auth/request_context.ts

Build a full RequestContext from an account id.

Shared helper used by session, bearer, and daemon token middleware, as well as WebSocket upgrade handlers. Does the account → actor → permits lookup pipeline and returns the composed context, or null if the account or actor is not found.

Create middleware that builds the request context from a session cookie.

Reads the session identity (set by session middleware), looks up the auth_session, loads account + actor + active permits, and sets the RequestContext on the Hono context.

If the session is invalid or the account is not found, the context is set to null (unauthenticated). No 401 is returned — use require_role or require_auth for enforcement.

Get the request context from a Hono context, or null if unauthenticated.

Check if a request context has an active permit for a given role.

Checks the permits already loaded in the context (no DB query).

Reload active permits from the database, returning a new request context.

Useful for long-lived WebSocket connections where permits may change (grant or revoke) during the connection lifetime. Call periodically or after receiving a revocation signal.

Returns a new RequestContext with updated permits — the original context is not mutated, making concurrent calls safe.

Hono context variable name for the request context.

The resolved identity context for an authenticated request.

Middleware that requires authentication.

Returns 401 if no request context is set.

Get the request context, throwing if unauthenticated.

Use in route handlers where auth middleware guarantees a context exists (i.e., routes with auth: {type: 'authenticated'} or stricter). Prefer this over get_request_context(c)! for explicit error handling.

Create middleware that requires a specific role.

Returns 401 if unauthenticated, 403 if the role is missing.