@mohasinac/appkit 2.1.3 → 2.3.0

package/src/security/rbac/middleware.ts

@@ -1,103 +0,0 @@
-// appkit/src/security/rbac/middleware.ts
-import type { RbacConfig, Permission } from "./types";
-import { resolvePermissions, hasPermission } from "./resolver";
-
-type NextRequest = {
-  nextUrl: { pathname: string };
-  headers: { get: (name: string) => string | null };
-  cookies: { get: (name: string) => { value: string } | undefined };
-  url: string;
-};
-
-type NextResponse = {
-  redirect: (url: URL | string) => NextResponse;
-  next: () => NextResponse;
-};
-
-type GetSessionUser = (
-  request: NextRequest,
-) => Promise<{ uid: string; roles: string[] } | null>;
-
-function matchesRoute(pathname: string, pattern: string): boolean {
-  // Convert route pattern like "/admin/:path*" to a testable form
-  const escaped = pattern
-    .replace(/\[.*?\]/g, "[^/]+")
-    .replace(/:\w+\*/g, ".*")
-    .replace(/:\w+/g, "[^/]+");
-  return new RegExp(`^${escaped}(/|$)`).test(pathname);
-}
-
-/**
- * Factory that creates a Next.js middleware function for route-level RBAC.
- *
- * @example
- * // letitrip: middleware.ts
- * import { createRbacMiddleware } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * import { ADMIN_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/admin";
- * import { SELLER_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/seller";
- * import { getSessionUser } from "@/lib/auth/session";
- *
- * export const middleware = createRbacMiddleware(
- *   RBAC_CONFIG,
- *   { ...ADMIN_PAGE_PERMISSIONS, ...SELLER_PAGE_PERMISSIONS },
- *   getSessionUser,
- *   { loginPath: "/auth/login", unauthorizedPath: "/unauthorized" }
- * );
- */
-export function createRbacMiddleware(
-  config: RbacConfig,
-  pageMap: Record<string, Permission>,
-  getSessionUser: GetSessionUser,
-  options: {
-    loginPath?: string;
-    unauthorizedPath?: string;
-    NextURL?: new (url: string, base: string) => URL;
-    NextResponse?: NextResponse;
-  } = {},
-) {
-  const loginPath = options.loginPath ?? "/auth/login";
-  const unauthorizedPath = options.unauthorizedPath ?? "/unauthorized";
-
-  return async function rbacMiddleware(
-    request: NextRequest,
-    NextResponseLib: {
-      redirect: (url: URL | string) => NextResponse;
-      next: () => NextResponse;
-    },
-  ): Promise<NextResponse> {
-    const { pathname } = request.nextUrl;
-
-    // Find the most specific matching route (longest match wins)
-    const entry = Object.entries(pageMap)
-      .filter(([route]) => matchesRoute(pathname, route))
-      .sort((a, b) => b[0].length - a[0].length)[0];
-
-    if (!entry) return NextResponseLib.next();
-
-    const [, requiredPermission] = entry;
-    const user = await getSessionUser(request);
-
-    if (!user) {
-      return NextResponseLib.redirect(
-        new URL(
-          loginPath + `?from=${encodeURIComponent(pathname)}`,
-          request.url,
-        ),
-      );
-    }
-
-    const perms = resolvePermissions(user.roles, config);
-    if (!hasPermission(perms, requiredPermission)) {
-      return NextResponseLib.redirect(
-        new URL(
-          unauthorizedPath +
-            `?required=${encodeURIComponent(requiredPermission)}`,
-          request.url,
-        ),
-      );
-    }
-
-    return NextResponseLib.next();
-  };
-}

package/src/security/rbac/resolver.ts

@@ -1,69 +0,0 @@
-// appkit/src/security/rbac/resolver.ts
-import type { Permission, RbacConfig } from "./types";
-
-export function resolvePermissions(
-  userRoles: string[],
-  config: RbacConfig,
-): Set<Permission> {
-  const { roles, multiRoleStrategy = "union" } = config;
-
-  function getPermissionsForRole(
-    roleKey: string,
-    visited = new Set<string>(),
-  ): Set<Permission> {
-    if (visited.has(roleKey)) return new Set();
-    visited.add(roleKey);
-
-    const def = roles[roleKey];
-    if (!def) return new Set();
-
-    const own = new Set<Permission>(def.permissions);
-
-    // Wildcard — super_admin gets everything
-    if (own.has("*")) return new Set(["*"]);
-
-    for (const inherited of def.inherits ?? []) {
-      for (const p of getPermissionsForRole(inherited, visited)) {
-        own.add(p);
-      }
-    }
-    return own;
-  }
-
-  if (userRoles.length === 0) return new Set<Permission>();
-
-  const sets = userRoles.map((r) => getPermissionsForRole(r));
-
-  if (multiRoleStrategy === "intersection") {
-    return sets.reduce(
-      (acc, set) => new Set([...acc].filter((p) => set.has(p))),
-    );
-  }
-
-  // union (default)
-  return sets.reduce(
-    (acc, set) => new Set([...acc, ...set]),
-    new Set<Permission>(),
-  );
-}
-
-export function hasPermission(
-  permissions: Set<Permission>,
-  required: Permission,
-): boolean {
-  return permissions.has("*") || permissions.has(required);
-}
-
-export function hasAllPermissions(
-  permissions: Set<Permission>,
-  required: Permission[],
-): boolean {
-  return required.every((p) => hasPermission(permissions, p));
-}
-
-export function hasAnyPermission(
-  permissions: Set<Permission>,
-  required: Permission[],
-): boolean {
-  return required.some((p) => hasPermission(permissions, p));
-}

package/src/security/rbac/server.ts

@@ -1,52 +0,0 @@
-// appkit/src/security/rbac/server.ts
-import type { RbacConfig, Permission } from "./types";
-import { resolvePermissions, hasPermission } from "./resolver";
-
-/**
- * Factory creating a server-side permission guard for API routes + Server Actions.
- *
- * @example
- * // src/lib/auth/require-permission.ts
- * import { createRequirePermission } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * export const requirePermission = createRequirePermission(RBAC_CONFIG);
- *
- * // In Server Action:
- * await requirePermission(authUser, "admin:payouts");
- */
-export function createRequirePermission(config: RbacConfig) {
-  return async function requirePermission(
-    user: { uid: string; roles: string[] } | null | undefined,
-    permission: Permission,
-  ): Promise<void> {
-    if (!user) {
-      const { AuthenticationError } = await import("../../errors");
-      throw new AuthenticationError("Not authenticated");
-    }
-    const perms = resolvePermissions(user.roles, config);
-    if (!hasPermission(perms, permission)) {
-      const { AuthorizationError } = await import("../../errors");
-      throw new AuthorizationError(`Missing permission: ${permission}`);
-    }
-  };
-}
-
-/**
- * Synchronous variant — use when errors cannot be imported directly.
- */
-export function createRequirePermissionSync(config: RbacConfig) {
-  return function requirePermission(
-    user: { uid: string; roles: string[] } | null | undefined,
-    permission: Permission,
-  ): void {
-    if (!user) {
-      throw Object.assign(new Error("Not authenticated"), { status: 401 });
-    }
-    const perms = resolvePermissions(user.roles, config);
-    if (!hasPermission(perms, permission)) {
-      throw Object.assign(new Error(`Missing permission: ${permission}`), {
-        status: 403,
-      });
-    }
-  };
-}

package/src/security/rbac/types.ts

@@ -1,27 +0,0 @@
-// appkit/src/security/rbac/types.ts
-
-export type Permission = string; // "resource:action" or "*"
-
-export interface RoleDefinition {
-  label: string;
-  permissions: Permission[];
-  /** Other role keys whose permissions are inherited */
-  inherits?: string[];
-}
-
-export interface RbacConfig {
-  /** App-defined roles — merges with or replaces DEFAULT_ROLES */
-  roles: Record<string, RoleDefinition>;
-  /**
-   * How to resolve permissions when a user has multiple roles.
-   * default: "union" — user gets the union of all roles' permissions
-   */
-  multiRoleStrategy?: "union" | "intersection";
-}
-
-export interface ResolvedUser {
-  uid: string;
-  roles: string[];
-  /** Flat resolved permission set (after role inheritance + multi-role strategy) */
-  permissions: Set<Permission>;
-}

package/src/seed/defaults/categories.ts

@@ -1,13 +0,0 @@
-// appkit/src/seed/defaults/categories.ts
-import { makeCategory, type SeedCategoryDocument } from "../factories/category.factory";
-
-export const DEFAULT_CATEGORIES: SeedCategoryDocument[] = [
-  makeCategory({ id: "cat-clothing", name: "Clothing", slug: "clothing", sortOrder: 1 }),
-  makeCategory({ id: "cat-electronics", name: "Electronics", slug: "electronics", sortOrder: 2 }),
-  makeCategory({ id: "cat-home", name: "Home & Living", slug: "home-living", sortOrder: 3 }),
-  makeCategory({ id: "cat-beauty", name: "Beauty & Personal Care", slug: "beauty", sortOrder: 4 }),
-  makeCategory({ id: "cat-sports", name: "Sports & Outdoors", slug: "sports", sortOrder: 5 }),
-  makeCategory({ id: "cat-books", name: "Books", slug: "books", sortOrder: 6 }),
-  makeCategory({ id: "cat-toys", name: "Toys & Games", slug: "toys", sortOrder: 7 }),
-  makeCategory({ id: "cat-food", name: "Food & Grocery", slug: "food", sortOrder: 8 }),
-];

package/src/seed/defaults/faqs.ts

@@ -1,40 +0,0 @@
-// appkit/src/seed/defaults/faqs.ts
-import { makeFaq, type SeedFaqDocument } from "../factories/faq.factory";
-
-export const DEFAULT_FAQS: SeedFaqDocument[] = [
-  makeFaq({
-    id: "faq-1",
-    question: "How do I place an order?",
-    answer: "Browse products, add items to your cart, and proceed to checkout. You can pay via credit card, debit card, UPI, or net banking.",
-    category: "ordering",
-    sortOrder: 1,
-  }),
-  makeFaq({
-    id: "faq-2",
-    question: "What is the return policy?",
-    answer: "We accept returns within 30 days of delivery for most items. Items must be unused and in original packaging.",
-    category: "returns",
-    sortOrder: 2,
-  }),
-  makeFaq({
-    id: "faq-3",
-    question: "How long does delivery take?",
-    answer: "Standard delivery takes 3-7 business days. Express delivery (1-2 days) is available for select pin codes.",
-    category: "shipping",
-    sortOrder: 3,
-  }),
-  makeFaq({
-    id: "faq-4",
-    question: "Is cash on delivery available?",
-    answer: "Yes, cash on delivery is available for orders up to ₹10,000 in select areas.",
-    category: "payments",
-    sortOrder: 4,
-  }),
-  makeFaq({
-    id: "faq-5",
-    question: "How do I become a seller?",
-    answer: "Click 'Sell on [Platform]' in the header, complete the seller registration form, and submit required KYC documents.",
-    category: "sellers",
-    sortOrder: 5,
-  }),
-];

package/src/seed/defaults/homepage-sections.ts

@@ -1,63 +0,0 @@
-// appkit/src/seed/defaults/homepage-sections.ts
-import {
-  makeHomepageSection,
-  type SeedHomepageSectionDocument,
-} from "../factories/homepage-section.factory";
-
-export const DEFAULT_HOMEPAGE_SECTIONS: SeedHomepageSectionDocument[] = [
-  makeHomepageSection("hero", {
-    id: "section-hero",
-    sortOrder: 1,
-    content: {
-      title: "Welcome to Our Store",
-      subtitle: "Discover the best products at unbeatable prices.",
-      ctaLabel: "Shop Now",
-      ctaUrl: "/products",
-      backgroundImage: "",
-    },
-  }),
-  makeHomepageSection("featured-products", {
-    id: "section-featured",
-    sortOrder: 2,
-    content: {
-      heading: "Featured Products",
-      productIds: [],
-    },
-  }),
-  makeHomepageSection("categories", {
-    id: "section-categories",
-    sortOrder: 3,
-    content: {
-      heading: "Shop by Category",
-      categoryIds: [],
-    },
-  }),
-  makeHomepageSection("blog", {
-    id: "section-blog",
-    sortOrder: 4,
-    content: {
-      heading: "From Our Blog",
-      postCount: 3,
-    },
-  }),
-  makeHomepageSection("faqs", {
-    id: "section-faqs",
-    sortOrder: 5,
-    content: {
-      heading: "Frequently Asked Questions",
-      faqIds: [],
-    },
-  }),
-  makeHomepageSection("stats", {
-    id: "section-stats",
-    sortOrder: 6,
-    content: {
-      items: [
-        { label: "Products", value: "10,000+" },
-        { label: "Sellers", value: "500+" },
-        { label: "Orders Delivered", value: "1,00,000+" },
-        { label: "Happy Customers", value: "50,000+" },
-      ],
-    },
-  }),
-];

package/src/seed/factories/address.factory.ts

@@ -1,106 +0,0 @@
-// appkit/src/seed/factories/address.factory.ts
-let _seq = 1;
-
-// ─── Indian locale data pools ───────────────────────────────────────────────────────────────
-
-const CITY_STATE: ReadonlyArray<readonly [string, string, string]> = [
-  ["Mumbai",     "Maharashtra",      "400001"],
-  ["New Delhi",  "Delhi",            "110001"],
-  ["Bengaluru",  "Karnataka",        "560001"],
-  ["Hyderabad",  "Telangana",        "500001"],
-  ["Chennai",    "Tamil Nadu",       "600001"],
-  ["Kolkata",    "West Bengal",      "700001"],
-  ["Pune",       "Maharashtra",      "411001"],
-  ["Ahmedabad",  "Gujarat",          "380001"],
-  ["Jaipur",     "Rajasthan",        "302001"],
-  ["Lucknow",    "Uttar Pradesh",    "226001"],
-  ["Kochi",      "Kerala",           "682001"],
-  ["Chandigarh", "Punjab",           "160001"],
-  ["Bhopal",     "Madhya Pradesh",   "462001"],
-  ["Surat",      "Gujarat",          "395001"],
-  ["Indore",     "Madhya Pradesh",   "452001"],
-] as const;
-
-const STREET_NAMES = [
-  "MG Road", "Station Road", "Main Street", "Gandhi Nagar",
-  "Nehru Place", "Park Street", "Market Road", "Church Road",
-] as const;
-
-const BUILDING_NAMES = [
-  "Shanti Apartments", "Laxmi Niwas", "Ganga Tower", "Sunrise Complex",
-  "Green Park", "Silver Enclave", "Raj Towers", "Bhavani Heights",
-] as const;
-
-/** Generates an Indian mobile number (+91 6xxxxx–9xxxxx). */
-function makePhone(n: number): string {
-  const prefix = ["6", "7", "8", "9"][n % 4];
-  const middle = String((n * 98765 + 10000) % 90000).padStart(5, "0");
-  const suffix = String((n * 54321 + 1000) % 10000).padStart(4, "0");
-  return `+91 ${prefix}${middle}${suffix}`;
-}
-
-function pick<T>(arr: readonly T[], n: number): T {
-  return arr[n % arr.length];
-}
-
-export interface SeedAddressDocument {
-  id: string;
-  userId: string;
-  line1: string;
-  line2?: string;
-  city: string;
-  state: string;
-  country: string;
-  postal: string;
-  /** PII — encrypted before Firestore write by seed runner */
-  phone?: string;
-  isDefault?: boolean;
-  createdAt: Date;
-  updatedAt: Date;
-}
-
-export function makeAddress(
-  overrides: Partial<SeedAddressDocument> = {},
-): SeedAddressDocument {
-  const n = _seq++;
-  const now = new Date();
-  const [city, state, postal] = pick(CITY_STATE, n);
-  return {
-    id: overrides.id ?? `address-${n}`,
-    userId: overrides.userId ?? `user-${n}`,
-    line1: overrides.line1 ?? `${n * 7 + 1}, ${pick(STREET_NAMES, n)}`,
-    city: overrides.city ?? city,
-    state: overrides.state ?? state,
-    country: overrides.country ?? "IN",
-    postal: overrides.postal ?? postal,
-    createdAt: overrides.createdAt ?? now,
-    updatedAt: overrides.updatedAt ?? now,
-    ...overrides,
-  };
-}
-
-export function makeFullAddress(
-  overrides: Partial<SeedAddressDocument> = {},
-): SeedAddressDocument {
-  const n = _seq;
-  return makeAddress({
-    line2: `${pick(BUILDING_NAMES, n)}, Flat ${(n % 12) + 1}${["A", "B", "C", "D"][n % 4]}`,
-    phone: makePhone(n),
-    isDefault: true,
-    ...overrides,
-  });
-}
-
-export const ADDRESS_FIXTURES = {
-  default: makeFullAddress({
-    id: "address-default-1",
-    userId: "buyer-user-1",
-    isDefault: true,
-  }),
-  secondary: makeAddress({
-    id: "address-secondary-1",
-    userId: "buyer-user-1",
-    city: "Pune",
-    postal: "411001",
-  }),
-};

package/src/seed/factories/bid.factory.ts

@@ -1,50 +0,0 @@
-// appkit/src/seed/factories/bid.factory.ts
-let _seq = 1;
-
-export interface SeedBidDocument {
-  id: string;
-  auctionId: string;
-  userId: string;
-  amount: number;
-  timestamp: Date;
-  isWinning?: boolean;
-  retracted?: boolean;
-}
-
-export function makeBid(
-  overrides: Partial<SeedBidDocument> = {},
-): SeedBidDocument {
-  const n = _seq++;
-  return {
-    id: overrides.id ?? `bid-${n}`,
-    auctionId: overrides.auctionId ?? "auction-1",
-    userId: overrides.userId ?? `user-${n}`,
-    amount: overrides.amount ?? n * 100,
-    timestamp: overrides.timestamp ?? new Date(),
-    isWinning: overrides.isWinning ?? false,
-    retracted: overrides.retracted ?? false,
-    ...overrides,
-  };
-}
-
-export function makeWinningBid(
-  overrides: Partial<SeedBidDocument> = {},
-): SeedBidDocument {
-  return makeBid({ isWinning: true, ...overrides });
-}
-
-export const BID_FIXTURES = {
-  winning: makeWinningBid({
-    id: "bid-winner-1",
-    auctionId: "auction-1",
-    userId: "buyer-user-1",
-    amount: 5000,
-  }),
-  outbid: makeBid({
-    id: "bid-outbid-1",
-    auctionId: "auction-1",
-    userId: "buyer-user-1",
-    amount: 4500,
-    isWinning: false,
-  }),
-};

package/src/seed/factories/blog-post.factory.ts

@@ -1,40 +0,0 @@
-// appkit/src/seed/factories/blog-post.factory.ts
-let _seq = 1;
-
-export interface SeedBlogPostDocument {
-  id: string;
-  title: string;
-  slug: string;
-  content: string;
-  excerpt: string;
-  coverImage: string;
-  authorId: string;
-  status: "published" | "draft" | "archived";
-  tags: string[];
-  publishedAt: Date | null;
-  createdAt: Date;
-  updatedAt: Date;
-}
-
-export function makeBlogPost(
-  overrides: Partial<SeedBlogPostDocument> = {},
-): SeedBlogPostDocument {
-  const n = _seq++;
-  const now = new Date();
-  const slug = overrides.slug ?? `blog-post-${n}`;
-  return {
-    id: overrides.id ?? `blog-${n}`,
-    title: overrides.title ?? `Blog Post ${n}`,
-    slug,
-    content: overrides.content ?? "<p>Blog post content goes here.</p>",
-    excerpt: overrides.excerpt ?? "A brief excerpt of the blog post.",
-    coverImage: overrides.coverImage ?? "",
-    authorId: overrides.authorId ?? "user-1",
-    status: overrides.status ?? "published",
-    tags: overrides.tags ?? [],
-    publishedAt: overrides.publishedAt !== undefined ? overrides.publishedAt : now,
-    createdAt: overrides.createdAt ?? now,
-    updatedAt: overrides.updatedAt ?? now,
-    ...overrides,
-  };
-}

package/src/seed/factories/carousel.factory.ts

@@ -1,30 +0,0 @@
-// appkit/src/seed/factories/carousel.factory.ts
-let _seq = 1;
-
-export interface SeedCarouselSlideDocument {
-  id: string;
-  imageUrl: string;
-  title: string;
-  subtitle: string;
-  ctaLabel: string;
-  ctaUrl: string;
-  sortOrder: number;
-  isActive: boolean;
-}
-
-export function makeCarouselSlide(
-  overrides: Partial<SeedCarouselSlideDocument> = {},
-): SeedCarouselSlideDocument {
-  const n = _seq++;
-  return {
-    id: overrides.id ?? `slide-${n}`,
-    imageUrl: overrides.imageUrl ?? "",
-    title: overrides.title ?? `Slide ${n}`,
-    subtitle: overrides.subtitle ?? "",
-    ctaLabel: overrides.ctaLabel ?? "Shop Now",
-    ctaUrl: overrides.ctaUrl ?? "/products",
-    sortOrder: overrides.sortOrder ?? n,
-    isActive: overrides.isActive ?? true,
-    ...overrides,
-  };
-}

package/src/seed/factories/cart.factory.ts

@@ -1,66 +0,0 @@
-// appkit/src/seed/factories/cart.factory.ts
-let _seq = 1;
-
-export interface SeedCartItemDocument {
-  productId: string;
-  quantity: number;
-  /** Unit price at time of adding to cart */
-  price: number;
-  storeId?: string;
-  sellerId?: string;
-  variantId?: string;
-}
-
-export interface SeedCartDocument {
-  id: string;
-  /** Authenticated user ID — mutually exclusive with guestId */
-  userId?: string;
-  /** Guest session ID — mutually exclusive with userId */
-  guestId?: string;
-  items: SeedCartItemDocument[];
-  createdAt: Date;
-  updatedAt: Date;
-}
-
-export function makeCartItem(
-  overrides: Partial<SeedCartItemDocument> = {},
-): SeedCartItemDocument {
-  return {
-    productId: overrides.productId ?? "product-1",
-    quantity: overrides.quantity ?? 1,
-    price: overrides.price ?? 100,
-    ...overrides,
-  };
-}
-
-export function makeCart(
-  overrides: Partial<SeedCartDocument> = {},
-): SeedCartDocument {
-  const n = _seq++;
-  const now = new Date();
-  return {
-    id: overrides.id ?? `cart-${n}`,
-    userId: overrides.userId ?? `user-${n}`,
-    items: overrides.items ?? [makeCartItem()],
-    createdAt: overrides.createdAt ?? now,
-    updatedAt: overrides.updatedAt ?? now,
-    ...overrides,
-  };
-}
-
-export function makeFullCart(
-  overrides: Partial<SeedCartDocument> = {},
-): SeedCartDocument {
-  return makeCart({
-    items: [
-      makeCartItem({ productId: "product-1", quantity: 2, price: 299, storeId: "store-1", sellerId: "seller-1" }),
-      makeCartItem({ productId: "product-2", quantity: 1, price: 499, storeId: "store-1", sellerId: "seller-1" }),
-    ],
-    ...overrides,
-  });
-}
-
-export const CART_FIXTURES = {
-  single: makeCart({ id: "cart-buyer-1", userId: "buyer-user-1" }),
-  multi: makeFullCart({ id: "cart-buyer-2", userId: "buyer-user-1" }),
-};