Waku

import { createTheAuth } from "@glinr/theauth";
import { createTheAuthHandler } from "@glinr/theauth/http";

async function setup() {
  const theauth = await createTheAuth({
    database: { provider: "sqlite-native", url: "theauth.db" },
    agents: { enabled: true, maxPerUser: 10, defaultPermissions: [], auditAll: true },
  });
  const handler = createTheAuthHandler(theauth, {
    basePath: "/theauth",
    // Who may call the management routes. Return { id } to allow, null for a 401.
    authenticate: async (request) => {
      const user = await theauth.auth.resolveUser(request);
      return user ? { id: user.id } : null;
    },
  });
  return { theauth, handler };
}

let instance: ReturnType<typeof setup> | undefined;

export function useTheAuth() {
  instance ??= setup();
  return instance;
}

import { useTheAuth } from "../../../lib/theauth";

const serve = async (request: Request): Promise<Response> => {
  const { handler } = await useTheAuth();
  return handler(request);
};

export const GET = serve;
export const POST = serve;
export const PUT = serve;
export const PATCH = serve;
export const DELETE = serve;

import { defineConfig } from "waku/config";

export default defineConfig({
  vite: {
    build: {
      rolldownOptions: {
        // Native and optional packages stay in node_modules instead of being bundled.
        external: ["better-sqlite3", "nodemailer"],
      },
    },
  },
});

import { requireAgent } from "@glinr/theauth/http";
import { useTheAuth } from "../../lib/theauth";

export const GET = async (request: Request): Promise<Response> => {
  const { theauth } = await useTheAuth();
  const result = await requireAgent(theauth, request, { action: "read", resource: "docs" });
  if (!result.ok) return result.response; // 401 or 403 with { error: { code, message } }
  return Response.json({ agentId: result.agent.id });
};