@mostajs/rbac 1.0.0

package/dist/api/categories-id.d.ts

@@ -0,0 +1,21 @@
+import { NextRequest, NextResponse } from 'next/server';
+export interface CategoriesIdHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+}
+export declare function createCategoriesIdHandler(config: CategoriesIdHandlerConfig): {
+    PUT: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+    DELETE: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=categories-id.d.ts.map

package/dist/api/categories-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories-id.d.ts","sourceRoot":"","sources":["../../api/categories-id.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,yBAAyB;eAGjD,WAAW,cAAc;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;kBAoCzD,WAAW,cAAc;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;EAsCxF"}

package/dist/api/categories-id.js

@@ -0,0 +1,66 @@
+// Author: Dr Hamid MADANI drmdh@msn.com
+// RBAC API handler: PUT/DELETE /admin/categories/[id]
+import { NextResponse } from 'next/server';
+import { PermissionCategoryRepository, PermissionRepository } from '@mostajs/auth';
+import { getDialect } from '@mostajs/orm';
+import { z } from 'zod';
+const updateCategorySchema = z.object({
+    label: z.string().min(1).optional(),
+    description: z.string().optional(),
+    icon: z.string().optional(),
+    order: z.number().int().min(0).optional(),
+});
+export function createCategoriesIdHandler(config) {
+    const { checkPermission, adminPermission } = config;
+    async function PUT(req, { params }) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const { id } = await params;
+        const body = await req.json();
+        const parsed = updateCategorySchema.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({ error: { code: 'VALIDATION_ERROR', message: 'Donnees invalides', details: parsed.error.flatten() } }, { status: 400 });
+        }
+        const catRepo = new PermissionCategoryRepository(await getDialect());
+        const category = await catRepo.findById(id);
+        if (!category) {
+            return NextResponse.json({ error: { code: 'NOT_FOUND', message: 'Categorie introuvable' } }, { status: 404 });
+        }
+        const updates = {};
+        if (parsed.data.label !== undefined)
+            updates.label = parsed.data.label;
+        if (parsed.data.description !== undefined)
+            updates.description = parsed.data.description;
+        if (parsed.data.icon !== undefined)
+            updates.icon = parsed.data.icon;
+        if (parsed.data.order !== undefined)
+            updates.order = parsed.data.order;
+        const updated = await catRepo.update(id, updates);
+        return NextResponse.json({ data: updated });
+    }
+    async function DELETE(req, { params }) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const { id } = await params;
+        const catRepo = new PermissionCategoryRepository(await getDialect());
+        const category = await catRepo.findById(id);
+        if (!category) {
+            return NextResponse.json({ error: { code: 'NOT_FOUND', message: 'Categorie introuvable' } }, { status: 404 });
+        }
+        if (category.system) {
+            return NextResponse.json({ error: { code: 'SYSTEM_PROTECTED', message: 'Les categories systeme ne peuvent pas etre supprimees' } }, { status: 403 });
+        }
+        // Check if permissions are using this category
+        const pRepo = new PermissionRepository(await getDialect());
+        const permCount = await pRepo.count({ category: category.name });
+        if (permCount > 0) {
+            return NextResponse.json({ error: { code: 'IN_USE', message: `Impossible : ${permCount} permission(s) utilisent cette categorie` } }, { status: 409 });
+        }
+        await catRepo.delete(id);
+        return NextResponse.json({ data: { message: 'Categorie supprimee' } });
+    }
+    return { PUT, DELETE };
+}
+//# sourceMappingURL=categories-id.js.map

package/dist/api/categories-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories-id.js","sourceRoot":"","sources":["../../api/categories-id.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,sDAAsD;AACtD,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA;AAOF,MAAM,UAAU,yBAAyB,CAAC,MAAiC;IACzE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,MAAM,CAAA;IAEnD,KAAK,UAAU,GAAG,CAAC,GAAgB,EAAE,EAAE,MAAM,EAAuC;QAClF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAClE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAA4B,EAAE,CAAA;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAA;QACxF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA;QACnE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA;QAEtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAEjD,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAgB,EAAE,EAAE,MAAM,EAAuC;QACrF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAClE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uDAAuD,EAAE,EAAE,EACzG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QAChE,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,SAAS,0CAA0C,EAAE,EAAE,EAC3G,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAExB,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC"}

package/dist/api/categories.d.ts

@@ -0,0 +1,15 @@
+import { NextRequest, NextResponse } from 'next/server';
+import type { CategoryDefinition } from '../types';
+export interface CategoriesHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+    categoryDefinitions?: CategoryDefinition[];
+}
+export declare function createCategoriesHandler(config: CategoriesHandlerConfig): {
+    GET: () => Promise<NextResponse<unknown>>;
+    POST: (req: NextRequest) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=categories.d.ts.map

package/dist/api/categories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.d.ts","sourceRoot":"","sources":["../../api/categories.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAUlD,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC3C;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,uBAAuB;;gBA4B5C,WAAW;EAsCrC"}

package/dist/api/categories.js

@@ -0,0 +1,65 @@
+// Author: Dr Hamid MADANI drmdh@msn.com
+// RBAC API handler: GET/POST /admin/categories
+import { NextResponse } from 'next/server';
+import { PermissionCategoryRepository } from '@mostajs/auth';
+import { getDialect } from '@mostajs/orm';
+import { z } from 'zod';
+const createCategorySchema = z.object({
+    name: z.string().min(1).regex(/^[a-z][a-z0-9_]*$/, 'Format requis : minuscules, chiffres et underscores'),
+    label: z.string().min(1),
+    description: z.string().optional(),
+    icon: z.string().optional(),
+    order: z.number().int().min(0).optional(),
+});
+export function createCategoriesHandler(config) {
+    const { checkPermission, adminPermission, categoryDefinitions = [] } = config;
+    async function GET() {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const repo = new PermissionCategoryRepository(await getDialect());
+        let categories = await repo.findAllOrdered();
+        // Fallback: if DB is empty, return hardcoded definitions
+        if (categories.length === 0) {
+            const fallback = categoryDefinitions.map((c, i) => ({
+                id: `fallback_${i}`,
+                name: c.name,
+                label: c.label,
+                description: c.description,
+                icon: c.icon,
+                order: c.order,
+                system: c.system,
+                _fallback: true,
+            }));
+            return NextResponse.json({ data: fallback });
+        }
+        return NextResponse.json({ data: categories });
+    }
+    async function POST(req) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const body = await req.json();
+        const parsed = createCategorySchema.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({ error: { code: 'VALIDATION_ERROR', message: 'Donnees invalides', details: parsed.error.flatten() } }, { status: 400 });
+        }
+        const { name, label, description, icon, order } = parsed.data;
+        const repo = new PermissionCategoryRepository(await getDialect());
+        const existing = await repo.findByName(name);
+        if (existing) {
+            return NextResponse.json({ error: { code: 'DUPLICATE', message: 'Une categorie avec ce nom existe deja' } }, { status: 409 });
+        }
+        const category = await repo.create({
+            name,
+            label,
+            description: description || '',
+            icon: icon || '',
+            order: order !== null && order !== void 0 ? order : 0,
+            system: false,
+        });
+        return NextResponse.json({ data: category }, { status: 201 });
+    }
+    return { GET, POST };
+}
+//# sourceMappingURL=categories.js.map

package/dist/api/categories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.js","sourceRoot":"","sources":["../../api/categories.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,+CAA+C;AAC/C,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;IACzG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA;AAQF,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAA;IAE7E,KAAK,UAAU,GAAG;QAChB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,IAAI,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACjE,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE5C,yDAAyD;QACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClD,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC,CAAA;YACH,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAgB;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAC7D,MAAM,IAAI,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAEjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,EAClF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI;YACJ,KAAK;YACL,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,CAAC;YACjB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC"}

package/dist/api/matrix.d.ts

@@ -0,0 +1,15 @@
+import { NextRequest, NextResponse } from 'next/server';
+import type { CategoryDefinition } from '../types';
+export interface MatrixHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+    categoryDefinitions?: CategoryDefinition[];
+}
+export declare function createMatrixHandler(config: MatrixHandlerConfig): {
+    GET: () => Promise<NextResponse<unknown>>;
+    POST: (req: NextRequest) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=matrix.d.ts.map

package/dist/api/matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix.d.ts","sourceRoot":"","sources":["../../api/matrix.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAElD,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC3C;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB;;gBA6EpC,WAAW;EAmCrC"}

package/dist/api/matrix.js

@@ -0,0 +1,104 @@
+// Author: Dr Hamid MADANI drmdh@msn.com
+// RBAC API handler: GET/POST /admin/permissions/matrix
+import { NextResponse } from 'next/server';
+import { PermissionRepository, RoleRepository, PermissionCategoryRepository } from '@mostajs/auth';
+import { getDialect } from '@mostajs/orm';
+import { z } from 'zod';
+export function createMatrixHandler(config) {
+    const { checkPermission, adminPermission, categoryDefinitions = [] } = config;
+    async function GET() {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const [pRepo, rRepo, catRepo] = await Promise.all([
+            getDialect().then(d => new PermissionRepository(d)),
+            getDialect().then(d => new RoleRepository(d)),
+            getDialect().then(d => new PermissionCategoryRepository(d)),
+        ]);
+        const [permissions, roles, dbCategories] = await Promise.all([
+            pRepo.findAllSorted(),
+            rRepo.findAllWithPermissions(),
+            catRepo.findAllOrdered(),
+        ]);
+        // Build category labels from DB or fallback
+        const categoryLabels = {};
+        if (dbCategories.length > 0) {
+            for (const cat of dbCategories) {
+                categoryLabels[cat.name] = cat.label;
+            }
+        }
+        else {
+            for (const cat of categoryDefinitions) {
+                categoryLabels[cat.name] = cat.label;
+            }
+        }
+        // Group permissions by category
+        const categories = {};
+        for (const p of permissions) {
+            const cat = p.category || 'other';
+            if (!categories[cat])
+                categories[cat] = [];
+            categories[cat].push({
+                id: p.id,
+                name: p.name,
+                description: p.description || '',
+            });
+        }
+        // Build matrix: roleId -> { permId: boolean }
+        const matrix = {};
+        for (const role of roles) {
+            matrix[role.id] = {};
+            const permIds = role.permissions.map((p) => { var _a; return typeof p === 'object' ? (p.id || ((_a = p._id) === null || _a === void 0 ? void 0 : _a.toString())) : p.toString(); });
+            for (const p of permissions) {
+                matrix[role.id][p.id] = permIds.includes(p.id);
+            }
+        }
+        return NextResponse.json({
+            data: {
+                roles: roles.map((r) => ({
+                    id: r.id,
+                    name: r.name,
+                    description: r.description || '',
+                })),
+                categories,
+                categoryLabels,
+                matrix,
+            },
+        });
+    }
+    const matrixChangeSchema = z.object({
+        changes: z.array(z.object({
+            roleId: z.string(),
+            permissionId: z.string(),
+            granted: z.boolean(),
+        })),
+    });
+    async function POST(req) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const body = await req.json();
+        const parsed = matrixChangeSchema.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({ error: { code: 'VALIDATION_ERROR', message: 'Données invalides', details: parsed.error.flatten() } }, { status: 400 });
+        }
+        const { changes } = parsed.data;
+        const rRepo = new RoleRepository(await getDialect());
+        let applied = 0;
+        for (const change of changes) {
+            const { roleId, permissionId, granted } = change;
+            if (granted) {
+                await rRepo.addPermission(roleId, permissionId);
+            }
+            else {
+                await rRepo.removePermission(roleId, permissionId);
+            }
+            applied++;
+        }
+        return NextResponse.json({
+            data: { applied, message: `${applied} modification(s) appliquée(s)` },
+        });
+    }
+    return { GET, POST };
+}
+//# sourceMappingURL=matrix.js.map

package/dist/api/matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix.js","sourceRoot":"","sources":["../../api/matrix.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,uDAAuD;AACvD,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AASvB,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAA;IAE7E,KAAK,UAAU,GAAG;QAChB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACnD,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;YAC7C,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,4BAA4B,CAAC,CAAC,CAAC,CAAC;SAC5D,CAAC,CAAA;QAEF,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3D,KAAK,CAAC,aAAa,EAAE;YACrB,KAAK,CAAC,sBAAsB,EAAE;YAC9B,OAAO,CAAC,cAAc,EAAE;SACzB,CAAC,CAAA;QAEF,4CAA4C;QAC5C,MAAM,cAAc,GAA2B,EAAE,CAAA;QACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACtC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;YACtC,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,UAAU,GAA0B,EAAE,CAAA;QAC5C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAA;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;YAC1C,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;aACjC,CAAC,CAAA;QACJ,CAAC;QAED,8CAA8C;QAC9C,MAAM,MAAM,GAA4C,EAAE,CAAA;QAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAA;YACpB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,WAAC,OAAA,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAI,MAAA,CAAC,CAAC,GAAG,0CAAE,QAAQ,EAAE,CAAA,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA,EAAA,CAAC,CAAA;YACpH,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE;gBACJ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;iBACjC,CAAC,CAAC;gBACH,UAAU;gBACV,cAAc;gBACd,MAAM;aACP;SACF,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;QAClC,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACrB,CAAC,CACH;KACF,CAAC,CAAA;IAEF,KAAK,UAAU,IAAI,CAAC,GAAgB;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAC/B,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACpD,IAAI,OAAO,GAAG,CAAC,CAAA;QAEf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;YAEhD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YACpD,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,+BAA+B,EAAE;SACtE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC"}

package/dist/api/permissions-id.d.ts

@@ -0,0 +1,21 @@
+import { NextRequest, NextResponse } from 'next/server';
+export interface PermissionsIdHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+}
+export declare function createPermissionsIdHandler(config: PermissionsIdHandlerConfig): {
+    PUT: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+    DELETE: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=permissions-id.d.ts.map

package/dist/api/permissions-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-id.d.ts","sourceRoot":"","sources":["../../api/permissions-id.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAUvD,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B;eAIpE,WAAW,cACJ;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;kBA+B1C,WAAW,cACJ;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;EA0BlD"}

package/dist/api/permissions-id.js

@@ -0,0 +1,48 @@
+// Author: Dr Hamid MADANI drmdh@msn.com
+// RBAC API handler: PUT/DELETE /admin/permissions/[id]
+import { NextResponse } from 'next/server';
+import { PermissionRepository, RoleRepository } from '@mostajs/auth';
+import { getDialect } from '@mostajs/orm';
+import { z } from 'zod';
+const updatePermissionSchema = z.object({
+    description: z.string().optional(),
+    category: z.string().optional(),
+});
+export function createPermissionsIdHandler(config) {
+    const { checkPermission, adminPermission } = config;
+    async function PUT(req, { params }) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const { id } = await params;
+        const body = await req.json();
+        const parsed = updatePermissionSchema.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({ error: { code: 'VALIDATION_ERROR', message: 'Données invalides', details: parsed.error.flatten() } }, { status: 400 });
+        }
+        const pRepo = new PermissionRepository(await getDialect());
+        const permission = await pRepo.update(id, parsed.data);
+        if (!permission) {
+            return NextResponse.json({ error: { code: 'NOT_FOUND', message: 'Permission non trouvée' } }, { status: 404 });
+        }
+        return NextResponse.json({ data: permission });
+    }
+    async function DELETE(req, { params }) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const { id } = await params;
+        const pRepo = new PermissionRepository(await getDialect());
+        const permission = await pRepo.findById(id);
+        if (!permission) {
+            return NextResponse.json({ error: { code: 'NOT_FOUND', message: 'Permission non trouvée' } }, { status: 404 });
+        }
+        // Remove permission from all roles that have it
+        const rRepo = new RoleRepository(await getDialect());
+        await rRepo.removePermissionFromAll(id);
+        await pRepo.delete(id);
+        return NextResponse.json({ data: { message: 'Permission supprimée' } });
+    }
+    return { PUT, DELETE };
+}
+//# sourceMappingURL=permissions-id.js.map

package/dist/api/permissions-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-id.js","sourceRoot":"","sources":["../../api/permissions-id.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,uDAAuD;AACvD,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAA;AAOF,MAAM,UAAU,0BAA0B,CAAC,MAAkC;IAC3E,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,MAAM,CAAA;IAEnD,KAAK,UAAU,GAAG,CAChB,GAAgB,EAChB,EAAE,MAAM,EAAuC;QAE/C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAE3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAEtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,UAAU,MAAM,CACnB,GAAgB,EAChB,EAAE,MAAM,EAAuC;QAE/C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAE1D,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,gDAAgD;QAChD,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACpD,MAAM,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;QAEvC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAEtB,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC"}

package/dist/api/permissions.d.ts

@@ -0,0 +1,16 @@
+import { NextRequest, NextResponse } from 'next/server';
+import type { PermissionDefinition, CategoryDefinition } from '../types';
+export interface PermissionsHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+    permissionDefinitions?: PermissionDefinition[];
+    categoryDefinitions?: CategoryDefinition[];
+}
+export declare function createPermissionsHandler(config: PermissionsHandlerConfig): {
+    GET: () => Promise<NextResponse<unknown>>;
+    POST: (req: NextRequest) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/api/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../api/permissions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAIvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAQxE,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;IACvB,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC9C,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC3C;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,wBAAwB;;gBAoE9C,WAAW;EAmDrC"}

package/dist/api/permissions.js

@@ -0,0 +1,102 @@
+// Author: Dr Hamid MADANI drmdh@msn.com
+// RBAC API handler: GET/POST /admin/permissions
+import { NextResponse } from 'next/server';
+import { PermissionRepository, RoleRepository, PermissionCategoryRepository } from '@mostajs/auth';
+import { getDialect } from '@mostajs/orm';
+import { z } from 'zod';
+const createPermissionSchema = z.object({
+    name: z.string().min(1).regex(/^[a-z_]+:[a-z_]+$/, 'Format requis : categorie:action'),
+    description: z.string().optional(),
+    category: z.string().optional(),
+});
+export function createPermissionsHandler(config) {
+    const { checkPermission, adminPermission, permissionDefinitions = [], categoryDefinitions = [], } = config;
+    async function GET() {
+        var _a;
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        // Read category labels from DB, fallback to hardcoded
+        const catRepo = new PermissionCategoryRepository(await getDialect());
+        const dbCategories = await catRepo.findAllOrdered();
+        const categoryLabels = {};
+        if (dbCategories.length > 0) {
+            for (const cat of dbCategories) {
+                categoryLabels[cat.name] = cat.label;
+            }
+        }
+        else {
+            for (const cat of categoryDefinitions) {
+                categoryLabels[cat.name] = cat.label;
+            }
+        }
+        const pRepo = new PermissionRepository(await getDialect());
+        let permissions = await pRepo.findAllSorted();
+        // Fallback: if DB is empty, return hardcoded definitions
+        if (permissions.length === 0) {
+            const fallback = permissionDefinitions.map((p, i) => ({
+                id: `fallback_${i}`,
+                name: p.name,
+                description: p.description,
+                category: p.category,
+                _fallback: true,
+            }));
+            return NextResponse.json({ data: fallback, categories: categoryLabels });
+        }
+        // Count roles per permission
+        const rRepo = new RoleRepository(await getDialect());
+        const roles = await rRepo.findAllWithPermissions();
+        const permRoleCount = {};
+        for (const role of roles) {
+            for (const permId of role.permissions) {
+                const key = typeof permId === 'object' ? permId.id || ((_a = permId._id) === null || _a === void 0 ? void 0 : _a.toString()) : permId.toString();
+                permRoleCount[key] = (permRoleCount[key] || 0) + 1;
+            }
+        }
+        const permissionsWithCount = permissions.map((p) => (Object.assign(Object.assign({}, p), { roleCount: permRoleCount[p.id] || 0 })));
+        // Group by category
+        const grouped = {};
+        for (const p of permissionsWithCount) {
+            const cat = p.category || 'other';
+            if (!grouped[cat])
+                grouped[cat] = [];
+            grouped[cat].push(p);
+        }
+        return NextResponse.json({ data: permissionsWithCount, grouped, categories: categoryLabels });
+    }
+    async function POST(req) {
+        const { error } = await checkPermission(adminPermission);
+        if (error)
+            return error;
+        const body = await req.json();
+        const parsed = createPermissionSchema.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({ error: { code: 'VALIDATION_ERROR', message: 'Données invalides', details: parsed.error.flatten() } }, { status: 400 });
+        }
+        const { name, description, category } = parsed.data;
+        const pRepo = new PermissionRepository(await getDialect());
+        const existing = await pRepo.findByName(name);
+        if (existing) {
+            return NextResponse.json({ error: { code: 'DUPLICATE', message: 'Une permission avec ce nom existe déjà' } }, { status: 409 });
+        }
+        // Auto-derive category from name if not provided
+        const derivedCategory = category || name.split(':')[0];
+        // Validate category exists in DB or in fallback definitions
+        const catRepo = new PermissionCategoryRepository(await getDialect());
+        const catExists = await catRepo.findByName(derivedCategory);
+        if (!catExists) {
+            const fallbackExists = categoryDefinitions.some((c) => c.name === derivedCategory);
+            if (!fallbackExists) {
+                return NextResponse.json({ error: { code: 'INVALID_CATEGORY', message: `La categorie '${derivedCategory}' n'existe pas` } }, { status: 400 });
+            }
+        }
+        const permission = await pRepo.create({
+            name,
+            description: description || '',
+            category: derivedCategory,
+        });
+        return NextResponse.json({ data: permission }, { status: 201 });
+    }
+    return { GET, POST };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/api/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../api/permissions.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,gDAAgD;AAChD,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAA;AASF,MAAM,UAAU,wBAAwB,CAAC,MAAgC;IACvE,MAAM,EACJ,eAAe,EACf,eAAe,EACf,qBAAqB,GAAG,EAAE,EAC1B,mBAAmB,GAAG,EAAE,GACzB,GAAG,MAAM,CAAA;IAEV,KAAK,UAAU,GAAG;;QAChB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,sDAAsD;QACtD,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACpE,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;QACnD,MAAM,cAAc,GAA2B,EAAE,CAAA;QACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACtC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;YACtC,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAC1D,IAAI,WAAW,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAA;QAE7C,yDAAyD;QACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpD,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC,CAAA;YACH,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;QAC1E,CAAC;QAED,6BAA6B;QAC7B,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACpD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAA;QAClD,MAAM,aAAa,GAA2B,EAAE,CAAA;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAc,CAAC,EAAE,KAAI,MAAC,MAAc,CAAC,GAAG,0CAAE,QAAQ,EAAE,CAAA,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;gBAClH,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iCAC/C,CAAC,KACJ,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IACnC,CAAC,CAAA;QAEH,oBAAoB;QACpB,MAAM,OAAO,GAAgD,EAAE,CAAA;QAC/D,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAA;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;YACpC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtB,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAgB;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QAE1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAAE,EACnF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,eAAe,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAEtD,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;YAClF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,eAAe,gBAAgB,EAAE,EAAE,EAClG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YACpC,IAAI;YACJ,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACjE,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC"}

package/dist/api/roles-id.d.ts

@@ -0,0 +1,27 @@
+import { NextRequest, NextResponse } from 'next/server';
+export interface RolesIdHandlerConfig {
+    checkPermission: (perm: string) => Promise<{
+        error: NextResponse | null;
+        session: any;
+    }>;
+    adminPermission: string;
+    systemRoles?: string[];
+}
+export declare function createRolesIdHandler(config: RolesIdHandlerConfig): {
+    GET: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+    PUT: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+    DELETE: (req: NextRequest, { params }: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<unknown>>;
+};
+//# sourceMappingURL=roles-id.d.ts.map

package/dist/api/roles-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles-id.d.ts","sourceRoot":"","sources":["../../api/roles-id.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB;eAIxD,WAAW,cACJ;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;eAuB1C,WAAW,cACJ;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;kBA2D1C,WAAW,cACJ;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;EAsClD"}