@beechcms/api 0.6.4 → 0.6.6

package/dist/shared/db/repositories/content.repository.d1.d.ts

@@ -1,5 +1,6 @@
-import { ContentRepository, type BulkFieldUpdate, type BatchWrite, type DraftSummary, type Seed, type SelectOptions, type RepositoryOptions, type BeechHooks } from '@beechcms/core';
+import { ContentRepository, type BulkFieldUpdate, type BatchWrite, type DraftSummary, type Seed, type SelectOptions, type RepositoryOptions, type BeechHooks, type IPrivacyService } from '@beechcms/core';
 import { BaseD1Repository } from './base.repository.d1';
+export declare function prepareBlindIndexOptions(seed: Seed, options: SelectOptions, privacyService: IPrivacyService): Promise<SelectOptions>;
 /**
  * D1 (Cloudflare SQLite) implementation of {@link ContentRepository}.
  *
@@ -14,9 +15,11 @@ import { BaseD1Repository } from './base.repository.d1';
  */
 export declare class D1ContentRepository extends BaseD1Repository implements ContentRepository {
     private readonly hooks?;
-    constructor(database: D1Database, hooks?: BeechHooks | undefined);
+    private readonly privacyService?;
+    constructor(database: D1Database, hooks?: BeechHooks | undefined, privacyService?: IPrivacyService | undefined);
     /** Assembles the {@link HookContext} passed to every lifecycle hook invocation. */
     private hookCtx;
+    private serializeAndProtect;
     /**
      * Deserializes a DB row using the Seed's branch definitions.
      * Skips multi-relation branches — their values come from junction tables.

package/dist/shared/db/repositories/demo-data.repository.d1.d.ts

@@ -1,6 +1,11 @@
-import type { IDemoDataRepository } from '@beechcms/core';
+import type { IDemoDataRepository, ContentRepository, Seed } from '@beechcms/core';
 export declare class D1DemoDataRepository implements IDemoDataRepository {
-    private readonly db;
-    constructor(db: D1Database);
-    loadDemoData(): Promise<void>;
+    private readonly _db?;
+    constructor(_db?: unknown);
+    /**
+     * Loads structured demo datasets using ContentRepository domain methods.
+     * This guarantees full compliance with field validation, privacy encryption (AES-256-GCM),
+     * blind index generation (*_bidx), FTS search indexing, and relation integrity.
+     */
+    loadDemoData(repository: ContentRepository, getSeed: (slug: string) => Seed | null): Promise<void>;
 }

package/dist/shared/policies/apply-policies.d.ts

@@ -1,10 +1,23 @@
-import type { Seed } from '@beechcms/core';
+import type { Seed, ActorContext } from '@beechcms/core';
 declare class PrivacyPolicyError extends Error {
     readonly status: 501;
     constructor(message: string);
 }
 export { PrivacyPolicyError };
-/** Applica la privacy policy ai campi del payload prima della scrittura su DB. */
+/**
+ * Applies privacy transformation rules to payload fields before database insertion/update.
+ * @param data - Raw record fields object.
+ * @param seed - Seed definition containing field policy definitions.
+ * @returns A Promise resolving to the transformed data payload.
+ */
 export declare function applyPrivacy(data: Record<string, unknown>, seed: Seed): Promise<Record<string, unknown>>;
-/** Applica la visibility policy ai campi del payload in uscita verso il client. */
-export declare function applyVisibility(data: Record<string, unknown>, seed: Seed): Record<string, unknown>;
+/**
+ * Applies visibility policy and context-aware field filtering to outgoing API payloads.
+ * Delegates to {@link filterEntryForActor} using the supplied {@link ActorContext}.
+ *
+ * @param data - Raw record data object from repository.
+ * @param seed - Content type seed definition.
+ * @param actor - Context of the caller (defaults to authenticated).
+ * @returns Filtered data record containing only authorized fields for the actor.
+ */
+export declare function applyVisibility(data: Record<string, unknown>, seed: Seed, actor?: ActorContext): Record<string, unknown>;

package/dist/types.d.ts

@@ -4,7 +4,7 @@
  * per-request context values injected by middleware (`Variables`), and
  * the combined `AppEnv` used to type every Hono app/router in the API.
  */
-import type { Seed, ContentRepository, IdempotencyRepository, BeechBucket, MediaRepository, SystemStatsRepository, IHashProvider, ITokenService, IUserRepository, ISessionRepository, IPasswordResetTokenRepository, IActivityLogger, IActivityLogRepository, INotificationRepository, INotificationService, IWidgetRepository, ISearchRepository, IAnalyticsRepository, IContentScanRepository, ISeedRegistry, IClock, IIdGenerator, IAutomationRunner, IAutomationRepository, IScheduler, BackrefMap, ISiteSettingsRepository, IDemoDataRepository, JwtClaims, ISeedLayoutRepository, ISeedRepository, ISchemaMutator, IDashboardLayoutRepository, IQueueService, IKanbanPositionRepository } from '@beechcms/core';
+import type { Seed, ContentRepository, IdempotencyRepository, BeechBucket, MediaRepository, SystemStatsRepository, IHashProvider, ITokenService, IUserRepository, ISessionRepository, IPasswordResetTokenRepository, IActivityLogger, IActivityLogRepository, INotificationRepository, INotificationService, IWidgetRepository, ISearchRepository, IAnalyticsRepository, IContentScanRepository, ISeedRegistry, IClock, IIdGenerator, IAutomationRunner, IAutomationRepository, IScheduler, BackrefMap, ISiteSettingsRepository, IDemoDataRepository, JwtClaims, ISeedLayoutRepository, ISeedRepository, ISchemaMutator, IDashboardLayoutRepository, IQueueService, IKanbanPositionRepository, IPrivacyService, ActorContext } from '@beechcms/core';
 import type { IRateLimiterRegistry } from './middleware/rate-limit.middleware';
 import type { ISetupChecklistRepository } from './shared/db/repositories/d1-setup-checklist.repository';
 /**
@@ -90,14 +90,20 @@ export interface Env {
     QSTASH_CURRENT_SIGNING_KEY?: string;
     /** Next QStash signing key, accepted during key rotation. */
     QSTASH_NEXT_SIGNING_KEY?: string;
+    /** Master key used for Application-Level Encryption (ALE). */
+    PRIVACY_MASTER_KEY?: string;
 }
 /**
  * Per-request context values (`c.get(...)` / `c.set(...)`), injected by middleware
  * before route handlers run. Every entry here must be set by some middleware on the request path.
  */
 export interface Variables {
+    /** Caller/actor context (public vs authenticated user vs system). */
+    actor?: ActorContext;
     /** Decoded JWT claims of the authenticated user. */
     jwtPayload: JwtClaims;
+    /** Application-level privacy and encryption service. */
+    privacyService: IPrivacyService;
     /** Looks up a Seed definition by slug from the loaded schema. */
     getSeed: (slug: string) => Seed | null;
     /** Registry of all loaded Seed definitions. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beechcms/api",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/factory.d.ts",
@@ -20,10 +20,10 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.995.0",
     "@aws-sdk/s3-request-presigner": "^3.995.0",
-    "@beechcms/core": "^0.6.4",
+    "@beechcms/core": "^0.6.6",
     "@upstash/qstash": "^2.11.0",
     "bcryptjs": "^2.4.3",
-    "hono": "^4.12.21",
+    "hono": "^4.12.34",
     "jose": "^6.1.3",
     "zod": "^4.4.3"
   },