typion 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Simone Ergotino
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,5 @@
-# Temporary Holding Version
+# Typion
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Headless, type-safe application engine on top of Drizzle ORM: access control, hooks, drafts and versions, localization, soft delete, multi-tenancy, audit and a Fetch-based HTTP handler, with result types derived from the query you write.
+
+[docs/README.md](docs/README.md) is the guide for applications: the model, the rules, and a page per task. It ships with the package, so an application finds it in `node_modules/typion/docs/`, and `typion init` points the application's agent notes at it.

package/bin/typion.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { main } from '../dist/cli/index.js'
+
+const code = await main(process.argv.slice(2))
+// A database driver can keep handles open (PGlite does), and a command that has said what it had to say
+// should not hold the shell.
+process.exit(code)

package/dist/auth/better-auth.d.ts

@@ -0,0 +1,13 @@
+import { Gt as ContextFactoryInput, N as AnyDb, Wt as ContextFactory, a as MaybePromise } from "../context-B4e2eREP.js";
+//#region src/auth/better-auth.d.ts
+export type SessionProvider = {
+  api: {
+    getSession(options: {
+      headers: Headers;
+    }): Promise<unknown>;
+  };
+};
+export type SessionOf<TAuth extends SessionProvider> = Awaited<ReturnType<TAuth['api']['getSession']>>;
+export declare function betterAuthContext<TAuth extends SessionProvider, TCtx extends object>(auth: TAuth | ((db: AnyDb) => TAuth), map: (session: SessionOf<TAuth>, input: ContextFactoryInput) => MaybePromise<TCtx>): ContextFactory<TCtx>;
+//#endregion
+//# sourceMappingURL=better-auth.d.ts.map

package/dist/auth/better-auth.js

@@ -0,0 +1,11 @@
+//#region src/auth/better-auth.ts
+function betterAuthContext(auth, map) {
+	return async (input) => {
+		const headers = input.headers ?? input.request?.headers ?? new Headers();
+		return map(await ("api" in auth ? auth : auth(input.db)).api.getSession({ headers }), input);
+	};
+}
+//#endregion
+export { betterAuthContext };
+
+//# sourceMappingURL=better-auth.js.map

package/dist/auth/better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.js","names":[],"sources":["../../src/auth/better-auth.ts"],"sourcesContent":["import type { MaybePromise } from '../types/context.js'\nimport type { ContextFactory, ContextFactoryInput } from '../types/collection.js'\nimport type { AnyDb } from '../types/runtime.js'\n\n// Structural on purpose: the engine never imports better-auth, so any auth library exposing the same\n// `api.getSession({ headers })` shape works, and better-auth stays an optional peer.\nexport type SessionProvider = {\n  api: { getSession(options: { headers: Headers }): Promise<unknown> }\n}\n\nexport type SessionOf<TAuth extends SessionProvider> = Awaited<\n  ReturnType<TAuth['api']['getSession']>\n>\n\n// The library says who signed in; `map` says who that is to the application. It gets the factory's input with\n// `system`, which crosses tenants, so it can look the caller up: their membership, their role (auth.md).\n// `auth` is the provider, or what builds it on the instance's connection: a provider per instance reads a test's\n// sessions from the test's database, and the config never has to reach the instance itself (ADR-092).\nexport function betterAuthContext<TAuth extends SessionProvider, TCtx extends object>(\n  auth: TAuth | ((db: AnyDb) => TAuth),\n  map: (session: SessionOf<TAuth>, input: ContextFactoryInput) => MaybePromise<TCtx>,\n): ContextFactory<TCtx> {\n  return async (input) => {\n    const headers = input.headers ?? input.request?.headers ?? new Headers()\n    const provider = 'api' in auth ? (auth as TAuth) : auth(input.db)\n    const session = (await provider.api.getSession({ headers })) as SessionOf<TAuth>\n    return map(session, input)\n  }\n}\n"],"mappings":";AAkBA,SAAgB,kBACd,MACA,KACsB;CACtB,OAAO,OAAO,UAAU;EACtB,MAAM,UAAU,MAAM,WAAW,MAAM,SAAS,WAAW,IAAI,QAAQ;EAGvE,OAAO,IAAI,OAFM,SAAS,OAAQ,OAAiB,KAAK,MAAM,EAAE,EAAA,CAChC,IAAI,WAAW,EAAE,QAAQ,CAAC,GACtC,KAAK;CAC3B;AACF"}

package/dist/cli/index.d.ts

@@ -0,0 +1,14 @@
+//#region src/cli/output.d.ts
+export declare class CliError extends Error {
+  constructor(message: string);
+}
+type Io = {
+  out(line: string): void;
+  err(line: string): void;
+};
+//#endregion
+//#region src/cli/index.d.ts
+export declare function run(argv: readonly string[], io?: Io, cwd?: string): Promise<void>;
+export declare function main(argv: readonly string[]): Promise<number>;
+//#endregion
+//# sourceMappingURL=index.d.ts.map