pipework 0.1.0

package/dist/rbac/middleware.js

@@ -0,0 +1,9 @@
+import { ForbiddenError } from '../errors/index.js';
+export async function enforcePermission(rbac, db, userId, tenantId, authVersion, resource, action, requiredScope) {
+    const permissions = await rbac.resolve(db, userId, tenantId, authVersion);
+    const granted = rbac.check(permissions, resource, action, requiredScope);
+    if (!granted) {
+        throw new ForbiddenError(`Missing permission: ${resource}:${action}`);
+    }
+}
+//# sourceMappingURL=middleware.js.map

package/dist/rbac/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/rbac/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,EAAM,EACN,MAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,aAAsB;IAEtB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,uBAAuB,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC;AACH,CAAC"}

package/dist/rbac/namespace.d.ts

@@ -0,0 +1,9 @@
+import { createRbac, hasPermission, enforcePermission, scopeSatisfies, PermissionCache } from './index.js';
+export declare const rbac: {
+    create: typeof createRbac;
+    check: typeof hasPermission;
+    enforce: typeof enforcePermission;
+    satisfies: typeof scopeSatisfies;
+    PermissionCache: typeof PermissionCache;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/rbac/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/rbac/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE1G,eAAO,MAAM,IAAI;;;;;;CAMhB,CAAA"}

package/dist/rbac/namespace.js

@@ -0,0 +1,9 @@
+import { createRbac, hasPermission, enforcePermission, scopeSatisfies, PermissionCache } from './index.js';
+export const rbac = {
+    create: createRbac,
+    check: hasPermission,
+    enforce: enforcePermission,
+    satisfies: scopeSatisfies,
+    PermissionCache,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/rbac/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/rbac/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE1G,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,iBAAiB;IAC1B,SAAS,EAAE,cAAc;IACzB,eAAe;CAChB,CAAA"}

package/dist/rbac/resolve.d.ts

@@ -0,0 +1,4 @@
+import type { DB } from '../db/index.js';
+import type { RbacConfig, PermissionSet } from './types.js';
+export declare function resolveUserPermissions(db: DB, userId: string, tenantId: string, authVersion: number, config: RbacConfig): Promise<PermissionSet>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/rbac/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/rbac/resolve.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,YAAY,CAAA;AAG/E,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,aAAa,CAAC,CAwBxB"}

package/dist/rbac/resolve.js

@@ -0,0 +1,24 @@
+import { sql } from '../db/sql.js';
+import { assertValidIdentifier, quoteIdentifier } from '../db/identifiers.js';
+export async function resolveUserPermissions(db, userId, tenantId, authVersion, config) {
+    const userRolesTable = config.table?.userRoles ?? 'pipework_user_roles';
+    const rolePermissionsTable = config.table?.rolePermissions ?? 'pipework_role_permissions';
+    const permissionsTable = config.table?.permissions ?? 'pipework_permissions';
+    assertValidIdentifier(userRolesTable, 'userRoles table');
+    assertValidIdentifier(rolePermissionsTable, 'rolePermissions table');
+    assertValidIdentifier(permissionsTable, 'permissions table');
+    const rows = await db.execute(sql `
+    SELECT p.resource, p.action, rp.scope
+    FROM ${sql.raw(quoteIdentifier(userRolesTable, 'userRoles table'))} ur
+    JOIN ${sql.raw(quoteIdentifier(rolePermissionsTable, 'rolePermissions table'))} rp ON rp.role_id = ur.role_id
+    JOIN ${sql.raw(quoteIdentifier(permissionsTable, 'permissions table'))} p ON p.id = rp.permission_id
+    WHERE ur.user_id = ${userId} AND ur.tenant_id = ${tenantId}
+  `);
+    const permissions = rows.map((row) => ({
+        resource: row['resource'],
+        action: row['action'],
+        scope: row['scope'],
+    }));
+    return { userId, tenantId, authVersion, permissions };
+}
+//# sourceMappingURL=resolve.js.map

package/dist/rbac/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/rbac/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAGlC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAM,EACN,MAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,MAAkB;IAElB,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,qBAAqB,CAAA;IACvE,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,2BAA2B,CAAA;IACzF,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,sBAAsB,CAAA;IAE5E,qBAAqB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;IACxD,qBAAqB,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAA;IACpE,qBAAqB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;IAE5D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;WAExB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;WAC3D,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;WACvE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;yBACjD,MAAM,uBAAuB,QAAQ;GAC3D,CAAC,CAAA;IAEF,MAAM,WAAW,GAAyB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3D,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAW;QACnC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAW;QAC/B,KAAK,EAAE,GAAG,CAAC,OAAO,CAAW;KAC9B,CAAC,CAAC,CAAA;IAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;AACvD,CAAC"}

package/dist/rbac/seed.d.ts

@@ -0,0 +1,4 @@
+import type { DB } from '../db/index.js';
+import type { RbacConfig, SeedData } from './types.js';
+export declare function seedRbac(db: DB, data: SeedData, config: RbacConfig): Promise<void>;
+//# sourceMappingURL=seed.d.ts.map

package/dist/rbac/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../src/rbac/seed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAGtD,wBAAsB,QAAQ,CAC5B,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC,CAgEf"}

package/dist/rbac/seed.js

@@ -0,0 +1,63 @@
+import { sql } from '../db/sql.js';
+import { assertValidIdentifier, quoteIdentifier } from '../db/identifiers.js';
+export async function seedRbac(db, data, config) {
+    const permissionsTable = config.table?.permissions ?? 'pipework_permissions';
+    const rolesTable = config.table?.roles ?? 'pipework_roles';
+    const rolePermissionsTable = config.table?.rolePermissions ?? 'pipework_role_permissions';
+    const userRolesTable = config.table?.userRoles ?? 'pipework_user_roles';
+    assertValidIdentifier(permissionsTable, 'permissions table');
+    assertValidIdentifier(rolesTable, 'roles table');
+    assertValidIdentifier(rolePermissionsTable, 'rolePermissions table');
+    assertValidIdentifier(userRolesTable, 'userRoles table');
+    const permQ = quoteIdentifier(permissionsTable, 'permissions table');
+    const rolesQ = quoteIdentifier(rolesTable, 'roles table');
+    const rolePermQ = quoteIdentifier(rolePermissionsTable, 'rolePermissions table');
+    const userRolesQ = quoteIdentifier(userRolesTable, 'userRoles table');
+    for (const perm of data.permissions) {
+        await db.execute(sql `
+      INSERT INTO ${sql.raw(permQ)} (resource, action)
+      VALUES (${perm.resource}, ${perm.action})
+      ON CONFLICT (resource, action) DO NOTHING
+    `);
+    }
+    for (const role of data.roles) {
+        if (role.description !== undefined) {
+            await db.execute(sql `
+        INSERT INTO ${sql.raw(rolesQ)} (name, tenant_id, description)
+        VALUES (${role.name}, ${role.tenantId}, ${role.description})
+        ON CONFLICT (tenant_id, name) DO UPDATE SET
+          description = EXCLUDED.description
+      `);
+        }
+        else {
+            await db.execute(sql `
+        INSERT INTO ${sql.raw(rolesQ)} (name, tenant_id)
+        VALUES (${role.name}, ${role.tenantId})
+        ON CONFLICT (tenant_id, name) DO UPDATE SET
+          description = EXCLUDED.description
+      `);
+        }
+        for (const rp of role.permissions) {
+            await db.execute(sql `
+        INSERT INTO ${sql.raw(rolePermQ)} (role_id, permission_id, scope)
+        SELECT r.id, p.id, ${rp.scope}
+        FROM ${sql.raw(rolesQ)} r, ${sql.raw(permQ)} p
+        WHERE r.name = ${role.name} AND r.tenant_id = ${role.tenantId}
+          AND p.resource = ${rp.resource} AND p.action = ${rp.action}
+        ON CONFLICT (role_id, permission_id) DO UPDATE SET scope = EXCLUDED.scope
+      `);
+        }
+    }
+    if (data.userRoles) {
+        for (const ur of data.userRoles) {
+            await db.execute(sql `
+        INSERT INTO ${sql.raw(userRolesQ)} (user_id, role_id, tenant_id)
+        SELECT ${ur.userId}, r.id, ${ur.tenantId}
+        FROM ${sql.raw(rolesQ)} r
+        WHERE r.name = ${ur.roleName} AND r.tenant_id = ${ur.tenantId}
+        ON CONFLICT (user_id, role_id, tenant_id) DO NOTHING
+      `);
+        }
+    }
+}
+//# sourceMappingURL=seed.js.map

package/dist/rbac/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/rbac/seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAGlC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,EAAM,EACN,IAAc,EACd,MAAkB;IAElB,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,sBAAsB,CAAA;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,gBAAgB,CAAA;IAC1D,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,2BAA2B,CAAA;IACzF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,qBAAqB,CAAA;IAEvE,qBAAqB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;IAC5D,qBAAqB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IAChD,qBAAqB,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAA;IACpE,qBAAqB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;IAExD,MAAM,KAAK,GAAG,eAAe,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAA;IAChF,MAAM,UAAU,GAAG,eAAe,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;IAErE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;oBACJ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gBAClB,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM;;KAExC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;sBACJ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;kBACnB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW;;;OAG3D,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;sBACJ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;kBACnB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ;;;OAGtC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;sBACJ,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;6BACX,EAAE,CAAC,KAAK;eACtB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;yBAC1B,IAAI,CAAC,IAAI,sBAAsB,IAAI,CAAC,QAAQ;6BACxC,EAAE,CAAC,QAAQ,mBAAmB,EAAE,CAAC,MAAM;;OAE7D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;sBACJ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;iBACxB,EAAE,CAAC,MAAM,WAAW,EAAE,CAAC,QAAQ;eACjC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;yBACL,EAAE,CAAC,QAAQ,sBAAsB,EAAE,CAAC,QAAQ;;OAE9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/rbac/types.d.ts

@@ -0,0 +1,56 @@
+import type { DB } from '../db/index.js';
+export type Scope = 'own' | 'team' | 'territory' | 'tenant';
+export interface RbacConfig {
+    readonly database: string;
+    readonly scopes?: readonly string[];
+    readonly cacheTtlMs?: number;
+    readonly table?: {
+        readonly permissions?: string;
+        readonly roles?: string;
+        readonly rolePermissions?: string;
+        readonly userRoles?: string;
+    };
+}
+export interface ResolvedPermission {
+    readonly resource: string;
+    readonly action: string;
+    readonly scope: string;
+}
+export interface PermissionSet {
+    readonly userId: string;
+    readonly tenantId: string;
+    readonly authVersion: number;
+    readonly permissions: readonly ResolvedPermission[];
+}
+export interface SeedPermission {
+    readonly resource: string;
+    readonly action: string;
+}
+export interface SeedRolePermission {
+    readonly resource: string;
+    readonly action: string;
+    readonly scope: string;
+}
+export interface SeedRole {
+    readonly name: string;
+    readonly tenantId: string;
+    readonly description?: string;
+    readonly permissions: readonly SeedRolePermission[];
+}
+export interface SeedUserRole {
+    readonly userId: string;
+    readonly roleName: string;
+    readonly tenantId: string;
+}
+export interface SeedData {
+    readonly permissions: readonly SeedPermission[];
+    readonly roles: readonly SeedRole[];
+    readonly userRoles?: readonly SeedUserRole[];
+}
+export interface Rbac {
+    resolve(db: DB, userId: string, tenantId: string, authVersion: number): Promise<PermissionSet>;
+    check(permissions: PermissionSet, resource: string, action: string, requiredScope?: string): boolean;
+    invalidate(userId: string, tenantId: string): void;
+    seed(db: DB, data: SeedData): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/rbac/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rbac/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAExC,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE3D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;QACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC5B,CAAA;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACpD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;CAC7C;AAED,MAAM,WAAW,IAAI;IACnB,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9F,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACpG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAClD,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5C"}

package/dist/rbac/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/rbac/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/rbac/types.ts"],"names":[],"mappings":""}

package/dist/resource/batch.d.ts

@@ -0,0 +1,17 @@
+import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
+import type { PermissionMeta } from '../di/types.js';
+export interface BatchTargets {
+    readonly ids?: string[];
+    readonly filters?: Record<string, unknown>;
+}
+export interface BatchAction<TAuth> {
+    readonly permission?: PermissionMeta;
+    readonly preview?: (db: PostgresJsDatabase, auth: TAuth, tenant: string | null, targets: BatchTargets) => Promise<unknown>;
+    readonly execute: (db: PostgresJsDatabase, auth: TAuth, tenant: string | null, targets: BatchTargets) => Promise<unknown>;
+}
+export interface BatchRequest {
+    readonly action: string;
+    readonly targets: BatchTargets;
+}
+export declare function validateBatchRequest(body: unknown, validActions: string[]): BatchRequest;
+//# sourceMappingURL=batch.d.ts.map

package/dist/resource/batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../src/resource/batch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAGpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,WAAW,CAAC,KAAK;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAA;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1H,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC1H;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,YAAY,CAkDxF"}

package/dist/resource/batch.js

@@ -0,0 +1,47 @@
+import { ValidationError } from '../errors/index.js';
+export function validateBatchRequest(body, validActions) {
+    if (body === null || typeof body !== 'object') {
+        throw new ValidationError('Batch request body must be an object');
+    }
+    const obj = body;
+    const action = obj['action'];
+    if (typeof action !== 'string' || action.length === 0) {
+        throw new ValidationError({ action: ['action is required and must be a non-empty string'] });
+    }
+    if (!validActions.includes(action)) {
+        throw new ValidationError({
+            action: [`Unknown batch action "${action}". Valid actions: ${validActions.join(', ')}`],
+        });
+    }
+    const targets = obj['targets'];
+    if (targets === null || targets === undefined || typeof targets !== 'object') {
+        throw new ValidationError({ targets: ['targets is required and must be an object'] });
+    }
+    const t = targets;
+    const hasIds = Array.isArray(t['ids']);
+    const hasFilters = t['filters'] !== undefined && t['filters'] !== null && typeof t['filters'] === 'object';
+    if (!hasIds && !hasFilters) {
+        throw new ValidationError({ targets: ['targets must contain exactly one of "ids" or "filters"'] });
+    }
+    if (hasIds && hasFilters) {
+        throw new ValidationError({ targets: ['targets must contain exactly one of "ids" or "filters", not both'] });
+    }
+    if (hasIds) {
+        const ids = t['ids'];
+        if (ids.length === 0) {
+            throw new ValidationError({ 'targets.ids': ['ids array must not be empty'] });
+        }
+        for (const id of ids) {
+            if (typeof id !== 'string') {
+                throw new ValidationError({ 'targets.ids': ['all ids must be strings'] });
+            }
+        }
+    }
+    return {
+        action,
+        targets: hasIds
+            ? { ids: t['ids'] }
+            : { filters: t['filters'] },
+    };
+}
+//# sourceMappingURL=batch.js.map

package/dist/resource/batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../src/resource/batch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAkBpD,MAAM,UAAU,oBAAoB,CAAC,IAAa,EAAE,YAAsB;IACxE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAA;IAE3C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,mDAAmD,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC;YACxB,MAAM,EAAE,CAAC,yBAAyB,MAAM,qBAAqB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACxF,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAA;IAC9B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,CAAC,GAAG,OAAkC,CAAA;IAE5C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAA;IAE1G,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,wDAAwD,CAAC,EAAE,CAAC,CAAA;IACpG,CAAC;IACD,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,kEAAkE,CAAC,EAAE,CAAC,CAAA;IAC9G,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAc,CAAA;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAa,EAAE;YAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAA4B,EAAE;KACzD,CAAA;AACH,CAAC"}

package/dist/resource/builder.d.ts

@@ -0,0 +1,11 @@
+import type { ResourceOperations, Resource, PaginationConfig } from './types.js';
+import type { AuthRequirement, PermissionMeta } from '../di/types.js';
+interface ResourceBuilderState {
+    database: string;
+    authRequirement: AuthRequirement;
+    permission: PermissionMeta | null;
+    pagination: PaginationConfig | null;
+}
+export declare function buildResource<TAuth>(name: string, operations: ResourceOperations<TAuth>, state: ResourceBuilderState): Resource<TAuth>;
+export { type ResourceBuilderState };
+//# sourceMappingURL=builder.d.ts.map

package/dist/resource/builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/resource/builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAgB,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC9F,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAErE,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,eAAe,CAAA;IAChC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAA;IACjC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;CACpC;AAED,wBAAgB,aAAa,CAAC,KAAK,EACjC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,EACrC,KAAK,EAAE,oBAAoB,GAC1B,QAAQ,CAAC,KAAK,CAAC,CASjB;AAED,OAAO,EAAE,KAAK,oBAAoB,EAAE,CAAA"}

package/dist/resource/builder.js

@@ -0,0 +1,12 @@
+export function buildResource(name, operations, state) {
+    const meta = {
+        name,
+        database: state.database,
+        authRequirement: state.authRequirement,
+        permission: state.permission,
+        pagination: state.pagination,
+    };
+    return { meta, operations };
+}
+export {};
+//# sourceMappingURL=builder.js.map

package/dist/resource/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/resource/builder.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,UAAqC,EACrC,KAA2B;IAE3B,MAAM,IAAI,GAAiB;QACzB,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC7B,CAAC;AAED,OAAO,EAA6B,CAAA"}

package/dist/resource/errors.d.ts

@@ -0,0 +1,7 @@
+import { TrunkError } from '../errors/base.js';
+export declare class MethodNotAllowedError extends TrunkError {
+    readonly code: "METHOD_NOT_ALLOWED";
+    readonly httpStatus: 405;
+    constructor(method: string, resource: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/resource/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resource/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,qBAAa,qBAAsB,SAAQ,UAAU;IACnD,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAS;IAC7C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAG7C"}

package/dist/resource/errors.js

@@ -0,0 +1,9 @@
+import { TrunkError } from '../errors/base.js';
+export class MethodNotAllowedError extends TrunkError {
+    code = 'METHOD_NOT_ALLOWED';
+    httpStatus = 405;
+    constructor(method, resource) {
+        super(`${method} not supported on ${resource}`);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/resource/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resource/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IAC1C,IAAI,GAAG,oBAA6B,CAAA;IACpC,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,MAAc,EAAE,QAAgB;QAC1C,KAAK,CAAC,GAAG,MAAM,qBAAqB,QAAQ,EAAE,CAAC,CAAA;IACjD,CAAC;CACF"}

package/dist/resource/index.d.ts

@@ -0,0 +1,9 @@
+export type { Resource, ResourceOperations, ResourceMeta, ResourceId, ResourceListOp, ResourceListPaginatedOp, ResourceListCursorOp, ResourceGetOp, ResourceCreateOp, ResourceUpdateOp, ResourceDeleteOp, PaginationConfig, PaginationParams, PaginatedResponse } from './types.js';
+export { buildResource } from './builder.js';
+export { registerResource } from './register.js';
+export { MethodNotAllowedError } from './errors.js';
+export { encodeCursor, decodeCursor, buildPage } from './paginate.js';
+export type { PageResult, CursorPaginationParams } from './paginate.js';
+export { validateBatchRequest } from './batch.js';
+export type { BatchAction, BatchTargets, BatchRequest } from './batch.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/resource/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resource/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACnR,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACrE,YAAY,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/resource/index.js

@@ -0,0 +1,6 @@
+export { buildResource } from './builder.js';
+export { registerResource } from './register.js';
+export { MethodNotAllowedError } from './errors.js';
+export { encodeCursor, decodeCursor, buildPage } from './paginate.js';
+export { validateBatchRequest } from './batch.js';
+//# sourceMappingURL=index.js.map

package/dist/resource/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resource/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA"}

package/dist/resource/paginate.d.ts

@@ -0,0 +1,13 @@
+export interface PageResult<T> {
+    readonly items: T[];
+    readonly cursor: string | null;
+    readonly hasMore: boolean;
+}
+export interface CursorPaginationParams {
+    readonly cursor?: string;
+    readonly limit: number;
+}
+export declare function encodeCursor(values: readonly unknown[]): string;
+export declare function decodeCursor(cursor: string): unknown[];
+export declare function buildPage<T>(rows: readonly T[], limit: number, getCursor: (item: T) => string): PageResult<T>;
+//# sourceMappingURL=paginate.d.ts.map

package/dist/resource/paginate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paginate.d.ts","sourceRoot":"","sources":["../../src/resource/paginate.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAG/D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,CAYtD;AAED,wBAAgB,SAAS,CAAC,CAAC,EACzB,IAAI,EAAE,SAAS,CAAC,EAAE,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GAC7B,UAAU,CAAC,CAAC,CAAC,CAOf"}

package/dist/resource/paginate.js

@@ -0,0 +1,29 @@
+import { ValidationError } from '../errors/index.js';
+export function encodeCursor(values) {
+    const json = JSON.stringify(values);
+    return Buffer.from(json).toString('base64url');
+}
+export function decodeCursor(cursor) {
+    try {
+        const json = Buffer.from(cursor, 'base64url').toString('utf-8');
+        const parsed = JSON.parse(json);
+        if (!Array.isArray(parsed)) {
+            throw new ValidationError('Invalid cursor: expected encoded array');
+        }
+        return parsed;
+    }
+    catch (err) {
+        if (err instanceof ValidationError)
+            throw err;
+        throw new ValidationError('Invalid cursor: malformed or tampered value');
+    }
+}
+export function buildPage(rows, limit, getCursor) {
+    const hasMore = rows.length > limit;
+    const items = hasMore ? rows.slice(0, limit) : [...rows];
+    const cursor = hasMore && items.length > 0
+        ? encodeCursor([getCursor(items[items.length - 1])])
+        : null;
+    return { items, cursor, hasMore };
+}
+//# sourceMappingURL=paginate.js.map

package/dist/resource/paginate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paginate.js","sourceRoot":"","sources":["../../src/resource/paginate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAapD,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe;YAAE,MAAM,GAAG,CAAA;QAC7C,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAkB,EAClB,KAAa,EACb,SAA8B;IAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,IAAI,CAAA;IACR,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACnC,CAAC"}

package/dist/resource/register.d.ts

@@ -0,0 +1,16 @@
+import type { FastifyInstance } from 'fastify';
+import type { TrunkInstance } from '../trunk.js';
+import type { Resource } from './types.js';
+import type { TenantConfig } from '../tenant/types.js';
+import type { Rbac } from '../rbac/types.js';
+import { type ContextOptions } from '../http/middleware.js';
+interface RegisterOptions {
+    instance: TrunkInstance;
+    contextOptions: ContextOptions;
+    tenantConfig: TenantConfig | null;
+    rbac: Rbac | null;
+    txDatabases: string[] | null;
+}
+export declare function registerResource<TAuth>(app: FastifyInstance, resource: Resource<TAuth>, options: RegisterOptions): void;
+export {};
+//# sourceMappingURL=register.d.ts.map

package/dist/resource/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/resource/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAA;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAQzE,UAAU,eAAe;IACvB,QAAQ,EAAE,aAAa,CAAA;IACvB,cAAc,EAAE,cAAc,CAAA;IAC9B,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EACzB,OAAO,EAAE,eAAe,GACvB,IAAI,CAsLN"}