ScrawnDotDev · SteakFisher · May 6, 2026 · May 6, 2026 · May 6, 2026
diff --git a/.fallowrc.json b/.fallowrc.json
@@ -2,6 +2,7 @@
   "$schema": "node_modules/fallow/schema.json",
   "ignorePatterns": [
     "src/gen/**/*_connect.ts",
-    "src/gen/**/file_*.ts"
+    "src/gen/**/file_*.ts",
+    "src/gen/**/*.js"
   ]
 }
diff --git a/package.json b/package.json
@@ -23,15 +23,14 @@
     "drizzle-kit": "^0.31.6",
     "fallow": "^2.64.0",
     "grpc-tools": "^1.13.1",
-    "ts-protoc-gen": "^0.15.0",
-    "tsx": "^4.20.6",
-    "vitest": "^4.0.3"
+    "vitest": "^4.0.3",
+    "tsx": "^4.20.6"
   },
   "peerDependencies": {
     "typescript": "^5"
   },
   "dependencies": {
-
+    "@grpc/grpc-js": "^1.12.0",
     "bullmq": "^5.75.2",
     "dodopayments": "^2.30.0",
     "drizzle-orm": "^0.44.7",

diff --git a/src/context/requestContext.ts b/src/context/requestContext.ts
@@ -52,6 +52,7 @@ export class WideEventBuilder {
   /**
    * Set authentication context after successful auth.
    */
+  // fallow-ignore-next-line unused-class-member
   setAuth(apiKeyId: string | number, cacheHit: boolean): this {
     this.event.apiKeyId = apiKeyId;
     this.event.cacheHit = cacheHit;
@@ -69,6 +70,7 @@ export class WideEventBuilder {
   /**
    * Set event processing context.
    */
+  // fallow-ignore-next-line unused-class-member
   setEventContext(data: { eventType?: string; eventCount?: number }): this {
     if (data.eventType !== undefined) this.event.eventType = data.eventType;
     if (data.eventCount !== undefined) this.event.eventCount = data.eventCount;
@@ -97,6 +99,7 @@ export class WideEventBuilder {
   /**
    * Set API key creation context.
    */
+  // fallow-ignore-next-line unused-class-member
   setApiKeyContext(data: { name?: string; expiration?: string }): this {
     if (data.name !== undefined) this.event.apiKeyName = data.name;
     if (data.expiration !== undefined)
@@ -147,6 +150,7 @@ export class WideEventBuilder {
   /**
    * Build the final wide event with duration calculation.
    */
+  // fallow-ignore-next-line unused-class-member
   build(): WideEvent {
     const durationMs = DateTime.utc().toMillis() - this.startTime;
 

diff --git a/src/errors/apikey.ts b/src/errors/apikey.ts
@@ -30,6 +30,7 @@ export class APIKeyError extends Error {
     this.code = context.code;
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidExpiration(
     details?: string,
     originalError?: Error
@@ -44,6 +45,7 @@ export class APIKeyError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidName(details?: string, originalError?: Error): APIKeyError {
     return new APIKeyError({
       type: APIKeyErrorType.INVALID_NAME,
@@ -64,6 +66,7 @@ export class APIKeyError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static notFound(apiKeyId?: string, originalError?: Error): APIKeyError {
     return new APIKeyError({
       type: APIKeyErrorType.NOT_FOUND,
@@ -75,6 +78,7 @@ export class APIKeyError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static revocationFailed(
     details?: string,
     originalError?: Error
@@ -98,6 +102,7 @@ export class APIKeyError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static unknown(originalError?: Error): APIKeyError {
     const details = originalError?.message || "No details available";
     return new APIKeyError({

diff --git a/src/errors/auth.ts b/src/errors/auth.ts
@@ -70,6 +70,7 @@ export class AuthError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static databaseError(originalError?: Error): AuthError {
     return new AuthError({
       type: AuthErrorType.DATABASE_ERROR,
@@ -79,6 +80,7 @@ export class AuthError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static unknown(originalError?: Error): AuthError {
     const details = originalError?.message || "No details available";
     return new AuthError({

diff --git a/src/errors/event.ts b/src/errors/event.ts
@@ -31,6 +31,7 @@ export class EventError extends Error {
     this.code = context.code;
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidPayload(details?: string, originalError?: Error): EventError {
     return new EventError({
       type: EventErrorType.INVALID_PAYLOAD,
@@ -63,6 +64,7 @@ export class EventError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static serializationError(
     details?: string,
     originalError?: Error
@@ -77,6 +79,7 @@ export class EventError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidUserId(userId?: string, originalError?: Error): EventError {
     return new EventError({
       type: EventErrorType.INVALID_USER_ID,
@@ -86,6 +89,7 @@ export class EventError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static missingData(field: string, originalError?: Error): EventError {
     return new EventError({
       type: EventErrorType.MISSING_DATA,
@@ -95,6 +99,7 @@ export class EventError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidDataFormat(
     field: string,
     expectedFormat: string,
@@ -108,6 +113,7 @@ export class EventError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static unknown(originalError?: Error): EventError {
     const details = originalError?.message || "No details available";
     return new EventError({

diff --git a/src/errors/payment.ts b/src/errors/payment.ts
@@ -36,6 +36,7 @@ export class PaymentError extends Error {
     this.code = context.code;
   }
 
+  // fallow-ignore-next-line unused-class-member
   static invalidUserId(userId?: string, originalError?: Error): PaymentError {
     return new PaymentError({
       type: PaymentErrorType.INVALID_USER_ID,
@@ -45,6 +46,7 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static checkoutCreationFailed(
     details?: string,
     originalError?: Error
@@ -72,6 +74,8 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-members
+  // fallow-ignore-next-line unused-class-member
   static paymentProviderApiError(
     details?: string,
     originalError?: Error
@@ -95,6 +99,8 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-members
+  // fallow-ignore-next-line unused-class-member
   static missingStoreId(originalError?: Error): PaymentError {
     return new PaymentError({
       type: PaymentErrorType.MISSING_STORE_ID,
@@ -104,6 +110,8 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-members
+  // fallow-ignore-next-line unused-class-member
   static missingVariantId(originalError?: Error): PaymentError {
     return new PaymentError({
       type: PaymentErrorType.MISSING_VARIANT_ID,
@@ -164,6 +172,7 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static configurationError(
     details?: string,
     originalError?: Error
@@ -178,6 +187,7 @@ export class PaymentError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static unknown(originalError?: Error): PaymentError {
     const details = originalError?.message || "No details available";
     return new PaymentError({

diff --git a/src/errors/storage.ts b/src/errors/storage.ts
@@ -38,6 +38,7 @@ export class StorageError extends Error {
     this.code = context.code;
   }
 
+  // fallow-ignore-next-line unused-class-member
   static connectionFailed(
     details?: string,
     originalError?: Error
@@ -102,6 +103,7 @@ export class StorageError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static dataNotFound(entity?: string, originalError?: Error): StorageError {
     return new StorageError({
       type: StorageErrorType.CONNECTION_FAILED,
@@ -173,6 +175,7 @@ export class StorageError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static userInsertFailed(
     userId?: string,
     originalError?: Error
@@ -226,6 +229,7 @@ export class StorageError extends Error {
     });
   }
 
+  // fallow-ignore-next-line unused-class-member
   static unknown(originalError?: Error): StorageError {
     const details = originalError?.message || "No details available";
     return new StorageError({

diff --git a/src/events/AIEvents/AITokenUsage.ts b/src/events/AIEvents/AITokenUsage.ts
@@ -17,6 +17,7 @@ export class AITokenUsage implements AITokenUsageEvent {
     this.ingested_timestamp = DateTime.utc();
   }
 
+  // fallow-ignore-next-line unused-class-member
   serialize() {
     return {
       SQL: {

diff --git a/src/events/RawEvents/SDKCall.ts b/src/events/RawEvents/SDKCall.ts
@@ -17,6 +17,7 @@ export class SDKCall implements SDKCallEvent {
     this.ingested_timestamp = DateTime.utc();
   }
 
+  // fallow-ignore-next-line unused-class-member
   serialize() {
     return {
       SQL: {

diff --git a/src/interceptors/auth.ts b/src/interceptors/auth.ts
@@ -63,45 +63,25 @@ export function authInterceptor<Req, Res>(
   handler: GrpcHandler<Req, Res>
 ): GrpcHandler<Req, Res> {
   return (call: GrpcCall<Req, Res>, callback) => {
-    // Skip auth for whitelisted endpoints
-    const fullPath = methodPath.startsWith("/") ? methodPath : `/${methodPath}`;
-    if (no_auth.some((path) => fullPath === path || fullPath.endsWith(path))) {
+    if (isWhitelistedEndpoint(methodPath)) {
       return handler(call, callback);
     }
 
-    const wideEventBuilder = call[wideEventContextKey];
-
-    // Extract authorization from metadata
-    const authHeader = call.metadata.get("authorization")?.[0] as
-      | string
-      | undefined;
-
-    if (!authHeader) {
-      return callback?.(AuthError.missingHeader());
-    }
-
-    if (!authHeader.startsWith("Bearer ")) {
-      return callback?.(AuthError.invalidHeaderFormat());
-    }
-
-    const apiKey = authHeader.slice("Bearer ".length).trim();
-
-    // Validate API key format
-    if (!apiKey.startsWith("scrn_") || apiKey.length !== 37) {
-      return callback?.(AuthError.invalidAPIKey("Invalid API key format"));
+    const authResult = extractAndValidateAuth(call);
+    if (authResult.error) {
+      return callback?.(authResult.error);
     }
 
+    const apiKey = authResult.apiKey!;
     const apiKeyHash = hashAPIKey(apiKey);
 
-    // Check cache first
     const cached = apiKeyCache.get(apiKeyHash);
     if (cached) {
       call[apiKeyContextKey] = cached.id;
-      wideEventBuilder?.setAuth(cached.id, true);
+      call[wideEventContextKey]?.setAuth(cached.id, true);
       return handler(call, callback);
     }
 
-    // Query database for API key
     lookupApiKey(apiKeyHash)
       .then((apiKeyRecord) => {
         if (!apiKeyRecord) {
@@ -116,14 +96,13 @@ export function authInterceptor<Req, Res>(
           return callback?.(AuthError.expiredAPIKey());
         }
 
-        // Cache and set context
         apiKeyCache.set(apiKeyHash, {
           id: apiKeyRecord.id,
           expiresAt: apiKeyRecord.expiresAt,
         });
 
         call[apiKeyContextKey] = apiKeyRecord.id;
-        wideEventBuilder?.setAuth(apiKeyRecord.id, false);
+        call[wideEventContextKey]?.setAuth(apiKeyRecord.id, false);
 
         return handler(call, callback);
       })
@@ -133,6 +112,31 @@ export function authInterceptor<Req, Res>(
   };
 }
 
+function isWhitelistedEndpoint(methodPath: string): boolean {
+  const fullPath = methodPath.startsWith("/") ? methodPath : `/${methodPath}`;
+  return no_auth.some((path) => fullPath === path || fullPath.endsWith(path));
+}
+
+function extractAndValidateAuth(call: GrpcCall<unknown, unknown>): { apiKey?: string; error?: Error } {
+  const authHeader = call.metadata.get("authorization")?.[0] as string | undefined;
+
+  if (!authHeader) {
+    return { error: AuthError.missingHeader() };
+  }
+
+  if (!authHeader.startsWith("Bearer ")) {
+    return { error: AuthError.invalidHeaderFormat() };
+  }
+
+  const apiKey = authHeader.slice("Bearer ".length).trim();
+
+  if (!apiKey.startsWith("scrn_") || apiKey.length !== 37) {
+    return { error: AuthError.invalidAPIKey("Invalid API key format") };
+  }
+
+  return { apiKey };
+}
+
 async function lookupApiKey(apiKeyHash: string) {
   const db = getPostgresDB();
   const result = await db