@voyant-travel/auth 0.124.2 → 0.125.0

package/dist/operator-node-runtime.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Better Auth Node runtime for Hono.
+ *
+ * agent-quality: file-size exception -- Auth handler keeps local and Voyant Cloud auth flows co-located until the route surface is split by auth mode.
+ *
+ * Mounts Better Auth at /auth/* for authentication operations.
+ * Same-origin — no CORS needed. Session cookies work naturally.
+ *
+ * Also provides /auth/status (user provisioning) and /auth/me (user info).
+ */
+import { type NodeDatabaseEnv } from "@voyant-travel/db/runtime";
+import { type SelectApikey } from "@voyant-travel/db/schema/iam";
+import type { Reporter, VoyantDb, VoyantRequestAuthContext } from "@voyant-travel/hono";
+import type { AccessCatalog } from "@voyant-travel/types/api-keys";
+import { Hono } from "hono";
+import { type CreateBetterAuthOptions } from "./server.js";
+type OperatorAuthMode = "local" | "voyant-cloud";
+export interface OperatorAuthNodeEnv extends NodeDatabaseEnv {
+    API_BASE_URL?: string;
+    APP_URL?: string;
+    AUTH_COOKIE_DOMAIN?: string;
+    BETTER_AUTH_SECRET: string;
+    CORS_ALLOWLIST?: string;
+    DASH_BASE_URL?: string;
+    EMAIL_FROM?: string;
+    SESSION_CLAIMS_SECRET: string;
+    VOYANT_ADMIN_AUTH_MODE?: string;
+    VOYANT_AUTH_LOG_SECRET_FALLBACKS?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_AUDIENCE?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_CLIENT_TOKEN?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_EXCHANGE_URL?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_JWKS_URL?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_REVALIDATE_URL?: string;
+    VOYANT_CLOUD_ADMIN_AUTH_START_URL?: string;
+    VOYANT_CLOUD_APP_ID?: string;
+    VOYANT_CLOUD_DEPLOYMENT_ID?: string;
+    VOYANT_CLOUD_ENVIRONMENT?: string;
+    VOYANT_OPERATOR_BROWSER_EVIDENCE?: string;
+}
+export interface OperatorCurrentUser {
+    id: string;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    locale: string;
+    timezone: string | null;
+    uiPrefs: unknown;
+    isSuperAdmin: boolean;
+    isSupportUser: boolean;
+    createdAt: string;
+    profilePictureUrl: string | null;
+}
+export type OperatorAuthBootstrapStatus = {
+    hasUsers: boolean;
+    authMode?: OperatorAuthMode;
+};
+type BetterAuthAdvancedOptions = NonNullable<CreateBetterAuthOptions["advanced"]>;
+/** Resolve Better Auth's standard cross-subdomain cookie policy for Node hosts. */
+export declare function buildBetterAuthCookieAdvancedOptions(env: Pick<OperatorAuthNodeEnv, "AUTH_COOKIE_DOMAIN">): Pick<BetterAuthAdvancedOptions, "crossSubDomainCookies" | "defaultCookieAttributes"> | undefined;
+export interface OperatorAuthEmailSender {
+    sendResetPassword: (input: {
+        user: {
+            email: string;
+            name: string;
+        };
+        url: string;
+    }) => Promise<void>;
+    sendVerificationOtp: (input: {
+        email: string;
+        otp: string;
+        type: string;
+    }) => Promise<void>;
+}
+export interface CreateOperatorAuthNodeRuntimeOptions<Env extends OperatorAuthNodeEnv> {
+    accessCatalog: AccessCatalog;
+    appName: string;
+    reporter: Reporter;
+    openDatabase?: (env: Env) => {
+        db: VoyantDb;
+        dispose: () => Promise<void>;
+    };
+    cookieAdvanced?: (env: Env) => Pick<BetterAuthAdvancedOptions, "crossSubDomainCookies" | "defaultCookieAttributes"> | undefined;
+    resolveEmailSender?: (env: Env) => OperatorAuthEmailSender | null;
+}
+export declare function createOperatorAuthNodeRuntime<Env extends OperatorAuthNodeEnv>(runtimeOptions: CreateOperatorAuthNodeRuntimeOptions<Env>): {
+    handler: Hono<{
+        Bindings: Env;
+        Variables: {
+            db: VoyantDb;
+        };
+    }, import("hono/types").BlankSchema, "/">;
+    getBootstrapStatusForRequest: (request: Request, env: Env) => Promise<OperatorAuthBootstrapStatus>;
+    getCurrentUserForRequest: (request: Request, env: Env) => Promise<OperatorCurrentUser | null>;
+    hasAuthPermission: (request: Request, env: Env) => Promise<boolean>;
+    resolveAuthRequest: (request: Request, env: Env) => Promise<VoyantRequestAuthContext | null>;
+    validateApiTokenAccess: (env: Env, db: VoyantDb, apiKey: SelectApikey) => Promise<boolean>;
+};
+export {};
+//# sourceMappingURL=operator-node-runtime.d.ts.map

package/dist/operator-node-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-node-runtime.d.ts","sourceRoot":"","sources":["../src/operator-node-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,eAAe,EAAoB,MAAM,2BAA2B,CAAA;AAClF,OAAO,EAGL,KAAK,YAAY,EAElB,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAOvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAGlE,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAA;AAOzC,OAAO,EACL,KAAK,uBAAuB,EAI7B,MAAM,aAAa,CAAA;AAMpB,KAAK,gBAAgB,GAAG,OAAO,GAAG,cAAc,CAAA;AAEhD,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,gCAAgC,CAAC,EAAE,MAAM,CAAA;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,OAAO,CAAA;IACrB,aAAa,EAAE,OAAO,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAC5B,CAAA;AAED,KAAK,yBAAyB,GAAG,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAA;AAEjF,mFAAmF;AACnF,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,GAElD,IAAI,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,yBAAyB,CAAC,GACpF,SAAS,CAQZ;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QACzB,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;QACrC,GAAG,EAAE,MAAM,CAAA;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,mBAAmB,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5F;AAED,MAAM,WAAW,oCAAoC,CAAC,GAAG,SAAS,mBAAmB;IACnF,aAAa,EAAE,aAAa,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,QAAQ,CAAA;IAClB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK;QAAE,EAAE,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAA;IAC3E,cAAc,CAAC,EAAE,CACf,GAAG,EAAE,GAAG,KAEN,IAAI,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,yBAAyB,CAAC,GACpF,SAAS,CAAA;IACb,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,uBAAuB,GAAG,IAAI,CAAA;CAClE;AAED,wBAAgB,6BAA6B,CAAC,GAAG,SAAS,mBAAmB,EAC3E,cAAc,EAAE,oCAAoC,CAAC,GAAG,CAAC;;kBAE1B,GAAG;mBAAa;YAAE,EAAE,EAAE,QAAQ,CAAA;SAAE;;4CAqcpD,OAAO,OACX,GAAG,KACP,OAAO,CAAC,2BAA2B,CAAC;wCA3D5B,OAAO,OACX,GAAG,KACP,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;iCAfI,OAAO,OAAO,GAAG,KAAG,OAAO,CAAC,OAAO,CAAC;kCA7DnE,OAAO,OACX,GAAG,KACP,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;kCAsJpC,GAAG,MACJ,QAAQ,UACJ,YAAY,KACnB,OAAO,CAAC,OAAO,CAAC;EAySpB"}