@adula/kit 0.2.0-alpha.3 → 1.0.0

package/build/src/commands/capabilities.d.ts

@@ -0,0 +1,19 @@
+import type { ResourceRegistry } from '../resource/registry.js';
+/** Field kinds accepted by defineResource, with their storage. */
+export declare const FIELD_TYPES: Record<string, string>;
+export declare const FIELD_OPTIONS: string[];
+export declare const RESOURCE_OPTIONS: string[];
+export declare const CONDITION_OPERATORS: string[];
+export declare const WORKFLOW_STEPS: string[];
+/**
+ * Kit services by concern. Every name is a public export of @adula/kit; a test
+ * checks this list against the package entry so the catalog cannot drift.
+ */
+export declare const SERVICES: Record<string, string[]>;
+export declare const EXTENSION_POINTS: string[];
+export declare const OUTSIDE_THE_KIT: string[];
+/** The capability catalog read by idea-review: generated, never hand-edited. */
+export declare function capabilityCatalog(options?: {
+    registry?: ResourceRegistry;
+    commands?: string[];
+}): string;

package/build/src/commands/capabilities.js

@@ -0,0 +1,160 @@
+import { KIT_VERSION } from '../version.js';
+/** Field kinds accepted by defineResource, with their storage. */
+export const FIELD_TYPES = {
+    string: 'varchar',
+    text: 'text',
+    integer: 'integer',
+    money: 'bigint minor units, decimal string in JSON',
+    boolean: 'boolean',
+    date: 'date (YYYY-MM-DD)',
+    datetime: 'timestamptz',
+    json: 'jsonb',
+    attachment: 'attachments row id; per-field accept/maxSize',
+    belongsTo: 'foreign key, preloaded, restrict on delete',
+    hasMany: 'child resource; inline rows saved with the parent',
+    lookup: 'lookups group key',
+};
+export const FIELD_OPTIONS = [
+    'required',
+    'unique (partial, active rows)',
+    'sortable',
+    'searchable (generated tsvector)',
+    'filterable',
+    'permissionLevel',
+    'sequence',
+    'column',
+];
+export const RESOURCE_OPTIONS = [
+    'scoped (required)',
+    'submittable (docStatus, submit/cancel/amend-by-copy)',
+    'version (optimistic locking, default with submittable)',
+    'customFields',
+    'list / form / show / serialize / hidden',
+    'actions',
+    'hooks.beforeSave / hooks.afterSave',
+];
+export const CONDITION_OPERATORS = ['$eq', '$ne', '$in', '$lt', '$gt', '$like'];
+export const WORKFLOW_STEPS = ['condition', 'update', 'notify', 'approval', 'delay', 'http', 'end'];
+/**
+ * Kit services by concern. Every name is a public export of @adula/kit; a test
+ * checks this list against the package entry so the catalog cannot drift.
+ */
+export const SERVICES = {
+    'Resources and authorization': [
+        'defineResource',
+        'ResourceRegistry',
+        'ResourceService',
+        'createResourceController',
+        'buildAbility',
+        'accessibleBy',
+        'ActorStore',
+        'packedResourceRules',
+    ],
+    'Records and collaboration': [
+        'RecordCollaboration',
+        'followerListeners',
+        'Assignments',
+        'SavedViews',
+        'logActivity',
+    ],
+    'Documents and workflows': ['defineWorkflow', 'WorkflowEngine', 'workflowListeners'],
+    'Notifications and messages': [
+        'notify',
+        'notifyWithTemplate',
+        'MessageTemplates',
+        'deliverNotificationMail',
+        'listenForNotifications',
+        'NotificationsAdmin',
+    ],
+    'Integration': [
+        'Webhooks',
+        'signWebhook',
+        'openApiDocument',
+        'ImportBatches',
+        'renderPrintHtml',
+        'htmlToPdf',
+    ],
+    'Security': ['UserInvitations', 'UsersAdmin', 'RolesAdmin'],
+    'Data and operations': [
+        'sequence',
+        'Settings',
+        'SettingsAdmin',
+        'publishOutbox',
+        'consumeEvent',
+        'recordMutation',
+        'moveOrgUnit',
+        'migrateStorage',
+        'verifyBackup',
+        'runtimeHealth',
+    ],
+};
+export const EXTENSION_POINTS = [
+    'Resource hooks (beforeSave, afterSave) inside the save transaction',
+    'Page override: inertia/pages/<resource>/{index,form,show}.tsx replaces the generated page',
+    'Domain events <module>.<resource>.{created,updated,deleted,submitted,cancelled,amended} with idempotent listeners',
+    'Module workflows (Module.workflows) with versioned definitions',
+    'Message templates edited per deployment',
+    'Outgoing webhooks and the bearer-token /api/v1 API',
+];
+export const OUTSIDE_THE_KIT = [
+    'Dynamic fields or a field editor screen',
+    'Runtime plugins',
+    'A visual workflow editor',
+    'Multi-tenant SaaS in one database (one deployment per organization)',
+    'XLSX import until a maintained parser passes the dependency rule (GAP-006)',
+];
+/** The capability catalog read by idea-review: generated, never hand-edited. */
+export function capabilityCatalog(options = {}) {
+    const lines = [
+        `# adula-kit capabilities (${KIT_VERSION})`,
+        '',
+        'Generated by `node ace adula:capabilities`. Read this before proposing a module; anything not listed here is not provided by the kit.',
+        '',
+        '## Resource definition',
+        '',
+        '| Field type | Storage |',
+        '|---|---|',
+        ...Object.entries(FIELD_TYPES).map(([type, storage]) => `| ${type} | ${storage} |`),
+        '',
+        `Field options: ${FIELD_OPTIONS.join(', ')}.`,
+        '',
+        `Resource options: ${RESOURCE_OPTIONS.join(', ')}.`,
+        '',
+        `Role rule conditions: ${CONDITION_OPERATORS.join(', ')} on scalar fields; unsupported conditions are refused. Organization scope is always added with AND.`,
+        '',
+        `Workflow steps: ${WORKFLOW_STEPS.join(', ')}.`,
+        '',
+        '## Services',
+        '',
+        ...Object.entries(SERVICES).map(([area, names]) => `- **${area}:** ${names.map((name) => `\`${name}\``).join(', ')}`),
+        '',
+        '## Extension points',
+        '',
+        ...EXTENSION_POINTS.map((point) => `- ${point}`),
+        '',
+        '## Outside the kit',
+        '',
+        ...OUTSIDE_THE_KIT.map((point) => `- ${point}`),
+    ];
+    if (options.commands?.length)
+        lines.push('', '## Commands', '', ...options.commands.map((command) => `- \`${command}\``));
+    if (options.registry) {
+        lines.push('', '## This project', '');
+        const modules = options.registry.modules();
+        if (!modules.length)
+            lines.push('No modules are registered yet.');
+        for (const module of modules) {
+            lines.push(`### ${module.name} — ${module.label.ar}`, '');
+            if (module.dependsOn.length)
+                lines.push(`Depends on: ${module.dependsOn.join(', ')}`, '');
+            for (const resource of module.resources)
+                lines.push(`- \`${resource.name}\` (${resource.label.ar}; ${resource.scoped ? 'scoped' : 'central'}${resource.submittable ? ', submittable' : ''}): ${Object.entries(resource.fields)
+                    .map(([key, field]) => `${key}:${field.type}${'resource' in field ? `→${field.resource}` : ''}`)
+                    .join(', ')}`);
+            for (const workflow of module.workflows ?? [])
+                lines.push(`- workflow \`${workflow.name}@${workflow.version}\` on ${workflow.resource}: ${Object.keys(workflow.steps).join(' → ')}`);
+            lines.push('');
+        }
+    }
+    return `${lines.join('\n').trimEnd()}\n`;
+}

package/build/src/commands/gap_report.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Prepares KIT_GAPS.md for sharing with the kit maintainers: e-mails, URLs and
+ * IPv4 addresses are masked, and gap titles are listed for a quick review.
+ */
+export declare function gapReport(content: string): {
+    masked: string;
+    titles: string[];
+};

package/build/src/commands/gap_report.js

@@ -0,0 +1,12 @@
+/**
+ * Prepares KIT_GAPS.md for sharing with the kit maintainers: e-mails, URLs and
+ * IPv4 addresses are masked, and gap titles are listed for a quick review.
+ */
+export function gapReport(content) {
+    const masked = content
+        .replace(/[\w.+-]+@[\w-]+(\.[\w-]+)+/g, '<email>')
+        .replace(/https?:\/\/[^\s)]+/g, '<url>')
+        .replace(/\b(?:\d{1,3}\.){3}\d{1,3}\b/g, '<ip>');
+    const titles = (masked.match(/^## GAP-\d+.*$/gm) ?? []).map((title) => title.replace(/^## /, ''));
+    return { masked, titles };
+}

package/build/src/core/message_templates.d.ts

@@ -0,0 +1,80 @@
+import type { Knex } from 'knex';
+export type TemplateDefinition = {
+    label: string;
+    subject: string;
+    body: string;
+    /** Variables available as {{name}}; unknown placeholders are refused on edit. */
+    variables: string[];
+    /** Whether notifications from this template are also delivered by e-mail. */
+    mail: boolean;
+};
+export type MessageTemplate = TemplateDefinition & {
+    key: string;
+    customized: boolean;
+    updatedAt: string | null;
+};
+export type RenderedMessage = {
+    subject: string;
+    body: string;
+    mail: boolean;
+};
+/**
+ * Package-owned defaults. Projects edit wording in the message_templates table;
+ * an upgrade can change a default without overwriting a project's edit.
+ */
+export declare const DEFAULT_TEMPLATES: Record<string, TemplateDefinition>;
+export declare function renderTemplate(text: string, variables: Record<string, unknown>): string;
+/** Message templates: package defaults plus per-deployment overrides edited by administrators. */
+export declare class MessageTemplates {
+    private db;
+    private definitions;
+    constructor(db: Knex, definitions?: Record<string, TemplateDefinition>);
+    list(): Promise<MessageTemplate[]>;
+    render(key: string, variables: Record<string, unknown>, db?: Knex): Promise<RenderedMessage>;
+    update(key: string, input: {
+        subject: unknown;
+        body: unknown;
+        mail?: unknown;
+    }, actorId: number): Promise<void>;
+    reset(key: string): Promise<void>;
+    /** Example output with sample values, for the editor preview. */
+    preview(key: string, input: {
+        subject: string;
+        body: string;
+    }): {
+        subject: string;
+        body: string;
+    };
+    private definition;
+}
+/**
+ * Inserts a templated notification in the caller's transaction. Templates with
+ * mail enabled mark the row for the mail delivery worker (deliverNotificationMail).
+ */
+export declare function notifyWithTemplate(db: Knex, userId: number, key: string, variables: Record<string, unknown>, templates?: MessageTemplates): Promise<void>;
+export type MailSender = (message: {
+    to: string;
+    name: string | null;
+    subject: string;
+    text: string;
+}) => Promise<void>;
+/**
+ * Delivers pending notification e-mails. Rows are claimed with SKIP LOCKED so
+ * several workers never send the same message; failures are retried three times.
+ */
+export declare function deliverNotificationMail(db: Knex, send: MailSender, limit?: number): Promise<{
+    sent: number;
+    failed: number;
+}>;
+export type NotificationSignal = {
+    userId: number;
+    id: number;
+};
+/**
+ * Holds one database connection that LISTENs for committed notifications and
+ * calls onSignal for each. Reconnects after connection loss. Returns a stop function.
+ */
+export declare function listenForNotifications(db: Knex, onSignal: (signal: NotificationSignal) => void, options?: {
+    retryMs?: number;
+    onError?: (error: unknown) => void;
+}): () => Promise<void>;

package/build/src/core/message_templates.js

@@ -0,0 +1,288 @@
+import { KitError } from '../admin/errors.js';
+/**
+ * Package-owned defaults. Projects edit wording in the message_templates table;
+ * an upgrade can change a default without overwriting a project's edit.
+ */
+export const DEFAULT_TEMPLATES = {
+    'comment.mentioned': {
+        label: 'إشارة في تعليق',
+        subject: 'أشار إليك {{author}}',
+        body: 'في {{resource}} #{{id}}: {{excerpt}}',
+        variables: ['author', 'resource', 'id', 'excerpt'],
+        mail: true,
+    },
+    'comment.created': {
+        label: 'تعليق على سجل تتابعه',
+        subject: 'تعليق جديد على {{resource}} #{{id}}',
+        body: '{{author}}: {{excerpt}}',
+        variables: ['author', 'resource', 'id', 'excerpt'],
+        mail: false,
+    },
+    'record.changed': {
+        label: 'تغيير سجل تتابعه',
+        subject: '{{change}} {{resource}} #{{id}}',
+        body: 'سجل تتابعه تغيّر.',
+        variables: ['change', 'resource', 'id'],
+        mail: false,
+    },
+    'assignment.created': {
+        label: 'مهمة جديدة',
+        subject: 'مهمة جديدة مسندة إليك',
+        body: '{{title}} — {{resource}} #{{id}}',
+        variables: ['title', 'resource', 'id', 'due'],
+        mail: true,
+    },
+    'assignment.approval': {
+        label: 'طلب موافقة',
+        subject: 'موافقة مطلوبة منك',
+        body: '{{title}} — {{resource}} #{{id}}',
+        variables: ['title', 'resource', 'id', 'due'],
+        mail: true,
+    },
+    'assignment.done': {
+        label: 'إنجاز مهمة أسندتها',
+        subject: 'أُنجزت مهمة أسندتها',
+        body: '{{title}} — {{resource}} #{{id}}',
+        variables: ['title', 'resource', 'id'],
+        mail: false,
+    },
+    'assignment.cancelled': {
+        label: 'إلغاء مهمة مسندة إليك',
+        subject: 'أُلغيت مهمة مسندة إليك',
+        body: '{{title}} — {{resource}} #{{id}}',
+        variables: ['title', 'resource', 'id'],
+        mail: false,
+    },
+    'workflow.decided': {
+        label: 'نتيجة تدفق عمل',
+        subject: '{{outcome}}: {{resource}} #{{id}}',
+        body: '{{workflow}} — {{step}}',
+        variables: ['outcome', 'resource', 'id', 'workflow', 'step'],
+        mail: true,
+    },
+    'workflow.failed': {
+        label: 'فشل خطوة تدفق',
+        subject: 'فشلت خطوة في تدفق {{workflow}}',
+        body: '{{resource}} #{{id}} — {{error}}',
+        variables: ['workflow', 'resource', 'id', 'error'],
+        mail: true,
+    },
+    'webhook.failed': {
+        label: 'تعطل Webhook',
+        subject: 'تعذّر تسليم Webhook: {{name}}',
+        body: '{{event}} — {{error}}',
+        variables: ['name', 'event', 'error'],
+        mail: true,
+    },
+    'import.finished': {
+        label: 'اكتمال استيراد',
+        subject: 'اكتمل استيراد {{resource}}',
+        body: 'نجح {{created}} صفاً، وفشل {{failed}}.',
+        variables: ['resource', 'created', 'failed'],
+        mail: false,
+    },
+};
+const PLACEHOLDER = /\{\{\s*([a-zA-Z][a-zA-Z0-9_]*)\s*\}\}/g;
+const SUBJECT_LIMIT = 200;
+const BODY_LIMIT = 4000;
+export function renderTemplate(text, variables) {
+    return text.replace(PLACEHOLDER, (_, name) => {
+        const value = variables[name];
+        return value === null || value === undefined ? '' : String(value);
+    });
+}
+/** Message templates: package defaults plus per-deployment overrides edited by administrators. */
+export class MessageTemplates {
+    db;
+    definitions;
+    constructor(db, definitions = DEFAULT_TEMPLATES) {
+        this.db = db;
+        this.definitions = definitions;
+    }
+    async list() {
+        const rows = await this.db('message_templates').select('*');
+        const overrides = new Map(rows.map((row) => [String(row.key), row]));
+        return Object.entries(this.definitions).map(([key, definition]) => {
+            const row = overrides.get(key);
+            return {
+                key,
+                ...definition,
+                subject: row ? String(row.subject) : definition.subject,
+                body: row ? String(row.body) : definition.body,
+                mail: row ? Boolean(row.mail) : definition.mail,
+                customized: Boolean(row),
+                updatedAt: row ? new Date(row.updated_at).toISOString() : null,
+            };
+        });
+    }
+    async render(key, variables, db = this.db) {
+        const definition = this.definition(key);
+        const row = await db('message_templates').where('key', key).first();
+        return {
+            subject: renderTemplate(row ? String(row.subject) : definition.subject, variables).slice(0, 255),
+            body: renderTemplate(row ? String(row.body) : definition.body, variables),
+            mail: row ? Boolean(row.mail) : definition.mail,
+        };
+    }
+    async update(key, input, actorId) {
+        const definition = this.definition(key);
+        const subject = typeof input.subject === 'string' ? input.subject.trim() : '';
+        const body = typeof input.body === 'string' ? input.body.trim() : '';
+        if (!subject || subject.length > SUBJECT_LIMIT)
+            throw new KitError(422, 'E_TEMPLATE_SUBJECT', 'العنوان مطلوب ولا يتجاوز 200 حرف');
+        if (!body || body.length > BODY_LIMIT)
+            throw new KitError(422, 'E_TEMPLATE_BODY', 'نص الرسالة مطلوب ولا يتجاوز 4000 حرف');
+        for (const text of [subject, body])
+            for (const [, name] of text.matchAll(PLACEHOLDER))
+                if (!definition.variables.includes(name))
+                    throw new KitError(422, 'E_TEMPLATE_VARIABLE', `متغير غير معروف في القالب: ${name}`);
+        const mail = input.mail === undefined ? definition.mail : input.mail === true;
+        await this.db('message_templates')
+            .insert({ key, subject, body, mail, updated_by: actorId, updated_at: this.db.fn.now() })
+            .onConflict('key')
+            .merge(['subject', 'body', 'mail', 'updated_by', 'updated_at']);
+    }
+    async reset(key) {
+        this.definition(key);
+        await this.db('message_templates').where('key', key).del();
+    }
+    /** Example output with sample values, for the editor preview. */
+    preview(key, input) {
+        const definition = this.definition(key);
+        const sample = Object.fromEntries(definition.variables.map((name) => [name, `‹${name}›`]));
+        return {
+            subject: renderTemplate(input.subject, sample),
+            body: renderTemplate(input.body, sample),
+        };
+    }
+    definition(key) {
+        const definition = Object.hasOwn(this.definitions, key) ? this.definitions[key] : undefined;
+        if (!definition)
+            throw new KitError(404, 'E_TEMPLATE_NOT_FOUND', 'القالب غير موجود');
+        return definition;
+    }
+}
+/**
+ * Inserts a templated notification in the caller's transaction. Templates with
+ * mail enabled mark the row for the mail delivery worker (deliverNotificationMail).
+ */
+export async function notifyWithTemplate(db, userId, key, variables, templates = new MessageTemplates(db)) {
+    const message = await templates.render(key, variables, db);
+    await db('notifications').insert({
+        user_id: userId,
+        title: message.subject,
+        body: message.body,
+        template_key: key,
+        mail_state: message.mail ? 'pending' : null,
+    });
+}
+/**
+ * Delivers pending notification e-mails. Rows are claimed with SKIP LOCKED so
+ * several workers never send the same message; failures are retried three times.
+ */
+export async function deliverNotificationMail(db, send, limit = 50) {
+    let sent = 0;
+    let failed = 0;
+    await db.transaction(async (trx) => {
+        const rows = await trx('notifications as n')
+            .join('users as u', 'u.id', 'n.user_id')
+            .where('n.mail_state', 'pending')
+            .orderBy('n.id')
+            .limit(limit)
+            .forUpdate('n')
+            .skipLocked()
+            .select('n.id', 'n.title', 'n.body', 'n.mail_attempts', 'u.email', 'u.full_name', 'u.disabled_at');
+        for (const row of rows) {
+            if (row.disabled_at) {
+                await trx('notifications').where('id', row.id).update({ mail_state: 'skipped' });
+                continue;
+            }
+            try {
+                await send({
+                    to: String(row.email),
+                    name: row.full_name ? String(row.full_name) : null,
+                    subject: String(row.title),
+                    text: String(row.body),
+                });
+                await trx('notifications')
+                    .where('id', row.id)
+                    .update({ mail_state: 'sent', mailed_at: trx.fn.now() });
+                sent++;
+            }
+            catch (error) {
+                const attempts = Number(row.mail_attempts ?? 0) + 1;
+                await trx('notifications')
+                    .where('id', row.id)
+                    .update({
+                    mail_state: attempts >= 3 ? 'failed' : 'pending',
+                    mail_attempts: attempts,
+                    mail_error: String(error.message ?? error).slice(0, 500),
+                });
+                failed++;
+            }
+        }
+    });
+    return { sent, failed };
+}
+/**
+ * Holds one database connection that LISTENs for committed notifications and
+ * calls onSignal for each. Reconnects after connection loss. Returns a stop function.
+ */
+export function listenForNotifications(db, onSignal, options = {}) {
+    let stopped = false;
+    let connection;
+    let timer;
+    const connect = async () => {
+        try {
+            connection = await db.client.acquireConnection();
+            connection.on('notification', (message) => {
+                if (message.channel !== 'kit_notifications' || !message.payload)
+                    return;
+                try {
+                    const parsed = JSON.parse(message.payload);
+                    if (Number.isSafeInteger(parsed.userId) && Number.isSafeInteger(parsed.id))
+                        onSignal({ userId: parsed.userId, id: parsed.id });
+                }
+                catch (error) {
+                    options.onError?.(error);
+                }
+            });
+            connection.once('error', (error) => {
+                options.onError?.(error);
+                void reconnect();
+            });
+            await connection.query('LISTEN kit_notifications');
+        }
+        catch (error) {
+            options.onError?.(error);
+            void reconnect();
+        }
+    };
+    const release = async () => {
+        const current = connection;
+        connection = undefined;
+        if (!current)
+            return;
+        current.removeAllListeners('notification');
+        try {
+            await current.query('UNLISTEN *');
+        }
+        catch { }
+        // A broken connection is destroyed rather than returned to the pool.
+        await db.client.releaseConnection(current).catch(() => { });
+    };
+    const reconnect = async () => {
+        await release();
+        if (stopped)
+            return;
+        timer = setTimeout(() => void connect(), options.retryMs ?? 2000);
+        timer.unref?.();
+    };
+    void connect();
+    return async () => {
+        stopped = true;
+        if (timer)
+            clearTimeout(timer);
+        await release();
+    };
+}

package/build/src/core/saved_views.js

@@ -1,7 +1,10 @@
 import { buildAbility } from '../auth/ability.js';
 import { KitError } from '../admin/errors.js';
+import { canQueryField } from '../admin/resource_service.js';
 const NAME_LIMIT = 60;
 const VIEW_LIMIT = 50;
+/** Shared views are visible to every viewer of a resource; cap them per resource. */
+const SHARED_LIMIT = 100;
 /**
  * A saved view is stored user input that later drives a list query, so every key
  * is validated against the resource definition before it is written and again
@@ -16,12 +19,14 @@ export class SavedViews {
         this.registry = registry;
     }
     async list(name, actor) {
-        const resource = this.authorize(name, actor);
+        const { resource } = this.authorize(name, actor);
+        // Own views first, so colleagues' shared views can never crowd them out.
         const rows = await this.db('saved_views')
             .where('resource', resource.name)
             .where((where) => where.where('user_id', actor.id).orWhere('shared', true))
+            .orderByRaw('(user_id = ?) DESC', [actor.id])
             .orderBy('name')
-            .limit(VIEW_LIMIT * 2);
+            .limit(VIEW_LIMIT + SHARED_LIMIT);
         return rows.flatMap((row) => {
             const query = this.sanitize(resource, row.query);
             return query
@@ -38,15 +43,35 @@ export class SavedViews {
         });
     }
     async save(name, actor, input) {
-        const resource = this.authorize(name, actor);
+        const { resource, ability } = this.authorize(name, actor);
         const label = typeof input.name === 'string' ? input.name.trim() : '';
         if (!label || label.length > NAME_LIMIT)
             throw new KitError(422, 'E_VIEW_NAME', 'اسم العرض مطلوب ولا يتجاوز 60 حرفاً');
         const query = this.sanitize(resource, input.query, true);
+        // A view may only query what its author may query; stored filters must not probe hidden fields.
+        const queried = [
+            ...(query.sort ? [query.sort] : []),
+            ...Object.keys(query.filters ?? {}),
+            ...(query.search
+                ? Object.entries(resource.fields)
+                    .filter(([, field]) => field.searchable)
+                    .map(([key]) => key)
+                : []),
+        ];
+        for (const key of queried)
+            if (!canQueryField(resource, actor, ability, key))
+                throw new KitError(403, 'E_FIELD_FORBIDDEN', `لا يمكنك الاستعلام بهذا الحقل: ${key}`);
         const shared = input.shared === true;
         const existing = await this.db('saved_views')
             .where({ user_id: actor.id, resource: resource.name, name: label })
-            .first('id');
+            .first('id', 'shared');
+        if (shared && !existing?.shared) {
+            const [{ count }] = await this.db('saved_views')
+                .where({ resource: resource.name, shared: true })
+                .count('* as count');
+            if (Number(count) >= SHARED_LIMIT)
+                throw new KitError(422, 'E_VIEW_LIMIT', 'بلغ هذا الكيان الحد الأقصى للعروض المشتركة');
+        }
         if (!existing) {
             const [{ count }] = await this.db('saved_views')
                 .where({ user_id: actor.id, resource: resource.name })
@@ -68,7 +93,7 @@ export class SavedViews {
         return { id: Number(row.id), name: label, query, shared, own: true };
     }
     async remove(name, actor, id) {
-        const resource = this.authorize(name, actor);
+        const { resource } = this.authorize(name, actor);
         const removed = await this.db('saved_views')
             .where({ id, resource: resource.name, user_id: actor.id })
             .del();
@@ -80,7 +105,7 @@ export class SavedViews {
         const ability = buildAbility(actor.rules, this.registry.all());
         if (!resource.actions.includes('view') || !ability.can('view', resource.name))
             throw new KitError(403, 'E_FORBIDDEN', 'ليس لديك صلاحية لهذا الكيان');
-        return resource;
+        return { resource, ability };
     }
     /** Returns null for a stored view the resource no longer supports; throws on user input. */
     sanitize(resource, value, strict = false) {

package/build/src/core/user_invitations.js

@@ -104,8 +104,8 @@ export class UserInvitations {
     async accept(token, password, hashPassword) {
         if (!(await this.valid(token)))
             throw invalid();
-        if (typeof password !== 'string' || password.length < 8 || password.length > 32)
-            throw new KitError(422, 'E_PASSWORD', 'كلمة المرور من 8 إلى 32 حرفًا');
+        if (typeof password !== 'string' || password.length < 8 || password.length > 64)
+            throw new KitError(422, 'E_PASSWORD', 'كلمة المرور من 8 إلى 64 حرفًا');
         const passwordHash = await hashPassword(password);
         return this.db.transaction(async (trx) => {
             const pending = await trx('user_invitations').where('token_hash', digest(token)).first();