@dyrected/core 2.5.43 → 2.5.45

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, W as WorkflowConfig, a as AuthenticatedUser, b as WorkflowTransition, L as LifecycleEventName, c as LifecycleEvent, d as BaseDocument, H as HookRequestContext, G as GlobalConfig } from './app-config-2vF6W56z.cjs';
-export { e as AccessFunction, f as AdminAuthAccessResolution, g as AdminAuthClaimMapping, h as AdminAuthProvider, i as AdminAuthProvisioningMode, j as AdminAuthResolveAccessArgs, k as AdminAuthResolvedIdentity, l as AdminConfig, m as AdminDashboardComponentSlots, n as AdminIconName, o as ArrayField, p as BaseAdminAuthProvider, q as BlocksField, r as BooleanField, s as CharacterLimitFieldConfig, t as CollectionAfterChangeHook, u as CollectionAfterDeleteHook, v as CollectionAfterReadHook, w as CollectionAfterTransitionHook, x as CollectionBeforeChangeHook, y as CollectionBeforeDeleteHook, z as CollectionBeforeReadHook, E as CollectionBeforeTransitionHook, I as CollectionListComponentSlots, J as CustomAdminAuthProvider, K as DatabaseAdapter, M as DateField, N as DateTimeField, O as DynamicOptionItem, Q as DynamicOptionsConfig, R as DynamicOptionsResolver, S as DynamicOptionsResolverArgs, T as EmailField, U as FieldAdminOnChangeHook, V as FieldAdminOnChangeHookArgs, X as FieldAdminOptionsHook, Y as FieldAdminOptionsHookArgs, Z as FieldAdminOptionsHookResult, _ as FieldAfterReadHook, $ as FieldAfterReadHookArgs, a0 as FieldBeforeChangeHook, a1 as FieldBeforeChangeHookArgs, a2 as FieldHook, a3 as FieldType, a4 as FileData, a5 as GlobalAfterChangeHook, a6 as GlobalAfterReadHook, a7 as GlobalBeforeChangeHook, a8 as GlobalBeforeReadHook, a9 as HookFunction, aa as IconField, ab as ImageField, ac as ImageService, ad as JoinField, ae as JsonField, af as LIFECYCLE_EVENT_NAMES, ag as LifecycleEventHandler, ah as MultiSelectField, ai as NumberField, aj as OIDCAdminAuthProvider, ak as ObjectField, al as PaginatedResult, am as PublicAdminAuthProvider, an as RadioField, ao as ReadonlyDatabaseAdapter, ap as RelationshipField, aq as RichTextField, ar as RowField, as as SelectField, at as StorageAdapter, au as TextField, av as TextareaField, aw as TimeField, ax as UploadConfig, ay as UrlField, az as WordLimitFieldConfig, aA as WorkflowMetadata, aB as WorkflowRole, aC as WorkflowState, aD as WorkflowTransitionContext } from './app-config-2vF6W56z.cjs';
+import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, W as WorkflowConfig, a as AuthenticatedUser, b as WorkflowTransition, L as LifecycleEventName, c as LifecycleEvent, d as BaseDocument, H as HookRequestContext, G as GlobalConfig } from './app-config-3XBnu9Xz.cjs';
+export { e as AccessFunction, f as AdminAuthAccessResolution, g as AdminAuthClaimMapping, h as AdminAuthMember, i as AdminAuthProvider, j as AdminAuthProviderMembersConfig, k as AdminAuthProvisioningMode, l as AdminAuthResolveAccessArgs, m as AdminAuthResolvedIdentity, n as AdminConfig, o as AdminDashboardComponentSlots, p as AdminIconName, q as ArrayField, r as BaseAdminAuthProvider, s as BlocksField, t as BooleanField, u as CharacterLimitFieldConfig, v as CollectionAfterChangeHook, w as CollectionAfterDeleteHook, x as CollectionAfterReadHook, y as CollectionAfterTransitionHook, z as CollectionBeforeChangeHook, E as CollectionBeforeDeleteHook, I as CollectionBeforeReadHook, J as CollectionBeforeTransitionHook, K as CollectionListComponentSlots, M as CustomAdminAuthProvider, N as DatabaseAdapter, O as DateField, Q as DateTimeField, R as DynamicOptionItem, S as DynamicOptionsConfig, T as DynamicOptionsResolver, U as DynamicOptionsResolverArgs, V as EmailField, X as FieldAdminOnChangeHook, Y as FieldAdminOnChangeHookArgs, Z as FieldAdminOptionsHook, _ as FieldAdminOptionsHookArgs, $ as FieldAdminOptionsHookResult, a0 as FieldAfterReadHook, a1 as FieldAfterReadHookArgs, a2 as FieldBeforeChangeHook, a3 as FieldBeforeChangeHookArgs, a4 as FieldHook, a5 as FieldType, a6 as FileData, a7 as GlobalAfterChangeHook, a8 as GlobalAfterReadHook, a9 as GlobalBeforeChangeHook, aa as GlobalBeforeReadHook, ab as HookFunction, ac as IconField, ad as ImageField, ae as ImageService, af as JoinField, ag as JsonField, ah as LIFECYCLE_EVENT_NAMES, ai as LifecycleEventHandler, aj as MultiSelectField, ak as NumberField, al as OIDCAdminAuthProvider, am as ObjectField, an as PaginatedResult, ao as PublicAdminAuthProvider, ap as RadioField, aq as ReadonlyDatabaseAdapter, ar as RelationshipField, as as RichTextField, at as RowField, au as SelectField, av as StorageAdapter, aw as TextField, ax as TextareaField, ay as TimeField, az as UploadConfig, aA as UrlField, aB as WordLimitFieldConfig, aC as WorkflowMetadata, aD as WorkflowRole, aE as WorkflowState, aF as WorkflowTransitionContext } from './app-config-3XBnu9Xz.cjs';
 import 'lucide-react';
 
 type Prettify<T> = {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, W as WorkflowConfig, a as AuthenticatedUser, b as WorkflowTransition, L as LifecycleEventName, c as LifecycleEvent, d as BaseDocument, H as HookRequestContext, G as GlobalConfig } from './app-config-2vF6W56z.js';
-export { e as AccessFunction, f as AdminAuthAccessResolution, g as AdminAuthClaimMapping, h as AdminAuthProvider, i as AdminAuthProvisioningMode, j as AdminAuthResolveAccessArgs, k as AdminAuthResolvedIdentity, l as AdminConfig, m as AdminDashboardComponentSlots, n as AdminIconName, o as ArrayField, p as BaseAdminAuthProvider, q as BlocksField, r as BooleanField, s as CharacterLimitFieldConfig, t as CollectionAfterChangeHook, u as CollectionAfterDeleteHook, v as CollectionAfterReadHook, w as CollectionAfterTransitionHook, x as CollectionBeforeChangeHook, y as CollectionBeforeDeleteHook, z as CollectionBeforeReadHook, E as CollectionBeforeTransitionHook, I as CollectionListComponentSlots, J as CustomAdminAuthProvider, K as DatabaseAdapter, M as DateField, N as DateTimeField, O as DynamicOptionItem, Q as DynamicOptionsConfig, R as DynamicOptionsResolver, S as DynamicOptionsResolverArgs, T as EmailField, U as FieldAdminOnChangeHook, V as FieldAdminOnChangeHookArgs, X as FieldAdminOptionsHook, Y as FieldAdminOptionsHookArgs, Z as FieldAdminOptionsHookResult, _ as FieldAfterReadHook, $ as FieldAfterReadHookArgs, a0 as FieldBeforeChangeHook, a1 as FieldBeforeChangeHookArgs, a2 as FieldHook, a3 as FieldType, a4 as FileData, a5 as GlobalAfterChangeHook, a6 as GlobalAfterReadHook, a7 as GlobalBeforeChangeHook, a8 as GlobalBeforeReadHook, a9 as HookFunction, aa as IconField, ab as ImageField, ac as ImageService, ad as JoinField, ae as JsonField, af as LIFECYCLE_EVENT_NAMES, ag as LifecycleEventHandler, ah as MultiSelectField, ai as NumberField, aj as OIDCAdminAuthProvider, ak as ObjectField, al as PaginatedResult, am as PublicAdminAuthProvider, an as RadioField, ao as ReadonlyDatabaseAdapter, ap as RelationshipField, aq as RichTextField, ar as RowField, as as SelectField, at as StorageAdapter, au as TextField, av as TextareaField, aw as TimeField, ax as UploadConfig, ay as UrlField, az as WordLimitFieldConfig, aA as WorkflowMetadata, aB as WorkflowRole, aC as WorkflowState, aD as WorkflowTransitionContext } from './app-config-2vF6W56z.js';
+import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, W as WorkflowConfig, a as AuthenticatedUser, b as WorkflowTransition, L as LifecycleEventName, c as LifecycleEvent, d as BaseDocument, H as HookRequestContext, G as GlobalConfig } from './app-config-3XBnu9Xz.js';
+export { e as AccessFunction, f as AdminAuthAccessResolution, g as AdminAuthClaimMapping, h as AdminAuthMember, i as AdminAuthProvider, j as AdminAuthProviderMembersConfig, k as AdminAuthProvisioningMode, l as AdminAuthResolveAccessArgs, m as AdminAuthResolvedIdentity, n as AdminConfig, o as AdminDashboardComponentSlots, p as AdminIconName, q as ArrayField, r as BaseAdminAuthProvider, s as BlocksField, t as BooleanField, u as CharacterLimitFieldConfig, v as CollectionAfterChangeHook, w as CollectionAfterDeleteHook, x as CollectionAfterReadHook, y as CollectionAfterTransitionHook, z as CollectionBeforeChangeHook, E as CollectionBeforeDeleteHook, I as CollectionBeforeReadHook, J as CollectionBeforeTransitionHook, K as CollectionListComponentSlots, M as CustomAdminAuthProvider, N as DatabaseAdapter, O as DateField, Q as DateTimeField, R as DynamicOptionItem, S as DynamicOptionsConfig, T as DynamicOptionsResolver, U as DynamicOptionsResolverArgs, V as EmailField, X as FieldAdminOnChangeHook, Y as FieldAdminOnChangeHookArgs, Z as FieldAdminOptionsHook, _ as FieldAdminOptionsHookArgs, $ as FieldAdminOptionsHookResult, a0 as FieldAfterReadHook, a1 as FieldAfterReadHookArgs, a2 as FieldBeforeChangeHook, a3 as FieldBeforeChangeHookArgs, a4 as FieldHook, a5 as FieldType, a6 as FileData, a7 as GlobalAfterChangeHook, a8 as GlobalAfterReadHook, a9 as GlobalBeforeChangeHook, aa as GlobalBeforeReadHook, ab as HookFunction, ac as IconField, ad as ImageField, ae as ImageService, af as JoinField, ag as JsonField, ah as LIFECYCLE_EVENT_NAMES, ai as LifecycleEventHandler, aj as MultiSelectField, ak as NumberField, al as OIDCAdminAuthProvider, am as ObjectField, an as PaginatedResult, ao as PublicAdminAuthProvider, ap as RadioField, aq as ReadonlyDatabaseAdapter, ar as RelationshipField, as as RichTextField, at as RowField, au as SelectField, av as StorageAdapter, aw as TextField, ax as TextareaField, ay as TimeField, az as UploadConfig, aA as UrlField, aB as WordLimitFieldConfig, aC as WorkflowMetadata, aD as WorkflowRole, aE as WorkflowState, aF as WorkflowTransitionContext } from './app-config-3XBnu9Xz.js';
 import 'lucide-react';
 
 type Prettify<T> = {

package/dist/server.cjs

@@ -553,6 +553,34 @@ async function evaluateAccess(expression, context) {
   }
 }
 
+// src/utils/admin-auth.ts
+function getAdminAuthCollection(config) {
+  const requestedSlug = config.adminAuth?.collectionSlug;
+  if (requestedSlug) {
+    return config.collections.find((collection) => collection.slug === requestedSlug) ?? null;
+  }
+  return config.collections.find((collection) => collection.slug === "__admins") ?? config.collections.find((collection) => collection.auth) ?? null;
+}
+function getPublicAdminAuthConfig(adminAuth) {
+  const providers = (adminAuth?.providers ?? []).map((provider) => ({
+    id: provider.id,
+    type: provider.type,
+    displayName: provider.displayName || humanizeProviderName(provider.id, provider.type),
+    autoRedirect: provider.autoRedirect
+  }));
+  return {
+    mode: adminAuth?.mode ?? "local",
+    collectionSlug: adminAuth?.collectionSlug,
+    provisioningMode: adminAuth?.provisioningMode,
+    providers
+  };
+}
+function humanizeProviderName(id, type) {
+  const cleaned = id.replace(/[-_]+/g, " ").trim();
+  if (!cleaned) return type.toUpperCase();
+  return cleaned.replace(/\b\w/g, (char) => char.toUpperCase());
+}
+
 // src/workflows.ts
 var WORKFLOW_HISTORY_COLLECTION = "__workflow_history";
 var LIFECYCLE_EVENTS_COLLECTION = "__lifecycle_events";
@@ -782,10 +810,54 @@ var CollectionController = class {
   constructor(collection) {
     this.collection = collection;
   }
+  getDelegatedProvider(c) {
+    const config = c.get("config");
+    const authCollection = getAdminAuthCollection(config);
+    if (!authCollection || this.collection.slug !== authCollection.slug) {
+      return null;
+    }
+    return config.adminAuth?.providers?.find((p) => p.members) || null;
+  }
   async find(c) {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.list) {
+      const limit2 = Number(c.req.query("limit")) || 10;
+      const page2 = Number(c.req.query("page")) || 1;
+      const sort2 = c.req.query("sort") || void 0;
+      let where2 = void 0;
+      const whereRaw2 = c.req.query("where");
+      if (whereRaw2) {
+        try {
+          where2 = JSON.parse(decodeURIComponent(whereRaw2));
+        } catch {
+        }
+      }
+      const paginatedResult = await provider.members.list({ limit: limit2, page: page2, sort: sort2, where: where2, req: c.req });
+      const mappedDocs = [];
+      for (const m of paginatedResult.docs) {
+        let localId = m.id;
+        const localDoc = await db.find({
+          collection: this.collection.slug,
+          where: m.id ? { externalSubject: { equals: m.id } } : { email: { equals: m.email } },
+          limit: 1
+        });
+        if (localDoc.docs[0]) {
+          localId = localDoc.docs[0].id;
+        }
+        mappedDocs.push({
+          ...m,
+          id: localId,
+          externalSubject: m.id
+        });
+      }
+      return c.json({
+        ...paginatedResult,
+        docs: mappedDocs
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const limit = Number(c.req.query("limit")) || 10;
     const page = Number(c.req.query("page")) || 1;
@@ -843,11 +915,13 @@ var CollectionController = class {
         where
       });
     }
-    result.docs = result.docs.map((doc) => this.collection.workflow ? materializeWorkflowDocument(doc, this.collection.workflow, user) : doc).filter((doc) => doc !== null).map((doc) => DefaultsService.apply(this.collection.fields, doc));
+    result.docs = result.docs.map((doc) => this.collection.workflow ? materializeWorkflowDocument(doc, this.collection.workflow, user) : doc).filter((doc) => doc !== null);
     const processedDocs = [];
+    const readonlyDbForHooks = createReadonlyDb(db);
     for (const doc of result.docs) {
+      const docWithDefaults = DefaultsService.apply(this.collection.fields, doc);
       const docWithCollectionHooks = await runCollectionHooks(this.collection.hooks?.afterRead, {
-        doc,
+        doc: docWithDefaults,
         req: c.req,
         user,
         db: readonlyDb
@@ -866,6 +940,26 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && (provider.members?.get || provider.members?.list)) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      let member = null;
+      if (provider.members.get) {
+        member = await provider.members.get({ externalSubject, req: c.req });
+      } else if (provider.members.list) {
+        const listResult = await provider.members.list({ req: c.req });
+        member = listResult.docs.find((m) => m.id === externalSubject) || null;
+      }
+      if (!member) return c.json({ message: "Not Found" }, 404);
+      return c.json({
+        ...member,
+        id: localDoc ? localDoc.id : member.id,
+        externalSubject: member.id
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
@@ -901,6 +995,20 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.create) {
+      const contentType2 = c.req.header("Content-Type") || "";
+      if (contentType2.toLowerCase().includes("multipart/form-data")) {
+        return this.upload(c);
+      }
+      const body2 = await c.req.json();
+      const member = await provider.members.create({ data: body2, req: c.req });
+      return c.json({
+        ...member,
+        id: member.id,
+        externalSubject: member.id
+      }, 201);
+    }
     const readonlyDb = createReadonlyDb(db);
     const contentType = c.req.header("Content-Type") || "";
     if (contentType.toLowerCase().includes("multipart/form-data")) {
@@ -1027,6 +1135,20 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.update) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const body2 = await c.req.json();
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      const member = await provider.members.update({ externalSubject, data: body2, req: c.req });
+      return c.json({
+        ...member,
+        id: localDoc ? localDoc.id : member.id,
+        externalSubject: member.id
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     if (!id) return c.json({ message: "Missing ID" }, 400);
@@ -1215,6 +1337,15 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.delete) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      await provider.members.delete({ externalSubject, req: c.req });
+      return c.json({ message: "Deleted" });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     if (!id) return c.json({ message: "Missing ID" }, 400);
@@ -2098,36 +2229,6 @@ var AuthController = class {
 var import_node_crypto2 = require("crypto");
 var import_node_util3 = require("util");
 var import_jose2 = require("jose");
-
-// src/utils/admin-auth.ts
-function getAdminAuthCollection(config) {
-  const requestedSlug = config.adminAuth?.collectionSlug;
-  if (requestedSlug) {
-    return config.collections.find((collection) => collection.slug === requestedSlug) ?? null;
-  }
-  return config.collections.find((collection) => collection.slug === "__admins") ?? config.collections.find((collection) => collection.auth) ?? null;
-}
-function getPublicAdminAuthConfig(adminAuth) {
-  const providers = (adminAuth?.providers ?? []).map((provider) => ({
-    id: provider.id,
-    type: provider.type,
-    displayName: provider.displayName || humanizeProviderName(provider.id, provider.type),
-    autoRedirect: provider.autoRedirect
-  }));
-  return {
-    mode: adminAuth?.mode ?? "local",
-    collectionSlug: adminAuth?.collectionSlug,
-    provisioningMode: adminAuth?.provisioningMode,
-    providers
-  };
-}
-function humanizeProviderName(id, type) {
-  const cleaned = id.replace(/[-_]+/g, " ").trim();
-  if (!cleaned) return type.toUpperCase();
-  return cleaned.replace(/\b\w/g, (char) => char.toUpperCase());
-}
-
-// src/controllers/admin-auth.controller.ts
 var AdminAuthController = class {
   constructor(config) {
     this.config = config;

package/dist/server.d.cts

@@ -1,7 +1,7 @@
 import * as hono_types from 'hono/types';
 import * as hono from 'hono';
 import { Hono, Context } from 'hono';
-import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-2vF6W56z.cjs';
+import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-3XBnu9Xz.cjs';
 import * as hono_utils_http_status from 'hono/utils/http-status';
 import * as hono_utils_types from 'hono/utils/types';
 import 'lucide-react';
@@ -155,9 +155,26 @@ declare class AuthController {
 declare class CollectionController {
     private collection;
     constructor(collection: CollectionConfig);
+    private getDelegatedProvider;
     find(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
+        docs: {
+            id: string;
+            externalSubject: string;
+            email: string;
+            name?: string | undefined;
+            roles: string[];
+            siteAccess?: string[] | undefined;
+            status?: "active" | "pending" | undefined;
+        }[];
+        totalDocs: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">) | (Response & hono.TypedResponse<{
         docs: {
             [x: string]: any;
         }[];
@@ -175,6 +192,14 @@ declare class CollectionController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         [x: string]: hono_utils_types.JSONValue;
+    }, 201, "json">) | (Response & hono.TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
     }, 201, "json">)>;
     upload(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
@@ -190,6 +215,14 @@ declare class CollectionController {
     }, 500, "json">) | (Response & hono.TypedResponse<{
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">) | (Response & hono.TypedResponse<{
         message: string;
     }, 404, "json">)>;
     transition(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{

package/dist/server.d.ts

@@ -1,7 +1,7 @@
 import * as hono_types from 'hono/types';
 import * as hono from 'hono';
 import { Hono, Context } from 'hono';
-import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-2vF6W56z.js';
+import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-3XBnu9Xz.js';
 import * as hono_utils_http_status from 'hono/utils/http-status';
 import * as hono_utils_types from 'hono/utils/types';
 import 'lucide-react';
@@ -155,9 +155,26 @@ declare class AuthController {
 declare class CollectionController {
     private collection;
     constructor(collection: CollectionConfig);
+    private getDelegatedProvider;
     find(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
+        docs: {
+            id: string;
+            externalSubject: string;
+            email: string;
+            name?: string | undefined;
+            roles: string[];
+            siteAccess?: string[] | undefined;
+            status?: "active" | "pending" | undefined;
+        }[];
+        totalDocs: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">) | (Response & hono.TypedResponse<{
         docs: {
             [x: string]: any;
         }[];
@@ -175,6 +192,14 @@ declare class CollectionController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         [x: string]: hono_utils_types.JSONValue;
+    }, 201, "json">) | (Response & hono.TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
     }, 201, "json">)>;
     upload(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
@@ -190,6 +215,14 @@ declare class CollectionController {
     }, 500, "json">) | (Response & hono.TypedResponse<{
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">) | (Response & hono.TypedResponse<{
         message: string;
     }, 404, "json">)>;
     transition(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{

package/dist/server.js

@@ -306,10 +306,54 @@ var CollectionController = class {
   constructor(collection) {
     this.collection = collection;
   }
+  getDelegatedProvider(c) {
+    const config = c.get("config");
+    const authCollection = getAdminAuthCollection(config);
+    if (!authCollection || this.collection.slug !== authCollection.slug) {
+      return null;
+    }
+    return config.adminAuth?.providers?.find((p) => p.members) || null;
+  }
   async find(c) {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.list) {
+      const limit2 = Number(c.req.query("limit")) || 10;
+      const page2 = Number(c.req.query("page")) || 1;
+      const sort2 = c.req.query("sort") || void 0;
+      let where2 = void 0;
+      const whereRaw2 = c.req.query("where");
+      if (whereRaw2) {
+        try {
+          where2 = JSON.parse(decodeURIComponent(whereRaw2));
+        } catch {
+        }
+      }
+      const paginatedResult = await provider.members.list({ limit: limit2, page: page2, sort: sort2, where: where2, req: c.req });
+      const mappedDocs = [];
+      for (const m of paginatedResult.docs) {
+        let localId = m.id;
+        const localDoc = await db.find({
+          collection: this.collection.slug,
+          where: m.id ? { externalSubject: { equals: m.id } } : { email: { equals: m.email } },
+          limit: 1
+        });
+        if (localDoc.docs[0]) {
+          localId = localDoc.docs[0].id;
+        }
+        mappedDocs.push({
+          ...m,
+          id: localId,
+          externalSubject: m.id
+        });
+      }
+      return c.json({
+        ...paginatedResult,
+        docs: mappedDocs
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const limit = Number(c.req.query("limit")) || 10;
     const page = Number(c.req.query("page")) || 1;
@@ -367,11 +411,13 @@ var CollectionController = class {
         where
       });
     }
-    result.docs = result.docs.map((doc) => this.collection.workflow ? materializeWorkflowDocument(doc, this.collection.workflow, user) : doc).filter((doc) => doc !== null).map((doc) => DefaultsService.apply(this.collection.fields, doc));
+    result.docs = result.docs.map((doc) => this.collection.workflow ? materializeWorkflowDocument(doc, this.collection.workflow, user) : doc).filter((doc) => doc !== null);
     const processedDocs = [];
+    const readonlyDbForHooks = createReadonlyDb(db);
     for (const doc of result.docs) {
+      const docWithDefaults = DefaultsService.apply(this.collection.fields, doc);
       const docWithCollectionHooks = await runCollectionHooks(this.collection.hooks?.afterRead, {
-        doc,
+        doc: docWithDefaults,
         req: c.req,
         user,
         db: readonlyDb
@@ -390,6 +436,26 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && (provider.members?.get || provider.members?.list)) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      let member = null;
+      if (provider.members.get) {
+        member = await provider.members.get({ externalSubject, req: c.req });
+      } else if (provider.members.list) {
+        const listResult = await provider.members.list({ req: c.req });
+        member = listResult.docs.find((m) => m.id === externalSubject) || null;
+      }
+      if (!member) return c.json({ message: "Not Found" }, 404);
+      return c.json({
+        ...member,
+        id: localDoc ? localDoc.id : member.id,
+        externalSubject: member.id
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
@@ -425,6 +491,20 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.create) {
+      const contentType2 = c.req.header("Content-Type") || "";
+      if (contentType2.toLowerCase().includes("multipart/form-data")) {
+        return this.upload(c);
+      }
+      const body2 = await c.req.json();
+      const member = await provider.members.create({ data: body2, req: c.req });
+      return c.json({
+        ...member,
+        id: member.id,
+        externalSubject: member.id
+      }, 201);
+    }
     const readonlyDb = createReadonlyDb(db);
     const contentType = c.req.header("Content-Type") || "";
     if (contentType.toLowerCase().includes("multipart/form-data")) {
@@ -551,6 +631,20 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.update) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const body2 = await c.req.json();
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      const member = await provider.members.update({ externalSubject, data: body2, req: c.req });
+      return c.json({
+        ...member,
+        id: localDoc ? localDoc.id : member.id,
+        externalSubject: member.id
+      });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     if (!id) return c.json({ message: "Missing ID" }, 400);
@@ -739,6 +833,15 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
+    const provider = this.getDelegatedProvider(c);
+    if (provider && provider.members?.delete) {
+      const id2 = c.req.param("id");
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
+      const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
+      const externalSubject = localDoc?.externalSubject || id2;
+      await provider.members.delete({ externalSubject, req: c.req });
+      return c.json({ message: "Deleted" });
+    }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
     if (!id) return c.json({ message: "Missing ID" }, 400);

package/dist/where-sanitizer-7Q4JXMX6.js

@@ -0,0 +1,57 @@
+// src/utils/where-sanitizer.js
+var NEVER_FILTERABLE_TYPES = [
+  "password",
+  "richText",
+  "json",
+  "file",
+  "image",
+  "join",
+  "collapsible"
+];
+function sanitizeWhereClause(where, fields) {
+  const fieldMap = /* @__PURE__ */ new Map();
+  function addFieldsToMap(fList, prefix = "") {
+    for (const f of fList) {
+      if ("name" in f && f.name) {
+        fieldMap.set(prefix + f.name, f);
+      }
+      if (f.type === "object" || f.type === "row" || f.type === "array") {
+        if ("fields" in f && Array.isArray(f.fields)) {
+          addFieldsToMap(f.fields, f.type === "object" || f.type === "array" ? `${prefix}${f.name}.` : prefix);
+        }
+      }
+    }
+  }
+  addFieldsToMap(fields);
+  function walk(node) {
+    const result = {};
+    for (const [key, value] of Object.entries(node)) {
+      if (key === "AND" || key === "OR") {
+        if (Array.isArray(value)) {
+          const processed = value.map((v) => walk(v)).filter((v) => Object.keys(v).length > 0);
+          if (processed.length > 0) {
+            result[key] = processed;
+          }
+        }
+        continue;
+      }
+      if (key === "id") {
+        result[key] = value;
+        continue;
+      }
+      const fieldDef = fieldMap.get(key);
+      if (!fieldDef)
+        continue;
+      if (fieldDef.admin?.filterable === false)
+        continue;
+      if (NEVER_FILTERABLE_TYPES.includes(fieldDef.type))
+        continue;
+      result[key] = value;
+    }
+    return result;
+  }
+  return walk(where);
+}
+export {
+  sanitizeWhereClause
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dyrected/core",
-  "version": "2.5.43",
+  "version": "2.5.45",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",