bunderstack 0.17.0-beta.2 → 0.17.0-beta.3

package/dist/access.js

@@ -0,0 +1,325 @@
+import { getTableColumns, getTableName, isTable } from 'drizzle-orm';
+import { INTERNAL_TABLE_NAMES } from './internal-tables.js';
+export const AUTH_TABLE_NAMES = new Set([
+    'user',
+    'session',
+    'account',
+    'verification',
+]);
+const EXPOSEABLE_AUTH_TABLES = new Set(['user']);
+/**
+ * Look up a table's resolved access by its physical table name.
+ *
+ * `ResolvedAccess` is keyed by schema export name, not table name, so every
+ * consumer that starts from a physical name needs this scan. It lives here so
+ * CRUD, realtime, and route validation cannot drift apart on which tables they
+ * consider enabled.
+ */
+export function tableEntryForName(access, tableName) {
+    for (const entry of access.values()) {
+        if (entry.tableName === tableName)
+            return entry;
+    }
+    return undefined;
+}
+const DEFAULT_READONLY = [
+    'id',
+    'createdAt',
+    'updatedAt',
+    'created_at',
+    'updated_at',
+];
+function getSchemaTables(schema) {
+    const tables = [];
+    for (const [key, value] of Object.entries(schema)) {
+        if (!isTable(value))
+            continue;
+        const name = getTableName(value);
+        const columns = Object.keys(getTableColumns(value));
+        tables.push({ key, table: value, name, columns });
+    }
+    return tables;
+}
+function resolveListAccess(input, columns) {
+    const sortableColumns = input.sortableColumns ?? (columns.includes('id') ? ['id'] : []);
+    const defaultSort = input.defaultSort ?? {
+        column: sortableColumns[0] ?? 'id',
+        order: 'desc',
+    };
+    if (!columns.includes(defaultSort.column)) {
+        throw new Error(`[bunderstack] defaultSort.column "${defaultSort.column}" is not a column on this table`);
+    }
+    if (!sortableColumns.includes(defaultSort.column)) {
+        throw new Error(`[bunderstack] defaultSort.column "${defaultSort.column}" must be listed in sortableColumns`);
+    }
+    const filterableColumns = input.filterableColumns ?? [];
+    for (const col of filterableColumns) {
+        if (!columns.includes(col)) {
+            throw new Error(`[bunderstack] filterableColumns references unknown column "${col}"`);
+        }
+    }
+    for (const col of sortableColumns) {
+        if (!columns.includes(col)) {
+            throw new Error(`[bunderstack] sortableColumns references unknown column "${col}"`);
+        }
+    }
+    return { filterableColumns, sortableColumns, defaultSort };
+}
+function resolveDefaults(input, ownerColumn, columns) {
+    const listAccess = resolveListAccess(input, columns);
+    const explicitlyWritable = new Set(input.writableColumns ?? []);
+    return {
+        ownerColumn,
+        list: input.list ?? 'public',
+        get: input.get ?? 'public',
+        create: input.create ?? 'public',
+        update: input.update ?? (ownerColumn ? 'owner' : 'deny'),
+        delete: input.delete ?? (ownerColumn ? 'owner' : 'deny'),
+        writableColumns: input.writableColumns,
+        readonlyColumns: [
+            ...DEFAULT_READONLY.filter((column) => column === 'id' || !explicitlyWritable.has(column)),
+            ...(input.readonlyColumns ?? []),
+            ...(ownerColumn ? [ownerColumn] : []),
+        ],
+        searchableColumns: input.searchableColumns,
+        readScope: input.scope?.read,
+        writeScope: input.scope?.write,
+        ...listAccess,
+    };
+}
+function detectOwnerColumn(columns, input) {
+    if (input?.ownerColumn)
+        return input.ownerColumn;
+    if (columns.includes('userId'))
+        return 'userId';
+    return undefined;
+}
+export function validateAndResolveAccess(schema, accessInput) {
+    const tables = getSchemaTables(schema);
+    const tableByKey = new Map(tables.map((t) => [t.key, t]));
+    const resolved = new Map();
+    if (accessInput) {
+        for (const key of Object.keys(accessInput)) {
+            if (!tableByKey.has(key)) {
+                throw new Error(`[bunderstack] access.${key} does not match any table in schema`);
+            }
+            const tableName = tableByKey.get(key).name;
+            const input = accessInput[key];
+            if (AUTH_TABLE_NAMES.has(tableName)) {
+                if (input?.crud === false)
+                    continue;
+                if (!EXPOSEABLE_AUTH_TABLES.has(tableName) || !input?.exposeAuthTable) {
+                    throw new Error(`[bunderstack] access.${key} cannot target auth table "${tableName}" — use { crud: false } to silence, or exposeAuthTable on user`);
+                }
+            }
+        }
+    }
+    for (const { key, name, columns } of tables) {
+        const input = accessInput?.[key];
+        if (input?.crud === false)
+            continue;
+        if (INTERNAL_TABLE_NAMES.has(name))
+            continue;
+        if (AUTH_TABLE_NAMES.has(name)) {
+            if (!input?.exposeAuthTable || !EXPOSEABLE_AUTH_TABLES.has(name))
+                continue;
+            const ownerColumn = input.ownerColumn ?? 'id';
+            if (!columns.includes(ownerColumn)) {
+                throw new Error(`[bunderstack] access.${key}.ownerColumn "${ownerColumn}" is not a column on table "${name}"`);
+            }
+            const defaults = resolveDefaults({
+                ...input,
+                create: input.create ?? 'deny',
+                delete: input.delete ?? 'deny',
+            }, ownerColumn, columns);
+            const existingReadonly = defaults.readonlyColumns.filter((col) => columns.includes(col));
+            const resolvedReadonly = [...new Set(existingReadonly)];
+            for (const col of [
+                ...(defaults.writableColumns ?? []),
+                ...(defaults.searchableColumns ?? []),
+                ...defaults.filterableColumns,
+                ...defaults.sortableColumns,
+                ...resolvedReadonly,
+            ]) {
+                if (!columns.includes(col)) {
+                    throw new Error(`[bunderstack] access.${key} references unknown column "${col}" on table "${name}"`);
+                }
+            }
+            resolved.set(key, {
+                tableKey: key,
+                tableName: name,
+                enabled: true,
+                ...defaults,
+                readonlyColumns: resolvedReadonly,
+            });
+            continue;
+        }
+        const ownerColumn = detectOwnerColumn(columns, input);
+        const hasExplicitRules = input !== undefined;
+        const hasConventionOwner = ownerColumn !== undefined &&
+            input?.ownerColumn === undefined &&
+            columns.includes('userId');
+        if (!hasExplicitRules && !hasConventionOwner)
+            continue;
+        if (!ownerColumn &&
+            input?.crud !== true &&
+            !input?.scope?.read &&
+            !input?.scope?.write)
+            continue;
+        if (input?.ownerColumn && !columns.includes(input.ownerColumn)) {
+            throw new Error(`[bunderstack] access.${key}.ownerColumn "${input.ownerColumn}" is not a column on table "${name}"`);
+        }
+        const defaults = resolveDefaults(input ?? {}, ownerColumn, columns);
+        const existingReadonly = defaults.readonlyColumns.filter((col) => columns.includes(col));
+        const resolvedReadonly = [...new Set(existingReadonly)];
+        for (const col of [
+            ...(defaults.writableColumns ?? []),
+            ...(defaults.searchableColumns ?? []),
+            ...defaults.filterableColumns,
+            ...defaults.sortableColumns,
+            ...resolvedReadonly,
+        ]) {
+            if (!columns.includes(col)) {
+                throw new Error(`[bunderstack] access.${key} references unknown column "${col}" on table "${name}"`);
+            }
+        }
+        const needsOwner = [defaults.update, defaults.delete].some((r) => r === 'owner');
+        if (needsOwner && !ownerColumn) {
+            throw new Error(`[bunderstack] access.${key} requires ownerColumn for owner-based update/delete rules`);
+        }
+        resolved.set(key, {
+            tableKey: key,
+            tableName: name,
+            enabled: true,
+            ...defaults,
+            readonlyColumns: resolvedReadonly,
+        });
+    }
+    return resolved;
+}
+export function defineAccess(schema, rules) {
+    validateAndResolveAccess(schema, rules);
+    return rules;
+}
+export function rowMatchesScope(row, scope) {
+    for (const [col, expected] of Object.entries(scope)) {
+        const actual = row[col];
+        if (actual == null)
+            return false;
+        if (Array.isArray(expected)) {
+            if (!expected.map(String).includes(String(actual)))
+                return false;
+        }
+        else if (String(actual) !== String(expected)) {
+            return false;
+        }
+    }
+    return true;
+}
+export function stampScope(values, scope) {
+    const out = { ...values };
+    for (const [col, expected] of Object.entries(scope)) {
+        if (!Array.isArray(expected))
+            out[col] = expected;
+    }
+    return out;
+}
+export function checkAccessSync(rule, ctx, ownerColumn) {
+    if (rule === 'deny')
+        return { allowed: false };
+    if (rule === 'public')
+        return { allowed: true };
+    if (!ctx.user)
+        return { allowed: false };
+    if (rule === 'authenticated')
+        return { allowed: true };
+    if (rule === 'owner') {
+        if (!ownerColumn)
+            return { allowed: false };
+        const owner = ctx.row?.[ownerColumn];
+        return { allowed: owner != null && String(owner) === ctx.user.id };
+    }
+    return { allowed: false };
+}
+export async function checkAccess(rule, ctx, ownerColumn) {
+    if (rule === 'deny')
+        return { allowed: false, status: 403 };
+    if (typeof rule === 'function') {
+        return (await rule(ctx))
+            ? { allowed: true, status: 403 }
+            : { allowed: false, status: 403 };
+    }
+    if (rule === 'public')
+        return { allowed: true, status: 403 };
+    if (!ctx.user)
+        return { allowed: false, status: 401 };
+    if (rule === 'authenticated')
+        return { allowed: true, status: 403 };
+    if (rule === 'owner') {
+        if (!ownerColumn)
+            return { allowed: false, status: 403 };
+        const rowOwner = ctx.row?.[ownerColumn] ?? ctx.body?.[ownerColumn];
+        if (rowOwner == null)
+            return { allowed: false, status: 403 };
+        if (String(rowOwner) !== ctx.user.id)
+            return { allowed: false, status: 403 };
+        return { allowed: true, status: 403 };
+    }
+    return { allowed: false, status: 403 };
+}
+export function sanitizeWriteBody(body, access, mode, userId) {
+    const out = {};
+    const readonly = new Set(access.readonlyColumns);
+    for (const [key, value] of Object.entries(body)) {
+        // On create, allow client-supplied `id` even if it appears in readonlyColumns,
+        // but still respect an explicit writableColumns allowlist if provided.
+        if (mode === 'create' && key === 'id') {
+            if (access.writableColumns && !access.writableColumns.includes(key))
+                continue;
+            out[key] = value;
+            continue;
+        }
+        if (readonly.has(key))
+            continue;
+        if (access.writableColumns && !access.writableColumns.includes(key))
+            continue;
+        out[key] = value;
+    }
+    if (mode === 'create' && access.ownerColumn) {
+        out[access.ownerColumn] = userId ?? null;
+    }
+    if (mode === 'update' && access.ownerColumn) {
+        delete out[access.ownerColumn];
+    }
+    return out;
+}
+export async function resolveAccessUser(auth, headers) {
+    if (!auth)
+        return null;
+    const session = await auth.api.getSession({ headers });
+    if (!session?.user)
+        return null;
+    return {
+        id: session.user.id,
+        email: session.user.email,
+        name: session.user.name,
+        role: session.user.role,
+    };
+}
+export async function resolveSession(auth, headers) {
+    if (!auth)
+        return { user: null, activeOrganizationId: null };
+    const session = await auth.api.getSession({ headers });
+    if (!session?.user)
+        return { user: null, activeOrganizationId: null };
+    return {
+        user: {
+            id: session.user.id,
+            email: session.user.email,
+            name: session.user.name,
+            role: session.user.role,
+        },
+        activeOrganizationId: session.session?.activeOrganizationId ?? null,
+    };
+}
+//# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,MAAM;IACN,SAAS;IACT,SAAS;IACT,cAAc;CACf,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAsFhD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,SAAiB;IAEjB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,IAAI;IACJ,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;CACb,CAAA;AAED,SAAS,eAAe,CACtB,MAAe;IAEf,MAAM,MAAM,GAKN,EAAE,CAAA;IACR,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAuB,EACvB,OAAiB;IAKjB,MAAM,eAAe,GACnB,KAAK,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACjE,MAAM,WAAW,GAAgB,KAAK,CAAC,WAAW,IAAI;QACpD,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI;QAClC,KAAK,EAAE,MAAM;KACd,CAAA;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,CAAC,MAAM,iCAAiC,CACzF,CAAA;IACH,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,CAAC,MAAM,qCAAqC,CAC7F,CAAA;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAA;IACvD,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8DAA8D,GAAG,GAAG,CACrE,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,4DAA4D,GAAG,GAAG,CACnE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,eAAe,CACtB,KAAuB,EACvB,WAA+B,EAC/B,OAAiB;IAEjB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAA;IAC/D,OAAO;QACL,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,QAAQ;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,eAAe,EAAE;YACf,GAAG,gBAAgB,CAAC,MAAM,CACxB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAC/D;YACD,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI;QAC5B,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK;QAC9B,GAAG,UAAU;KACd,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiB,EACjB,KAAwB;IAExB,IAAI,KAAK,EAAE,WAAW;QAAE,OAAO,KAAK,CAAC,WAAW,CAAA;IAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC/C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAGtC,MAAe,EACf,WAA8C;IAE9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAmB,IAAI,GAAG,EAAE,CAAA;IAE1C,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,qCAAqC,CACjE,CAAA;YACH,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAA;YAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK;oBAAE,SAAQ;gBACnC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,8BAA8B,SAAS,gEAAgE,CACnI,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK;YAAE,SAAQ;QACnC,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,eAAe,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAE1E,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAA;YAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,iBAAiB,WAAW,+BAA+B,IAAI,GAAG,CAC9F,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAC9B;gBACE,GAAG,KAAK;gBACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM;aAC/B,EACD,WAAW,EACX,OAAO,CACR,CAAA;YAED,MAAM,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtB,CAAA;YACD,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAA;YAEvD,KAAK,MAAM,GAAG,IAAI;gBAChB,GAAG,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACrC,GAAG,QAAQ,CAAC,iBAAiB;gBAC7B,GAAG,QAAQ,CAAC,eAAe;gBAC3B,GAAG,gBAAgB;aACpB,EAAE,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,+BAA+B,GAAG,eAAe,IAAI,GAAG,CACpF,CAAA;gBACH,CAAC;YACH,CAAC;YAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBAChB,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,GAAG,QAAQ;gBACX,eAAe,EAAE,gBAAgB;aAClC,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,gBAAgB,GAAG,KAAK,KAAK,SAAS,CAAA;QAC5C,MAAM,kBAAkB,GACtB,WAAW,KAAK,SAAS;YACzB,KAAK,EAAE,WAAW,KAAK,SAAS;YAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAE5B,IAAI,CAAC,gBAAgB,IAAI,CAAC,kBAAkB;YAAE,SAAQ;QACtD,IACE,CAAC,WAAW;YACZ,KAAK,EAAE,IAAI,KAAK,IAAI;YACpB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI;YACnB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK;YAEpB,SAAQ;QAEV,IAAI,KAAK,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,iBAAiB,KAAK,CAAC,WAAW,+BAA+B,IAAI,GAAG,CACpG,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QACnE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtB,CAAA;QACD,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEvD,KAAK,MAAM,GAAG,IAAI;YAChB,GAAG,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACrC,GAAG,QAAQ,CAAC,iBAAiB;YAC7B,GAAG,QAAQ,CAAC,eAAe;YAC3B,GAAG,gBAAgB;SACpB,EAAE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,+BAA+B,GAAG,eAAe,IAAI,GAAG,CACpF,CAAA;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CACrB,CAAA;QACD,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,2DAA2D,CACvF,CAAA;QACH,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;YAChB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,GAAG,QAAQ;YACX,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAG1B,MAAe,EAAE,KAAa;IAC9B,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACvC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,GAA4B,EAC5B,KAAe;IAEf,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;QACvB,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,KAAK,CAAA;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAA;QAClE,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,MAA+B,EAC/B,KAAe;IAEf,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAA;IACnD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAGC,EACD,GAAkB,EAClB,WAAoB;IAEpB,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC9C,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACxC,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACtD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAA;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAmB,EACnB,GAAkB,EAClB,WAAoB;IAEpB,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAE3D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YAChC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACrC,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAE5D,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAErD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAEnE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAA;QAClE,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAA6B,EAC7B,MAA2B,EAC3B,IAAyB,EACzB,MAAqB;IAErB,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,+EAA+E;QAC/E,uEAAuE;QACvE,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACjE,SAAQ;YACV,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC/B,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjE,SAAQ;QACV,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,IAAI,CAAA;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAChC,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAqC,EACrC,OAAgB;IAEhB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACvB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;KACxB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAqC,EACrC,OAAgB;IAEhB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;IAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;IACrE,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACnB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;SACxB;QACD,oBAAoB,EAAE,OAAO,CAAC,OAAO,EAAE,oBAAoB,IAAI,IAAI;KACpE,CAAA;AACH,CAAC"}

package/dist/api/builder.d.ts

@@ -0,0 +1,145 @@
+import { type AnyRouter } from '@orpc/server';
+import type { ApiContext } from './context.js';
+export type { ProtectedContextAdditions } from './types.js';
+export declare function createApiBuilder<TSchema extends Record<string, unknown> = Record<string, unknown>, TEnv = Record<string, unknown>>(): {
+    public: import("@orpc/server").BuilderWithMiddlewares<ApiContext<TSchema, TEnv> & object, object, {
+        readonly BAD_REQUEST: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"BAD_REQUEST", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly UNAUTHORIZED: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"UNAUTHORIZED", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"FORBIDDEN", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"NOT_FOUND", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"CONFLICT", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"PAYLOAD_TOO_LARGE", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly TOO_MANY_REQUESTS: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"TOO_MANY_REQUESTS", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+    }>;
+    protected: import("@orpc/server").BuilderWithMiddlewares<ApiContext<TSchema, TEnv> & object, Omit<object, "user" | "session"> & {
+        user: import("..").AccessUser;
+        session: {
+            activeOrganizationId: string | null;
+        };
+    }, {
+        readonly BAD_REQUEST: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"BAD_REQUEST", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly UNAUTHORIZED: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"UNAUTHORIZED", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"FORBIDDEN", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"NOT_FOUND", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"CONFLICT", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"PAYLOAD_TOO_LARGE", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly TOO_MANY_REQUESTS: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"TOO_MANY_REQUESTS", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+    }>;
+    webhook: import("@orpc/server").BuilderWithMiddlewares<ApiContext<TSchema, TEnv> & object, object, {
+        readonly BAD_REQUEST: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"BAD_REQUEST", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly UNAUTHORIZED: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"UNAUTHORIZED", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"FORBIDDEN", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"NOT_FOUND", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"CONFLICT", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"PAYLOAD_TOO_LARGE", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+        readonly TOO_MANY_REQUESTS: {
+            readonly data: import("valibot").StrictObjectSchema<{
+                readonly code: import("valibot").LiteralSchema<"TOO_MANY_REQUESTS", undefined>;
+                readonly details: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+            }, undefined>;
+        };
+    }>;
+};
+export type BunderstackApiBuilder<TSchema extends Record<string, unknown>, TEnv = Record<string, unknown>> = ReturnType<typeof createApiBuilder<TSchema, TEnv>>;
+export type ApiFactory<TSchema extends Record<string, unknown>, TEnv, TCustomApiRouter extends AnyRouter> = (builder: BunderstackApiBuilder<TSchema, TEnv>) => TCustomApiRouter;
+//# sourceMappingURL=builder.d.ts.map

package/dist/api/builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/api/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAM,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAO3C,YAAY,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAExD,wBAAgB,gBAAgB,CAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B/B;AAED,MAAM,MAAM,qBAAqB,CAC/B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC5B,UAAU,CAAC,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;AAEtD,MAAM,MAAM,UAAU,CACpB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,IAAI,EACJ,gBAAgB,SAAS,SAAS,IAChC,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,gBAAgB,CAAA"}

package/dist/api/builder.js

@@ -0,0 +1,28 @@
+import { os } from '@orpc/server';
+import { BUNDERSTACK_ERRORS, BunderstackError, mapBunderstackErrors, } from '../errors.js';
+export function createApiBuilder() {
+    const base = os
+        .$context()
+        .errors(BUNDERSTACK_ERRORS)
+        .use(mapBunderstackErrors);
+    const protectedProc = base.use(async ({ context, next }) => {
+        const session = await context.getSession();
+        if (!session.user) {
+            throw new BunderstackError('UNAUTHORIZED', 'Authentication required');
+        }
+        return next({
+            context: {
+                user: session.user,
+                session: {
+                    activeOrganizationId: session.activeOrganizationId,
+                },
+            },
+        });
+    });
+    return {
+        public: base,
+        protected: protectedProc,
+        webhook: base,
+    };
+}
+//# sourceMappingURL=builder.js.map

package/dist/api/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/api/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAkB,MAAM,cAAc,CAAA;AAIjD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,WAAW,CAAA;AAGlB,MAAM,UAAU,gBAAgB;IAI9B,MAAM,IAAI,GAAG,EAAE;SACZ,QAAQ,EAA6B;SACrC,MAAM,CAAC,kBAAkB,CAAC;SAC1B,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAE5B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAA;QAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAA;QACvE,CAAC;QACD,OAAO,IAAI,CAAC;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE;oBACP,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;iBACnD;aACF;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE,IAAI;KACd,CAAA;AACH,CAAC"}

package/dist/api/context.d.ts

@@ -0,0 +1,34 @@
+import type { AccessUser, AuthSessionResolver } from '../access.js';
+import type { DbFor } from '../db.js';
+import type { EmailFacade } from '../email.js';
+import type { AuthInstance, StorageFacade } from '../index.js';
+import type { JobsRuntimeFacade } from '../jobs/define.js';
+import type { RealtimeFacade } from '../realtime/facade.js';
+export interface ApiContextDeps<TSchema extends Record<string, unknown> = Record<string, unknown>, TEnv = Record<string, unknown>> {
+    db: DbFor<TSchema>;
+    env: TEnv;
+    storage: StorageFacade;
+    email: EmailFacade;
+    jobs: JobsRuntimeFacade;
+    realtime: RealtimeFacade<TSchema>;
+    auth: AuthInstance;
+    authResolver?: AuthSessionResolver;
+}
+export interface ApiContext<TSchema extends Record<string, unknown> = Record<string, unknown>, TEnv = Record<string, unknown>> {
+    db: DbFor<TSchema>;
+    env: TEnv;
+    storage: StorageFacade;
+    email: EmailFacade;
+    jobs: JobsRuntimeFacade;
+    realtime: RealtimeFacade<TSchema>;
+    auth: AuthInstance;
+    request: Request;
+    resHeaders: Headers;
+    getRawBody: () => Promise<string>;
+    getSession: () => Promise<{
+        user: AccessUser | null;
+        activeOrganizationId: string | null;
+    }>;
+}
+export declare function createApiContext<TSchema extends Record<string, unknown> = Record<string, unknown>, TEnv = Record<string, unknown>>(deps: ApiContextDeps<TSchema, TEnv>, request: Request): ApiContext<TSchema, TEnv>;
+//# sourceMappingURL=context.d.ts.map

package/dist/api/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAClC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAIxD,MAAM,WAAW,cAAc,CAC7B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,GAAG,EAAE,IAAI,CAAA;IACT,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,EAAE,YAAY,CAAA;IAClB,YAAY,CAAC,EAAE,mBAAmB,CAAA;CACnC;AAED,MAAM,WAAW,UAAU,CACzB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,GAAG,EAAE,IAAI,CAAA;IACT,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,EAAE,YAAY,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,UAAU,EAAE,MAAM,OAAO,CAAC;QACxB,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;QACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KACpC,CAAC,CAAA;CACH;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAE9B,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EACnC,OAAO,EAAE,OAAO,GACf,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAiC3B"}

package/dist/api/context.js

@@ -0,0 +1,32 @@
+import { resolveSession } from '../access.js';
+export function createApiContext(deps, request) {
+    // Reserve the body stream before a transport codec consumes `request`.
+    const rawBodyRequest = request.clone();
+    let rawBodyPromise;
+    let sessionPromise;
+    const getSession = () => {
+        if (!sessionPromise) {
+            sessionPromise = resolveSession(deps.authResolver, request.headers);
+        }
+        return sessionPromise;
+    };
+    const getRawBody = () => {
+        if (!rawBodyPromise)
+            rawBodyPromise = rawBodyRequest.text();
+        return rawBodyPromise;
+    };
+    return {
+        db: deps.db,
+        env: deps.env,
+        storage: deps.storage,
+        email: deps.email,
+        jobs: deps.jobs,
+        realtime: deps.realtime,
+        auth: deps.auth,
+        request,
+        resHeaders: new Headers(),
+        getRawBody,
+        getSession,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/api/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/api/context.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAoC1C,MAAM,UAAU,gBAAgB,CAI9B,IAAmC,EACnC,OAAgB;IAEhB,uEAAuE;IACvE,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IACtC,IAAI,cAA2C,CAAA;IAC/C,IAAI,cAES,CAAA;IAEb,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,cAAc,CAAA;IACvB,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,cAAc;YAAE,cAAc,GAAG,cAAc,CAAC,IAAI,EAAE,CAAA;QAC3D,OAAO,cAAc,CAAA;IACvB,CAAC,CAAA;IAED,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO;QACP,UAAU,EAAE,IAAI,OAAO,EAAE;QACzB,UAAU;QACV,UAAU;KACX,CAAA;AACH,CAAC"}