@archlast/server 0.0.1

package/dist/auth/system/schema.js

@@ -0,0 +1,306 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.completeAuthSchema = exports.authSchema = exports.AUTH_COLLECTIONS = void 0;
+const definition_js_1 = require("../../schema/definition.js");
+const extended_schema_js_1 = require("./extended-schema.js");
+const better_auth_schema_js_1 = require("./better-auth-schema.js");
+/**
+ * Built-in, platform-level auth schema for Archlast.
+ *
+ * IMPORTANT:
+ * - This is NOT app-defined and should be merged into the active schema at runtime.
+ * - All records are still stored as JSON documents in the single `documents` table.
+ * - These tables are "non-removable" infrastructure collections.
+ *
+ * Collection naming:
+ * - Better-Auth tables use the `system_auth_*` prefix for full isolation.
+ * - Archlast-specific tables use the `auth_*` prefix.
+ */
+exports.AUTH_COLLECTIONS = {
+    // Better-Auth tables (mapped by adapter)
+    users: "system_auth_user",
+    accounts: "system_auth_account",
+    sessions: "system_auth_session",
+    verification: "system_auth_verification",
+    organization: "system_auth_organization",
+    member: "system_auth_member",
+    invitation: "system_auth_invitation",
+    apiKey: "system_auth_api_key",
+    // Archlast-specific auth tables (not used by Better-Auth)
+    tenants: "auth_tenants",
+    memberships: "auth_memberships",
+    invites: "auth_invites",
+    adminApiKeys: "auth_admin_api_keys",
+    auditLogs: "auth_audit_logs",
+    securityEvents: "auth_security_events",
+    emailVerificationTokens: "auth_email_verification_tokens",
+    passwordResetTokens: "auth_password_reset_tokens",
+};
+exports.authSchema = (0, definition_js_1.defineSchema)({
+    /**
+     * system_auth_user
+     * Represents a user identity. Users can belong to multiple tenants via memberships.
+     * Better-Auth core user model with plugin extensions.
+     */
+    [exports.AUTH_COLLECTIONS.users]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        email: definition_js_1.v.string(),
+        emailVerified: definition_js_1.v.boolean().default(false),
+        /**
+         * Minimal profile fields (optional).
+         * App-level profiles should live in app schema.
+         */
+        name: definition_js_1.v.string().optional(),
+        image: definition_js_1.v.string().optional(),
+        createdAt: definition_js_1.v.datetime(),
+        updatedAt: definition_js_1.v.datetime(),
+        // Better-Auth: Admin plugin fields
+        role: definition_js_1.v.string().optional(),
+        banned: definition_js_1.v.boolean().default(false),
+        banReason: definition_js_1.v.string().optional(),
+        banExpires: definition_js_1.v.datetime().optional(),
+        // Better-Auth: Username plugin fields
+        username: definition_js_1.v.string().optional(),
+        displayUsername: definition_js_1.v.string().optional(),
+        // Better-Auth: Anonymous plugin field
+        isAnonymous: definition_js_1.v.boolean().default(false),
+    }, {
+        indexes: [
+            { fields: ["email"], name: "idx_system_auth_user_email", unique: true },
+            { fields: ["createdAt"], name: "idx_system_auth_user_createdAt" },
+            { fields: ["username"], name: "idx_system_auth_user_username", unique: true },
+        ],
+        relationships: {
+            accounts: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.accounts, "userId"),
+            memberships: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.memberships, "userId"),
+            tenants: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.tenants, "ownerId"),
+            sessions: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.sessions, "userId"),
+            invites: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.invites, "acceptedByUserId"),
+        },
+    }),
+    /**
+     * system_auth_account
+     * Represents authentication provider accounts linked to a user.
+     * Better-Auth stores credential passwords and OAuth tokens here.
+     */
+    [exports.AUTH_COLLECTIONS.accounts]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        userId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.users, "_id", { onDelete: "CASCADE" })
+            .index(),
+        /**
+         * Provider ID: "credential" for password auth, or OAuth provider name
+         * e.g. "credential" | "github" | "google" | "custom"
+         */
+        providerId: definition_js_1.v.string(),
+        /**
+         * Account ID from the provider (for OAuth) or same as userId (for credential)
+         */
+        accountId: definition_js_1.v.string(),
+        /**
+         * Hashed password (only for credential provider)
+         */
+        password: definition_js_1.v.string().optional(),
+        /**
+         * OAuth tokens and metadata
+         */
+        accessToken: definition_js_1.v.string().optional(),
+        refreshToken: definition_js_1.v.string().optional(),
+        accessTokenExpiresAt: definition_js_1.v.datetime().optional(),
+        refreshTokenExpiresAt: definition_js_1.v.datetime().optional(),
+        scope: definition_js_1.v.string().optional(),
+        idToken: definition_js_1.v.string().optional(),
+        createdAt: definition_js_1.v.datetime(),
+        updatedAt: definition_js_1.v.datetime(),
+    }, {
+        indexes: [
+            {
+                fields: ["providerId", "accountId"],
+                name: "idx_system_auth_account_provider_accountId",
+                unique: true,
+            },
+            { fields: ["userId"], name: "idx_system_auth_account_userId" },
+        ],
+        relationships: {
+            user: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.users, "userId"),
+        },
+    }),
+    /**
+     * auth_tenants
+     * Represents a multi-tenant workspace/organization.
+     */
+    [exports.AUTH_COLLECTIONS.tenants]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        name: definition_js_1.v.string(),
+        ownerId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.users, "_id", { onDelete: "CASCADE" })
+            .index(),
+        createdAt: definition_js_1.v.number(),
+        updatedAt: definition_js_1.v.number().optional(),
+    }, {
+        indexes: [
+            { fields: ["ownerId"], name: "idx_auth_tenants_ownerId" },
+            { fields: ["createdAt"], name: "idx_auth_tenants_createdAt" },
+        ],
+        relationships: {
+            owner: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.users, "ownerId"),
+            memberships: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.memberships, "tenantId"),
+            sessions: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.sessions, "tenantId"),
+            invites: (0, definition_js_1.hasMany)(exports.AUTH_COLLECTIONS.invites, "tenantId"),
+        },
+    }),
+    /**
+     * auth_memberships
+     * Relationship between a user and a tenant + tenant-scoped role and permissions.
+     */
+    [exports.AUTH_COLLECTIONS.memberships]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        tenantId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.tenants, "_id", { onDelete: "CASCADE" })
+            .index(),
+        userId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.users, "_id", { onDelete: "CASCADE" })
+            .index(),
+        /**
+         * Default built-in roles: owner | admin | member
+         * Keep as string for extensibility.
+         */
+        role: definition_js_1.v.string().default("member"),
+        /**
+         * Fine-grained permissions (strings like "tasks.read", "tenant.manage", "*", etc.).
+         */
+        permissions: definition_js_1.v.array(definition_js_1.v.string()).default([]),
+        createdAt: definition_js_1.v.number(),
+        updatedAt: definition_js_1.v.number().optional(),
+    }, {
+        indexes: [
+            { fields: ["tenantId"], name: "idx_auth_memberships_tenantId" },
+            { fields: ["userId"], name: "idx_auth_memberships_userId" },
+            {
+                fields: ["tenantId", "userId"],
+                name: "idx_auth_memberships_tenantId_userId",
+                unique: true,
+            },
+        ],
+        relationships: {
+            tenant: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.tenants, "tenantId"),
+            user: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.users, "userId"),
+        },
+    }),
+    /**
+     * system_auth_session
+     * Better-Auth session model with Archlast extensions.
+     *
+     * Better-Auth stores sessions with a token for direct lookup.
+     * Archlast extends with tenant binding and token hashing for security.
+     */
+    [exports.AUTH_COLLECTIONS.sessions]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        userId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.users, "_id", { onDelete: "CASCADE" })
+            .index(),
+        // Better-Auth: Session token for direct lookup (required by Better-Auth)
+        token: definition_js_1.v.string(),
+        expiresAt: definition_js_1.v.datetime(),
+        createdAt: definition_js_1.v.datetime(),
+        updatedAt: definition_js_1.v.datetime(),
+        // Better-Auth: Client info (optional)
+        ipAddress: definition_js_1.v.string().optional(),
+        userAgent: definition_js_1.v.string().optional(),
+        // Better-Auth: Admin plugin - impersonation support
+        impersonatedBy: definition_js_1.v.string().optional(),
+        // Better-Auth: Organization plugin - active organization selection
+        activeOrganizationId: definition_js_1.v.string().optional(),
+        // Archlast extensions (optional - for advanced session management)
+        tenantId: definition_js_1.v.string().optional(),
+        tokenHash: definition_js_1.v.string().optional(),
+        lastActiveAt: definition_js_1.v.datetime().optional(),
+        revokedAt: definition_js_1.v.datetime().optional(),
+        rotatedFrom: definition_js_1.v.id().optional(),
+    }, {
+        indexes: [
+            { fields: ["token"], name: "idx_system_auth_session_token", unique: true },
+            { fields: ["userId"], name: "idx_system_auth_session_userId" },
+            { fields: ["expiresAt"], name: "idx_system_auth_session_expiresAt" },
+        ],
+        relationships: {
+            user: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.users, "userId"),
+        },
+    }),
+    /**
+     * auth_invites
+     * Tenant scoped, email-based invites.
+     */
+    [exports.AUTH_COLLECTIONS.invites]: (0, definition_js_1.defineTable)({
+        _id: definition_js_1.v.id().primaryKey(),
+        tenantId: definition_js_1.v
+            .id()
+            .foreignKey(exports.AUTH_COLLECTIONS.tenants, "_id", { onDelete: "CASCADE" })
+            .index(),
+        email: definition_js_1.v.string(),
+        role: definition_js_1.v.string().default("member"),
+        permissions: definition_js_1.v.array(definition_js_1.v.string()).default([]),
+        /**
+         * A random invite token hash (do not store plaintext token).
+         * Optional: you can use `_id` as the token id and keep this nullable.
+         */
+        tokenHash: definition_js_1.v.string().optional(),
+        expiresAt: definition_js_1.v.number(),
+        acceptedAt: definition_js_1.v.number().optional(),
+        acceptedByUserId: definition_js_1.v.id().optional(),
+        createdAt: definition_js_1.v.number(),
+        updatedAt: definition_js_1.v.number().optional(),
+    }, {
+        indexes: [
+            { fields: ["tenantId"], name: "idx_auth_invites_tenantId" },
+            { fields: ["email"], name: "idx_auth_invites_email" },
+            { fields: ["expiresAt"], name: "idx_auth_invites_expiresAt" },
+            {
+                fields: ["tenantId", "email"],
+                name: "idx_auth_invites_tenantId_email",
+            },
+        ],
+        relationships: {
+            tenant: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.tenants, "tenantId"),
+            acceptedBy: (0, definition_js_1.belongsTo)(exports.AUTH_COLLECTIONS.users, "acceptedByUserId"),
+        },
+    }),
+    /**
+     * better_auth_verification
+     * Better-Auth verification table for email verification and other verification codes.
+     */
+    [exports.AUTH_COLLECTIONS.verification]: better_auth_schema_js_1.verificationTable,
+    /**
+     * better_auth_organization
+     * Better-Auth organization table for multi-tenancy support.
+     */
+    [exports.AUTH_COLLECTIONS.organization]: better_auth_schema_js_1.organizationTable,
+    /**
+     * better_auth_member
+     * Better-Auth member table linking users to organizations.
+     */
+    [exports.AUTH_COLLECTIONS.member]: better_auth_schema_js_1.memberTable,
+    /**
+     * better_auth_invitation
+     * Better-Auth invitation table for organization invitations.
+     */
+    [exports.AUTH_COLLECTIONS.invitation]: better_auth_schema_js_1.invitationTable,
+    /**
+     * apikey
+     * Better-Auth API key table for API key authentication and management.
+     */
+    [exports.AUTH_COLLECTIONS.apiKey]: better_auth_schema_js_1.apiKeyTable,
+});
+/**
+ * Complete auth schema including extended collections
+ */
+exports.completeAuthSchema = (0, definition_js_1.defineSchema)({
+    ...exports.authSchema.tables,
+    ...extended_schema_js_1.extendedAuthTables,
+});
+//# sourceMappingURL=schema.js.map

package/dist/auth/system/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/auth/system/schema.ts"],"names":[],"mappings":";;;AAAA,8DAA8F;AAC9F,6DAA0D;AAC1D,mEAUiC;AAEjC;;;;;;;;;;;GAWG;AACU,QAAA,gBAAgB,GAAG;IAC5B,yCAAyC;IACzC,KAAK,EAAE,kBAAkB;IACzB,QAAQ,EAAE,qBAAqB;IAC/B,QAAQ,EAAE,qBAAqB;IAC/B,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,0BAA0B;IACxC,MAAM,EAAE,oBAAoB;IAC5B,UAAU,EAAE,wBAAwB;IACpC,MAAM,EAAE,qBAAqB;IAC7B,0DAA0D;IAC1D,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,qBAAqB;IACnC,SAAS,EAAE,iBAAiB;IAC5B,cAAc,EAAE,sBAAsB;IACtC,uBAAuB,EAAE,gCAAgC;IACzD,mBAAmB,EAAE,4BAA4B;CAC3C,CAAC;AAIE,QAAA,UAAU,GAAG,IAAA,4BAAY,EAAC;IACnC;;;;OAIG;IACH,CAAC,wBAAgB,CAAC,KAAK,CAAC,EAAE,IAAA,2BAAW,EACjC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,KAAK,EAAE,iBAAC,CAAC,MAAM,EAAE;QACjB,aAAa,EAAE,iBAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAEzC;;;WAGG;QACH,IAAI,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAE5B,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QACvB,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QAEvB,mCAAmC;QACnC,IAAI,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,iBAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,iBAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAEnC,sCAAsC;QACtC,QAAQ,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,eAAe,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEtC,sCAAsC;QACtC,WAAW,EAAE,iBAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KAC1C,EACD;QACI,OAAO,EAAE;YACL,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE;YACvE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;YACjE,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE;SAChF;QACD,aAAa,EAAE;YACX,QAAQ,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACtD,WAAW,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC5D,OAAO,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,QAAQ,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACtD,OAAO,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,OAAO,EAAE,kBAAkB,CAAC;SACjE;KACJ,CACJ;IAED;;;;OAIG;IACH,CAAC,wBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAA,2BAAW,EACpC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,MAAM,EAAE,iBAAC;aACJ,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aAClE,KAAK,EAAE;QAEZ;;;WAGG;QACH,UAAU,EAAE,iBAAC,CAAC,MAAM,EAAE;QAEtB;;WAEG;QACH,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE;QAErB;;WAEG;QACH,QAAQ,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAE/B;;WAEG;QACH,WAAW,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,YAAY,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,oBAAoB,EAAE,iBAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC7C,qBAAqB,EAAE,iBAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,KAAK,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAE9B,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QACvB,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;KAC1B,EACD;QACI,OAAO,EAAE;YACL;gBACI,MAAM,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;gBACnC,IAAI,EAAE,4CAA4C;gBAClD,MAAM,EAAE,IAAI;aACf;YACD,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;SACjE;QACD,aAAa,EAAE;YACX,IAAI,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;SACpD;KACJ,CACJ;IAED;;;OAGG;IACH,CAAC,wBAAgB,CAAC,OAAO,CAAC,EAAE,IAAA,2BAAW,EACnC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,IAAI,EAAE,iBAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,iBAAC;aACL,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aAClE,KAAK,EAAE;QAEZ,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,EACD;QACI,OAAO,EAAE;YACL,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE;YACzD,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE;SAChE;QACD,aAAa,EAAE;YACX,KAAK,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;YACnD,WAAW,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC;YAC9D,QAAQ,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;YACxD,OAAO,EAAE,IAAA,uBAAO,EAAC,wBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC;SACzD;KACJ,CACJ;IAED;;;OAGG;IACH,CAAC,wBAAgB,CAAC,WAAW,CAAC,EAAE,IAAA,2BAAW,EACvC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,QAAQ,EAAE,iBAAC;aACN,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aACpE,KAAK,EAAE;QACZ,MAAM,EAAE,iBAAC;aACJ,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aAClE,KAAK,EAAE;QAEZ;;;WAGG;QACH,IAAI,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QAElC;;WAEG;QACH,WAAW,EAAE,iBAAC,CAAC,KAAK,CAAC,iBAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAE5C,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,EACD;QACI,OAAO,EAAE;YACL,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAC/D,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE;YAC3D;gBACI,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;gBAC9B,IAAI,EAAE,sCAAsC;gBAC5C,MAAM,EAAE,IAAI;aACf;SACJ;QACD,aAAa,EAAE;YACX,MAAM,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC;YACvD,IAAI,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;SACpD;KACJ,CACJ;IAED;;;;;;OAMG;IACH,CAAC,wBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAA,2BAAW,EACpC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,MAAM,EAAE,iBAAC;aACJ,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aAClE,KAAK,EAAE;QAEZ,yEAAyE;QACzE,KAAK,EAAE,iBAAC,CAAC,MAAM,EAAE;QAEjB,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QACvB,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QACvB,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE;QAEvB,sCAAsC;QACtC,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEhC,oDAAoD;QACpD,cAAc,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAErC,mEAAmE;QACnE,oBAAoB,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAE3C,mEAAmE;QACnE,QAAQ,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,YAAY,EAAE,iBAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACrC,SAAS,EAAE,iBAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAClC,WAAW,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE;KACjC,EACD;QACI,OAAO,EAAE;YACL,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1E,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAC9D,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE;SACvE;QACD,aAAa,EAAE;YACX,IAAI,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;SACpD;KACJ,CACJ;IAED;;;OAGG;IACH,CAAC,wBAAgB,CAAC,OAAO,CAAC,EAAE,IAAA,2BAAW,EACnC;QACI,GAAG,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE;QAExB,QAAQ,EAAE,iBAAC;aACN,EAAE,EAAE;aACJ,UAAU,CAAC,wBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;aACpE,KAAK,EAAE;QAEZ,KAAK,EAAE,iBAAC,CAAC,MAAM,EAAE;QAEjB,IAAI,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClC,WAAW,EAAE,iBAAC,CAAC,KAAK,CAAC,iBAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAE5C;;;WAGG;QACH,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEhC,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE;QACrB,UAAU,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,gBAAgB,EAAE,iBAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE;QAEnC,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,iBAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,EACD;QACI,OAAO,EAAE;YACL,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE;YAC3D,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE;YACrD,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE;YAC7D;gBACI,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;gBAC7B,IAAI,EAAE,iCAAiC;aAC1C;SACJ;QACD,aAAa,EAAE;YACX,MAAM,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC;YACvD,UAAU,EAAE,IAAA,yBAAS,EAAC,wBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC;SACpE;KACJ,CACJ;IAED;;;OAGG;IACH,CAAC,wBAAgB,CAAC,YAAY,CAAC,EAAE,yCAAiB;IAElD;;;OAGG;IACH,CAAC,wBAAgB,CAAC,YAAY,CAAC,EAAE,yCAAiB;IAElD;;;OAGG;IACH,CAAC,wBAAgB,CAAC,MAAM,CAAC,EAAE,mCAAW;IAEtC;;;OAGG;IACH,CAAC,wBAAgB,CAAC,UAAU,CAAC,EAAE,uCAAe;IAE9C;;;OAGG;IACH,CAAC,wBAAgB,CAAC,MAAM,CAAC,EAAE,mCAAW;CACzC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,kBAAkB,GAAG,IAAA,4BAAY,EAAC;IAC3C,GAAG,kBAAU,CAAC,MAAM;IACpB,GAAG,uCAAkB;CACxB,CAAC,CAAC"}

package/dist/cache/client.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Cache Client
+ *
+ * Typed wrapper around IpcClient for cache operations.
+ * Provides type-safe cache interface for the rest of the application.
+ */
+import { IpcClient } from "../ipc/socket-bridge.js";
+export declare class CacheClient {
+    private client;
+    private invalidationHandlers;
+    constructor(socketPathOrClient: string | IpcClient);
+    /**
+     * Connect to the cache server
+     */
+    connect(): Promise<void>;
+    /**
+     * Get value from cache
+     */
+    get<T = any>(key: string, partition?: "query" | "function" | "document" | "aggregate"): Promise<T | null>;
+    /**
+     * Set value in cache
+     */
+    set(key: string, value: any, partition?: "query" | "function" | "document" | "aggregate", ttl?: number): Promise<void>;
+    /**
+     * Delete specific key
+     */
+    delete(key: string, partition?: "query" | "function" | "document" | "aggregate"): Promise<boolean>;
+    /**
+     * Invalidate multiple keys
+     */
+    invalidate(keys: string[]): Promise<string[]>;
+    /**
+     * Invalidate keys matching pattern
+     */
+    invalidatePattern(pattern: string, partition?: "query" | "function" | "document" | "aggregate"): Promise<string[]>;
+    /**
+     * Add dependency relationship
+     */
+    addDependency(dependencyKey: string, cacheKey: string): Promise<void>;
+    /**
+     * Clear cache
+     */
+    clear(partition?: "query" | "function" | "document" | "aggregate"): Promise<void>;
+    /**
+     * Get cache statistics
+     */
+    getStats(): Promise<any>;
+    /**
+     * Ping the cache server
+     */
+    ping(): Promise<boolean>;
+    /**
+     * Register handler for invalidation events
+     */
+    onInvalidate(handler: (keys: string[]) => void): () => void;
+    /**
+     * Check if connected
+     */
+    isConnected(): boolean;
+    /**
+     * Disconnect from server
+     */
+    disconnect(): void;
+    /**
+     * Estimate size of value in bytes
+     */
+    private estimateSize;
+    /**
+     * Publish a message to a channel
+     */
+    publish(channel: string, payload: any): void;
+    /**
+     * Subscribe to a generic channel
+     */
+    subscribe(channel: string, handler: (payload: any) => void): Promise<void>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/cache/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/cache/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAIpD,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,oBAAoB,CAA4C;gBAE5D,kBAAkB,EAAE,MAAM,GAAG,SAAS;IAQlD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAqB9B;;OAEG;IACG,GAAG,CAAC,CAAC,GAAG,GAAG,EACb,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAqB,GACrE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAmBpB;;OAEG;IACG,GAAG,CACL,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,GAAG,EACV,SAAS,GAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAqB,EACpE,GAAG,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACG,MAAM,CACR,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAqB,GACrE,OAAO,CAAC,OAAO,CAAC;IAmBnB;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqBnD;;OAEG;IACG,iBAAiB,CACnB,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAqB,GACrE,OAAO,CAAC,MAAM,EAAE,CAAC;IAsBpB;;OAEG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB3E;;OAEG;IACG,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvF;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC;IAgB9B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAS9B;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI;IAO3D;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAqBpB;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI;IAI5C;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAGnF"}

package/dist/cache/client.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Cache Client
+ *
+ * Typed wrapper around IpcClient for cache operations.
+ * Provides type-safe cache interface for the rest of the application.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CacheClient = void 0;
+const socket_bridge_js_1 = require("../ipc/socket-bridge.js");
+const logger_js_1 = require("../logging/logger.js");
+class CacheClient {
+    client;
+    invalidationHandlers = new Set();
+    constructor(socketPathOrClient) {
+        if (typeof socketPathOrClient === "string") {
+            this.client = new socket_bridge_js_1.IpcClient(socketPathOrClient);
+        }
+        else {
+            this.client = socketPathOrClient;
+        }
+    }
+    /**
+     * Connect to the cache server
+     */
+    async connect() {
+        await this.client.connect();
+        // Subscribe to invalidation events
+        await this.client.subscribe("cache:invalidation", (payload) => {
+            for (const handler of this.invalidationHandlers) {
+                try {
+                    handler(payload.keys);
+                }
+                catch (err) {
+                    logger_js_1.logger.log({
+                        timestamp: Date.now(),
+                        level: "error",
+                        kind: "cache",
+                        message: "[CacheClient] Invalidation handler error:",
+                        context: { error: err instanceof Error ? err.message : String(err) },
+                    });
+                }
+            }
+        });
+    }
+    /**
+     * Get value from cache
+     */
+    async get(key, partition = "query") {
+        try {
+            const result = await this.client.request("CACHE_GET", {
+                key,
+                partition,
+            });
+            return result.hit ? result.value : null;
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Get failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+            return null;
+        }
+    }
+    /**
+     * Set value in cache
+     */
+    async set(key, value, partition = "query", ttl) {
+        try {
+            const size = this.estimateSize(value);
+            await this.client.request("CACHE_SET", {
+                key,
+                value,
+                partition,
+                size,
+                ttl,
+            });
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Set failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+        }
+    }
+    /**
+     * Delete specific key
+     */
+    async delete(key, partition = "query") {
+        try {
+            const result = await this.client.request("CACHE_DELETE", {
+                key,
+                partition,
+            });
+            return result.deleted;
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Delete failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+            return false;
+        }
+    }
+    /**
+     * Invalidate multiple keys
+     */
+    async invalidate(keys) {
+        try {
+            const result = await this.client.request("CACHE_INVALIDATE", {
+                keys,
+            });
+            return result.invalidated;
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Invalidate failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+            return [];
+        }
+    }
+    /**
+     * Invalidate keys matching pattern
+     */
+    async invalidatePattern(pattern, partition = "query") {
+        try {
+            const result = await this.client.request("CACHE_INVALIDATE_PATTERN", {
+                pattern,
+                partition,
+            });
+            return result.invalidated;
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Invalidate pattern failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+            return [];
+        }
+    }
+    /**
+     * Add dependency relationship
+     */
+    async addDependency(dependencyKey, cacheKey) {
+        try {
+            await this.client.request("CACHE_ADD_DEPENDENCY", {
+                dependencyKey,
+                cacheKey,
+            });
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Add dependency failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+        }
+    }
+    /**
+     * Clear cache
+     */
+    async clear(partition) {
+        try {
+            await this.client.request("CACHE_CLEAR", { partition });
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Clear failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+        }
+    }
+    /**
+     * Get cache statistics
+     */
+    async getStats() {
+        try {
+            const stats = await this.client.request("CACHE_STATS", {});
+            return stats || null;
+        }
+        catch (err) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "cache",
+                message: "[CacheClient] Get stats failed:",
+                context: { error: err instanceof Error ? err.message : String(err) },
+            });
+            return null;
+        }
+    }
+    /**
+     * Ping the cache server
+     */
+    async ping() {
+        try {
+            const result = await this.client.request("PING", {});
+            return result.pong;
+        }
+        catch (err) {
+            return false;
+        }
+    }
+    /**
+     * Register handler for invalidation events
+     */
+    onInvalidate(handler) {
+        this.invalidationHandlers.add(handler);
+        return () => {
+            this.invalidationHandlers.delete(handler);
+        };
+    }
+    /**
+     * Check if connected
+     */
+    isConnected() {
+        return this.client.isConnected();
+    }
+    /**
+     * Disconnect from server
+     */
+    disconnect() {
+        this.client.disconnect();
+    }
+    /**
+     * Estimate size of value in bytes
+     */
+    estimateSize(value) {
+        if (value === null || value === undefined) {
+            return 0;
+        }
+        const type = typeof value;
+        if (type === "string") {
+            return value.length * 2;
+        }
+        if (type === "number" || type === "boolean") {
+            return 8;
+        }
+        if (type === "object") {
+            return JSON.stringify(value).length * 2;
+        }
+        return 0;
+    }
+    /**
+     * Publish a message to a channel
+     */
+    publish(channel, payload) {
+        this.client.send("EVENT", { channel, payload });
+    }
+    /**
+     * Subscribe to a generic channel
+     */
+    async subscribe(channel, handler) {
+        await this.client.subscribe(channel, handler);
+    }
+}
+exports.CacheClient = CacheClient;
+//# sourceMappingURL=client.js.map