@aphexcms/cms-core 0.2.3 → 1.0.0

package/dist/lib/types/auth.d.ts

@@ -0,0 +1,62 @@
+import type { CMSUser } from './user.js';
+import type { OrganizationRole } from './organization.js';
+export interface SessionAuth {
+    type: 'session';
+    user: CMSUser;
+    session: {
+        id: string;
+        expiresAt: Date;
+    };
+    organizationId: string;
+    organizationRole: OrganizationRole;
+    organizations?: Array<{
+        id: string;
+        name: string;
+        slug: string;
+        role: OrganizationRole;
+        isActive: boolean;
+        metadata?: any;
+    }>;
+}
+/**
+ * Partial session — user is authenticated but has no active organization.
+ * Used for routes like /invitations where the user hasn't joined an org yet.
+ */
+export interface PartialSessionAuth {
+    type: 'partial_session';
+    user: CMSUser;
+    session: {
+        id: string;
+        expiresAt: Date;
+    };
+}
+export interface ApiKeyAuth {
+    type: 'api_key';
+    keyId: string;
+    name: string;
+    permissions: ('read' | 'write')[];
+    organizationId: string;
+    environment?: string;
+    lastUsedAt?: Date;
+}
+export type Auth = SessionAuth | PartialSessionAuth | ApiKeyAuth;
+/**
+ * Check if a user has write permissions based on their organization role
+ * Viewers have read-only access
+ */
+export declare function canWrite(auth: Auth): boolean;
+/**
+ * Check if a user can manage organization members
+ * Only owners and admins can manage members
+ */
+export declare function canManageMembers(auth: Auth): boolean;
+/**
+ * Check if a user can manage API keys
+ * Only owners and admins can manage API keys
+ */
+export declare function canManageApiKeys(auth: Auth): boolean;
+/**
+ * Check if a user is a viewer (read-only access)
+ */
+export declare function isViewer(auth: Auth): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/types/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/types/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,CAAC,EAAE,KAAK,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,GAAG,CAAC;KACf,CAAC,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;CACF;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GAAG,WAAW,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAIjE;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGpD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C"}

package/dist/lib/types/auth.js

@@ -4,10 +4,11 @@
  * Viewers have read-only access
  */
 export function canWrite(auth) {
+    if (auth.type === 'partial_session')
+        return false;
     if (auth.type === 'api_key') {
         return auth.permissions.includes('write');
     }
-    // Viewers are read-only
     return auth.organizationRole !== 'viewer';
 }
 /**
@@ -15,9 +16,8 @@ export function canWrite(auth) {
  * Only owners and admins can manage members
  */
 export function canManageMembers(auth) {
-    if (auth.type === 'api_key') {
+    if (auth.type === 'api_key' || auth.type === 'partial_session')
         return false;
-    }
     return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
 }
 /**
@@ -25,17 +25,19 @@ export function canManageMembers(auth) {
  * Only owners and admins can manage API keys
  */
 export function canManageApiKeys(auth) {
-    if (auth.type === 'api_key') {
+    if (auth.type === 'api_key' || auth.type === 'partial_session')
         return false;
-    }
     return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
 }
 /**
  * Check if a user is a viewer (read-only access)
  */
 export function isViewer(auth) {
+    if (auth.type === 'partial_session')
+        return true;
     if (auth.type === 'api_key') {
         return !auth.permissions.includes('write');
     }
     return auth.organizationRole === 'viewer';
 }
+//# sourceMappingURL=auth.js.map

package/dist/lib/types/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/types/auth.ts"],"names":[],"mappings":"AAgDA,2BAA2B;AAE3B;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAU;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAU;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,CAAC;AAC3C,CAAC"}

package/dist/lib/types/config.d.ts

@@ -0,0 +1,77 @@
+import type { AuthProvider } from '../auth/provider.js';
+import type { DatabaseAdapter } from '../db/index.js';
+import type { StorageAdapter } from '../storage/interfaces/index.js';
+import type { EmailAdapter } from '../email/index.js';
+import type { GraphQLConfig } from '../graphql/index.js';
+import type { SchemaType } from './schemas.js';
+export type { GraphQLConfig };
+export interface CMSPlugin {
+    name: string;
+    version: string;
+    routes?: {
+        [path: string]: (event: any) => Promise<Response> | Response;
+    };
+    install: (cms: any) => Promise<void>;
+    config?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Plugin reference with options
+ * Example: { name: '@aphexcms/graphql-plugin', options: { endpoint: '/api/graphql' } }
+ */
+export interface CMSPluginReference {
+    name: string;
+    options?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Plugin configuration - supports three formats:
+ * 1. String reference: '@aphexcms/graphql-plugin' (loaded at runtime)
+ * 2. Plugin reference with options: { name: '@aphexcms/graphql-plugin', options: {...} }
+ * 3. Instantiated plugin: createGraphQLPlugin({...}) (traditional, but causes large bundles)
+ */
+export type CMSPluginConfig = string | CMSPluginReference | CMSPlugin;
+export interface CMSConfig {
+    schemaTypes: SchemaType[];
+    database: DatabaseAdapter;
+    storage?: StorageAdapter | null;
+    email?: EmailAdapter | null;
+    customization?: {
+        branding?: {
+            title?: string;
+            logo?: string;
+            favicon?: string;
+        };
+        theme?: {
+            colors?: Record<string, string>;
+            fonts?: Record<string, string>;
+        };
+    };
+    /**
+     * GraphQL API configuration.
+     * - `true` or `undefined`: enabled with defaults (endpoint: /api/graphql, GraphiQL: on)
+     * - `false`: disabled entirely
+     * - `GraphQLConfig` object: enabled with custom options
+     */
+    graphql?: boolean | GraphQLConfig;
+    /**
+     * Log level for CMS output. Defaults to 'debug' in dev, 'warn' in production.
+     */
+    logLevel?: 'debug' | 'info' | 'warn' | 'error' | 'none';
+    plugins?: CMSPluginConfig[];
+    auth?: {
+        provider: AuthProvider;
+        loginUrl?: string;
+    };
+    security?: {
+        /**
+         * Secret key for signing asset URLs (enables multi-tenant access without exposing API keys)
+         * Should be a long, random string (e.g., 32+ characters)
+         * Required for signed asset URLs to work
+         */
+        assetSigningSecret?: string;
+    };
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;KAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACF"}

package/dist/lib/types/config.js

@@ -1 +1,2 @@
 export {};
+//# sourceMappingURL=config.js.map

package/dist/lib/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":""}

package/dist/lib/types/document.d.ts

@@ -0,0 +1,35 @@
+import type { AuthUser } from '../types/user.js';
+/**
+ * Document type - represents a CMS document
+ */
+export interface Document {
+    id: string;
+    organizationId: string;
+    type: string;
+    status: 'draft' | 'published' | null;
+    draftData: any;
+    publishedData: any;
+    publishedHash: string | null;
+    createdBy: string | AuthUser | null;
+    updatedBy: string | null;
+    publishedAt: Date | null;
+    createdAt: Date | null;
+    updatedAt: Date | null;
+}
+/**
+ * New document input type
+ */
+export interface NewDocument {
+    id?: string;
+    type: string;
+    status?: 'draft' | 'published' | null;
+    draftData?: any;
+    publishedData?: any;
+    publishedHash?: string | null;
+    createdBy?: string | null;
+    updatedBy?: string | null;
+    publishedAt?: Date | null;
+    createdAt?: Date | null;
+    updatedAt?: Date | null;
+}
+//# sourceMappingURL=document.d.ts.map

package/dist/lib/types/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../../src/lib/types/document.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACtC,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}

package/dist/lib/types/document.js

@@ -1 +1,2 @@
 export {};
+//# sourceMappingURL=document.js.map

package/dist/lib/types/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../../src/lib/types/document.ts"],"names":[],"mappings":""}

package/dist/lib/types/filters.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Valid filter value types
+ */
+export type FilterValue = string | number | boolean | Date | null;
+/**
+ * Field filter operators with type-safe constraints
+ * Each adapter will parse these into their specific query language
+ */
+export interface FieldFilter<T = unknown> {
+    equals?: T;
+    not_equals?: T;
+    in?: T[];
+    not_in?: T[];
+    exists?: boolean;
+    greater_than?: T extends number | Date ? T : number | Date;
+    greater_than_equal?: T extends number | Date ? T : number | Date;
+    less_than?: T extends number | Date ? T : number | Date;
+    less_than_equal?: T extends number | Date ? T : number | Date;
+    like?: T extends string ? string : string;
+    contains?: T extends string ? string : string;
+    starts_with?: T extends string ? string : string;
+    ends_with?: T extends string ? string : string;
+}
+/**
+ * WHERE clause for filtering (database-agnostic)
+ * Each adapter will parse this into their specific query language
+ *
+ * Examples:
+ * ```typescript
+ * // Simple field filters
+ * { title: { contains: 'blog' } }
+ * { status: { equals: 'published' } }
+ *
+ * // Multiple conditions (implicit AND)
+ * {
+ *   status: { equals: 'published' },
+ *   publishedAt: { greater_than: new Date('2024-01-01') }
+ * }
+ *
+ * // Nested OR logic
+ * {
+ *   status: { equals: 'published' },
+ *   or: [
+ *     { 'author.name': { equals: 'John' } },
+ *     { 'author.name': { equals: 'Jane' } }
+ *   ]
+ * }
+ *
+ * // Nested AND logic
+ * {
+ *   and: [
+ *     { 'seo.title': { contains: 'blog' } },
+ *     { content: { exists: true } }
+ *   ]
+ * }
+ * ```
+ */
+export interface Where<T = unknown> {
+    and?: Where<T>[];
+    or?: Where<T>[];
+    [field: string]: FieldFilter<unknown> | FilterValue | FieldFilter<unknown>[] | Where<T>[] | undefined;
+}
+/**
+ * Helper type to flatten object into dot-notation paths
+ * Limits depth to 3 levels to avoid infinite recursion and improve performance
+ */
+type DotNotation<T, D extends number = 3> = D extends 0 ? never : T extends object ? {
+    [K in keyof T & string]: K | (T[K] extends object ? T[K] extends Array<any> ? never : `${K}.${DotNotation<T[K], Prev[D]>}` : never);
+}[keyof T & string] : never;
+type Prev = [never, 0, 1, 2, 3];
+/**
+ * Helper type to extract the value type at a given path
+ * Handles both direct keys and dot-notation paths
+ */
+type PathValue<T, P> = P extends `${infer K}.${infer Rest}` ? K extends keyof T ? PathValue<T[K], Rest> : unknown : P extends keyof T ? T[P] : unknown;
+/**
+ * Type-safe WHERE clause with autocomplete for field names
+ * Provides autocomplete for known fields while still allowing dynamic field names
+ */
+export type WhereTyped<T> = {
+    and?: WhereTyped<T>[];
+    or?: WhereTyped<T>[];
+} & {
+    [K in DotNotation<T> | (keyof T & string)]?: FieldFilter<PathValue<T, K>> | FilterValue;
+} & {
+    [field: string]: FieldFilter<unknown> | FilterValue | WhereTyped<T>[] | undefined;
+};
+/**
+ * Options for find operations (database-agnostic)
+ */
+export interface FindOptions<T = unknown> {
+    /**
+     * Filter conditions
+     * When T is provided, you get autocomplete on field names!
+     */
+    where?: WhereTyped<T>;
+    /**
+     * Maximum number of results to return
+     * @default 50
+     */
+    limit?: number;
+    /**
+     * Number of results to skip (for pagination)
+     * @default 0
+     */
+    offset?: number;
+    /**
+     * Sort order
+     * - Single field: 'title' (ascending) or '-publishedAt' (descending)
+     * - Multiple fields: ['title', '-publishedAt']
+     */
+    sort?: string | string[];
+    /**
+     * Reference resolution depth
+     * - 0: No reference resolution
+     * - 1: Resolve first-level references
+     * - 2: Resolve second-level references
+     * @default 0
+     */
+    depth?: number;
+    /**
+     * Field selection (projection)
+     * - Only return specified fields
+     * - Example: ['id', 'title', 'slug']
+     */
+    select?: string[];
+    /**
+     * Perspective to query
+     * - 'draft': Query draft data
+     * - 'published': Query published data
+     * @default 'draft'
+     */
+    perspective?: 'draft' | 'published';
+    /**
+     * Include documents from child organizations
+     * - Only applies when hierarchyEnabled is true
+     * @default false
+     */
+    includeChildOrganizations?: boolean;
+    /**
+     * Filter to specific organization IDs
+     * - Overrides the default single organizationId filter
+     * - Useful for multi-org queries (e.g., parent + children)
+     * - RLS will still enforce access control
+     */
+    filterOrganizationIds?: string[];
+}
+/**
+ * Result from find operations with pagination metadata
+ */
+export interface FindResult<T> {
+    /**
+     * Array of documents matching the query
+     */
+    docs: T[];
+    /**
+     * Total number of documents matching the query (without limit/offset)
+     */
+    totalDocs: number;
+    /**
+     * Maximum number of results returned per page
+     */
+    limit: number;
+    /**
+     * Number of results skipped
+     */
+    offset: number;
+    /**
+     * Current page number (1-indexed)
+     */
+    page: number;
+    /**
+     * Total number of pages
+     */
+    totalPages: number;
+    /**
+     * Whether there is a next page
+     */
+    hasNextPage: boolean;
+    /**
+     * Whether there is a previous page
+     */
+    hasPrevPage: boolean;
+}
+export {};
+//# sourceMappingURL=filters.d.ts.map

package/dist/lib/types/filters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filters.d.ts","sourceRoot":"","sources":["../../../src/lib/types/filters.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IAEvC,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,UAAU,CAAC,EAAE,CAAC,CAAC;IACf,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACT,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAGb,MAAM,CAAC,EAAE,OAAO,CAAC;IAGjB,YAAY,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3D,kBAAkB,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACjE,SAAS,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACxD,eAAe,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IAG9D,IAAI,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9C,WAAW,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjD,SAAS,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,KAAK,CAAC,CAAC,GAAG,OAAO;IAEjC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAIhB,CAAC,KAAK,EAAE,MAAM,GACX,WAAW,CAAC,OAAO,CAAC,GACpB,WAAW,GACX,WAAW,CAAC,OAAO,CAAC,EAAE,GACtB,KAAK,CAAC,CAAC,CAAC,EAAE,GACV,SAAS,CAAC;CACb;AAED;;;GAGG;AACH,KAAK,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GACpD,KAAK,GACL,CAAC,SAAS,MAAM,GACf;KACC,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,GACnB,CAAC,GACD,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GAClB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GACtB,KAAK,GACL,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GACrC,KAAK,CAAC;CACX,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAClB,KAAK,CAAC;AAEV,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhC;;;GAGG;AACH,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,EAAE,GACxD,CAAC,SAAS,MAAM,CAAC,GAChB,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GACrB,OAAO,GACR,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,OAAO,CAAC;AAEZ;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI;IAC3B,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACtB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;CACrB,GAAG;KAGF,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW;CACvF,GAAG;IAEH,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC;CAClF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAEpC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAEpC;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC;IAC5B;;OAEG;IACH,IAAI,EAAE,CAAC,EAAE,CAAC;IAEV;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC;CACrB"}

package/dist/lib/types/filters.js

@@ -3,3 +3,4 @@
 // Database-agnostic filter types for the unified Local API
 // These interfaces define the contract that all database adapters must implement
 export {};
+//# sourceMappingURL=filters.js.map

package/dist/lib/types/filters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filters.js","sourceRoot":"","sources":["../../../src/lib/types/filters.ts"],"names":[],"mappings":"AAAA,mBAAmB;AACnB,EAAE;AACF,2DAA2D;AAC3D,iFAAiF"}

package/dist/lib/types/index.d.ts

@@ -0,0 +1,11 @@
+export * from './asset.js';
+export * from './auth.js';
+export * from './document.js';
+export * from './schemas.js';
+export * from './config.js';
+export * from './user.js';
+export * from './sidebar.js';
+export * from './organization.js';
+export * from './filters.js';
+export * from './instance.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/lib/types/index.js

@@ -7,3 +7,5 @@ export * from './user.js';
 export * from './sidebar.js';
 export * from './organization.js';
 export * from './filters.js';
+export * from './instance.js';
+//# sourceMappingURL=index.js.map

package/dist/lib/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/lib/types/instance.d.ts

@@ -0,0 +1,5 @@
+export interface InstanceSettings {
+    allowUserOrgCreation?: boolean;
+    [key: string]: any;
+}
+//# sourceMappingURL=instance.d.ts.map

package/dist/lib/types/instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../../../src/lib/types/instance.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAChC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACnB"}

package/dist/lib/types/instance.js

@@ -0,0 +1,3 @@
+// Instance-level types for global settings and configuration
+export {};
+//# sourceMappingURL=instance.js.map

package/dist/lib/types/instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance.js","sourceRoot":"","sources":["../../../src/lib/types/instance.ts"],"names":[],"mappings":"AAAA,6DAA6D"}

package/dist/lib/types/organization.d.ts

@@ -0,0 +1,108 @@
+export type OrganizationRole = 'owner' | 'admin' | 'editor' | 'viewer';
+export interface Organization {
+    id: string;
+    name: string;
+    slug: string;
+    parentOrganizationId: string | null;
+    metadata: {
+        logo?: string;
+        theme?: {
+            primaryColor: string;
+            fontFamily: string;
+            logoUrl: string;
+        };
+        website?: string;
+        settings?: Record<string, any>;
+    } | null;
+    createdBy: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface NewOrganization {
+    name: string;
+    slug: string;
+    createdBy: string;
+    id?: string;
+    parentOrganizationId?: string | null;
+    metadata?: {
+        logo?: string;
+        theme?: {
+            primaryColor: string;
+            fontFamily: string;
+            logoUrl: string;
+        };
+        website?: string;
+        settings?: Record<string, any>;
+    } | null;
+    createdAt?: Date;
+    updatedAt?: Date;
+}
+export interface OrganizationMember {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    organizationId: string;
+    userId: string;
+    role: OrganizationRole;
+    preferences: Record<string, any> | null;
+    invitationId: string | null;
+}
+export interface NewOrganizationMember {
+    organizationId: string;
+    userId: string;
+    role: OrganizationRole;
+    id?: string;
+    createdAt?: Date;
+    updatedAt?: Date;
+    preferences?: Record<string, any> | null;
+    invitationId?: string | null;
+}
+export interface Invitation {
+    id: string;
+    createdAt: Date;
+    organizationId: string;
+    role: OrganizationRole;
+    invitedBy: string;
+    email: string;
+    token: string;
+    expiresAt: Date;
+    acceptedAt: Date | null;
+}
+export interface NewInvitation {
+    organizationId: string;
+    role: OrganizationRole;
+    invitedBy: string;
+    email: string;
+    token: string;
+    expiresAt: Date;
+    id?: string;
+    createdAt?: Date;
+    acceptedAt?: Date | null;
+}
+export interface UserSessionPreferences {
+    includeChildOrganizations?: boolean;
+}
+export interface UserSession {
+    updatedAt: Date;
+    userId: string;
+    activeOrganizationId: string | null;
+}
+export interface NewUserSession {
+    userId: string;
+    updatedAt?: Date;
+    activeOrganizationId?: string | null;
+}
+export interface OrganizationMembership {
+    organization: Organization;
+    member: OrganizationMember;
+}
+export interface OrganizationMemberWithUser {
+    member: OrganizationMember;
+    user: {
+        id: string;
+        email: string;
+        name: string | null;
+        image: string | null;
+    };
+}
+//# sourceMappingURL=organization.d.ts.map

package/dist/lib/types/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../../src/lib/types/organization.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE;YACP,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC/B,GAAG,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE;YACP,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC/B,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACtC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAGD,MAAM,WAAW,sBAAsB;IACtC,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AAGD,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,CAAC;CACF"}

package/dist/lib/types/organization.js

@@ -1,3 +1,4 @@
 // Organization types for multi-tenancy
 // These match the inferred types from Drizzle schema
 export {};
+//# sourceMappingURL=organization.js.map

package/dist/lib/types/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../../../src/lib/types/organization.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,qDAAqD"}