@kyro-cms/core 0.10.4 → 0.10.6

package/dist/chunk-GUUB5EAG.cjs

@@ -1,223 +0,0 @@
-'use strict';
-
-var chunkNKPKR5BW_cjs = require('./chunk-NKPKR5BW.cjs');
-
-// src/database/base.ts
-var AbstractBaseAdapter = class {
-  collections = /* @__PURE__ */ new Map();
-  globals = /* @__PURE__ */ new Map();
-  connected = false;
-  tenantContext;
-  setTenantContext(context) {
-    this.tenantContext = context;
-  }
-  getTenantContext() {
-    return this.tenantContext;
-  }
-  async init(collections, globals = []) {
-    for (const config of collections) {
-      this.collections.set(config.slug, config);
-    }
-    for (const config of globals) {
-      this.globals.set(config.slug, config);
-    }
-    await this.connect();
-  }
-  // ========================================================================
-  // Utility Methods
-  // ========================================================================
-  getCollection(slug) {
-    const collection = this.collections.get(slug);
-    if (!collection) {
-      throw new Error(`Collection "${slug}" not found in adapter`);
-    }
-    return collection;
-  }
-  applyTenantFilter(where = {}, tenantID) {
-    if (tenantID) {
-      return {
-        ...where,
-        tenantID: { equals: tenantID }
-      };
-    }
-    return where;
-  }
-  getTableName(slug) {
-    return slug.replace(/-/g, "_");
-  }
-  prepareData(data, collection) {
-    const prepared = { ...data };
-    if (collection.timestamps) {
-      prepared.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-      if (!prepared.createdAt) {
-        prepared.createdAt = (/* @__PURE__ */ new Date()).toISOString();
-      }
-    }
-    if (collection.auth && prepared.password) ;
-    return prepared;
-  }
-  processRelationships(data, fields, depth) {
-    return data;
-  }
-  parseSort(sort) {
-    if (!sort) return { field: "createdAt", direction: "desc" };
-    if (sort.startsWith("-")) {
-      return { field: sort.slice(1), direction: "desc" };
-    }
-    return { field: sort, direction: "asc" };
-  }
-  calculatePagination(page, limit, totalDocs) {
-    const totalPages = Math.ceil(totalDocs / limit);
-    return {
-      totalDocs,
-      limit,
-      totalPages,
-      page,
-      pagingCounter: (page - 1) * limit + 1,
-      hasPrevPage: page > 1,
-      hasNextPage: page < totalPages,
-      prevPage: page > 1 ? page - 1 : null,
-      nextPage: page < totalPages ? page + 1 : null
-    };
-  }
-  selectFields(data, select) {
-    if (!select || select.length === 0) return data;
-    const result = {};
-    for (const field of select) {
-      if (field in data) {
-        result[field] = data[field];
-      }
-    }
-    result["id"] = data.id;
-    return result;
-  }
-  isRelationshipField(field) {
-    return field.type === "relationship";
-  }
-  isUploadField(field) {
-    return field.type === "upload";
-  }
-  getRelationshipFields(fields) {
-    const result = [];
-    for (const field of fields) {
-      if (field.type === "relationship") {
-        result.push(field);
-      } else if ("fields" in field && field.fields) {
-        result.push(...this.getRelationshipFields(field.fields));
-      }
-    }
-    return result;
-  }
-  getUploadFields(fields) {
-    const result = [];
-    for (const field of fields) {
-      if (field.type === "upload") {
-        result.push(field);
-      } else if ("fields" in field && field.fields) {
-        result.push(...this.getUploadFields(field.fields));
-      }
-    }
-    return result;
-  }
-};
-
-// src/auth/rls/tenant.ts
-var DEFAULT_RLS_CONFIG = {
-  tenantEnabled: true,
-  tenantField: "tenantId",
-  ownershipRules: {
-    posts: {
-      ownerField: "authorId",
-      bypassRoles: ["super_admin", "admin", "editor"]
-    },
-    pages: {
-      ownerField: "authorId",
-      bypassRoles: ["super_admin", "admin", "editor"]
-    },
-    media: {
-      ownerField: "uploadedBy",
-      bypassRoles: ["super_admin", "admin", "editor"]
-    },
-    orders: {
-      ownerField: "customerId",
-      bypassRoles: ["super_admin", "admin", "editor"]
-    },
-    customers: { ownerField: "id", bypassRoles: ["super_admin", "admin"] },
-    navigation: { ownerField: "id", bypassRoles: ["super_admin", "admin"] }
-  }
-};
-function addTenantFilter(query, context, config = DEFAULT_RLS_CONFIG) {
-  if (!config.tenantEnabled || context.isSuperAdmin) {
-    return query;
-  }
-  return {
-    ...query,
-    where: {
-      ...query.where,
-      [config.tenantField]: context.tenantId
-    }
-  };
-}
-function applyOwnershipRule(query, collection, context, config = DEFAULT_RLS_CONFIG) {
-  const rule = config.ownershipRules[collection];
-  if (!rule) {
-    return query;
-  }
-  if (rule.bypassRoles && chunkNKPKR5BW_cjs.hasAnyRole({ role: context.role }, rule.bypassRoles)) {
-    return query;
-  }
-  if (rule.ownerField === "id" && context.userId) {
-    return {
-      ...query,
-      where: {
-        ...query.where,
-        id: context.userId
-      }
-    };
-  }
-  if (rule.ownerField && context.userId) {
-    return {
-      ...query,
-      where: {
-        ...query.where,
-        [rule.ownerField]: context.userId
-      }
-    };
-  }
-  return query;
-}
-function applyRLS(query, collection, context, config = DEFAULT_RLS_CONFIG) {
-  let result = query;
-  result = addTenantFilter(result, context, config);
-  result = applyOwnershipRule(result, collection, context, config);
-  return result;
-}
-function canAccessDocument(doc, collection, context, config = DEFAULT_RLS_CONFIG) {
-  if (context.isSuperAdmin) {
-    return true;
-  }
-  if (config.tenantEnabled && doc[config.tenantField] !== context.tenantId) {
-    return false;
-  }
-  const rule = config.ownershipRules[collection];
-  if (!rule) {
-    return true;
-  }
-  if (rule.bypassRoles && chunkNKPKR5BW_cjs.hasAnyRole({ role: context.role }, rule.bypassRoles)) {
-    return true;
-  }
-  if (rule.ownerField === "id") {
-    return doc.id === context.userId;
-  }
-  if (rule.ownerField) {
-    return doc[rule.ownerField] === context.userId;
-  }
-  return true;
-}
-
-exports.AbstractBaseAdapter = AbstractBaseAdapter;
-exports.DEFAULT_RLS_CONFIG = DEFAULT_RLS_CONFIG;
-exports.applyRLS = applyRLS;
-exports.canAccessDocument = canAccessDocument;
-//# sourceMappingURL=chunk-GUUB5EAG.cjs.map
-//# sourceMappingURL=chunk-GUUB5EAG.cjs.map

package/dist/chunk-GUUB5EAG.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/database/base.ts","../src/auth/rls/tenant.ts"],"names":["hasAnyRole"],"mappings":";;;;;AAqBO,IAAe,sBAAf,MAA0D;AAAA,EACrD,WAAA,uBAAiD,GAAA,EAAI;AAAA,EACrD,OAAA,uBAAyC,GAAA,EAAI;AAAA,EAC7C,SAAA,GAAY,KAAA;AAAA,EACZ,aAAA;AAAA,EAKV,iBAAiB,OAAA,EAA0C;AACzD,IAAA,IAAA,CAAK,aAAA,GAAgB,OAAA;AAAA,EACvB;AAAA,EAEA,gBAAA,GAA8C;AAC5C,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EAEA,MAAM,IAAA,CAAK,WAAA,EAAiC,OAAA,GAA0B,EAAC,EAAkB;AACvF,IAAA,KAAA,MAAW,UAAU,WAAA,EAAa;AAChC,MAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAAA,IAC1C;AACA,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAAA,IACtC;AACA,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAyBU,cAAc,IAAA,EAAgC;AACtD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA;AAC5C,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC7D;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEU,iBAAA,CAAkB,KAAA,GAA6B,EAAC,EAAG,QAAA,EAAwC;AACnG,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,QAAA,EAAU,EAAE,MAAA,EAAQ,QAAA;AAAS,OAC/B;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEU,aAAa,IAAA,EAAsB;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAAA,EAC/B;AAAA,EAEU,WAAA,CAAY,MAA2B,UAAA,EAAmD;AAClG,IAAA,MAAM,QAAA,GAAgC,EAAE,GAAG,IAAA,EAAK;AAEhD,IAAA,IAAI,WAAW,UAAA,EAAY;AACzB,MAAA,QAAA,CAAS,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAC5C,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,QAAA,CAAS,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAC9C;AAAA,IACF;AAGA,IAAA,IAAI,UAAA,CAAW,IAAA,IAAQ,QAAA,CAAS,QAAA,EAAU;AAI1C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEU,oBAAA,CACR,IAAA,EACA,MAAA,EACA,KAAA,EACqB;AAErB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,UAAU,IAAA,EAA6D;AAC/E,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAE,KAAA,EAAO,WAAA,EAAa,WAAW,MAAA,EAAO;AAC1D,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACxB,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,MAAM,CAAC,CAAA,EAAG,WAAW,MAAA,EAAO;AAAA,IACnD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,KAAA,EAAM;AAAA,EACzC;AAAA,EAEU,mBAAA,CAAoB,IAAA,EAAc,KAAA,EAAe,SAAA,EAAmB;AAC5E,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,CAAK,SAAA,GAAY,KAAK,CAAA;AAC9C,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,KAAA;AAAA,MACA,UAAA;AAAA,MACA,IAAA;AAAA,MACA,aAAA,EAAA,CAAgB,IAAA,GAAO,CAAA,IAAK,KAAA,GAAQ,CAAA;AAAA,MACpC,aAAa,IAAA,GAAO,CAAA;AAAA,MACpB,aAAa,IAAA,GAAO,UAAA;AAAA,MACpB,QAAA,EAAU,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO,CAAA,GAAI,IAAA;AAAA,MAChC,QAAA,EAAU,IAAA,GAAO,UAAA,GAAa,IAAA,GAAO,CAAA,GAAI;AAAA,KAC3C;AAAA,EACF;AAAA,EAEU,YAAA,CAAa,MAA2B,MAAA,EAAwC;AACxF,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,GAAG,OAAO,IAAA;AAC3C,IAAA,MAAM,SAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,MAAA,CAAO,KAAK,CAAA,GAAI,IAAA,CAAK,KAAK,CAAA;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,MAAA,CAAO,IAAI,IAAI,IAAA,CAAK,EAAA;AACpB,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,oBAAoB,KAAA,EAA0C;AACtE,IAAA,OAAO,MAAM,IAAA,KAAS,cAAA;AAAA,EACxB;AAAA,EAEU,cAAc,KAAA,EAAoC;AAC1D,IAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AAAA,EACxB;AAAA,EAEU,sBAAsB,MAAA,EAAsC;AACpE,IAAA,MAAM,SAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,CAAM,SAAS,cAAA,EAAgB;AACjC,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAA,MAAA,IAAW,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC5C,QAAA,MAAA,CAAO,KAAK,GAAG,IAAA,CAAK,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,MACzD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,gBAAgB,MAAA,EAAgC;AACxD,IAAA,MAAM,SAAwB,EAAC;AAC/B,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,CAAM,SAAS,QAAA,EAAU;AAC3B,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAA,MAAA,IAAW,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC5C,QAAA,MAAA,CAAO,KAAK,GAAG,IAAA,CAAK,eAAA,CAAgB,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,MACnD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;ACnKO,IAAM,kBAAA,GAAgC;AAAA,EAC3C,aAAA,EAAe,IAAA;AAAA,EACf,WAAA,EAAa,UAAA;AAAA,EACb,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,UAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,UAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,YAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,UAAA,EAAY,YAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,SAAA,EAAW,EAAE,UAAA,EAAY,IAAA,EAAM,aAAa,CAAC,aAAA,EAAe,OAAO,CAAA,EAAE;AAAA,IACrE,UAAA,EAAY,EAAE,UAAA,EAAY,IAAA,EAAM,aAAa,CAAC,aAAA,EAAe,OAAO,CAAA;AAAE;AAE1E;AA0BO,SAAS,eAAA,CACd,KAAA,EACA,OAAA,EACA,MAAA,GAAoB,kBAAA,EACjB;AACH,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,IAAiB,OAAA,CAAQ,YAAA,EAAc;AACjD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO;AAAA,MACL,GAAG,KAAA,CAAM,KAAA;AAAA,MACT,CAAC,MAAA,CAAO,WAAW,GAAG,OAAA,CAAQ;AAAA;AAChC,GACF;AACF;AAEO,SAAS,kBAAA,CACd,KAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACC;AACrB,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AAE7C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IACE,IAAA,CAAK,WAAA,IACLA,4BAAA,CAAW,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAK,EAAe,IAAA,CAAK,WAAW,CAAA,EAC/D;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,CAAK,UAAA,KAAe,IAAA,IAAQ,OAAA,CAAQ,MAAA,EAAQ;AAC9C,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,KAAA,CAAM,KAAA;AAAA,QACT,IAAI,OAAA,CAAQ;AAAA;AACd,KACF;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,EAAQ;AACrC,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,KAAA,CAAM,KAAA;AAAA,QACT,CAAC,IAAA,CAAK,UAAU,GAAG,OAAA,CAAQ;AAAA;AAC7B,KACF;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,QAAA,CACd,KAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACjB;AACH,EAAA,IAAI,MAAA,GAAS,KAAA;AAEb,EAAA,MAAA,GAAS,eAAA,CAAgB,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAEhD,EAAA,MAAA,GAAS,kBAAA,CAAmB,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,MAAM,CAAA;AAE/D,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,iBAAA,CACd,GAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACX;AACT,EAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,aAAA,IAAiB,GAAA,CAAI,OAAO,WAAW,CAAA,KAAM,QAAQ,QAAA,EAAU;AACxE,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AAE7C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IACE,IAAA,CAAK,WAAA,IACLA,4BAAA,CAAW,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAK,EAAe,IAAA,CAAK,WAAW,CAAA,EAC/D;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,CAAK,eAAe,IAAA,EAAM;AAC5B,IAAA,OAAO,GAAA,CAAI,OAAO,OAAA,CAAQ,MAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,KAAK,UAAA,EAAY;AACnB,IAAA,OAAO,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,KAAM,OAAA,CAAQ,MAAA;AAAA,EAC1C;AAEA,EAAA,OAAO,IAAA;AACT","file":"chunk-GUUB5EAG.cjs","sourcesContent":["import type {\n  BaseAdapter,\n  CollectionConfig,\n  GlobalConfig,\n  FindArgs,\n  FindByIDArgs,\n  CreateArgs,\n  UpdateArgs,\n  DeleteArgs,\n  FindResult,\n  VersionRecord,\n  CreateVersionArgs,\n  FindVersionsArgs,\n} from '../registry/types.js';\nimport type { Field, RelationshipField, UploadField } from '../fields/types.js';\nimport type { TenantContext } from '../auth/rls/tenant.js';\n\n// ============================================================================\n// Abstract Base Adapter\n// ============================================================================\n\nexport abstract class AbstractBaseAdapter implements BaseAdapter {\n  protected collections: Map<string, CollectionConfig> = new Map();\n  protected globals: Map<string, GlobalConfig> = new Map();\n  protected connected = false;\n  protected tenantContext?: TenantContext;\n\n  abstract connect(): Promise<void>;\n  abstract disconnect(): Promise<void>;\n\n  setTenantContext(context: TenantContext | undefined): void {\n    this.tenantContext = context;\n  }\n\n  getTenantContext(): TenantContext | undefined {\n    return this.tenantContext;\n  }\n\n  async init(collections: CollectionConfig[], globals: GlobalConfig[] = []): Promise<void> {\n    for (const config of collections) {\n      this.collections.set(config.slug, config);\n    }\n    for (const config of globals) {\n      this.globals.set(config.slug, config);\n    }\n    await this.connect();\n  }\n\n  abstract find<T>(args: FindArgs): Promise<FindResult<T>>;\n  abstract findByID<T>(args: FindByIDArgs): Promise<T | null>;\n  abstract create<T>(args: CreateArgs): Promise<T>;\n  abstract update<T>(args: UpdateArgs): Promise<T>;\n  abstract delete<T>(args: DeleteArgs): Promise<T>;\n  abstract count(args: { collection: string; where?: Record<string, any>; tenantID?: string }): Promise<number>;\n\n  abstract findOne(args: { collection: string; where: Record<string, any>; tenantID?: string; draft?: boolean }): Promise<any>;\n\n  abstract findVersions(args: FindVersionsArgs): Promise<FindResult<VersionRecord>>;\n  abstract findVersionByID(args: { collection: string; versionId: string; tenantID?: string }): Promise<VersionRecord | null>;\n  abstract createVersion<T = Record<string, any>>(args: CreateVersionArgs<T>): Promise<VersionRecord<T>>;\n  abstract updateLatestVersion<T = Record<string, any>>(args: CreateVersionArgs<T>): Promise<VersionRecord<T>>;\n  abstract deleteVersions(args: { collection: string; documentId: string; keepLatest?: number; tenantID?: string }): Promise<void>;\n\n  async migrate?(): Promise<void>;\n  async rollback?(): Promise<void>;\n  async transaction?<T>(fn: (tx: any) => Promise<T>): Promise<T>;\n\n  // ========================================================================\n  // Utility Methods\n  // ========================================================================\n\n  protected getCollection(slug: string): CollectionConfig {\n    const collection = this.collections.get(slug);\n    if (!collection) {\n      throw new Error(`Collection \"${slug}\" not found in adapter`);\n    }\n    return collection;\n  }\n\n  protected applyTenantFilter(where: Record<string, any> = {}, tenantID?: string): Record<string, any> {\n    if (tenantID) {\n      return {\n        ...where,\n        tenantID: { equals: tenantID },\n      };\n    }\n    return where;\n  }\n\n  protected getTableName(slug: string): string {\n    return slug.replace(/-/g, '_');\n  }\n\n  protected prepareData(data: Record<string, any>, collection: CollectionConfig): Record<string, any> {\n    const prepared: Record<string, any> = { ...data };\n    \n    if (collection.timestamps) {\n      prepared.updatedAt = new Date().toISOString();\n      if (!prepared.createdAt) {\n        prepared.createdAt = new Date().toISOString();\n      }\n    }\n\n    // Handle password hashing\n    if (collection.auth && prepared.password) {\n      // Password should be hashed before this point via hooks\n    }\n\n    return prepared;\n  }\n\n  protected processRelationships(\n    data: Record<string, any>,\n    fields: Field[],\n    depth: number\n  ): Record<string, any> {\n    // This is a base implementation - specific adapters override\n    return data;\n  }\n\n  protected parseSort(sort?: string): { field: string; direction: 'asc' | 'desc' } {\n    if (!sort) return { field: 'createdAt', direction: 'desc' };\n    if (sort.startsWith('-')) {\n      return { field: sort.slice(1), direction: 'desc' };\n    }\n    return { field: sort, direction: 'asc' };\n  }\n\n  protected calculatePagination(page: number, limit: number, totalDocs: number) {\n    const totalPages = Math.ceil(totalDocs / limit);\n    return {\n      totalDocs,\n      limit,\n      totalPages,\n      page,\n      pagingCounter: (page - 1) * limit + 1,\n      hasPrevPage: page > 1,\n      hasNextPage: page < totalPages,\n      prevPage: page > 1 ? page - 1 : null,\n      nextPage: page < totalPages ? page + 1 : null,\n    };\n  }\n\n  protected selectFields(data: Record<string, any>, select?: string[]): Record<string, any> {\n    if (!select || select.length === 0) return data;\n    const result: Record<string, any> = {};\n    for (const field of select) {\n      if (field in data) {\n        result[field] = data[field];\n      }\n    }\n    result['id'] = data.id;\n    return result;\n  }\n\n  protected isRelationshipField(field: Field): field is RelationshipField {\n    return field.type === 'relationship';\n  }\n\n  protected isUploadField(field: Field): field is UploadField {\n    return field.type === 'upload';\n  }\n\n  protected getRelationshipFields(fields: Field[]): RelationshipField[] {\n    const result: RelationshipField[] = [];\n    for (const field of fields) {\n      if (field.type === 'relationship') {\n        result.push(field);\n      } else if ('fields' in field && field.fields) {\n        result.push(...this.getRelationshipFields(field.fields));\n      }\n    }\n    return result;\n  }\n\n  protected getUploadFields(fields: Field[]): UploadField[] {\n    const result: UploadField[] = [];\n    for (const field of fields) {\n      if (field.type === 'upload') {\n        result.push(field);\n      } else if ('fields' in field && field.fields) {\n        result.push(...this.getUploadFields(field.fields));\n      }\n    }\n    return result;\n  }\n}\n","import type { AuthUser } from \"../types.js\";\nimport { hasAnyRole } from \"../rbac/checker.js\";\n\nexport interface TenantContext {\n  tenantId: string;\n  userId: string;\n  role?: string;\n  roles?: string[];\n  permissions?: string[];\n  isSuperAdmin?: boolean;\n}\n\nexport interface OwnershipRule {\n  ownerField: string;\n  bypassRoles?: string[];\n}\n\nexport interface RLSConfig {\n  tenantEnabled: boolean;\n  tenantField: string;\n  ownershipRules: Record<string, OwnershipRule>;\n}\n\nexport const DEFAULT_RLS_CONFIG: RLSConfig = {\n  tenantEnabled: true,\n  tenantField: \"tenantId\",\n  ownershipRules: {\n    posts: {\n      ownerField: \"authorId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    pages: {\n      ownerField: \"authorId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    media: {\n      ownerField: \"uploadedBy\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    orders: {\n      ownerField: \"customerId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    customers: { ownerField: \"id\", bypassRoles: [\"super_admin\", \"admin\"] },\n    navigation: { ownerField: \"id\", bypassRoles: [\"super_admin\", \"admin\"] },\n  },\n};\n\nexport function createTenantContext(user: AuthUser | undefined): TenantContext {\n  if (!user) {\n    return {\n      tenantId: \"public\",\n      userId: \"anonymous\",\n      role: \"guest\",\n      roles: [\"guest\"],\n      permissions: [],\n      isSuperAdmin: false,\n    };\n  }\n\n  const isSuperAdmin = user.role === \"super_admin\";\n\n  return {\n    tenantId: user.tenantId || \"default\",\n    userId: user.id,\n    role: user.role,\n    roles: [user.role],\n    permissions: [],\n    isSuperAdmin,\n  };\n}\n\nexport function addTenantFilter<T extends Record<string, any>>(\n  query: T,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): T {\n  if (!config.tenantEnabled || context.isSuperAdmin) {\n    return query;\n  }\n\n  return {\n    ...query,\n    where: {\n      ...query.where,\n      [config.tenantField]: context.tenantId,\n    },\n  };\n}\n\nexport function applyOwnershipRule(\n  query: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any> {\n  const rule = config.ownershipRules[collection];\n\n  if (!rule) {\n    return query;\n  }\n\n  if (\n    rule.bypassRoles &&\n    hasAnyRole({ role: context.role } as AuthUser, rule.bypassRoles)\n  ) {\n    return query;\n  }\n\n  if (rule.ownerField === \"id\" && context.userId) {\n    return {\n      ...query,\n      where: {\n        ...query.where,\n        id: context.userId,\n      },\n    };\n  }\n\n  if (rule.ownerField && context.userId) {\n    return {\n      ...query,\n      where: {\n        ...query.where,\n        [rule.ownerField]: context.userId,\n      },\n    };\n  }\n\n  return query;\n}\n\nexport function applyRLS<T extends Record<string, any>>(\n  query: T,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): T {\n  let result = query;\n\n  result = addTenantFilter(result, context, config) as T;\n\n  result = applyOwnershipRule(result, collection, context, config) as T;\n\n  return result;\n}\n\nexport function canAccessDocument(\n  doc: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): boolean {\n  if (context.isSuperAdmin) {\n    return true;\n  }\n\n  if (config.tenantEnabled && doc[config.tenantField] !== context.tenantId) {\n    return false;\n  }\n\n  const rule = config.ownershipRules[collection];\n\n  if (!rule) {\n    return true;\n  }\n\n  if (\n    rule.bypassRoles &&\n    hasAnyRole({ role: context.role } as AuthUser, rule.bypassRoles)\n  ) {\n    return true;\n  }\n\n  if (rule.ownerField === \"id\") {\n    return doc.id === context.userId;\n  }\n\n  if (rule.ownerField) {\n    return doc[rule.ownerField] === context.userId;\n  }\n\n  return true;\n}\n\nexport function filterDocumentsByRLS(\n  docs: Record<string, any>[],\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any>[] {\n  if (context.isSuperAdmin) {\n    return docs;\n  }\n\n  return docs.filter((doc) =>\n    canAccessDocument(doc, collection, context, config),\n  );\n}\n\nexport function sanitizeDocumentByRLS(\n  doc: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any> | null {\n  if (!canAccessDocument(doc, collection, context, config)) {\n    return null;\n  }\n\n  if (config.tenantEnabled && !context.isSuperAdmin) {\n    const { [config.tenantField]: _, ...rest } = doc;\n    return rest;\n  }\n\n  return doc;\n}\n\nexport class RLSPolicy {\n  private config: RLSConfig;\n\n  constructor(config: RLSConfig = DEFAULT_RLS_CONFIG) {\n    this.config = config;\n  }\n\n  setConfig(config: RLSConfig): void {\n    this.config = config;\n  }\n\n  getConfig(): RLSConfig {\n    return this.config;\n  }\n\n  addOwnershipRule(collection: string, rule: OwnershipRule): void {\n    this.config.ownershipRules[collection] = rule;\n  }\n\n  removeOwnershipRule(collection: string): void {\n    delete this.config.ownershipRules[collection];\n  }\n\n  createContext(user: AuthUser | undefined): TenantContext {\n    return createTenantContext(user);\n  }\n\n  apply<T extends Record<string, any>>(\n    query: T,\n    collection: string,\n    context: TenantContext,\n  ): T {\n    return applyRLS(query, collection, context, this.config);\n  }\n\n  canAccess(\n    doc: Record<string, any>,\n    collection: string,\n    context: TenantContext,\n  ): boolean {\n    return canAccessDocument(doc, collection, context, this.config);\n  }\n\n  filter(\n    docs: Record<string, any>[],\n    collection: string,\n    context: TenantContext,\n  ): Record<string, any>[] {\n    return filterDocumentsByRLS(docs, collection, context, this.config);\n  }\n\n  sanitize(\n    doc: Record<string, any>,\n    collection: string,\n    context: TenantContext,\n  ): Record<string, any> | null {\n    return sanitizeDocumentByRLS(doc, collection, context, this.config);\n  }\n}\n"]}

package/dist/chunk-GXFOGU7N.cjs

@@ -1,359 +0,0 @@
-'use strict';
-
-var bcrypt = require('bcryptjs');
-var crypto = require('crypto');
-
-function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
-
-var bcrypt__default = /*#__PURE__*/_interopDefault(bcrypt);
-
-// src/database/mongodb/mongo-auth-adapter.ts
-var MongoDBAuthAdapter = class {
-  db;
-  prefix;
-  sessionTTL;
-  refreshTokenTTL;
-  indexesEnsured = false;
-  constructor(options) {
-    this.db = options.db;
-    this.prefix = options.collectionPrefix || "";
-    this.sessionTTL = options.sessionTTL || 86400;
-    this.refreshTokenTTL = options.refreshTokenTTL || 604800;
-  }
-  col(name) {
-    return this.db.collection(`${this.prefix}${name}`);
-  }
-  async connect() {
-    if (!this.indexesEnsured) {
-      await this.ensureIndexes();
-    }
-  }
-  async disconnect() {
-  }
-  async ensureIndexes() {
-    await this.col("users").createIndex({ email: 1 }, { unique: true });
-    await this.col("users").createIndex({ tenantId: 1 });
-    await this.col("users").createIndex({ role: 1 });
-    await this.col("sessions").createIndex({ token: 1 }, { unique: true });
-    await this.col("sessions").createIndex({ refreshToken: 1 });
-    await this.col("sessions").createIndex({ userId: 1 });
-    await this.col("sessions").createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
-    await this.col("audit_logs").createIndex({ timestamp: -1 });
-    await this.col("audit_logs").createIndex({ userId: 1 });
-    await this.col("audit_logs").createIndex({ action: 1 });
-    await this.col("audit_logs").createIndex({ resource: 1 });
-    await this.col("password_history").createIndex({ userId: 1, createdAt: -1 });
-    await this.col("lockouts").createIndex({ userId: 1 }, { unique: true });
-    await this.col("lockouts").createIndex({ lockedUntil: 1 });
-    this.indexesEnsured = true;
-  }
-  async createUser(data) {
-    const id = crypto.randomUUID();
-    const now = /* @__PURE__ */ new Date();
-    const passwordHash = await this.hashPassword(data.password);
-    const user = {
-      _id: id,
-      name: data.name || null,
-      email: data.email.toLowerCase(),
-      passwordHash,
-      role: data.role || "customer",
-      avatar: data.avatar || null,
-      tenantId: data.tenantId || null,
-      emailVerified: false,
-      locked: false,
-      lastLogin: null,
-      failedLoginAttempts: 0,
-      createdAt: now,
-      updatedAt: now
-    };
-    await this.col("users").insertOne(user);
-    return this.docToAuthUser(user);
-  }
-  async findUserByEmail(email) {
-    const doc = await this.col("users").findOne({ email: email.toLowerCase() });
-    return doc ? this.docToAuthUser(doc) : null;
-  }
-  async findUserById(id) {
-    const doc = await this.col("users").findOne({ _id: id });
-    return doc ? this.docToAuthUser(doc) : null;
-  }
-  async updateUser(id, data) {
-    const setData = { updatedAt: /* @__PURE__ */ new Date() };
-    if (data.name !== void 0) setData.name = data.name;
-    if (data.email !== void 0) setData.email = data.email;
-    if (data.passwordHash !== void 0) setData.passwordHash = data.passwordHash;
-    if (data.role !== void 0) setData.role = data.role;
-    if (data.avatar !== void 0) setData.avatar = data.avatar;
-    if (data.tenantId !== void 0) setData.tenantId = data.tenantId;
-    if (data.emailVerified !== void 0) setData.emailVerified = data.emailVerified;
-    if (data.locked !== void 0) setData.locked = data.locked;
-    if (data.lastLogin !== void 0) setData.lastLogin = data.lastLogin ? new Date(data.lastLogin) : null;
-    if (data.failedLoginAttempts !== void 0) setData.failedLoginAttempts = data.failedLoginAttempts;
-    const result = await this.col("users").findOneAndUpdate(
-      { _id: id },
-      { $set: setData },
-      { returnDocument: "after" }
-    );
-    return result ? this.docToAuthUser(result) : null;
-  }
-  async deleteUser(id) {
-    const result = await this.col("users").deleteOne({ _id: id });
-    return result.deletedCount > 0;
-  }
-  async verifyPassword(email, password) {
-    const user = await this.findUserByEmail(email);
-    if (!user) return null;
-    const doc = await this.col("users").findOne(
-      { email: email.toLowerCase() },
-      { projection: { passwordHash: 1 } }
-    );
-    if (!doc?.passwordHash) return null;
-    const valid = await bcrypt__default.default.compare(password, doc.passwordHash);
-    return valid ? user : null;
-  }
-  async hashPassword(password) {
-    return bcrypt__default.default.hash(password, 12);
-  }
-  async createSession(userId, data) {
-    const id = crypto.randomUUID();
-    const token = crypto.randomBytes(32).toString("base64url");
-    const refreshToken = crypto.randomBytes(32).toString("base64url");
-    const now = /* @__PURE__ */ new Date();
-    const expiresAt = new Date(now.getTime() + this.sessionTTL * 1e3);
-    const session = {
-      _id: id,
-      userId,
-      token,
-      refreshToken,
-      ipAddress: data?.ipAddress || null,
-      userAgent: data?.userAgent || null,
-      expiresAt,
-      createdAt: now
-    };
-    await this.col("sessions").insertOne(session);
-    return this.docToSession(session);
-  }
-  async findSessionByToken(token) {
-    const doc = await this.col("sessions").findOne({
-      token,
-      expiresAt: { $gt: /* @__PURE__ */ new Date() }
-    });
-    return doc ? this.docToSession(doc) : null;
-  }
-  async findSessionByRefreshToken(refreshToken) {
-    const doc = await this.col("sessions").findOne({
-      refreshToken,
-      expiresAt: { $gt: /* @__PURE__ */ new Date() }
-    });
-    return doc ? this.docToSession(doc) : null;
-  }
-  async deleteSession(sessionId) {
-    const result = await this.col("sessions").deleteOne({ _id: sessionId });
-    return result.deletedCount > 0;
-  }
-  async deleteUserSessions(userId) {
-    const result = await this.col("sessions").deleteMany({ userId });
-    return result.deletedCount;
-  }
-  async hasAnyUsers() {
-    const count = await this.col("users").countDocuments();
-    return count > 0;
-  }
-  async addPasswordToHistory(userId, passwordHash) {
-    await this.col("password_history").insertOne({
-      userId,
-      passwordHash,
-      createdAt: /* @__PURE__ */ new Date()
-    });
-  }
-  async getPasswordHistory(userId, count = 5) {
-    const docs = await this.col("password_history").find({ userId }).sort({ createdAt: -1 }).limit(count).toArray();
-    return docs.map((d) => d.passwordHash);
-  }
-  async isPasswordInHistory(password, userId, historyCount = 5) {
-    const history = await this.getPasswordHistory(userId, historyCount);
-    for (const hash of history) {
-      if (await bcrypt__default.default.compare(password, hash)) {
-        return true;
-      }
-    }
-    return false;
-  }
-  async findAuditLogs(filter) {
-    const {
-      limit = 50,
-      offset = 0,
-      userId,
-      action,
-      resource,
-      resourceId,
-      success,
-      startDate,
-      endDate
-    } = filter;
-    const query = {};
-    if (userId) query.userId = userId;
-    if (action) {
-      if (Array.isArray(action)) {
-        query.action = { $in: action };
-      } else {
-        query.action = action;
-      }
-    }
-    if (resource) query.resource = resource;
-    if (resourceId) query.resourceId = resourceId;
-    if (success !== void 0) query.success = success;
-    if (startDate || endDate) {
-      query.timestamp = {};
-      if (startDate) query.timestamp.$gte = startDate;
-      if (endDate) query.timestamp.$lte = endDate;
-    }
-    const total = await this.col("audit_logs").countDocuments(query);
-    const docs = await this.col("audit_logs").find(query).sort({ timestamp: -1 }).skip(offset).limit(limit).toArray();
-    return {
-      logs: docs.map((doc) => ({
-        id: doc._id,
-        timestamp: doc.timestamp,
-        action: doc.action,
-        userId: doc.userId || void 0,
-        userEmail: doc.userEmail || void 0,
-        role: doc.role || void 0,
-        resource: doc.resource,
-        resourceId: doc.resourceId || void 0,
-        changes: doc.changes || void 0,
-        ipAddress: doc.ipAddress || void 0,
-        userAgent: doc.userAgent || void 0,
-        success: doc.success,
-        error: doc.error || void 0,
-        metadata: doc.metadata || void 0
-      })),
-      total
-    };
-  }
-  async createAuditLog(data) {
-    const id = crypto.randomUUID();
-    const timestamp = /* @__PURE__ */ new Date();
-    await this.col("audit_logs").insertOne({
-      _id: id,
-      action: data.action,
-      userId: data.userId || null,
-      userEmail: data.userEmail || null,
-      role: data.role || null,
-      resource: data.resource,
-      resourceId: data.resourceId || null,
-      changes: data.changes || null,
-      ipAddress: data.ipAddress || null,
-      userAgent: data.userAgent || null,
-      success: data.success,
-      error: data.error || null,
-      metadata: data.metadata || null,
-      timestamp
-    });
-    return {
-      ...data,
-      id,
-      timestamp
-    };
-  }
-  docToAuthUser(doc) {
-    return {
-      id: doc._id,
-      name: doc.name || void 0,
-      email: doc.email,
-      passwordHash: doc.passwordHash || void 0,
-      role: doc.role,
-      tenantId: doc.tenantId || void 0,
-      avatar: doc.avatar || void 0,
-      emailVerified: doc.emailVerified || false,
-      locked: doc.locked || false,
-      lastLogin: doc.lastLogin?.toISOString?.() || doc.lastLogin || void 0,
-      failedLoginAttempts: doc.failedLoginAttempts || 0,
-      createdAt: doc.createdAt?.toISOString?.() || doc.createdAt,
-      updatedAt: doc.updatedAt?.toISOString?.() || doc.updatedAt
-    };
-  }
-  docToSession(doc) {
-    return {
-      id: doc._id,
-      userId: doc.userId,
-      token: doc.token,
-      refreshToken: doc.refreshToken || void 0,
-      expiresAt: doc.expiresAt?.toISOString?.() || doc.expiresAt,
-      createdAt: doc.createdAt?.toISOString?.() || doc.createdAt,
-      ipAddress: doc.ipAddress || void 0,
-      userAgent: doc.userAgent || void 0
-    };
-  }
-  async createEmailVerificationToken(userId) {
-    const token = crypto.randomBytes(32).toString("hex");
-    const expiresAt = new Date(Date.now() + 24 * 60 * 60 * 1e3);
-    await this.db.collection("email_verifications").insertOne({
-      userId: new (await import('mongodb')).ObjectId(userId),
-      token,
-      expiresAt,
-      createdAt: /* @__PURE__ */ new Date()
-    });
-    return { token, expiresAt };
-  }
-  async verifyEmailToken(token) {
-    const verification = await this.db.collection("email_verifications").findOne({ token });
-    if (!verification) {
-      return { success: false, error: "Invalid verification token" };
-    }
-    if (verification.expiresAt < /* @__PURE__ */ new Date()) {
-      return { success: false, error: "Verification token has expired" };
-    }
-    await this.db.collection("users").updateOne(
-      { _id: verification.userId },
-      { $set: { emailVerified: true } }
-    );
-    await this.db.collection("email_verifications").deleteOne({ _id: verification._id });
-    return { success: true, userId: verification.userId.toString() };
-  }
-  async createPasswordResetToken(email) {
-    const user = await this.findUserByEmail(email);
-    if (!user) {
-      return { token: "", expiresAt: /* @__PURE__ */ new Date(), error: "User not found" };
-    }
-    const token = crypto.randomBytes(32).toString("hex");
-    const expiresAt = new Date(Date.now() + 60 * 60 * 1e3);
-    await this.db.collection("password_resets").insertOne({
-      userId: new (await import('mongodb')).ObjectId(user.id),
-      token,
-      expiresAt,
-      createdAt: /* @__PURE__ */ new Date()
-    });
-    return { token, expiresAt };
-  }
-  async resetPasswordWithToken(token, newPassword) {
-    const reset = await this.db.collection("password_resets").findOne({ token });
-    if (!reset) {
-      return { success: false, error: "Invalid reset token" };
-    }
-    if (reset.expiresAt < /* @__PURE__ */ new Date()) {
-      return { success: false, error: "Reset token has expired" };
-    }
-    if (reset.usedAt) {
-      return { success: false, error: "Reset token has already been used" };
-    }
-    const passwordHash = await this.hashPassword(newPassword);
-    await this.db.collection("users").updateOne(
-      { _id: reset.userId },
-      { $set: { passwordHash, updatedAt: /* @__PURE__ */ new Date() } }
-    );
-    await this.db.collection("password_resets").updateOne(
-      { _id: reset._id },
-      { $set: { usedAt: /* @__PURE__ */ new Date() } }
-    );
-    await this.db.collection("sessions").deleteMany({ userId: reset.userId });
-    return { success: true };
-  }
-};
-function createMongoDBAuthAdapter(options) {
-  return new MongoDBAuthAdapter(options);
-}
-
-exports.MongoDBAuthAdapter = MongoDBAuthAdapter;
-exports.createMongoDBAuthAdapter = createMongoDBAuthAdapter;
-//# sourceMappingURL=chunk-GXFOGU7N.cjs.map
-//# sourceMappingURL=chunk-GXFOGU7N.cjs.map