@baasix/baasix 0.1.0

package/dist/services/PermissionService.js

@@ -0,0 +1,373 @@
+import { db } from '../utils/db.js';
+import { schemaManager } from '../utils/schemaManager.js';
+import { FieldExpansionUtil } from '../utils/fieldExpansion.js';
+import { resolveDynamicVariables } from '../utils/dynamicVariableResolver.js';
+import { getCache } from '../utils/cache.js';
+import { eq } from 'drizzle-orm';
+/**
+ * Permission Service - Handles role-based access control
+ *
+ * Uses hybrid L1(Memory)+L2(Redis) caching for both roles and permissions.
+ *
+ * Cache Architecture:
+ * - Roles use "auth:roles:*" keys (hybrid keys, auto-synced across instances)
+ * - Permissions use "permissions:role:*" keys (hybrid keys)
+ * - L1 reads are fast (in-memory), L2 (Redis) is source of truth
+ * - Periodic sync (default 5s) keeps all instances in sync
+ */
+export class PermissionService {
+    rolesLoaded = false;
+    constructor() {
+        console.info("PermissionService instance created");
+    }
+    /**
+     * Get cache instance
+     */
+    getCache() {
+        return getCache();
+    }
+    // ==================== Role Management ====================
+    // Roles use hybrid cache keys: auth:roles:all, auth:roles:by-id:{id}, auth:roles:by-name:{name}
+    // This ensures automatic L1/L2 sync across multiple instances
+    /**
+     * Load all roles from database into hybrid cache
+     * Called once at startup alongside loadPermissions
+     */
+    async loadRoles() {
+        try {
+            const cache = this.getCache();
+            const RoleTable = schemaManager.getTable('baasix_Role');
+            const roles = await db.select().from(RoleTable);
+            // Store all roles
+            const rolesById = {};
+            const rolesByName = {};
+            for (const role of roles) {
+                const roleData = {
+                    id: role.id,
+                    name: role.name,
+                    description: role.description,
+                    isTenantSpecific: role.isTenantSpecific,
+                    canInviteRoleIds: role.canInviteRoleIds,
+                };
+                rolesById[String(role.id)] = roleData;
+                rolesByName[role.name] = roleData;
+            }
+            // Store in hybrid cache (auth:* keys are auto-synced)
+            await cache.set('auth:roles:all', Object.values(rolesById), -1);
+            await cache.set('auth:roles:by-id', rolesById, -1);
+            await cache.set('auth:roles:by-name', rolesByName, -1);
+            this.rolesLoaded = true;
+            console.info(`[PermissionService] Loaded ${roles.length} roles into hybrid cache`);
+        }
+        catch (error) {
+            console.error('[PermissionService] Error loading roles:', error);
+            this.rolesLoaded = true;
+        }
+    }
+    /**
+     * Ensure roles are loaded into cache
+     */
+    async ensureRolesLoaded() {
+        if (!this.rolesLoaded) {
+            await this.loadRoles();
+        }
+        // Also check if cache is empty (could happen if another instance cleared it)
+        const cache = this.getCache();
+        const rolesById = await cache.get('auth:roles:by-id');
+        if (!rolesById || Object.keys(rolesById).length === 0) {
+            await this.loadRoles();
+        }
+    }
+    /**
+     * Get role by ID (async, from hybrid cache)
+     */
+    async getRoleByIdAsync(roleId) {
+        await this.ensureRolesLoaded();
+        const cache = this.getCache();
+        const rolesById = await cache.get('auth:roles:by-id');
+        return rolesById?.[String(roleId)] || null;
+    }
+    /**
+     * Get role by name (async, from hybrid cache)
+     */
+    async getRoleByNameAsync(name) {
+        await this.ensureRolesLoaded();
+        const cache = this.getCache();
+        const rolesByName = await cache.get('auth:roles:by-name');
+        return rolesByName?.[name] || null;
+    }
+    /**
+     * Get the public role (async, from hybrid cache)
+     */
+    async getPublicRoleAsync() {
+        return this.getRoleByNameAsync('public');
+    }
+    /**
+     * Get the administrator role (async, from hybrid cache)
+     */
+    async getAdministratorRoleAsync() {
+        return this.getRoleByNameAsync('administrator');
+    }
+    /**
+     * Check if a role ID is the administrator role (async)
+     */
+    async isAdministratorRoleAsync(roleId) {
+        if (!roleId)
+            return false;
+        const role = await this.getRoleByIdAsync(roleId);
+        return role?.name === 'administrator';
+    }
+    /**
+     * Check if a role name is administrator
+     */
+    isAdministratorRoleName(roleName) {
+        return roleName === 'administrator';
+    }
+    /**
+     * Get all roles (async, from hybrid cache)
+     */
+    async getAllRolesAsync() {
+        const cache = this.getCache();
+        return (await cache.get('auth:roles:all')) || [];
+    }
+    /**
+     * Check if roles are loaded
+     */
+    areRolesLoaded() {
+        return this.rolesLoaded;
+    }
+    /**
+     * Invalidate role cache and reload
+     * Call this when roles are created, updated, or deleted
+     */
+    async invalidateRoles() {
+        this.rolesLoaded = false;
+        // Clear hybrid cache keys for roles
+        const cache = this.getCache();
+        await cache.delete('auth:roles:all');
+        await cache.delete('auth:roles:by-id');
+        await cache.delete('auth:roles:by-name');
+        // Also invalidate legacy keys for backward compatibility
+        await cache.invalidateModel("auth:role");
+        await cache.delete("auth:public_role");
+        // Reload roles into cache
+        await this.loadRoles();
+    }
+    // ==================== Permission Management ====================
+    /**
+     * Load permissions from database
+     * Also loads roles if not already loaded
+     */
+    async loadPermissions(role_Id) {
+        // Ensure roles are loaded first
+        if (!this.rolesLoaded) {
+            await this.loadRoles();
+        }
+        const cache = this.getCache();
+        let permissions;
+        try {
+            const PermissionTable = schemaManager.getTable('baasix_Permission');
+            if (role_Id) {
+                // Load permissions for specific role
+                permissions = await db
+                    .select()
+                    .from(PermissionTable)
+                    .where(eq(PermissionTable.role_Id, role_Id));
+            }
+            else {
+                // Load all permissions
+                permissions = await db.select().from(PermissionTable);
+            }
+            if (!role_Id) {
+                // Clear all permissions caches
+                await cache.invalidateModel("permissions");
+            }
+            // Cache permissions by role
+            for (const permission of permissions) {
+                const cacheKey = `permissions:role:${permission.role_Id}`;
+                const rolePermissions = (await cache.get(cacheKey)) || {};
+                const collectionName = permission.collection;
+                rolePermissions[collectionName] = rolePermissions[collectionName] || {};
+                rolePermissions[collectionName][permission.action] = {
+                    fields: this.parseFields(permission.fields),
+                    conditions: permission.conditions || {},
+                    relConditions: permission.relConditions || {},
+                    defaultValues: permission.defaultValues || {},
+                };
+                // Use infinite TTL (-1) for permissions cache
+                await cache.set(cacheKey, rolePermissions, -1);
+            }
+        }
+        catch (error) {
+            console.error('Error loading permissions:', error);
+            // Initialize empty cache if table doesn't exist yet
+            if (!role_Id) {
+                await cache.invalidateModel("permissions");
+            }
+        }
+    }
+    /**
+     * Parse fields string to array
+     */
+    parseFields(fieldsString) {
+        if (!fieldsString)
+            return null;
+        // If fieldsString is array, return it as is
+        if (Array.isArray(fieldsString))
+            return fieldsString;
+        return fieldsString.split(',').map((f) => f.trim());
+    }
+    /**
+     * Get permissions for a role
+     */
+    async getPermissions(role_Id) {
+        const cache = this.getCache();
+        const cacheKey = `permissions:role:${role_Id}`;
+        return (await cache.get(cacheKey)) || {};
+    }
+    /**
+     * Check if role can access collection with operation
+     */
+    async canAccess(role_Id, collection, operation, fields = null) {
+        const permissions = await this.getPermissions(role_Id);
+        const collectionPermissions = permissions[collection];
+        if (!collectionPermissions || !collectionPermissions[operation]) {
+            return false;
+        }
+        if (fields && collectionPermissions[operation].fields) {
+            return this.checkFieldPermissions(fields, collectionPermissions[operation].fields);
+        }
+        if (fields) {
+            const primaryKey = schemaManager.getPrimaryKey(collection);
+            const requiredFields = Array.isArray(primaryKey) ? primaryKey : [primaryKey];
+            const allFields = [...new Set([...fields, ...requiredFields])];
+            return this.checkFieldPermissions(allFields, collectionPermissions[operation].fields);
+        }
+        return true;
+    }
+    /**
+     * Check if requested fields are allowed
+     */
+    checkFieldPermissions(requestedFields, allowedFields) {
+        if (!allowedFields || allowedFields.includes('*'))
+            return true;
+        for (const field of requestedFields) {
+            if (!this.isFieldAllowed(field, allowedFields)) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Check if a single field is allowed
+     */
+    isFieldAllowed(field, allowedFields) {
+        const fieldParts = field.split('.');
+        for (const allowedField of allowedFields) {
+            const allowedParts = allowedField.split('.');
+            if (this.matchFieldPattern(fieldParts, allowedParts)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Match field pattern with wildcards
+     * Supports:
+     * - * : matches exactly one level (e.g., "user.*" matches "user.name" but not "user.role.name")
+     * - ** : matches any number of nested levels (e.g., "user.**" matches "user.name", "user.role.name", etc.)
+     */
+    matchFieldPattern(fieldParts, allowedParts) {
+        // Check for ** wildcard (matches any depth)
+        const doubleStarIndex = allowedParts.indexOf('**');
+        if (doubleStarIndex !== -1) {
+            // ** can only be at the end of the pattern
+            if (doubleStarIndex !== allowedParts.length - 1) {
+                // Invalid pattern: ** must be the last part
+                return false;
+            }
+            // Match all parts before **
+            for (let i = 0; i < doubleStarIndex; i++) {
+                if (allowedParts[i] === '*')
+                    continue;
+                if (i >= fieldParts.length || allowedParts[i] !== fieldParts[i])
+                    return false;
+            }
+            // ** matches any remaining parts (including none)
+            return fieldParts.length >= doubleStarIndex;
+        }
+        // Original logic for single * wildcards
+        if (allowedParts.length > fieldParts.length)
+            return false;
+        for (let i = 0; i < allowedParts.length; i++) {
+            if (allowedParts[i] === '*')
+                continue;
+            if (allowedParts[i] !== fieldParts[i])
+                return false;
+        }
+        return (allowedParts[allowedParts.length - 1] === '*' ||
+            allowedParts.length === fieldParts.length);
+    }
+    /**
+     * Get filter conditions for a role and collection
+     */
+    async getFilter(role_Id, collection, operation, accountability) {
+        const permissions = await this.getPermissions(role_Id);
+        const collectionPermissions = permissions[collection];
+        if (collectionPermissions && collectionPermissions[operation]) {
+            const conditions = collectionPermissions[operation]?.conditions || {};
+            const relConditions = collectionPermissions[operation]?.relConditions || {};
+            // Resolve dynamic variables in permission conditions
+            const resolvedConditions = await resolveDynamicVariables(conditions, accountability);
+            const resolvedRelConditions = await resolveDynamicVariables(relConditions, accountability);
+            return {
+                conditions: resolvedConditions,
+                relConditions: resolvedRelConditions,
+            };
+        }
+        return {
+            conditions: {},
+            relConditions: {},
+        };
+    }
+    /**
+     * Get default values from permissions
+     */
+    async getDefaultValues(role_Id, collection, operation, accountability) {
+        if (!role_Id || !collection || !operation || !accountability) {
+            return {};
+        }
+        const permissions = await this.getPermissions(role_Id);
+        const collectionPermissions = permissions[collection];
+        if (collectionPermissions &&
+            collectionPermissions[operation] &&
+            collectionPermissions[operation].defaultValues) {
+            return await resolveDynamicVariables(collectionPermissions[operation].defaultValues, accountability);
+        }
+        return {};
+    }
+    /**
+     * Get allowed fields for a role and collection
+     */
+    async getAllowedFields(role_Id, collection, operation) {
+        const permissions = await this.getPermissions(role_Id);
+        const collectionPermissions = permissions[collection];
+        if (collectionPermissions && collectionPermissions[operation]) {
+            const fields = collectionPermissions[operation].fields;
+            if (!fields)
+                return null;
+            if (fields.includes('*'))
+                return ['*'];
+            return FieldExpansionUtil.expandFields(fields, collection);
+        }
+        return null;
+    }
+}
+// Create singleton instance only if it doesn't exist
+if (!globalThis.__baasix_permissionService) {
+    globalThis.__baasix_permissionService = new PermissionService();
+}
+const permissionService = globalThis.__baasix_permissionService;
+export { permissionService };
+export default permissionService;
+//# sourceMappingURL=PermissionService.js.map

package/dist/services/PermissionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionService.js","sourceRoot":"","sources":["../../baasix/services/PermissionService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAiBjC;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,iBAAiB;IACpB,WAAW,GAAY,KAAK,CAAC;IAErC;QACE,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,QAAQ;QACd,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,4DAA4D;IAC5D,gGAAgG;IAChG,8DAA8D;IAE9D;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAEhD,kBAAkB;YAClB,MAAM,SAAS,GAAyB,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAyB,EAAE,CAAC;YAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAS;oBACrB,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC;gBACF,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YACpC,CAAC;YAED,sDAAsD;YACtD,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAEvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,MAAM,0BAA0B,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;QACD,6EAA6E;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAuB;QAC5C,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,OAAO,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,IAAY;QACnC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC1D,OAAO,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,MAA0C;QACvE,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,EAAE,IAAI,KAAK,eAAe,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,QAAmC;QACzD,OAAO,QAAQ,KAAK,eAAe,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAEzB,oCAAoC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAEzC,yDAAyD;QACzD,MAAM,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEvC,0BAA0B;QAC1B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,kEAAkE;IAElE;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,OAAgC;QACpD,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,WAAkB,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAEpE,IAAI,OAAO,EAAE,CAAC;gBACZ,qCAAqC;gBACrC,WAAW,GAAG,MAAM,EAAE;qBACnB,MAAM,EAAE;qBACR,IAAI,CAAC,eAAe,CAAC;qBACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,uBAAuB;gBACvB,WAAW,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,+BAA+B;gBAC/B,MAAM,KAAK,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAED,4BAA4B;YAC5B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,oBAAoB,UAAU,CAAC,OAAO,EAAE,CAAC;gBAC1D,MAAM,eAAe,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1D,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;gBAE7C,eAAe,CAAC,cAAc,CAAC,GAAG,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACxE,eAAe,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG;oBACnD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC3C,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,EAAE;oBACvC,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE;oBAC7C,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE;iBAC9C,CAAC;gBAEF,8CAA8C;gBAC9C,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,oDAAoD;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,YAAsC;QACxD,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,4CAA4C;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,OAAO,YAAY,CAAC;QAErD,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAAwB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,oBAAoB,OAAO,EAAE,CAAC;QAC/C,OAAO,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAAwB,EACxB,UAAkB,EAClB,SAAkD,EAClD,SAA0B,IAAI;QAE9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,qBAAqB,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC7E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,eAAyB,EAAE,aAA8B;QACrF,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa,EAAE,aAAuB;QAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CAAC,UAAoB,EAAE,YAAsB;QACpE,4CAA4C;QAC5C,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3B,2CAA2C;YAC3C,IAAI,eAAe,KAAK,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,4CAA4C;gBAC5C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,4BAA4B;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,SAAS;gBACtC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAChF,CAAC;YACD,kDAAkD;YAClD,OAAO,UAAU,CAAC,MAAM,IAAI,eAAe,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,SAAS;YACtC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACtD,CAAC;QAED,OAAO,CACL,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;YAC7C,YAAY,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAAwB,EACxB,UAAkB,EAClB,SAAkD,EAClD,cAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,qBAAqB,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,qBAAqB,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC;YACtE,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;YAE5E,qDAAqD;YACrD,MAAM,kBAAkB,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YACrF,MAAM,qBAAqB,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YAE3F,OAAO;gBACL,UAAU,EAAE,kBAAkB;gBAC9B,aAAa,EAAE,qBAAqB;aACrC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,EAAE;YACd,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAwB,EACxB,UAAkB,EAClB,SAA8B,EAC9B,cAAmB;QAEnB,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,qBAAqB,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtD,IACE,qBAAqB;YACrB,qBAAqB,CAAC,SAAS,CAAC;YAChC,qBAAqB,CAAC,SAAS,CAAC,CAAC,aAAa,EAC9C,CAAC;YACD,OAAO,MAAM,uBAAuB,CAClC,qBAAqB,CAAC,SAAS,CAAC,CAAC,aAAa,EAC9C,cAAc,CACf,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAwB,EACxB,UAAkB,EAClB,SAAkD;QAElD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,qBAAqB,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,qBAAqB,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAEvD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAEvC,OAAO,kBAAkB,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAOD,qDAAqD;AACrD,IAAI,CAAC,UAAU,CAAC,0BAA0B,EAAE,CAAC;IAC3C,UAAU,CAAC,0BAA0B,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAC7B,eAAe,iBAAiB,CAAC"}

package/dist/services/PluginManager.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Baasix Plugin Manager Service
+ *
+ * Manages the lifecycle of plugins including:
+ * - Plugin registration and validation
+ * - Dependency resolution and loading order
+ * - Schema, route, hook, and service registration
+ * - Lifecycle management (init, ready, shutdown)
+ */
+import type { Express } from "express";
+import type { BaasixPlugin, LoadedPlugin, PluginContext, PluginManagerOptions, PluginType, PluginSchemaDefinition } from "../types/plugin.js";
+import type { HooksManager } from "./HooksManager.js";
+/**
+ * PluginManager singleton class
+ */
+export declare class PluginManager {
+    private static instance;
+    /** Registered plugins by name */
+    private plugins;
+    /** Plugins grouped by type */
+    private pluginsByType;
+    /** Plugin services registry */
+    private services;
+    /** Plugin context */
+    private context;
+    /** Options */
+    private options;
+    /** Whether plugins have been initialized */
+    private initialized;
+    /** Whether plugins are ready */
+    private ready;
+    private constructor();
+    /**
+     * Get the singleton instance
+     */
+    static getInstance(): PluginManager;
+    /**
+     * Reset the singleton (for testing)
+     */
+    static resetInstance(): void;
+    /**
+     * Set plugin manager options
+     */
+    setOptions(options: PluginManagerOptions): void;
+    /**
+     * Log a message if verbose mode is enabled
+     */
+    private log;
+    /**
+     * Register plugins from the startServer options
+     */
+    registerPlugins(plugins: BaasixPlugin[]): void;
+    /**
+     * Register a single plugin
+     */
+    private registerPlugin;
+    /**
+     * Validate plugin dependencies
+     */
+    private validateDependencies;
+    /**
+     * Sort plugins by dependencies (topological sort)
+     */
+    private sortByDependencies;
+    /**
+     * Get all schemas from plugins
+     */
+    getPluginSchemas(): PluginSchemaDefinition[];
+    /**
+     * Initialize plugin context
+     */
+    setContext(context: Omit<PluginContext, "services" | "config" | "getPluginService">): void;
+    /**
+     * Initialize plugin services
+     */
+    initializeServices(): Promise<void>;
+    /**
+     * Register plugin routes with Express app
+     */
+    registerRoutes(app: Express, authMiddleware: any): void;
+    /**
+     * Register a single route
+     */
+    private registerRoute;
+    /**
+     * Register plugin hooks with HooksManager
+     */
+    registerHooks(hooksManager: HooksManager): void;
+    /**
+     * Register plugin middleware with Express app
+     */
+    registerMiddleware(app: Express): void;
+    /**
+     * Call onInit for all plugins
+     */
+    initPlugins(): Promise<void>;
+    /**
+     * Call onReady for all plugins
+     */
+    readyPlugins(): Promise<void>;
+    /**
+     * Call onShutdown for all plugins (in reverse order)
+     */
+    shutdownPlugins(): Promise<void>;
+    /**
+     * Get a plugin by name
+     */
+    getPlugin(name: string): LoadedPlugin | undefined;
+    /**
+     * Get all plugins of a specific type
+     */
+    getPluginsByType(type: PluginType): LoadedPlugin[];
+    /**
+     * Get all loaded plugins
+     */
+    getAllPlugins(): LoadedPlugin[];
+    /**
+     * Get a plugin service
+     */
+    getService(serviceName: string): any;
+    /**
+     * Check if a plugin is registered
+     */
+    hasPlugin(name: string): boolean;
+    /**
+     * Get plugin count
+     */
+    getPluginCount(): number;
+    /**
+     * Get a summary of loaded plugins
+     */
+    getSummary(): {
+        total: number;
+        byType: Record<PluginType, number>;
+    };
+}
+export default PluginManager;
+//# sourceMappingURL=PluginManager.d.ts.map

package/dist/services/PluginManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginManager.d.ts","sourceRoot":"","sources":["../../baasix/services/PluginManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,SAAS,CAAC;AACxE,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,EAEb,oBAAoB,EAEpB,UAAU,EACV,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IAEvC,iCAAiC;IACjC,OAAO,CAAC,OAAO,CAAwC;IAEvD,8BAA8B;IAC9B,OAAO,CAAC,aAAa,CAA8C;IAEnE,+BAA+B;IAC/B,OAAO,CAAC,QAAQ,CAA2B;IAE3C,qBAAqB;IACrB,OAAO,CAAC,OAAO,CAA8B;IAE7C,cAAc;IACd,OAAO,CAAC,OAAO,CAA4C;IAE3D,4CAA4C;IAC5C,OAAO,CAAC,WAAW,CAAkB;IAErC,gCAAgC;IAChC,OAAO,CAAC,KAAK,CAAkB;IAE/B,OAAO;IAgBP;;OAEG;WACW,WAAW,IAAI,aAAa;IAO1C;;OAEG;WACW,aAAa,IAAI,IAAI;IAInC;;OAEG;IACI,UAAU,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAItD;;OAEG;IACH,OAAO,CAAC,GAAG;IAMX;;OAEG;IACI,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI;IAcrD;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAyC1B;;OAEG;IACI,gBAAgB,IAAI,sBAAsB,EAAE;IAYnD;;OAEG;IACI,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,QAAQ,GAAG,kBAAkB,CAAC,GAAG,IAAI;IAejG;;OAEG;IACU,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BhD;;OAEG;IACI,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,GAAG,IAAI;IAc9D;;OAEG;IACH,OAAO,CAAC,aAAa;IA+DrB;;OAEG;IACI,aAAa,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI;IAWtD;;OAEG;IACI,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAsC7C;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IA2BzC;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B1C;;OAEG;IACU,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IA6B7C;;OAEG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIxD;;OAEG;IACI,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,EAAE;IAIzD;;OAEG;IACI,aAAa,IAAI,YAAY,EAAE;IAItC;;OAEG;IACI,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG;IAI3C;;OAEG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvC;;OAEG;IACI,cAAc,IAAI,MAAM;IAI/B;;OAEG;IACI,UAAU,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;KAAE;CAoB3E;AAED,eAAe,aAAa,CAAC"}