@beechcms/core 0.4.0-preview.9 → 0.4.0

package/dist/auth/hash-provider.d.ts

@@ -0,0 +1,13 @@
+export interface IHashProvider {
+    /**
+     * Hashes a plaintext password using a one-way algorithm so that the original
+     * value can never be recovered from the stored digest.
+     */
+    hash(plaintextPassword: string): Promise<string>;
+    /**
+     * Verifies a plaintext password against a stored hash using a constant-time
+     * comparison to prevent timing-based attacks that could reveal whether a hash exists.
+     */
+    verify(plaintextPassword: string, storedHash: string): Promise<boolean>;
+}
+//# sourceMappingURL=hash-provider.d.ts.map

package/dist/auth/hash-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-provider.d.ts","sourceRoot":"","sources":["../../src/auth/hash-provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEhD;;;OAGG;IACH,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxE"}

package/dist/auth/hash-provider.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/password-reset-token.repository.d.ts

@@ -0,0 +1,29 @@
+export interface NewPasswordResetToken {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+}
+export interface ValidatedResetToken {
+    id: string;
+    userId: string;
+    email: string;
+}
+export interface IPasswordResetTokenRepository {
+    /**
+     * Marks all pending (unused) tokens for the user as consumed before issuing a new one.
+     * Ensures only one active reset token exists per user at any time.
+     */
+    invalidatePending(userId: string, nowTimestamp: number): Promise<void>;
+    /** Stores a new password reset token. Only the hash is persisted, never the plaintext. */
+    create(record: NewPasswordResetToken): Promise<void>;
+    /**
+     * Finds a valid reset token by its hash, joining the users table to return the
+     * associated email in the same query to avoid a second round-trip.
+     * Returns null if the token is expired, already used, or not found.
+     */
+    findValidByHashWithEmail(tokenHash: string, nowTimestamp: number): Promise<ValidatedResetToken | null>;
+    /** Marks a token as consumed so it cannot be used again. */
+    markUsed(tokenId: string, nowTimestamp: number): Promise<void>;
+}
+//# sourceMappingURL=password-reset-token.repository.d.ts.map

package/dist/auth/password-reset-token.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset-token.repository.d.ts","sourceRoot":"","sources":["../../src/auth/password-reset-token.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtE,0FAA0F;IAC1F,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpD;;;;OAIG;IACH,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAEtG,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D"}

package/dist/auth/password-reset-token.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/session.repository.d.ts

@@ -0,0 +1,47 @@
+export interface NewRefreshToken {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+}
+export interface RefreshTokenRecord {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+    createdAt: number;
+    revokedAt: number | null;
+}
+export interface ActiveSessionSummary {
+    id: string;
+    createdAt: number;
+    expiresAt: number;
+}
+export interface ISessionRepository {
+    /** Stores a new refresh token record. Only the hash is persisted, never the plaintext. */
+    saveRefreshToken(record: NewRefreshToken): Promise<void>;
+    /**
+     * Finds an active refresh token by its hash.
+     * nowTimestamp is compared against expiresAt and revokedAt to guarantee the token
+     * is both unexpired and not revoked before returning it.
+     */
+    findActiveByHash(tokenHash: string, nowTimestamp: number): Promise<RefreshTokenRecord | null>;
+    /**
+     * Marks a refresh token as revoked so it cannot be used again.
+     * Returns true if the token was found and revoked, false if it was already revoked or absent.
+     */
+    revokeByHash(tokenHash: string, nowTimestamp: number): Promise<boolean>;
+    /**
+     * Revokes all active refresh tokens for a user.
+     * Must be called on password change to invalidate all existing sessions immediately.
+     */
+    revokeAllForUser(userId: string, nowTimestamp: number): Promise<void>;
+    /** Returns a paginated list of active sessions for the user, ordered newest first. */
+    listActiveForUser(userId: string, nowTimestamp: number, limit: number): Promise<ActiveSessionSummary[]>;
+    /**
+     * Revokes a specific session by its database ID, scoped to the owning user
+     * to prevent one user from revoking another user's sessions.
+     */
+    revokeById(sessionId: string, userId: string, nowTimestamp: number): Promise<boolean>;
+}
+//# sourceMappingURL=session.repository.d.ts.map

package/dist/auth/session.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.repository.d.ts","sourceRoot":"","sources":["../../src/auth/session.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,0FAA0F;IAC1F,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;;;OAIG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IAE7F;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvE;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErE,sFAAsF;IACtF,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAEvG;;;OAGG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtF"}

package/dist/auth/session.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/token-service.d.ts

@@ -0,0 +1,23 @@
+export interface JwtClaims {
+    sub: string;
+    email?: string;
+    name?: string;
+    [key: string]: unknown;
+}
+export interface IssueTokenOptions {
+    /** Time to live in seconds. Defaults to 900 (15 minutes). */
+    ttlSeconds?: number;
+}
+export interface ITokenService {
+    /**
+     * Issues a signed JWT for the given claims. The token is short-lived by design;
+     * callers that need a longer-lived session should use a refresh token instead.
+     */
+    issue(claims: JwtClaims, options?: IssueTokenOptions): Promise<string>;
+    /**
+     * Verifies a JWT and returns its decoded claims, or null on ANY failure
+     * (expired, tampered, wrong issuer/audience, malformed). Never throws.
+     */
+    verify(token: string): Promise<JwtClaims | null>;
+}
+//# sourceMappingURL=token-service.d.ts.map

package/dist/auth/token-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-service.d.ts","sourceRoot":"","sources":["../../src/auth/token-service.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEtE;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;CACjD"}

package/dist/auth/token-service.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/user.repository.d.ts

@@ -0,0 +1,47 @@
+export interface UserRecord {
+    id: string;
+    email: string;
+    name: string | null;
+    passwordHash: string;
+    role: string;
+    avatarUrl: string | null;
+    notificationPreferences: string;
+}
+export interface NewUserInput {
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: string;
+    name: string | null;
+}
+export interface IUserRepository {
+    /**
+     * Returns the total number of registered users.
+     * Used to block re-setup when at least one administrator account already exists.
+     */
+    countAll(): Promise<number>;
+    /** Retrieves a user by their unique identifier, or null if not found. */
+    findById(userId: string): Promise<UserRecord | null>;
+    /** Retrieves a user by their email address, or null if not found. */
+    findByEmail(email: string): Promise<UserRecord | null>;
+    /** Inserts a new user record. */
+    create(user: NewUserInput): Promise<void>;
+    /** Updates the user's display name and/or email address. */
+    updateProfile(userId: string, fields: {
+        name?: string;
+        email?: string;
+    }): Promise<void>;
+    /** Replaces the user's stored password hash after a successful password change. */
+    updatePasswordHash(userId: string, newPasswordHash: string): Promise<void>;
+    /** Sets or clears the user's avatar URL. */
+    updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void>;
+    /** Persists the user's notification preferences as a JSON string. */
+    updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void>;
+    /**
+     * Checks whether the given email is already registered to a different user.
+     * Used during an email change to detect conflicts without exposing whether
+     * an unrelated account exists.
+     */
+    emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean>;
+}
+//# sourceMappingURL=user.repository.d.ts.map

package/dist/auth/user.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/auth/user.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEpD,qEAAqE;IACrE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEtD,iCAAiC;IACjC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC,4DAA4D;IAC5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF,mFAAmF;IACnF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1E,4CAA4C;IAC5C,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExE,qEAAqE;IACrE,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErF;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAClF"}

package/dist/auth/user.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/content.repository.d.ts

@@ -0,0 +1,95 @@
+import { Seed, SelectOptions } from './types.js';
+/**
+ * Base Repository Error
+ */
+export declare class RepositoryError extends Error {
+    cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export declare class EntryNotFoundError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export declare class SlugConflictError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Interface defining the standard operations for content persistence.
+ * This is platform-agnostic and should be implemented for specific databases (e.g., D1).
+ */
+export interface ContentRepository {
+    /**
+     * Retrieves a paginated and filtered list of entries.
+     */
+    findMany(seed: Seed, options: SelectOptions): Promise<{
+        items: Record<string, any>[];
+        total: number;
+    }>;
+    /**
+     * Finds a single entry by its unique ID.
+     * Throws EntryNotFoundError if not found.
+     */
+    findById(seed: Seed, id: string): Promise<Record<string, any>>;
+    /**
+     * Finds a single entry by its unique slug.
+     * Throws EntryNotFoundError if not found.
+     */
+    findBySlug(seed: Seed, slug: string): Promise<Record<string, any>>;
+    /**
+     * Computes facets (status counts and distinct tags) for a content type.
+     */
+    getFacets(seed: Seed): Promise<{
+        statuses: Record<string, number>;
+        tagsByColumn: Record<string, string[]>;
+    }>;
+    /**
+     * Creates a new content entry in the live table.
+     * Throws SlugConflictError if the slug is already taken.
+     */
+    create(seed: Seed, id: string, slug: string, status: string, data: Record<string, any>): Promise<void>;
+    /**
+     * Partially updates an existing entry in the live table.
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    update(seed: Seed, id: string, data: Record<string, any>, status?: string): Promise<void>;
+    /**
+     * Deletes an entry from the live table.
+     * Returns the deleted row data (useful for media cleanup).
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    delete(seed: Seed, id: string): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Saves or updates a pending draft in the mirror table.
+     */
+    saveDraft(seed: Seed, entryId: string, data: Record<string, any>): Promise<void>;
+    /**
+     * Retrieves the pending draft for a given entry.
+     * Returns null if no draft exists.
+     */
+    getDraft(seed: Seed, entryId: string): Promise<Record<string, any> | null>;
+    /**
+     * Atomic promotion of a draft to the live table.
+     * Must use a transaction (db.batch) to update live and delete draft.
+     */
+    publishDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Discards the pending draft.
+     */
+    deleteDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Checks if a slug is already taken by another entry.
+     */
+    existsSlug(seed: Seed, slug: string, excludeId?: string): Promise<boolean>;
+    /**
+     * Checks if an entry has a pending draft.
+     */
+    hasDraft(seed: Seed, entryId: string): Promise<boolean>;
+}
+//# sourceMappingURL=content.repository.d.ts.map

package/dist/content.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../src/content.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEhD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtG;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzF;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAErE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD"}

package/dist/content.repository.js

@@ -0,0 +1,29 @@
+/**
+ * Base Repository Error
+ */
+export class RepositoryError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'RepositoryError';
+    }
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export class EntryNotFoundError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'EntryNotFoundError';
+    }
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export class SlugConflictError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'SlugConflictError';
+    }
+}

package/dist/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACV,IAAI,EACJ,MAAM,EAKN,aAAa,EACb,kBAAkB,EACnB,MAAM,YAAY,CAAA;AA+EnB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAsBtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAuB5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAkBpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAgCxD;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE,aAAkB,GAAG,kBAAkB,CAqE5F;AA0CD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,EAAE,CAc7D;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAkCrF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CA4BzE"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACV,IAAI,EACJ,MAAM,EAKN,aAAa,EACb,kBAAkB,EACnB,MAAM,YAAY,CAAA;AAgFnB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAsBtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAuB5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAkBpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAgCxD;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE,aAAkB,GAAG,kBAAkB,CAqE5F;AA+GD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,EAAE,CAc7D;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAmCrF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CA6BzE"}

package/dist/engine.js

@@ -6,6 +6,7 @@ const BRANCH_TYPE_SQL = {
     json: { sqlType: 'TEXT' }, // JSON serializzato
     richtext: { sqlType: 'TEXT' },
     file: { sqlType: 'TEXT' }, // URL singolo o JSON array di URL
+    tags: { sqlType: 'TEXT' }, // JSON array di stringhe
 };
 const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at']);
 // ---- Private helpers ----
@@ -277,6 +278,32 @@ export function buildSelectQuery(seed, options = {}) {
     }
     return { sql, bindings };
 }
+function normalizeFilterValue(type, value) {
+    if (value === null || value === undefined)
+        return null;
+    if (type === 'date') {
+        if (typeof value === 'number')
+            return value;
+        if (typeof value === 'string' && value.trim() !== '') {
+            const d = new Date(value);
+            return isNaN(d.getTime()) ? null : Math.floor(d.getTime() / 1000);
+        }
+        return null;
+    }
+    if (type === 'boolean') {
+        return value ? 1 : 0;
+    }
+    if (type === 'number') {
+        if (typeof value === 'number')
+            return value;
+        if (typeof value === 'string' && value.trim() !== '') {
+            const n = Number(value);
+            return isNaN(n) ? null : n;
+        }
+        return null;
+    }
+    return value;
+}
 function buildFilterCondition(col, type, cond, bindings) {
     const { op, value } = cond;
     if (op === 'is_empty') {
@@ -285,23 +312,58 @@ function buildFilterCondition(col, type, cond, bindings) {
     if (op === 'is_not_empty') {
         return type === 'text' ? `(${col} IS NOT NULL AND ${col} != '')` : `${col} IS NOT NULL`;
     }
-    if (value === null || value === undefined)
-        return null;
-    if (op === 'eq') {
-        bindings.push(type === 'boolean' ? (value ? 1 : 0) : value);
-        return `${col} = ?`;
+    if (op === 'in' || op === 'not_in') {
+        if (!Array.isArray(value) || value.length === 0)
+            return null;
+        const normalizedValues = value
+            .map((v) => normalizeFilterValue(type, v))
+            .filter((v) => v !== null);
+        if (normalizedValues.length === 0)
+            return null;
+        const placeholders = normalizedValues.map(() => '?').join(', ');
+        bindings.push(...normalizedValues);
+        return `${col} ${op === 'in' ? 'IN' : 'NOT IN'} (${placeholders})`;
     }
-    if (op === 'contains') {
-        if (type === 'tags') {
-            bindings.push(String(value));
-            return `EXISTS (SELECT 1 FROM json_each(${col}) WHERE value = ?)`;
+    if (op === 'has_tag' || op === 'has_any_tag' || op === 'has_all_tags') {
+        if (type !== 'tags' && type !== 'json')
+            return null;
+        const tags = (op === 'has_tag' ? [value] : Array.isArray(value) ? value : [value])
+            .map(t => String(t));
+        if (tags.length === 0)
+            return null;
+        if (op === 'has_tag' || op === 'has_any_tag') {
+            const placeholders = tags.map(() => '?').join(', ');
+            bindings.push(...tags);
+            return `EXISTS (SELECT 1 FROM json_each(${col}) WHERE value IN (${placeholders}))`;
         }
-        bindings.push(`%${String(value)}%`);
-        return `${col} LIKE ?`;
+        // has_all_tags: each tag must exist
+        const clauses = tags.map(() => `EXISTS (SELECT 1 FROM json_each(${col}) WHERE value = ?)`);
+        bindings.push(...tags);
+        return `(${clauses.join(' AND ')})`;
+    }
+    const normalized = normalizeFilterValue(type, value);
+    if (normalized === null)
+        return null;
+    if (op === 'eq' || op === 'neq') {
+        const sqlOp = op === 'eq' ? '=' : '!=';
+        bindings.push(normalized);
+        return `${col} ${sqlOp} ?`;
+    }
+    if (op === 'contains' || op === 'not_contains' || op === 'starts_with' || op === 'ends_with') {
+        const sqlOp = op === 'not_contains' ? 'NOT LIKE' : 'LIKE';
+        let pattern = String(value);
+        if (op === 'contains' || op === 'not_contains')
+            pattern = `%${pattern}%`;
+        else if (op === 'starts_with')
+            pattern = `${pattern}%`;
+        else if (op === 'ends_with')
+            pattern = `%${pattern}`;
+        bindings.push(pattern);
+        return `${col} ${sqlOp} ?`;
     }
     const mathOps = { gt: '>', gte: '>=', lt: '<', lte: '<=' };
     if (mathOps[op]) {
-        bindings.push(value);
+        bindings.push(normalized);
         return `${col} ${mathOps[op]} ?`;
     }
     return null;
@@ -337,6 +399,7 @@ export function serializeForDb(branch, value) {
         case 'boolean':
             return value ? 1 : 0;
         case 'json':
+        case 'tags':
         case 'richtext':
             return typeof value === 'string' ? value : JSON.stringify(value);
         case 'date': {
@@ -374,6 +437,7 @@ export function deserializeFromDb(branch, value) {
         case 'boolean':
             return value === 1 || value === true;
         case 'json':
+        case 'tags':
         case 'richtext': {
             if (typeof value === 'string') {
                 try {

package/dist/idempotency.repository.d.ts

@@ -0,0 +1,13 @@
+export interface IdempotencyRecord {
+    key: string;
+    fingerprint: string;
+    responseStatus: number;
+    responseBody: string;
+    expiresAt: number;
+}
+export interface IdempotencyRepository {
+    lookup(key: string): Promise<IdempotencyRecord | null>;
+    store(record: IdempotencyRecord): Promise<void>;
+    cleanup(now: number): Promise<void>;
+}
+//# sourceMappingURL=idempotency.repository.d.ts.map

package/dist/idempotency.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.repository.d.ts","sourceRoot":"","sources":["../src/idempotency.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACtD,KAAK,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpC"}

package/dist/idempotency.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -15,5 +15,9 @@ export * from './validation.js';
 export * from './richtext.js';
 export * from './richtext-render.js';
 export * from './slug-utils.js';
+export * from './content.repository.js';
+export * from './idempotency.repository.js';
+export * from './media.repository.js';
+export * from './storage.js';
 export * from './policies.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,yBAAyB,CAAA;AACvC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA"}

package/dist/index.js

@@ -15,4 +15,8 @@ export * from './validation.js';
 export * from './richtext.js';
 export * from './richtext-render.js';
 export * from './slug-utils.js';
+export * from './content.repository.js';
+export * from './idempotency.repository.js';
+export * from './media.repository.js';
+export * from './storage.js';
 export * from './policies.js';

package/dist/media.repository.d.ts

@@ -0,0 +1,61 @@
+/**
+ * MediaRepository - Interface for tracking media assets in the database.
+ */
+export interface MediaObject {
+    key: string;
+    filename: string;
+    mime_type: string;
+    size_bytes: number;
+    uploaded_by: string;
+    created_at: number;
+}
+export interface MediaRepository {
+    /**
+     * Tracks a new file upload in the database.
+     */
+    trackUpload(media: Omit<MediaObject, 'created_at'>): Promise<void>;
+    /**
+     * Retrieves tracking info for a file by its key.
+     */
+    getByKey(key: string): Promise<MediaObject | null>;
+    /**
+     * Removes tracking info for a file.
+     */
+    untrack(key: string): Promise<void>;
+    /**
+     * Lists all tracked media with pagination.
+     */
+    list(options: {
+        limit: number;
+        offset: number;
+    }): Promise<{
+        items: MediaObject[];
+        total: number;
+    }>;
+    /**
+     * Gets the total number of tracked media objects.
+     */
+    count(): Promise<number>;
+}
+/**
+ * SystemStatsRepository - Interface for managing global system metrics.
+ */
+export interface SystemStatsRepository {
+    /**
+     * Increments the total storage counter.
+     */
+    incrementStorage(bytes: number): Promise<void>;
+    /**
+     * Decrements the total storage counter.
+     */
+    decrementStorage(bytes: number): Promise<void>;
+    /**
+     * Sets a specific value for a storage stat (e.g. after a full sync).
+     */
+    setStorage(bytes: number): Promise<void>;
+    /**
+     * Gets the current total storage usage in bytes.
+     */
+    getStorageUsage(): Promise<number>;
+}
+//# sourceMappingURL=media.repository.d.ts.map

package/dist/media.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.repository.d.ts","sourceRoot":"","sources":["../src/media.repository.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnD;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnG;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;OAEG;IACH,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC"}

package/dist/media.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/rate-limit/rate-limiter.d.ts

@@ -0,0 +1,13 @@
+export interface RateLimitResult {
+    isAllowed: boolean;
+    retryAfterSeconds?: number;
+}
+export interface IRateLimiter {
+    /**
+     * Checks whether the given key is within the rate limit.
+     * The key should combine the client IP address and an endpoint-specific prefix
+     * to prevent one endpoint's limit from being shared with another.
+     */
+    checkLimit(key: string): Promise<RateLimitResult>;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limit/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limit/rate-limiter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAClD"}

package/dist/rate-limit/rate-limiter.js

@@ -0,0 +1 @@
+export {};

package/dist/storage.d.ts

@@ -0,0 +1,72 @@
+/**
+ * BeechBucket - S3-like interface for object storage in BeechCMS.
+ *
+ * This interface abstracts the underlying storage provider (R2, S3, or Local)
+ * allowing the application to scale without being tied to a specific vendor.
+ */
+export interface PutBucketOptions {
+    contentType?: string;
+    metadata?: Record<string, string>;
+}
+export interface GetBucketResult {
+    body: ReadableStream | ArrayBuffer;
+    contentType?: string;
+    size: number;
+    metadata?: Record<string, string>;
+}
+export interface BeechBucket {
+    /**
+     * Uploads an object to the bucket.
+     * @param key The unique key (path) for the object.
+     * @param body The data to store.
+     * @param options Optional metadata like content type.
+     */
+    put(key: string, body: ArrayBuffer | Uint8Array | ReadableStream, options?: PutBucketOptions): Promise<void>;
+    /**
+     * Retrieves an object from the bucket.
+     * @param key The unique key for the object.
+     * @returns The object data and metadata, or null if not found.
+     */
+    get(key: string): Promise<GetBucketResult | null>;
+    /**
+     * Deletes an object from the bucket.
+     * @param key The unique key for the object.
+     */
+    delete(key: string): Promise<void>;
+    /**
+     * Retrieves metadata for an object without downloading its content.
+     * @param key The unique key for the object.
+     */
+    head(key: string): Promise<{
+        size: number;
+        contentType?: string;
+        metadata?: Record<string, string>;
+    } | null>;
+    /**
+     * Returns a publicly accessible URL for the given key.
+     * The implementation decides if this is a direct vendor URL (CDN)
+     * or a proxied URL through the Beech API.
+     * @param key The unique key for the object.
+     */
+    getUrl(key: string): string;
+    /**
+     * Calculates the total size of all objects in the bucket.
+     * Warning: This may be an expensive operation on some providers.
+     */
+    getTotalSize(): Promise<number>;
+    /**
+     * Lists objects in the bucket.
+     */
+    list(options?: {
+        prefix?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        objects: Array<{
+            key: string;
+            size: number;
+        }>;
+        cursor?: string;
+    }>;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,GAAG,WAAW,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,cAAc,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7G;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAElD;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAE7G;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC;;OAEG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnJ"}

package/dist/storage.js

@@ -0,0 +1 @@
+export {};

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export type BranchType = 'text' | 'number' | 'boolean' | 'json' | 'date' | 'richtext' | 'file';
+export type BranchType = 'text' | 'number' | 'boolean' | 'json' | 'date' | 'richtext' | 'file' | 'tags';
 /** Branch: definizione di una proprietà. alias = nome colonna SQL. */
 export interface Branch {
     /** Alias human-readable, usato nel payload API e come nome colonna SQL nella tabella dedicata */
@@ -96,8 +96,8 @@ export interface Seed {
     /** Optional dashboard-specific UI config. Ignored by the Botanical Engine. */
     dashboard?: DashboardSeedConfig;
 }
-export type FilterOperator = 'eq' | 'gt' | 'gte' | 'lt' | 'lte' | 'contains' | 'is_empty' | 'is_not_empty';
-export type FilterType = 'text' | 'number' | 'date' | 'boolean' | 'tags' | 'select' | 'system';
+export type FilterOperator = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'contains' | 'not_contains' | 'starts_with' | 'ends_with' | 'is_empty' | 'is_not_empty' | 'in' | 'not_in' | 'has_tag' | 'has_any_tag' | 'has_all_tags';
+export type FilterType = 'text' | 'number' | 'date' | 'boolean' | 'tags' | 'select' | 'system' | 'json';
 export interface FilterCondition {
     op: FilterOperator;
     value: string | number | boolean | null;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAA;AAE9F,sEAAsE;AACtE,MAAM,WAAW,MAAM;IACrB,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,IAAI,EAAE,UAAU,CAAA;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,CAAA;IAC3E;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,yDAAyD;QACzD,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;QACtC,0EAA0E;QAC1E,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;QACzC,yEAAyE;QACzE,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mFAAmF;QACnF,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,wFAAwF;QACxF,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,wEAAwE;QACxE,MAAM,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;CACF;AAED,6GAA6G;AAC7G,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;CACF;AAED,6DAA6D;AAC7D,MAAM,WAAW,IAAI;IACnB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAChC;AAID,MAAM,MAAM,cAAc,GACtB,IAAI,GACJ,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,UAAU,GACV,UAAU,GACV,cAAc,CAAA;AAElB,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE9F,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,cAAc,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;CACxC;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,eAAe,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;IACvB,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAA;IACjD,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,EAAE,CAAA;CAC/C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAA;AAEvG,sEAAsE;AACtE,MAAM,WAAW,MAAM;IACrB,iGAAiG;IACjG,KAAK,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,IAAI,EAAE,UAAU,CAAA;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,CAAA;IAC3E;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,yDAAyD;QACzD,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;QACtC,0EAA0E;QAC1E,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;QACzC,yEAAyE;QACzE,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mFAAmF;QACnF,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,wFAAwF;QACxF,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,wEAAwE;QACxE,MAAM,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;CACF;AAED,6GAA6G;AAC7G,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;CACF;AAED,6DAA6D;AAC7D,MAAM,WAAW,IAAI;IACnB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAChC;AAID,MAAM,MAAM,cAAc,GACtB,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,UAAU,GACV,cAAc,GACd,aAAa,GACb,WAAW,GACX,UAAU,GACV,cAAc,GACd,IAAI,GACJ,QAAQ,GACR,SAAS,GACT,aAAa,GACb,cAAc,CAAA;AAElB,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEvG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,cAAc,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;CACxC;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,eAAe,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;IACvB,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAA;IACjD,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,EAAE,CAAA;CAC/C"}

package/dist/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAU,IAAI,EAAE,MAAM,YAAY,CAAA;AAG9C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC/B,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,gBAAgB,EAAE,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,qBAAqB,EAAE,MAAM,EAAE,CAAA;IAC/B,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAufD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA6G3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,GAAG,QAAQ,GAAG,WAAW,CAE9F;AAED;;;;;GAKG"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAU,IAAI,EAAE,MAAM,YAAY,CAAA;AAG9C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC/B,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,gBAAgB,EAAE,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,qBAAqB,EAAE,MAAM,EAAE,CAAA;IAC/B,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AA6fD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA6G3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,GAAG,QAAQ,GAAG,WAAW,CAE9F;AAED;;;;;GAKG"}

package/dist/validation.js

@@ -278,7 +278,8 @@ function buildBranchSchema(branch, options) {
                 .refine((value) => isIsoDateString(value), { message: 'Expected date(ISO)' });
             return nullable ? z.union([schema, nullable]) : schema;
         }
-        case 'json': {
+        case 'json':
+        case 'tags': {
             const schema = jsonObjectOrArraySchema;
             return nullable ? z.union([schema, nullable]) : schema;
         }
@@ -316,6 +317,8 @@ function buildBranchSchema(branch, options) {
                 .pipe(z.url());
             return nullable ? z.union([schema, nullable]) : schema;
         }
+        default:
+            throw new Error(`Unhandled branch type: ${branch.type}`);
     }
 }
 const compiledSchemaCache = new Map();
@@ -422,7 +425,8 @@ function validateBranchValue(branch, alias, rawValue, options) {
             }
             return { ok: true, value };
         }
-        case 'json': {
+        case 'json':
+        case 'tags': {
             const isValidJsonLike = (typeof rawValue === 'object' && rawValue !== null) || Array.isArray(rawValue);
             if (!isValidJsonLike || typeof rawValue === 'string') {
                 return { ok: false, detail: makeDetail(alias, 'object|array', rawValue) };
@@ -443,6 +447,8 @@ function validateBranchValue(branch, alias, rawValue, options) {
             }
             return { ok: true, value: singleUrl };
         }
+        default:
+            throw new Error(`Unhandled branch type: ${branch.type}`);
     }
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beechcms/core",
-  "version": "0.4.0-preview.9",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",