@aphexcms/cms-core 0.1.11 → 0.1.13

package/dist/storage/adapters/local-storage-adapter.js

@@ -0,0 +1,187 @@
+// Pure local file system storage adapter - no database operations
+import { writeFile, mkdir, unlink, stat, readdir } from 'fs/promises';
+import { join, dirname } from 'path';
+const DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB
+const DEFAULT_ALLOWED_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'image/gif',
+    'image/avif',
+    'application/pdf',
+    'text/plain'
+];
+/**
+ * Pure local file system storage adapter - only handles files
+ */
+export class LocalStorageAdapter {
+    name = 'local';
+    config;
+    constructor(config) {
+        this.config = {
+            basePath: config.basePath,
+            baseUrl: config.baseUrl || '',
+            maxFileSize: config.maxFileSize || DEFAULT_MAX_FILE_SIZE,
+            allowedTypes: config.allowedTypes || DEFAULT_ALLOWED_TYPES,
+            options: config.options || {}
+        };
+    }
+    /**
+     * Generate unique filename preserving original name
+     */
+    async generateUniqueFilename(originalFilename) {
+        const { name, ext } = this.parseFilename(originalFilename);
+        let filename = originalFilename;
+        let counter = 1;
+        // Check if file exists on disk
+        while (await this.fileExistsOnDisk(filename)) {
+            filename = `${name} (${counter})${ext}`;
+            counter++;
+        }
+        return filename;
+    }
+    /**
+     * Parse filename into name and extension
+     */
+    parseFilename(filename) {
+        const lastDotIndex = filename.lastIndexOf('.');
+        if (lastDotIndex === -1) {
+            return { name: filename, ext: '' };
+        }
+        return {
+            name: filename.substring(0, lastDotIndex),
+            ext: filename.substring(lastDotIndex)
+        };
+    }
+    /**
+     * Check if file exists on disk
+     */
+    async fileExistsOnDisk(filename) {
+        try {
+            const filePath = join(this.config.basePath, filename);
+            await stat(filePath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Store a file and return storage info
+     */
+    async store(data) {
+        // Validate file type
+        if (!this.config.allowedTypes.includes(data.mimeType)) {
+            throw new Error(`Invalid file type: ${data.mimeType}. Allowed types: ${this.config.allowedTypes.join(', ')}`);
+        }
+        // Validate file size
+        if (data.size > this.config.maxFileSize) {
+            throw new Error(`File too large: ${data.size} bytes. Maximum size: ${this.config.maxFileSize} bytes`);
+        }
+        // Generate unique filename
+        const filename = await this.generateUniqueFilename(data.filename);
+        const filePath = join(this.config.basePath, filename);
+        // Store internal path only - URL will be generated by API with asset ID
+        // This forces all access through /assets/{id} for proper authorization
+        const url = ''; // Will be populated as /assets/{assetId}/{filename} by the API
+        console.log('[LocalStorageAdapter] Storing file:', {
+            filename,
+            filePath,
+            note: 'URL will be generated as /assets/{assetId}/{filename}',
+            basePath: this.config.basePath
+        });
+        // Ensure storage directory exists
+        await mkdir(dirname(filePath), { recursive: true });
+        // Save file to disk
+        await writeFile(filePath, data.buffer);
+        return {
+            path: filePath,
+            url, // Empty - API will generate clean URL with asset ID
+            size: data.size
+        };
+    }
+    /**
+     * Read a file from storage
+     * Used by API endpoint to serve files
+     */
+    async getObject(path) {
+        const { readFile } = await import('fs/promises');
+        return await readFile(path);
+    }
+    /**
+     * Delete a file from storage
+     */
+    async delete(path) {
+        try {
+            await unlink(path);
+            return true;
+        }
+        catch (error) {
+            console.warn('Could not delete file from disk:', error);
+            return false;
+        }
+    }
+    /**
+     * Check if file exists
+     */
+    async exists(path) {
+        try {
+            await stat(path);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get public URL for a file path
+     */
+    getUrl(path) {
+        // Extract filename from path and construct URL
+        const filename = path.split('/').pop() || '';
+        return `${this.config.baseUrl}/${encodeURIComponent(filename)}`;
+    }
+    /**
+     * Get storage information
+     */
+    async getStorageInfo() {
+        try {
+            // Calculate total size of files in storage directory
+            const files = await readdir(this.config.basePath);
+            let totalSize = 0;
+            for (const file of files) {
+                try {
+                    const filePath = join(this.config.basePath, file);
+                    const stats = await stat(filePath);
+                    if (stats.isFile()) {
+                        totalSize += stats.size;
+                    }
+                }
+                catch {
+                    // Skip files that can't be read
+                }
+            }
+            return { totalSize };
+        }
+        catch (error) {
+            console.error('Error getting storage info:', error);
+            return { totalSize: 0 };
+        }
+    }
+    /**
+     * Health check - test if we can write to storage
+     */
+    async isHealthy() {
+        try {
+            const testFile = join(this.config.basePath, `health-check-${Date.now()}.tmp`);
+            await mkdir(dirname(testFile), { recursive: true });
+            await writeFile(testFile, 'health check');
+            await unlink(testFile);
+            return true;
+        }
+        catch (error) {
+            console.error('Storage health check failed:', error);
+            return false;
+        }
+    }
+}

package/dist/storage/index.d.ts

@@ -0,0 +1,3 @@
+export * from './interfaces/index.js';
+export * from './adapters/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/storage/index.ts"],"names":[],"mappings":"AAIA,cAAc,oBAAoB,CAAC;AAGnC,cAAc,kBAAkB,CAAC"}

package/{src/lib/storage/index.ts → dist/storage/index.js}

@@ -1,8 +1,6 @@
 // Aphex CMS Storage Layer
 // Ports and adapters for file storage operations
-
 // Interfaces
-export * from './interfaces/index';
-
+export * from './interfaces/index.js';
 // Adapters
-export * from './adapters/index';
+export * from './adapters/index.js';

package/dist/storage/interfaces/index.d.ts

@@ -0,0 +1,2 @@
+export * from './storage.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/interfaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/interfaces/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAC"}

package/dist/storage/interfaces/index.js

@@ -0,0 +1,2 @@
+// Storage interfaces
+export * from './storage.js';

package/dist/storage/interfaces/storage.d.ts

@@ -0,0 +1,91 @@
+export interface StorageFile {
+    path: string;
+    url: string;
+    size: number;
+}
+export interface UploadFileData {
+    buffer: Buffer;
+    filename: string;
+    mimeType: string;
+    size: number;
+}
+export interface StorageConfig {
+    basePath: string;
+    baseUrl?: string;
+    maxFileSize?: number;
+    allowedTypes?: string[];
+    options?: {
+        [key: string]: any;
+    };
+}
+export interface StorageObjectMetadata {
+    key: string;
+    size: number;
+    lastModified: Date;
+    contentType?: string;
+    etag?: string;
+}
+export interface ListObjectsOptions {
+    prefix?: string;
+    maxKeys?: number;
+    continuationToken?: string;
+}
+export interface ListObjectsResult {
+    objects: StorageObjectMetadata[];
+    isTruncated: boolean;
+    continuationToken?: string;
+}
+/**
+ * Pure storage interface - only handles file operations
+ * No database operations - completely agnostic
+ */
+export interface StorageAdapter {
+    readonly name: string;
+    store(data: UploadFileData): Promise<StorageFile>;
+    delete(path: string): Promise<boolean>;
+    exists(path: string): Promise<boolean>;
+    getUrl(path: string): string;
+    getStorageInfo(): Promise<{
+        totalSize: number;
+        availableSpace?: number;
+    }>;
+    isHealthy(): Promise<boolean>;
+    connect?(): Promise<void>;
+    disconnect?(): Promise<void>;
+    /**
+     * Retrieve file contents as Buffer
+     * Useful for: image processing, transformations, backups, migrations
+     */
+    getObject?(path: string): Promise<Buffer>;
+    /**
+     * List objects in storage with optional filtering
+     * Useful for: admin UI file browser, asset management, cleanup operations
+     */
+    listObjects?(options?: ListObjectsOptions): Promise<ListObjectsResult>;
+    /**
+     * Copy/duplicate an object within storage
+     * Useful for: versioning, backups, image variant generation
+     */
+    copyObject?(sourcePath: string, destPath: string): Promise<boolean>;
+    /**
+     * Get object metadata without downloading the file
+     * Useful for: verifying file integrity, checking size/type
+     */
+    getObjectMetadata?(path: string): Promise<StorageObjectMetadata>;
+    /**
+     * Generate a signed URL for temporary access to a file
+     * Useful for: access control, private files, secure downloads
+     * @param path - File path
+     * @param expiresIn - Expiration time in seconds (default: 3600)
+     * @returns Signed URL that expires after the specified time
+     */
+    getSignedUrl?(path: string, expiresIn?: number): Promise<string>;
+}
+/**
+ * Storage provider factory interface
+ */
+export interface StorageProvider {
+    name: string;
+    createAdapter(config: StorageConfig): StorageAdapter;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage/interfaces/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/interfaces/storage.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE;QACT,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACnB,CAAC;CACF;AAED,MAAM,WAAW,qBAAqB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,IAAI,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAE9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAGtB,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAG7B,cAAc,IAAI,OAAO,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IAGH,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAG9B,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAI7B;;;OAGG;IACH,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1C;;;OAGG;IACH,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEvE;;;OAGG;IACH,UAAU,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpE;;;OAGG;IACH,iBAAiB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAEjE;;;;;;OAMG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,CAAC;CACrD"}

package/dist/storage/interfaces/storage.js

@@ -0,0 +1 @@
+export {};

package/dist/storage/providers/storage.d.ts

@@ -0,0 +1,43 @@
+import type { StorageAdapter, StorageProvider, StorageConfig } from '../interfaces/storage.js';
+/**
+ * Local file system provider
+ */
+export declare class LocalStorageProvider implements StorageProvider {
+    name: string;
+    createAdapter(config: StorageConfig): StorageAdapter;
+}
+/**
+ * Storage provider registry
+ */
+declare class StorageProviderRegistry {
+    private providers;
+    constructor();
+    register(provider: StorageProvider): void;
+    get(name: string): StorageProvider | undefined;
+    list(): string[];
+}
+/**
+ * Global storage provider registry
+ *
+ * External packages can register custom storage providers:
+ *
+ * @example
+ * ```typescript
+ * import { storageProviders } from '@aphexcms/cms-core/server';
+ * import { R2StorageProvider } from '@aphexcms/storage-r2';
+ *
+ * // Register before creating config
+ * storageProviders.register(new R2StorageProvider());
+ * ```
+ */
+export declare const storageProviders: StorageProviderRegistry;
+/**
+ * Factory function to create storage adapters
+ */
+export declare function createStorageAdapter(providerName: string, config: StorageConfig): StorageAdapter;
+/**
+ * Convenience function for local storage
+ */
+export declare function createLocalStorageAdapter(basePath: string, options?: Partial<StorageConfig>): StorageAdapter;
+export {};
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage/providers/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/providers/storage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG5F;;GAEG;AACH,qBAAa,oBAAqB,YAAW,eAAe;IAC3D,IAAI,SAAW;IAEf,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc;CAGpD;AAED;;GAEG;AACH,cAAM,uBAAuB;IAC5B,OAAO,CAAC,SAAS,CAAsC;;IAOvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAIzC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAI9C,IAAI,IAAI,MAAM,EAAE;CAGhB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,yBAAgC,CAAC;AAE9D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,cAAc,CAWhG;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,cAAc,CAKhB"}

package/dist/storage/providers/storage.js

@@ -0,0 +1,64 @@
+import { LocalStorageAdapter } from '../adapters/local-storage-adapter.js';
+/**
+ * Local file system provider
+ */
+export class LocalStorageProvider {
+    name = 'local';
+    createAdapter(config) {
+        return new LocalStorageAdapter(config);
+    }
+}
+/**
+ * Storage provider registry
+ */
+class StorageProviderRegistry {
+    providers = new Map();
+    constructor() {
+        // Register built-in providers
+        this.register(new LocalStorageProvider());
+    }
+    register(provider) {
+        this.providers.set(provider.name.toLowerCase(), provider);
+    }
+    get(name) {
+        return this.providers.get(name.toLowerCase());
+    }
+    list() {
+        return Array.from(this.providers.keys());
+    }
+}
+/**
+ * Global storage provider registry
+ *
+ * External packages can register custom storage providers:
+ *
+ * @example
+ * ```typescript
+ * import { storageProviders } from '@aphexcms/cms-core/server';
+ * import { R2StorageProvider } from '@aphexcms/storage-r2';
+ *
+ * // Register before creating config
+ * storageProviders.register(new R2StorageProvider());
+ * ```
+ */
+export const storageProviders = new StorageProviderRegistry();
+/**
+ * Factory function to create storage adapters
+ */
+export function createStorageAdapter(providerName, config) {
+    const provider = storageProviders.get(providerName);
+    if (!provider) {
+        const available = storageProviders.list();
+        throw new Error(`Unknown storage provider: ${providerName}. Available providers: ${available.join(', ')}`);
+    }
+    return provider.createAdapter(config);
+}
+/**
+ * Convenience function for local storage
+ */
+export function createLocalStorageAdapter(basePath, options) {
+    return createStorageAdapter('local', {
+        basePath,
+        ...options
+    });
+}

package/dist/types/asset.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Asset type - represents uploaded files
+ */
+export interface Asset {
+    id: string;
+    organizationId: string;
+    assetType: string;
+    filename: string;
+    originalFilename: string;
+    mimeType: string;
+    size: number;
+    url: string;
+    path: string;
+    storageAdapter: string;
+    width: number | null;
+    height: number | null;
+    metadata: any;
+    title: string | null;
+    description: string | null;
+    alt: string | null;
+    creditLine: string | null;
+    createdBy: string | null;
+    createdAt: Date | null;
+    updatedAt: Date | null;
+}
+/**
+ * New asset input type
+ */
+export interface NewAsset {
+    id?: string;
+    assetType: string;
+    filename: string;
+    originalFilename: string;
+    mimeType: string;
+    size: number;
+    url: string;
+    path: string;
+    storageAdapter: string;
+    width?: number | null;
+    height?: number | null;
+    metadata?: any;
+    title?: string | null;
+    description?: string | null;
+    alt?: string | null;
+    creditLine?: string | null;
+    createdBy?: string | null;
+    createdAt?: Date | null;
+    updatedAt?: Date | null;
+}
+export interface ImageAsset {
+    _type: 'reference';
+    _ref: string;
+}
+export interface ImageCrop {
+    top: number;
+    bottom: number;
+    left: number;
+    right: number;
+}
+export interface ImageHotspot {
+    x: number;
+    y: number;
+    height: number;
+    width: number;
+}
+export interface ImageValue {
+    _type: 'image';
+    asset: ImageAsset;
+    crop?: ImageCrop;
+    hotspot?: ImageHotspot;
+    [key: string]: any;
+}
+//# sourceMappingURL=asset.d.ts.map

package/dist/types/asset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset.d.ts","sourceRoot":"","sources":["../../src/lib/types/asset.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,KAAK;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAGD,MAAM,WAAW,UAAU;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC5B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,OAAO,CAAC,EAAE,YAAY,CAAC;IAEvB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACnB"}

package/dist/types/asset.js

@@ -0,0 +1,2 @@
+// types/asset.ts
+export {};

package/dist/types/auth.d.ts

@@ -0,0 +1,50 @@
+import type { CMSUser } from './user.js';
+import type { OrganizationRole } from './organization.js';
+export interface SessionAuth {
+    type: 'session';
+    user: CMSUser;
+    session: {
+        id: string;
+        expiresAt: Date;
+    };
+    organizationId: string;
+    organizationRole: OrganizationRole;
+    organizations?: Array<{
+        id: string;
+        name: string;
+        slug: string;
+        role: OrganizationRole;
+        isActive: boolean;
+        metadata?: any;
+    }>;
+}
+export interface ApiKeyAuth {
+    type: 'api_key';
+    keyId: string;
+    name: string;
+    permissions: ('read' | 'write')[];
+    organizationId: string;
+    environment?: string;
+    lastUsedAt?: Date;
+}
+export type Auth = SessionAuth | ApiKeyAuth;
+/**
+ * Check if a user has write permissions based on their organization role
+ * Viewers have read-only access
+ */
+export declare function canWrite(auth: Auth): boolean;
+/**
+ * Check if a user can manage organization members
+ * Only owners and admins can manage members
+ */
+export declare function canManageMembers(auth: Auth): boolean;
+/**
+ * Check if a user can manage API keys
+ * Only owners and admins can manage API keys
+ */
+export declare function canManageApiKeys(auth: Auth): boolean;
+/**
+ * Check if a user is a viewer (read-only access)
+ */
+export declare function isViewer(auth: Auth): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/types/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/types/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,CAAC,EAAE,KAAK,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,GAAG,CAAC;KACf,CAAC,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GAAG,WAAW,GAAG,UAAU,CAAC;AAI5C;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAKpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAKpD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAK5C"}

package/dist/types/auth.js

@@ -0,0 +1,41 @@
+// Access control utilities
+/**
+ * Check if a user has write permissions based on their organization role
+ * Viewers have read-only access
+ */
+export function canWrite(auth) {
+    if (auth.type === 'api_key') {
+        return auth.permissions.includes('write');
+    }
+    // Viewers are read-only
+    return auth.organizationRole !== 'viewer';
+}
+/**
+ * Check if a user can manage organization members
+ * Only owners and admins can manage members
+ */
+export function canManageMembers(auth) {
+    if (auth.type === 'api_key') {
+        return false;
+    }
+    return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
+}
+/**
+ * Check if a user can manage API keys
+ * Only owners and admins can manage API keys
+ */
+export function canManageApiKeys(auth) {
+    if (auth.type === 'api_key') {
+        return false;
+    }
+    return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
+}
+/**
+ * Check if a user is a viewer (read-only access)
+ */
+export function isViewer(auth) {
+    if (auth.type === 'api_key') {
+        return !auth.permissions.includes('write');
+    }
+    return auth.organizationRole === 'viewer';
+}

package/dist/types/config.d.ts

@@ -0,0 +1,64 @@
+import type { AuthProvider } from '../auth/provider.js';
+import type { DatabaseAdapter } from '../db/index.js';
+import type { StorageAdapter } from '../storage/interfaces/index.js';
+import type { EmailAdapter } from '../email/index.js';
+import { SchemaType } from './schemas.js';
+export interface CMSPlugin {
+    name: string;
+    version: string;
+    routes?: {
+        [path: string]: (event: any) => Promise<Response> | Response;
+    };
+    install: (cms: any) => Promise<void>;
+    config?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Plugin reference with options
+ * Example: { name: '@aphexcms/graphql-plugin', options: { endpoint: '/api/graphql' } }
+ */
+export interface CMSPluginReference {
+    name: string;
+    options?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Plugin configuration - supports three formats:
+ * 1. String reference: '@aphexcms/graphql-plugin' (loaded at runtime)
+ * 2. Plugin reference with options: { name: '@aphexcms/graphql-plugin', options: {...} }
+ * 3. Instantiated plugin: createGraphQLPlugin({...}) (traditional, but causes large bundles)
+ */
+export type CMSPluginConfig = string | CMSPluginReference | CMSPlugin;
+export interface CMSConfig {
+    schemaTypes: SchemaType[];
+    database: DatabaseAdapter;
+    storage?: StorageAdapter | null;
+    email?: EmailAdapter | null;
+    customization?: {
+        branding?: {
+            title?: string;
+            logo?: string;
+            favicon?: string;
+        };
+        theme?: {
+            colors?: Record<string, string>;
+            fonts?: Record<string, string>;
+        };
+    };
+    plugins?: CMSPluginConfig[];
+    auth?: {
+        provider: AuthProvider;
+        loginUrl?: string;
+    };
+    security?: {
+        /**
+         * Secret key for signing asset URLs (enables multi-tenant access without exposing API keys)
+         * Should be a long, random string (e.g., 32+ characters)
+         * Required for signed asset URLs to work
+         */
+        assetSigningSecret?: string;
+    };
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;KAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACF"}