glasswork 0.13.3 → 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,80 @@
+# Changelog
+
+All notable changes to Glasswork are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- **`parseFilterLiteral`**, **`parseFilterValue`**, **`parseWhereFilterValues`** — centralized filter value parsing for query params and Prisma `where` clauses
+- **`filter-value-schemas`** — Valibot operand schemas with transforms for typed Prisma filters
+
+### Changed
+
+- Typed filter schemas (`dateFilterSchema`, `intFilterSchema`, `numberFilterSchema`, `booleanFilterSchema`) parse string operands to Prisma types via Valibot transforms
+- `parseWhereFilterValues` reuses those schemas with `parse()` instead of custom coercion logic
+- List-query `where` deep copy uses `structuredClone` so parsed `Date` values are preserved
+
+## [1.0.0] - 2026-06-10
+
+Major release: subpath exports, dependency upgrades (CASL 7, MJML 5, Valibot 1.4, Prisma 7), Prisma list-query helpers, and internal refactors. Breaking changes when upgrading from 0.x.
+
+### Added
+
+- **Subpath exports:** `glasswork/core`, `glasswork/http`, `glasswork/auth`, `glasswork/list-query`, `glasswork/jobs`, `glasswork/email`, `glasswork/uploads`, `glasswork/observability`
+- **`registerAuthCasl({ createPrismaAbility })`** — register the app's Prisma ability factory at startup (same pattern as `registerCasl()` in list-query)
+- **`RouteBinder`** and `core/route-factory.ts` — typed route-factory contract
+- **`createPrismaListExecutor`**, **`bindPrismaListDelegate`**, **`runGroupByAggregations`**, **`resolveOrderBy`** — Prisma list-query execution helpers
+- **`defaultOrderBy`** on `createListQuery` config — applied when the request omits `sorts`
+- **`InferListParams`** — infer typed list params from filter/sort Valibot schemas
+- **`intFilterSchema`** and **`unrestrictedWhereSchema`** — additional list-query schema helpers
+- **`createSortSchema`** dot-notation — nested relation sorts (e.g. `'organization.name'`)
+- Shared test helpers under `test/helpers/` (`createTestRouter`, `buildSqsEvent`, `cradleOf`)
+- Pack consumer smoke test (`smoke:pack`) wired into `verify`
+
+### Changed
+
+- **Root entry (`glasswork`)** re-exports **core + http only**; optional subsystems require explicit subpaths
+- **Peer dependencies** tightened to tested ranges (`valibot` ^1.4, `@prisma/client` ^7, `@casl/ability` ^7, `@casl/prisma` ^2, and others — see `package.json`)
+- **MJML 5** — template compilation is async; `compileTemplates()` API updated accordingly
+- **CASL 7 / `@casl/prisma` 2** — `PureAbility` replaced by `Ability` / `AnyAbility`; use `accessibleBy().ofType()` for list-query scopes
+- **Prisma CASL extension** — `createCaslExtension()` on `PrismaService` for consumer apps
+- **Bootstrap internals** — module graph and lifecycle extracted from `bootstrap.ts`; jobs worker no longer imports bootstrap
+- **HTTP internals** — `route-helpers.ts` split into focused modules; public `route()` / `createRoutes()` API unchanged
+- **API reference docs** — labeled as manually curated (not TypeDoc-generated)
+- **CI coverage job** — build `dist/` before coverage; limit coverage to TypeScript sources
+
+### Removed
+
+- **`html-to-text`** dependency (email plain-text generation uses a lighter path)
+- Monolithic optional exports from the root `glasswork` barrel
+- Redundant direct `standard-openapi` / `standard-json` dependencies (provided via `hono-openapi`)
+
+### Migration from 0.x
+
+1. Replace root imports with subpaths (see [Package Exports](https://glasswork.dev/getting-started/package-exports)):
+   - `defineModule`, `bootstrap`, `createConfig` → `glasswork/core`
+   - `createRoutes`, `route`, `*Exception` → `glasswork/http`
+   - Auth, jobs, email, uploads, list-query, observability → respective subpaths
+2. At application startup:
+   ```typescript
+   import { accessibleBy, createPrismaAbility } from '@casl/prisma';
+   import { registerAuthCasl } from 'glasswork/auth';
+   import { registerCasl } from 'glasswork/list-query';
+
+   registerCasl({ accessibleBy });
+   registerAuthCasl({ createPrismaAbility });
+   ```
+3. Upgrade CASL/MJML/Valibot/Prisma peers to the ranges in `package.json`
+4. Rebuild (`pnpm build`) after install — the package ships compiled `dist/`
+
+## [0.13.3] - 2026-05-28
+
+Last 0.x release before the 1.0 breaking changes. Earlier 0.x history is available on [GitHub releases](https://github.com/rolandboon/glasswork/releases).
+
+[Unreleased]: https://github.com/rolandboon/glasswork/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/rolandboon/glasswork/compare/v0.13.3...v1.0.0
+[0.13.3]: https://github.com/rolandboon/glasswork/compare/v0.13.2...v0.13.3

package/README.md

@@ -53,6 +53,8 @@ Glasswork combines the best patterns from NestJS (modules, DI, OpenAPI) with the
 npm install glasswork hono awilix valibot hono-openapi
 ```
 
+Glasswork 1.0 uses **subpath exports** (`glasswork/core`, `glasswork/http`, `glasswork/auth`, …). The root `glasswork` import covers core and HTTP only; optional subsystems use their own subpath. See [Package Exports](https://glasswork.dev/getting-started/package-exports).
+
 ## Quick Start
 
 ### 1. Define Your DTOs (Valibot Schemas)
@@ -75,7 +77,7 @@ export const SessionDto = object({
 ### 2. Create Type-Safe Routes
 
 ```typescript
-import { createRoutes, route } from 'glasswork';
+import { createRoutes, route } from 'glasswork/http';
 
 export const authRoutes = createRoutes<{ authService: AuthService }>(
   (router, { authService }) => {
@@ -99,6 +101,8 @@ export const authRoutes = createRoutes<{ authService: AuthService }>(
 ### 3. Write Framework-Agnostic Services
 
 ```typescript
+import { NotFoundException } from 'glasswork/http';
+
 // Services have zero framework coupling
 export class AuthService {
   constructor({ prismaService, hashService }: {
@@ -131,7 +135,7 @@ export const AuthModule = defineModule({
 });
 
 // app.ts
-import { bootstrap } from 'glasswork';
+import { bootstrap } from 'glasswork/core';
 
 const { app } = bootstrap(AppModule, {
   openapi: {

package/dist/auth/abilities.d.ts

@@ -1,12 +1,15 @@
-import { AbilityBuilder, type ForcedSubject, type PureAbility } from '@casl/ability';
-import { type PrismaQuery } from '@casl/prisma';
+import { AbilityBuilder, type ForcedSubject } from '@casl/ability';
+import type { PrismaAbility } from '@casl/prisma';
 import type { AuthUser } from './types.js';
 /**
  * Extended ability type with authorize method
  */
-export interface AuthorizedAbility<TActions extends string, TSubjects extends string> extends PureAbility<[TActions, TSubjects | ForcedSubject<TSubjects>], PrismaQuery> {
+export type AuthorizedAbility<TActions extends string, TSubjects extends string> = PrismaAbility<[
+    TActions,
+    TSubjects | ForcedSubject<TSubjects>
+]> & {
     authorize: (action: TActions, subject: TSubjects | ForcedSubject<TSubjects>, message?: string) => void;
-}
+};
 /**
  * Create a type-safe ability factory for your application.
  *
@@ -26,8 +29,8 @@ export declare function createAbilityFactory<TSubjects extends string, TActions
  * Define abilities using a declarative role-based configuration.
  */
 export declare function defineRoleAbilities<TSubjects extends string, TActions extends string, TRoles extends string>(config: Record<TRoles, (ctx: {
-    can: AbilityBuilder<PureAbility<[TActions, TSubjects | ForcedSubject<TSubjects>], PrismaQuery>>['can'];
-    cannot: AbilityBuilder<PureAbility<[TActions, TSubjects | ForcedSubject<TSubjects>], PrismaQuery>>['cannot'];
+    can: AbilityBuilder<PrismaAbility<[TActions, TSubjects | ForcedSubject<TSubjects>]>>['can'];
+    cannot: AbilityBuilder<PrismaAbility<[TActions, TSubjects | ForcedSubject<TSubjects>]>>['cannot'];
     user: AuthUser;
 }) => void>): {
     for(user: AuthUser): AuthorizedAbility<TActions, TSubjects>;

package/dist/auth/abilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abilities.d.ts","sourceRoot":"","sources":["../../src/auth/abilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,QAAQ,SAAS,MAAM,EAAE,SAAS,SAAS,MAAM,CAClF,SAAQ,WAAW,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;IAClF,SAAS,EAAE,CACT,MAAM,EAAE,QAAQ,EAChB,OAAO,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,EAC7C,OAAO,CAAC,EAAE,MAAM,KACb,IAAI,CAAC;CACX;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,SAAS,MAAM,EACxB,QAAQ,SAAS,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,MAK1E,QAAQ,CACN,GAAG,EAAE,cAAc,wCAAY,CAAC,KAAK,CAAC,EACtC,MAAM,EAAE,cAAc,wCAAY,CAAC,QAAQ,CAAC,EAC5C,IAAI,EAAE,QAAQ,KACX,IAAI,MAED,MAAM,QAAQ,4CAqBzB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,SAAS,MAAM,EACxB,QAAQ,SAAS,MAAM,EACvB,MAAM,SAAS,MAAM,EAErB,MAAM,EAAE,MAAM,CACZ,MAAM,EACN,CAAC,GAAG,EAAE;IACJ,GAAG,EAAE,cAAc,CACjB,WAAW,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAC3E,CAAC,KAAK,CAAC,CAAC;IACT,MAAM,EAAE,cAAc,CACpB,WAAW,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAC3E,CAAC,QAAQ,CAAC,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;CAChB,KAAK,IAAI,CACX;cAKW,QAAQ;IA6BlB,4DAA4D;kBAC9C,MAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC;EAIhD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC"}
+{"version":3,"file":"abilities.d.ts","sourceRoot":"","sources":["../../src/auth/abilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,QAAQ,SAAS,MAAM,EAAE,SAAS,SAAS,MAAM,IAAI,aAAa,CAC9F;IAAC,QAAQ;IAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;CAAC,CACjD,GAAG;IACF,SAAS,EAAE,CACT,MAAM,EAAE,QAAQ,EAChB,OAAO,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,EAC7C,OAAO,CAAC,EAAE,MAAM,KACb,IAAI,CAAC;CACX,CAAC;AAqBF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,SAAS,MAAM,EACxB,QAAQ,SAAS,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,MAK1E,QAAQ,CACN,GAAG,EAAE,cAAc,wCAAY,CAAC,KAAK,CAAC,EACtC,MAAM,EAAE,cAAc,wCAAY,CAAC,QAAQ,CAAC,EAC5C,IAAI,EAAE,QAAQ,KACX,IAAI,MAED,MAAM,QAAQ,4CAOzB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,SAAS,MAAM,EACxB,QAAQ,SAAS,MAAM,EACvB,MAAM,SAAS,MAAM,EAErB,MAAM,EAAE,MAAM,CACZ,MAAM,EACN,CAAC,GAAG,EAAE;IACJ,GAAG,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5F,MAAM,EAAE,cAAc,CACpB,aAAa,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAChE,CAAC,QAAQ,CAAC,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;CAChB,KAAK,IAAI,CACX;cAKW,QAAQ;IAelB,4DAA4D;kBAC9C,MAAM,SAAQ,OAAO,CAAC,QAAQ,CAAC;EAIhD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC"}

package/dist/auth/abilities.js

@@ -1,6 +1,16 @@
 import { AbilityBuilder } from '@casl/ability';
-import { createPrismaAbility } from '@casl/prisma';
 import { ForbiddenException } from '../http/errors.js';
+import { getPrismaAbilityFactory } from './casl-bridge.js';
+function attachAuthorize(ability) {
+    return Object.assign(ability, {
+        authorize(action, subject, message) {
+            // biome-ignore lint/suspicious/noExplicitAny: CASL can() accepts partial subjects; method must keep ability as `this`
+            if (!ability.can(action, subject)) {
+                throw new ForbiddenException(message ?? `You don't have permission to ${action} this resource`);
+            }
+        },
+    });
+}
 /**
  * Create a type-safe ability factory for your application.
  *
@@ -18,17 +28,10 @@ import { ForbiddenException } from '../http/errors.js';
 export function createAbilityFactory() {
     return function defineAbility(define) {
         return (user) => {
+            const createPrismaAbility = getPrismaAbilityFactory();
             const { can, cannot, build } = new AbilityBuilder(createPrismaAbility);
             define(can, cannot, user);
-            const ability = build();
-            return Object.assign(ability, {
-                authorize(action, subject, message) {
-                    // biome-ignore lint/suspicious/noExplicitAny: CASL's can() accepts partial subjects but TypeScript types are strict
-                    if (!ability.can(action, subject)) {
-                        throw new ForbiddenException(message ?? `You don't have permission to ${action} this resource`);
-                    }
-                },
-            });
+            return attachAuthorize(build());
         };
     };
 }
@@ -38,20 +41,13 @@ export function createAbilityFactory() {
 export function defineRoleAbilities(config) {
     return {
         for(user) {
+            const createPrismaAbility = getPrismaAbilityFactory();
             const { can, cannot, build } = new AbilityBuilder(createPrismaAbility);
             const roleConfig = config[user.role];
             if (roleConfig) {
                 roleConfig({ can, cannot, user });
             }
-            const ability = build();
-            return Object.assign(ability, {
-                authorize(action, subject, message) {
-                    // biome-ignore lint/suspicious/noExplicitAny: CASL's can() accepts partial subjects but TypeScript types are strict
-                    if (!ability.can(action, subject)) {
-                        throw new ForbiddenException(message ?? `You don't have permission to ${action} this resource`);
-                    }
-                },
-            });
+            return attachAuthorize(build());
         },
         /** Get ability for a specific role (useful for testing). */
         forRole(role, user = {}) {

package/dist/auth/abilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"abilities.js","sourceRoot":"","sources":["../../src/auth/abilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAwC,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAoB,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAevD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB;IAMlC,OAAO,SAAS,aAAa,CAC3B,MAIS;QAET,OAAO,CAAC,IAAc,EAAc,EAAE;YACpC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,cAAc,CAAa,mBAAmB,CAAC,CAAC;YACnF,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC5B,SAAS,CACP,MAAgB,EAChB,OAA6C,EAC7C,OAAgB;oBAEhB,oHAAoH;oBACpH,IAAI,CAAE,OAAe,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,kBAAkB,CAC1B,OAAO,IAAI,gCAAgC,MAAM,gBAAgB,CAClE,CAAC;oBACJ,CAAC;gBACH,CAAC;aACF,CAAe,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAKjC,MAWC;IAID,OAAO;QACL,GAAG,CAAC,IAAc;YAChB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,cAAc,CAE/C,mBAAmB,CAAC,CAAC;YAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;YAE/C,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC5B,SAAS,CACP,MAAgB,EAChB,OAA6C,EAC7C,OAAgB;oBAEhB,oHAAoH;oBACpH,IAAI,CAAE,OAAe,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,kBAAkB,CAC1B,OAAO,IAAI,gCAAgC,MAAM,gBAAgB,CAClE,CAAC;oBACJ,CAAC;gBACH,CAAC;aACF,CAAe,CAAC;QACnB,CAAC;QAED,4DAA4D;QAC5D,OAAO,CAAC,IAAY,EAAE,OAA0B,EAAE;YAChD,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,EAAc,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"abilities.js","sourceRoot":"","sources":["../../src/auth/abilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAsB,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAgB3D,SAAS,eAAe,CACtB,OAAwE;IAExE,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,SAAS,CACP,MAAgB,EAChB,OAA6C,EAC7C,OAAgB;YAEhB,sHAAsH;YACtH,IAAI,CAAE,OAAe,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,kBAAkB,CAC1B,OAAO,IAAI,gCAAgC,MAAM,gBAAgB,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAA2C,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB;IAMlC,OAAO,SAAS,aAAa,CAC3B,MAIS;QAET,OAAO,CAAC,IAAc,EAAc,EAAE;YACpC,MAAM,mBAAmB,GAAG,uBAAuB,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,cAAc,CAAa,mBAAmB,CAAC,CAAC;YACnF,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAKjC,MASC;IAID,OAAO;QACL,GAAG,CAAC,IAAc;YAChB,MAAM,mBAAmB,GAAG,uBAAuB,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,cAAc,CAE/C,mBAAmB,CAAC,CAAC;YAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;YAE/C,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,4DAA4D;QAC5D,OAAO,CAAC,IAAY,EAAE,OAA0B,EAAE;YAChD,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,EAAc,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/assert.d.ts

@@ -1,4 +1,4 @@
-import type { PureAbility } from '@casl/ability';
+import type { AnyAbility } from '@casl/ability';
 import { subject as caslSubject } from '@casl/ability';
 type AuthorizableSubject = string | {
     __caslSubjectType__?: string;
@@ -7,7 +7,7 @@ type AuthorizableSubject = string | {
  * Assert that an action can be performed on a subject.
  * Throws ForbiddenException (or Unauthorized when user missing) if not allowed.
  */
-export declare function assertCan<TAbility extends PureAbility>(ability: TAbility | undefined, action: string, subject: AuthorizableSubject, opts?: {
+export declare function assertCan<TAbility extends AnyAbility>(ability: TAbility | undefined, action: string, subject: AuthorizableSubject, opts?: {
     unauthorizedMessage?: string;
     forbiddenMessage?: string;
     isAuthenticated?: boolean;
@@ -15,6 +15,6 @@ export declare function assertCan<TAbility extends PureAbility>(ability: TAbilit
 /**
  * Check if an action can be performed (without throwing).
  */
-export declare function can<TAbility extends PureAbility>(ability: TAbility | undefined, action: string, subject: AuthorizableSubject): boolean;
+export declare function can<TAbility extends AnyAbility>(ability: TAbility | undefined, action: string, subject: AuthorizableSubject): boolean;
 export { caslSubject as subject };
 //# sourceMappingURL=assert.d.ts.map

package/dist/auth/assert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../../src/auth/assert.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC;AAGvD,KAAK,mBAAmB,GAAG,MAAM,GAAG;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,SAAS,WAAW,EACpD,OAAO,EAAE,QAAQ,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,EAC5B,IAAI,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F,IAAI,CAgBN;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,QAAQ,SAAS,WAAW,EAC9C,OAAO,EAAE,QAAQ,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAGT;AAED,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../../src/auth/assert.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC;AAGvD,KAAK,mBAAmB,GAAG,MAAM,GAAG;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,SAAS,UAAU,EACnD,OAAO,EAAE,QAAQ,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,EAC5B,IAAI,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F,IAAI,CAgBN;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,QAAQ,SAAS,UAAU,EAC7C,OAAO,EAAE,QAAQ,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAGT;AAED,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,CAAC"}

package/dist/auth/casl-bridge.d.ts

@@ -0,0 +1,19 @@
+import type { createPrismaAbility } from '@casl/prisma';
+export type PrismaAbilityFactory = typeof createPrismaAbility;
+/**
+ * Register CASL Prisma ability factory for auth helpers.
+ * Must be called at application startup (mirrors {@link registerCasl} in list-query).
+ *
+ * @example
+ * ```typescript
+ * import { createPrismaAbility } from '@casl/prisma';
+ * import { registerAuthCasl } from 'glasswork/auth';
+ *
+ * registerAuthCasl({ createPrismaAbility });
+ * ```
+ */
+export declare function registerAuthCasl(options: {
+    createPrismaAbility: PrismaAbilityFactory | ((...args: never[]) => unknown);
+}): void;
+export declare function getPrismaAbilityFactory(): PrismaAbilityFactory;
+//# sourceMappingURL=casl-bridge.d.ts.map

package/dist/auth/casl-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"casl-bridge.d.ts","sourceRoot":"","sources":["../../src/auth/casl-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,OAAO,mBAAmB,CAAC;AAM9D;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,mBAAmB,EAAE,oBAAoB,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC,CAAC;CAC7E,QAEA;AAED,wBAAgB,uBAAuB,IAAI,oBAAoB,CAW9D"}

package/dist/auth/casl-bridge.js

@@ -0,0 +1,29 @@
+const config = {
+    createPrismaAbility: null,
+};
+/**
+ * Register CASL Prisma ability factory for auth helpers.
+ * Must be called at application startup (mirrors {@link registerCasl} in list-query).
+ *
+ * @example
+ * ```typescript
+ * import { createPrismaAbility } from '@casl/prisma';
+ * import { registerAuthCasl } from 'glasswork/auth';
+ *
+ * registerAuthCasl({ createPrismaAbility });
+ * ```
+ */
+export function registerAuthCasl(options) {
+    config.createPrismaAbility = options.createPrismaAbility;
+}
+export function getPrismaAbilityFactory() {
+    if (!config.createPrismaAbility) {
+        throw new Error('Auth CASL integration not configured. Call registerAuthCasl({ createPrismaAbility }) at application startup.\n' +
+            'Example:\n' +
+            "  import { createPrismaAbility } from '@casl/prisma';\n" +
+            "  import { registerAuthCasl } from 'glasswork/auth';\n" +
+            '  registerAuthCasl({ createPrismaAbility });');
+    }
+    return config.createPrismaAbility;
+}
+//# sourceMappingURL=casl-bridge.js.map

package/dist/auth/casl-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"casl-bridge.js","sourceRoot":"","sources":["../../src/auth/casl-bridge.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,GAAyD;IACnE,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAEhC;IACC,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAA2C,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,gHAAgH;YAC9G,YAAY;YACZ,yDAAyD;YACzD,wDAAwD;YACxD,8CAA8C,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,mBAAmB,CAAC;AACpC,CAAC"}

package/dist/auth/index.d.ts

@@ -1,6 +1,7 @@
 export { createAbilityFactory, defineRoleAbilities, type InferAbility, } from './abilities.js';
 export { assertCan, can, subject } from './assert.js';
 export { type BetterAuthClient, type BetterAuthProviderConfig, createBetterAuthProvider, } from './better-auth-provider.js';
+export { type PrismaAbilityFactory, registerAuthCasl } from './casl-bridge.js';
 export { type AuthMiddlewareConfig, createAuthMiddleware, } from './middleware.js';
 export type { AuthContext, AuthProvider, AuthSession, AuthUser } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,KAAK,oBAAoB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,OAAO,EACL,KAAK,oBAAoB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/auth/index.js

@@ -1,5 +1,6 @@
 export { createAbilityFactory, defineRoleAbilities, } from './abilities.js';
 export { assertCan, can, subject } from './assert.js';
 export { createBetterAuthProvider, } from './better-auth-provider.js';
+export { registerAuthCasl } from './casl-bridge.js';
 export { createAuthMiddleware, } from './middleware.js';
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAGL,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,oBAAoB,GACrB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAGL,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAA6B,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,OAAO,EAEL,oBAAoB,GACrB,MAAM,iBAAiB,CAAC"}

package/dist/auth/middleware.d.ts

@@ -1,7 +1,7 @@
-import type { PureAbility } from '@casl/ability';
+import { type AnyAbility } from '@casl/ability';
 import type { Context, MiddlewareHandler } from 'hono';
 import type { AuthProvider, AuthSession, AuthUser } from './types.js';
-export interface AuthMiddlewareConfig<TUser extends AuthUser = AuthUser, TAbility extends PureAbility = PureAbility, TSession extends AuthSession = AuthSession> {
+export interface AuthMiddlewareConfig<TUser extends AuthUser = AuthUser, TAbility extends AnyAbility = AnyAbility, TSession extends AuthSession = AuthSession> {
     /** Auth provider instance. */
     provider: AuthProvider<TUser, TSession>;
     /** Function to build ability from user. */
@@ -26,6 +26,6 @@ type AuthorizeConfig = {
 /**
  * Create auth middleware that validates sessions and builds abilities.
  */
-export declare function createAuthMiddleware<TUser extends AuthUser = AuthUser, TAbility extends PureAbility = PureAbility, TSession extends AuthSession = AuthSession>(config: AuthMiddlewareConfig<TUser, TAbility, TSession>): (authorize?: AuthorizeConfig) => MiddlewareHandler;
+export declare function createAuthMiddleware<TUser extends AuthUser = AuthUser, TAbility extends AnyAbility = AnyAbility, TSession extends AuthSession = AuthSession>(config: AuthMiddlewareConfig<TUser, TAbility, TSession>): (authorize?: AuthorizeConfig) => MiddlewareHandler;
 export {};
 //# sourceMappingURL=middleware.d.ts.map

package/dist/auth/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAG7D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,oBAAoB,CACnC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,QAAQ,SAAS,WAAW,GAAG,WAAW;IAE1C,8BAA8B;IAC9B,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxC,2CAA2C;IAC3C,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC;IACxC,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,QAAQ,CAAC;IAC9B,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,MAAM,EAAE,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAWxB,YAAY,eAAe,KAAG,iBAAiB,CAwB/E"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAG7D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,oBAAoB,CACnC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,UAAU,GAAG,UAAU,EACxC,QAAQ,SAAS,WAAW,GAAG,WAAW;IAE1C,8BAA8B;IAC9B,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxC,2CAA2C;IAC3C,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC;IACxC,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,QAAQ,CAAC;IAC9B,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,UAAU,GAAG,UAAU,EACxC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,MAAM,EAAE,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAWxB,YAAY,eAAe,KAAG,iBAAiB,CAwB/E"}

package/dist/auth/middleware.js

@@ -1,4 +1,4 @@
-import { PureAbility as BaseAbility } from '@casl/ability';
+import { Ability } from '@casl/ability';
 import { deleteCookie, getCookie } from 'hono/cookie';
 import { ForbiddenException, UnauthorizedException } from '../http/errors.js';
 /**
@@ -87,6 +87,6 @@ function extractBearerToken(c, headerName) {
     return null;
 }
 function createEmptyAbility() {
-    return new BaseAbility([]);
+    return new Ability([]);
 }
 //# sourceMappingURL=middleware.js.map

package/dist/auth/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AA6B9E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAIlC,MAAuD;IACvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,UAAU,GAAG,SAAS,EACtB,UAAU,GAAG,eAAe,EAC5B,UAAU,GAAG,IAAI,EACjB,YAAY,EACZ,gBAAgB,GACjB,GAAG,MAAM,CAAC;IAEX,OAAO,SAAS,cAAc,CAAC,SAA2B;QACxD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE;gBACtC,UAAU;gBACV,UAAU;gBACV,QAAQ;gBACR,YAAY;gBACZ,YAAY;aACb,CAAC,CAAC;YAEH,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAE3B,IAAI,SAAS,EAAE,CAAC;gBACd,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,gBAAgB,CAK7B,CAAU,EACV,OAMC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,IAAI,GAAiB,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI;QAClB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,kBAAkB,EAAE,CAAc,CAAC;IAErE,OAAO;QACL,IAAI;QACJ,OAAO;QACP,OAAO;QACP,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC;QAC9B,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAuC,EACvC,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAIvB,CAAU,EAAE,KAA2C;IACvD,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAI3B,SAA0B,EAAE,KAA2C,EAAE,UAAmB;IAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,OAAgB,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU,EAAE,UAAkB;IACxD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmB,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AA6B9E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAIlC,MAAuD;IACvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,UAAU,GAAG,SAAS,EACtB,UAAU,GAAG,eAAe,EAC5B,UAAU,GAAG,IAAI,EACjB,YAAY,EACZ,gBAAgB,GACjB,GAAG,MAAM,CAAC;IAEX,OAAO,SAAS,cAAc,CAAC,SAA2B;QACxD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE;gBACtC,UAAU;gBACV,UAAU;gBACV,QAAQ;gBACR,YAAY;gBACZ,YAAY;aACb,CAAC,CAAC;YAEH,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAE3B,IAAI,SAAS,EAAE,CAAC;gBACd,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;YAEb,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,gBAAgB,CAK7B,CAAU,EACV,OAMC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,IAAI,GAAiB,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI;QAClB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,kBAAkB,EAAE,CAAc,CAAC;IAErE,OAAO;QACL,IAAI;QACJ,OAAO;QACP,OAAO;QACP,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC;QAC9B,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAuC,EACvC,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAIvB,CAAU,EAAE,KAA2C;IACvD,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAI3B,SAA0B,EAAE,KAA2C,EAAE,UAAmB;IAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,OAAgB,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU,EAAE,UAAkB;IACxD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/auth/types.d.ts

@@ -1,4 +1,4 @@
-import type { PureAbility } from '@casl/ability';
+import type { AnyAbility } from '@casl/ability';
 /**
  * Authenticated user context available in handlers.
  */
@@ -45,7 +45,7 @@ export interface AuthProvider<TUser extends AuthUser = AuthUser, TSession extend
 /**
  * Auth context available in Hono handlers.
  */
-export interface AuthContext<TUser extends AuthUser = AuthUser, TSession extends AuthSession = AuthSession, TAbility extends PureAbility = PureAbility> {
+export interface AuthContext<TUser extends AuthUser = AuthUser, TSession extends AuthSession = AuthSession, TAbility extends AnyAbility = AnyAbility> {
     user: TUser | null;
     session: TSession | null;
     ability: TAbility;

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY,CAC3B,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW;IAE1C,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC;KACb,GAAG,IAAI,CAAC,CAAC;IAEV;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpD;;OAEG;IACH,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,WAAW,CAC1B,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,QAAQ,SAAS,WAAW,GAAG,WAAW;IAE1C,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,QAAQ,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY,CAC3B,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW;IAE1C,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC;KACb,GAAG,IAAI,CAAC,CAAC;IAEV;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpD;;OAEG;IACH,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,WAAW,CAC1B,KAAK,SAAS,QAAQ,GAAG,QAAQ,EACjC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,QAAQ,SAAS,UAAU,GAAG,UAAU;IAExC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,QAAQ,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;CAC1B"}

package/dist/config/index.d.ts

@@ -10,7 +10,7 @@
  * @example
  * ```typescript
  * import { object, string, number } from 'valibot';
- * import { createConfig, dotenvProvider, envProvider } from 'glasswork';
+ * import { createConfig, dotenvProvider, envProvider } from 'glasswork/core';
  *
  * // Define schema
  * const configSchema = object({

package/dist/config/index.js

@@ -10,7 +10,7 @@
  * @example
  * ```typescript
  * import { object, string, number } from 'valibot';
- * import { createConfig, dotenvProvider, envProvider } from 'glasswork';
+ * import { createConfig, dotenvProvider, envProvider } from 'glasswork/core';
  *
  * // Define schema
  * const configSchema = object({

package/dist/core/bootstrap.d.ts

@@ -1,4 +1,3 @@
-import type { AwilixContainer } from 'awilix';
 import type { BootstrapOptions, BootstrapResult, ModuleConfig } from './types.js';
 /**
  * Bootstrap the application with modules.
@@ -37,20 +36,4 @@ import type { BootstrapOptions, BootstrapResult, ModuleConfig } from './types.js
  * ```
  */
 export declare function bootstrap(rootModule: ModuleConfig, options?: BootstrapOptions): Promise<BootstrapResult>;
-/**
- * Collect all modules (flatten imports recursively)
- * @internal - exported for testing utilities
- */
-export declare function collectModules(rootModule: ModuleConfig): ModuleConfig[];
-/**
- * Validate no circular dependencies between modules
- * @internal - exported for testing utilities
- */
-export declare function validateNoCycles(modules: ModuleConfig[]): void;
-/**
- * Register module providers with Awilix container
- * @internal - exported for testing utilities
- * @returns Array of async factory provider names that need to be resolved
- */
-export declare function registerModuleProviders(module: ModuleConfig, container: AwilixContainer, logger: import('../utils/logger.js').Logger): string[];
 //# sourceMappingURL=bootstrap.d.ts.map

package/dist/core/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/core/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAsB9C,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAKf,YAAY,EAMb,MAAM,YAAY,CAAC;AAwBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,YAAY,EACxB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAgH1B;AA0PD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,EAAE,CAuBvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CA2C9D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,eAAe,EAC1B,MAAM,EAAE,OAAO,oBAAoB,EAAE,MAAM,GAC1C,MAAM,EAAE,CAeV"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/core/bootstrap.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAIf,YAAY,EAKb,MAAM,YAAY,CAAC;AAwBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,YAAY,EACxB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAgH1B"}