@tulip-systems/core 0.4.0 → 0.5.0

package/dist/modules/auth/handler/init.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.mts","names":[],"sources":["../../../../src/modules/auth/handler/init.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;cAca,gBAAA;KAER,8BAA8B;MAC7B,eAAe;SACZ;UACC;MACJ,kBAAkB;6BAEF;;AART,iBAYG,QAZa,CAAA,gBAYY,eAZZ,CAAA,CAAA,KAAA,EAYoC,aAZpC,CAYkD,OAZlD,CAAA,CAAA,eAY0D,IAZ1D,CAAA;EAExB,QAAA,EAAA;IAA8B,YAAA,EAAA,MAAA;IACd,QAAA,EAAA;MAAf,UAAA,EAAA,GAAA,GAAA,KAAA;IACG,CAAA;EACC,CAAA;EACc,QAAA,EAAA,CAAA,OAAA,EAMsD,YAAA,CAAA,iBANtD,EAAA,yBAAA,gCAAA;EAAlB,gBAAA,EAAA;IAEgB,OAAA,EAAA,IAAA;EAAI,CAAA;EAIV,IAAA,EAAA;IAAyB,WAAA,EAAA;MAAsC,OAAA,EAAA,IAAA;IAAd,CAAA;IAAa,gBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAAS,EAAA,EAAA,MAAA;cAAA,SAAA,MAAA;cAoFjE,SAAqB,MAAlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAb,UAAA,GAAa,kBAAkB"}

package/dist/modules/auth/handler/init.mjs

@@ -0,0 +1,77 @@
+import { url } from "../../../lib/utils/url.mjs";
+import { users } from "../db/schema.mjs";
+import forget_password_email_default from "../../../components/emails/forget-password-email.mjs";
+import { eq } from "drizzle-orm";
+import { passkey } from "@better-auth/passkey";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { betterAuth } from "better-auth/minimal";
+import { nextCookies } from "better-auth/next-js";
+import { admin, createAuthMiddleware, emailOTP } from "better-auth/plugins";
+
+//#region src/modules/auth/handler/init.ts
+const authCookiePrefix = "tulip";
+function initAuth(props) {
+	return betterAuth({
+		advanced: {
+			cookiePrefix: authCookiePrefix,
+			database: { generateId: () => false }
+		},
+		database: drizzleAdapter(props.db, {
+			provider: "pg",
+			usePlural: true
+		}),
+		emailAndPassword: { enabled: true },
+		user: {
+			changeEmail: { enabled: true },
+			additionalFields: {
+				firstName: {
+					type: "string",
+					required: true,
+					input: true
+				},
+				lastName: {
+					type: "string",
+					required: true,
+					input: true
+				}
+			}
+		},
+		hooks: { after: createAuthMiddleware(async (ctx) => {
+			if (!ctx.path.startsWith("/sign-up")) return;
+			const session = ctx.context.newSession;
+			if (!session) return;
+			if ((await props.db.select().from(users)).length === 1) await props.db.update(users).set({ role: "developer" }).where(eq(users.id, session.user.id));
+		}) },
+		plugins: [
+			nextCookies(),
+			passkey(),
+			admin({
+				roles: props.roles,
+				ac: props.ac,
+				adminRoles: ["admin", "developer"]
+			}),
+			emailOTP({ sendVerificationOTP: async ({ email, otp, type }) => {
+				/**
+				* Send a forget password mail
+				*/
+				if (type === "forget-password") {
+					const searchParams = new URLSearchParams();
+					searchParams.set("email", email);
+					searchParams.set("otp", otp);
+					const resetPasswordHref = url(`/auth/reset-password?${searchParams.toString()}`);
+					const result = await props.email.emails.send({
+						from: props.config.email.defaultFrom,
+						to: email,
+						subject: "Wachtwoord herstellen",
+						react: forget_password_email_default({ resetPasswordHref })
+					});
+					if (result.error) throw new Error(result.error.message);
+				}
+			} })
+		]
+	});
+}
+
+//#endregion
+export { authCookiePrefix, initAuth };
+//# sourceMappingURL=init.mjs.map

package/dist/modules/auth/handler/init.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.mjs","names":["ForgetPasswordEmail"],"sources":["../../../../src/modules/auth/handler/init.ts"],"sourcesContent":["import ForgetPasswordEmail from \"@/components/emails/forget-password-email\";\nimport { url } from \"@/lib/utils/url\";\nimport { TDatabaseSchema } from \"@/modules/config/entry\";\nimport { DatabaseClient, EmailClient } from \"@/modules/config/entry.server\";\nimport { TulipConfig } from \"@/modules/config/lib/config\";\nimport { passkey } from \"@better-auth/passkey\";\nimport { drizzleAdapter } from \"better-auth/adapters/drizzle\";\nimport { betterAuth } from \"better-auth/minimal\";\nimport { nextCookies } from \"better-auth/next-js\";\nimport { admin, createAuthMiddleware, emailOTP } from \"better-auth/plugins\";\nimport { eq } from \"drizzle-orm\";\nimport { users } from \"../entry\";\nimport { createAccessControl, Role } from \"../lib/permissions\";\n\nexport const authCookiePrefix = \"tulip\";\n\ntype InitAuthProps<TSchema extends TDatabaseSchema> = {\n  db: DatabaseClient<TSchema>;\n  email: EmailClient;\n  config: TulipConfig;\n  ac: ReturnType<typeof createAccessControl>;\n  roles: {\n    [key in string]?: Role;\n  };\n};\n\nexport function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<TSchema>) {\n  return betterAuth({\n    advanced: {\n      cookiePrefix: authCookiePrefix,\n      database: {\n        generateId: () => false,\n      },\n    },\n    database: drizzleAdapter(props.db, {\n      provider: \"pg\",\n      usePlural: true,\n      // schema: props.schema,\n    }),\n    emailAndPassword: {\n      enabled: true,\n    },\n    user: {\n      changeEmail: {\n        enabled: true,\n      },\n      additionalFields: {\n        firstName: {\n          type: \"string\",\n          required: true,\n          input: true,\n        },\n        lastName: {\n          type: \"string\",\n          required: true,\n          input: true,\n        },\n      },\n    },\n    hooks: {\n      after: createAuthMiddleware(async (ctx) => {\n        if (!ctx.path.startsWith(\"/sign-up\")) return;\n\n        const session = ctx.context.newSession;\n        if (!session) return;\n\n        const existingUsers = await props.db.select().from(users);\n\n        if (existingUsers.length === 1) {\n          await props.db\n            .update(users)\n            .set({ role: \"developer\" })\n            .where(eq(users.id, session.user.id));\n        }\n      }),\n    },\n    plugins: [\n      nextCookies(),\n      passkey(),\n      admin({\n        roles: props.roles,\n        ac: props.ac,\n        adminRoles: [\"admin\", \"developer\"],\n      }),\n      emailOTP({\n        sendVerificationOTP: async ({ email, otp, type }) => {\n          /**\n           * Send a forget password mail\n           */\n          if (type === \"forget-password\") {\n            const searchParams = new URLSearchParams();\n            searchParams.set(\"email\", email);\n            searchParams.set(\"otp\", otp);\n\n            const resetPasswordHref = url(`/auth/reset-password?${searchParams.toString()}`);\n\n            const result = await props.email.emails.send({\n              from: props.config.email.defaultFrom,\n              to: email,\n              subject: \"Wachtwoord herstellen\",\n              react: ForgetPasswordEmail({ resetPasswordHref }),\n            });\n            if (result.error) throw new Error(result.error.message);\n          }\n        },\n      }),\n    ],\n  });\n}\n\nexport type AuthClient = ReturnType<typeof initAuth>;\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,mBAAmB;AAYhC,SAAgB,SAA0C,OAA+B;AACvF,QAAO,WAAW;EAChB,UAAU;GACR,cAAc;GACd,UAAU,EACR,kBAAkB,OACnB;GACF;EACD,UAAU,eAAe,MAAM,IAAI;GACjC,UAAU;GACV,WAAW;GAEZ,CAAC;EACF,kBAAkB,EAChB,SAAS,MACV;EACD,MAAM;GACJ,aAAa,EACX,SAAS,MACV;GACD,kBAAkB;IAChB,WAAW;KACT,MAAM;KACN,UAAU;KACV,OAAO;KACR;IACD,UAAU;KACR,MAAM;KACN,UAAU;KACV,OAAO;KACR;IACF;GACF;EACD,OAAO,EACL,OAAO,qBAAqB,OAAO,QAAQ;AACzC,OAAI,CAAC,IAAI,KAAK,WAAW,WAAW,CAAE;GAEtC,MAAM,UAAU,IAAI,QAAQ;AAC5B,OAAI,CAAC,QAAS;AAId,QAFsB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,MAAM,EAEvC,WAAW,EAC3B,OAAM,MAAM,GACT,OAAO,MAAM,CACb,IAAI,EAAE,MAAM,aAAa,CAAC,CAC1B,MAAM,GAAG,MAAM,IAAI,QAAQ,KAAK,GAAG,CAAC;IAEzC,EACH;EACD,SAAS;GACP,aAAa;GACb,SAAS;GACT,MAAM;IACJ,OAAO,MAAM;IACb,IAAI,MAAM;IACV,YAAY,CAAC,SAAS,YAAY;IACnC,CAAC;GACF,SAAS,EACP,qBAAqB,OAAO,EAAE,OAAO,KAAK,WAAW;;;;AAInD,QAAI,SAAS,mBAAmB;KAC9B,MAAM,eAAe,IAAI,iBAAiB;AAC1C,kBAAa,IAAI,SAAS,MAAM;AAChC,kBAAa,IAAI,OAAO,IAAI;KAE5B,MAAM,oBAAoB,IAAI,wBAAwB,aAAa,UAAU,GAAG;KAEhF,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO,KAAK;MAC3C,MAAM,MAAM,OAAO,MAAM;MACzB,IAAI;MACJ,SAAS;MACT,OAAOA,8BAAoB,EAAE,mBAAmB,CAAC;MAClD,CAAC;AACF,SAAI,OAAO,MAAO,OAAM,IAAI,MAAM,OAAO,MAAM,QAAQ;;MAG5D,CAAC;GACH;EACF,CAAC"}

package/dist/modules/auth/handler/proxy.server.d.mts

@@ -0,0 +1,13 @@
+import { NextRequest, NextResponse } from "next/server";
+
+//#region src/modules/auth/handler/proxy.server.d.ts
+
+/**
+ * Create auth proxy
+ */
+declare function createAuthProxy(props: {
+  publicRoutes: string[];
+}): (req: NextRequest) => NextResponse<unknown>;
+//#endregion
+export { createAuthProxy };
+//# sourceMappingURL=proxy.server.d.mts.map

package/dist/modules/auth/handler/proxy.server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.server.d.mts","names":[],"sources":["../../../../src/modules/auth/handler/proxy.server.ts"],"sourcesContent":[],"mappings":";;;;;;AAQA;iBAAgB,eAAA;;UACD,gBAAW"}

package/dist/modules/auth/handler/proxy.server.mjs

@@ -0,0 +1,22 @@
+import { authCookiePrefix } from "./init.mjs";
+import { getSessionCookie } from "better-auth/cookies";
+import { NextResponse } from "next/server";
+import { URLPattern } from "urlpattern-polyfill";
+
+//#region src/modules/auth/handler/proxy.server.ts
+/**
+* Create auth proxy
+*/
+function createAuthProxy(props) {
+	return (req) => {
+		const pathname = req.nextUrl.pathname;
+		const isPublicRoute = props.publicRoutes.some((route) => new URLPattern({ pathname: route }).test({ pathname }));
+		const sessionCookie = getSessionCookie(req, { cookiePrefix: authCookiePrefix });
+		if (!isPublicRoute && !sessionCookie) return NextResponse.redirect(new URL("/auth/login", req.nextUrl));
+		return NextResponse.next();
+	};
+}
+
+//#endregion
+export { createAuthProxy };
+//# sourceMappingURL=proxy.server.mjs.map

package/dist/modules/auth/handler/proxy.server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.server.mjs","names":[],"sources":["../../../../src/modules/auth/handler/proxy.server.ts"],"sourcesContent":["import { getSessionCookie } from \"better-auth/cookies\";\nimport { NextRequest, NextResponse } from \"next/server\";\nimport { URLPattern } from \"urlpattern-polyfill\";\nimport { authCookiePrefix } from \"./init\";\n\n/**\n * Create auth proxy\n */\nexport function createAuthProxy(props: { publicRoutes: string[] }) {\n  return (req: NextRequest) => {\n    // 1. Check if the current route is protected or public\n    const pathname = req.nextUrl.pathname;\n\n    const isPublicRoute = props.publicRoutes.some((route) =>\n      new URLPattern({ pathname: route }).test({ pathname }),\n    );\n\n    // 2. Check if a session cookie is present\n    const sessionCookie = getSessionCookie(req, { cookiePrefix: authCookiePrefix });\n\n    // 3. Redirect to /auth/login if the user is not authenticated\n    if (!isPublicRoute && !sessionCookie) {\n      return NextResponse.redirect(new URL(\"/auth/login\", req.nextUrl));\n    }\n\n    return NextResponse.next();\n  };\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,gBAAgB,OAAmC;AACjE,SAAQ,QAAqB;EAE3B,MAAM,WAAW,IAAI,QAAQ;EAE7B,MAAM,gBAAgB,MAAM,aAAa,MAAM,UAC7C,IAAI,WAAW,EAAE,UAAU,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CACvD;EAGD,MAAM,gBAAgB,iBAAiB,KAAK,EAAE,cAAc,kBAAkB,CAAC;AAG/E,MAAI,CAAC,iBAAiB,CAAC,cACrB,QAAO,aAAa,SAAS,IAAI,IAAI,eAAe,IAAI,QAAQ,CAAC;AAGnE,SAAO,aAAa,MAAM"}

package/dist/modules/auth/handler/route.server.d.mts

@@ -0,0 +1,18 @@
+import { AuthClient } from "./init.mjs";
+import "server-cli-only";
+import { NextRequest } from "next/server";
+
+//#region src/modules/auth/handler/route.server.d.ts
+
+/**
+ * Handle the auth routes
+ */
+declare function handleAuthRoute(props: {
+  auth: AuthClient;
+}): {
+  GET: (request: NextRequest) => Promise<Response>;
+  POST: (request: NextRequest) => Promise<Response>;
+};
+//#endregion
+export { handleAuthRoute };
+//# sourceMappingURL=route.server.d.mts.map

package/dist/modules/auth/handler/route.server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.server.d.mts","names":[],"sources":["../../../../src/modules/auth/handler/route.server.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAQA;AAA+C,iBAA/B,eAAA,CAA+B,KAAA,EAAA;EAIjB,IAAA,EAJiB,UAIjB;CAAW,CAAA,EAAA;EAAA,GAAA,EAAA,CAAA,OAAA,EAAX,WAAW,EAAA,GAAA,OAAA,CAAA,QAAA,CAAA;EAQV,IAAA,EAAA,CAAA,OAAA,EAAA,WAAA,EAAA,GAAW,OAAX,CAAW,QAAX,CAAA;CAAW"}

package/dist/modules/auth/handler/route.server.mjs

@@ -0,0 +1,29 @@
+import "server-cli-only";
+import { toNextJsHandler } from "better-auth/next-js";
+
+//#region src/modules/auth/handler/route.server.ts
+/**
+* Handle the auth routes
+*/
+function handleAuthRoute(props) {
+	/**
+	* GET route handler
+	*/
+	async function GET(request) {
+		return toNextJsHandler(props.auth.handler).GET(request);
+	}
+	/**
+	* POST route handler
+	*/
+	async function POST(request) {
+		return toNextJsHandler(props.auth.handler).POST(request);
+	}
+	return {
+		GET,
+		POST
+	};
+}
+
+//#endregion
+export { handleAuthRoute };
+//# sourceMappingURL=route.server.mjs.map

package/dist/modules/auth/handler/route.server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.server.mjs","names":[],"sources":["../../../../src/modules/auth/handler/route.server.ts"],"sourcesContent":["import { toNextJsHandler } from \"better-auth/next-js\";\nimport { NextRequest } from \"next/server\";\nimport \"server-cli-only\";\nimport { AuthClient } from \"./init\";\n\n/**\n * Handle the auth routes\n */\nexport function handleAuthRoute(props: { auth: AuthClient }) {\n  /**\n   * GET route handler\n   */\n  async function GET(request: NextRequest) {\n    const routes = toNextJsHandler(props.auth.handler);\n    return routes.GET(request);\n  }\n\n  /**\n   * POST route handler\n   */\n  async function POST(request: NextRequest) {\n    const routes = toNextJsHandler(props.auth.handler);\n    return routes.POST(request);\n  }\n\n  return { GET, POST };\n}\n"],"mappings":";;;;;;;AAQA,SAAgB,gBAAgB,OAA6B;;;;CAI3D,eAAe,IAAI,SAAsB;AAEvC,SADe,gBAAgB,MAAM,KAAK,QAAQ,CACpC,IAAI,QAAQ;;;;;CAM5B,eAAe,KAAK,SAAsB;AAExC,SADe,gBAAgB,MAAM,KAAK,QAAQ,CACpC,KAAK,QAAQ;;AAG7B,QAAO;EAAE;EAAK;EAAM"}

package/dist/modules/auth/hooks/use-permission.d.mts

@@ -0,0 +1,26 @@
+import { Permission } from "../lib/permissions.mjs";
+import * as _tanstack_react_query4 from "@tanstack/react-query";
+
+//#region src/modules/auth/hooks/use-permission.d.ts
+/**
+ * UsePermission
+ */
+declare function usePermission(permission?: Permission): {
+  data: null;
+  errors: _tanstack_react_query4.UseSuspenseQueryResult<{
+    permission: Permission;
+    success: boolean;
+  }, Error>[];
+} | {
+  data: {
+    success: boolean;
+    values: {
+      permission: Permission;
+      success: boolean;
+    }[];
+  };
+  errors: null;
+};
+//#endregion
+export { usePermission };
+//# sourceMappingURL=use-permission.d.mts.map

package/dist/modules/auth/hooks/use-permission.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-permission.d.mts","names":[],"sources":["../../../../src/modules/auth/hooks/use-permission.ts"],"sourcesContent":[],"mappings":";;;;;;;AAUgB,iBAAA,aAAA,CAAa,UAAA,CAAA,EAAc,UAAd,CAAA,EAAA;EAAc,IAAA,EAAA,IAAA"}

package/dist/modules/auth/hooks/use-permission.mjs

@@ -0,0 +1,57 @@
+"use client";
+
+import { authClient } from "../handler/client.client.mjs";
+import { useSession } from "./use-session.mjs";
+import { useSuspenseQueries } from "@tanstack/react-query";
+
+//#region src/modules/auth/hooks/use-permission.ts
+/**
+* UsePermission
+*/
+function usePermission(permission) {
+	const sessionQuery = useSession();
+	return useSuspenseQueries({
+		queries: Object.entries(permission ?? {}).flatMap(([resource, permissions]) => permissions.map((permission$1) => ({ [resource]: [permission$1] }))).map((permission$1) => ({
+			queryKey: ["permission", permission$1],
+			queryFn: async () => {
+				const userId = sessionQuery.data?.user.id;
+				if (!userId) return {
+					permission: permission$1,
+					success: false
+				};
+				const { data, error } = await authClient.admin.hasPermission({
+					permission: permission$1,
+					userId
+				});
+				if (error) {
+					console.error(error);
+					throw error;
+				}
+				return {
+					permission: permission$1,
+					success: data.success
+				};
+			},
+			staleTime: 300 * 1e3
+		})),
+		combine: (results) => {
+			const errors = results.filter(({ error }) => error);
+			if (errors.length) return {
+				data: null,
+				errors
+			};
+			const values = results.map(({ data }) => data);
+			return {
+				data: {
+					success: results.every(({ data }) => data?.success),
+					values
+				},
+				errors: null
+			};
+		}
+	});
+}
+
+//#endregion
+export { usePermission };
+//# sourceMappingURL=use-permission.mjs.map

package/dist/modules/auth/hooks/use-permission.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-permission.mjs","names":["permission"],"sources":["../../../../src/modules/auth/hooks/use-permission.ts"],"sourcesContent":["\"use client\";\n\nimport { useSuspenseQueries } from \"@tanstack/react-query\";\nimport { authClient } from \"../handler/client.client\";\nimport { type Permission } from \"../lib/permissions\";\nimport { useSession } from \"./use-session\";\n\n/**\n * UsePermission\n */\nexport function usePermission(permission?: Permission) {\n  const sessionQuery = useSession();\n\n  const keys = Object.entries(permission ?? {}).flatMap(([resource, permissions]) =>\n    permissions.map((permission) => ({ [resource]: [permission] }) as Permission),\n  );\n\n  return useSuspenseQueries({\n    queries: keys.map((permission) => ({\n      queryKey: [\"permission\", permission],\n      queryFn: async () => {\n        const userId = sessionQuery.data?.user.id;\n        if (!userId) return { permission, success: false };\n\n        const { data, error } = await authClient.admin.hasPermission({ permission, userId });\n        if (error) {\n          console.error(error);\n          throw error;\n        }\n\n        return {\n          permission,\n          success: data.success,\n        };\n      },\n      staleTime: 5 * 60 * 1000, // 5 minutes\n    })),\n    combine: (results) => {\n      const errors = results.filter(({ error }) => error);\n      if (errors.length) return { data: null, errors };\n\n      const values = results.map(({ data }) => data);\n      const success = results.every(({ data }) => data?.success);\n\n      return { data: { success, values }, errors: null };\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;AAUA,SAAgB,cAAc,YAAyB;CACrD,MAAM,eAAe,YAAY;AAMjC,QAAO,mBAAmB;EACxB,SALW,OAAO,QAAQ,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,iBAChE,YAAY,KAAK,kBAAgB,GAAG,WAAW,CAACA,aAAW,EAAE,EAAgB,CAC9E,CAGe,KAAK,kBAAgB;GACjC,UAAU,CAAC,cAAcA,aAAW;GACpC,SAAS,YAAY;IACnB,MAAM,SAAS,aAAa,MAAM,KAAK;AACvC,QAAI,CAAC,OAAQ,QAAO;KAAE;KAAY,SAAS;KAAO;IAElD,MAAM,EAAE,MAAM,UAAU,MAAM,WAAW,MAAM,cAAc;KAAE;KAAY;KAAQ,CAAC;AACpF,QAAI,OAAO;AACT,aAAQ,MAAM,MAAM;AACpB,WAAM;;AAGR,WAAO;KACL;KACA,SAAS,KAAK;KACf;;GAEH,WAAW,MAAS;GACrB,EAAE;EACH,UAAU,YAAY;GACpB,MAAM,SAAS,QAAQ,QAAQ,EAAE,YAAY,MAAM;AACnD,OAAI,OAAO,OAAQ,QAAO;IAAE,MAAM;IAAM;IAAQ;GAEhD,MAAM,SAAS,QAAQ,KAAK,EAAE,WAAW,KAAK;AAG9C,UAAO;IAAE,MAAM;KAAE,SAFD,QAAQ,OAAO,EAAE,WAAW,MAAM,QAAQ;KAEhC;KAAQ;IAAE,QAAQ;IAAM;;EAErD,CAAC"}

package/dist/modules/auth/hooks/use-session.d.mts

@@ -0,0 +1,150 @@
+import * as _tanstack_react_query0 from "@tanstack/react-query";
+
+//#region src/modules/auth/hooks/use-session.d.ts
+declare const sessionQueryOptions: _tanstack_react_query0.OmitKeyof<_tanstack_react_query0.UseQueryOptions<{
+  user: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    email: string;
+    emailVerified: boolean;
+    name: string;
+    image?: string | null | undefined;
+    banned: boolean | null | undefined;
+    role?: string | null | undefined;
+    banReason?: string | null | undefined;
+    banExpires?: Date | null | undefined;
+    firstName: string;
+    lastName: string;
+  };
+  session: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    ipAddress?: string | null | undefined;
+    userAgent?: string | null | undefined;
+    impersonatedBy?: string | null | undefined;
+  };
+} | null, Error, {
+  user: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    email: string;
+    emailVerified: boolean;
+    name: string;
+    image?: string | null | undefined;
+    banned: boolean | null | undefined;
+    role?: string | null | undefined;
+    banReason?: string | null | undefined;
+    banExpires?: Date | null | undefined;
+    firstName: string;
+    lastName: string;
+  };
+  session: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    ipAddress?: string | null | undefined;
+    userAgent?: string | null | undefined;
+    impersonatedBy?: string | null | undefined;
+  };
+} | null, string[]>, "queryFn"> & {
+  queryFn?: _tanstack_react_query0.QueryFunction<{
+    user: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      email: string;
+      emailVerified: boolean;
+      name: string;
+      image?: string | null | undefined;
+      banned: boolean | null | undefined;
+      role?: string | null | undefined;
+      banReason?: string | null | undefined;
+      banExpires?: Date | null | undefined;
+      firstName: string;
+      lastName: string;
+    };
+    session: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      userId: string;
+      expiresAt: Date;
+      token: string;
+      ipAddress?: string | null | undefined;
+      userAgent?: string | null | undefined;
+      impersonatedBy?: string | null | undefined;
+    };
+  } | null, string[], never> | undefined;
+} & {
+  queryKey: string[] & {
+    [dataTagSymbol]: {
+      user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+        banned: boolean | null | undefined;
+        role?: string | null | undefined;
+        banReason?: string | null | undefined;
+        banExpires?: Date | null | undefined;
+        firstName: string;
+        lastName: string;
+      };
+      session: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined;
+        userAgent?: string | null | undefined;
+        impersonatedBy?: string | null | undefined;
+      };
+    } | null;
+    [dataTagErrorSymbol]: Error;
+  };
+};
+declare function useSession(): _tanstack_react_query0.UseSuspenseQueryResult<{
+  user: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    email: string;
+    emailVerified: boolean;
+    name: string;
+    image?: string | null | undefined;
+    banned: boolean | null | undefined;
+    role?: string | null | undefined;
+    banReason?: string | null | undefined;
+    banExpires?: Date | null | undefined;
+    firstName: string;
+    lastName: string;
+  };
+  session: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    ipAddress?: string | null | undefined;
+    userAgent?: string | null | undefined;
+    impersonatedBy?: string | null | undefined;
+  };
+} | null, Error>;
+//#endregion
+export { sessionQueryOptions, useSession };
+//# sourceMappingURL=use-session.d.mts.map

package/dist/modules/auth/hooks/use-session.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-session.d.mts","names":[],"sources":["../../../../src/modules/auth/hooks/use-session.ts"],"sourcesContent":[],"mappings":";;;cAKa,qBAAmB,sBAAA,CAAA,iCAAA;;;IAAnB,SAAA,MAAA;;;;;;;;;;;;;;;IAAmB,SAAA,MAAA;;;;;;;;;;;;;;;;;;IAehB,MAAA,EAAA,OAAU,GAAA,IAAA,GAAA,SAAA;;;;;;;;;IAAA,SAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAV,UAAA,CAAA,0BAAU"}

package/dist/modules/auth/hooks/use-session.mjs

@@ -0,0 +1,25 @@
+"use client";
+
+import { authClient } from "../handler/client.client.mjs";
+import { queryOptions, useSuspenseQuery } from "@tanstack/react-query";
+
+//#region src/modules/auth/hooks/use-session.ts
+const sessionQueryOptions = queryOptions({
+	queryKey: ["session"],
+	queryFn: async () => {
+		const session = await authClient.getSession();
+		if (session.error) {
+			console.error(session.error);
+			return null;
+		}
+		return session.data;
+	},
+	staleTime: 1e3 * 60 * 60
+});
+function useSession() {
+	return useSuspenseQuery(sessionQueryOptions);
+}
+
+//#endregion
+export { sessionQueryOptions, useSession };
+//# sourceMappingURL=use-session.mjs.map

package/dist/modules/auth/hooks/use-session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-session.mjs","names":[],"sources":["../../../../src/modules/auth/hooks/use-session.ts"],"sourcesContent":["\"use client\";\n\nimport { queryOptions, useSuspenseQuery } from \"@tanstack/react-query\";\nimport { authClient } from \"../entry.client\";\n\nexport const sessionQueryOptions = queryOptions({\n  queryKey: [\"session\"],\n  queryFn: async () => {\n    const session = await authClient.getSession();\n\n    if (session.error) {\n      console.error(session.error);\n      return null;\n    }\n\n    return session.data;\n  },\n  staleTime: 1000 * 60 * 60,\n});\n\nexport function useSession() {\n  const session = useSuspenseQuery(sessionQueryOptions);\n  return session;\n}\n"],"mappings":";;;;;;AAKA,MAAa,sBAAsB,aAAa;CAC9C,UAAU,CAAC,UAAU;CACrB,SAAS,YAAY;EACnB,MAAM,UAAU,MAAM,WAAW,YAAY;AAE7C,MAAI,QAAQ,OAAO;AACjB,WAAQ,MAAM,QAAQ,MAAM;AAC5B,UAAO;;AAGT,SAAO,QAAQ;;CAEjB,WAAW,MAAO,KAAK;CACxB,CAAC;AAEF,SAAgB,aAAa;AAE3B,QADgB,iBAAiB,oBAAoB"}

package/dist/modules/auth/lib/helpers.server.d.mts

@@ -0,0 +1,85 @@
+import { CreateUserSchema, UpdateUserSchema } from "./validators.mjs";
+import { TDatabaseSchema } from "../../config/db/types.mjs";
+import { TulipContext } from "../../config/lib/context.mjs";
+import "../../../config.mjs";
+import "server-cli-only";
+import * as better_auth_plugins0 from "better-auth/plugins";
+
+//#region src/modules/auth/lib/helpers.server.d.ts
+/**
+ * Get the session
+ */
+declare function getSession<TSchema extends TDatabaseSchema>({
+  auth
+}: Pick<TulipContext<TSchema>, "auth">): Promise<{
+  session: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    ipAddress?: string | null | undefined | undefined;
+    userAgent?: string | null | undefined | undefined;
+    impersonatedBy?: string | null | undefined;
+  };
+  user: {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    email: string;
+    emailVerified: boolean;
+    name: string;
+    image?: string | null | undefined | undefined;
+    firstName: string;
+    lastName: string;
+    banned: boolean | null | undefined;
+    role?: string | null | undefined;
+    banReason?: string | null | undefined;
+    banExpires?: Date | null | undefined;
+  };
+} | null>;
+/**
+ * Create a user
+ */
+declare function createUser<TSchema extends TDatabaseSchema>({
+  auth,
+  headers
+}: TulipContext<TSchema> & {
+  headers: Headers;
+}, {
+  body
+}: {
+  body: CreateUserSchema;
+}): Promise<{
+  user: better_auth_plugins0.UserWithRole;
+}>;
+/**
+ * Update a user
+ */
+declare function updateUser<TSchema extends TDatabaseSchema>({
+  db
+}: TulipContext<TSchema>, {
+  userId,
+  body
+}: {
+  userId: string;
+  body: Partial<UpdateUserSchema>;
+}): Promise<{
+  name: string;
+  firstName: string;
+  lastName: string;
+  email: string;
+  emailVerified: boolean;
+  image: string | null;
+  role: string | null;
+  banned: boolean | null;
+  banReason: string | null;
+  banExpires: Date | null;
+  id: string;
+  createdAt: Date;
+  updatedAt: Date;
+}>;
+//#endregion
+export { createUser, getSession, updateUser };
+//# sourceMappingURL=helpers.server.d.mts.map

package/dist/modules/auth/lib/helpers.server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.server.d.mts","names":[],"sources":["../../../../src/modules/auth/lib/helpers.server.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;iBAasB,2BAA2B;;GAE9C,KAAK,aAAa,oBAAiB;EAFhB,OAAA,EAAA;IAA2B,EAAA,EAAA,MAAA;IAC/C,SAAA,MAAA;IACmB,SAAA,MAAA;IAAb,MAAA,EAAA,MAAA;IAAL,SAAA,MAAA;;;;;;;IAAmC,EAAA,EAAA,MAAA;IAAA,SAAA,MAAA;IAOtB,SAAU,MAAA;IAAiB,KAAA,EAAA,MAAA;IACvC,aAAA,EAAA,OAAA;IAAM,IAAA,EAAA,MAAA;IAAwB,KAAA,CAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,GAAA,SAAA;IAAb,SAAA,EAAA,MAAA;IAAmC,QAAA,EAAA,MAAA;IACpD,MAAA,EAAA,OAAA,GAAA,IAAA,GAAA,SAAA;IAAgB,IAAA,CAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA;IAAgB,SAAA,CAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA;IAAE,UAAA,CAAA,MAAA,GAAA,IAAA,GAAA,SAAA;EAAA,CAAA;AAkBtC,CAAA,GAAsB,IAAA,CAAA;;;;AACZ,iBArBM,UAqBN,CAAA,gBArBiC,eAqBjC,CAAA,CAAA;EAAA,IAAA;EAAA;CAAA,EApBW,YAoBX,CApBwB,OAoBxB,CAAA,GAAA;EACN,OAAA,EArBoD,OAqBpD;CAAQ,EAAA;EAAA;CAAA,EAAA;EAAwC,IAAA,EApBhC,gBAoBgC;CAAR,CAAA,EApBN,OAoBM,CAAA;QApBR,oBAAA,CAAA;;;;;iBAkBd,2BAA2B;;GACvC,aAAa;;;;;QACqB,QAAQ;IAAmB"}

package/dist/modules/auth/lib/helpers.server.mjs

@@ -0,0 +1,42 @@
+import { users } from "../db/schema.mjs";
+import { ServerError } from "../../router/lib/error.server.mjs";
+import { eq } from "drizzle-orm";
+import "server-cli-only";
+import { headers } from "next/headers";
+
+//#region src/modules/auth/lib/helpers.server.ts
+/**
+* Get the session
+*/
+async function getSession({ auth }) {
+	return auth.api.getSession({ headers: await headers() });
+}
+/**
+* Create a user
+*/
+function createUser({ auth, headers: headers$1 }, { body }) {
+	const { firstName, lastName } = body;
+	return auth.api.createUser({
+		headers: headers$1,
+		body: {
+			...body,
+			name: `${firstName} ${lastName}`,
+			data: {
+				firstName,
+				lastName
+			}
+		}
+	});
+}
+/**
+* Update a user
+*/
+async function updateUser({ db }, { userId, body }) {
+	const [result] = await db.update(users).set(body).where(eq(users.id, userId)).returning();
+	if (!result) throw new ServerError("INTERNAL_SERVER_ERROR", { message: "Gebruiker kon niet worden aangemaakt" });
+	return result;
+}
+
+//#endregion
+export { createUser, getSession, updateUser };
+//# sourceMappingURL=helpers.server.mjs.map

package/dist/modules/auth/lib/helpers.server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.server.mjs","names":[],"sources":["../../../../src/modules/auth/lib/helpers.server.ts"],"sourcesContent":["import \"server-cli-only\";\n\nimport { type TDatabaseSchema } from \"@/modules/config/db/types\";\nimport { TulipContext } from \"@/modules/config/entry\";\nimport { ServerError } from \"@/modules/router/lib/error.server\";\nimport { eq } from \"drizzle-orm\";\nimport { headers } from \"next/headers\";\nimport { users } from \"../entry\";\nimport { CreateUserSchema, UpdateUserSchema } from \"./validators\";\n\n/**\n * Get the session\n */\nexport async function getSession<TSchema extends TDatabaseSchema>({\n  auth,\n}: Pick<TulipContext<TSchema>, \"auth\">) {\n  return auth.api.getSession({ headers: await headers() });\n}\n\n/**\n * Create a user\n */\nexport function createUser<TSchema extends TDatabaseSchema>(\n  { auth, headers }: TulipContext<TSchema> & { headers: Headers },\n  { body }: { body: CreateUserSchema },\n) {\n  const { firstName, lastName } = body;\n\n  return auth.api.createUser({\n    headers,\n    body: {\n      ...body,\n      name: `${firstName} ${lastName}`,\n      data: { firstName, lastName },\n    },\n  });\n}\n\n/**\n * Update a user\n */\n\nexport async function updateUser<TSchema extends TDatabaseSchema>(\n  { db }: TulipContext<TSchema>,\n  { userId, body }: { userId: string; body: Partial<UpdateUserSchema> },\n) {\n  const [result] = await db.update(users).set(body).where(eq(users.id, userId)).returning();\n  if (!result) {\n    throw new ServerError(\"INTERNAL_SERVER_ERROR\", {\n      message: \"Gebruiker kon niet worden aangemaakt\",\n    });\n  }\n\n  return result;\n}\n"],"mappings":";;;;;;;;;;AAaA,eAAsB,WAA4C,EAChE,QACsC;AACtC,QAAO,KAAK,IAAI,WAAW,EAAE,SAAS,MAAM,SAAS,EAAE,CAAC;;;;;AAM1D,SAAgB,WACd,EAAE,MAAM,sBACR,EAAE,QACF;CACA,MAAM,EAAE,WAAW,aAAa;AAEhC,QAAO,KAAK,IAAI,WAAW;EACzB;EACA,MAAM;GACJ,GAAG;GACH,MAAM,GAAG,UAAU,GAAG;GACtB,MAAM;IAAE;IAAW;IAAU;GAC9B;EACF,CAAC;;;;;AAOJ,eAAsB,WACpB,EAAE,MACF,EAAE,QAAQ,QACV;CACA,MAAM,CAAC,UAAU,MAAM,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,WAAW;AACzF,KAAI,CAAC,OACH,OAAM,IAAI,YAAY,yBAAyB,EAC7C,SAAS,wCACV,CAAC;AAGJ,QAAO"}

package/dist/modules/auth/lib/permissions.d.mts

@@ -0,0 +1,18 @@
+import { Role, createAccessControl } from "better-auth/plugins/access";
+import { adminAc, defaultStatements } from "better-auth/plugins/admin/access";
+
+//#region src/modules/auth/lib/permissions.d.ts
+type Permission = Record<string, string[]>;
+/**
+ * Create statements
+ */
+declare const createStatements: <TStatements extends Parameters<typeof createAccessControl>[0]>(statements: TStatements) => TStatements & {
+  readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+  readonly session: readonly ["list", "revoke", "delete"];
+};
+/**
+ * Exports
+ */
+//#endregion
+export { Permission, type Role, adminAc, createAccessControl, createStatements, defaultStatements };
+//# sourceMappingURL=permissions.d.mts.map

package/dist/modules/auth/lib/permissions.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.mts","names":[],"sources":["../../../../src/modules/auth/lib/permissions.ts"],"sourcesContent":[],"mappings":";;;;KAGY,UAAA,GAAa;;AAAzB;AAAkD;cAK5C,gBAA0D,EAAA,CAAA,oBAAlB,UAAkB,CAAA,OAAA,mBAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,UAAA,EAClD,WADkD,EAAA,GACvC,WADuC,GAAA;EAAlB,SAAA,IAAA,EAAA,SAAA,CAAA,QAAA,EAAA,MAAA,EAAA,UAAA,EAAA,KAAA,EAAA,aAAA,EAAA,QAAA,EAAA,cAAA,EAAA,KAAA,EAAA,QAAA,CAAA;EAChC,SAAA,OAAA,EAAA,SAAA,CAAA,MAAA,EAAA,QAAA,EAAA,QAAA,CAAA;CAAW"}

package/dist/modules/auth/lib/permissions.mjs

@@ -0,0 +1,15 @@
+import { createAccessControl } from "better-auth/plugins/access";
+import { adminAc, defaultStatements } from "better-auth/plugins/admin/access";
+
+//#region src/modules/auth/lib/permissions.ts
+/**
+* Create statements
+*/
+const createStatements = (statements) => ({
+	...statements,
+	...defaultStatements
+});
+
+//#endregion
+export { adminAc, createAccessControl, createStatements, defaultStatements };
+//# sourceMappingURL=permissions.mjs.map