@kyro-cms/core 0.1.1 → 0.1.3

package/README.md

@@ -18,8 +18,8 @@ Kyro is built for **Astro** from the ground up. Unlike other CMS solutions that
 
 ### Key Features
 
-- **Local-First** - SQLite for zero-config development, no external database needed
-- **Multi-Database** - SQLite, PostgreSQL, MySQL, MongoDB via unified adapter interface
+- **Zero-Config Development** - SQLite by default for instant setup, no external dependencies
+- **Multi-Database** - SQLite (dev), PostgreSQL, MySQL, MongoDB via unified adapter interface
 - **Multi-Protocol API** - REST, GraphQL, tRPC, and WebSocket from a single config
 - **Multi-Vendor** - Built-in tenant scoping and row-level access control
 - **E-Commerce Ready** - Products, orders, customers, inventory, coupons out of the box
@@ -37,6 +37,7 @@ npm create kyro@latest
 ```
 
 This launches an interactive wizard that asks:
+
 - Project name
 - Database (SQLite, PostgreSQL, MySQL, MongoDB)
 - API protocols (REST, GraphQL, tRPC, WebSocket)
@@ -54,20 +55,20 @@ npm install @kyro-cms/core
 
 ```typescript
 // kyro.config.ts
-import { defineConfig, localAdapter } from '@kyro-cms/core';
+import { defineConfig, localAdapter } from "@kyro-cms/core";
 
 export default defineConfig({
-  name: 'my-app',
-  adapter: localAdapter({ path: './data.db' }),
+  name: "my-app",
+  adapter: localAdapter({ path: "./data.db" }),
   collections: {
     posts: {
-      slug: 'posts',
-      label: 'Posts',
+      slug: "posts",
+      label: "Posts",
       fields: [
-        { name: 'title', type: 'text', required: true },
-        { name: 'slug', type: 'text', required: true },
-        { name: 'content', type: 'richtext' },
-        { name: 'published', type: 'checkbox', defaultValue: false },
+        { name: "title", type: "text", required: true },
+        { name: "slug", type: "text", required: true },
+        { name: "content", type: "richtext" },
+        { name: "published", type: "checkbox", defaultValue: false },
       ],
     },
   },
@@ -82,22 +83,22 @@ export default defineConfig({
 
 ## Database Adapters
 
-### SQLite (Local-First)
+### SQLite (Default for Development)
 
 ```typescript
-import { localAdapter } from '@kyro-cms/core';
+import { localAdapter } from "@kyro-cms/core";
 
 const adapter = localAdapter({
-  path: './data.db',  // or ':memory:' for in-memory
+  path: "./data.db", // or ':memory:' for in-memory
 });
 ```
 
-Perfect for development and small projects. Zero configuration required.
+Perfect for development and small projects. Zero configuration required - no external services needed.
 
 ### PostgreSQL/MySQL (Production)
 
 ```typescript
-import { drizzleAdapter } from '@kyro-cms/core';
+import { drizzleAdapter } from "@kyro-cms/core";
 
 const adapter = drizzleAdapter({
   connectionString: process.env.DATABASE_URL,
@@ -107,7 +108,7 @@ const adapter = drizzleAdapter({
 ### MongoDB (Flexible Schemas)
 
 ```typescript
-import { mongoAdapter } from '@kyro-cms/core';
+import { mongoAdapter } from "@kyro-cms/core";
 
 const adapter = mongoAdapter({
   connectionString: process.env.MONGODB_URI,
@@ -177,20 +178,22 @@ const client = createTRPCClient({
 const posts = await client.posts.find.query({ page: 1 });
 const newPost = await client.posts.create.mutate({
   title: "Hello",
-  slug: "hello"
+  slug: "hello",
 });
 ```
 
 ### WebSocket (Real-time)
 
 ```typescript
-const ws = new WebSocket('ws://localhost:4321/api/ws');
+const ws = new WebSocket("ws://localhost:4321/api/ws");
 
-ws.send(JSON.stringify({
-  type: 'subscribe',
-  collection: 'posts',
-  event: 'create'
-}));
+ws.send(
+  JSON.stringify({
+    type: "subscribe",
+    collection: "posts",
+    event: "create",
+  }),
+);
 
 ws.onmessage = (event) => {
   const data = JSON.parse(event.data);
@@ -204,62 +207,62 @@ ws.onmessage = (event) => {
 
 Kyro supports 21 field types:
 
-| Type | Description |
-|------|-------------|
-| `text` | Single-line text input |
-| `textarea` | Multi-line text |
-| `richtext` | Rich text editor content |
-| `markdown` | Markdown content |
-| `number` | Numeric values |
-| `email` | Email with validation |
-| `password` | Hashed password storage |
-| `checkbox` | Boolean toggle |
-| `date` | Date/time picker |
-| `select` | Dropdown selection |
-| `radio` | Radio button group |
-| `color` | Color picker |
-| `json` | JSON data |
-| `code` | Code editor content |
-| `array` | Repeatable field groups |
-| `group` | Nested field groups |
-| `relationship` | Link to other documents |
-| `upload` | File/media uploads |
-| `blocks` | Structured content blocks |
-| `row` | Horizontal field layout |
-| `collapsible` | Collapsible field sections |
-| `tabs` | Tabbed interface |
+| Type           | Description                |
+| -------------- | -------------------------- |
+| `text`         | Single-line text input     |
+| `textarea`     | Multi-line text            |
+| `richtext`     | Rich text editor content   |
+| `markdown`     | Markdown content           |
+| `number`       | Numeric values             |
+| `email`        | Email with validation      |
+| `password`     | Hashed password storage    |
+| `checkbox`     | Boolean toggle             |
+| `date`         | Date/time picker           |
+| `select`       | Dropdown selection         |
+| `radio`        | Radio button group         |
+| `color`        | Color picker               |
+| `json`         | JSON data                  |
+| `code`         | Code editor content        |
+| `array`        | Repeatable field groups    |
+| `group`        | Nested field groups        |
+| `relationship` | Link to other documents    |
+| `upload`       | File/media uploads         |
+| `blocks`       | Structured content blocks  |
+| `row`          | Horizontal field layout    |
+| `collapsible`  | Collapsible field sections |
+| `tabs`         | Tabbed interface           |
 
 ### Example: Complex Fields
 
 ```typescript
 fields: [
-  { name: 'title', type: 'text', required: true },
-  
+  { name: "title", type: "text", required: true },
+
   {
-    name: 'author',
-    type: 'relationship',
-    relationTo: 'users',
-    required: true
+    name: "author",
+    type: "relationship",
+    relationTo: "users",
+    required: true,
   },
-  
+
   {
-    name: 'tags',
-    type: 'array',
+    name: "tags",
+    type: "array",
     fields: [
-      { name: 'name', type: 'text' },
-      { name: 'slug', type: 'text' },
-    ]
+      { name: "name", type: "text" },
+      { name: "slug", type: "text" },
+    ],
   },
-  
+
   {
-    name: 'metadata',
-    type: 'group',
+    name: "metadata",
+    type: "group",
     fields: [
-      { name: 'views', type: 'number', defaultValue: 0 },
-      { name: 'featured', type: 'checkbox' },
-    ]
-  }
-]
+      { name: "views", type: "number", defaultValue: 0 },
+      { name: "featured", type: "checkbox" },
+    ],
+  },
+];
 ```
 
 ---
@@ -269,10 +272,10 @@ fields: [
 Pre-built collections for building online stores:
 
 ```typescript
-import { ecommerceCollections } from '@kyro-cms/core';
+import { ecommerceCollections } from "@kyro-cms/core";
 
 const kyro = createKyro({
-  adapter: localAdapter({ path: './store.db' }),
+  adapter: localAdapter({ path: "./store.db" }),
   collections: ecommerceCollections,
 });
 
@@ -289,31 +292,83 @@ const kyro = createKyro({
 
 ## Authentication
 
-Built-in JWT authentication:
+Built-in JWT authentication with multiple storage options:
 
 ```typescript
-import { Auth, createAuth } from '@kyro-cms/core';
+import { RedisAuthAdapter, SQLiteAuthAdapter } from "@kyro-cms/core";
+import { createAuthConfig } from "@kyro-cms/core";
 
-const auth = createAuth(adapter, {
-  secret: process.env.JWT_SECRET,
-  expiresIn: '24h',
-  refreshExpiresIn: '7d',
-});
+// Use SQLite for development (zero-config, default)
+const adapter = new SQLiteAuthAdapter({ path: "./data.db" });
 
-// Register
-await auth.register({
-  email: 'user@example.com',
-  password: 'secure123',
-  role: 'customer',
+// Use Redis for sessions (recommended for production)
+const redisAdapter = new RedisAuthAdapter({
+  url: process.env.REDIS_URL,
+  tls: process.env.REDIS_TLS === "true",
 });
 
-// Login
-const result = await auth.login({
-  email: 'user@example.com',
-  password: 'secure123',
-});
+// Or use PostgreSQL for production
+import { PostgresAuthAdapter, createDatabase } from "@kyro-cms/core";
+
+const { db } = await createDatabase();
+const pgAdapter = new PostgresAuthAdapter({ db });
+
+// Or use env-based config with all features
+const authConfig = await createAuthConfig();
+const { redis, routes, passwordPolicy, lockout } = authConfig;
+```
 
-console.log(result.token); // JWT token
+### Authentication Features
+
+- **JWT Tokens** - 24h expiry with refresh token support
+- **Multiple Storage Options** - SQLite (dev), Redis, PostgreSQL via unified adapter interface
+- **Password Policy** - 12+ chars, complexity requirements, history check
+- **Account Lockout** - 5 failed attempts → 15 minute lockout
+- **Rate Limiting** - Per-IP and per-user limits
+- **Audit Logging** - 30-day retention with action tracking
+
+### CLI Commands
+
+```bash
+# Create admin user (first-run bootstrap)
+kyro auth bootstrap -e admin@example.com -p "SecurePass123!" -r admin
+
+# Database setup
+kyro db migrate    # Run migrations
+kyro db push       # Push schema to database
+kyro db seed       # Seed default roles
+kyro db studio     # Open Drizzle Studio
+```
+
+### RBAC Roles (Hierarchy)
+
+```
+super_admin (100) > admin (90) > editor (70) > author (50) > customer (30) > guest (10)
+```
+
+### Environment Variables
+
+```bash
+# Database
+DATABASE_URL=postgresql://user:pass@host:5432/kyro_cms
+DATABASE_SSL=false
+
+# Redis (sessions/cache)
+REDIS_URL=redis://localhost:6379
+REDIS_TLS=false
+
+# JWT
+JWT_SECRET=your-32-char-secret
+JWT_EXPIRES_IN=24h
+
+# Auth Settings
+LOCKOUT_MAX_ATTEMPTS=5
+LOCKOUT_DURATION_MINUTES=15
+PASSWORD_MIN_LENGTH=12
+
+# Bootstrap (first-run admin)
+KYRO_ADMIN_EMAIL=admin@example.com
+KYRO_ADMIN_PASSWORD=SecurePass123!
 ```
 
 ---
@@ -323,7 +378,7 @@ console.log(result.token); // JWT token
 Track document changes with built-in versioning:
 
 ```typescript
-import { createVersionManager } from '@kyro-cms/core';
+import { createVersionManager } from "@kyro-cms/core";
 
 const versions = createVersionManager(adapter, {
   versioningEnabled: true,
@@ -332,19 +387,19 @@ const versions = createVersionManager(adapter, {
 
 // Create a new version
 const version = await versions.createVersion({
-  collection: 'posts',
-  documentId: 'abc123',
-  data: { title: 'Updated Post' },
-  status: 'draft',
-  createdBy: 'user123',
+  collection: "posts",
+  documentId: "abc123",
+  data: { title: "Updated Post" },
+  status: "draft",
+  createdBy: "user123",
 });
 
 // Publish
 await versions.publishVersion({
-  collection: 'posts',
-  documentId: 'abc123',
+  collection: "posts",
+  documentId: "abc123",
   versionId: version.id,
-  publishedBy: 'user123',
+  publishedBy: "user123",
 });
 ```
 
@@ -369,6 +424,7 @@ import config from '../kyro.config';
 ```
 
 Features:
+
 - Collection browser with filtering and sorting
 - Document editor with all field types
 - Media library
@@ -382,13 +438,13 @@ Features:
 Extend Kyro with plugins:
 
 ```typescript
-import { 
+import {
   KyroPlugin,
   SEOPLugin,
   AnalyticsPlugin,
   CommentsPlugin,
   ReviewsPlugin,
-  WishlistPlugin 
+  WishlistPlugin
 } from '@kyro-cms/core';
 
 const kyro = createKyro({
@@ -411,18 +467,18 @@ const kyro = createKyro({
 ### Creating Plugins
 
 ```typescript
-import { KyroPlugin } from '@kyro-cms/core';
+import { KyroPlugin } from "@kyro-cms/core";
 
 class MyPlugin extends KyroPlugin {
-  name = 'my-plugin';
-  
+  name = "my-plugin";
+
   hooks = {
-    'collection.beforeCreate': async (args) => {
+    "collection.beforeCreate": async (args) => {
       // Transform data before creation
-      return { ...args, data: { ...args.data, source: 'my-plugin' } };
+      return { ...args, data: { ...args.data, source: "my-plugin" } };
     },
-    
-    'document.afterSave': async (args) => {
+
+    "document.afterSave": async (args) => {
       // Send webhook, log analytics, etc.
       await sendWebhook(args);
     },
@@ -437,11 +493,11 @@ class MyPlugin extends KyroPlugin {
 Kyro ships with a complete styling system:
 
 ```typescript
-import { 
+import {
   ecommerce2026Theme,
   generateCSSVariables,
-  generateTailwindConfig 
-} from '@kyro-cms/core';
+  generateTailwindConfig,
+} from "@kyro-cms/core";
 
 // Generate CSS variables
 const cssVars = generateCSSVariables(ecommerce2026Theme);
@@ -450,12 +506,12 @@ const cssVars = generateCSSVariables(ecommerce2026Theme);
 const tailwindConfig = generateTailwindConfig(ecommerce2026Theme);
 
 // Custom themes
-import { createAdminStyling } from '@kyro-cms/core';
+import { createAdminStyling } from "@kyro-cms/core";
 
 const myTheme = createAdminStyling({
-  primaryColor: '#6366f1',
-  borderRadius: 'medium',
-  fontFamily: 'Inter',
+  primaryColor: "#6366f1",
+  borderRadius: "medium",
+  fontFamily: "Inter",
 });
 ```
 
@@ -463,6 +519,37 @@ const myTheme = createAdminStyling({
 
 ## Deployment
 
+### Quick Start with Docker
+
+```bash
+# Start PostgreSQL + Redis
+docker compose up -d
+
+# Push schema to database
+npm run db:push
+
+# Create admin user
+kyro auth bootstrap -e admin@example.com -p "SecurePass123!"
+
+# Start development
+npm run dev
+```
+
+### Environment Variables Required
+
+```bash
+# Database (PostgreSQL)
+DATABASE_URL=postgresql://postgres:postgres@localhost:5432/kyro_cms
+DATABASE_SSL=false
+
+# Redis (sessions/cache) - supports Redis Cloud
+REDIS_URL=redis://localhost:6379
+REDIS_TLS=false
+
+# JWT (required)
+JWT_SECRET=change-me-in-production-min-32-chars
+```
+
 ### Vercel
 
 ```bash
@@ -470,6 +557,7 @@ vercel --prod
 ```
 
 Environment variables:
+
 - `DATABASE_URL` - PostgreSQL connection string
 - `JWT_SECRET` - JWT signing secret
 
@@ -575,6 +663,7 @@ MIT License - see [LICENSE](LICENSE) for details.
 ## Acknowledgments
 
 Built with inspiration from:
+
 - [Payload CMS](https://payloadcms.com/) - The headless CMS that pushed the industry forward
 - [Strapi](https://strapi.io/) - Open source headless CMS
 - [Sanity](https://www.sanity.io/) - Real-time content infrastructure

package/dist/bootstrap-2WJK6PG7.cjs

@@ -0,0 +1,29 @@
+'use strict';
+
+var chunkI4BORBXT_cjs = require('./chunk-I4BORBXT.cjs');
+require('./chunk-Q7SFCCGT.cjs');
+
+
+
+Object.defineProperty(exports, "autoBootstrap", {
+  enumerable: true,
+  get: function () { return chunkI4BORBXT_cjs.autoBootstrap; }
+});
+Object.defineProperty(exports, "bootstrapAdmin", {
+  enumerable: true,
+  get: function () { return chunkI4BORBXT_cjs.bootstrapAdmin; }
+});
+Object.defineProperty(exports, "bootstrapWithRetry", {
+  enumerable: true,
+  get: function () { return chunkI4BORBXT_cjs.bootstrapWithRetry; }
+});
+Object.defineProperty(exports, "checkBootstrapRequired", {
+  enumerable: true,
+  get: function () { return chunkI4BORBXT_cjs.checkBootstrapRequired; }
+});
+Object.defineProperty(exports, "getBootstrapFromEnv", {
+  enumerable: true,
+  get: function () { return chunkI4BORBXT_cjs.getBootstrapFromEnv; }
+});
+//# sourceMappingURL=bootstrap-2WJK6PG7.cjs.map
+//# sourceMappingURL=bootstrap-2WJK6PG7.cjs.map

package/dist/bootstrap-2WJK6PG7.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"bootstrap-2WJK6PG7.cjs"}

package/dist/bootstrap-Q2TWUQF3.js

@@ -0,0 +1,4 @@
+export { autoBootstrap, bootstrapAdmin, bootstrapWithRetry, checkBootstrapRequired, getBootstrapFromEnv } from './chunk-V67YXRBT.js';
+import './chunk-PZ5AY32C.js';
+//# sourceMappingURL=bootstrap-Q2TWUQF3.js.map
+//# sourceMappingURL=bootstrap-Q2TWUQF3.js.map

package/dist/bootstrap-Q2TWUQF3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"bootstrap-Q2TWUQF3.js"}