@dyrected/core 2.5.52 → 2.5.55

package/dist/app-wo82JRHl.d.ts

@@ -1,445 +0,0 @@
-import * as hono_types from 'hono/types';
-import { Hono } from 'hono';
-
-type FieldType = "text" | "textarea" | "richText" | "number" | "boolean" | "date" | "select" | "multiSelect" | "relationship" | "array" | "object" | "json" | "blocks" | "image" | "email" | "url" | "icon" | "join" | "row";
-type DynamicOptionItem = string | {
-    label: string;
-    value: any;
-};
-/**
- * Context passed to a dynamic options resolver at request time.
- * All properties are optional so external-API resolvers that need none of
- * them (`async () => fetch(...)`) still compile without errors.
- */
-interface DynamicOptionsResolverArgs {
-    /** The configured database adapter — available for resolvers that query internal collections. */
-    db?: DatabaseAdapter;
-    /** The currently authenticated user (or undefined for unauthenticated requests). */
-    user?: any;
-    /**
-     * The HTTP request context.  Sibling field values selected in the Admin UI
-     * are forwarded as query parameters and are accessible via `req.query`.
-     *
-     * @example
-     * // Cascading dropdown: ?country=ca forwarded by the Admin UI
-     * options: async ({ req }) => {
-     *   const country = req.query.country ?? 'us';
-     *   ...
-     * }
-     */
-    req?: {
-        query: Record<string, string>;
-        headers: Record<string, string>;
-        raw?: Request;
-    };
-}
-type DynamicOptionsResolver = (args: DynamicOptionsResolverArgs) => Promise<DynamicOptionItem[]> | DynamicOptionItem[];
-interface DynamicOptionsConfig {
-    resolve: DynamicOptionsResolver;
-    cacheTTL?: number;
-}
-interface Block {
-    slug: string;
-    labels?: {
-        singular: string;
-        plural: string;
-    };
-    fields: Field[];
-}
-interface Field {
-    name?: string;
-    type: FieldType;
-    label?: string;
-    required?: boolean;
-    unique?: boolean;
-    defaultValue?: any;
-    options?: string[] | {
-        label: string;
-        value: any;
-    }[] | DynamicOptionsResolver | DynamicOptionsConfig;
-    relationTo?: string;
-    hasMany?: boolean;
-    fields?: Field[];
-    blocks?: Block[];
-    collection?: string;
-    on?: string;
-    access?: {
-        read?: AccessFunction | string;
-        update?: AccessFunction | string;
-    };
-    hooks?: {
-        beforeChange?: FieldHook[];
-        afterRead?: FieldHook[];
-    };
-    admin?: {
-        placeholder?: string;
-        description?: string;
-        hidden?: boolean;
-        readOnly?: boolean;
-        condition?: ((data: any, siblingData: any) => boolean) | string;
-        layout?: "radio" | "select" | string;
-        direction?: "horizontal" | "vertical";
-        tab?: string;
-        width?: string;
-        hooks?: {
-            /**
-             * Runs client-side whenever any sibling field value changes.
-             * Return a new value to update this field (e.g. auto-generate a slug from a title).
-             * Do NOT return an options array from here — use `options` below for that.
-             */
-            onChange?: (args: {
-                value: any;
-                siblingData: any;
-                data: any;
-                setValue: (value: any) => void;
-            }) => any;
-            /**
-             * For `select` and `multiSelect` fields only.
-             * Runs client-side whenever any sibling field value changes and computes
-             * the available options list.  This is the correct hook for cascading/
-             * dependent dropdowns — NOT `onChange`.
-             *
-             * @example
-             * // Country → State cascading dropdown
-             * options: ({ siblingData }) => {
-             *   if (siblingData.country === 'us') return [{ label: 'California', value: 'CA' }]
-             *   if (siblingData.country === 'ca') return [{ label: 'Ontario', value: 'ON' }]
-             *   return []
-             * }
-             */
-            options?: (args: {
-                siblingData: Record<string, unknown>;
-                data: Record<string, unknown>;
-            }) => Array<string | {
-                label: string;
-                value: any;
-            }>;
-        };
-    };
-    /** For database migrations: if set, data from this key will be migrated to the current field name. */
-    renameTo?: string;
-    /** For database migrations: if true, this field will be extracted to a real SQL column for performance. */
-    promoted?: boolean;
-}
-type AccessFunction = (args: {
-    user: any;
-    doc?: any;
-    data?: any;
-    req: any;
-}) => boolean | object | Promise<boolean | object>;
-type HookFunction = (args: {
-    data?: any;
-    doc?: any;
-    user?: any;
-    req?: any;
-    /** The operation that triggered this hook. */
-    operation?: "create" | "update" | "delete";
-}) => any | Promise<any>;
-type FieldHook<T = any, V = any> = (args: {
-    value: V;
-    originalDoc?: T;
-    data?: T;
-    doc?: T;
-    user?: any;
-}) => T | Promise<T>;
-interface CollectionConfig {
-    slug: string;
-    siteId?: string;
-    shared?: boolean;
-    labels?: {
-        singular: string;
-        plural: string;
-    };
-    auth?: boolean;
-    upload?: boolean | UploadConfig;
-    fields: Field[];
-    timestamps?: boolean;
-    /** Initial data to seed this collection with on first fetch if it is empty. */
-    initialData?: any[];
-    /** Enable full activity logging to the __audit collection for this collection. */
-    audit?: boolean;
-    access?: {
-        read?: AccessFunction | string;
-        create?: AccessFunction | string;
-        update?: AccessFunction | string;
-        delete?: AccessFunction | string;
-    };
-    hooks?: {
-        beforeRead?: HookFunction[];
-        afterRead?: HookFunction[];
-        beforeChange?: HookFunction[];
-        afterChange?: HookFunction[];
-        beforeDelete?: HookFunction[];
-        afterDelete?: HookFunction[];
-    };
-    admin?: {
-        useAsTitle?: string;
-        defaultColumns?: string[];
-        group?: string;
-        hidden?: boolean;
-        /**
-         * URL to open in the Live Preview pane.
-         * Accepts a static string or a function that receives the document and returns a URL.
-         */
-        previewUrl?: string | ((doc: any, opts: {
-            locale?: string;
-        }) => string | null);
-        /** Which mode to use for live preview. Defaults to 'postMessage'. */
-        previewMode?: "postMessage" | "token";
-    };
-}
-interface UploadConfig {
-    allowedMimeTypes?: string[];
-    maxFileSize?: number;
-    /** Local disk path where files are stored. Only used by LocalStorage adapter. */
-    staticDir?: string;
-    /** Public URL prefix for locally stored files. Only used by LocalStorage adapter. */
-    staticURL?: string;
-    /** Which imageSizes entry to use as the thumbnail in the Admin media grid. */
-    adminThumbnail?: string;
-    imageSizes?: {
-        name: string;
-        width?: number;
-        height?: number;
-        crop?: string;
-        /** sharp fit strategy: 'cover' | 'contain' | 'fill' | 'inside' | 'outside' */
-        fit?: string;
-        /** Never upscale images smaller than the target size. Default: true. */
-        withoutEnlargement?: boolean;
-        /** Additional sharp format options. */
-        formatOptions?: Record<string, any>;
-    }[];
-}
-interface GlobalConfig {
-    slug: string;
-    siteId?: string;
-    shared?: boolean;
-    label?: string;
-    fields: Field[];
-    access?: {
-        read?: AccessFunction;
-        update?: AccessFunction;
-    };
-    hooks?: {
-        beforeRead?: HookFunction[];
-        afterRead?: HookFunction[];
-        beforeChange?: HookFunction[];
-        afterChange?: HookFunction[];
-    };
-    admin?: {
-        group?: string;
-        hidden?: boolean;
-    };
-    /** Initial data to seed this global with on first fetch if it is empty. */
-    initialData?: any;
-}
-interface PaginatedResult<T = any> {
-    docs: T[];
-    total: number;
-    limit: number;
-    page: number;
-    /** Total number of pages given the current limit. */
-    totalPages: number;
-    hasNextPage: boolean;
-    hasPrevPage: boolean;
-}
-interface DatabaseAdapter {
-    find(args: {
-        collection: string;
-        where?: any;
-        limit?: number;
-        page?: number;
-        sort?: string;
-    }): Promise<PaginatedResult>;
-    findOne(args: {
-        collection: string;
-        id: string;
-    }): Promise<any>;
-    create(args: {
-        collection: string;
-        data: any;
-    }): Promise<any>;
-    update(args: {
-        collection: string;
-        id: string;
-        data: any;
-    }): Promise<any>;
-    delete(args: {
-        collection: string;
-        id: string;
-    }): Promise<any>;
-    getGlobal(args: {
-        slug: string;
-    }): Promise<any>;
-    updateGlobal(args: {
-        slug: string;
-        data: any;
-    }): Promise<any>;
-    /**
-     * Sync the database schema with the provided collections and globals.
-     * Useful for creating tables on startup.
-     */
-    sync?(collections: CollectionConfig[], globals: GlobalConfig[]): Promise<void>;
-    /**
-     * Low-level raw query execution.
-     * Optional as not all adapters may support raw SQL/commands.
-     */
-    execute?(query: string, params?: any[]): Promise<any>;
-}
-interface FileData {
-    filename: string;
-    filesize?: number;
-    mimeType: string;
-    url: string;
-    width?: number;
-    height?: number;
-    focalPoint?: {
-        x: number;
-        y: number;
-    };
-    blurhash?: string;
-    type?: "upload" | "external";
-    provider?: string;
-    provider_metadata?: any;
-    [key: string]: any;
-}
-interface StorageAdapter {
-    upload(args: {
-        filename: string;
-        buffer: Uint8Array;
-        mimeType: string;
-        prefix?: string;
-    }): Promise<FileData>;
-    delete(args: {
-        filename: string;
-    }): Promise<void>;
-    getURL(args: {
-        filename: string;
-    }): string;
-    /** Retrieve file content for serving via API */
-    resolve?(args: {
-        filename: string;
-    }): Promise<{
-        buffer: Uint8Array;
-        mimeType: string;
-    } | null>;
-}
-/** Branding and metadata configuration for the Admin UI. */
-interface AdminConfig {
-    branding?: {
-        /** URL or imported image for the full logo shown in the sidebar. */
-        logo?: string;
-        /** URL or imported image for the compact logo mark used in collapsed sidebar. */
-        logoMark?: string;
-        /** Primary accent colour as a CSS value (e.g. '#6366f1' or 'hsl(240 50% 60%)') */
-        primaryColor?: string;
-        /** URL for the browser tab favicon. */
-        favicon?: string;
-        /** Default font family for body and UI elements (sans-serif). */
-        fontSans?: string;
-        /** Default font family for headings and display elements (serif). */
-        fontSerif?: string;
-    };
-    meta?: {
-        /** Appended to every Admin page title. Default: '- Dyrected' */
-        titleSuffix?: string;
-    };
-}
-interface ImageService {
-    process(args: {
-        buffer: Uint8Array;
-        mimeType: string;
-        config?: CollectionConfig["upload"];
-        focalPoint?: {
-            x: number;
-            y: number;
-        };
-    }): Promise<{
-        metadata: {
-            width?: number;
-            height?: number;
-            blurhash?: string;
-        };
-        sizes?: Record<string, {
-            buffer: Uint8Array;
-            width: number;
-            height: number;
-            filename: string;
-        }>;
-    }>;
-}
-interface DyrectedConfig {
-    collections: CollectionConfig[];
-    globals: GlobalConfig[];
-    db?: DatabaseAdapter;
-    storage?: StorageAdapter;
-    image?: ImageService;
-    /** Admin UI branding and meta configuration. */
-    admin?: AdminConfig;
-    email?: {
-        from: string;
-        send: (args: {
-            to: string;
-            subject: string;
-            html: string;
-        }) => Promise<void>;
-        templates?: {
-            welcome?: (args: {
-                email: string;
-            }) => {
-                subject?: string;
-                html: string;
-            };
-            invite?: (args: {
-                token: string;
-                invitedByEmail?: string;
-            }) => {
-                subject?: string;
-                html: string;
-            };
-            resetPassword?: (args: {
-                token: string;
-            }) => {
-                subject?: string;
-                html: string;
-            };
-            passwordChanged?: (args: {
-                email: string;
-            }) => {
-                subject?: string;
-                html: string;
-            };
-        };
-    };
-    redis?: {
-        url: string;
-    };
-    cors?: {
-        origins: string[];
-    };
-    onSchemaFetch?: (siteId: string) => Promise<{
-        collections?: CollectionConfig[];
-        globals?: GlobalConfig[];
-    }>;
-}
-
-interface DyrectedContext {
-    Variables: {
-        config: DyrectedConfig;
-        siteId?: string;
-        workspaceId?: string;
-        /** Decoded JWT payload set by requireAuth() or optionalAuth() middleware. */
-        user?: {
-            sub: string;
-            email: string;
-            collection: string;
-            [key: string]: any;
-        };
-    };
-}
-/**
- * Create the main Dyrected Hono application.
- */
-declare function createDyrectedApp(rawConfig: DyrectedConfig): Promise<Hono<DyrectedContext, hono_types.BlankSchema, "/">>;
-
-export { type AccessFunction as A, type Block as B, type CollectionConfig as C, type DyrectedConfig as D, type Field as F, type GlobalConfig as G, type HookFunction as H, type ImageService as I, type PaginatedResult as P, type StorageAdapter as S, type UploadConfig as U, type AdminConfig as a, type DatabaseAdapter as b, type DynamicOptionItem as c, type DynamicOptionsConfig as d, type DynamicOptionsResolver as e, type DynamicOptionsResolverArgs as f, type DyrectedContext as g, type FieldHook as h, type FieldType as i, type FileData as j, createDyrectedApp as k };

package/dist/app.d.ts

@@ -1,21 +0,0 @@
-import { Hono } from 'hono';
-import type { DyrectedConfig } from './types/index.js';
-export interface DyrectedContext {
-    Variables: {
-        config: DyrectedConfig;
-        siteId?: string;
-        workspaceId?: string;
-        /** Decoded JWT payload set by requireAuth() or optionalAuth() middleware. */
-        user?: {
-            sub: string;
-            email: string;
-            collection: string;
-            [key: string]: any;
-        };
-    };
-}
-/**
- * Create the main Dyrected Hono application.
- */
-export declare function createDyrectedApp(rawConfig: DyrectedConfig): Promise<Hono<DyrectedContext, import("hono/types").BlankSchema, "/">>;
-//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE;QACT,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,6EAA6E;QAC7E,IAAI,CAAC,EAAE;YACL,GAAG,EAAE,MAAM,CAAC;YACZ,KAAK,EAAE,MAAM,CAAC;YACd,UAAU,EAAE,MAAM,CAAC;YACnB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;SACpB,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,cAAc,yEAoDhE"}

package/dist/app.js

@@ -1,56 +0,0 @@
-import { Hono } from 'hono';
-import { cors } from 'hono/cors';
-import { requestId } from 'hono/request-id';
-import { registerRoutes } from './router.js';
-import { normalizeConfig } from './utils/config.js';
-import { optionalAuth } from './middleware/auth.js';
-/**
- * Create the main Dyrected Hono application.
- */
-export async function createDyrectedApp(rawConfig) {
-    const config = normalizeConfig(rawConfig);
-    const app = new Hono();
-    // 0. Sync Database Schema if adapter supports it
-    if (config.db?.sync) {
-        await config.db.sync(config.collections, config.globals);
-    }
-    // 1. Standard Middleware
-    app.use('*', requestId());
-    // Decode bearer token if present so user is available in CRUD hooks and audit logging.
-    app.use('*', optionalAuth());
-    app.use('*', async (c, next) => {
-        const start = Date.now();
-        await next();
-        const ms = Date.now() - start;
-        console.log(`[dyrected/api] ${c.req.method} ${c.req.path} ${c.res.status} - ${ms}ms`);
-    });
-    app.use('*', cors());
-    // 2. Site Resolution Middleware
-    app.use('*', async (c, next) => {
-        c.set('config', config);
-        // If an upstream middleware (e.g. cloud app) hasn't already set the siteId,
-        // fallback to 'default' for self-hosted/singleton mode.
-        if (!c.get('siteId')) {
-            c.set('siteId', 'default');
-        }
-        await next();
-    });
-    // 3. Health Check & Debug
-    app.get('/health', (c) => c.json({ status: 'ok', version: '0.0.1' }));
-    app.get('/routes', (c) => {
-        const routes = app.routes.map(r => ({ method: r.method, path: r.path }));
-        return c.json({ routes });
-    });
-    // 4. Global Error Handler
-    app.onError((err, c) => {
-        console.error(`[dyrected/core] Uncaught Error:`, err);
-        return c.json({
-            message: err.message || 'Internal Server Error',
-            stack: process.env.NODE_ENV === 'development' ? err.stack : undefined
-        }, 500);
-    });
-    // 5. Dynamic Routing
-    registerRoutes(app, config);
-    return app;
-}
-//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAiBpD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAyB;IAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAmB,CAAC;IAExC,iDAAiD;IACjD,IAAI,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,yBAAyB;IACzB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1B,uFAAuF;IACvF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxB,4EAA4E;QAC5E,wDAAwD;QACxD,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,uBAAuB;YAC/C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACtE,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/auth/jexl.d.ts

@@ -1,10 +0,0 @@
-/**
- * Jexl evaluator for Dyrected access control.
- * Allows for serializable, dynamic permissions based on user state, request, and document.
- */
-export declare function evaluateAccess(expression: string | boolean | undefined | null, context: {
-    user?: any;
-    req?: any;
-    doc?: any;
-}): Promise<boolean>;
-//# sourceMappingURL=jexl.d.ts.map

package/dist/auth/jexl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jexl.d.ts","sourceRoot":"","sources":["../../src/auth/jexl.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,EAC/C,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,GAAG,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,CAAA;CAAE,GAC5C,OAAO,CAAC,OAAO,CAAC,CAalB"}

package/dist/auth/jexl.js

@@ -1,22 +0,0 @@
-import jexl from 'jexl';
-/**
- * Jexl evaluator for Dyrected access control.
- * Allows for serializable, dynamic permissions based on user state, request, and document.
- */
-export async function evaluateAccess(expression, context) {
-    // If no expression is provided, default to closed (false) for security
-    // unless explicitly specified otherwise in the core router logic.
-    if (expression === undefined || expression === null)
-        return false;
-    if (typeof expression === 'boolean')
-        return expression;
-    try {
-        const result = await jexl.eval(expression, context);
-        return !!result;
-    }
-    catch (err) {
-        console.error('[dyrected/core] Jexl evaluation failed:', err);
-        return false;
-    }
-}
-//# sourceMappingURL=jexl.js.map

package/dist/auth/jexl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jexl.js","sourceRoot":"","sources":["../../src/auth/jexl.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA+C,EAC/C,OAA6C;IAE7C,uEAAuE;IACvE,kEAAkE;IAClE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,OAAO,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/auth/password.d.ts

@@ -1,10 +0,0 @@
-/**
- * Hash a plain-text password using scrypt.
- * Returns a `salt:hash` string safe to store in the database.
- */
-export declare function hashPassword(plain: string): Promise<string>;
-/**
- * Verify a plain-text password against a stored `salt:hash` string.
- */
-export declare function verifyPassword(plain: string, stored: string): Promise<boolean>;
-//# sourceMappingURL=password.d.ts.map

package/dist/auth/password.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIjE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASpF"}

package/dist/auth/password.js

@@ -1,28 +0,0 @@
-import { promisify } from 'node:util';
-import { scrypt, randomBytes, timingSafeEqual } from 'node:crypto';
-const scryptAsync = promisify(scrypt);
-const SALT_LEN = 16;
-const KEY_LEN = 64;
-/**
- * Hash a plain-text password using scrypt.
- * Returns a `salt:hash` string safe to store in the database.
- */
-export async function hashPassword(plain) {
-    const salt = randomBytes(SALT_LEN).toString('hex');
-    const derivedKey = (await scryptAsync(plain, salt, KEY_LEN));
-    return `${salt}:${derivedKey.toString('hex')}`;
-}
-/**
- * Verify a plain-text password against a stored `salt:hash` string.
- */
-export async function verifyPassword(plain, stored) {
-    const [salt, storedHash] = stored.split(':');
-    if (!salt || !storedHash)
-        return false;
-    const derivedKey = (await scryptAsync(plain, salt, KEY_LEN));
-    const storedBuffer = Buffer.from(storedHash, 'hex');
-    if (derivedKey.length !== storedBuffer.length)
-        return false;
-    return timingSafeEqual(derivedKey, storedBuffer);
-}
-//# sourceMappingURL=password.js.map

package/dist/auth/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAEtC,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAW,CAAC;IACvE,OAAO,GAAG,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc;IAChE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAW,CAAC;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEpD,IAAI,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC"}

package/dist/auth/token.d.ts

@@ -1,22 +0,0 @@
-import { type JWTPayload } from 'jose';
-export interface CollectionTokenPayload extends JWTPayload {
-    sub: string;
-    email: string;
-    collection: string;
-    purpose?: 'invite' | 'reset';
-    providerId?: string;
-    authSource?: 'local' | 'external';
-}
-/**
- * Issue a signed JWT for a user document in an auth collection.
- */
-export declare function signCollectionToken(payload: Omit<CollectionTokenPayload, 'iat' | 'exp'>, expiresIn?: string): Promise<string>;
-/**
- * Verify and decode a collection JWT. Throws if invalid or expired.
- */
-export declare function verifyCollectionToken(token: string): Promise<CollectionTokenPayload>;
-/**
- * Decode a token without verification (read-only, for middleware that wants to be non-blocking).
- */
-export declare function decodeCollectionToken(token: string): CollectionTokenPayload | null;
-//# sourceMappingURL=token.d.ts.map

package/dist/auth/token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAGtE,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CACnC;AAeD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,GAAG,KAAK,CAAC,EACpD,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAG1F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAMlF"}