hylekit 1.0.2 → 1.0.4

package/README.md

@@ -49,21 +49,52 @@ HyleKit uses a **centralized authentication database** that all your application
 npm install hylekit
 ```
 
-## Environment Variables
+## Configuration
+
+HyleKit uses a **factory pattern** - you pass configuration from your environment at initialization time. This design:
+- ✅ Keeps secrets out of client bundles
+- ✅ Throws runtime errors if factories are called on the client
+- ✅ Gives you full control over configuration
+
+### Required Environment Variables
 
 ```bash
 # Turso Database
 HYLE_DATABASE_URL=libsql://[db-name]-[org].turso.io
 HYLE_DATABASE_AUTH_TOKEN=your-turso-token
 
+# BetterAuth
+BETTER_AUTH_URL=http://localhost:5173  # Your app's URL
+BETTER_AUTH_SECRET=your-random-secret
+
 # Google OAuth
 GOOGLE_CLIENT_ID=your-google-client-id
 GOOGLE_CLIENT_SECRET=your-google-client-secret
+```
+
+### Initialize in Server-Side Code
 
-# App URL
-PUBLIC_APP_URL=http://localhost:5173  # or your production URL
+```typescript
+// lib/auth.ts (server-side only!)
+import { createDb, createAuth } from "hylekit";
+
+export const db = createDb({
+    url: process.env.HYLE_DATABASE_URL!,
+    authToken: process.env.HYLE_DATABASE_AUTH_TOKEN,
+});
+
+export const auth = createAuth(db, {
+    baseURL: process.env.BETTER_AUTH_URL!,
+    secret: process.env.BETTER_AUTH_SECRET!,
+    google: {
+        clientId: process.env.GOOGLE_CLIENT_ID!,
+        clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+    },
+});
 ```
 
+> ⚠️ **Security**: `createDb` and `createAuth` will throw errors if called on the client side to prevent accidental secret exposure.
+
 ## Architecture
 
 HyleKit supports a BFF (Backend-For-Frontend) architecture:
@@ -71,7 +102,7 @@ HyleKit supports a BFF (Backend-For-Frontend) architecture:
 ```
 ┌─────────────────────────────────────────────────────────────────┐
 │  Browser (Client FE)                                            │
-│  └── Uses: hyle.client (signIn, signOut, etc.)                  │
+│  └── Uses: hyle.client (from "hylekit/client")                  │
 └─────────────────────────────────┬───────────────────────────────┘
                                   │
                                   ▼
@@ -95,31 +126,52 @@ HyleKit supports a BFF (Backend-For-Frontend) architecture:
 
 ## SvelteKit Setup
 
-### 1. Create Auth Route Handler
+### 1. Create Server Auth Module
 
-Create the auth API route to handle authentication requests:
+Create your auth instance in a server-only module:
 
 ```typescript
-// src/routes/api/auth/[...auth]/+server.ts
-import hyle from "hylekit";
+// src/lib/server/auth.ts
+import { createDb, createAuth } from "hylekit";
+import { createSvelteKitServer } from "hylekit/sveltekit";
+import { env } from "$env/dynamic/private";
+
+const db = createDb({
+    url: env.HYLE_DATABASE_URL,
+    authToken: env.HYLE_DATABASE_AUTH_TOKEN,
+});
 
-export const { GET, POST } = hyle.server.sveltekit.handler;
+const auth = createAuth(db, {
+    baseURL: env.PUBLIC_APP_URL,
+    secret: env.BETTER_AUTH_SECRET,
+    google: {
+        clientId: env.GOOGLE_CLIENT_ID,
+        clientSecret: env.GOOGLE_CLIENT_SECRET,
+    },
+});
+
+export const { handler, getSession, isAuthenticated, createHandle, makeAuthenticatedCall } = createSvelteKitServer(auth, db);
 ```
 
-### 2. Add Session Hook
+### 2. Create Auth Route Handler
 
-Add the handle hook to populate session data in `event.locals`:
+```typescript
+// src/routes/api/auth/[...auth]/+server.ts
+import { handler } from "$lib/server/auth";
+
+export const { GET, POST } = handler;
+```
+
+### 3. Add Session Hook
 
 ```typescript
 // src/hooks.server.ts
-import hyle from "hylekit";
+import { createHandle } from "$lib/server/auth";
 
-export const handle = hyle.server.sveltekit.createHandle();
+export const handle = createHandle();
 ```
 
-### 3. Extend App.Locals Types
-
-Update your type definitions to include session data:
+### 4. Extend App.Locals Types
 
 ```typescript
 // src/app.d.ts
@@ -137,18 +189,14 @@ declare global {
 export {};
 ```
 
-### 4. Use in Pages
-
-Access session data in your server load functions:
+### 5. Use in Pages
 
 ```typescript
 // src/routes/+page.server.ts
 import type { PageServerLoad } from "./$types";
 
 export const load: PageServerLoad = async ({ locals }) => {
-    return {
-        user: locals.user,
-    };
+    return { user: locals.user };
 };
 ```
 
@@ -170,32 +218,50 @@ export const load: PageServerLoad = async ({ locals }) => {
 
 ## Next.js Setup (App Router)
 
-### 1. Create Auth Route Handler
+### 1. Create Server Auth Module
+
+```typescript
+// lib/auth.ts (server-side only!)
+import { createDb, createAuth } from "hylekit";
+import { createNextJsServer } from "hylekit/nextjs";
 
-Create the auth API route to handle authentication requests:
+const db = createDb({
+    url: process.env.HYLE_DATABASE_URL!,
+    authToken: process.env.HYLE_DATABASE_AUTH_TOKEN,
+});
+
+const auth = createAuth(db, {
+    baseURL: process.env.BETTER_AUTH_URL!,
+    secret: process.env.BETTER_AUTH_SECRET!,
+    google: {
+        clientId: process.env.GOOGLE_CLIENT_ID!,
+        clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+    },
+});
+
+export const { handler, getSession, isAuthenticated, getUser, makeAuthenticatedCall } = createNextJsServer(auth, db);
+```
+
+### 2. Create Auth Route Handler
 
 ```typescript
 // app/api/auth/[...auth]/route.ts
-import hyle from "hylekit";
+import { handler } from "@/lib/auth";
 
-export const { GET, POST } = hyle.server.nextjs.handler;
+export const { GET, POST } = handler;
 ```
 
-### 2. Use in Server Components
-
-Access session data directly in your server components:
+### 3. Use in Server Components
 
 ```typescript
 // app/page.tsx
-import hyle from "hylekit";
+import { getSession } from "@/lib/auth";
 
 export default async function Page() {
-    const session = await hyle.server.nextjs.getSession();
+    const session = await getSession();
     
     if (!session) {
-        return (
-            <a href="/api/auth/sign-in/google">Sign in with Google</a>
-        );
+        return <a href="/api/auth/sign-in/google">Sign in with Google</a>;
     }
     
     return (
@@ -207,24 +273,19 @@ export default async function Page() {
 }
 ```
 
-### 3. Protected Routes
-
-Use the auth helpers to protect routes:
+### 4. Protected Routes
 
 ```typescript
 // app/dashboard/page.tsx
-import hyle from "hylekit";
+import { isAuthenticated, getUser } from "@/lib/auth";
 import { redirect } from "next/navigation";
 
 export default async function DashboardPage() {
-    const isAuth = await hyle.server.nextjs.isAuthenticated();
-    
-    if (!isAuth) {
+    if (!(await isAuthenticated())) {
         redirect("/api/auth/sign-in/google");
     }
     
-    const user = await hyle.server.nextjs.getUser();
-    
+    const user = await getUser();
     return <p>Dashboard for {user?.name}</p>;
 }
 ```
@@ -235,22 +296,25 @@ export default async function DashboardPage() {
 
 ### 1. Setup Express Middleware
 
-Configure the Express middleware to parse authenticated requests:
-
 ```typescript
 // express-app/src/app.ts
 import express from "express";
-import hyle from "hylekit";
+import { createDb, createExpressMiddleware } from "hylekit";
 
 const app = express();
 
-// Option 1: Trust headers from BFF (internal calls only)
-app.use(hyle.server.express.middleware({
+// Option 1: Trust headers from BFF (no DB needed)
+app.use(createExpressMiddleware()({
     unauthenticatedRoutes: ["/health", "/public/*"],
 }));
 
 // Option 2: Verify sessions against DB (for service-to-service calls)
-app.use(hyle.server.express.middleware({
+const db = createDb({
+    url: process.env.HYLE_DATABASE_URL!,
+    authToken: process.env.HYLE_DATABASE_AUTH_TOKEN,
+});
+
+app.use(createExpressMiddleware(db)({
     unauthenticatedRoutes: ["/health", "/public/*"],
     verifySession: true,  // Checks session in Turso DB
 }));
@@ -311,13 +375,16 @@ app.post("/api/order", (req, res) => {
 Use the BFF client to make authenticated calls from your frontend backend:
 
 ```typescript
-// Next.js: app/api/data/route.ts
+// Next.js: lib/bff.ts
 import { createNextJsBff } from "hylekit";
+import { auth } from "./auth";  // Your auth instance from step 1
+
+export const bff = createNextJsBff(auth, process.env.EXPRESS_API_URL!);
 
-const bff = createNextJsBff(process.env.EXPRESS_API_URL!);
+// Usage in app/api/data/route.ts
+import { bff } from "@/lib/bff";
 
 export async function GET() {
-    // Session is automatically attached to the request
     const data = await bff.get("/api/profile");
     return Response.json(data);
 }
@@ -374,34 +441,34 @@ const { user, session, account, verification } = hyle.schema;
 
 The library exports a default `hyle` object containing:
 
-### `hyle.server`
+### `hyle.server` (Server-Only)
 
-#### `hyle.server.sveltekit`
+#### `hylekit/sveltekit`
 - `handler`: `{ GET, POST }` route handlers.
 - `createHandle()`: Creates a SvelteKit handle hook.
 - `getSession(event)`: Get session from request event.
 - `isAuthenticated(event)`: Check if user is authenticated.
 - `makeAuthenticatedCall(fn)`: Wrapper to ensure authentication.
 
-#### `hyle.server.nextjs`
+#### `hylekit/nextjs`
 - `handler`: `{ GET, POST }` route handlers.
 - `getSession()`: Get session from current request headers.
 - `isAuthenticated()`: Check if user is authenticated.
 - `getUser()`: Get current user object.
 - `makeAuthenticatedCall(fn)`: Wrapper to ensure authentication.
 
-#### `hyle.server.express`
+#### `hylekit/server/express` (or `hylekit`)
 - `middleware(options)`: Express middleware for session verification.
 - `isAuthenticated(req)`: Type guard to check if request is authenticated.
 - `getAuthContext(req)`: Get `{ user, session }` from request (throws if not authenticated).
 
-### `hyle.client`
+### `hyle.client` (Client-Only)
 
-#### `hyle.client.sveltekit`
+#### `hylekit/client` or `hylekit/client/sveltekit`
 - `login`: Alias for `signIn`.
 - All `better-auth/svelte` client methods.
 
-#### `hyle.client.nextjs`
+#### `hylekit/client` or `hylekit/client/nextjs`
 - `login`: Alias for `signIn`.
 - All `better-auth/react` client methods.
 

package/dist/bff/index.cjs

@@ -68,149 +68,15 @@ var BffClientBase = class {
 
 // src/bff/nextjs.ts
 var import_headers = require("next/headers");
-
-// src/lib/auth.ts
-var import_better_auth = require("better-auth");
-var import_drizzle = require("better-auth/adapters/drizzle");
-
-// src/lib/db.ts
-var import_libsql = require("drizzle-orm/libsql");
-var import_client = require("@libsql/client");
-
-// src/lib/schema.ts
-var schema_exports = {};
-__export(schema_exports, {
-  account: () => account,
-  accountRelations: () => accountRelations,
-  session: () => session,
-  sessionRelations: () => sessionRelations,
-  user: () => user,
-  userRelations: () => userRelations,
-  verification: () => verification
-});
-var import_drizzle_orm = require("drizzle-orm");
-var import_sqlite_core = require("drizzle-orm/sqlite-core");
-var user = (0, import_sqlite_core.sqliteTable)("user", {
-  id: (0, import_sqlite_core.text)("id").primaryKey(),
-  name: (0, import_sqlite_core.text)("name").notNull(),
-  email: (0, import_sqlite_core.text)("email").notNull().unique(),
-  emailVerified: (0, import_sqlite_core.integer)("email_verified", { mode: "boolean" }).default(false).notNull(),
-  image: (0, import_sqlite_core.text)("image"),
-  createdAt: (0, import_sqlite_core.integer)("created_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).notNull(),
-  updatedAt: (0, import_sqlite_core.integer)("updated_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).$onUpdate(() => /* @__PURE__ */ new Date()).notNull()
-});
-var session = (0, import_sqlite_core.sqliteTable)(
-  "session",
-  {
-    id: (0, import_sqlite_core.text)("id").primaryKey(),
-    expiresAt: (0, import_sqlite_core.integer)("expires_at", { mode: "timestamp_ms" }).notNull(),
-    token: (0, import_sqlite_core.text)("token").notNull().unique(),
-    createdAt: (0, import_sqlite_core.integer)("created_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).notNull(),
-    updatedAt: (0, import_sqlite_core.integer)("updated_at", { mode: "timestamp_ms" }).$onUpdate(() => /* @__PURE__ */ new Date()).notNull(),
-    ipAddress: (0, import_sqlite_core.text)("ip_address"),
-    userAgent: (0, import_sqlite_core.text)("user_agent"),
-    userId: (0, import_sqlite_core.text)("user_id").notNull().references(() => user.id, { onDelete: "cascade" })
-  },
-  (table) => [(0, import_sqlite_core.index)("session_userId_idx").on(table.userId)]
-);
-var account = (0, import_sqlite_core.sqliteTable)(
-  "account",
-  {
-    id: (0, import_sqlite_core.text)("id").primaryKey(),
-    accountId: (0, import_sqlite_core.text)("account_id").notNull(),
-    providerId: (0, import_sqlite_core.text)("provider_id").notNull(),
-    userId: (0, import_sqlite_core.text)("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
-    accessToken: (0, import_sqlite_core.text)("access_token"),
-    refreshToken: (0, import_sqlite_core.text)("refresh_token"),
-    idToken: (0, import_sqlite_core.text)("id_token"),
-    accessTokenExpiresAt: (0, import_sqlite_core.integer)("access_token_expires_at", {
-      mode: "timestamp_ms"
-    }),
-    refreshTokenExpiresAt: (0, import_sqlite_core.integer)("refresh_token_expires_at", {
-      mode: "timestamp_ms"
-    }),
-    scope: (0, import_sqlite_core.text)("scope"),
-    password: (0, import_sqlite_core.text)("password"),
-    createdAt: (0, import_sqlite_core.integer)("created_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).notNull(),
-    updatedAt: (0, import_sqlite_core.integer)("updated_at", { mode: "timestamp_ms" }).$onUpdate(() => /* @__PURE__ */ new Date()).notNull()
-  },
-  (table) => [(0, import_sqlite_core.index)("account_userId_idx").on(table.userId)]
-);
-var verification = (0, import_sqlite_core.sqliteTable)(
-  "verification",
-  {
-    id: (0, import_sqlite_core.text)("id").primaryKey(),
-    identifier: (0, import_sqlite_core.text)("identifier").notNull(),
-    value: (0, import_sqlite_core.text)("value").notNull(),
-    expiresAt: (0, import_sqlite_core.integer)("expires_at", { mode: "timestamp_ms" }).notNull(),
-    createdAt: (0, import_sqlite_core.integer)("created_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).notNull(),
-    updatedAt: (0, import_sqlite_core.integer)("updated_at", { mode: "timestamp_ms" }).default(import_drizzle_orm.sql`(cast(unixepoch('subsecond') * 1000 as integer))`).$onUpdate(() => /* @__PURE__ */ new Date()).notNull()
-  },
-  (table) => [(0, import_sqlite_core.index)("verification_identifier_idx").on(table.identifier)]
-);
-var userRelations = (0, import_drizzle_orm.relations)(user, ({ many }) => ({
-  sessions: many(session),
-  accounts: many(account)
-}));
-var sessionRelations = (0, import_drizzle_orm.relations)(session, ({ one }) => ({
-  user: one(user, {
-    fields: [session.userId],
-    references: [user.id]
-  })
-}));
-var accountRelations = (0, import_drizzle_orm.relations)(account, ({ one }) => ({
-  user: one(user, {
-    fields: [account.userId],
-    references: [user.id]
-  })
-}));
-
-// src/lib/db.ts
-var client = (0, import_client.createClient)({
-  url: process.env.DATABASE_URL,
-  authToken: process.env.DATABASE_AUTH_TOKEN
-});
-var db = (0, import_libsql.drizzle)(client, { schema: schema_exports });
-
-// src/lib/auth.ts
-var auth = (0, import_better_auth.betterAuth)({
-  database: (0, import_drizzle.drizzleAdapter)(db, {
-    provider: "sqlite",
-    schema: {
-      ...schema_exports
-    }
-  }),
-  baseURL: process.env.BETTER_AUTH_URL || process.env.PUBLIC_APP_URL || process.env.NEXT_PUBLIC_APP_URL,
-  secret: process.env.BETTER_AUTH_SECRET,
-  trustedOrigins: process.env.TRUSTED_ORIGINS ? process.env.TRUSTED_ORIGINS.split(",") : void 0,
-  socialProviders: {
-    google: {
-      clientId: process.env.GOOGLE_CLIENT_ID || "",
-      clientSecret: process.env.GOOGLE_CLIENT_SECRET || ""
-    }
-  },
-  session: {
-    expiresIn: 60 * 60 * 24 * 7,
-    // 7 days
-    updateAge: 60 * 60 * 24,
-    // Update session every 24 hours
-    cookieCache: {
-      enabled: true,
-      maxAge: 60 * 5
-      // 5 minutes
-    }
-  }
-});
-
-// src/bff/nextjs.ts
 var NextJsBffClient = class extends BffClientBase {
-  constructor(config) {
+  constructor(auth, config) {
     super(config);
+    this.auth = auth;
   }
   async getAuthHeaders() {
     try {
       const requestHeaders = await (0, import_headers.headers)();
-      const sessionData = await auth.api.getSession({
+      const sessionData = await this.auth.api.getSession({
         headers: requestHeaders
       });
       if (!sessionData) return {};
@@ -276,9 +142,9 @@ var NextJsBffClient = class extends BffClientBase {
     });
   }
 };
-var createNextJsBff = (baseUrlOrConfig) => {
+var createNextJsBff = (auth, baseUrlOrConfig) => {
   const config = typeof baseUrlOrConfig === "string" ? { baseUrl: baseUrlOrConfig } : baseUrlOrConfig;
-  return new NextJsBffClient(config);
+  return new NextJsBffClient(auth, config);
 };
 
 // src/bff/sveltekit.ts

package/dist/bff/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/bff/index.ts","../../src/bff/client.ts","../../src/bff/nextjs.ts","../../src/lib/auth.ts","../../src/lib/db.ts","../../src/lib/schema.ts","../../src/bff/sveltekit.ts"],"sourcesContent":["// Export BFF clients\nexport { createNextJsBff } from \"./nextjs\";\nexport { createSvelteKitBff } from \"./sveltekit\";\nexport type { BffClientConfig, RequestOptions } from \"./types\";\n","import type { BffClientConfig, FetchMethod, RequestOptions } from \"./types\";\n\n/**\n * Base client logic.\n */\nexport class BffClientBase {\n    constructor(private config: BffClientConfig) {}\n\n    protected async request<T>(\n        path: string,\n        method: FetchMethod,\n        options: RequestOptions = {}\n    ): Promise<T> {\n        const url = new URL(path, this.config.baseUrl);\n        \n        if (options.query) {\n            Object.entries(options.query).forEach(([key, value]) => {\n                if (value !== undefined) {\n                    url.searchParams.append(key, String(value));\n                }\n            });\n        }\n\n        const headers = new Headers(options.headers || {});\n        \n        // Add default headers\n        if (this.config.headers) {\n            Object.entries(this.config.headers).forEach(([key, value]) => {\n                if (!headers.has(key)) {\n                    headers.set(key, value);\n                }\n            });\n        }\n\n        // Set Content-Type if body is present and not FormData\n        if (options.body && !(options.body instanceof FormData) && !headers.has(\"Content-Type\")) {\n            headers.set(\"Content-Type\", \"application/json\");\n        }\n\n        const response = await fetch(url.toString(), {\n            ...options,\n            method,\n            headers,\n        });\n\n        if (!response.ok) {\n            throw new Error(`BFF Request Failed: ${response.status} ${response.statusText}`);\n        }\n\n        // Retrieve the Content-Type header to check if the response is JSON\n        const contentType = response.headers.get(\"content-type\");\n        if (contentType && contentType.includes(\"application/json\")) {\n            return response.json() as Promise<T>;\n        }\n        \n        return response.text() as unknown as Promise<T>;\n    }\n}\n","import { BffClientBase } from \"./client\";\nimport type { BffClientConfig, RequestOptions } from \"./types\";\nimport { headers } from \"next/headers\";\nimport { auth } from \"../lib/auth\";\n\nexport class NextJsBffClient extends BffClientBase {\n    constructor(config: BffClientConfig) {\n        super(config);\n    }\n\n    private async getAuthHeaders(): Promise<Record<string, string>> {\n        try {\n            const requestHeaders = await headers();\n            const sessionData = await auth.api.getSession({\n                headers: requestHeaders\n            });\n\n            if (!sessionData) return {};\n\n            return {\n                \"x-hyle-user\": Buffer.from(JSON.stringify(sessionData.user)).toString(\"base64\"),\n                \"x-hyle-session\": Buffer.from(JSON.stringify(sessionData.session)).toString(\"base64\")\n            };\n        } catch (e) {\n            // Context where headers() is not available (e.g. static generation)\n            return {};\n        }\n    }\n\n    async get<T>(path: string, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"GET\", { \n            ...options,\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async post<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"POST\", { \n            ...options, \n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async put<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"PUT\", { \n            ...options, \n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async patch<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"PATCH\", { \n            ...options, \n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async delete<T>(path: string, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"DELETE\", { \n            ...options,\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n}\n\nexport const createNextJsBff = (baseUrlOrConfig: string | BffClientConfig) => {\n    const config = typeof baseUrlOrConfig === \"string\" \n        ? { baseUrl: baseUrlOrConfig } \n        : baseUrlOrConfig;\n    return new NextJsBffClient(config);\n};\n","import { betterAuth } from \"better-auth\";\nimport { drizzleAdapter } from \"better-auth/adapters/drizzle\";\nimport { db } from \"./db\";\nimport * as schema from \"./schema\";\n\nexport const auth = betterAuth({\n    database: drizzleAdapter(db, {\n        provider: \"sqlite\",\n        schema: {\n            ...schema\n        }\n    }),\n    baseURL: process.env.BETTER_AUTH_URL || process.env.PUBLIC_APP_URL || process.env.NEXT_PUBLIC_APP_URL,\n    secret: process.env.BETTER_AUTH_SECRET,\n    trustedOrigins: process.env.TRUSTED_ORIGINS ? process.env.TRUSTED_ORIGINS.split(\",\") : undefined,\n    socialProviders: {\n        google: {\n            clientId: process.env.GOOGLE_CLIENT_ID || \"\",\n            clientSecret: process.env.GOOGLE_CLIENT_SECRET || \"\",\n        },\n    },\n    session: {\n        expiresIn: 60 * 60 * 24 * 7, // 7 days\n        updateAge: 60 * 60 * 24, // Update session every 24 hours\n        cookieCache: {\n            enabled: true,\n            maxAge: 60 * 5, // 5 minutes\n        },\n    },\n});\n","import { drizzle } from \"drizzle-orm/libsql\";\nimport { createClient } from \"@libsql/client\";\nimport * as schema from \"./schema\";\n\nconst client = createClient({\n    url: process.env.DATABASE_URL!,\n    authToken: process.env.DATABASE_AUTH_TOKEN!,\n});\n\nexport const db = drizzle(client, { schema });\n","import { relations, sql } from \"drizzle-orm\";\nimport { sqliteTable, text, integer, index } from \"drizzle-orm/sqlite-core\";\n\nexport const user = sqliteTable(\"user\", {\n  id: text(\"id\").primaryKey(),\n  name: text(\"name\").notNull(),\n  email: text(\"email\").notNull().unique(),\n  emailVerified: integer(\"email_verified\", { mode: \"boolean\" })\n    .default(false)\n    .notNull(),\n  image: text(\"image\"),\n  createdAt: integer(\"created_at\", { mode: \"timestamp_ms\" })\n    .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n    .notNull(),\n  updatedAt: integer(\"updated_at\", { mode: \"timestamp_ms\" })\n    .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n    .$onUpdate(() => /* @__PURE__ */ new Date())\n    .notNull(),\n});\n\nexport const session = sqliteTable(\n  \"session\",\n  {\n    id: text(\"id\").primaryKey(),\n    expiresAt: integer(\"expires_at\", { mode: \"timestamp_ms\" }).notNull(),\n    token: text(\"token\").notNull().unique(),\n    createdAt: integer(\"created_at\", { mode: \"timestamp_ms\" })\n      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n      .notNull(),\n    updatedAt: integer(\"updated_at\", { mode: \"timestamp_ms\" })\n      .$onUpdate(() => /* @__PURE__ */ new Date())\n      .notNull(),\n    ipAddress: text(\"ip_address\"),\n    userAgent: text(\"user_agent\"),\n    userId: text(\"user_id\")\n      .notNull()\n      .references(() => user.id, { onDelete: \"cascade\" }),\n  },\n  (table) => [index(\"session_userId_idx\").on(table.userId)],\n);\n\nexport const account = sqliteTable(\n  \"account\",\n  {\n    id: text(\"id\").primaryKey(),\n    accountId: text(\"account_id\").notNull(),\n    providerId: text(\"provider_id\").notNull(),\n    userId: text(\"user_id\")\n      .notNull()\n      .references(() => user.id, { onDelete: \"cascade\" }),\n    accessToken: text(\"access_token\"),\n    refreshToken: text(\"refresh_token\"),\n    idToken: text(\"id_token\"),\n    accessTokenExpiresAt: integer(\"access_token_expires_at\", {\n      mode: \"timestamp_ms\",\n    }),\n    refreshTokenExpiresAt: integer(\"refresh_token_expires_at\", {\n      mode: \"timestamp_ms\",\n    }),\n    scope: text(\"scope\"),\n    password: text(\"password\"),\n    createdAt: integer(\"created_at\", { mode: \"timestamp_ms\" })\n      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n      .notNull(),\n    updatedAt: integer(\"updated_at\", { mode: \"timestamp_ms\" })\n      .$onUpdate(() => /* @__PURE__ */ new Date())\n      .notNull(),\n  },\n  (table) => [index(\"account_userId_idx\").on(table.userId)],\n);\n\nexport const verification = sqliteTable(\n  \"verification\",\n  {\n    id: text(\"id\").primaryKey(),\n    identifier: text(\"identifier\").notNull(),\n    value: text(\"value\").notNull(),\n    expiresAt: integer(\"expires_at\", { mode: \"timestamp_ms\" }).notNull(),\n    createdAt: integer(\"created_at\", { mode: \"timestamp_ms\" })\n      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n      .notNull(),\n    updatedAt: integer(\"updated_at\", { mode: \"timestamp_ms\" })\n      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)\n      .$onUpdate(() => /* @__PURE__ */ new Date())\n      .notNull(),\n  },\n  (table) => [index(\"verification_identifier_idx\").on(table.identifier)],\n);\n\nexport const userRelations = relations(user, ({ many }) => ({\n  sessions: many(session),\n  accounts: many(account),\n}));\n\nexport const sessionRelations = relations(session, ({ one }) => ({\n  user: one(user, {\n    fields: [session.userId],\n    references: [user.id],\n  }),\n}));\n\nexport const accountRelations = relations(account, ({ one }) => ({\n  user: one(user, {\n    fields: [account.userId],\n    references: [user.id],\n  }),\n}));\n","import { BffClientBase } from \"./client\";\nimport type { BffClientConfig, RequestOptions } from \"./types\";\nimport type { RequestEvent } from \"@sveltejs/kit\";\n\nexport class SvelteKitBffClient extends BffClientBase {\n    constructor(config: BffClientConfig) {\n        super(config);\n    }\n\n    /**\n     * Creates a request context bound to a specific SvelteKit event.\n     * This is necessary because SvelteKit doesn't have global request storage.\n     */\n    with(event: RequestEvent) {\n        // Extract token from locals if available (set by our handle hook)\n        // or try to get it from session.\n        const sessionData = (event.locals as any).session;\n        let authHeaders: Record<string, string> = {};\n\n        if (sessionData?.user && sessionData?.session) {\n            authHeaders = {\n                \"x-hyle-user\": Buffer.from(JSON.stringify(sessionData.user)).toString(\"base64\"),\n                \"x-hyle-session\": Buffer.from(JSON.stringify(sessionData.session)).toString(\"base64\")\n            };\n        }\n\n        return {\n            get: <T>(path: string, options?: RequestOptions) => \n                this.request<T>(path, \"GET\", {\n                    ...options,\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n            \n            post: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"POST\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            put: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"PUT\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            patch: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"PATCH\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            delete: <T>(path: string, options?: RequestOptions) => \n                this.request<T>(path, \"DELETE\", {\n                    ...options,\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n        };\n    }\n}\n\nexport const createSvelteKitBff = (baseUrlOrConfig: string | BffClientConfig) => {\n    const config = typeof baseUrlOrConfig === \"string\" \n        ? { baseUrl: baseUrlOrConfig } \n        : baseUrlOrConfig;\n    return new SvelteKitBffClient(config);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKO,IAAM,gBAAN,MAAoB;AAAA,EACvB,YAAoB,QAAyB;AAAzB;AAAA,EAA0B;AAAA,EAE9C,MAAgB,QACZ,MACA,QACA,UAA0B,CAAC,GACjB;AACV,UAAM,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO,OAAO;AAE7C,QAAI,QAAQ,OAAO;AACf,aAAO,QAAQ,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACpD,YAAI,UAAU,QAAW;AACrB,cAAI,aAAa,OAAO,KAAK,OAAO,KAAK,CAAC;AAAA,QAC9C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAMA,WAAU,IAAI,QAAQ,QAAQ,WAAW,CAAC,CAAC;AAGjD,QAAI,KAAK,OAAO,SAAS;AACrB,aAAO,QAAQ,KAAK,OAAO,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC1D,YAAI,CAACA,SAAQ,IAAI,GAAG,GAAG;AACnB,UAAAA,SAAQ,IAAI,KAAK,KAAK;AAAA,QAC1B;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ,EAAE,QAAQ,gBAAgB,aAAa,CAACA,SAAQ,IAAI,cAAc,GAAG;AACrF,MAAAA,SAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAClD;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACzC,GAAG;AAAA,MACH;AAAA,MACA,SAAAA;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,IAAI,MAAM,uBAAuB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACnF;AAGA,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,QAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AACzD,aAAO,SAAS,KAAK;AAAA,IACzB;AAEA,WAAO,SAAS,KAAK;AAAA,EACzB;AACJ;;;ACvDA,qBAAwB;;;ACFxB,yBAA2B;AAC3B,qBAA+B;;;ACD/B,oBAAwB;AACxB,oBAA6B;;;ACD7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA+B;AAC/B,yBAAkD;AAE3C,IAAM,WAAO,gCAAY,QAAQ;AAAA,EACtC,QAAI,yBAAK,IAAI,EAAE,WAAW;AAAA,EAC1B,UAAM,yBAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,WAAO,yBAAK,OAAO,EAAE,QAAQ,EAAE,OAAO;AAAA,EACtC,mBAAe,4BAAQ,kBAAkB,EAAE,MAAM,UAAU,CAAC,EACzD,QAAQ,KAAK,EACb,QAAQ;AAAA,EACX,WAAO,yBAAK,OAAO;AAAA,EACnB,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,QAAQ;AAAA,EACX,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,UAAU,MAAsB,oBAAI,KAAK,CAAC,EAC1C,QAAQ;AACb,CAAC;AAEM,IAAM,cAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,QAAI,yBAAK,IAAI,EAAE,WAAW;AAAA,IAC1B,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EAAE,QAAQ;AAAA,IACnE,WAAO,yBAAK,OAAO,EAAE,QAAQ,EAAE,OAAO;AAAA,IACtC,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,QAAQ;AAAA,IACX,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,UAAU,MAAsB,oBAAI,KAAK,CAAC,EAC1C,QAAQ;AAAA,IACX,eAAW,yBAAK,YAAY;AAAA,IAC5B,eAAW,yBAAK,YAAY;AAAA,IAC5B,YAAQ,yBAAK,SAAS,EACnB,QAAQ,EACR,WAAW,MAAM,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,EACtD;AAAA,EACA,CAAC,UAAU,KAAC,0BAAM,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC;AAC1D;AAEO,IAAM,cAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,QAAI,yBAAK,IAAI,EAAE,WAAW;AAAA,IAC1B,eAAW,yBAAK,YAAY,EAAE,QAAQ;AAAA,IACtC,gBAAY,yBAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,YAAQ,yBAAK,SAAS,EACnB,QAAQ,EACR,WAAW,MAAM,KAAK,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IACpD,iBAAa,yBAAK,cAAc;AAAA,IAChC,kBAAc,yBAAK,eAAe;AAAA,IAClC,aAAS,yBAAK,UAAU;AAAA,IACxB,0BAAsB,4BAAQ,2BAA2B;AAAA,MACvD,MAAM;AAAA,IACR,CAAC;AAAA,IACD,2BAAuB,4BAAQ,4BAA4B;AAAA,MACzD,MAAM;AAAA,IACR,CAAC;AAAA,IACD,WAAO,yBAAK,OAAO;AAAA,IACnB,cAAU,yBAAK,UAAU;AAAA,IACzB,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,QAAQ;AAAA,IACX,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,UAAU,MAAsB,oBAAI,KAAK,CAAC,EAC1C,QAAQ;AAAA,EACb;AAAA,EACA,CAAC,UAAU,KAAC,0BAAM,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC;AAC1D;AAEO,IAAM,mBAAe;AAAA,EAC1B;AAAA,EACA;AAAA,IACE,QAAI,yBAAK,IAAI,EAAE,WAAW;AAAA,IAC1B,gBAAY,yBAAK,YAAY,EAAE,QAAQ;AAAA,IACvC,WAAO,yBAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EAAE,QAAQ;AAAA,IACnE,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,QAAQ;AAAA,IACX,eAAW,4BAAQ,cAAc,EAAE,MAAM,eAAe,CAAC,EACtD,QAAQ,wEAAqD,EAC7D,UAAU,MAAsB,oBAAI,KAAK,CAAC,EAC1C,QAAQ;AAAA,EACb;AAAA,EACA,CAAC,UAAU,KAAC,0BAAM,6BAA6B,EAAE,GAAG,MAAM,UAAU,CAAC;AACvE;AAEO,IAAM,oBAAgB,8BAAU,MAAM,CAAC,EAAE,KAAK,OAAO;AAAA,EAC1D,UAAU,KAAK,OAAO;AAAA,EACtB,UAAU,KAAK,OAAO;AACxB,EAAE;AAEK,IAAM,uBAAmB,8BAAU,SAAS,CAAC,EAAE,IAAI,OAAO;AAAA,EAC/D,MAAM,IAAI,MAAM;AAAA,IACd,QAAQ,CAAC,QAAQ,MAAM;AAAA,IACvB,YAAY,CAAC,KAAK,EAAE;AAAA,EACtB,CAAC;AACH,EAAE;AAEK,IAAM,uBAAmB,8BAAU,SAAS,CAAC,EAAE,IAAI,OAAO;AAAA,EAC/D,MAAM,IAAI,MAAM;AAAA,IACd,QAAQ,CAAC,QAAQ,MAAM;AAAA,IACvB,YAAY,CAAC,KAAK,EAAE;AAAA,EACtB,CAAC;AACH,EAAE;;;ADtGF,IAAM,aAAS,4BAAa;AAAA,EACxB,KAAK,QAAQ,IAAI;AAAA,EACjB,WAAW,QAAQ,IAAI;AAC3B,CAAC;AAEM,IAAM,SAAK,uBAAQ,QAAQ,EAAE,uBAAO,CAAC;;;ADJrC,IAAM,WAAO,+BAAW;AAAA,EAC3B,cAAU,+BAAe,IAAI;AAAA,IACzB,UAAU;AAAA,IACV,QAAQ;AAAA,MACJ,GAAG;AAAA,IACP;AAAA,EACJ,CAAC;AAAA,EACD,SAAS,QAAQ,IAAI,mBAAmB,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAAA,EAClF,QAAQ,QAAQ,IAAI;AAAA,EACpB,gBAAgB,QAAQ,IAAI,kBAAkB,QAAQ,IAAI,gBAAgB,MAAM,GAAG,IAAI;AAAA,EACvF,iBAAiB;AAAA,IACb,QAAQ;AAAA,MACJ,UAAU,QAAQ,IAAI,oBAAoB;AAAA,MAC1C,cAAc,QAAQ,IAAI,wBAAwB;AAAA,IACtD;AAAA,EACJ;AAAA,EACA,SAAS;AAAA,IACL,WAAW,KAAK,KAAK,KAAK;AAAA;AAAA,IAC1B,WAAW,KAAK,KAAK;AAAA;AAAA,IACrB,aAAa;AAAA,MACT,SAAS;AAAA,MACT,QAAQ,KAAK;AAAA;AAAA,IACjB;AAAA,EACJ;AACJ,CAAC;;;ADxBM,IAAM,kBAAN,cAA8B,cAAc;AAAA,EAC/C,YAAY,QAAyB;AACjC,UAAM,MAAM;AAAA,EAChB;AAAA,EAEA,MAAc,iBAAkD;AAC5D,QAAI;AACA,YAAM,iBAAiB,UAAM,wBAAQ;AACrC,YAAM,cAAc,MAAM,KAAK,IAAI,WAAW;AAAA,QAC1C,SAAS;AAAA,MACb,CAAC;AAED,UAAI,CAAC,YAAa,QAAO,CAAC;AAE1B,aAAO;AAAA,QACH,eAAe,OAAO,KAAK,KAAK,UAAU,YAAY,IAAI,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC9E,kBAAkB,OAAO,KAAK,KAAK,UAAU,YAAY,OAAO,CAAC,EAAE,SAAS,QAAQ;AAAA,MACxF;AAAA,IACJ,SAAS,GAAG;AAER,aAAO,CAAC;AAAA,IACZ;AAAA,EACJ;AAAA,EAEA,MAAM,IAAO,MAAc,SAAsC;AAC7D,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,OAAO;AAAA,MAChC,GAAG;AAAA,MACH,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,KAAQ,MAAc,MAAY,SAAsC;AAC1E,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,QAAQ;AAAA,MACjC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,IAAO,MAAc,MAAY,SAAsC;AACzE,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,OAAO;AAAA,MAChC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,MAAS,MAAc,MAAY,SAAsC;AAC3E,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,SAAS;AAAA,MAClC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAU,MAAc,SAAsC;AAChE,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,UAAU;AAAA,MACnC,GAAG;AAAA,MACH,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAEO,IAAM,kBAAkB,CAAC,oBAA8C;AAC1E,QAAM,SAAS,OAAO,oBAAoB,WACpC,EAAE,SAAS,gBAAgB,IAC3B;AACN,SAAO,IAAI,gBAAgB,MAAM;AACrC;;;AIzFO,IAAM,qBAAN,cAAiC,cAAc;AAAA,EAClD,YAAY,QAAyB;AACjC,UAAM,MAAM;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAK,OAAqB;AAGtB,UAAM,cAAe,MAAM,OAAe;AAC1C,QAAI,cAAsC,CAAC;AAE3C,QAAI,aAAa,QAAQ,aAAa,SAAS;AAC3C,oBAAc;AAAA,QACV,eAAe,OAAO,KAAK,KAAK,UAAU,YAAY,IAAI,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC9E,kBAAkB,OAAO,KAAK,KAAK,UAAU,YAAY,OAAO,CAAC,EAAE,SAAS,QAAQ;AAAA,MACxF;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,KAAK,CAAI,MAAc,YACnB,KAAK,QAAW,MAAM,OAAO;AAAA,QACzB,GAAG;AAAA,QACH,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,MAAM,CAAI,MAAc,MAAY,YAChC,KAAK,QAAW,MAAM,QAAQ;AAAA,QAC1B,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,KAAK,CAAI,MAAc,MAAY,YAC/B,KAAK,QAAW,MAAM,OAAO;AAAA,QACzB,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,OAAO,CAAI,MAAc,MAAY,YACjC,KAAK,QAAW,MAAM,SAAS;AAAA,QAC3B,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,QAAQ,CAAI,MAAc,YACtB,KAAK,QAAW,MAAM,UAAU;AAAA,QAC5B,GAAG;AAAA,QACH,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,IACT;AAAA,EACJ;AACJ;AAEO,IAAM,qBAAqB,CAAC,oBAA8C;AAC7E,QAAM,SAAS,OAAO,oBAAoB,WACpC,EAAE,SAAS,gBAAgB,IAC3B;AACN,SAAO,IAAI,mBAAmB,MAAM;AACxC;","names":["headers"]}
+{"version":3,"sources":["../../src/bff/index.ts","../../src/bff/client.ts","../../src/bff/nextjs.ts","../../src/bff/sveltekit.ts"],"sourcesContent":["// Export BFF clients\nexport { createNextJsBff } from \"./nextjs\";\nexport { createSvelteKitBff } from \"./sveltekit\";\nexport type { BffClientConfig, RequestOptions } from \"./types\";\n","import type { BffClientConfig, FetchMethod, RequestOptions } from \"./types\";\n\n/**\n * Base client logic.\n */\nexport class BffClientBase {\n    constructor(private config: BffClientConfig) {}\n\n    protected async request<T>(\n        path: string,\n        method: FetchMethod,\n        options: RequestOptions = {}\n    ): Promise<T> {\n        const url = new URL(path, this.config.baseUrl);\n        \n        if (options.query) {\n            Object.entries(options.query).forEach(([key, value]) => {\n                if (value !== undefined) {\n                    url.searchParams.append(key, String(value));\n                }\n            });\n        }\n\n        const headers = new Headers(options.headers || {});\n        \n        // Add default headers\n        if (this.config.headers) {\n            Object.entries(this.config.headers).forEach(([key, value]) => {\n                if (!headers.has(key)) {\n                    headers.set(key, value);\n                }\n            });\n        }\n\n        // Set Content-Type if body is present and not FormData\n        if (options.body && !(options.body instanceof FormData) && !headers.has(\"Content-Type\")) {\n            headers.set(\"Content-Type\", \"application/json\");\n        }\n\n        const response = await fetch(url.toString(), {\n            ...options,\n            method,\n            headers,\n        });\n\n        if (!response.ok) {\n            throw new Error(`BFF Request Failed: ${response.status} ${response.statusText}`);\n        }\n\n        // Retrieve the Content-Type header to check if the response is JSON\n        const contentType = response.headers.get(\"content-type\");\n        if (contentType && contentType.includes(\"application/json\")) {\n            return response.json() as Promise<T>;\n        }\n        \n        return response.text() as unknown as Promise<T>;\n    }\n}\n","import { BffClientBase } from \"./client\";\nimport type { BffClientConfig, RequestOptions } from \"./types\";\nimport { headers } from \"next/headers\";\n\n// Type for auth instance created by createAuth\ntype HyleAuth = ReturnType<typeof import(\"better-auth\").betterAuth>;\n\n/**\n * Next.js BFF Client that requires an auth instance.\n */\nexport class NextJsBffClient extends BffClientBase {\n    private auth: HyleAuth;\n\n    constructor(auth: HyleAuth, config: BffClientConfig) {\n        super(config);\n        this.auth = auth;\n    }\n\n    private async getAuthHeaders(): Promise<Record<string, string>> {\n        try {\n            const requestHeaders = await headers();\n            const sessionData = await this.auth.api.getSession({\n                headers: requestHeaders\n            });\n\n            if (!sessionData) return {};\n\n            return {\n                \"x-hyle-user\": Buffer.from(JSON.stringify(sessionData.user)).toString(\"base64\"),\n                \"x-hyle-session\": Buffer.from(JSON.stringify(sessionData.session)).toString(\"base64\")\n            };\n        } catch (e) {\n            // Context where headers() is not available (e.g. static generation)\n            return {};\n        }\n    }\n\n    async get<T>(path: string, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"GET\", {\n            ...options,\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async post<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"POST\", {\n            ...options,\n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async put<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"PUT\", {\n            ...options,\n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async patch<T>(path: string, body?: any, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"PATCH\", {\n            ...options,\n            body: JSON.stringify(body),\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n\n    async delete<T>(path: string, options?: RequestOptions): Promise<T> {\n        const authHeaders = await this.getAuthHeaders();\n        return this.request<T>(path, \"DELETE\", {\n            ...options,\n            headers: {\n                ...options?.headers,\n                ...authHeaders\n            }\n        });\n    }\n}\n\n/**\n * Creates a Next.js BFF client for making authenticated requests to your Express API.\n * \n * @param auth - Auth instance created by createAuth()\n * @param baseUrlOrConfig - Base URL string or full config object\n * \n * @example\n * ```typescript\n * // In lib/bff.ts\n * import { createDb, createAuth, createNextJsBff } from \"hylekit\";\n * \n * const db = createDb({ url: process.env.HYLE_DATABASE_URL!, authToken: process.env.HYLE_DATABASE_AUTH_TOKEN });\n * const auth = createAuth(db, { ... });\n * \n * export const bff = createNextJsBff(auth, process.env.EXPRESS_API_URL!);\n * \n * // Usage in server components\n * const data = await bff.get(\"/api/data\");\n * ```\n */\nexport const createNextJsBff = (auth: HyleAuth, baseUrlOrConfig: string | BffClientConfig) => {\n    const config = typeof baseUrlOrConfig === \"string\"\n        ? { baseUrl: baseUrlOrConfig }\n        : baseUrlOrConfig;\n    return new NextJsBffClient(auth, config);\n};\n","import { BffClientBase } from \"./client\";\nimport type { BffClientConfig, RequestOptions } from \"./types\";\nimport type { RequestEvent } from \"@sveltejs/kit\";\n\nexport class SvelteKitBffClient extends BffClientBase {\n    constructor(config: BffClientConfig) {\n        super(config);\n    }\n\n    /**\n     * Creates a request context bound to a specific SvelteKit event.\n     * This is necessary because SvelteKit doesn't have global request storage.\n     */\n    with(event: RequestEvent) {\n        // Extract token from locals if available (set by our handle hook)\n        // or try to get it from session.\n        const sessionData = (event.locals as any).session;\n        let authHeaders: Record<string, string> = {};\n\n        if (sessionData?.user && sessionData?.session) {\n            authHeaders = {\n                \"x-hyle-user\": Buffer.from(JSON.stringify(sessionData.user)).toString(\"base64\"),\n                \"x-hyle-session\": Buffer.from(JSON.stringify(sessionData.session)).toString(\"base64\")\n            };\n        }\n\n        return {\n            get: <T>(path: string, options?: RequestOptions) => \n                this.request<T>(path, \"GET\", {\n                    ...options,\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n            \n            post: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"POST\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            put: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"PUT\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            patch: <T>(path: string, body?: any, options?: RequestOptions) => \n                this.request<T>(path, \"PATCH\", { \n                    ...options, \n                    body: JSON.stringify(body),\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n\n            delete: <T>(path: string, options?: RequestOptions) => \n                this.request<T>(path, \"DELETE\", {\n                    ...options,\n                    headers: { ...options?.headers, ...authHeaders }\n                }),\n        };\n    }\n}\n\nexport const createSvelteKitBff = (baseUrlOrConfig: string | BffClientConfig) => {\n    const config = typeof baseUrlOrConfig === \"string\" \n        ? { baseUrl: baseUrlOrConfig } \n        : baseUrlOrConfig;\n    return new SvelteKitBffClient(config);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKO,IAAM,gBAAN,MAAoB;AAAA,EACvB,YAAoB,QAAyB;AAAzB;AAAA,EAA0B;AAAA,EAE9C,MAAgB,QACZ,MACA,QACA,UAA0B,CAAC,GACjB;AACV,UAAM,MAAM,IAAI,IAAI,MAAM,KAAK,OAAO,OAAO;AAE7C,QAAI,QAAQ,OAAO;AACf,aAAO,QAAQ,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACpD,YAAI,UAAU,QAAW;AACrB,cAAI,aAAa,OAAO,KAAK,OAAO,KAAK,CAAC;AAAA,QAC9C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAMA,WAAU,IAAI,QAAQ,QAAQ,WAAW,CAAC,CAAC;AAGjD,QAAI,KAAK,OAAO,SAAS;AACrB,aAAO,QAAQ,KAAK,OAAO,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC1D,YAAI,CAACA,SAAQ,IAAI,GAAG,GAAG;AACnB,UAAAA,SAAQ,IAAI,KAAK,KAAK;AAAA,QAC1B;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ,EAAE,QAAQ,gBAAgB,aAAa,CAACA,SAAQ,IAAI,cAAc,GAAG;AACrF,MAAAA,SAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAClD;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACzC,GAAG;AAAA,MACH;AAAA,MACA,SAAAA;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,IAAI,MAAM,uBAAuB,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACnF;AAGA,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,QAAI,eAAe,YAAY,SAAS,kBAAkB,GAAG;AACzD,aAAO,SAAS,KAAK;AAAA,IACzB;AAEA,WAAO,SAAS,KAAK;AAAA,EACzB;AACJ;;;ACvDA,qBAAwB;AAQjB,IAAM,kBAAN,cAA8B,cAAc;AAAA,EAG/C,YAAY,MAAgB,QAAyB;AACjD,UAAM,MAAM;AACZ,SAAK,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc,iBAAkD;AAC5D,QAAI;AACA,YAAM,iBAAiB,UAAM,wBAAQ;AACrC,YAAM,cAAc,MAAM,KAAK,KAAK,IAAI,WAAW;AAAA,QAC/C,SAAS;AAAA,MACb,CAAC;AAED,UAAI,CAAC,YAAa,QAAO,CAAC;AAE1B,aAAO;AAAA,QACH,eAAe,OAAO,KAAK,KAAK,UAAU,YAAY,IAAI,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC9E,kBAAkB,OAAO,KAAK,KAAK,UAAU,YAAY,OAAO,CAAC,EAAE,SAAS,QAAQ;AAAA,MACxF;AAAA,IACJ,SAAS,GAAG;AAER,aAAO,CAAC;AAAA,IACZ;AAAA,EACJ;AAAA,EAEA,MAAM,IAAO,MAAc,SAAsC;AAC7D,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,OAAO;AAAA,MAChC,GAAG;AAAA,MACH,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,KAAQ,MAAc,MAAY,SAAsC;AAC1E,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,QAAQ;AAAA,MACjC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,IAAO,MAAc,MAAY,SAAsC;AACzE,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,OAAO;AAAA,MAChC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,MAAS,MAAc,MAAY,SAAsC;AAC3E,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,SAAS;AAAA,MAClC,GAAG;AAAA,MACH,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAU,MAAc,SAAsC;AAChE,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,WAAO,KAAK,QAAW,MAAM,UAAU;AAAA,MACnC,GAAG;AAAA,MACH,SAAS;AAAA,QACL,GAAG,SAAS;AAAA,QACZ,GAAG;AAAA,MACP;AAAA,IACJ,CAAC;AAAA,EACL;AACJ;AAsBO,IAAM,kBAAkB,CAAC,MAAgB,oBAA8C;AAC1F,QAAM,SAAS,OAAO,oBAAoB,WACpC,EAAE,SAAS,gBAAgB,IAC3B;AACN,SAAO,IAAI,gBAAgB,MAAM,MAAM;AAC3C;;;ACrHO,IAAM,qBAAN,cAAiC,cAAc;AAAA,EAClD,YAAY,QAAyB;AACjC,UAAM,MAAM;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAK,OAAqB;AAGtB,UAAM,cAAe,MAAM,OAAe;AAC1C,QAAI,cAAsC,CAAC;AAE3C,QAAI,aAAa,QAAQ,aAAa,SAAS;AAC3C,oBAAc;AAAA,QACV,eAAe,OAAO,KAAK,KAAK,UAAU,YAAY,IAAI,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC9E,kBAAkB,OAAO,KAAK,KAAK,UAAU,YAAY,OAAO,CAAC,EAAE,SAAS,QAAQ;AAAA,MACxF;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,KAAK,CAAI,MAAc,YACnB,KAAK,QAAW,MAAM,OAAO;AAAA,QACzB,GAAG;AAAA,QACH,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,MAAM,CAAI,MAAc,MAAY,YAChC,KAAK,QAAW,MAAM,QAAQ;AAAA,QAC1B,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,KAAK,CAAI,MAAc,MAAY,YAC/B,KAAK,QAAW,MAAM,OAAO;AAAA,QACzB,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,OAAO,CAAI,MAAc,MAAY,YACjC,KAAK,QAAW,MAAM,SAAS;AAAA,QAC3B,GAAG;AAAA,QACH,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,MAEL,QAAQ,CAAI,MAAc,YACtB,KAAK,QAAW,MAAM,UAAU;AAAA,QAC5B,GAAG;AAAA,QACH,SAAS,EAAE,GAAG,SAAS,SAAS,GAAG,YAAY;AAAA,MACnD,CAAC;AAAA,IACT;AAAA,EACJ;AACJ;AAEO,IAAM,qBAAqB,CAAC,oBAA8C;AAC7E,QAAM,SAAS,OAAO,oBAAoB,WACpC,EAAE,SAAS,gBAAgB,IAC3B;AACN,SAAO,IAAI,mBAAmB,MAAM;AACxC;","names":["headers"]}

package/dist/bff/index.d.cts

@@ -1,2 +1,3 @@
-export { B as BffClientConfig, R as RequestOptions, c as createNextJsBff, a as createSvelteKitBff } from '../index-DYW73KK3.cjs';
+export { B as BffClientConfig, R as RequestOptions, c as createNextJsBff, a as createSvelteKitBff } from '../index-B-5TEr94.cjs';
+import 'better-auth';
 import '@sveltejs/kit';

package/dist/bff/index.d.ts

@@ -1,2 +1,3 @@
-export { B as BffClientConfig, R as RequestOptions, c as createNextJsBff, a as createSvelteKitBff } from '../index-DYW73KK3.js';
+export { B as BffClientConfig, R as RequestOptions, c as createNextJsBff, a as createSvelteKitBff } from '../index-B-5TEr94.js';
+import 'better-auth';
 import '@sveltejs/kit';