@dyrected/core 2.5.49 → 2.5.52

package/dist/__tests__/admin-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-auth.test.d.ts.map

package/dist/__tests__/admin-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/admin-auth.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/admin-auth.test.js

@@ -0,0 +1,440 @@
+import { describe, expect, it, beforeEach } from "vitest";
+import { SignJWT } from "jose";
+import { TextEncoder } from "node:util";
+import { Hono } from "hono";
+import { createDyrectedApp } from "../app.js";
+import { defineCollection, defineConfig } from "../index.js";
+import { InMemoryAdapter } from "./mocks.js";
+const providerSecret = new TextEncoder().encode("provider-secret");
+async function signProviderToken(payload) {
+    return new SignJWT(payload)
+        .setProtectedHeader({ alg: "HS256" })
+        .setIssuedAt()
+        .setExpirationTime("1h")
+        .sign(providerSecret);
+}
+describe("external admin auth", () => {
+    beforeEach(() => {
+        process.env.DYRECTED_JWT_SECRET = "dyrected-test-secret";
+    });
+    it("exposes sanitized admin auth config in schemas", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("/api/schemas");
+        const data = await res.json();
+        expect(res.status).toBe(200);
+        expect(data.adminAuth).toEqual({
+            mode: "external",
+            collectionSlug: "__admins",
+            provisioningMode: undefined,
+            providers: [
+                {
+                    id: "partner",
+                    type: "custom",
+                    displayName: "Partner SSO",
+                    autoRedirect: undefined,
+                },
+            ],
+        });
+    });
+    it("supports JIT external provisioning for admin users", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db,
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+                resolveAccess: ({ siteId }) => ({
+                    allowed: siteId === "site-a",
+                    roles: ["admin"],
+                }),
+            },
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/partner/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        expect(loginData.providerId).toBe("partner");
+        const meRes = await app.request("/api/collections/__admins/me", {
+            headers: {
+                authorization: `Bearer ${loginData.token}`,
+            },
+        });
+        expect(meRes.status).toBe(200);
+        const me = await meRes.json();
+        expect(me.email).toBe("owner@example.com");
+        expect(me.authProvider).toBe("partner");
+        expect(me.externalSubject).toBe("acct_123");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].password).toBeTruthy();
+    });
+    it("starts a provider from dynamic site admin auth config", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            startUrl: "https://cloud.dyrected.com/cloud/auth/admin/start",
+                            secret: "provider-secret",
+                        },
+                    ],
+                },
+            }),
+        }));
+        const host = new Hono();
+        host.use("/sites/:siteId/*", async (c, next) => {
+            c.set("siteId", c.req.param("siteId"));
+            await next();
+        });
+        host.route("/sites/:siteId", app);
+        const res = await host.request("/sites/site-a/api/admin/auth/cloud/start?returnTo=http%3A%2F%2Flocalhost%3A3000%2Fadmin");
+        expect(res.status).toBe(302);
+        const location = new URL(res.headers.get("location"));
+        expect(location.origin).toBe("https://cloud.dyrected.com");
+        expect(location.pathname).toBe("/cloud/auth/admin/start");
+        expect(location.searchParams.get("siteId")).toBe("site-a");
+        expect(location.searchParams.get("provider")).toBe("cloud");
+        expect(location.searchParams.get("returnTo")).toBe("http://localhost:3000/admin");
+    });
+    it("starts a provider with a relative start URL", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        startUrl: "/cloud/auth/admin/start",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("https://cloud.dyrected.com/api/admin/auth/cloud/start?returnTo=http%3A%2F%2Flocalhost%3A3000%2Fadmin");
+        expect(res.status).toBe(302);
+        const location = new URL(res.headers.get("location"));
+        expect(location.origin).toBe("https://cloud.dyrected.com");
+        expect(location.pathname).toBe("/cloud/auth/admin/start");
+        expect(location.searchParams.get("provider")).toBe("cloud");
+        expect(location.searchParams.get("returnTo")).toBe("http://localhost:3000/admin");
+    });
+    it("returns a configuration error for unresolved provider start URLs", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        startUrl: "undefined/cloud/auth/admin/start",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("/api/admin/auth/cloud/start");
+        expect(res.status).toBe(500);
+        expect(await res.json()).toEqual({
+            error: true,
+            message: 'Admin auth provider "cloud" has an invalid start URL.',
+        });
+    });
+    it("exchanges a token against dynamic site admin auth config", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db,
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            secret: "provider-secret",
+                        },
+                    ],
+                    resolveAccess: ({ siteId: resolvedSiteId }) => ({
+                        allowed: resolvedSiteId === "site-a",
+                        roles: ["admin"],
+                    }),
+                },
+            }),
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/cloud/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        expect(loginData.providerId).toBe("cloud");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].email).toBe("owner@example.com");
+        expect(allAdmins.docs[0].authProvider).toBe("cloud");
+    });
+    it("prefers __admins over a stale configured adminAuth collection slug", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db,
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                    defineCollection({
+                        slug: "accounts",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    collectionSlug: "accounts",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            secret: "provider-secret",
+                        },
+                    ],
+                    resolveAccess: ({ siteId: resolvedSiteId }) => ({
+                        allowed: resolvedSiteId === "site-a",
+                        roles: ["admin"],
+                    }),
+                },
+            }),
+        }));
+        const schemasRes = await app.request("/api/schemas", {
+            headers: {
+                "x-site-id": "site-a",
+            },
+        });
+        const schemasData = await schemasRes.json();
+        expect(schemasRes.status).toBe(200);
+        expect(schemasData.adminAuth).toMatchObject({
+            mode: "external",
+            collectionSlug: "__admins",
+        });
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/cloud/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].email).toBe("owner@example.com");
+    });
+    it("passes a normalized hook request context to delegated provider member handlers", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                collectionSlug: "__admins",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        secret: "provider-secret",
+                        members: {
+                            list: async ({ req, limit, page, sort, where }) => {
+                                expect(req.headers["x-site-id"]).toBe("site-a");
+                                expect(req.query.limit).toBe("2");
+                                expect(req.query.page).toBe("3");
+                                expect(req.query.sort).toBe("-email");
+                                expect(req.query.where).toBe(JSON.stringify({ email: { equals: "owner@example.com" } }));
+                                expect(req.raw?.headers.get("x-site-id")).toBe("site-a");
+                                expect(limit).toBe(2);
+                                expect(page).toBe(3);
+                                expect(sort).toBe("-email");
+                                expect(where).toEqual({ email: { equals: "owner@example.com" } });
+                                return {
+                                    docs: [{ id: "acct_123", email: "owner@example.com", roles: ["admin"] }],
+                                    totalDocs: 1,
+                                    limit: limit ?? 10,
+                                    page: page ?? 1,
+                                    totalPages: 1,
+                                    hasNextPage: false,
+                                    hasPrevPage: false,
+                                };
+                            },
+                        },
+                    },
+                ],
+            },
+        }));
+        const res = await app.request(`/api/collections/__admins?limit=2&page=3&sort=-email&where=${encodeURIComponent(JSON.stringify({ email: { equals: "owner@example.com" } }))}`, {
+            headers: {
+                "x-site-id": "site-a",
+            },
+        });
+        expect(res.status).toBe(200);
+        const data = await res.json();
+        expect(data.docs).toHaveLength(1);
+        expect(data.docs[0]).toMatchObject({
+            id: "acct_123",
+            email: "owner@example.com",
+            externalSubject: "acct_123",
+        });
+    });
+    it("rejects unknown external users when provisioning is preprovisioned-only", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                provisioningMode: "preprovisioned_only",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+        });
+        const loginRes = await app.request("/api/admin/auth/partner/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(401);
+        expect(await loginRes.json()).toMatchObject({
+            error: true,
+            message: "This account has not been provisioned for admin access.",
+        });
+    });
+});
+//# sourceMappingURL=admin-auth.test.js.map

package/dist/__tests__/admin-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.test.js","sourceRoot":"","sources":["../../src/__tests__/admin-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEnE,KAAK,UAAU,iBAAiB,CAAC,OAAgC;IAC/D,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC;SACvB,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,UAAU;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,SAAS,EAAE;gBACT;oBACE,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,aAAa;oBAC1B,YAAY,EAAE,SAAS;iBACxB;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE;YACF,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;gBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9B,OAAO,EAAE,MAAM,KAAK,QAAQ;oBAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;iBACjB,CAAC;aACH;SACF,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,8BAA8B,EAAE;YAC9D,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,SAAS,CAAC,KAAK,EAAE;aAC3C;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,QAAQ,EAAE,mDAAmD;4BAC7D,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;iBACF;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,yFAAyF,CAC1F,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,QAAQ,EAAE,yBAAyB;wBACnC,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAC3B,sGAAsG,CACvG,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,QAAQ,EAAE,kCAAkC;wBAC5C,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAE7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC/B,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;oBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC9C,OAAO,EAAE,cAAc,KAAK,QAAQ;wBACpC,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB,CAAC;iBACH;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;oBACF,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,cAAc,EAAE,UAAU;oBAC1B,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;oBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC9C,OAAO,EAAE,cAAc,KAAK,QAAQ;wBACpC,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB,CAAC;iBACH;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE;YACnD,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAE5C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,cAAc,EAAE,UAAU;gBAC1B,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE;4BACP,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;gCAChD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCAChD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCAClC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC;gCACzF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCACzD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gCACtB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gCACrB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;gCAElE,OAAO;oCACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;oCACxE,SAAS,EAAE,CAAC;oCACZ,KAAK,EAAE,KAAK,IAAI,EAAE;oCAClB,IAAI,EAAE,IAAI,IAAI,CAAC;oCACf,UAAU,EAAE,CAAC;oCACb,WAAW,EAAE,KAAK;oCAClB,WAAW,EAAE,KAAK;iCACnB,CAAC;4BACJ,CAAC;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAC3B,8DAA8D,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,EAC9I;YACE,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ;aACtB;SACF,CACF,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACjC,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,mBAAmB;YAC1B,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,gBAAgB,EAAE,qBAAqB;gBACvC,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;YAC1C,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/config.test.js

@@ -2,6 +2,13 @@ import { describe, it, expect } from 'vitest';
 import { defineConfig, defineCollection, defineGlobal } from '../index.js';
 import { MockDatabaseAdapter } from './mocks.js';
 describe('Configuration Helpers', () => {
+    it('only accepts valid Lucide names for admin navigation icons', () => {
+        const icon = 'Newspaper';
+        // @ts-expect-error — invalid names must fail during configuration authoring.
+        const invalidIcon = 'DefinitelyNotALucideIcon';
+        expect(icon).toBe('Newspaper');
+        expect(invalidIcon).toBe('DefinitelyNotALucideIcon');
+    });
     it('should define a collection correctly', () => {
         const posts = defineCollection({
             slug: 'posts',
@@ -30,5 +37,55 @@ describe('Configuration Helpers', () => {
         expect(config.collections).toEqual([]);
         expect(config.db).toBeInstanceOf(MockDatabaseAdapter);
     });
+    it('rejects components passed directly into admin.components configuration (type test)', () => {
+        const FakeComponent = () => 'div';
+        const validDashboard = defineConfig({
+            collections: [],
+            globals: [],
+            db: new MockDatabaseAdapter(),
+            admin: {
+                components: {
+                    beforeDashboard: ['custom-banner'],
+                }
+            }
+        });
+        const invalidDashboard = defineConfig({
+            collections: [],
+            globals: [],
+            db: new MockDatabaseAdapter(),
+            admin: {
+                components: {
+                    // @ts-expect-error — must be an array of strings
+                    beforeDashboard: [FakeComponent],
+                    // @ts-expect-error — must be an array of strings
+                    afterDashboard: FakeComponent,
+                }
+            }
+        });
+        const validCollection = defineCollection({
+            slug: 'posts',
+            fields: [],
+            admin: {
+                components: {
+                    beforeList: ['custom-header'],
+                    beforeListTable: ['custom-filters'],
+                    afterListTable: ['custom-footer'],
+                    afterList: ['custom-pagination'],
+                }
+            }
+        });
+        const invalidCollection = defineCollection({
+            slug: 'posts',
+            fields: [],
+            admin: {
+                components: {
+                    // @ts-expect-error — must be an array of strings
+                    beforeList: [FakeComponent],
+                }
+            }
+        });
+        expect(validDashboard.admin?.components?.beforeDashboard).toEqual(['custom-banner']);
+        expect(validCollection.admin?.components?.beforeList).toEqual(['custom-header']);
+    });
 });
 //# sourceMappingURL=config.test.js.map

package/dist/__tests__/config.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;aAChD;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aAC/B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,mBAAmB,EAAE;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,GAAkB,WAAW,CAAC;QACxC,6EAA6E;QAC7E,MAAM,WAAW,GAAkB,0BAA0B,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;aAChD;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aAC/B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,mBAAmB,EAAE;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC;QAElC,MAAM,cAAc,GAAG,YAAY,CAAC;YAClC,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,mBAAmB,EAAE;YAC7B,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,eAAe,EAAE,CAAC,eAAe,CAAC;iBACnC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,YAAY,CAAC;YACpC,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,mBAAmB,EAAE;YAC7B,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,iDAAiD;oBACjD,eAAe,EAAE,CAAC,aAAa,CAAC;oBAChC,iDAAiD;oBACjD,cAAc,EAAE,aAAa;iBAC9B;aACF;SACF,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,gBAAgB,CAAC;YACvC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,EAAE;YACV,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,UAAU,EAAE,CAAC,eAAe,CAAC;oBAC7B,eAAe,EAAE,CAAC,gBAAgB,CAAC;oBACnC,cAAc,EAAE,CAAC,eAAe,CAAC;oBACjC,SAAS,EAAE,CAAC,mBAAmB,CAAC;iBACjC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;YACzC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,EAAE;YACV,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,iDAAiD;oBACjD,UAAU,EAAE,CAAC,aAAa,CAAC;iBAC5B;aACF;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/email.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=email.service.test.d.ts.map

package/dist/__tests__/email.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.service.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/email.service.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/email.service.test.js

@@ -0,0 +1,46 @@
+import { describe, expect, it, vi } from 'vitest';
+import { buildInviteEmail, buildPasswordChangedEmail, buildResetPasswordEmail, buildWelcomeEmail, } from '../services/email.service.js';
+const config = {};
+describe('default email templates', () => {
+    it('uses one branded, table-based, inline-styled shell', () => {
+        const messages = [
+            buildWelcomeEmail(config, { email: 'person@example.com' }),
+            buildInviteEmail(config, { token: 'invite-token' }),
+            buildResetPasswordEmail(config, { token: 'reset-token', url: 'https://example.com/reset' }),
+            buildPasswordChangedEmail(config, { email: 'person@example.com' }),
+        ];
+        for (const { html } of messages) {
+            expect(html).toContain('<!doctype html>');
+            expect(html).toContain('role="presentation"');
+            expect(html).toContain('max-width:600px');
+            expect(html).toContain('Dyrected');
+            expect(html).toContain('Privacy:');
+            expect(html).not.toContain('<style');
+        }
+    });
+    it('escapes all values supplied to default templates', () => {
+        const attack = '<img src=x onerror="alert(1)">&\'';
+        expect(buildWelcomeEmail(config, { email: attack }).html).not.toContain(attack);
+        expect(buildInviteEmail(config, { token: attack, invitedByEmail: attack }).html).not.toContain(attack);
+        expect(buildResetPasswordEmail(config, { token: attack }).html).not.toContain(attack);
+        expect(buildPasswordChangedEmail(config, { email: attack }).html).not.toContain(attack);
+    });
+    it('only renders CTA links with an HTTP(S) URL', () => {
+        expect(buildResetPasswordEmail(config, { token: 'safe', url: 'https://example.com/reset?a=1&b=2' }).html)
+            .toContain('href="https://example.com/reset?a=1&amp;b=2"');
+        expect(buildResetPasswordEmail(config, { token: 'safe', url: 'javascript:alert(1)' }).html)
+            .not.toContain('href=');
+    });
+    it('continues to honor trusted custom templates', () => {
+        const customConfig = {
+            email: {
+                from: 'test@example.com',
+                send: vi.fn(),
+                templates: { welcome: () => ({ subject: 'Custom', html: '<p>Custom</p>' }) },
+            },
+        };
+        expect(buildWelcomeEmail(customConfig, { email: 'person@example.com' }))
+            .toEqual({ subject: 'Custom', html: '<p>Custom</p>' });
+    });
+});
+//# sourceMappingURL=email.service.test.js.map

package/dist/__tests__/email.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.service.test.js","sourceRoot":"","sources":["../../src/__tests__/email.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,GAAG,EAAoB,CAAC;AAEpC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,QAAQ,GAAG;YACf,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YAC1D,gBAAgB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACnD,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,2BAA2B,EAAE,CAAC;YAC3F,yBAAyB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;SACnE,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,mCAAmC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvG,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC,CAAC,IAAI,CAAC;aACtG,SAAS,CAAC,8CAA8C,CAAC,CAAC;QAC7D,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,IAAI,CAAC;aACxF,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,YAAY,GAAG;YACnB,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;gBACb,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;aAC7E;SACgB,CAAC;QAEpB,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;aACrE,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/fixtures/editorial-workflow.d.ts

@@ -0,0 +1,9 @@
+/** Shared by workflow integration tests and the documentation type-check. */
+export declare const EditorialPosts: import("../../index.js").CollectionConfig<import("../../index.js").Prettify<{
+    id: string;
+} & {
+    title: string;
+} & {
+    body?: Record<string, unknown> | undefined;
+} & Record<never, never> & import("../../index.js").SystemDocFields>>;
+//# sourceMappingURL=editorial-workflow.d.ts.map

package/dist/__tests__/fixtures/editorial-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial-workflow.d.ts","sourceRoot":"","sources":["../../../src/__tests__/fixtures/editorial-workflow.ts"],"names":[],"mappings":"AAGA,6EAA6E;AAC7E,eAAO,MAAM,cAAc;;;;;;qEAOzB,CAAC"}

package/dist/__tests__/fixtures/editorial-workflow.js

@@ -0,0 +1,12 @@
+import { defineCollection } from "../../index.js";
+import { publishingWorkflow } from "../../workflows.js";
+/** Shared by workflow integration tests and the documentation type-check. */
+export const EditorialPosts = defineCollection({
+    slug: "posts",
+    workflow: publishingWorkflow(),
+    fields: [
+        { name: "title", type: "text", required: true },
+        { name: "body", type: "richText" },
+    ],
+});
+//# sourceMappingURL=editorial-workflow.js.map

package/dist/__tests__/fixtures/editorial-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial-workflow.js","sourceRoot":"","sources":["../../../src/__tests__/fixtures/editorial-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;IAC7C,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,kBAAkB,EAAE;IAC9B,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;KACnC;CACF,CAAC,CAAC"}