@classytic/arc 2.3.0 → 2.4.1

package/dist/presets-BTeYbw7h.d.mts

@@ -1,57 +0,0 @@
-import { t as PermissionCheck } from "./types-RLkFVgaw.mjs";
-
-//#region src/permissions/presets.d.ts
-declare namespace presets_d_exports {
-  export { adminOnly, authenticated, fullPublic, ownerWithAdminBypass, publicRead, publicReadAdminWrite, readOnly };
-}
-/**
- * ResourcePermissions shape — matches the type in types/index.ts
- */
-interface ResourcePermissions<TDoc = any> {
-  list?: PermissionCheck<TDoc>;
-  get?: PermissionCheck<TDoc>;
-  create?: PermissionCheck<TDoc>;
-  update?: PermissionCheck<TDoc>;
-  delete?: PermissionCheck<TDoc>;
-}
-type PermissionOverrides<TDoc = any> = Partial<ResourcePermissions<TDoc>>;
-/**
- * Public read, authenticated write.
- * list + get = allowPublic(), create + update + delete = requireAuth()
- */
-declare function publicRead<TDoc = any>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * Public read, admin write.
- * list + get = allowPublic(), create + update + delete = requireRoles(['admin'])
- */
-declare function publicReadAdminWrite<TDoc = any>(roles?: readonly string[], overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * All operations require authentication.
- */
-declare function authenticated<TDoc = any>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * All operations require specific roles.
- * @param roles - Required roles (user needs at least one). Default: ['admin']
- */
-declare function adminOnly<TDoc = any>(roles?: readonly string[], overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * Owner-scoped with admin bypass.
- * list = auth (scoped to owner), get = auth, create = auth,
- * update + delete = ownership check with admin bypass.
- *
- * @param ownerField - Field containing owner ID (default: 'userId')
- * @param bypassRoles - Roles that bypass ownership check (default: ['admin'])
- */
-declare function ownerWithAdminBypass<TDoc = any>(ownerField?: Extract<keyof TDoc, string> | string, bypassRoles?: readonly string[], overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * Full public access — no auth required for any operation.
- * Use sparingly (dev/testing, truly public APIs).
- */
-declare function fullPublic<TDoc = any>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-/**
- * Read-only: list + get authenticated, write operations denied.
- * Useful for computed/derived resources.
- */
-declare function readOnly<TDoc = any>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
-//#endregion
-export { presets_d_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };

package/dist/presets-CeFtfDR8.mjs

@@ -1,119 +0,0 @@
-import { t as __exportAll } from "./chunk-C7Uep-_p.mjs";
-import { allowPublic, anyOf, requireAuth, requireOwnership, requireRoles } from "./permissions/index.mjs";
-
-//#region src/permissions/presets.ts
-var presets_exports = /* @__PURE__ */ __exportAll({
-	adminOnly: () => adminOnly,
-	authenticated: () => authenticated,
-	fullPublic: () => fullPublic,
-	ownerWithAdminBypass: () => ownerWithAdminBypass,
-	publicRead: () => publicRead,
-	publicReadAdminWrite: () => publicReadAdminWrite,
-	readOnly: () => readOnly
-});
-/**
-* Merge a base preset with user overrides.
-* Overrides replace individual operations — undefined values don't clear them.
-*/
-function withOverrides(base, overrides) {
-	if (!overrides) return base;
-	const filtered = Object.fromEntries(Object.entries(overrides).filter(([, v]) => v !== void 0));
-	return {
-		...base,
-		...filtered
-	};
-}
-/**
-* Public read, authenticated write.
-* list + get = allowPublic(), create + update + delete = requireAuth()
-*/
-function publicRead(overrides) {
-	return withOverrides({
-		list: allowPublic(),
-		get: allowPublic(),
-		create: requireAuth(),
-		update: requireAuth(),
-		delete: requireAuth()
-	}, overrides);
-}
-/**
-* Public read, admin write.
-* list + get = allowPublic(), create + update + delete = requireRoles(['admin'])
-*/
-function publicReadAdminWrite(roles = ["admin"], overrides) {
-	return withOverrides({
-		list: allowPublic(),
-		get: allowPublic(),
-		create: requireRoles(roles),
-		update: requireRoles(roles),
-		delete: requireRoles(roles)
-	}, overrides);
-}
-/**
-* All operations require authentication.
-*/
-function authenticated(overrides) {
-	return withOverrides({
-		list: requireAuth(),
-		get: requireAuth(),
-		create: requireAuth(),
-		update: requireAuth(),
-		delete: requireAuth()
-	}, overrides);
-}
-/**
-* All operations require specific roles.
-* @param roles - Required roles (user needs at least one). Default: ['admin']
-*/
-function adminOnly(roles = ["admin"], overrides) {
-	return withOverrides({
-		list: requireRoles(roles),
-		get: requireRoles(roles),
-		create: requireRoles(roles),
-		update: requireRoles(roles),
-		delete: requireRoles(roles)
-	}, overrides);
-}
-/**
-* Owner-scoped with admin bypass.
-* list = auth (scoped to owner), get = auth, create = auth,
-* update + delete = ownership check with admin bypass.
-*
-* @param ownerField - Field containing owner ID (default: 'userId')
-* @param bypassRoles - Roles that bypass ownership check (default: ['admin'])
-*/
-function ownerWithAdminBypass(ownerField = "userId", bypassRoles = ["admin"], overrides) {
-	return withOverrides({
-		list: requireAuth(),
-		get: requireAuth(),
-		create: requireAuth(),
-		update: anyOf(requireRoles(bypassRoles), requireOwnership(ownerField)),
-		delete: anyOf(requireRoles(bypassRoles), requireOwnership(ownerField))
-	}, overrides);
-}
-/**
-* Full public access — no auth required for any operation.
-* Use sparingly (dev/testing, truly public APIs).
-*/
-function fullPublic(overrides) {
-	return withOverrides({
-		list: allowPublic(),
-		get: allowPublic(),
-		create: allowPublic(),
-		update: allowPublic(),
-		delete: allowPublic()
-	}, overrides);
-}
-/**
-* Read-only: list + get authenticated, write operations denied.
-* Useful for computed/derived resources.
-*/
-function readOnly(overrides) {
-	return withOverrides({
-		list: requireAuth(),
-		get: requireAuth()
-	}, overrides);
-}
-
-//#endregion
-export { presets_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };