@kyro-cms/core 0.1.0

package/dist/chunk-UEG7KMKC.cjs

@@ -0,0 +1,228 @@
+'use strict';
+
+var chunkR3XIBBAW_cjs = require('./chunk-R3XIBBAW.cjs');
+var hono = require('hono');
+
+function createHonoApp(options) {
+  const { registry, db, user, tenantID, cors } = options;
+  const app = new hono.Hono();
+  if (cors) {
+    app.use("*", async (c, next) => {
+      const origin = c.req.header("Origin") || "*";
+      if (cors.origins && !cors.origins.includes(origin) && !cors.origins.includes("*")) ;
+      c.header("Access-Control-Allow-Origin", origin);
+      c.header("Access-Control-Allow-Methods", "GET, POST, PATCH, DELETE, OPTIONS");
+      c.header("Access-Control-Allow-Headers", "Content-Type, Authorization");
+      if (cors.credentials) {
+        c.header("Access-Control-Allow-Credentials", "true");
+      }
+      if (c.req.method === "OPTIONS") {
+        return c.text("");
+      }
+      await next();
+    });
+  }
+  app.get("/api/health", (c) => {
+    return c.json({
+      status: "ok",
+      version: "0.1.0",
+      collections: registry.getCollectionSlugs(),
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  });
+  app.get("/api/collections", (c) => {
+    const collections2 = registry.getCollections().map((col) => ({
+      slug: col.slug,
+      label: col.label || col.slug,
+      fields: col.fields.filter((f) => f.name).map((f) => ({
+        name: f.name,
+        type: f.type,
+        required: f.required,
+        label: f.label
+      }))
+    }));
+    return c.json(collections2);
+  });
+  const collections = registry.getCollections();
+  for (const collection of collections) {
+    const slug = collection.slug;
+    const basePath = `/api/${slug}`;
+    app.get(basePath, async (c) => {
+      try {
+        if (collection.access?.read) {
+          const allowed = await chunkR3XIBBAW_cjs.evaluateAccess(collection.access.read, {
+            req: c.req,
+            user,
+            tenantID
+          });
+          if (allowed === false) {
+            return c.json({ error: "Access denied" }, 403);
+          }
+        }
+        const url = new URL(c.req.url);
+        const page = parseInt(url.searchParams.get("page") || "1");
+        const limit = Math.min(parseInt(url.searchParams.get("limit") || "10"), 100);
+        const sort = url.searchParams.get("sort") || void 0;
+        const depth = parseInt(url.searchParams.get("depth") || "0");
+        const select = url.searchParams.get("select")?.split(",") || void 0;
+        let where = {};
+        const whereParam = url.searchParams.get("where");
+        if (whereParam) {
+          try {
+            where = JSON.parse(whereParam);
+          } catch {
+          }
+        }
+        const result = await db.find({
+          collection: slug,
+          where,
+          sort,
+          limit,
+          page,
+          depth,
+          tenantID,
+          select
+        });
+        return c.json(result);
+      } catch (error) {
+        return c.json({ error: error.message }, 500);
+      }
+    });
+    app.get(`${basePath}/:id`, async (c) => {
+      try {
+        const id = c.req.param("id");
+        const url = new URL(c.req.url);
+        const depth = parseInt(url.searchParams.get("depth") || "0");
+        const select = url.searchParams.get("select")?.split(",") || void 0;
+        if (collection.access?.read) {
+          const allowed = await chunkR3XIBBAW_cjs.evaluateAccess(collection.access.read, {
+            req: c.req,
+            user,
+            tenantID,
+            id
+          });
+          if (allowed === false) {
+            return c.json({ error: "Access denied" }, 403);
+          }
+        }
+        const doc = await db.findByID({
+          collection: slug,
+          id,
+          depth,
+          tenantID,
+          select
+        });
+        if (!doc) {
+          return c.json({ error: "Document not found" }, 404);
+        }
+        return c.json(doc);
+      } catch (error) {
+        return c.json({ error: error.message }, 500);
+      }
+    });
+    app.post(basePath, async (c) => {
+      try {
+        const body = await c.req.json();
+        if (collection.access?.create) {
+          const allowed = await chunkR3XIBBAW_cjs.evaluateAccess(collection.access.create, {
+            req: c.req,
+            user,
+            tenantID,
+            data: body
+          });
+          if (allowed === false) {
+            return c.json({ error: "Access denied" }, 403);
+          }
+        }
+        const schema = registry.getCreateZodSchema(slug);
+        const validated = schema.parse(body);
+        if (collection.tenantScoped && tenantID) {
+          validated.tenantID = tenantID;
+        }
+        const doc = await db.create({
+          collection: slug,
+          data: validated,
+          tenantID
+        });
+        return c.json({ doc, message: "Created successfully" }, 201);
+      } catch (error) {
+        if (error.name === "ZodError") {
+          return c.json({ error: "Validation failed", details: error.errors }, 400);
+        }
+        return c.json({ error: error.message }, 500);
+      }
+    });
+    app.patch(`${basePath}/:id`, async (c) => {
+      try {
+        const id = c.req.param("id");
+        const body = await c.req.json();
+        if (collection.access?.update) {
+          const allowed = await chunkR3XIBBAW_cjs.evaluateAccess(collection.access.update, {
+            req: c.req,
+            user,
+            tenantID,
+            id,
+            data: body
+          });
+          if (allowed === false) {
+            return c.json({ error: "Access denied" }, 403);
+          }
+        }
+        const schema = registry.getUpdateZodSchema(slug);
+        const validated = schema.parse(body);
+        const doc = await db.update({
+          collection: slug,
+          id,
+          data: validated,
+          tenantID
+        });
+        return c.json({ doc, message: "Updated successfully" });
+      } catch (error) {
+        if (error.name === "ZodError") {
+          return c.json({ error: "Validation failed", details: error.errors }, 400);
+        }
+        return c.json({ error: error.message }, 500);
+      }
+    });
+    app.delete(`${basePath}/:id`, async (c) => {
+      try {
+        const id = c.req.param("id");
+        if (collection.access?.delete) {
+          const allowed = await chunkR3XIBBAW_cjs.evaluateAccess(collection.access.delete, {
+            req: c.req,
+            user,
+            tenantID,
+            id
+          });
+          if (allowed === false) {
+            return c.json({ error: "Access denied" }, 403);
+          }
+        }
+        const doc = await db.delete({
+          collection: slug,
+          id,
+          tenantID
+        });
+        return c.json({ doc, message: "Deleted successfully" });
+      } catch (error) {
+        return c.json({ error: error.message }, 500);
+      }
+    });
+  }
+  return app;
+}
+function createRESTAPI(registry, db, options) {
+  return createHonoApp({
+    registry,
+    db,
+    user: options?.user,
+    req: options?.req,
+    tenantID: options?.tenantID,
+    cors: options?.cors
+  });
+}
+
+exports.createHonoApp = createHonoApp;
+exports.createRESTAPI = createRESTAPI;
+//# sourceMappingURL=chunk-UEG7KMKC.cjs.map
+//# sourceMappingURL=chunk-UEG7KMKC.cjs.map

package/dist/chunk-UEG7KMKC.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api/rest/hono-app.ts"],"names":["Hono","collections","evaluateAccess"],"mappings":";;;;;AAsBO,SAAS,cAAc,OAAA,EAA+B;AAC3D,EAAA,MAAM,EAAE,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,QAAA,EAAU,MAAK,GAAI,OAAA;AAC/C,EAAA,MAAM,GAAA,GAAM,IAAIA,SAAA,EAAK;AAGrB,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,IAAA,KAAS;AAC9B,MAAA,MAAM,MAAA,GAAS,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,QAAQ,CAAA,IAAK,GAAA;AACzC,MAAA,IAAI,IAAA,CAAK,OAAA,IAAW,CAAC,IAAA,CAAK,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,IAAK,CAAC,IAAA,CAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,EAAG;AAInF,MAAA,CAAA,CAAE,MAAA,CAAO,+BAA+B,MAAM,CAAA;AAC9C,MAAA,CAAA,CAAE,MAAA,CAAO,gCAAgC,mCAAmC,CAAA;AAC5E,MAAA,CAAA,CAAE,MAAA,CAAO,gCAAgC,6BAA6B,CAAA;AACtE,MAAA,IAAI,KAAK,WAAA,EAAa;AACpB,QAAA,CAAA,CAAE,MAAA,CAAO,oCAAoC,MAAM,CAAA;AAAA,MACrD;AAEA,MAAA,IAAI,CAAA,CAAE,GAAA,CAAI,MAAA,KAAW,SAAA,EAAW;AAC9B,QAAA,OAAO,CAAA,CAAE,KAAK,EAAE,CAAA;AAAA,MAClB;AAEA,MAAA,MAAM,IAAA,EAAK;AAAA,IACb,CAAC,CAAA;AAAA,EACH;AAGA,EAAA,GAAA,CAAI,GAAA,CAAI,aAAA,EAAe,CAAC,CAAA,KAAM;AAC5B,IAAA,OAAO,EAAE,IAAA,CAAK;AAAA,MACZ,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,OAAA;AAAA,MACT,WAAA,EAAa,SAAS,kBAAA,EAAmB;AAAA,MACzC,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACnC,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAA,GAAA,CAAI,GAAA,CAAI,kBAAA,EAAoB,CAAC,CAAA,KAAM;AACjC,IAAA,MAAMC,YAAAA,GAAc,QAAA,CAAS,cAAA,EAAe,CAAE,IAAI,CAAA,GAAA,MAAQ;AAAA,MACxD,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,GAAA,CAAI,IAAA;AAAA,MACxB,MAAA,EAAQ,IAAI,MAAA,CAAO,MAAA,CAAO,OAAK,CAAA,CAAE,IAAI,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,MAAM;AAAA,QAC/C,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,OAAO,CAAA,CAAE;AAAA,OACX,CAAE;AAAA,KACJ,CAAE,CAAA;AACF,IAAA,OAAO,CAAA,CAAE,KAAKA,YAAW,CAAA;AAAA,EAC3B,CAAC,CAAA;AAGD,EAAA,MAAM,WAAA,GAAc,SAAS,cAAA,EAAe;AAE5C,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,IAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AACxB,IAAA,MAAM,QAAA,GAAW,QAAQ,IAAI,CAAA,CAAA;AAG7B,IAAA,GAAA,CAAI,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA,KAAM;AAC7B,MAAA,IAAI;AAEF,QAAA,IAAI,UAAA,CAAW,QAAQ,IAAA,EAAM;AAC3B,UAAA,MAAM,OAAA,GAAU,MAAMC,gCAAA,CAAe,UAAA,CAAW,OAAO,IAAA,EAAM;AAAA,YAC3D,KAAK,CAAA,CAAE,GAAA;AAAA,YACP,IAAA;AAAA,YACA;AAAA,WACD,CAAA;AACD,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,IAAmB,GAAG,CAAA;AAAA,UAC/C;AAAA,QACF;AAGA,QAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,CAAE,IAAI,GAAG,CAAA;AAC7B,QAAA,MAAM,OAAO,QAAA,CAAS,GAAA,CAAI,aAAa,GAAA,CAAI,MAAM,KAAK,GAAG,CAAA;AACzD,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA,IAAK,IAAI,CAAA,EAAG,GAAG,CAAA;AAC3E,QAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,IAAK,KAAA,CAAA;AAC7C,QAAA,MAAM,QAAQ,QAAA,CAAS,GAAA,CAAI,aAAa,GAAA,CAAI,OAAO,KAAK,GAAG,CAAA;AAC3D,QAAA,MAAM,MAAA,GAAS,IAAI,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,IAAK,KAAA,CAAA;AAE7D,QAAA,IAAI,QAAQ,EAAC;AACb,QAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA;AAC/C,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,IAAI;AACF,YAAA,KAAA,GAAQ,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,UAC/B,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,IAAA,CAAK;AAAA,UAC3B,UAAA,EAAY,IAAA;AAAA,UACZ,KAAA;AAAA,UACA,IAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA;AAAA,UACA,KAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,OAAO,CAAA,CAAE,KAAK,MAAM,CAAA;AAAA,MACtB,SAAS,KAAA,EAAY;AACnB,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAO,KAAA,CAAM,OAAA,IAAW,GAAG,CAAA;AAAA,MAC7C;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,GAAA,CAAI,GAAA,CAAI,CAAA,EAAG,QAAQ,CAAA,IAAA,CAAA,EAAQ,OAAO,CAAA,KAAM;AACtC,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,GAAK,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAC3B,QAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,CAAE,IAAI,GAAG,CAAA;AAC7B,QAAA,MAAM,QAAQ,QAAA,CAAS,GAAA,CAAI,aAAa,GAAA,CAAI,OAAO,KAAK,GAAG,CAAA;AAC3D,QAAA,MAAM,MAAA,GAAS,IAAI,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,IAAK,KAAA,CAAA;AAG7D,QAAA,IAAI,UAAA,CAAW,QAAQ,IAAA,EAAM;AAC3B,UAAA,MAAM,OAAA,GAAU,MAAMA,gCAAA,CAAe,UAAA,CAAW,OAAO,IAAA,EAAM;AAAA,YAC3D,KAAK,CAAA,CAAE,GAAA;AAAA,YACP,IAAA;AAAA,YACA,QAAA;AAAA,YACA;AAAA,WACD,CAAA;AACD,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,IAAmB,GAAG,CAAA;AAAA,UAC/C;AAAA,QACF;AAEA,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,QAAA,CAAS;AAAA,UAC5B,UAAA,EAAY,IAAA;AAAA,UACZ,EAAA;AAAA,UACA,KAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,IAAI,CAAC,GAAA,EAAK;AACR,UAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,oBAAA,IAAwB,GAAG,CAAA;AAAA,QACpD;AAEA,QAAA,OAAO,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,MACnB,SAAS,KAAA,EAAY;AACnB,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAO,KAAA,CAAM,OAAA,IAAW,GAAG,CAAA;AAAA,MAC7C;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,GAAA,CAAI,IAAA,CAAK,QAAA,EAAU,OAAO,CAAA,KAAM;AAC9B,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,GAAA,CAAI,IAAA,EAAK;AAG9B,QAAA,IAAI,UAAA,CAAW,QAAQ,MAAA,EAAQ;AAC7B,UAAA,MAAM,OAAA,GAAU,MAAMA,gCAAA,CAAe,UAAA,CAAW,OAAO,MAAA,EAAQ;AAAA,YAC7D,KAAK,CAAA,CAAE,GAAA;AAAA,YACP,IAAA;AAAA,YACA,QAAA;AAAA,YACA,IAAA,EAAM;AAAA,WACP,CAAA;AACD,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,IAAmB,GAAG,CAAA;AAAA,UAC/C;AAAA,QACF;AAGA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,kBAAA,CAAmB,IAAI,CAAA;AAC/C,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAGnC,QAAA,IAAI,UAAA,CAAW,gBAAgB,QAAA,EAAU;AACvC,UAAA,SAAA,CAAU,QAAA,GAAW,QAAA;AAAA,QACvB;AAEA,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,UAAA,EAAY,IAAA;AAAA,UACZ,IAAA,EAAM,SAAA;AAAA,UACN;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAK,OAAA,EAAS,sBAAA,IAA0B,GAAG,CAAA;AAAA,MAC7D,SAAS,KAAA,EAAY;AACnB,QAAA,IAAI,KAAA,CAAM,SAAS,UAAA,EAAY;AAC7B,UAAA,OAAO,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,qBAAqB,OAAA,EAAS,KAAA,CAAM,MAAA,EAAO,EAAG,GAAG,CAAA;AAAA,QAC1E;AACA,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAO,KAAA,CAAM,OAAA,IAAW,GAAG,CAAA;AAAA,MAC7C;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA,IAAA,CAAA,EAAQ,OAAO,CAAA,KAAM;AACxC,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,GAAK,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAC3B,QAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,GAAA,CAAI,IAAA,EAAK;AAG9B,QAAA,IAAI,UAAA,CAAW,QAAQ,MAAA,EAAQ;AAC7B,UAAA,MAAM,OAAA,GAAU,MAAMA,gCAAA,CAAe,UAAA,CAAW,OAAO,MAAA,EAAQ;AAAA,YAC7D,KAAK,CAAA,CAAE,GAAA;AAAA,YACP,IAAA;AAAA,YACA,QAAA;AAAA,YACA,EAAA;AAAA,YACA,IAAA,EAAM;AAAA,WACP,CAAA;AACD,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,IAAmB,GAAG,CAAA;AAAA,UAC/C;AAAA,QACF;AAGA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,kBAAA,CAAmB,IAAI,CAAA;AAC/C,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAEnC,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,UAAA,EAAY,IAAA;AAAA,UACZ,EAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,GAAA,EAAK,OAAA,EAAS,wBAAwB,CAAA;AAAA,MACxD,SAAS,KAAA,EAAY;AACnB,QAAA,IAAI,KAAA,CAAM,SAAS,UAAA,EAAY;AAC7B,UAAA,OAAO,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,qBAAqB,OAAA,EAAS,KAAA,CAAM,MAAA,EAAO,EAAG,GAAG,CAAA;AAAA,QAC1E;AACA,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAO,KAAA,CAAM,OAAA,IAAW,GAAG,CAAA;AAAA,MAC7C;AAAA,IACF,CAAC,CAAA;AAGD,IAAA,GAAA,CAAI,MAAA,CAAO,CAAA,EAAG,QAAQ,CAAA,IAAA,CAAA,EAAQ,OAAO,CAAA,KAAM;AACzC,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,GAAK,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA;AAG3B,QAAA,IAAI,UAAA,CAAW,QAAQ,MAAA,EAAQ;AAC7B,UAAA,MAAM,OAAA,GAAU,MAAMA,gCAAA,CAAe,UAAA,CAAW,OAAO,MAAA,EAAQ;AAAA,YAC7D,KAAK,CAAA,CAAE,GAAA;AAAA,YACP,IAAA;AAAA,YACA,QAAA;AAAA,YACA;AAAA,WACD,CAAA;AACD,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,IAAmB,GAAG,CAAA;AAAA,UAC/C;AAAA,QACF;AAEA,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,UAAA,EAAY,IAAA;AAAA,UACZ,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,GAAA,EAAK,OAAA,EAAS,wBAAwB,CAAA;AAAA,MACxD,SAAS,KAAA,EAAY;AACnB,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAO,KAAA,CAAM,OAAA,IAAW,GAAG,CAAA;AAAA,MAC7C;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,aAAA,CAAc,QAAA,EAAoB,EAAA,EAAiB,OAAA,EAQ1D;AACP,EAAA,OAAO,aAAA,CAAc;AAAA,IACnB,QAAA;AAAA,IACA,EAAA;AAAA,IACA,MAAM,OAAA,EAAS,IAAA;AAAA,IACf,KAAK,OAAA,EAAS,GAAA;AAAA,IACd,UAAU,OAAA,EAAS,QAAA;AAAA,IACnB,MAAM,OAAA,EAAS;AAAA,GAChB,CAAA;AACH","file":"chunk-UEG7KMKC.cjs","sourcesContent":["import { Hono } from 'hono';\nimport type { BaseAdapter } from '../../registry/types.js';\nimport { Registry } from '../../registry/index.js';\nimport { evaluateAccess } from '../../access/types.js';\nimport type { User, Request } from '../../hooks/types.js';\n\n// ============================================================================\n// REST API Factory\n// ============================================================================\n\nexport interface HonoAppOptions {\n  registry: Registry;\n  db: BaseAdapter;\n  user?: User;\n  req?: Request;\n  tenantID?: string;\n  cors?: {\n    origins?: string[];\n    credentials?: boolean;\n  };\n}\n\nexport function createHonoApp(options: HonoAppOptions): Hono {\n  const { registry, db, user, tenantID, cors } = options;\n  const app = new Hono();\n\n  // CORS middleware\n  if (cors) {\n    app.use('*', async (c, next) => {\n      const origin = c.req.header('Origin') || '*';\n      if (cors.origins && !cors.origins.includes(origin) && !cors.origins.includes('*')) {\n        // Blocked origin\n      }\n      \n      c.header('Access-Control-Allow-Origin', origin);\n      c.header('Access-Control-Allow-Methods', 'GET, POST, PATCH, DELETE, OPTIONS');\n      c.header('Access-Control-Allow-Headers', 'Content-Type, Authorization');\n      if (cors.credentials) {\n        c.header('Access-Control-Allow-Credentials', 'true');\n      }\n      \n      if (c.req.method === 'OPTIONS') {\n        return c.text('');\n      }\n      \n      await next();\n    });\n  }\n\n  // Health check\n  app.get('/api/health', (c) => {\n    return c.json({\n      status: 'ok',\n      version: '0.1.0',\n      collections: registry.getCollectionSlugs(),\n      timestamp: new Date().toISOString(),\n    });\n  });\n\n  // List collections\n  app.get('/api/collections', (c) => {\n    const collections = registry.getCollections().map(col => ({\n      slug: col.slug,\n      label: col.label || col.slug,\n      fields: col.fields.filter(f => f.name).map(f => ({\n        name: f.name,\n        type: f.type,\n        required: f.required,\n        label: f.label,\n      })),\n    }));\n    return c.json(collections);\n  });\n\n  // Dynamic collection routes\n  const collections = registry.getCollections();\n\n  for (const collection of collections) {\n    const slug = collection.slug;\n    const basePath = `/api/${slug}`;\n\n    // GET /api/:collection - List\n    app.get(basePath, async (c) => {\n      try {\n        // Check access\n        if (collection.access?.read) {\n          const allowed = await evaluateAccess(collection.access.read, {\n            req: c.req as any,\n            user,\n            tenantID,\n          });\n          if (allowed === false) {\n            return c.json({ error: 'Access denied' }, 403);\n          }\n        }\n\n        // Parse query params\n        const url = new URL(c.req.url);\n        const page = parseInt(url.searchParams.get('page') || '1');\n        const limit = Math.min(parseInt(url.searchParams.get('limit') || '10'), 100);\n        const sort = url.searchParams.get('sort') || undefined;\n        const depth = parseInt(url.searchParams.get('depth') || '0');\n        const select = url.searchParams.get('select')?.split(',') || undefined;\n        \n        let where = {};\n        const whereParam = url.searchParams.get('where');\n        if (whereParam) {\n          try {\n            where = JSON.parse(whereParam);\n          } catch {}\n        }\n\n        const result = await db.find({\n          collection: slug,\n          where,\n          sort,\n          limit,\n          page,\n          depth,\n          tenantID,\n          select,\n        });\n\n        return c.json(result);\n      } catch (error: any) {\n        return c.json({ error: error.message }, 500);\n      }\n    });\n\n    // GET /api/:collection/:id - Find by ID\n    app.get(`${basePath}/:id`, async (c) => {\n      try {\n        const id = c.req.param('id');\n        const url = new URL(c.req.url);\n        const depth = parseInt(url.searchParams.get('depth') || '0');\n        const select = url.searchParams.get('select')?.split(',') || undefined;\n\n        // Check access\n        if (collection.access?.read) {\n          const allowed = await evaluateAccess(collection.access.read, {\n            req: c.req as any,\n            user,\n            tenantID,\n            id,\n          });\n          if (allowed === false) {\n            return c.json({ error: 'Access denied' }, 403);\n          }\n        }\n\n        const doc = await db.findByID({\n          collection: slug,\n          id,\n          depth,\n          tenantID,\n          select,\n        });\n\n        if (!doc) {\n          return c.json({ error: 'Document not found' }, 404);\n        }\n\n        return c.json(doc);\n      } catch (error: any) {\n        return c.json({ error: error.message }, 500);\n      }\n    });\n\n    // POST /api/:collection - Create\n    app.post(basePath, async (c) => {\n      try {\n        const body = await c.req.json();\n\n        // Check access\n        if (collection.access?.create) {\n          const allowed = await evaluateAccess(collection.access.create, {\n            req: c.req as any,\n            user,\n            tenantID,\n            data: body,\n          });\n          if (allowed === false) {\n            return c.json({ error: 'Access denied' }, 403);\n          }\n        }\n\n        // Validate with Zod\n        const schema = registry.getCreateZodSchema(slug);\n        const validated = schema.parse(body);\n\n        // Add tenantID if scoped\n        if (collection.tenantScoped && tenantID) {\n          validated.tenantID = tenantID;\n        }\n\n        const doc = await db.create({\n          collection: slug,\n          data: validated,\n          tenantID,\n        });\n\n        return c.json({ doc, message: 'Created successfully' }, 201);\n      } catch (error: any) {\n        if (error.name === 'ZodError') {\n          return c.json({ error: 'Validation failed', details: error.errors }, 400);\n        }\n        return c.json({ error: error.message }, 500);\n      }\n    });\n\n    // PATCH /api/:collection/:id - Update\n    app.patch(`${basePath}/:id`, async (c) => {\n      try {\n        const id = c.req.param('id');\n        const body = await c.req.json();\n\n        // Check access\n        if (collection.access?.update) {\n          const allowed = await evaluateAccess(collection.access.update, {\n            req: c.req as any,\n            user,\n            tenantID,\n            id,\n            data: body,\n          });\n          if (allowed === false) {\n            return c.json({ error: 'Access denied' }, 403);\n          }\n        }\n\n        // Validate with Zod\n        const schema = registry.getUpdateZodSchema(slug);\n        const validated = schema.parse(body);\n\n        const doc = await db.update({\n          collection: slug,\n          id,\n          data: validated,\n          tenantID,\n        });\n\n        return c.json({ doc, message: 'Updated successfully' });\n      } catch (error: any) {\n        if (error.name === 'ZodError') {\n          return c.json({ error: 'Validation failed', details: error.errors }, 400);\n        }\n        return c.json({ error: error.message }, 500);\n      }\n    });\n\n    // DELETE /api/:collection/:id - Delete\n    app.delete(`${basePath}/:id`, async (c) => {\n      try {\n        const id = c.req.param('id');\n\n        // Check access\n        if (collection.access?.delete) {\n          const allowed = await evaluateAccess(collection.access.delete, {\n            req: c.req as any,\n            user,\n            tenantID,\n            id,\n          });\n          if (allowed === false) {\n            return c.json({ error: 'Access denied' }, 403);\n          }\n        }\n\n        const doc = await db.delete({\n          collection: slug,\n          id,\n          tenantID,\n        });\n\n        return c.json({ doc, message: 'Deleted successfully' });\n      } catch (error: any) {\n        return c.json({ error: error.message }, 500);\n      }\n    });\n  }\n\n  return app;\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\nexport function createRESTAPI(registry: Registry, db: BaseAdapter, options?: {\n  user?: User;\n  req?: Request;\n  tenantID?: string;\n  cors?: {\n    origins?: string[];\n    credentials?: boolean;\n  };\n}): Hono {\n  return createHonoApp({\n    registry,\n    db,\n    user: options?.user,\n    req: options?.req,\n    tenantID: options?.tenantID,\n    cors: options?.cors,\n  });\n}\n"]}

package/dist/chunk-UEYC46RL.js

@@ -0,0 +1,374 @@
+import { evaluateAccess } from './chunk-SDMNUYVU.js';
+
+// src/api/trpc/context.ts
+function createContext(options) {
+  return {
+    db: options.db,
+    registry: options.registry,
+    req: options.req,
+    user: options.user,
+    tenantID: options.tenantID
+  };
+}
+
+// src/api/trpc/procedures.ts
+function createFindProcedure(ctx) {
+  return async (input) => {
+    const { collection, where, sort, limit, page, depth, select } = input;
+    const config = ctx.registry.getCollection(collection);
+    if (config.access?.read) {
+      const allowed = await evaluateAccess(config.access.read, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    if (config.hooks?.beforeRead) {
+      for (const hook of config.hooks.beforeRead) {
+        await hook({
+          collection,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "read",
+          where
+        });
+      }
+    }
+    const result = await ctx.db.find({
+      collection,
+      where: where || {},
+      sort,
+      limit: limit || 10,
+      page: page || 1,
+      depth: depth || 0,
+      tenantID: ctx.tenantID,
+      select
+    });
+    if (config.hooks?.afterRead) {
+      for (const doc of result.docs) {
+        for (const hook of config.hooks.afterRead) {
+          await hook({
+            collection,
+            doc,
+            req: ctx.req,
+            user: ctx.user,
+            tenantID: ctx.tenantID,
+            operation: "read"
+          });
+        }
+      }
+    }
+    return result;
+  };
+}
+function createFindByIDProcedure(ctx) {
+  return async (input) => {
+    const { collection, id, depth, select } = input;
+    const config = ctx.registry.getCollection(collection);
+    if (config.access?.read) {
+      const allowed = await evaluateAccess(config.access.read, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID,
+        id
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    const doc = await ctx.db.findByID({
+      collection,
+      id,
+      depth: depth || 0,
+      tenantID: ctx.tenantID,
+      select
+    });
+    if (!doc) throw new Error(`Document not found: ${collection}/${id}`);
+    if (config.hooks?.afterRead) {
+      for (const hook of config.hooks.afterRead) {
+        await hook({
+          collection,
+          doc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "read",
+          id
+        });
+      }
+    }
+    return doc;
+  };
+}
+function createCreateProcedure(ctx) {
+  return async (input) => {
+    const { collection, data, depth, select } = input;
+    const config = ctx.registry.getCollection(collection);
+    if (config.access?.create) {
+      const allowed = await evaluateAccess(config.access.create, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID,
+        data
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    const schema = ctx.registry.getCreateZodSchema(collection);
+    const validated = schema.parse(data);
+    if (config.tenantScoped && ctx.tenantID) {
+      validated.tenantID = ctx.tenantID;
+    }
+    if (config.hooks?.beforeValidate) {
+      for (const hook of config.hooks.beforeValidate) {
+        const hookResult = await hook({
+          collection,
+          data: validated,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "create"
+        });
+        if (hookResult) Object.assign(validated, hookResult);
+      }
+    }
+    if (config.hooks?.beforeChange) {
+      for (const hook of config.hooks.beforeChange) {
+        const hookResult = await hook({
+          collection,
+          data: validated,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "create"
+        });
+        if (hookResult) Object.assign(validated, hookResult);
+      }
+    }
+    const doc = await ctx.db.create({
+      collection,
+      data: validated,
+      depth: depth || 0,
+      tenantID: ctx.tenantID,
+      select
+    });
+    if (config.hooks?.afterChange) {
+      for (const hook of config.hooks.afterChange) {
+        await hook({
+          collection,
+          doc,
+          data: validated,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "create"
+        });
+      }
+    }
+    return { doc };
+  };
+}
+function createUpdateProcedure(ctx) {
+  return async (input) => {
+    const { collection, id, data, depth, select } = input;
+    const config = ctx.registry.getCollection(collection);
+    const originalDoc = await ctx.db.findByID({
+      collection,
+      id,
+      tenantID: ctx.tenantID
+    });
+    if (!originalDoc) throw new Error(`Document not found: ${collection}/${id}`);
+    if (config.access?.update) {
+      const allowed = await evaluateAccess(config.access.update, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID,
+        id,
+        doc: originalDoc,
+        data
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    const schema = ctx.registry.getUpdateZodSchema(collection);
+    const validated = schema.parse(data);
+    if (config.tenantScoped && ctx.tenantID) {
+      validated.tenantID = ctx.tenantID;
+    }
+    if (config.hooks?.beforeValidate) {
+      for (const hook of config.hooks.beforeValidate) {
+        const hookResult = await hook({
+          collection,
+          data: validated,
+          originalDoc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "update",
+          id
+        });
+        if (hookResult) Object.assign(validated, hookResult);
+      }
+    }
+    if (config.hooks?.beforeChange) {
+      for (const hook of config.hooks.beforeChange) {
+        const hookResult = await hook({
+          collection,
+          data: validated,
+          originalDoc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "update",
+          id
+        });
+        if (hookResult) Object.assign(validated, hookResult);
+      }
+    }
+    const doc = await ctx.db.update({
+      collection,
+      id,
+      data: validated,
+      depth: depth || 0,
+      tenantID: ctx.tenantID,
+      select
+    });
+    if (config.hooks?.afterChange) {
+      for (const hook of config.hooks.afterChange) {
+        await hook({
+          collection,
+          doc,
+          data: validated,
+          originalDoc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "update",
+          id
+        });
+      }
+    }
+    return { doc };
+  };
+}
+function createDeleteProcedure(ctx) {
+  return async (input) => {
+    const { collection, id } = input;
+    const config = ctx.registry.getCollection(collection);
+    const originalDoc = await ctx.db.findByID({
+      collection,
+      id,
+      tenantID: ctx.tenantID
+    });
+    if (!originalDoc) throw new Error(`Document not found: ${collection}/${id}`);
+    if (config.access?.delete) {
+      const allowed = await evaluateAccess(config.access.delete, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID,
+        id,
+        doc: originalDoc
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    if (config.hooks?.beforeDelete) {
+      for (const hook of config.hooks.beforeDelete) {
+        await hook({
+          collection,
+          doc: originalDoc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "delete",
+          id
+        });
+      }
+    }
+    const doc = await ctx.db.delete({
+      collection,
+      id,
+      tenantID: ctx.tenantID
+    });
+    if (config.hooks?.afterDelete) {
+      for (const hook of config.hooks.afterDelete) {
+        await hook({
+          collection,
+          doc,
+          req: ctx.req,
+          user: ctx.user,
+          tenantID: ctx.tenantID,
+          operation: "delete",
+          id
+        });
+      }
+    }
+    return { doc, message: "Deleted successfully" };
+  };
+}
+function createCountProcedure(ctx) {
+  return async (input) => {
+    const { collection, where } = input;
+    const config = ctx.registry.getCollection(collection);
+    if (config.access?.read) {
+      const allowed = await evaluateAccess(config.access.read, {
+        req: ctx.req,
+        user: ctx.user,
+        tenantID: ctx.tenantID
+      });
+      if (allowed === false) throw new Error("Access denied");
+    }
+    const totalDocs = await ctx.db.count({
+      collection,
+      where: where || {},
+      tenantID: ctx.tenantID
+    });
+    return { totalDocs };
+  };
+}
+
+// src/api/trpc/router.ts
+function createDynamicRouter(ctx) {
+  const router = {};
+  const collections = ctx.registry.getCollections();
+  for (const collection of collections) {
+    const slug = collection.slug;
+    router[slug] = {
+      find: createFindProcedure(ctx),
+      findByID: createFindByIDProcedure(ctx),
+      create: createCreateProcedure(ctx),
+      update: createUpdateProcedure(ctx),
+      delete: createDeleteProcedure(ctx),
+      count: createCountProcedure(ctx)
+    };
+  }
+  const globals = ctx.registry.getGlobals();
+  for (const global of globals) {
+    const slug = global.slug;
+    router[`_globals_${slug}`] = {
+      get: async () => {
+        const doc = await ctx.db.findOne({
+          collection: `_globals_${slug}`,
+          where: {},
+          tenantID: ctx.tenantID
+        });
+        return doc;
+      },
+      update: async (input) => {
+        const schema = ctx.registry.getZodSchema(slug);
+        const validated = schema.parse(input.data);
+        const doc = await ctx.db.create({
+          collection: `_globals_${slug}`,
+          data: { ...validated, id: slug },
+          tenantID: ctx.tenantID
+        });
+        return doc;
+      }
+    };
+  }
+  return router;
+}
+function createKyroServer(ctx) {
+  return createDynamicRouter(ctx);
+}
+
+export { createContext, createCountProcedure, createCreateProcedure, createDeleteProcedure, createDynamicRouter, createFindByIDProcedure, createFindProcedure, createKyroServer, createUpdateProcedure };
+//# sourceMappingURL=chunk-UEYC46RL.js.map
+//# sourceMappingURL=chunk-UEYC46RL.js.map