bunderstack 0.17.0-beta.0 → 0.17.0-beta.3

package/dist/rate-limit.js

@@ -0,0 +1,49 @@
+const buckets = new Map();
+function resolveConfig(config) {
+    if (!config)
+        return null;
+    if (config === true)
+        return {};
+    return config;
+}
+function clientKey(req) {
+    const forwarded = req.headers.get('x-forwarded-for');
+    if (forwarded)
+        return forwarded.split(',')[0].trim();
+    return req.headers.get('x-real-ip') ?? 'local';
+}
+export function createRateLimiter(config) {
+    const resolved = resolveConfig(config);
+    if (!resolved) {
+        return async (_req) => null;
+    }
+    const windowMs = resolved.windowMs ?? 60_000;
+    const max = resolved.max ?? 100;
+    return async (req) => {
+        if (resolved.skip?.(req))
+            return null;
+        const key = `${clientKey(req)}:${new URL(req.url).pathname}`;
+        const now = Date.now();
+        let bucket = buckets.get(key);
+        if (!bucket || bucket.resetAt <= now) {
+            bucket = { count: 0, resetAt: now + windowMs };
+            buckets.set(key, bucket);
+        }
+        bucket.count += 1;
+        if (bucket.count > max) {
+            const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
+            return new Response(JSON.stringify({
+                error: 'Too many requests',
+                code: 'TOO_MANY_REQUESTS',
+            }), {
+                status: 429,
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Retry-After': String(retryAfter),
+                },
+            });
+        }
+        return null;
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEzC,SAAS,aAAa,CACpB,MAA6C;IAE7C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACpD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAA;IACrD,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA6C;IAE7C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,EAAE,IAAa,EAAE,EAAE,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAA;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAA;IAE/B,OAAO,KAAK,EAAE,GAAY,EAA4B,EAAE;QACtD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAErC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACrC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAA;YAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1B,CAAC;QAED,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;YAC3D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,mBAAmB;aAC1B,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;iBAClC;aACF,CACF,CAAA;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;AACH,CAAC"}

package/dist/realtime/facade.d.ts

@@ -0,0 +1,18 @@
+import { type InferSelectModel, type Table } from 'drizzle-orm';
+import type { RealtimeAction, RealtimePublisher } from './publisher.js';
+export type RealtimeTransport = 'disabled' | 'memory' | 'redis';
+export type SchemaTable<TSchema extends Record<string, unknown>> = Extract<TSchema[keyof TSchema], Table>;
+export interface RealtimeFacade<TSchema extends Record<string, unknown> = Record<string, unknown>> {
+    readonly enabled: boolean;
+    readonly transport: RealtimeTransport;
+    publish<TTable extends SchemaTable<TSchema>>(table: TTable, action: RealtimeAction, record: InferSelectModel<TTable>): Promise<void>;
+}
+/**
+ * One name for a table everywhere: events, subscriptions, and the CRUD router
+ * all use the schema key. Pass the schema so a key like `creditBalances` is not
+ * published as its SQL name `credit_balances` — clients subscribe with the key
+ * they call procedures with. Without a schema, the SQL name is the only name
+ * available and is used as-is.
+ */
+export declare function createRealtimeFacade<TSchema extends Record<string, unknown>>(publisher?: RealtimePublisher, transport?: RealtimeTransport, schema?: TSchema): RealtimeFacade<TSchema>;
+//# sourceMappingURL=facade.d.ts.map

package/dist/realtime/facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facade.d.ts","sourceRoot":"","sources":["../../src/realtime/facade.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,KAAK,EACX,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EAClB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE/D,MAAM,MAAM,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,OAAO,CACxE,OAAO,CAAC,MAAM,OAAO,CAAC,EACtB,KAAK,CACN,CAAA;AAED,MAAM,WAAW,cAAc,CAC7B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IAErC,OAAO,CAAC,MAAM,SAAS,WAAW,CAAC,OAAO,CAAC,EACzC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1E,SAAS,CAAC,EAAE,iBAAiB,EAC7B,SAAS,GAAE,iBAAqD,EAChE,MAAM,CAAC,EAAE,OAAO,GACf,cAAc,CAAC,OAAO,CAAC,CA8BzB"}

package/dist/realtime/facade.js

@@ -0,0 +1,36 @@
+import { getTableName, isTable, } from 'drizzle-orm';
+/**
+ * One name for a table everywhere: events, subscriptions, and the CRUD router
+ * all use the schema key. Pass the schema so a key like `creditBalances` is not
+ * published as its SQL name `credit_balances` — clients subscribe with the key
+ * they call procedures with. Without a schema, the SQL name is the only name
+ * available and is used as-is.
+ */
+export function createRealtimeFacade(publisher, transport = publisher ? 'memory' : 'disabled', schema) {
+    if (!publisher && transport !== 'disabled') {
+        throw new Error('[bunderstack] an enabled realtime transport requires a publisher');
+    }
+    if (publisher && transport === 'disabled') {
+        throw new Error('[bunderstack] a realtime publisher cannot use the disabled transport');
+    }
+    const keyByTableName = new Map();
+    for (const [key, value] of Object.entries(schema ?? {})) {
+        if (isTable(value))
+            keyByTableName.set(getTableName(value), key);
+    }
+    return {
+        enabled: publisher !== undefined,
+        transport,
+        async publish(table, action, record) {
+            if (!publisher)
+                return;
+            const tableName = getTableName(table);
+            await publisher.publish('change', {
+                table: keyByTableName.get(tableName) ?? tableName,
+                action,
+                record: record,
+            });
+        },
+    };
+}
+//# sourceMappingURL=facade.js.map

package/dist/realtime/facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facade.js","sourceRoot":"","sources":["../../src/realtime/facade.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,OAAO,GAGR,MAAM,aAAa,CAAA;AA2BpB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAA6B,EAC7B,YAA+B,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAChE,MAAgB;IAEhB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,IAAI,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAA;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS,KAAK,SAAS;QAChC,SAAS;QACT,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM;YACjC,IAAI,CAAC,SAAS;gBAAE,OAAM;YACtB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YACrC,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAChC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS;gBACjD,MAAM;gBACN,MAAM,EAAE,MAA4C;aACrD,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/realtime/filter.d.ts

@@ -0,0 +1,13 @@
+import type { AccessUser, ResolvedAccess } from '../access.js';
+import type { RealtimeChange } from './publisher.js';
+export interface FilterRealtimeChangesOptions {
+    subscriptions: readonly string[];
+    access: ResolvedAccess;
+    request: Request;
+    getSession: () => Promise<{
+        user: AccessUser | null;
+        activeOrganizationId: string | null;
+    }>;
+}
+export declare function filterRealtimeChanges(source: AsyncIterable<RealtimeChange>, options: FilterRealtimeChangesOptions): AsyncGenerator<RealtimeChange, void, void>;
+//# sourceMappingURL=filter.d.ts.map

package/dist/realtime/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/realtime/filter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACf,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAQjD,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,OAAO,CAAC;QACxB,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;QACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KACpC,CAAC,CAAA;CACH;AAED,wBAAuB,qBAAqB,CAC1C,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,EACrC,OAAO,EAAE,4BAA4B,GACpC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAqD5C"}

package/dist/realtime/filter.js

@@ -0,0 +1,48 @@
+import { getEventMeta, withEventMeta } from '@orpc/server';
+import { checkAccess, rowMatchesScope, tableEntryForName, } from '../access.js';
+export async function* filterRealtimeChanges(source, options) {
+    const subscriptions = new Set(options.subscriptions);
+    let sessionPromise;
+    const getSession = () => (sessionPromise ??= options.getSession());
+    for await (const change of source) {
+        // Events name tables by schema key; the SQL-name lookup stays as a fallback
+        // for publishers outside the CRUD path that only know the physical name.
+        const entry = options.access.get(change.table) ??
+            tableEntryForName(options.access, change.table);
+        if (!entry?.enabled)
+            continue;
+        const recordId = change.record.id;
+        if (!subscriptions.has(change.table) &&
+            (recordId == null ||
+                !subscriptions.has(`${change.table}/${String(recordId)}`))) {
+            continue;
+        }
+        if (entry.get === 'deny')
+            continue;
+        const needsSession = entry.get !== 'public' || entry.readScope !== undefined;
+        const session = needsSession
+            ? await getSession()
+            : { user: null, activeOrganizationId: null };
+        const context = {
+            request: options.request,
+            user: session.user,
+            row: change.record,
+            session: { activeOrganizationId: session.activeOrganizationId },
+        };
+        if (!(await checkAccess(entry.get, context, entry.ownerColumn)).allowed) {
+            continue;
+        }
+        if (entry.readScope &&
+            !rowMatchesScope(change.record, entry.readScope(context))) {
+            continue;
+        }
+        const projected = {
+            table: change.table,
+            action: change.action,
+            record: change.record,
+        };
+        const meta = getEventMeta(change);
+        yield meta ? withEventMeta(projected, meta) : projected;
+    }
+}
+//# sourceMappingURL=filter.js.map

package/dist/realtime/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../src/realtime/filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAQ1D,OAAO,EACL,WAAW,EACX,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAYlB,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,MAAqC,EACrC,OAAqC;IAErC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACpD,IAAI,cAES,CAAA;IACb,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,cAAc,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAElE,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAClC,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK,EAAE,OAAO;YAAE,SAAQ;QAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;QACjC,IACE,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,CAAC,QAAQ,IAAI,IAAI;gBACf,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAC5D,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;YAAE,SAAQ;QAElC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAA;QAC5E,MAAM,OAAO,GAAG,YAAY;YAC1B,CAAC,CAAC,MAAM,UAAU,EAAE;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;QAC9C,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,OAAO,EAAE,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;SAChE,CAAA;QACD,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACxE,SAAQ;QACV,CAAC;QACD,IACE,KAAK,CAAC,SAAS;YACf,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACzD,CAAC;YACD,SAAQ;QACV,CAAC;QAED,MAAM,SAAS,GAAmB;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzD,CAAC;AACH,CAAC"}

package/dist/realtime/heartbeat.d.ts

@@ -0,0 +1,14 @@
+export declare const REALTIME_HEARTBEAT_INTERVAL_MS = 5000;
+export type RealtimeHeartbeat = {
+    type: 'heartbeat';
+};
+/**
+ * Emits a transport-only event whenever the source has been idle for an
+ * interval. Heartbeats are deliberately not published, persisted, or assigned
+ * event IDs, so they do not affect replay and resume semantics.
+ */
+export declare function withRealtimeHeartbeat<T>(source: AsyncIterable<T>, options: {
+    intervalMs?: number;
+    signal?: AbortSignal;
+}): AsyncGenerator<T | RealtimeHeartbeat, void, void>;
+//# sourceMappingURL=heartbeat.d.ts.map

package/dist/realtime/heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/realtime/heartbeat.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,OAAQ,CAAA;AAEnD,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA;AAOrD;;;;GAIG;AACH,wBAAuB,qBAAqB,CAAC,CAAC,EAC5C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GACrD,cAAc,CAAC,CAAC,GAAG,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CA8DnD"}

package/dist/realtime/heartbeat.js

@@ -0,0 +1,64 @@
+export const REALTIME_HEARTBEAT_INTERVAL_MS = 5_000;
+/**
+ * Emits a transport-only event whenever the source has been idle for an
+ * interval. Heartbeats are deliberately not published, persisted, or assigned
+ * event IDs, so they do not affect replay and resume semantics.
+ */
+export async function* withRealtimeHeartbeat(source, options) {
+    const intervalMs = Math.max(1, options.intervalMs ?? REALTIME_HEARTBEAT_INTERVAL_MS);
+    const iterator = source[Symbol.asyncIterator]();
+    let state = { status: 'pending' };
+    let wake;
+    const getState = () => state;
+    const requestNext = () => {
+        state = { status: 'pending' };
+        void iterator.next().then((result) => {
+            state = { status: 'ready', result };
+            wake?.();
+        }, (error) => {
+            state = { status: 'error', error };
+            wake?.();
+        });
+    };
+    requestNext();
+    try {
+        while (!options.signal?.aborted) {
+            let current = getState();
+            if (current.status === 'pending') {
+                await new Promise((resolve) => {
+                    let settled = false;
+                    const finish = () => {
+                        if (settled)
+                            return;
+                        settled = true;
+                        clearTimeout(timer);
+                        options.signal?.removeEventListener('abort', finish);
+                        resolve();
+                    };
+                    const timer = setTimeout(finish, intervalMs);
+                    options.signal?.addEventListener('abort', finish, { once: true });
+                    wake = finish;
+                });
+                wake = undefined;
+                if (options.signal?.aborted)
+                    break;
+                current = getState();
+                if (current.status === 'pending') {
+                    yield { type: 'heartbeat' };
+                    continue;
+                }
+            }
+            if (current.status === 'error')
+                throw current.error;
+            if (current.result.done)
+                break;
+            yield current.result.value;
+            requestNext();
+        }
+    }
+    finally {
+        wake = undefined;
+        await iterator.return?.();
+    }
+}
+//# sourceMappingURL=heartbeat.js.map

package/dist/realtime/heartbeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.js","sourceRoot":"","sources":["../../src/realtime/heartbeat.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAA;AASnD;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,MAAwB,EACxB,OAAsD;IAEtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,OAAO,CAAC,UAAU,IAAI,8BAA8B,CACrD,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACjD,IAAI,IAA8B,CAAA;IAClC,MAAM,QAAQ,GAAG,GAAmB,EAAE,CAAC,KAAK,CAAA;IAE5C,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC7B,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CACvB,CAAC,MAAM,EAAE,EAAE;YACT,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YACnC,IAAI,EAAE,EAAE,CAAA;QACV,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;YAClC,IAAI,EAAE,EAAE,CAAA;QACV,CAAC,CACF,CAAA;IACH,CAAC,CAAA;IAED,WAAW,EAAE,CAAA;IACb,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAA;YACxB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,OAAO,GAAG,KAAK,CAAA;oBACnB,MAAM,MAAM,GAAG,GAAG,EAAE;wBAClB,IAAI,OAAO;4BAAE,OAAM;wBACnB,OAAO,GAAG,IAAI,CAAA;wBACd,YAAY,CAAC,KAAK,CAAC,CAAA;wBACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;wBACpD,OAAO,EAAE,CAAA;oBACX,CAAC,CAAA;oBACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;oBAC5C,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;oBACjE,IAAI,GAAG,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBACF,IAAI,GAAG,SAAS,CAAA;gBAEhB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAK;gBAClC,OAAO,GAAG,QAAQ,EAAE,CAAA;gBACpB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;oBAC3B,SAAQ;gBACV,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAA;YACnD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI;gBAAE,MAAK;YAE9B,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAA;YAC1B,WAAW,EAAE,CAAA;QACf,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,SAAS,CAAA;QAChB,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC"}

package/dist/realtime/publisher.d.ts

@@ -0,0 +1,21 @@
+import type { Publisher } from '@orpc/publisher';
+import type { RedisClient } from 'bun';
+export type RealtimeAction = 'create' | 'update' | 'delete';
+export interface RealtimeChange {
+    table: string;
+    action: RealtimeAction;
+    record: Record<string, unknown>;
+}
+export interface RealtimeEvents extends Record<string, object> {
+    change: RealtimeChange;
+}
+export type RealtimePublisher = Publisher<RealtimeEvents>;
+export interface RealtimePublisherOptions {
+    maxBufferedEvents?: number;
+    resumeSeconds?: number;
+}
+export declare function createMemoryRealtimePublisher(options?: RealtimePublisherOptions): RealtimePublisher;
+export declare function createRedisRealtimePublisher(redis: RedisClient, subscriber: RedisClient | Promise<RedisClient>, options?: RealtimePublisherOptions & {
+    prefix?: string;
+}): RealtimePublisher;
+//# sourceMappingURL=publisher.d.ts.map

package/dist/realtime/publisher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.d.ts","sourceRoot":"","sources":["../../src/realtime/publisher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAA;AAKtC,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,cAAe,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAC5D,MAAM,EAAE,cAAc,CAAA;CACvB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,CAAC,cAAc,CAAC,CAAA;AAEzD,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,GAAE,wBAA6B,GACrC,iBAAiB,CAKnB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,EAC9C,OAAO,GAAE,wBAAwB,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,iBAAiB,CAOnB"}

package/dist/realtime/publisher.js

@@ -0,0 +1,17 @@
+import { BunRedisPublisher } from '@orpc/bun';
+import { MemoryPublisher } from '@orpc/publisher/memory';
+export function createMemoryRealtimePublisher(options = {}) {
+    return new MemoryPublisher({
+        maxBufferedEvents: options.maxBufferedEvents,
+        resume: { enabled: true, seconds: options.resumeSeconds ?? 300 },
+    });
+}
+export function createRedisRealtimePublisher(redis, subscriber, options = {}) {
+    return new BunRedisPublisher(redis, {
+        subscriber,
+        prefix: options.prefix ?? 'bunderstack:',
+        maxBufferedEvents: options.maxBufferedEvents,
+        resume: { enabled: true, seconds: options.resumeSeconds ?? 300 },
+    });
+}
+//# sourceMappingURL=publisher.js.map

package/dist/realtime/publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.js","sourceRoot":"","sources":["../../src/realtime/publisher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAqBxD,MAAM,UAAU,6BAA6B,CAC3C,UAAoC,EAAE;IAEtC,OAAO,IAAI,eAAe,CAAiB;QACzC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,EAAE;KACjE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAkB,EAClB,UAA8C,EAC9C,UAA0D,EAAE;IAE5D,OAAO,IAAI,iBAAiB,CAAiB,KAAK,EAAE;QAClD,UAAU;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc;QACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,EAAE;KACjE,CAAC,CAAA;AACJ,CAAC"}

package/dist/schema-export-pg.d.ts

@@ -0,0 +1,2 @@
+export { bunderstackFilesPg as bunderstackFiles, bunderstackIdempotencyPg as bunderstackIdempotency, bunderstackJobsPg as bunderstackJobs, } from './internal-tables-pg.js';
+//# sourceMappingURL=schema-export-pg.d.ts.map

package/dist/schema-export-pg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-export-pg.d.ts","sourceRoot":"","sources":["../src/schema-export-pg.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,IAAI,gBAAgB,EACtC,wBAAwB,IAAI,sBAAsB,EAClD,iBAAiB,IAAI,eAAe,GACrC,MAAM,sBAAsB,CAAA"}

package/dist/schema-export-pg.js

@@ -0,0 +1,4 @@
+// src/schema-export-pg.ts — pg twins under the same names bunderstack/schema
+// uses, so `export * from 'bunderstack/schema/pg'` mirrors the sqlite setup.
+export { bunderstackFilesPg as bunderstackFiles, bunderstackIdempotencyPg as bunderstackIdempotency, bunderstackJobsPg as bunderstackJobs, } from './internal-tables-pg.js';
+//# sourceMappingURL=schema-export-pg.js.map

package/dist/schema-export-pg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-export-pg.js","sourceRoot":"","sources":["../src/schema-export-pg.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EACL,kBAAkB,IAAI,gBAAgB,EACtC,wBAAwB,IAAI,sBAAsB,EAClD,iBAAiB,IAAI,eAAe,GACrC,MAAM,sBAAsB,CAAA"}

package/dist/schema-export.d.ts

@@ -0,0 +1,2 @@
+export { bunderstackFiles, bunderstackIdempotency, bunderstackJobs, } from './internal-tables.js';
+//# sourceMappingURL=schema-export.d.ts.map

package/dist/schema-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-export.d.ts","sourceRoot":"","sources":["../src/schema-export.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAA"}

package/dist/schema-export.js

@@ -0,0 +1,2 @@
+export { bunderstackFiles, bunderstackIdempotency, bunderstackJobs, } from './internal-tables.js';
+//# sourceMappingURL=schema-export.js.map

package/dist/schema-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-export.js","sourceRoot":"","sources":["../src/schema-export.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAA"}

package/dist/scope.d.ts

@@ -0,0 +1,4 @@
+import { getTableColumns, type SQL } from 'drizzle-orm';
+import type { ScopeMap } from './access.js';
+export declare function buildScopeWhere(table: Parameters<typeof getTableColumns>[0], scope: ScopeMap): SQL | undefined;
+//# sourceMappingURL=scope.d.ts.map

package/dist/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,eAAe,EAAW,KAAK,GAAG,EAAE,MAAM,aAAa,CAAA;AAEzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,EAC5C,KAAK,EAAE,QAAQ,GACd,GAAG,GAAG,SAAS,CASjB"}

package/dist/scope.js

@@ -0,0 +1,13 @@
+import { and, eq, getTableColumns, inArray } from 'drizzle-orm';
+export function buildScopeWhere(table, scope) {
+    const columns = getTableColumns(table);
+    const conditions = [];
+    for (const [name, value] of Object.entries(scope)) {
+        const col = columns[name];
+        if (!col)
+            continue;
+        conditions.push(Array.isArray(value) ? inArray(col, value) : eq(col, value));
+    }
+    return conditions.length ? and(...conditions) : undefined;
+}
+//# sourceMappingURL=scope.js.map

package/dist/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAY,MAAM,aAAa,CAAA;AAIzE,MAAM,UAAU,eAAe,CAC7B,KAA4C,EAC5C,KAAe;IAEf,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,UAAU,GAAU,EAAE,CAAA;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3D,CAAC"}

package/dist/standard-schema.d.ts

@@ -0,0 +1,13 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+export type StandardSchema = StandardSchemaV1;
+export type InferStandardOutput<TSchema extends StandardSchemaV1> = StandardSchemaV1.InferOutput<TSchema>;
+export type StandardSchemaIssue = {
+    path: PropertyKey[];
+    message: string;
+};
+export declare class StandardSchemaValidationError extends Error {
+    readonly issues: StandardSchemaIssue[];
+    constructor(label: string, issues: readonly StandardSchemaV1.Issue[]);
+}
+export declare function validateStandardSchema<TSchema extends StandardSchemaV1>(schema: TSchema, value: unknown, label: string): StandardSchemaV1.InferOutput<TSchema>;
+//# sourceMappingURL=standard-schema.d.ts.map

package/dist/standard-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-schema.d.ts","sourceRoot":"","sources":["../src/standard-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAC7C,MAAM,MAAM,mBAAmB,CAAC,OAAO,SAAS,gBAAgB,IAC9D,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;AAEvC,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,WAAW,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAA;gBAE1B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,gBAAgB,CAAC,KAAK,EAAE;CAkBrE;AAWD,wBAAgB,sBAAsB,CAAC,OAAO,SAAS,gBAAgB,EACrE,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,CAWvC"}

package/dist/standard-schema.js

@@ -0,0 +1,34 @@
+export class StandardSchemaValidationError extends Error {
+    issues;
+    constructor(label, issues) {
+        const normalized = issues.map((issue) => ({
+            path: [...(issue.path ?? [])].map((segment) => typeof segment === 'object' ? segment.key : segment),
+            message: issue.message,
+        }));
+        super(normalized
+            .map((issue) => {
+            const path = issue.path.map(String).join('.');
+            return `${label}${path ? `.${path}` : ''}: ${issue.message}`;
+        })
+            .join('\n'));
+        this.name = 'StandardSchemaValidationError';
+        this.issues = normalized;
+    }
+}
+function isPromiseLike(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'then' in value &&
+        typeof value.then === 'function');
+}
+export function validateStandardSchema(schema, value, label) {
+    const result = schema['~standard'].validate(value);
+    if (isPromiseLike(result)) {
+        throw new Error(`[bunderstack] ${label} schema validation must be synchronous`);
+    }
+    if (result.issues) {
+        throw new StandardSchemaValidationError(label, result.issues);
+    }
+    return result.value;
+}
+//# sourceMappingURL=standard-schema.js.map

package/dist/standard-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-schema.js","sourceRoot":"","sources":["../src/standard-schema.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC7C,MAAM,CAAuB;IAEtC,YAAY,KAAa,EAAE,MAAyC;QAClE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CACpD;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC,CAAA;QACH,KAAK,CACH,UAAU;aACP,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7C,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAA;QAC9D,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CACd,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAA;QAC3C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CACjC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAe,EACf,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,wCAAwC,CAC/D,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAA;AACrB,CAAC"}

package/dist/storage/buckets.d.ts

@@ -0,0 +1,80 @@
+import type { OperationRule, ScopeResolver } from '../access.js';
+export type BucketBackendInput = {
+    s3: {
+        bucket: string;
+        region?: string;
+        endpoint?: string;
+        publicUrl?: string;
+    };
+} | {
+    local: string;
+};
+export type BucketConfigInput = {
+    visibility?: 'public' | 'private';
+    access?: {
+        create?: OperationRule;
+        get?: OperationRule;
+        delete?: OperationRule;
+    };
+    upload?: {
+        maxSize?: string | number;
+        accept?: string[];
+    };
+    transforms?: boolean;
+    scope?: {
+        read?: ScopeResolver;
+        write?: ScopeResolver;
+    };
+    quota?: {
+        perUser?: string | number;
+        perScope?: string | number;
+    };
+} & Partial<BucketBackendInput>;
+export type StorageConfigInput = {
+    s3?: true | {
+        endpoint?: string;
+    };
+    local?: true | string;
+    defaultBucket?: string;
+    buckets?: Record<string, BucketConfigInput>;
+};
+export type ResolvedBackend = {
+    type: 'local';
+    path: string;
+} | {
+    type: 's3';
+    bucket: string;
+    region: string;
+    endpoint?: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    publicUrl?: string;
+};
+export type ResolvedBucket = {
+    name: string;
+    backend: ResolvedBackend;
+    visibility: 'public' | 'private';
+    access: {
+        create: OperationRule;
+        get: OperationRule;
+        delete: OperationRule;
+    };
+    upload?: {
+        maxSizeBytes?: number;
+        accept?: string[];
+    };
+    transforms: boolean;
+    readScope?: ScopeResolver;
+    writeScope?: ScopeResolver;
+    quota?: {
+        perUserBytes?: number;
+        perScopeBytes?: number;
+    };
+};
+export type ResolvedStorageBuckets = {
+    defaultBucket: string;
+    buckets: Map<string, ResolvedBucket>;
+};
+export declare function parseSize(value: string | number): number;
+export declare function resolveBuckets(input: StorageConfigInput | undefined, env?: Record<string, string | undefined>): ResolvedStorageBuckets;
+//# sourceMappingURL=buckets.d.ts.map

package/dist/storage/buckets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../src/storage/buckets.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAM7D,MAAM,MAAM,kBAAkB,GAC1B;IACE,EAAE,EAAE;QACF,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;CACF,GACD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAErB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACjC,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,aAAa,CAAA;QACtB,GAAG,CAAC,EAAE,aAAa,CAAA;QACnB,MAAM,CAAC,EAAE,aAAa,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACzD,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,aAAa,CAAA;QACpB,KAAK,CAAC,EAAE,aAAa,CAAA;KACtB,CAAA;IACD,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;CAClE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;AAE/B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,CAAC,EAAE,IAAI,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjC,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAC5C,CAAA;AAMD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IACE,IAAI,EAAE,IAAI,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAEL,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,QAAQ,GAAG,SAAS,CAAA;IAChC,MAAM,EAAE;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,GAAG,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,CAAA;IAC5E,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACrD,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;CACrC,CAAA;AAaD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CA2BxD;AAwJD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,sBAAsB,CAwCxB"}