workerstack 0.1.0-beta.0

package/dist/config.js

@@ -0,0 +1,75 @@
+// src/config.ts
+import { betterAuth } from 'better-auth';
+import * as v from 'valibot';
+import { validateEnv, } from './env.js';
+import { resolveBuckets, } from './storage/buckets.js';
+export function defineAuth(schemaOrConfig, builder) {
+    return builder ?? schemaOrConfig;
+}
+// Only the union-shaped options need runtime validation: they are the ones a
+// JavaScript caller can plausibly get wrong in a way that fails confusingly
+// downstream. Everything else is either typed-only or read raw from `options`.
+const RuntimeOptionsSchema = v.object({
+    rateLimit: v.optional(v.union([
+        v.boolean(),
+        v.object({
+            windowMs: v.optional(v.number()),
+            max: v.optional(v.number()),
+        }),
+    ])),
+    idempotency: v.optional(v.union([v.boolean(), v.object({ ttlMs: v.optional(v.number()) })])),
+    realtime: v.optional(v.union([
+        v.boolean(),
+        v.object({
+            bufferSize: v.optional(v.number()),
+            resumeSeconds: v.optional(v.number()),
+        }),
+    ])),
+    openapi: v.optional(v.boolean()),
+});
+export function resolveConfig(options, env, 
+// Platform-injected overrides (Bunderhost & co.) beat code-level config so
+// apps with hardcoded local urls deploy unchanged.
+platformSource = process.env) {
+    const parsed = v.parse(RuntimeOptionsSchema, options);
+    // Self-validate when the caller didn't pass a pre-validated env, so
+    // resolveConfig stays usable standalone.
+    const resolvedEnv = env ?? validateEnv(undefined);
+    const adapter = options.database?.adapter;
+    if (!adapter) {
+        throw new Error('[workerstack] database.adapter is required');
+    }
+    const defaultUrl = 'file:./data.db';
+    return {
+        database: {
+            adapter,
+            url: platformSource['WORKERSTACK_DATABASE_URL'] ??
+                options.database?.url ??
+                resolvedEnv.DATABASE_URL ??
+                defaultUrl,
+            authToken: platformSource['WORKERSTACK_DATABASE_AUTH_TOKEN'] ??
+                options.database?.authToken ??
+                resolvedEnv.DATABASE_AUTH_TOKEN,
+            migrations: options.database?.migrations ?? './migrations',
+        },
+        auth: (() => {
+            // The secret default has to survive the builder form too, and the builder
+            // can only run once the db exists — so wrap it and default afterwards.
+            const withSecret = (cfg) => ({
+                ...cfg,
+                secret: cfg.secret ?? resolvedEnv.AUTH_SECRET,
+            });
+            const authInput = options.auth;
+            return typeof authInput === 'function'
+                ? ((ctx) => withSecret(authInput(ctx)))
+                : withSecret(authInput ?? {});
+        })(),
+        storage: resolveBuckets(options.storage, platformSource),
+        realtime: parsed.realtime,
+    };
+}
+/** Collapse the object/builder union once the db is up. */
+export function resolveAuthConfig(auth, ctx) {
+    return typeof auth === 'function' ? auth(ctx) : auth;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,gBAAgB;AAChB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAgB5B,OAAO,EACL,WAAW,GAIZ,MAAM,OAAO,CAAA;AACd,OAAO,EACL,cAAc,GAGf,MAAM,mBAAmB,CAAA;AAmE1B,MAAM,UAAU,UAAU,CACxB,cAAuC,EACvC,OAAwC;IAExC,OAAO,OAAO,IAAI,cAAc,CAAA;AAClC,CAAC;AAWD,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,KAAK,CAAC;QACN,CAAC,CAAC,OAAO,EAAE;QACX,CAAC,CAAC,MAAM,CAAC;YACP,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAChC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC5B,CAAC;KACH,CAAC,CACH;IACD,WAAW,EAAE,CAAC,CAAC,QAAQ,CACrB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CACpE;IACD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAClB,CAAC,CAAC,KAAK,CAAC;QACN,CAAC,CAAC,OAAO,EAAE;QACX,CAAC,CAAC,MAAM,CAAC;YACP,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAClC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACtC,CAAC;KACH,CAAC,CACH;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CACjC,CAAC,CAAA;AA4FF,MAAM,UAAU,aAAa,CAU3B,OAQC,EACD,GAAa;AACb,2EAA2E;AAC3E,mDAAmD;AACnD,iBAAqD,OAAO,CAAC,GAG5D;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;IACrD,oEAAoE;IACpE,yCAAyC;IACzC,MAAM,WAAW,GAAG,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAA;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAA;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAA;IAEnC,OAAO;QACL,QAAQ,EAAE;YACR,OAAO;YACP,GAAG,EACD,cAAc,CAAC,0BAA0B,CAAC;gBAC1C,OAAO,CAAC,QAAQ,EAAE,GAAG;gBACrB,WAAW,CAAC,YAAY;gBACxB,UAAU;YACZ,SAAS,EACP,cAAc,CAAC,iCAAiC,CAAC;gBACjD,OAAO,CAAC,QAAQ,EAAE,SAAS;gBAC3B,WAAW,CAAC,mBAAmB;YACjC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,IAAI,cAAc;SAC3D;QACD,IAAI,EAAE,CAAC,GAAG,EAAE;YACV,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,UAAU,GAAG,CAAC,GAAqB,EAAoB,EAAE,CAAC,CAAC;gBAC/D,GAAG,GAAG;gBACN,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC,WAAW;aAC9C,CAAC,CAAA;YACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAA;YAC9B,OAAO,OAAO,SAAS,KAAK,UAAU;gBACpC,CAAC,CAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CACR,UAAU,CAAC,SAAS,CAAC,GAAY,CAAC,CAAC,CAA8B;gBACrE,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACjC,CAAC,CAAC,EAAE;QACJ,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;QACxD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAA;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAC/B,IAA4B,EAC5B,GAAgC;IAEhC,OAAO,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtD,CAAC","sourcesContent":["import type { AnyMiddleware, AnyRouter } from '@orpc/server'\n\n// src/config.ts\nimport { betterAuth } from 'better-auth'\nimport * as v from 'valibot'\n\nimport type {\n  AuthSessionResolver,\n  SessionUserConfig,\n  SessionUserExtraOf,\n  TableAccessInput,\n} from './access'\nimport type { WorkerstackApiBuilder } from './api/builder'\nimport type { DatabaseAdapter } from './database/adapter'\nimport type { DbFor } from './db'\nimport type { AnyDb } from './dialect'\nimport type { IdempotencyConfig } from './idempotency'\nimport type { MessagingConfig } from './messaging'\nimport type { RateLimitConfig } from './rate-limit'\n\nimport {\n  validateEnv,\n  type BaseEnv,\n  type EnvConfigInput,\n  type ValidatedEnv,\n} from './env'\nimport {\n  resolveBuckets,\n  type ResolvedStorageBuckets,\n  type StorageConfigInput,\n} from './storage/buckets'\n\nexport type BetterAuthConfig = Omit<\n  NonNullable<Parameters<typeof betterAuth>[0]>,\n  'database'\n>\n\n/**\n * What an `auth` builder is handed. `db` is the app's own connection, typed\n * from `schema` alone — that is what keeps the builder cycle-free: better-auth\n * hooks living in another file get a db without importing the app whose type\n * they help produce.\n */\nexport type AuthConfigContext<\n  TSchema extends Record<string, unknown>,\n  TEnv extends EnvConfigInput | undefined = undefined,\n> = {\n  db: DbFor<TSchema>\n  env: ValidatedEnv<TEnv>\n}\n\nexport type AuthConfigInput<\n  TSchema extends Record<string, unknown>,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TConfig extends BetterAuthConfig = BetterAuthConfig,\n> = TConfig | ((ctx: AuthConfigContext<TSchema, TEnv>) => TConfig)\n\n/**\n * Identity helper for defining an auth config in a separate file with full\n * type inference — no explicit generic annotations required.\n *\n * Follows the `defineConfig` / `defineComponent` ecosystem convention:\n * the function does nothing at runtime but gives TypeScript an inference\n * anchor through the `schema` parameter.\n *\n * @example\n * ```ts\n * // Static config (no db/env access needed)\n * export const authConfig = defineAuth({ ... })\n *\n * // Builder with schema-typed db\n * export const authConfig = defineAuth(schema, ({ db }) => ({\n *   databaseHooks: {\n *     user: { create: { after: async (user) => { await db.insert(...) } } }\n *   }\n * }))\n * ```\n */\nexport function defineAuth<const TConfig extends BetterAuthConfig>(\n  config: TConfig,\n): TConfig\nexport function defineAuth<\n  TSchema extends Record<string, unknown>,\n  TEnv extends EnvConfigInput | undefined,\n  const TConfig extends BetterAuthConfig,\n>(\n  context: { schema: TSchema; env: TEnv },\n  builder: (ctx: AuthConfigContext<TSchema, TEnv>) => TConfig,\n): (ctx: AuthConfigContext<TSchema, TEnv>) => TConfig\nexport function defineAuth<\n  TSchema extends Record<string, unknown>,\n  const TConfig extends BetterAuthConfig,\n  TEnv extends EnvConfigInput | undefined = undefined,\n>(\n  schema: TSchema,\n  builder: (ctx: AuthConfigContext<TSchema, TEnv>) => TConfig,\n): (ctx: AuthConfigContext<TSchema, TEnv>) => TConfig\nexport function defineAuth(\n  schemaOrConfig: Record<string, unknown>,\n  builder?: (ctx: any) => BetterAuthConfig,\n) {\n  return builder ?? schemaOrConfig\n}\n\n/**\n * The builder as {@link ResolvedConfig} carries it: schema-agnostic, because\n * ResolvedConfig is not generic. {@link resolveAuthConfig} is the only caller.\n */\nexport type AuthConfigFactory = (ctx: {\n  db: AnyDb\n  env: BaseEnv\n}) => BetterAuthConfig\n\n// Only the union-shaped options need runtime validation: they are the ones a\n// JavaScript caller can plausibly get wrong in a way that fails confusingly\n// downstream. Everything else is either typed-only or read raw from `options`.\nconst RuntimeOptionsSchema = v.object({\n  rateLimit: v.optional(\n    v.union([\n      v.boolean(),\n      v.object({\n        windowMs: v.optional(v.number()),\n        max: v.optional(v.number()),\n      }),\n    ]),\n  ),\n  idempotency: v.optional(\n    v.union([v.boolean(), v.object({ ttlMs: v.optional(v.number()) })]),\n  ),\n  realtime: v.optional(\n    v.union([\n      v.boolean(),\n      v.object({\n        bufferSize: v.optional(v.number()),\n        resumeSeconds: v.optional(v.number()),\n      }),\n    ]),\n  ),\n  openapi: v.optional(v.boolean()),\n})\n\n/** Realtime declaration. Independent of schema, storage, and env. */\nexport type RealtimeConfigInput =\n  | boolean\n  | {\n      bufferSize?: number\n      resumeSeconds?: number\n    }\n\nexport type WorkerstackConfig<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined =\n    | Record<string, TableAccessInput>\n    | undefined,\n  TStorage extends StorageConfigInput | undefined =\n    | StorageConfigInput\n    | undefined,\n  TEnv extends EnvConfigInput | undefined = EnvConfigInput | undefined,\n  TCustomApiRouter extends AnyRouter | undefined = AnyRouter | undefined,\n  TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  TSession extends SessionUserConfig<Record<string, unknown>> | undefined =\n    undefined,\n> = {\n  schema: TSchema\n  access?: TAccess\n  database: {\n    adapter: DatabaseAdapter\n    url?: string\n    authToken?: string\n    migrations?: string\n  }\n  /**\n   * better-auth options, or a builder receiving `{ db, env }`. Use the builder\n   * form when database hooks need to write: it hands out the app's own\n   * connection, so the application never opens a second one just to satisfy a\n   * config that is built before the app exists.\n   */\n  auth?: AuthConfigInput<NoInfer<TSchema>, NoInfer<TEnv>, TAuthConfig>\n  /**\n   * Reuse an application-owned session reader for the unified API while\n   * keeping Workerstack's auth handler available.\n   */\n  authResolver?: AuthSessionResolver<SessionUserExtraOf<TSession>>\n  /** Explicitly project application fields from Better Auth into API users. */\n  session?: TSession\n  storage?: TStorage\n  messaging?: MessagingConfig\n  /**\n   * The application's oRPC router. Pass the finished router object, or a\n   * callback when the router needs the framework builder at configuration\n   * time. Declare the router at module scope with `defineApi` and the object\n   * form keeps router modules free of factory wrappers.\n   */\n  api?:\n    | TCustomApiRouter\n    | ((\n        builder: WorkerstackApiBuilder<\n          TSchema,\n          ValidatedEnv<TEnv>,\n          MessagingConfig,\n          SessionUserExtraOf<TSession>\n        >,\n      ) => TCustomApiRouter)\n  /**\n   * Middleware applied to every procedure in the graph: generated CRUD,\n   * storage, realtime, health, and the application's own procedures. Declare\n   * each one with `o.middleware(...)` from `defineApi`.\n   *\n   * It runs before authentication, so `context.user` is not available inside\n   * it. Read an already-resolved caller with `context.peekSession()`.\n   */\n  middleware?: AnyMiddleware[]\n  rateLimit?: boolean | RateLimitConfig\n  idempotency?: boolean | IdempotencyConfig\n  /** Generate and serve `/api/openapi.json`. Disabled by default. */\n  openapi?: boolean\n  realtime?: RealtimeConfigInput\n}\n\nexport type ResolvedConfig = {\n  database: {\n    adapter: DatabaseAdapter\n    url: string\n    authToken?: string\n    migrations: string\n  }\n  auth: BetterAuthConfig | AuthConfigFactory\n  storage: ResolvedStorageBuckets\n  realtime?: RealtimeConfigInput\n}\n\nexport function resolveConfig<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined = undefined,\n  TStorage extends StorageConfigInput | undefined = undefined,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TCustomApiRouter extends AnyRouter | undefined = undefined,\n  TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  TSession extends SessionUserConfig<Record<string, unknown>> | undefined =\n    undefined,\n>(\n  options: WorkerstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter,\n    TAuthConfig,\n    TSession\n  >,\n  env?: BaseEnv,\n  // Platform-injected overrides (Bunderhost & co.) beat code-level config so\n  // apps with hardcoded local urls deploy unchanged.\n  platformSource: Record<string, string | undefined> = process.env as Record<\n    string,\n    string | undefined\n  >,\n): ResolvedConfig {\n  const parsed = v.parse(RuntimeOptionsSchema, options)\n  // Self-validate when the caller didn't pass a pre-validated env, so\n  // resolveConfig stays usable standalone.\n  const resolvedEnv = env ?? validateEnv(undefined)\n\n  const adapter = options.database?.adapter\n  if (!adapter) {\n    throw new Error('[workerstack] database.adapter is required')\n  }\n\n  const defaultUrl = 'file:./data.db'\n\n  return {\n    database: {\n      adapter,\n      url:\n        platformSource['WORKERSTACK_DATABASE_URL'] ??\n        options.database?.url ??\n        resolvedEnv.DATABASE_URL ??\n        defaultUrl,\n      authToken:\n        platformSource['WORKERSTACK_DATABASE_AUTH_TOKEN'] ??\n        options.database?.authToken ??\n        resolvedEnv.DATABASE_AUTH_TOKEN,\n      migrations: options.database?.migrations ?? './migrations',\n    },\n    auth: (() => {\n      // The secret default has to survive the builder form too, and the builder\n      // can only run once the db exists — so wrap it and default afterwards.\n      const withSecret = (cfg: BetterAuthConfig): BetterAuthConfig => ({\n        ...cfg,\n        secret: cfg.secret ?? resolvedEnv.AUTH_SECRET,\n      })\n      const authInput = options.auth\n      return typeof authInput === 'function'\n        ? (((ctx) =>\n            withSecret(authInput(ctx as never))) satisfies AuthConfigFactory)\n        : withSecret(authInput ?? {})\n    })(),\n    storage: resolveBuckets(options.storage, platformSource),\n    realtime: parsed.realtime,\n  }\n}\n\n/** Collapse the object/builder union once the db is up. */\nexport function resolveAuthConfig(\n  auth: ResolvedConfig['auth'],\n  ctx: { db: AnyDb; env: BaseEnv },\n): BetterAuthConfig {\n  return typeof auth === 'function' ? auth(ctx) : auth\n}\n"]}

package/dist/cron.d.ts

@@ -0,0 +1,4 @@
+export { cronMatches, parseCron } from './jobs/cron.js';
+export { floorSlot, slotsDue, CRON_PREFIX, SLOT_MS } from './jobs/slots.js';
+export type { CatchUp } from './jobs/slots.js';
+//# sourceMappingURL=cron.d.ts.map

package/dist/cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../src/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACxE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA"}

package/dist/cron.js

@@ -0,0 +1,3 @@
+export { cronMatches, parseCron } from './jobs/cron.js';
+export { floorSlot, slotsDue, CRON_PREFIX, SLOT_MS } from './jobs/slots.js';
+//# sourceMappingURL=cron.js.map

package/dist/cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.js","sourceRoot":"","sources":["../src/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA","sourcesContent":["export { cronMatches, parseCron } from './jobs/cron'\nexport { floorSlot, slotsDue, CRON_PREFIX, SLOT_MS } from './jobs/slots'\nexport type { CatchUp } from './jobs/slots'\n"]}

package/dist/crud-operations.d.ts

@@ -0,0 +1,43 @@
+import type { AnyDb } from './dialect.js';
+import type { RealtimeFacade } from './realtime/facade.js';
+import { type AccessUser, type ResolvedAccess } from './access.js';
+import { WorkerstackError, type ErrorCodeValue } from './errors.js';
+import { type IdempotencyConfig } from './idempotency.js';
+import { type ListParamsInput, type ListResult } from './list-query.js';
+export interface CrudExecutionContext {
+    request: Request;
+    user: AccessUser | null;
+    session: {
+        activeOrganizationId: string | null;
+    };
+}
+export declare class CrudOperationError extends WorkerstackError {
+    readonly legacyCode: ErrorCodeValue;
+    constructor(status: number, legacyCode: ErrorCodeValue, message: string, details?: unknown);
+}
+export type CrudOperationsDeps<TSchema extends Record<string, unknown> = Record<string, unknown>> = {
+    schema: TSchema;
+    db: AnyDb;
+    access: ResolvedAccess;
+    idempotency?: boolean | IdempotencyConfig;
+    realtime?: RealtimeFacade<TSchema>;
+};
+export type CreateResult = {
+    type: 'created';
+    status: 201;
+    record: Record<string, unknown>;
+} | {
+    type: 'replay';
+    status: number;
+    body: string;
+    record: Record<string, unknown>;
+};
+export declare function createCrudOperations<TSchema extends Record<string, unknown> = Record<string, unknown>>(deps: CrudOperationsDeps<TSchema>): {
+    list(tableName: string, params: ListParamsInput | undefined, ctx: CrudExecutionContext): Promise<ListResult<Record<string, unknown>>>;
+    get(tableName: string, rawId: string | number, ctx: CrudExecutionContext): Promise<Record<string, unknown>>;
+    create(tableName: string, body: unknown, rawBody: string | undefined, idempotencyKey: string | undefined, ctx: CrudExecutionContext): Promise<CreateResult>;
+    update(tableName: string, rawId: string | number, body: unknown, ctx: CrudExecutionContext): Promise<Record<string, unknown>>;
+    delete(tableName: string, rawId: string | number, ctx: CrudExecutionContext): Promise<void>;
+};
+export type CrudOperations = ReturnType<typeof createCrudOperations>;
+//# sourceMappingURL=crud-operations.d.ts.map

package/dist/crud-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud-operations.d.ts","sourceRoot":"","sources":["../src/crud-operations.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAML,KAAK,UAAU,EACf,KAAK,cAAc,EAGpB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,gBAAgB,EAIhB,KAAK,cAAc,EACpB,MAAM,UAAU,CAAA;AACjB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAA;AACtB,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,cAAc,CAAA;AAIrB,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE;QAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACjD;AAiBD,qBAAa,kBAAmB,SAAQ,gBAAgB;IAGpD,QAAQ,CAAC,UAAU,EAAE,cAAc;gBADnC,MAAM,EAAE,MAAM,EACL,UAAU,EAAE,cAAc,EACnC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO;CAepB;AAED,MAAM,MAAM,kBAAkB,CAC5B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/D;IACF,MAAM,EAAE,OAAO,CAAA;IACf,EAAE,EAAE,KAAK,CAAA;IACT,MAAM,EAAE,cAAc,CAAA;IACtB,WAAW,CAAC,EAAE,OAAO,GAAG,iBAAiB,CAAA;IACzC,QAAQ,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACjE;IACE,IAAI,EAAE,QAAQ,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC,CAAA;AAyCL,wBAAgB,oBAAoB,CAClC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;oBAuClB,MAAM,UACT,eAAe,GAAG,SAAS,OAC9B,oBAAoB,GACxB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;mBAqClC,MAAM,SACV,MAAM,GAAG,MAAM,OACjB,oBAAoB,GACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;sBAgCtB,MAAM,QACX,OAAO,WACJ,MAAM,GAAG,SAAS,kBACX,MAAM,GAAG,SAAS,OAC7B,oBAAoB,GACxB,OAAO,CAAC,YAAY,CAAC;sBAiGX,MAAM,SACV,MAAM,GAAG,MAAM,QAChB,OAAO,OACR,oBAAoB,GACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;sBAqEtB,MAAM,SACV,MAAM,GAAG,MAAM,OACjB,oBAAoB,GACxB,OAAO,CAAC,IAAI,CAAC;EAgCnB;AA2BD,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAA"}

package/dist/crud-operations.js

@@ -0,0 +1,249 @@
+import { eq, getTableColumns, getTableName, isTable, } from 'drizzle-orm';
+import { checkAccess, rowMatchesScope, sanitizeWriteBody, stampScope, tableEntryForName, } from './access.js';
+import { WorkerstackError, ErrorCode, ListQueryError, } from './errors.js';
+import { lookupIdempotency, resolveIdempotencyConfig, storeIdempotency, } from './idempotency.js';
+import { executeList, resolveListParams, } from './list-query.js';
+import { consoleLogger } from './logging.js';
+import { buildScopeWhere } from './scope.js';
+function operationMetadata(request) {
+    const operationId = request.headers.get('x-workerstack-operation-id')?.trim();
+    return operationId ? { operationId } : {};
+}
+function errorCodeForStatus(status) {
+    if (status === 401)
+        return 'UNAUTHORIZED';
+    if (status === 403)
+        return 'FORBIDDEN';
+    if (status === 404)
+        return 'NOT_FOUND';
+    if (status === 409)
+        return 'CONFLICT';
+    if (status === 413)
+        return 'PAYLOAD_TOO_LARGE';
+    if (status === 429)
+        return 'TOO_MANY_REQUESTS';
+    return 'BAD_REQUEST';
+}
+export class CrudOperationError extends WorkerstackError {
+    legacyCode;
+    constructor(status, legacyCode, message, details) {
+        const code = errorCodeForStatus(status);
+        super(code, message, legacyCode === code
+            ? details
+            : {
+                code: legacyCode,
+                ...(details === undefined ? {} : { details }),
+            });
+        this.legacyCode = legacyCode;
+        this.name = 'CrudOperationError';
+    }
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function isUniqueConstraintError(error) {
+    const seen = new Set();
+    let current = error;
+    while (isRecord(current) && !seen.has(current)) {
+        seen.add(current);
+        const code = current['code'];
+        if (code === '23505' ||
+            code === 'SQLITE_CONSTRAINT_UNIQUE' ||
+            code === 'SQLITE_CONSTRAINT_PRIMARYKEY') {
+            return true;
+        }
+        const message = current['message'];
+        if (typeof message === 'string' &&
+            (/duplicate key value violates unique constraint/i.test(message) ||
+                /unique constraint failed/i.test(message))) {
+            return true;
+        }
+        current = current['cause'];
+    }
+    return false;
+}
+function coerceId(rawId) {
+    if (typeof rawId === 'number')
+        return rawId;
+    return isNaN(Number(rawId)) ? rawId : Number(rawId);
+}
+export function createCrudOperations(deps) {
+    const { schema, db, access, realtime } = deps;
+    const idempotency = resolveIdempotencyConfig(deps.idempotency);
+    const scopeFor = (resolver, ctx) => (resolver ? resolver(ctx) : undefined);
+    function resolveTable(tableName) {
+        const table = Object.values(schema).find((t) => isTable(t) && getTableName(t) === tableName);
+        if (!table) {
+            throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+        }
+        const tableAccess = tableEntryForName(access, tableName);
+        if (!tableAccess || !tableAccess.enabled) {
+            throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+        }
+        const idCol = getTableColumns(table)['id'];
+        if (!idCol) {
+            throw new CrudOperationError(400, ErrorCode.BAD_REQUEST, `Table ${tableName} has no id column`);
+        }
+        return { table, tableAccess, idCol };
+    }
+    return {
+        async list(tableName, params, ctx) {
+            const { table, tableAccess, idCol } = resolveTable(tableName);
+            const denied = await checkAccess(tableAccess.list, ctx, tableAccess.ownerColumn);
+            if (!denied.allowed) {
+                throw new CrudOperationError(denied.status === 401 ? 401 : 403, ErrorCode.FORBIDDEN, 'Forbidden');
+            }
+            try {
+                const resolved = resolveListParams(params ?? {}, tableAccess);
+                const scope = scopeFor(tableAccess.readScope, ctx);
+                const scopeWhere = scope ? buildScopeWhere(table, scope) : undefined;
+                return await executeList(db, table, tableAccess, resolved, idCol, scopeWhere);
+            }
+            catch (err) {
+                if (err instanceof ListQueryError) {
+                    throw new CrudOperationError(400, err.code, err.message, err.details);
+                }
+                throw err;
+            }
+        },
+        async get(tableName, rawId, ctx) {
+            const { table, tableAccess, idCol } = resolveTable(tableName);
+            const id = coerceId(rawId);
+            const rows = await db.select().from(table).where(eq(idCol, id));
+            if (!rows[0]) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const row = rows[0];
+            const denied = await checkAccess(tableAccess.get, { ...ctx, row }, tableAccess.ownerColumn);
+            if (!denied.allowed) {
+                throw new CrudOperationError(denied.status === 401 ? 401 : 403, ErrorCode.FORBIDDEN, 'Forbidden');
+            }
+            const scope = scopeFor(tableAccess.readScope, ctx);
+            if (scope && !rowMatchesScope(row, scope)) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            return row;
+        },
+        async create(tableName, body, rawBody, idempotencyKey, ctx) {
+            const { table, tableAccess } = resolveTable(tableName);
+            const denied = await checkAccess(tableAccess.create, ctx, tableAccess.ownerColumn);
+            if (!denied.allowed) {
+                throw new CrudOperationError(denied.status === 401 ? 401 : 403, ErrorCode.FORBIDDEN, 'Forbidden');
+            }
+            if (!isRecord(body)) {
+                throw new CrudOperationError(400, ErrorCode.BAD_REQUEST, 'Invalid JSON body');
+            }
+            const trimmedKey = idempotencyKey?.trim();
+            const effectiveRawBody = rawBody ?? JSON.stringify(body);
+            if (idempotency && trimmedKey) {
+                const lookup = await lookupIdempotency(db, tableName, trimmedKey, effectiveRawBody);
+                if (lookup.type === 'conflict') {
+                    throw new CrudOperationError(409, ErrorCode.IDEMPOTENCY_CONFLICT, 'Idempotency key reused with different body');
+                }
+                if (lookup.type === 'replay') {
+                    return {
+                        type: 'replay',
+                        status: lookup.status,
+                        body: lookup.response,
+                        record: JSON.parse(lookup.response),
+                    };
+                }
+            }
+            const values = sanitizeWriteBody(body, tableAccess, 'create', ctx.user?.id ?? null);
+            const scope = scopeFor(tableAccess.writeScope, { ...ctx, body });
+            const stamped = scope ? stampScope(values, scope) : values;
+            let rows;
+            try {
+                rows = await db.insert(table).values(stamped).returning();
+            }
+            catch (error) {
+                if (isUniqueConstraintError(error)) {
+                    throw new CrudOperationError(409, ErrorCode.CONFLICT, 'Record already exists');
+                }
+                throw error;
+            }
+            const created = rows[0];
+            await broadcast(realtime, table, 'create', created, ctx.request);
+            if (idempotency && trimmedKey) {
+                await storeIdempotency(db, tableName, trimmedKey, effectiveRawBody, 201, created, idempotency);
+            }
+            return {
+                type: 'created',
+                status: 201,
+                record: created,
+            };
+        },
+        async update(tableName, rawId, body, ctx) {
+            const { table, tableAccess, idCol } = resolveTable(tableName);
+            const id = coerceId(rawId);
+            const existing = await db.select().from(table).where(eq(idCol, id));
+            if (!existing[0]) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const existingRow = existing[0];
+            const readScope = scopeFor(tableAccess.readScope, ctx);
+            if (readScope && !rowMatchesScope(existingRow, readScope)) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const denied = await checkAccess(tableAccess.update, { ...ctx, row: existingRow }, tableAccess.ownerColumn);
+            if (!denied.allowed) {
+                throw new CrudOperationError(denied.status === 401 ? 401 : 403, ErrorCode.FORBIDDEN, 'Forbidden');
+            }
+            if (!isRecord(body)) {
+                throw new CrudOperationError(400, ErrorCode.BAD_REQUEST, 'Invalid JSON body');
+            }
+            const values = sanitizeWriteBody(body, tableAccess, 'update', ctx.user?.id ?? null);
+            if (Object.keys(values).length === 0) {
+                throw new CrudOperationError(400, ErrorCode.BAD_REQUEST, 'No writable fields to update');
+            }
+            const writeScope = scopeFor(tableAccess.writeScope, { ...ctx, body });
+            const stamped = writeScope ? stampScope(values, writeScope) : values;
+            const rows = await db
+                .update(table)
+                .set(stamped)
+                .where(eq(idCol, id))
+                .returning();
+            if (!rows[0]) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const updated = rows[0];
+            await broadcast(realtime, table, 'update', updated, ctx.request);
+            return updated;
+        },
+        async delete(tableName, rawId, ctx) {
+            const { table, tableAccess, idCol } = resolveTable(tableName);
+            const id = coerceId(rawId);
+            const existing = await db.select().from(table).where(eq(idCol, id));
+            if (!existing[0]) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const existingRow = existing[0];
+            const readScope = scopeFor(tableAccess.readScope, ctx);
+            if (readScope && !rowMatchesScope(existingRow, readScope)) {
+                throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found');
+            }
+            const denied = await checkAccess(tableAccess.delete, { ...ctx, row: existingRow }, tableAccess.ownerColumn);
+            if (!denied.allowed) {
+                throw new CrudOperationError(denied.status === 401 ? 401 : 403, ErrorCode.FORBIDDEN, 'Forbidden');
+            }
+            await db.delete(table).where(eq(idCol, id));
+            await broadcast(realtime, table, 'delete', existingRow, ctx.request);
+        },
+    };
+}
+/**
+ * Broadcast-on-write, best effort: the write has committed, so a failed
+ * publish only logs. Awaited, because a Worker cancels I/O that is still
+ * pending after the response, and the event would never reach the hub.
+ */
+async function broadcast(realtime, table, action, record, request) {
+    if (!realtime)
+        return;
+    try {
+        await realtime.publish(table, action, record, operationMetadata(request));
+    }
+    catch (error) {
+        consoleLogger.error('[workerstack] realtime publish failed:', error);
+    }
+}
+//# sourceMappingURL=crud-operations.js.map

package/dist/crud-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud-operations.js","sourceRoot":"","sources":["../src/crud-operations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,EAAE,EACF,eAAe,EACf,YAAY,EACZ,OAAO,GAER,MAAM,aAAa,CAAA;AAKpB,OAAO,EACL,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,iBAAiB,GAKlB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,cAAc,GAGf,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,GAEjB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,WAAW,EACX,iBAAiB,GAGlB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAQzC,SAAS,iBAAiB,CAAC,OAAgB;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7E,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAA;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAA;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAA;IACrC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAA;IAC9C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAA;IAC9C,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,gBAAgB;IAG3C;IAFX,YACE,MAAc,EACL,UAA0B,EACnC,OAAe,EACf,OAAiB;QAEjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACvC,KAAK,CACH,IAAI,EACJ,OAAO,EACP,UAAU,KAAK,IAAI;YACjB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC;gBACE,IAAI,EAAE,UAAU;gBAChB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;aAC9C,CACN,CAAA;QAdQ,eAAU,GAAV,UAAU,CAAgB;QAenC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAqBD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAA;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5B,IACE,IAAI,KAAK,OAAO;YAChB,IAAI,KAAK,0BAA0B;YACnC,IAAI,KAAK,8BAA8B,EACvC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;QAClC,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9D,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsB;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAElC,IAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAC7C,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAE9D,MAAM,QAAQ,GAAG,CACf,QAAmC,EACnC,GAMC,EACqB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAEjE,SAAS,YAAY,CAAC,SAAiB;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,SAAS,CAC9B,CAAA;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACrE,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACxD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,WAAW,EACrB,SAAS,SAAS,mBAAmB,CACtC,CAAA;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACtC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CACR,SAAiB,EACjB,MAAmC,EACnC,GAAyB;YAEzB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YAE7D,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,WAAW,CAAC,IAAI,EAChB,GAAG,EACH,WAAW,CAAC,WAAW,CACxB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,SAAS,CAAC,SAAS,EACnB,WAAW,CACZ,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAA;gBAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,OAAO,MAAM,WAAW,CACtB,EAAE,EACF,KAAK,EACL,WAAW,EACX,QAAQ,EACR,KAAK,EACL,UAAU,CACX,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;oBAClC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;gBACvE,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CACP,SAAiB,EACjB,KAAsB,EACtB,GAAyB;YAEzB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAE1B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;YAC/D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAA;YAE9C,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,WAAW,CAAC,GAAG,EACf,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EACf,WAAW,CAAC,WAAW,CACxB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,SAAS,CAAC,SAAS,EACnB,WAAW,CACZ,CAAA;YACH,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YAClD,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YAED,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,IAAa,EACb,OAA2B,EAC3B,cAAkC,EAClC,GAAyB;YAEzB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YAEtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,WAAW,CAAC,MAAM,EAClB,GAAG,EACH,WAAW,CAAC,WAAW,CACxB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,SAAS,CAAC,SAAS,EACnB,WAAW,CACZ,CAAA;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,WAAW,EACrB,mBAAmB,CACpB,CAAA;YACH,CAAC;YAED,MAAM,UAAU,GAAG,cAAc,EAAE,IAAI,EAAE,CAAA;YACzC,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAExD,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,EAAE,EACF,SAAS,EACT,UAAU,EACV,gBAAgB,CACjB,CAAA;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,oBAAoB,EAC9B,4CAA4C,CAC7C,CAAA;gBACH,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO;wBACL,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;wBACrB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAA4B;qBAC/D,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAC9B,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CACrB,CAAA;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YAE1D,IAAI,IAA+B,CAAA;YACnC,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnC,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,QAAQ,EAClB,uBAAuB,CACxB,CAAA;gBACH,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAA;YAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YAEhE,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,gBAAgB,CACpB,EAAE,EACF,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,GAAG,EACH,OAAO,EACP,WAAW,CACZ,CAAA;YACH,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,OAAO;aAChB,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,KAAsB,EACtB,IAAa,EACb,GAAyB;YAEzB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAE1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAA4B,CAAA;YAE1D,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACtD,IAAI,SAAS,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,WAAW,CAAC,MAAM,EAClB,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,EAC5B,WAAW,CAAC,WAAW,CACxB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,SAAS,CAAC,SAAS,EACnB,WAAW,CACZ,CAAA;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,WAAW,EACrB,mBAAmB,CACpB,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAC9B,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CACrB,CAAA;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,SAAS,CAAC,WAAW,EACrB,8BAA8B,CAC/B,CAAA;YACH,CAAC;YAED,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YAEpE,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,OAAO,CAAC;iBACZ,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;iBACpB,SAAS,EAAE,CAAA;YAEd,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAA;YAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YAChE,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,KAAsB,EACtB,GAAyB;YAEzB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAE1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAA4B,CAAA;YAE1D,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACtD,IAAI,SAAS,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,WAAW,CAAC,MAAM,EAClB,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,EAC5B,WAAW,CAAC,WAAW,CACxB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,kBAAkB,CAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,SAAS,CAAC,SAAS,EACnB,WAAW,CACZ,CAAA;YACH,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACtE,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CACtB,QAAyC,EACzC,KAAc,EACd,MAAsC,EACtC,MAA+B,EAC/B,OAAgB;IAEhB,IAAI,CAAC,QAAQ;QAAE,OAAM;IACrB,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,OAAO,CACpB,KAAc,EACd,MAAM,EACN,MAAe,EACf,iBAAiB,CAAC,OAAO,CAAC,CAC3B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAA;IACtE,CAAC;AACH,CAAC","sourcesContent":["import {\n  eq,\n  getTableColumns,\n  getTableName,\n  isTable,\n  type Table,\n} from 'drizzle-orm'\n\nimport type { AnyDb } from './dialect'\nimport type { RealtimeFacade } from './realtime/facade'\n\nimport {\n  checkAccess,\n  rowMatchesScope,\n  sanitizeWriteBody,\n  stampScope,\n  tableEntryForName,\n  type AccessUser,\n  type ResolvedAccess,\n  type ScopeMap,\n  type ScopeResolver,\n} from './access'\nimport {\n  WorkerstackError,\n  ErrorCode,\n  ListQueryError,\n  type WorkerstackErrorCode,\n  type ErrorCodeValue,\n} from './errors'\nimport {\n  lookupIdempotency,\n  resolveIdempotencyConfig,\n  storeIdempotency,\n  type IdempotencyConfig,\n} from './idempotency'\nimport {\n  executeList,\n  resolveListParams,\n  type ListParamsInput,\n  type ListResult,\n} from './list-query'\nimport { consoleLogger } from './logging'\nimport { buildScopeWhere } from './scope'\n\nexport interface CrudExecutionContext {\n  request: Request\n  user: AccessUser | null\n  session: { activeOrganizationId: string | null }\n}\n\nfunction operationMetadata(request: Request): { operationId?: string } {\n  const operationId = request.headers.get('x-workerstack-operation-id')?.trim()\n  return operationId ? { operationId } : {}\n}\n\nfunction errorCodeForStatus(status: number): WorkerstackErrorCode {\n  if (status === 401) return 'UNAUTHORIZED'\n  if (status === 403) return 'FORBIDDEN'\n  if (status === 404) return 'NOT_FOUND'\n  if (status === 409) return 'CONFLICT'\n  if (status === 413) return 'PAYLOAD_TOO_LARGE'\n  if (status === 429) return 'TOO_MANY_REQUESTS'\n  return 'BAD_REQUEST'\n}\n\nexport class CrudOperationError extends WorkerstackError {\n  constructor(\n    status: number,\n    readonly legacyCode: ErrorCodeValue,\n    message: string,\n    details?: unknown,\n  ) {\n    const code = errorCodeForStatus(status)\n    super(\n      code,\n      message,\n      legacyCode === code\n        ? details\n        : {\n            code: legacyCode,\n            ...(details === undefined ? {} : { details }),\n          },\n    )\n    this.name = 'CrudOperationError'\n  }\n}\n\nexport type CrudOperationsDeps<\n  TSchema extends Record<string, unknown> = Record<string, unknown>,\n> = {\n  schema: TSchema\n  db: AnyDb\n  access: ResolvedAccess\n  idempotency?: boolean | IdempotencyConfig\n  realtime?: RealtimeFacade<TSchema>\n}\n\nexport type CreateResult =\n  | { type: 'created'; status: 201; record: Record<string, unknown> }\n  | {\n      type: 'replay'\n      status: number\n      body: string\n      record: Record<string, unknown>\n    }\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction isUniqueConstraintError(error: unknown): boolean {\n  const seen = new Set<unknown>()\n  let current = error\n\n  while (isRecord(current) && !seen.has(current)) {\n    seen.add(current)\n    const code = current['code']\n    if (\n      code === '23505' ||\n      code === 'SQLITE_CONSTRAINT_UNIQUE' ||\n      code === 'SQLITE_CONSTRAINT_PRIMARYKEY'\n    ) {\n      return true\n    }\n\n    const message = current['message']\n    if (\n      typeof message === 'string' &&\n      (/duplicate key value violates unique constraint/i.test(message) ||\n        /unique constraint failed/i.test(message))\n    ) {\n      return true\n    }\n\n    current = current['cause']\n  }\n\n  return false\n}\n\nfunction coerceId(rawId: string | number): string | number {\n  if (typeof rawId === 'number') return rawId\n  return isNaN(Number(rawId)) ? rawId : Number(rawId)\n}\n\nexport function createCrudOperations<\n  TSchema extends Record<string, unknown> = Record<string, unknown>,\n>(deps: CrudOperationsDeps<TSchema>) {\n  const { schema, db, access, realtime } = deps\n  const idempotency = resolveIdempotencyConfig(deps.idempotency)\n\n  const scopeFor = (\n    resolver: ScopeResolver | undefined,\n    ctx: {\n      user: AccessUser | null\n      session: { activeOrganizationId: string | null }\n      request: Request\n      row?: Record<string, unknown>\n      body?: Record<string, unknown>\n    },\n  ): ScopeMap | undefined => (resolver ? resolver(ctx) : undefined)\n\n  function resolveTable(tableName: string) {\n    const table = Object.values(schema).find(\n      (t) => isTable(t) && getTableName(t) === tableName,\n    ) as Table | undefined\n    if (!table) {\n      throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n    }\n    const tableAccess = tableEntryForName(access, tableName)\n    if (!tableAccess || !tableAccess.enabled) {\n      throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n    }\n    const idCol = getTableColumns(table)['id']\n    if (!idCol) {\n      throw new CrudOperationError(\n        400,\n        ErrorCode.BAD_REQUEST,\n        `Table ${tableName} has no id column`,\n      )\n    }\n    return { table, tableAccess, idCol }\n  }\n\n  return {\n    async list(\n      tableName: string,\n      params: ListParamsInput | undefined,\n      ctx: CrudExecutionContext,\n    ): Promise<ListResult<Record<string, unknown>>> {\n      const { table, tableAccess, idCol } = resolveTable(tableName)\n\n      const denied = await checkAccess(\n        tableAccess.list,\n        ctx,\n        tableAccess.ownerColumn,\n      )\n      if (!denied.allowed) {\n        throw new CrudOperationError(\n          denied.status === 401 ? 401 : 403,\n          ErrorCode.FORBIDDEN,\n          'Forbidden',\n        )\n      }\n\n      try {\n        const resolved = resolveListParams(params ?? {}, tableAccess)\n        const scope = scopeFor(tableAccess.readScope, ctx)\n        const scopeWhere = scope ? buildScopeWhere(table, scope) : undefined\n        return await executeList(\n          db,\n          table,\n          tableAccess,\n          resolved,\n          idCol,\n          scopeWhere,\n        )\n      } catch (err) {\n        if (err instanceof ListQueryError) {\n          throw new CrudOperationError(400, err.code, err.message, err.details)\n        }\n        throw err\n      }\n    },\n\n    async get(\n      tableName: string,\n      rawId: string | number,\n      ctx: CrudExecutionContext,\n    ): Promise<Record<string, unknown>> {\n      const { table, tableAccess, idCol } = resolveTable(tableName)\n      const id = coerceId(rawId)\n\n      const rows = await db.select().from(table).where(eq(idCol, id))\n      if (!rows[0]) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n      const row = rows[0] as Record<string, unknown>\n\n      const denied = await checkAccess(\n        tableAccess.get,\n        { ...ctx, row },\n        tableAccess.ownerColumn,\n      )\n      if (!denied.allowed) {\n        throw new CrudOperationError(\n          denied.status === 401 ? 401 : 403,\n          ErrorCode.FORBIDDEN,\n          'Forbidden',\n        )\n      }\n\n      const scope = scopeFor(tableAccess.readScope, ctx)\n      if (scope && !rowMatchesScope(row, scope)) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n\n      return row\n    },\n\n    async create(\n      tableName: string,\n      body: unknown,\n      rawBody: string | undefined,\n      idempotencyKey: string | undefined,\n      ctx: CrudExecutionContext,\n    ): Promise<CreateResult> {\n      const { table, tableAccess } = resolveTable(tableName)\n\n      const denied = await checkAccess(\n        tableAccess.create,\n        ctx,\n        tableAccess.ownerColumn,\n      )\n      if (!denied.allowed) {\n        throw new CrudOperationError(\n          denied.status === 401 ? 401 : 403,\n          ErrorCode.FORBIDDEN,\n          'Forbidden',\n        )\n      }\n\n      if (!isRecord(body)) {\n        throw new CrudOperationError(\n          400,\n          ErrorCode.BAD_REQUEST,\n          'Invalid JSON body',\n        )\n      }\n\n      const trimmedKey = idempotencyKey?.trim()\n      const effectiveRawBody = rawBody ?? JSON.stringify(body)\n\n      if (idempotency && trimmedKey) {\n        const lookup = await lookupIdempotency(\n          db,\n          tableName,\n          trimmedKey,\n          effectiveRawBody,\n        )\n        if (lookup.type === 'conflict') {\n          throw new CrudOperationError(\n            409,\n            ErrorCode.IDEMPOTENCY_CONFLICT,\n            'Idempotency key reused with different body',\n          )\n        }\n        if (lookup.type === 'replay') {\n          return {\n            type: 'replay',\n            status: lookup.status,\n            body: lookup.response,\n            record: JSON.parse(lookup.response) as Record<string, unknown>,\n          }\n        }\n      }\n\n      const values = sanitizeWriteBody(\n        body,\n        tableAccess,\n        'create',\n        ctx.user?.id ?? null,\n      )\n\n      const scope = scopeFor(tableAccess.writeScope, { ...ctx, body })\n      const stamped = scope ? stampScope(values, scope) : values\n\n      let rows: Record<string, unknown>[]\n      try {\n        rows = await db.insert(table).values(stamped).returning()\n      } catch (error) {\n        if (isUniqueConstraintError(error)) {\n          throw new CrudOperationError(\n            409,\n            ErrorCode.CONFLICT,\n            'Record already exists',\n          )\n        }\n        throw error\n      }\n      const created = rows[0] as Record<string, unknown>\n      await broadcast(realtime, table, 'create', created, ctx.request)\n\n      if (idempotency && trimmedKey) {\n        await storeIdempotency(\n          db,\n          tableName,\n          trimmedKey,\n          effectiveRawBody,\n          201,\n          created,\n          idempotency,\n        )\n      }\n\n      return {\n        type: 'created',\n        status: 201,\n        record: created,\n      }\n    },\n\n    async update(\n      tableName: string,\n      rawId: string | number,\n      body: unknown,\n      ctx: CrudExecutionContext,\n    ): Promise<Record<string, unknown>> {\n      const { table, tableAccess, idCol } = resolveTable(tableName)\n      const id = coerceId(rawId)\n\n      const existing = await db.select().from(table).where(eq(idCol, id))\n      if (!existing[0]) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n      const existingRow = existing[0] as Record<string, unknown>\n\n      const readScope = scopeFor(tableAccess.readScope, ctx)\n      if (readScope && !rowMatchesScope(existingRow, readScope)) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n\n      const denied = await checkAccess(\n        tableAccess.update,\n        { ...ctx, row: existingRow },\n        tableAccess.ownerColumn,\n      )\n      if (!denied.allowed) {\n        throw new CrudOperationError(\n          denied.status === 401 ? 401 : 403,\n          ErrorCode.FORBIDDEN,\n          'Forbidden',\n        )\n      }\n\n      if (!isRecord(body)) {\n        throw new CrudOperationError(\n          400,\n          ErrorCode.BAD_REQUEST,\n          'Invalid JSON body',\n        )\n      }\n\n      const values = sanitizeWriteBody(\n        body,\n        tableAccess,\n        'update',\n        ctx.user?.id ?? null,\n      )\n\n      if (Object.keys(values).length === 0) {\n        throw new CrudOperationError(\n          400,\n          ErrorCode.BAD_REQUEST,\n          'No writable fields to update',\n        )\n      }\n\n      const writeScope = scopeFor(tableAccess.writeScope, { ...ctx, body })\n      const stamped = writeScope ? stampScope(values, writeScope) : values\n\n      const rows = await db\n        .update(table)\n        .set(stamped)\n        .where(eq(idCol, id))\n        .returning()\n\n      if (!rows[0]) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n      const updated = rows[0] as Record<string, unknown>\n      await broadcast(realtime, table, 'update', updated, ctx.request)\n      return updated\n    },\n\n    async delete(\n      tableName: string,\n      rawId: string | number,\n      ctx: CrudExecutionContext,\n    ): Promise<void> {\n      const { table, tableAccess, idCol } = resolveTable(tableName)\n      const id = coerceId(rawId)\n\n      const existing = await db.select().from(table).where(eq(idCol, id))\n      if (!existing[0]) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n      const existingRow = existing[0] as Record<string, unknown>\n\n      const readScope = scopeFor(tableAccess.readScope, ctx)\n      if (readScope && !rowMatchesScope(existingRow, readScope)) {\n        throw new CrudOperationError(404, ErrorCode.NOT_FOUND, 'Not found')\n      }\n\n      const denied = await checkAccess(\n        tableAccess.delete,\n        { ...ctx, row: existingRow },\n        tableAccess.ownerColumn,\n      )\n      if (!denied.allowed) {\n        throw new CrudOperationError(\n          denied.status === 401 ? 401 : 403,\n          ErrorCode.FORBIDDEN,\n          'Forbidden',\n        )\n      }\n\n      await db.delete(table).where(eq(idCol, id))\n      await broadcast(realtime, table, 'delete', existingRow, ctx.request)\n    },\n  }\n}\n\n/**\n * Broadcast-on-write, best effort: the write has committed, so a failed\n * publish only logs. Awaited, because a Worker cancels I/O that is still\n * pending after the response, and the event would never reach the hub.\n */\nasync function broadcast(\n  realtime: RealtimeFacade<any> | undefined,\n  table: unknown,\n  action: 'create' | 'update' | 'delete',\n  record: Record<string, unknown>,\n  request: Request,\n): Promise<void> {\n  if (!realtime) return\n  try {\n    await realtime.publish(\n      table as never,\n      action,\n      record as never,\n      operationMetadata(request),\n    )\n  } catch (error) {\n    consoleLogger.error('[workerstack] realtime publish failed:', error)\n  }\n}\n\nexport type CrudOperations = ReturnType<typeof createCrudOperations>\n"]}

package/dist/database/adapter.d.ts

@@ -0,0 +1,26 @@
+import type { DbFor, Driver } from '../db.js';
+import type { AnyDb } from '../dialect.js';
+export type DatabaseConnection = {
+    url: string;
+    authToken?: string;
+};
+export type TestDatabaseTarget = AsyncDisposable & {
+    readonly connection: DatabaseConnection;
+};
+export type TestDatabaseTargetOptions = {
+    mode: 'memory' | 'temporary';
+};
+export type TestDatabaseStrategy = {
+    createTarget(options: TestDatabaseTargetOptions): Promise<TestDatabaseTarget>;
+};
+export type DatabaseConnectionResult<TSchema extends Record<string, unknown>> = {
+    db: DbFor<TSchema>;
+    close?: () => void | Promise<void>;
+};
+export type DatabaseAdapter = {
+    readonly driver: Driver;
+    connect<TSchema extends Record<string, unknown>>(schema: TSchema, connection: DatabaseConnection): Promise<DatabaseConnectionResult<TSchema>>;
+    migrate(db: AnyDb, migrationsFolder: string): Promise<void>;
+    testing?: TestDatabaseStrategy;
+};
+//# sourceMappingURL=adapter.d.ts.map

package/dist/database/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/database/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAEvC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG;IACjD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CAC9E,CAAA;AAED,MAAM,MAAM,wBAAwB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC1E;IACE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC,CAAA;AAEH,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7C,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,kBAAkB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,OAAO,CAAC,EAAE,oBAAoB,CAAA;CAC/B,CAAA"}

package/dist/database/adapter.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/database/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/database/adapter.ts"],"names":[],"mappings":"","sourcesContent":["import type { DbFor, Driver } from '../db'\nimport type { AnyDb } from '../dialect'\n\nexport type DatabaseConnection = {\n  url: string\n  authToken?: string\n}\n\nexport type TestDatabaseTarget = AsyncDisposable & {\n  readonly connection: DatabaseConnection\n}\n\nexport type TestDatabaseTargetOptions = {\n  mode: 'memory' | 'temporary'\n}\n\nexport type TestDatabaseStrategy = {\n  createTarget(options: TestDatabaseTargetOptions): Promise<TestDatabaseTarget>\n}\n\nexport type DatabaseConnectionResult<TSchema extends Record<string, unknown>> =\n  {\n    db: DbFor<TSchema>\n    close?: () => void | Promise<void>\n  }\n\nexport type DatabaseAdapter = {\n  readonly driver: Driver\n  connect<TSchema extends Record<string, unknown>>(\n    schema: TSchema,\n    connection: DatabaseConnection,\n  ): Promise<DatabaseConnectionResult<TSchema>>\n  migrate(db: AnyDb, migrationsFolder: string): Promise<void>\n  testing?: TestDatabaseStrategy\n}\n"]}

package/dist/database/libsql.d.ts

@@ -0,0 +1,3 @@
+import type { DatabaseAdapter } from './adapter.js';
+export declare function libsql(): DatabaseAdapter;
+//# sourceMappingURL=libsql.d.ts.map

package/dist/database/libsql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libsql.d.ts","sourceRoot":"","sources":["../../src/database/libsql.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD,wBAAgB,MAAM,IAAI,eAAe,CA+BxC"}

package/dist/database/libsql.js

@@ -0,0 +1,39 @@
+import { drizzle } from 'drizzle-orm/libsql';
+import { migrate } from 'drizzle-orm/libsql/migrator';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+export function libsql() {
+    return {
+        driver: 'libsql',
+        async connect(schema, connection) {
+            const db = drizzle({ connection, schema });
+            return { db: db, close: () => db.$client.close() };
+        },
+        async migrate(db, migrationsFolder) {
+            await migrate(db, { migrationsFolder });
+        },
+        testing: {
+            async createTarget({ mode }) {
+                if (mode === 'memory') {
+                    return {
+                        connection: { url: ':memory:' },
+                        async [Symbol.asyncDispose]() { },
+                    };
+                }
+                const directory = await mkdtemp(join(tmpdir(), 'workerstack-test-'));
+                let closed = false;
+                return {
+                    connection: { url: `file:${join(directory, 'database.db')}` },
+                    async [Symbol.asyncDispose]() {
+                        if (closed)
+                            return;
+                        closed = true;
+                        await rm(directory, { recursive: true, force: true });
+                    },
+                };
+            },
+        },
+    };
+}
+//# sourceMappingURL=libsql.js.map

package/dist/database/libsql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"libsql.js","sourceRoot":"","sources":["../../src/database/libsql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,MAAM,UAAU,MAAM;IACpB,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU;YAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;YAC1C,OAAO,EAAE,EAAE,EAAE,EAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,gBAAgB;YAChC,MAAM,OAAO,CAAC,EAAW,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,EAAE;YACP,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE;gBACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,OAAO;wBACL,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;wBAC/B,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAI,CAAC;qBACjC,CAAA;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAA;gBACpE,IAAI,MAAM,GAAG,KAAK,CAAA;gBAClB,OAAO;oBACL,UAAU,EAAE,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE;oBAC7D,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;wBACzB,IAAI,MAAM;4BAAE,OAAM;wBAClB,MAAM,GAAG,IAAI,CAAA;wBACb,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;oBACvD,CAAC;iBACF,CAAA;YACH,CAAC;SACF;KACF,CAAA;AACH,CAAC","sourcesContent":["import { drizzle } from 'drizzle-orm/libsql'\nimport { migrate } from 'drizzle-orm/libsql/migrator'\nimport { mkdtemp, rm } from 'node:fs/promises'\nimport { tmpdir } from 'node:os'\nimport { join } from 'node:path'\n\nimport type { DatabaseAdapter } from './adapter'\n\nexport function libsql(): DatabaseAdapter {\n  return {\n    driver: 'libsql',\n    async connect(schema, connection) {\n      const db = drizzle({ connection, schema })\n      return { db: db as never, close: () => db.$client.close() }\n    },\n    async migrate(db, migrationsFolder) {\n      await migrate(db as never, { migrationsFolder })\n    },\n    testing: {\n      async createTarget({ mode }) {\n        if (mode === 'memory') {\n          return {\n            connection: { url: ':memory:' },\n            async [Symbol.asyncDispose]() {},\n          }\n        }\n        const directory = await mkdtemp(join(tmpdir(), 'workerstack-test-'))\n        let closed = false\n        return {\n          connection: { url: `file:${join(directory, 'database.db')}` },\n          async [Symbol.asyncDispose]() {\n            if (closed) return\n            closed = true\n            await rm(directory, { recursive: true, force: true })\n          },\n        }\n      },\n    },\n  }\n}\n"]}

package/dist/db.d.ts

@@ -0,0 +1,15 @@
+import type { LibSQLDatabase } from 'drizzle-orm/libsql';
+import type { DatabaseAdapter, DatabaseConnection, DatabaseConnectionResult } from './database/adapter.js';
+export type Driver = 'libsql';
+/** The public db type for a schema. */
+export type DbFor<TSchema extends Record<string, unknown>> = LibSQLDatabase<TSchema>;
+/** The database an application receives on `context.db` and `app.db`. */
+export type WorkerstackDb<TSchema extends Record<string, unknown>> = DbFor<TSchema>;
+/** The transaction handle inside `db.transaction(...)`. */
+export type WorkerstackTx<TSchema extends Record<string, unknown>> = Parameters<Parameters<DbFor<TSchema>['transaction']>[0]>[0];
+export declare function createDb<TSchema extends Record<string, unknown>>(schema: TSchema, cfg: DatabaseConnection & {
+    adapter: DatabaseAdapter;
+}): Promise<DatabaseConnectionResult<TSchema> & {
+    driver: Driver;
+}>;
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAA;AAE7B,uCAAuC;AACvC,MAAM,MAAM,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACvD,cAAc,CAAC,OAAO,CAAC,CAAA;AAEzB,yEAAyE;AACzE,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/D,KAAK,CAAC,OAAO,CAAC,CAAA;AAEhB,2DAA2D;AAC3D,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,UAAU,CAC7E,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC,CAAC,CAAC,CAAA;AAEJ,wBAAsB,QAAQ,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpE,MAAM,EAAE,OAAO,EACf,GAAG,EAAE,kBAAkB,GAAG;IAAE,OAAO,EAAE,eAAe,CAAA;CAAE,GACrD,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAMjE"}

package/dist/db.js

@@ -0,0 +1,8 @@
+export async function createDb(schema, cfg) {
+    const result = await cfg.adapter.connect(schema, {
+        url: cfg.url,
+        authToken: cfg.authToken,
+    });
+    return { ...result, driver: cfg.adapter.driver };
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAuBA,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAe,EACf,GAAsD;IAEtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAC/C,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;AAClD,CAAC","sourcesContent":["import type { LibSQLDatabase } from 'drizzle-orm/libsql'\n\nimport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\n\nexport type Driver = 'libsql'\n\n/** The public db type for a schema. */\nexport type DbFor<TSchema extends Record<string, unknown>> =\n  LibSQLDatabase<TSchema>\n\n/** The database an application receives on `context.db` and `app.db`. */\nexport type WorkerstackDb<TSchema extends Record<string, unknown>> =\n  DbFor<TSchema>\n\n/** The transaction handle inside `db.transaction(...)`. */\nexport type WorkerstackTx<TSchema extends Record<string, unknown>> = Parameters<\n  Parameters<DbFor<TSchema>['transaction']>[0]\n>[0]\n\nexport async function createDb<TSchema extends Record<string, unknown>>(\n  schema: TSchema,\n  cfg: DatabaseConnection & { adapter: DatabaseAdapter },\n): Promise<DatabaseConnectionResult<TSchema> & { driver: Driver }> {\n  const result = await cfg.adapter.connect(schema, {\n    url: cfg.url,\n    authToken: cfg.authToken,\n  })\n  return { ...result, driver: cfg.adapter.driver }\n}\n"]}