@actuate-media/cms-core 0.83.0 → 0.84.0

package/dist/__tests__/schema-preview-features.test.js

@@ -1,42 +0,0 @@
-import { readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { dirname, resolve } from 'node:path';
-import { describe, expect, it } from 'vitest';
-/**
- * Guard against the Phase 5.5 regression where `relationLoadStrategy:
- * 'join'` was added to the dashboard / versions / bench queries
- * without the `relationJoins` Preview-feature flag in the schema.
- * Prisma silently rejects the option as an "Unknown argument" when
- * the flag is missing — for `safeFindMany` callers that surfaces as
- * an empty result and for the versions endpoint as a 500 to the
- * client. Either failure mode is hard to spot without a deliberate
- * bench run, so pin the schema's preview-feature set with a tiny
- * test rather than a code-review-only convention.
- *
- * If the preview-feature set legitimately needs to change, update
- * the assertion below in the same commit — that way the rationale
- * surfaces in the diff.
- */
-describe('Prisma schema preview features', () => {
-    const here = dirname(fileURLToPath(import.meta.url));
-    const schemaPath = resolve(here, '..', '..', 'prisma', 'schema.prisma');
-    const schema = readFileSync(schemaPath, 'utf8');
-    it('declares relationJoins so `relationLoadStrategy: "join"` is honoured', () => {
-        const match = schema.match(/previewFeatures\s*=\s*\[([^\]]*)\]/);
-        expect(match, 'schema.prisma must declare a previewFeatures array').not.toBeNull();
-        const features = (match[1] ?? '')
-            .split(',')
-            .map((s) => s.trim().replace(/^"|"$/g, ''))
-            .filter(Boolean);
-        expect(features).toContain('relationJoins');
-    });
-    it('still declares fullTextSearchPostgres (search uses it)', () => {
-        const match = schema.match(/previewFeatures\s*=\s*\[([^\]]*)\]/);
-        const features = (match[1] ?? '')
-            .split(',')
-            .map((s) => s.trim().replace(/^"|"$/g, ''))
-            .filter(Boolean);
-        expect(features).toContain('fullTextSearchPostgres');
-    });
-});
-//# sourceMappingURL=schema-preview-features.test.js.map

package/dist/__tests__/schema-preview-features.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema-preview-features.test.js","sourceRoot":"","sources":["../../src/__tests__/schema-preview-features.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C;;;;;;;;;;;;;;GAcG;AACH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAE/C,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAChE,MAAM,CAAC,KAAK,EAAE,oDAAoD,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAClF,MAAM,QAAQ,GAAG,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC,CAAA;QAClB,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC,CAAA;QAClB,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/sections/sections-migrate.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=sections-migrate.test.d.ts.map

package/dist/__tests__/sections/sections-migrate.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sections-migrate.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/sections/sections-migrate.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/sections/sections-migrate.test.js

@@ -1,145 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { migratePageBuilderSections } from '../../sections/migrate.js';
-/**
- * Mock Prisma supporting the keyset scan used by the migration plus the
- * read/transaction surface `updateDocument` needs.
- */
-function createMockDB() {
-    const docs = new Map();
-    const versions = [];
-    function sortedNonDeleted() {
-        return [...docs.values()]
-            .filter((d) => d.deletedAt === null)
-            .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
-    }
-    const txClient = {
-        document: {
-            update: vi.fn(async ({ where, data: updateData }) => {
-                const doc = docs.get(where.id);
-                if (!doc)
-                    throw new Error('Not found');
-                Object.assign(doc, updateData);
-                return doc;
-            }),
-        },
-        version: {
-            create: vi.fn(async ({ data }) => {
-                const v = { id: `ver-${versions.length}`, ...data, createdAt: new Date() };
-                versions.push(v);
-                return v;
-            }),
-        },
-    };
-    return {
-        document: {
-            findMany: vi.fn(async ({ take, skip, cursor, select } = {}) => {
-                let arr = sortedNonDeleted();
-                if (cursor?.id) {
-                    const idx = arr.findIndex((d) => d.id === cursor.id);
-                    if (idx >= 0)
-                        arr = arr.slice(idx + (skip ?? 0));
-                }
-                if (typeof take === 'number')
-                    arr = arr.slice(0, take);
-                if (select) {
-                    arr = arr.map((d) => {
-                        const picked = {};
-                        for (const k of Object.keys(select))
-                            picked[k] = d[k];
-                        return picked;
-                    });
-                }
-                return arr;
-            }),
-            findFirst: vi.fn(async ({ where }) => {
-                for (const doc of docs.values()) {
-                    if (where.id && doc.id !== where.id)
-                        continue;
-                    if (where.collection && doc.collection !== where.collection)
-                        continue;
-                    if (where.deletedAt === null && doc.deletedAt !== null)
-                        continue;
-                    return doc;
-                }
-                return null;
-            }),
-        },
-        version: txClient.version,
-        $transaction: vi.fn(async (fn) => fn(txClient)),
-        _docs: docs,
-        _versions: versions,
-    };
-}
-function ctxFor(db) {
-    return { userId: 'admin-1', role: 'ADMIN', db };
-}
-const HERO_LAYOUT = {
-    type: 'page',
-    children: [
-        {
-            type: 'section',
-            settings: { htmlId: 'top' },
-            children: [
-                { type: 'block', settings: { blockType: 'hero' }, data: { title: 'Hi', subtitle: 'Yo' } },
-            ],
-        },
-    ],
-};
-function seedDoc(db, id, data) {
-    db._docs.set(id, { id, collection: 'pages', status: 'PUBLISHED', data, deletedAt: null });
-}
-describe('migratePageBuilderSections (ADR 0002 backfill)', () => {
-    let db;
-    beforeEach(() => {
-        db = createMockDB();
-    });
-    it('backfills sections for a legacy _layout-only document', async () => {
-        seedDoc(db, 'doc-1', { title: 'Legacy', _layout: HERO_LAYOUT });
-        const result = await migratePageBuilderSections(ctxFor(db));
-        expect(result.scanned).toBe(1);
-        expect(result.migrated).toBe(1);
-        expect(result.migratedIds).toEqual(['doc-1']);
-        const sections = db._docs.get('doc-1').data.sections;
-        expect(sections[0].sectionType).toBe('hero');
-        expect(sections[0].content.heading).toBe('Hi');
-    });
-    it('is idempotent — a second run migrates nothing', async () => {
-        seedDoc(db, 'doc-1', { title: 'Legacy', _layout: HERO_LAYOUT });
-        await migratePageBuilderSections(ctxFor(db));
-        const second = await migratePageBuilderSections(ctxFor(db));
-        expect(second.migrated).toBe(0);
-        expect(second.skipped).toBe(1);
-    });
-    it('skips documents that already have sections, and those with no _layout', async () => {
-        seedDoc(db, 'doc-1', { title: 'Already', _layout: HERO_LAYOUT, sections: [{ id: 'x' }] });
-        seedDoc(db, 'doc-2', { title: 'Flat', sections: [{ id: 'y' }] });
-        seedDoc(db, 'doc-3', { title: 'Bare' });
-        const result = await migratePageBuilderSections(ctxFor(db));
-        expect(result.scanned).toBe(3);
-        expect(result.migrated).toBe(0);
-        expect(result.skipped).toBe(3);
-    });
-    it('skips a layout that compiles to nothing (leaves it for the read-time bridge)', async () => {
-        seedDoc(db, 'doc-1', { title: 'Empty', _layout: { type: 'page', children: [] } });
-        const result = await migratePageBuilderSections(ctxFor(db));
-        expect(result.migrated).toBe(0);
-        expect(result.skipped).toBe(1);
-        expect(db._docs.get('doc-1').data.sections).toBeUndefined();
-    });
-    it('dryRun reports counts without writing', async () => {
-        seedDoc(db, 'doc-1', { title: 'Legacy', _layout: HERO_LAYOUT });
-        const result = await migratePageBuilderSections(ctxFor(db), { dryRun: true });
-        expect(result.migrated).toBe(1);
-        expect(db._docs.get('doc-1').data.sections).toBeUndefined();
-    });
-    it('pages through batches (batchSize smaller than the doc count)', async () => {
-        seedDoc(db, 'doc-1', { title: 'A', _layout: HERO_LAYOUT });
-        seedDoc(db, 'doc-2', { title: 'B', _layout: HERO_LAYOUT });
-        seedDoc(db, 'doc-3', { title: 'C', _layout: HERO_LAYOUT });
-        const result = await migratePageBuilderSections(ctxFor(db), { batchSize: 1 });
-        expect(result.scanned).toBe(3);
-        expect(result.migrated).toBe(3);
-        expect(result.migratedIds.sort()).toEqual(['doc-1', 'doc-2', 'doc-3']);
-    });
-});
-//# sourceMappingURL=sections-migrate.test.js.map

package/dist/__tests__/sections/sections-migrate.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sections-migrate.test.js","sourceRoot":"","sources":["../../../src/__tests__/sections/sections-migrate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAGtE;;;GAGG;AACH,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAA;IACnC,MAAM,QAAQ,GAAU,EAAE,CAAA;IAE1B,SAAS,gBAAgB;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;aACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;aACnC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE;YACR,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAO,EAAE,EAAE;gBACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC9B,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;gBACtC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;gBAC9B,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC;SACH;QACD,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBACpC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAA;gBAC1E,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChB,OAAO,CAAC,CAAA;YACV,CAAC,CAAC;SACH;KACF,CAAA;IAED,OAAO;QACL,QAAQ,EAAE;YACR,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,KAAU,EAAE,EAAE,EAAE;gBACjE,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAA;gBAC5B,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAA;oBACpD,IAAI,GAAG,IAAI,CAAC;wBAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;gBAClD,CAAC;gBACD,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACX,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBAClB,MAAM,MAAM,GAAQ,EAAE,CAAA;wBACtB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;4BAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;wBACrD,OAAO,MAAM,CAAA;oBACf,CAAC,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC;YACF,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBACxC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChC,IAAI,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;wBAAE,SAAQ;oBAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;wBAAE,SAAQ;oBACrE,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;wBAAE,SAAQ;oBAChE,OAAO,GAAG,CAAA;gBACZ,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAC;SACH;QACD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpD,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,QAAQ;KACpB,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,EAAO;IACrB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AACjD,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YAC3B,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;aAC1F;SACF;KACF;CACF,CAAA;AAED,SAAS,OAAO,CAAC,EAAmC,EAAE,EAAU,EAAE,IAAS;IACzE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3F,CAAC;AAED,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,IAAI,EAAmC,CAAA;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,GAAG,YAAY,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAA;QACrD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAE/D,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QACzF,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEjF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAE7E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAE1D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QAE7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/security/access.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=access.test.d.ts.map

package/dist/__tests__/security/access.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/access.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security/access.test.js

@@ -1,181 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { checkAccess, getPermissionsForRole, filterFieldsByRole, applyFieldAccess, } from '../../security/access.js';
-describe('checkAccess', () => {
-    it('ADMIN can access everything', () => {
-        expect(checkAccess('ADMIN', 'ADMIN')).toBe(true);
-        expect(checkAccess('ADMIN', 'EDITOR')).toBe(true);
-        expect(checkAccess('ADMIN', 'AUTHOR')).toBe(true);
-        expect(checkAccess('ADMIN', 'CLIENT')).toBe(true);
-    });
-    it('EDITOR can access AUTHOR level', () => {
-        expect(checkAccess('EDITOR', 'AUTHOR')).toBe(true);
-        expect(checkAccess('EDITOR', 'CLIENT')).toBe(true);
-        expect(checkAccess('EDITOR', 'EDITOR')).toBe(true);
-    });
-    it('EDITOR cannot access ADMIN level', () => {
-        expect(checkAccess('EDITOR', 'ADMIN')).toBe(false);
-    });
-    it('AUTHOR cannot access EDITOR level', () => {
-        expect(checkAccess('AUTHOR', 'EDITOR')).toBe(false);
-        expect(checkAccess('AUTHOR', 'ADMIN')).toBe(false);
-    });
-    it('AUTHOR can access AUTHOR and CLIENT levels', () => {
-        expect(checkAccess('AUTHOR', 'AUTHOR')).toBe(true);
-        expect(checkAccess('AUTHOR', 'CLIENT')).toBe(true);
-    });
-    it('CLIENT cannot access AUTHOR level', () => {
-        expect(checkAccess('CLIENT', 'AUTHOR')).toBe(false);
-        expect(checkAccess('CLIENT', 'EDITOR')).toBe(false);
-        expect(checkAccess('CLIENT', 'ADMIN')).toBe(false);
-    });
-    it('CLIENT can access CLIENT level', () => {
-        expect(checkAccess('CLIENT', 'CLIENT')).toBe(true);
-    });
-});
-describe('getPermissionsForRole', () => {
-    it('ADMIN gets delete permission', () => {
-        const perms = getPermissionsForRole('ADMIN');
-        const actions = perms.map((p) => p.action);
-        expect(actions).toContain('delete');
-        expect(actions).toContain('create');
-        expect(actions).toContain('read');
-        expect(actions).toContain('update');
-        expect(actions).toContain('publish');
-    });
-    it('EDITOR gets publish but not delete', () => {
-        const perms = getPermissionsForRole('EDITOR');
-        const actions = perms.map((p) => p.action);
-        expect(actions).toContain('publish');
-        expect(actions).toContain('read');
-        expect(actions).toContain('create');
-        expect(actions).not.toContain('delete');
-    });
-    it('AUTHOR gets create but not delete', () => {
-        const perms = getPermissionsForRole('AUTHOR');
-        const actions = perms.map((p) => p.action);
-        expect(actions).toContain('read');
-        expect(actions).toContain('create');
-        expect(actions).not.toContain('delete');
-        expect(actions).not.toContain('publish');
-    });
-    it('CLIENT only gets read permission', () => {
-        const perms = getPermissionsForRole('CLIENT');
-        const actions = perms.map((p) => p.action);
-        expect(actions).toEqual(['read']);
-    });
-    it('AUTHOR has "update own" but not "update *"', () => {
-        const perms = getPermissionsForRole('AUTHOR');
-        const updatePerms = perms.filter((p) => p.action === 'update');
-        expect(updatePerms).toHaveLength(1);
-        expect(updatePerms[0].resource).toBe('own');
-    });
-    it('EDITOR has "update *" (all resources)', () => {
-        const perms = getPermissionsForRole('EDITOR');
-        const updatePerms = perms.filter((p) => p.action === 'update');
-        const resources = updatePerms.map((p) => p.resource);
-        expect(resources).toContain('*');
-    });
-});
-describe('filterFieldsByRole', () => {
-    const adminUser = { id: 'admin-1', role: 'ADMIN' };
-    const clientUser = { id: 'client-1', role: 'CLIENT' };
-    it('returns all fields when no access control is defined', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title', required: true },
-            body: { type: 'richText', label: 'Body' },
-        };
-        const filtered = await filterFieldsByRole(fields, clientUser);
-        expect(Object.keys(filtered)).toEqual(['title', 'body']);
-    });
-    it('returns a shallow copy, not the same reference', async () => {
-        const fields = {
-            name: { type: 'text', label: 'Name' },
-        };
-        const filtered = await filterFieldsByRole(fields, adminUser);
-        expect(filtered).not.toBe(fields);
-        expect(filtered).toEqual(fields);
-    });
-    it('filters out fields the user cannot read', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title' },
-            secret: {
-                type: 'text',
-                label: 'Secret',
-                access: {
-                    read: async ({ user }) => user?.role === 'ADMIN',
-                },
-            },
-        };
-        const clientFiltered = await filterFieldsByRole(fields, clientUser);
-        expect(Object.keys(clientFiltered)).toEqual(['title']);
-        const adminFiltered = await filterFieldsByRole(fields, adminUser);
-        expect(Object.keys(adminFiltered)).toEqual(['title', 'secret']);
-    });
-});
-describe('applyFieldAccess', () => {
-    const adminUser = { id: 'admin-1', role: 'ADMIN' };
-    const clientUser = { id: 'client-1', role: 'CLIENT' };
-    it('read mode: strips fields the user cannot read', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title' },
-            internal: {
-                type: 'text',
-                label: 'Internal',
-                access: {
-                    read: async ({ user }) => user?.role === 'ADMIN',
-                },
-            },
-        };
-        const data = { title: 'Hello', internal: 'secret-value', extra: 'kept' };
-        const clientResult = await applyFieldAccess('read', fields, data, clientUser);
-        expect(clientResult).toEqual({ title: 'Hello', extra: 'kept' });
-        const adminResult = await applyFieldAccess('read', fields, data, adminUser);
-        expect(adminResult).toEqual({ title: 'Hello', internal: 'secret-value', extra: 'kept' });
-    });
-    it('write mode: strips fields the user cannot update', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title' },
-            locked: {
-                type: 'text',
-                label: 'Locked',
-                access: {
-                    update: async ({ user }) => user?.role === 'ADMIN',
-                },
-            },
-        };
-        const data = { title: 'New Title', locked: 'overwrite-attempt' };
-        const clientResult = await applyFieldAccess('write', fields, data, clientUser);
-        expect(clientResult).toEqual({ title: 'New Title' });
-        const adminResult = await applyFieldAccess('write', fields, data, adminUser);
-        expect(adminResult).toEqual({ title: 'New Title', locked: 'overwrite-attempt' });
-    });
-    it('passes through unknown keys on read', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title' },
-        };
-        const data = { title: 'Hello', unknownField: 'value' };
-        const result = await applyFieldAccess('read', fields, data, clientUser);
-        expect(result).toEqual({ title: 'Hello', unknownField: 'value' });
-    });
-    it('strips unknown keys on write (mass assignment prevention)', async () => {
-        const fields = {
-            title: { type: 'text', label: 'Title' },
-        };
-        const data = { title: 'Hello', isAdmin: true, role: 'ADMIN' };
-        const result = await applyFieldAccess('write', fields, data, clientUser);
-        expect(result).toEqual({ title: 'Hello' });
-        expect(result).not.toHaveProperty('isAdmin');
-        expect(result).not.toHaveProperty('role');
-    });
-    it('allows system keys on write', async () => {
-        const fields = {
-            body: { type: 'richText', label: 'Body' },
-        };
-        const data = { body: '<p>Hi</p>', title: 'My Page', slug: 'my-page', status: 'PUBLISHED' };
-        const result = await applyFieldAccess('write', fields, data, clientUser);
-        expect(result).toHaveProperty('title');
-        expect(result).toHaveProperty('slug');
-        expect(result).toHaveProperty('status');
-    });
-});
-//# sourceMappingURL=access.test.js.map

package/dist/__tests__/security/access.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.test.js","sourceRoot":"","sources":["../../../src/__tests__/security/access.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AAIjC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;QAC9D,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;QAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,SAAS,GAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACnE,MAAM,UAAU,GAAoB,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAEtE,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;YAChE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE,KAAK,EAAE,MAAM,EAAE;SACnD,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAoC;YAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,MAAM,EAAE;SAC/C,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE;YAChD,MAAM,EAAE;gBACN,IAAI,EAAE,MAAe;gBACrB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO;iBACjD;aACF;SACF,CAAA;QACD,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAEtD,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,SAAS,GAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACnE,MAAM,UAAU,GAAoB,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAEtE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE;YAChD,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAe;gBACrB,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE;oBACN,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO;iBACjD;aACF;SACF,CAAA;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QAExE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QAC7E,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAE/D,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC3E,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE;YAChD,MAAM,EAAE;gBACN,IAAI,EAAE,MAAe;gBACrB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE;oBACN,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO;iBACnD;aACF;SACF,CAAA;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;QAEhE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QAC9E,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAEpD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5E,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE;SACjD,CAAA;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAoC;YAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,OAAO,EAAE;SACjD,CAAA;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAoC;YAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE,KAAK,EAAE,MAAM,EAAE;SACnD,CAAA;QACD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QAC1F,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/security/api-key-enhanced.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=api-key-enhanced.test.d.ts.map

package/dist/__tests__/security/api-key-enhanced.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-enhanced.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/api-key-enhanced.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security/api-key-enhanced.test.js

@@ -1,110 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { generateApiKey, hashApiKey, looksLikeApiKey, validateApiKeyScope, validateApiKeyGlobalScope, validateApiKeyMediaScope, validateApiKeyPageBuilderScope, validateApiKeyIp, } from '../../security/api-key-enhanced.js';
-describe('generateApiKey', () => {
-    it('returns a key, hash, and prefix with the expected shape', async () => {
-        const { key, keyHash, keyPrefix } = await generateApiKey({
-            prefix: 'act_sk',
-            scopes: { admin: true },
-        });
-        expect(key).toMatch(/^act_sk_[a-f0-9]{64}$/);
-        expect(keyHash).toMatch(/^[a-f0-9]{64}$/);
-        expect(keyPrefix.startsWith('act_sk_')).toBe(true);
-        expect(keyPrefix.length).toBe(15);
-    });
-    it('produces unique keys on each call', async () => {
-        const a = await generateApiKey({ prefix: 'act_sk', scopes: { admin: true } });
-        const b = await generateApiKey({ prefix: 'act_sk', scopes: { admin: true } });
-        expect(a.key).not.toBe(b.key);
-        expect(a.keyHash).not.toBe(b.keyHash);
-    });
-    it('hashApiKey is deterministic for the same input', async () => {
-        const { key } = await generateApiKey({ prefix: 'act_sk', scopes: { admin: true } });
-        const h1 = await hashApiKey(key);
-        const h2 = await hashApiKey(key);
-        expect(h1).toBe(h2);
-    });
-});
-describe('looksLikeApiKey', () => {
-    it('matches valid act_sk_ tokens', () => {
-        expect(looksLikeApiKey('act_sk_' + 'a'.repeat(64))).toBe(true);
-        expect(looksLikeApiKey('act_sk_' + '0'.repeat(40))).toBe(true);
-    });
-    it('rejects non-API-key tokens', () => {
-        expect(looksLikeApiKey('not_a_key')).toBe(false);
-        expect(looksLikeApiKey('act_sk_short')).toBe(false);
-        expect(looksLikeApiKey('eyJhbGciOiJIUzI1NiJ9.foo.bar')).toBe(false);
-    });
-});
-describe('validateApiKeyScope', () => {
-    it('admin scope always passes', () => {
-        expect(validateApiKeyScope({ admin: true }, 'anything', 'delete')).toBe(true);
-    });
-    it('denies when no collections are configured', () => {
-        expect(validateApiKeyScope({}, 'posts', 'read')).toBe(false);
-    });
-    it('denies when action is not in the actions list', () => {
-        expect(validateApiKeyScope({ collections: ['posts'], actions: ['read'] }, 'posts', 'delete')).toBe(false);
-    });
-    it('allows when collection and action match', () => {
-        expect(validateApiKeyScope({ collections: ['posts'], actions: ['read', 'create'] }, 'posts', 'create')).toBe(true);
-    });
-    it('wildcard collection matches anything', () => {
-        expect(validateApiKeyScope({ collections: ['*'], actions: ['read'] }, 'random', 'read')).toBe(true);
-    });
-    it('does not match a different collection without wildcard', () => {
-        expect(validateApiKeyScope({ collections: ['posts'], actions: ['read'] }, 'pages', 'read')).toBe(false);
-    });
-});
-describe('validateApiKeyGlobalScope', () => {
-    it('admin passes globals check', () => {
-        expect(validateApiKeyGlobalScope({ admin: true }, 'site-settings')).toBe(true);
-    });
-    it('denies when no globals scope is granted', () => {
-        expect(validateApiKeyGlobalScope({}, 'site-settings')).toBe(false);
-    });
-    it('matches explicit slug', () => {
-        expect(validateApiKeyGlobalScope({ globals: ['site-settings'] }, 'site-settings')).toBe(true);
-    });
-    it('matches wildcard', () => {
-        expect(validateApiKeyGlobalScope({ globals: ['*'] }, 'anything')).toBe(true);
-    });
-});
-describe('validateApiKeyMediaScope', () => {
-    it('admin passes', () => {
-        expect(validateApiKeyMediaScope({ admin: true })).toBe(true);
-    });
-    it('media flag passes', () => {
-        expect(validateApiKeyMediaScope({ media: true })).toBe(true);
-    });
-    it('without flag fails', () => {
-        expect(validateApiKeyMediaScope({})).toBe(false);
-    });
-});
-describe('validateApiKeyPageBuilderScope', () => {
-    it('admin passes', () => {
-        expect(validateApiKeyPageBuilderScope({ admin: true })).toBe(true);
-    });
-    it('pageBuilder flag passes', () => {
-        expect(validateApiKeyPageBuilderScope({ pageBuilder: true })).toBe(true);
-    });
-    it('without flag fails', () => {
-        expect(validateApiKeyPageBuilderScope({})).toBe(false);
-    });
-});
-describe('validateApiKeyIp', () => {
-    it('allows when no restrictions set', () => {
-        expect(validateApiKeyIp(null, '1.2.3.4')).toBe(true);
-        expect(validateApiKeyIp([], '1.2.3.4')).toBe(true);
-        expect(validateApiKeyIp(undefined, '1.2.3.4')).toBe(true);
-    });
-    it('allows when IP is in the allowlist', () => {
-        expect(validateApiKeyIp(['1.2.3.4', '5.6.7.8'], '5.6.7.8')).toBe(true);
-    });
-    it('denies when IP is not in the allowlist', () => {
-        expect(validateApiKeyIp(['1.2.3.4'], '5.6.7.8')).toBe(false);
-    });
-    it('denies when client IP is unknown but restrictions are set', () => {
-        expect(validateApiKeyIp(['1.2.3.4'], 'unknown')).toBe(false);
-    });
-});
-//# sourceMappingURL=api-key-enhanced.test.js.map

package/dist/__tests__/security/api-key-enhanced.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-enhanced.test.js","sourceRoot":"","sources":["../../../src/__tests__/security/api-key-enhanced.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,cAAc,EACd,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,gBAAgB,GACjB,MAAM,oCAAoC,CAAA;AAE3C,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC;YACvD,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;QAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACzC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,eAAe,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9D,MAAM,CAAC,eAAe,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChD,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CACJ,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CACtF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CACJ,mBAAmB,CACjB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EACvD,OAAO,EACP,QAAQ,CACT,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAC3F,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CACJ,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CACpF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,yBAAyB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,8BAA8B,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,8BAA8B,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/security/audit.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit.test.d.ts.map

package/dist/__tests__/security/audit.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/audit.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security/audit.test.js

@@ -1,50 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { initDB } from '../../db.js';
-import { logEvent, getAuditLog } from '../../security/audit.js';
-function createMockDB() {
-    const records = [];
-    return {
-        auditLog: {
-            create: async ({ data }) => {
-                const row = { ...data, id: `log-${records.length + 1}`, timestamp: new Date() };
-                records.push(row);
-                return row;
-            },
-            findMany: async ({ where, orderBy, skip, take }) => {
-                let filtered = records;
-                if (where?.event)
-                    filtered = filtered.filter((r) => r.event === where.event);
-                if (orderBy?.timestamp === 'desc') {
-                    filtered = [...filtered].sort((a, b) => b.timestamp.getTime() - a.timestamp.getTime());
-                }
-                return filtered.slice(skip ?? 0, (skip ?? 0) + (take ?? filtered.length));
-            },
-            count: async ({ where }) => {
-                if (!where?.event)
-                    return records.length;
-                return records.filter((r) => r.event === where.event).length;
-            },
-        },
-    };
-}
-describe('audit log', () => {
-    it('logEvent stores an entry and getAuditLog reads it back', async () => {
-        const db = createMockDB();
-        initDB(db);
-        await logEvent({ event: 'login_success', userId: 'u1', ipAddress: '203.0.113.5' });
-        const result = await getAuditLog({ event: 'login_success' });
-        expect(result.total).toBe(1);
-        expect(result.entries[0]).toMatchObject({ event: 'login_success', userId: 'u1' });
-    });
-    it('getAuditLog orders by timestamp (regression: previously used non-existent createdAt column)', async () => {
-        const db = createMockDB();
-        initDB(db);
-        await logEvent({ event: 'a' });
-        await new Promise((r) => setTimeout(r, 5));
-        await logEvent({ event: 'b' });
-        const result = await getAuditLog({});
-        expect(result.entries[0]?.event).toBe('b');
-        expect(result.entries[1]?.event).toBe('a');
-    });
-});
-//# sourceMappingURL=audit.test.js.map

package/dist/__tests__/security/audit.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.test.js","sourceRoot":"","sources":["../../../src/__tests__/security/audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAS,MAAM,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAE/D,SAAS,YAAY;IACnB,MAAM,OAAO,GAAU,EAAE,CAAA;IACzB,OAAO;QACL,QAAQ,EAAE;YACR,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAiB,EAAE,EAAE;gBACxC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAA;gBAC/E,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACjB,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAO,EAAE,EAAE;gBACtD,IAAI,QAAQ,GAAG,OAAO,CAAA;gBACtB,IAAI,KAAK,EAAE,KAAK;oBAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAA;gBAC5E,IAAI,OAAO,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;oBAClC,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;gBACxF,CAAC;gBACD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC3E,CAAC;YACD,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBAC9B,IAAI,CAAC,KAAK,EAAE,KAAK;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAA;gBACxC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;YAC9D,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;QAClF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/security/center.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=center.test.d.ts.map

package/dist/__tests__/security/center.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"center.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/center.test.ts"],"names":[],"mappings":""}