL,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC/C,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAAkC,EAAE;IACvD,OAAO,IAAI,OAAO,CAAC,2BAA2B,EAAE;QAC9C,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAE9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,gCAAgC;QAChC,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAExB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAE9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,WAAW,CAAC,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CACxD,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAa;YACrB,EAAE,EAAE,OAAO;YACX,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,UAAU;SACjB,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAExB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAE9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAC7D,cAAc,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,CACjD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,CACjD,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/concurrent-booking.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=concurrent-booking.test.d.ts.map

package/dist/__tests__/concurrent-booking.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrent-booking.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/concurrent-booking.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/concurrent-booking.test.js

@@ -0,0 +1,111 @@
+import { describe, it, expect } from "vitest";
+import { withSerializableRetry, BookingConflictError, SerializationRetryExhaustedError, } from "../index.js";
+/**
+ * Concurrent booking simulation tests.
+ *
+ * These tests simulate the load test from E01-S04:
+ * "50 concurrent booking attempts for the same slot yields exactly 1 confirmed
+ *  booking, 0 unhandled serialization errors, and all other callers receive
+ *  a clear conflict response within 2 seconds."
+ *
+ * Since we can't connect to a real Postgres in unit tests, we simulate the
+ * database behavior with an in-memory "slot lock" that mimics the EXCLUDE
+ * constraint (SQLSTATE 23P01) and serialization failures (SQLSTATE 40001).
+ */
+/** Simulates a Postgres error with a SQLSTATE code */
+class PgError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "PgError";
+        this.code = code;
+    }
+}
+describe("Concurrent Booking Simulation (E01-S04 Load Test)", () => {
+    it("50 concurrent attempts for the same slot: exactly 1 success, rest get conflict", async () => {
+        // Simulate a database slot that can only be booked once.
+        // The first successful INSERT wins; subsequent attempts get exclusion_violation.
+        let slotBooked = false;
+        let serializationFailureCount = 0;
+        const maxSimulatedSerializationFailures = 5; // simulate some contention
+        const attemptBooking = async (attemptId) => {
+            return withSerializableRetry(async () => {
+                // Simulate random serialization failures under contention
+                if (!slotBooked &&
+                    serializationFailureCount < maxSimulatedSerializationFailures &&
+                    Math.random() < 0.3) {
+                    serializationFailureCount++;
+                    throw new PgError("serialization failure", "40001");
+                }
+                // Simulate the EXCLUDE constraint check
+                if (slotBooked) {
+                    throw new PgError("conflicting key value violates exclusion constraint", "23P01");
+                }
+                // Race: first writer wins
+                slotBooked = true;
+                return `booking-${attemptId}`;
+            }, { maxRetries: 3, baseDelayMs: 10 });
+        };
+        const CONCURRENCY = 50;
+        const results = await Promise.allSettled(Array.from({ length: CONCURRENCY }, (_, i) => attemptBooking(i)));
+        const successes = results.filter((r) => r.status === "fulfilled");
+        const failures = results.filter((r) => r.status === "rejected");
+        // Exactly 1 booking should succeed
+        expect(successes.length).toBe(1);
+        // All failures should be BookingConflictError (not unhandled errors)
+        for (const failure of failures) {
+            if (failure.status === "rejected") {
+                expect(failure.reason).toBeInstanceOf(BookingConflictError);
+            }
+        }
+        // Zero unhandled serialization errors
+        const serializationErrors = failures.filter((f) => f.status === "rejected" &&
+            f.reason instanceof SerializationRetryExhaustedError);
+        expect(serializationErrors.length).toBe(0);
+    });
+    it("completes all 50 attempts within 2 seconds", async () => {
+        let slotBooked = false;
+        const attemptBooking = async (attemptId) => {
+            return withSerializableRetry(async () => {
+                if (slotBooked) {
+                    throw new PgError("conflicting key value violates exclusion constraint", "23P01");
+                }
+                slotBooked = true;
+                return `booking-${attemptId}`;
+            }, { maxRetries: 3, baseDelayMs: 10 });
+        };
+        const start = Date.now();
+        await Promise.allSettled(Array.from({ length: 50 }, (_, i) => attemptBooking(i)));
+        const elapsed = Date.now() - start;
+        expect(elapsed).toBeLessThan(2000);
+    });
+    it("serialization failures are retried and can succeed on a different slot", async () => {
+        let attempt = 0;
+        const result = await withSerializableRetry(async () => {
+            attempt++;
+            if (attempt <= 2) {
+                throw new PgError("serialization failure", "40001");
+            }
+            return "booking-success";
+        }, { maxRetries: 3, baseDelayMs: 10 });
+        expect(result).toBe("booking-success");
+        expect(attempt).toBe(3);
+    });
+    it("retries are exhausted after maxRetries serialization failures", async () => {
+        const fn = () => withSerializableRetry(async () => {
+            throw new PgError("serialization failure", "40001");
+        }, { maxRetries: 3, baseDelayMs: 10 });
+        await expect(fn()).rejects.toThrow(SerializationRetryExhaustedError);
+    });
+    it("exclusion violation (slot taken) is never retried", async () => {
+        let callCount = 0;
+        const fn = () => withSerializableRetry(async () => {
+            callCount++;
+            throw new PgError("exclusion constraint", "23P01");
+        }, { maxRetries: 3, baseDelayMs: 10 });
+        await expect(fn()).rejects.toThrow(BookingConflictError);
+        // Should NOT have retried — only 1 call
+        expect(callCount).toBe(1);
+    });
+});
+//# sourceMappingURL=concurrent-booking.test.js.map

package/dist/__tests__/concurrent-booking.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrent-booking.test.js","sourceRoot":"","sources":["../../src/__tests__/concurrent-booking.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,gCAAgC,GACjC,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;GAWG;AAEH,sDAAsD;AACtD,MAAM,OAAQ,SAAQ,KAAK;IACzB,IAAI,CAAS;IACb,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,yDAAyD;QACzD,iFAAiF;QACjF,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,CAAC,2BAA2B;QAExE,MAAM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAmB,EAAE;YAClE,OAAO,qBAAqB,CAC1B,KAAK,IAAI,EAAE;gBACT,0DAA0D;gBAC1D,IACE,CAAC,UAAU;oBACX,yBAAyB,GAAG,iCAAiC;oBAC7D,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EACnB,CAAC;oBACD,yBAAyB,EAAE,CAAC;oBAC5B,MAAM,IAAI,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;gBAED,wCAAwC;gBACxC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,OAAO,CACf,qDAAqD,EACrD,OAAO,CACR,CAAC;gBACJ,CAAC;gBAED,0BAA0B;gBAC1B,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,WAAW,SAAS,EAAE,CAAC;YAChC,CAAC,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACnC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAEhE,mCAAmC;QACnC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjC,qEAAqE;QACrE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,UAAU;YACvB,CAAC,CAAC,MAAM,YAAY,gCAAgC,CACvD,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,MAAM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAmB,EAAE;YAClE,OAAO,qBAAqB,CAC1B,KAAK,IAAI,EAAE;gBACT,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,OAAO,CACf,qDAAqD,EACrD,OAAO,CACR,CAAC;gBACJ,CAAC;gBACD,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,WAAW,SAAS,EAAE,CAAC;YAChC,CAAC,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACnC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,OAAO,CAAC,UAAU,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CACxD,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,KAAK,IAAI,EAAE;YACT,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,iBAAiB,CAAC;QAC3B,CAAC,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACnC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,GAAG,GAAG,EAAE,CACd,qBAAqB,CACnB,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACnC,CAAC;QAEJ,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,MAAM,EAAE,GAAG,GAAG,EAAE,CACd,qBAAqB,CACnB,KAAK,IAAI,EAAE;YACT,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,EACD,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACnC,CAAC;QAEJ,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACzD,wCAAwC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/multi-tenancy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=multi-tenancy.test.d.ts.map

package/dist/__tests__/multi-tenancy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-tenancy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/multi-tenancy.test.ts"],"names":[],"mappings":""}