@nextsparkjs/core 0.1.0-beta.192 → 0.1.0-beta.194

package/README.md

@@ -5,8 +5,6 @@ The complete SaaS framework for Next.js. Build production-ready SaaS application
 ## Installation
 
 ```bash
-npm install @nextsparkjs/core
-# or
 pnpm add @nextsparkjs/core
 ```
 
@@ -16,6 +14,8 @@ pnpm add @nextsparkjs/core
 # Create a new NextSpark project
 npx create-nextspark-app my-app
 cd my-app
+# set DATABASE_URL in .env (BETTER_AUTH_SECRET is already generated)
+pnpm db:migrate
 pnpm dev
 ```
 

package/dist/components/app/layouts/PublicFooter.js

@@ -2,7 +2,7 @@ import { jsx, jsxs } from "react/jsx-runtime";
 import Link from "next/link";
 import { Separator } from "../../ui/separator.js";
 import { useTranslations } from "next-intl";
-import { sel } from "../../../lib/test/index.js";
+import { sel } from "@nextsparkjs/core/selectors/public";
 import { APP_NAME } from "../../../lib/config/public-config-client.js";
 import { CurrentYear } from "./CurrentYear.js";
 function PublicFooter() {

package/dist/components/app/layouts/PublicNavbar.js

@@ -7,7 +7,7 @@ import { Button } from "../../ui/button.js";
 import { ThemeToggle } from "../misc/ThemeToggle.js";
 import { Menu, X } from "lucide-react";
 import { useState } from "react";
-import { sel } from "../../../lib/test/index.js";
+import { sel } from "@nextsparkjs/core/selectors/public";
 import { useTranslations } from "next-intl";
 import { APP_NAME } from "../../../lib/config/public-config-client.js";
 function AuthActionsSkeleton({ layout }) {

package/dist/components/app/misc/ThemeToggle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThemeToggle.d.ts","sourceRoot":"","sources":["../../../../src/components/app/misc/ThemeToggle.tsx"],"names":[],"mappings":"AAkBA,wBAAgB,WAAW,4CA6H1B"}
+{"version":3,"file":"ThemeToggle.d.ts","sourceRoot":"","sources":["../../../../src/components/app/misc/ThemeToggle.tsx"],"names":[],"mappings":"AAmBA,wBAAgB,WAAW,4CA6H1B"}

package/dist/components/app/misc/ThemeToggle.js

@@ -10,7 +10,8 @@ import {
   DropdownMenuTrigger
 } from "../../ui/dropdown-menu.js";
 import { useEffect, useState, useCallback } from "react";
-import { createAriaLabel, sel } from "../../../lib/test/index.js";
+import { createAriaLabel } from "../../../lib/test/utils.js";
+import { sel } from "@nextsparkjs/core/selectors/public";
 import { useTranslations } from "next-intl";
 import { hasSessionHint } from "../../../lib/auth/session-hint.js";
 import { withBasePath } from "../../../lib/base-path.js";
@@ -61,7 +62,7 @@ function ThemeToggle() {
         size: "icon",
         disabled: true,
         "aria-label": t("theme.loading"),
-        "data-cy": sel("dashboard.topnav.themeToggle"),
+        "data-cy": sel("public.navbar.themeToggle"),
         children: [
           /* @__PURE__ */ jsx(Sun, { className: "h-5 w-5", "aria-hidden": "true" }),
           /* @__PURE__ */ jsx("span", { className: "sr-only", children: t("theme.loading") })
@@ -92,7 +93,7 @@ function ThemeToggle() {
           }),
           "aria-haspopup": "true",
           "aria-expanded": "false",
-          "data-cy": sel("dashboard.topnav.themeToggle"),
+          "data-cy": sel("public.navbar.themeToggle"),
           children: [
             /* @__PURE__ */ jsx(Sun, { className: "h-5 w-5 rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0", "aria-hidden": "true" }),
             /* @__PURE__ */ jsx(Moon, { className: "absolute h-5 w-5 rotate-90 scale-0 transition-all dark:rotate-0 dark:scale-100", "aria-hidden": "true" }),

package/dist/lib/api/auth/permissions.d.ts

@@ -27,4 +27,14 @@ export declare function isSuperAdmin(authResult: DualAuthResult): boolean;
  * @returns true si tiene permisos de admin
  */
 export declare function hasAdminPermission(authResult: DualAuthResult, requiredScope?: string | string[]): boolean;
+/**
+ * Whether the caller may read or edit the user `target` (an id or an email, as
+ * the /users/:id routes accept both): the user themselves, or a superadmin.
+ * An API key is its owner, so it gets the same answer, but a superadmin key
+ * must also carry `requiredScope`.
+ *
+ * Application-layer check: row-level security does not cover a deployment that
+ * has not cut over to the non-owner runtime role.
+ */
+export declare function canAccessUser(authResult: DualAuthResult, target: string, requiredScope?: string | string[]): boolean;
 //# sourceMappingURL=permissions.d.ts.map

package/dist/lib/api/auth/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/permissions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAGjD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAOhE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,cAAc,EAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAChC,OAAO,CAYT"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/permissions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAGjD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAOhE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,cAAc,EAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAChC,OAAO,CAYT;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,UAAU,EAAE,cAAc,EAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAChC,OAAO,CAOT"}

package/dist/lib/api/auth/permissions.js

@@ -14,7 +14,14 @@ function hasAdminPermission(authResult, requiredScope) {
   }
   return true;
 }
+function canAccessUser(authResult, target, requiredScope) {
+  if (!authResult.success || !authResult.user) return false;
+  if (hasAdminPermission(authResult, requiredScope)) return true;
+  const { id, email } = authResult.user;
+  return target === id || !!email && target === email;
+}
 export {
+  canAccessUser,
   hasAdminPermission,
   isSuperAdmin
 };

package/dist/lib/api/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/lib/api/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAa,EACpB,QAAQ,GAAE,MAAc,GACvB,eAAe,CAyCjB;AAED;;;GAGG;AACH,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,aAAqB,GAC1B,OAAO,CAAC,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6CpD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAwB5G;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,GAAG,IAAI,CAkCrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,CASd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,EAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAwCvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,IAAI,CAaP;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAGlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,KAAK,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CASD;AAED;;GAEG;AACH,wBAAgB,sBAAsB;;;;;EAErC;AAoGD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,OAAO,EAAE,EACnD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EACpE,IAAI,GAAE,aAAqB,IAEb,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAkCvE"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/lib/api/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAa,EACpB,QAAQ,GAAE,MAAc,GACvB,eAAe,CAyCjB;AAED;;;GAGG;AACH,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,aAAqB,GAC1B,OAAO,CAAC,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6CpD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAwB5G;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,GAAG,IAAI,CAkCrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,CASd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,EAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAwCvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,IAAI,CAaP;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAGlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,KAAK,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CASD;AAED;;GAEG;AACH,wBAAgB,sBAAsB;;;;;EAErC;AAsGD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,OAAO,EAAE,EACnD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EACpE,IAAI,GAAE,aAAqB,IAEb,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAsCvE"}

package/dist/lib/api/rate-limit.js

@@ -6,6 +6,7 @@ import {
   checkRateLimit as checkRedisRateLimit,
   maybeRedisConfigured
 } from "../rate-limit-redis.js";
+import { checkRequestOrigin } from "./request-origin.js";
 function checkRateLimit(identifier, limit = 1e3, windowMs = 6e4) {
   const now = Date.now();
   const cacheKey = getCacheKey("rate_limit", identifier);
@@ -239,6 +240,8 @@ function isRateLimitingDisabled() {
 }
 function withRateLimitTier(handler, tier = "api") {
   return async (request, ...args) => {
+    const originRefused = checkRequestOrigin(request);
+    if (originRefused) return originRefused;
     if (isRateLimitingDisabled()) {
       return handler(request, ...args);
     }

package/dist/lib/api/request-origin.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Request origin check for cookie-authenticated writes.
+ *
+ * A POST/PUT/PATCH/DELETE that authenticates with the session cookie must come
+ * from an origin the app trusts: its own (NEXT_PUBLIC_APP_URL / BETTER_AUTH_URL)
+ * or one in the list Better Auth already trusts for sign-in (see
+ * getTrustedOrigins). withRateLimitTier runs it before every handler it wraps.
+ *
+ * What passes without a trusted origin, and why:
+ * - Reads (GET/HEAD/OPTIONS).
+ * - Requests without the session cookie: there is no session for them to use.
+ * - Requests with an `Authorization: Bearer` token or an x-api-key header (API
+ *   keys, the mobile client's bearer token). A browser adds those only when the page's script
+ *   sets them, and a script on another origin needs CORS approval first.
+ * - Requests with neither Origin nor Referer, unless their body is one an HTML
+ *   form can send. Browsers send Origin on every write, so these come from
+ *   native or server-side clients; requiring a non-form content type keeps
+ *   a body without origin information from ever being read as a form post.
+ */
+import { NextResponse } from 'next/server';
+/**
+ * Returns a 403 response when a cookie-authenticated write does not come from a
+ * trusted origin, or null when the request may proceed.
+ */
+export declare function checkRequestOrigin(request: Request): NextResponse | null;
+//# sourceMappingURL=request-origin.d.ts.map

package/dist/lib/api/request-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-origin.d.ts","sourceRoot":"","sources":["../../../src/lib/api/request-origin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA6B1C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAsBxE"}

package/dist/lib/api/request-origin.js

@@ -0,0 +1,46 @@
+import { NextResponse } from "next/server";
+import { APP_CONFIG_MERGED } from "../config/index.js";
+import { hasSessionCookie } from "../auth/session-hint.js";
+import { getTrustedOrigins, isOriginAllowed, normalizeOrigin } from "../utils/cors.js";
+const WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+const FORM_CONTENT_TYPES = /* @__PURE__ */ new Set(["text/plain", "application/x-www-form-urlencoded", "multipart/form-data"]);
+function requestOrigin(headers) {
+  const origin = headers.get("origin");
+  if (origin) return origin;
+  const referer = headers.get("referer");
+  if (!referer) return null;
+  try {
+    return new URL(referer).origin;
+  } catch {
+    return "null";
+  }
+}
+function hasHeaderCredential(headers) {
+  var _a;
+  if ((_a = headers.get("x-api-key")) == null ? void 0 : _a.trim()) return true;
+  return /^bearer\s+\S/i.test(headers.get("authorization") ?? "");
+}
+function checkRequestOrigin(request) {
+  if (!WRITE_METHODS.has(request.method.toUpperCase())) return null;
+  const headers = request.headers;
+  if (!hasSessionCookie(headers.get("cookie"))) return null;
+  if (hasHeaderCredential(headers)) return null;
+  const origin = requestOrigin(headers);
+  if (origin === null) {
+    const contentType = (headers.get("content-type") ?? "").split(";")[0].trim().toLowerCase();
+    if (!FORM_CONTENT_TYPES.has(contentType)) return null;
+    return NextResponse.json(
+      { success: false, error: "This request needs an Origin header", code: "ORIGIN_REQUIRED" },
+      { status: 403 }
+    );
+  }
+  const normalized = normalizeOrigin(origin);
+  if (isOriginAllowed(normalized, getTrustedOrigins(APP_CONFIG_MERGED, normalized))) return null;
+  return NextResponse.json(
+    { success: false, error: "Request origin not allowed", code: "ORIGIN_NOT_ALLOWED" },
+    { status: 403 }
+  );
+}
+export {
+  checkRequestOrigin
+};

package/dist/lib/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAkBvH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAsHD,eAAO,MAAM,IAAI,qEAkXf,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAkBvH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAsHD,eAAO,MAAM,IAAI,qEA8Wf,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}

package/dist/lib/auth.js

@@ -19,7 +19,7 @@ import { resolveSessionConfig } from "./auth/session-config.js";
 import { resolveOtpConfig } from "./auth/otp-config.js";
 import { isPasswordLoginEnabled } from "./auth/auth-methods.js";
 import { isRuntimeEmailAvailable, isRuntimeGoogleAvailable } from "./auth/runtime-readiness.js";
-import { getCorsOrigins, isPrivateLanOrigin, normalizeCorsEnvironment } from "./utils/cors.js";
+import { getTrustedOrigins } from "./utils/cors.js";
 import { withBasePath } from "./base-path.js";
 async function hasPendingInvitationForEmail(email) {
   const row = await queryOne(
@@ -206,17 +206,7 @@ const auth = betterAuth({
   // adding a wildcard entry (e.g. "https://*.vercel.app") to
   // api.cors.additionalOrigins — better-auth's own trustedOrigins matching
   // already supports the same wildcard syntax as isOriginAllowed() above.
-  trustedOrigins: async (request) => {
-    const origins = getCorsOrigins(APP_CONFIG_MERGED);
-    if (normalizeCorsEnvironment(process.env.NODE_ENV || "development") === "production") {
-      return origins;
-    }
-    const requestOrigin = request == null ? void 0 : request.headers.get("origin");
-    if (requestOrigin && isPrivateLanOrigin(requestOrigin)) {
-      return [...origins, requestOrigin];
-    }
-    return origins;
-  },
+  trustedOrigins: async (request) => getTrustedOrigins(APP_CONFIG_MERGED, request == null ? void 0 : request.headers.get("origin")),
   // Redirect auth errors to our custom error page instead of Better Auth's default.
   // Better Auth redirects to this path as-is, outside the Next.js router.
   onAPIError: {
@@ -249,6 +239,12 @@ const auth = betterAuth({
     nextCookies()
     // MUST be the last plugin for Next.js cookie handling
   ],
+  // The proxy reads the session on every request; that lookup only reads the
+  // caller's own signed cookie, so it is kept out of the shared auth rate limit.
+  // The default limits (sign-in, sign-up, OTP, ...) stay.
+  rateLimit: {
+    customRules: { "/get-session": false }
+  },
   session: {
     // Configurable per theme via `auth.session` in app.config.ts (defaults:
     // 7 days / renewed daily / 5-minute cookie cache).

package/dist/lib/config/features-types.d.ts

@@ -5,9 +5,10 @@
  * These are used to generate the feature-registry at build time.
  */
 /**
- * Feature categories for organization
+ * Feature categories for organization. The named ones are the platform's; a project template adds its own
+ * (the CRM's 'leads' and 'sales', the blog's 'public'), so any string is accepted.
  */
-export type FeatureCategory = 'core' | 'entities' | 'content' | 'settings' | 'admin';
+export type FeatureCategory = 'core' | 'entities' | 'content' | 'settings' | 'admin' | (string & {});
 /**
  * Feature definition in configuration
  */
@@ -42,9 +43,9 @@ export interface FeatureDefinition {
  */
 export type FeaturesConfig = Record<string, FeatureDefinition>;
 /**
- * Flow categories for organization
+ * Flow categories for organization. Like feature categories, a project template may add its own.
  */
-export type FlowCategory = 'acquisition' | 'navigation' | 'content' | 'admin' | 'settings';
+export type FlowCategory = 'acquisition' | 'navigation' | 'content' | 'admin' | 'settings' | (string & {});
 /**
  * A step in a user flow/journey
  */

package/dist/lib/config/features-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"features-types.d.ts","sourceRoot":"","sources":["../../../src/lib/config/features-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,MAAM,GACN,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,CAAA;AAEX;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IAEZ,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAA;IAEnB,qCAAqC;IACrC,QAAQ,EAAE,eAAe,CAAA;IAEzB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;AAM9D;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,CAAA;AAEd;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAA;IAEf,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IAEd,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAA;IAEnB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IAEZ,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,kCAAkC;IAClC,QAAQ,EAAE,YAAY,CAAA;IAEtB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;OAGG;IACH,KAAK,EAAE,QAAQ,EAAE,CAAA;IAEjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;AAMxD;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,cAAc,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAErE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAE/D"}
+{"version":3,"file":"features-types.d.ts","sourceRoot":"","sources":["../../../src/lib/config/features-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,MAAM,GACN,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IAEZ,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAA;IAEnB,qCAAqC;IACrC,QAAQ,EAAE,eAAe,CAAA;IAEzB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;AAM9D;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAA;IAEf,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IAEd,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAA;IAEnB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IAEZ,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,kCAAkC;IAClC,QAAQ,EAAE,YAAY,CAAA;IAEtB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;OAGG;IACH,KAAK,EAAE,QAAQ,EAAE,CAAA;IAEjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;AAMxD;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,cAAc,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAErE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAE/D"}

package/dist/lib/entities/external-api-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-api-generator.d.ts","sourceRoot":"","sources":["../../../src/lib/entities/external-api-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAqB,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAK3C,MAAM,WAAW,kBAAmB,SAAQ,mBAAmB;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,eAAe,CAAC,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAuB;mBAqFT,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;oBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;qBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;sBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;uBAkGnD,WAAW;EAnHnC;AAyKD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoMrD"}
+{"version":3,"file":"external-api-generator.d.ts","sourceRoot":"","sources":["../../../src/lib/entities/external-api-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAqB,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAK3C,MAAM,WAAW,kBAAmB,SAAQ,mBAAmB;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,eAAe,CAAC,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAuB;mBAqFT,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;oBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;qBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;sBAAnD,WAAW,YAAY;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;uBAkGnD,WAAW;EAnHnC;AA4KD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoMrD"}

package/dist/lib/entities/external-api-generator.js

@@ -153,7 +153,9 @@ function addCORSHeaders(response, corsOptions, request) {
   response.headers.set("Access-Control-Allow-Methods", corsOptions.methods.join(", "));
   response.headers.set("Access-Control-Allow-Headers", corsOptions.headers.join(", "));
   response.headers.set("Access-Control-Max-Age", "86400");
-  response.headers.set("Access-Control-Allow-Credentials", "true");
+  if (origin && corsOptions.origins.includes(origin)) {
+    response.headers.set("Access-Control-Allow-Credentials", "true");
+  }
 }
 function createErrorResponse(status, message, details) {
   return NextResponse.json({

package/dist/lib/selectors/auth-sel.d.ts

@@ -1,8 +1,3 @@
-/**
- * `sel` for the auth pages, bound to the `auth` domain only (same values as `sel('auth.…')` of ./selectors).
- *
- * `sel` resolves a path at runtime, so the module that binds it to CORE_SELECTORS ships every domain (superadmin,
- * devtools, block editor, entities...) to each page that imports it. The auth forms only read `auth.*` paths.
- */
-export declare const sel: (path: string, replacements?: import("./selector-factory").Replacements) => string;
+/** `sel` for the auth pages: the `auth` domain only (see ./by-domain/auth). */
+export { sel } from './by-domain/auth';
 //# sourceMappingURL=auth-sel.d.ts.map

package/dist/lib/selectors/auth-sel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-sel.d.ts","sourceRoot":"","sources":["../../../src/lib/selectors/auth-sel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,eAAO,MAAQ,GAAG,oFAAoD,CAAA"}
+{"version":3,"file":"auth-sel.d.ts","sourceRoot":"","sources":["../../../src/lib/selectors/auth-sel.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/lib/selectors/auth-sel.js

@@ -1,6 +1,4 @@
-import { createSelectorHelpers } from "./selector-factory.js";
-import { AUTH_SELECTORS } from "./domains/auth.selectors.js";
-const { sel } = createSelectorHelpers({ auth: AUTH_SELECTORS });
+import { sel } from "./by-domain/auth.js";
 export {
   sel
 };

package/dist/lib/selectors/by-domain/auth.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `auth` domain only: `import { sel } from '@nextsparkjs/core/selectors/auth'`.
+ * Same paths and values as the barrel's `sel('auth.…')`, without shipping the other domains to the page.
+ */
+import { AUTH_SELECTORS } from '../domains/auth.selectors';
+export { AUTH_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/selectors/by-domain/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,OAAO,EAAE,cAAc,EAAE,CAAA;AACzB,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAoD,CAAA"}

package/dist/lib/selectors/by-domain/auth.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { AUTH_SELECTORS } from "../domains/auth.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ auth: AUTH_SELECTORS });
+export {
+  AUTH_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/block-editor.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `blockEditor` domain only: `import { sel } from '@nextsparkjs/core/selectors/block-editor'`.
+ * Same paths and values as the barrel's `sel('blockEditor.…')`, without shipping the other domains to the page.
+ */
+import { BLOCK_EDITOR_SELECTORS } from '../domains/block-editor.selectors';
+export { BLOCK_EDITOR_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=block-editor.d.ts.map

package/dist/lib/selectors/by-domain/block-editor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-editor.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/block-editor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAE1E,OAAO,EAAE,sBAAsB,EAAE,CAAA;AACjC,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAmE,CAAA"}

package/dist/lib/selectors/by-domain/block-editor.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { BLOCK_EDITOR_SELECTORS } from "../domains/block-editor.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ blockEditor: BLOCK_EDITOR_SELECTORS });
+export {
+  BLOCK_EDITOR_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/common.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `common` domain only: `import { sel } from '@nextsparkjs/core/selectors/common'`.
+ * Same paths and values as the barrel's `sel('common.…')`, without shipping the other domains to the page.
+ */
+import { COMMON_SELECTORS } from '../domains/common.selectors';
+export { COMMON_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=common.d.ts.map

package/dist/lib/selectors/by-domain/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAC3B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAwD,CAAA"}

package/dist/lib/selectors/by-domain/common.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { COMMON_SELECTORS } from "../domains/common.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ common: COMMON_SELECTORS });
+export {
+  COMMON_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/dashboard.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `dashboard` domain only: `import { sel } from '@nextsparkjs/core/selectors/dashboard'`.
+ * Same paths and values as the barrel's `sel('dashboard.…')`, without shipping the other domains to the page.
+ */
+import { DASHBOARD_SELECTORS } from '../domains/dashboard.selectors';
+export { DASHBOARD_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/lib/selectors/by-domain/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/dashboard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAEpE,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAC9B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAA8D,CAAA"}

package/dist/lib/selectors/by-domain/dashboard.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { DASHBOARD_SELECTORS } from "../domains/dashboard.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ dashboard: DASHBOARD_SELECTORS });
+export {
+  DASHBOARD_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/devtools.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `devtools` domain only: `import { sel } from '@nextsparkjs/core/selectors/devtools'`.
+ * Same paths and values as the barrel's `sel('devtools.…')`, without shipping the other domains to the page.
+ */
+import { DEVTOOLS_SELECTORS } from '../domains/devtools.selectors';
+export { DEVTOOLS_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=devtools.d.ts.map

package/dist/lib/selectors/by-domain/devtools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/devtools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAC7B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAA4D,CAAA"}

package/dist/lib/selectors/by-domain/devtools.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { DEVTOOLS_SELECTORS } from "../domains/devtools.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ devtools: DEVTOOLS_SELECTORS });
+export {
+  DEVTOOLS_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/entities.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `entities` domain only: `import { sel } from '@nextsparkjs/core/selectors/entities'`.
+ * Same paths and values as the barrel's `sel('entities.…')`, without shipping the other domains to the page.
+ */
+import { ENTITIES_SELECTORS } from '../domains/entities.selectors';
+export { ENTITIES_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=entities.d.ts.map

package/dist/lib/selectors/by-domain/entities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/entities.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAC7B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAA4D,CAAA"}

package/dist/lib/selectors/by-domain/entities.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { ENTITIES_SELECTORS } from "../domains/entities.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ entities: ENTITIES_SELECTORS });
+export {
+  ENTITIES_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/global-search.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `globalSearch` domain only: `import { sel } from '@nextsparkjs/core/selectors/global-search'`.
+ * Same paths and values as the barrel's `sel('globalSearch.…')`, without shipping the other domains to the page.
+ */
+import { GLOBAL_SEARCH_SELECTORS } from '../domains/global-search.selectors';
+export { GLOBAL_SEARCH_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=global-search.d.ts.map

package/dist/lib/selectors/by-domain/global-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-search.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/global-search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAA;AAE5E,OAAO,EAAE,uBAAuB,EAAE,CAAA;AAClC,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAqE,CAAA"}

package/dist/lib/selectors/by-domain/global-search.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { GLOBAL_SEARCH_SELECTORS } from "../domains/global-search.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ globalSearch: GLOBAL_SEARCH_SELECTORS });
+export {
+  GLOBAL_SEARCH_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/media.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `media` domain only: `import { sel } from '@nextsparkjs/core/selectors/media'`.
+ * Same paths and values as the barrel's `sel('media.…')`, without shipping the other domains to the page.
+ */
+import { MEDIA_SELECTORS } from '../domains/media.selectors';
+export { MEDIA_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=media.d.ts.map

package/dist/lib/selectors/by-domain/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/media.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,OAAO,EAAE,eAAe,EAAE,CAAA;AAC1B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAsD,CAAA"}

package/dist/lib/selectors/by-domain/media.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { MEDIA_SELECTORS } from "../domains/media.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ media: MEDIA_SELECTORS });
+export {
+  MEDIA_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/patterns.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `patterns` domain only: `import { sel } from '@nextsparkjs/core/selectors/patterns'`.
+ * Same paths and values as the barrel's `sel('patterns.…')`, without shipping the other domains to the page.
+ */
+import { PATTERNS_SELECTORS } from '../domains/patterns.selectors';
+export { PATTERNS_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/lib/selectors/by-domain/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/patterns.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAC7B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAA4D,CAAA"}

package/dist/lib/selectors/by-domain/patterns.js

@@ -0,0 +1,10 @@
+import { createSelectorHelpers } from "../selector-factory.js";
+import { PATTERNS_SELECTORS } from "../domains/patterns.selectors.js";
+const { sel, s, selDev, cySelector } = createSelectorHelpers({ patterns: PATTERNS_SELECTORS });
+export {
+  PATTERNS_SELECTORS,
+  cySelector,
+  s,
+  sel,
+  selDev
+};

package/dist/lib/selectors/by-domain/public.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sel` bound to the `public` domain only: `import { sel } from '@nextsparkjs/core/selectors/public'`.
+ * Same paths and values as the barrel's `sel('public.…')`, without shipping the other domains to the page.
+ */
+import { PUBLIC_SELECTORS } from '../domains/public.selectors';
+export { PUBLIC_SELECTORS };
+export declare const sel: (path: string, replacements?: import("..").Replacements) => string, s: (path: string, replacements?: import("..").Replacements) => string, selDev: (path: string, replacements?: import("..").Replacements) => string | undefined, cySelector: (path: string, replacements?: import("..").Replacements) => string;
+//# sourceMappingURL=public.d.ts.map

package/dist/lib/selectors/by-domain/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../../../src/lib/selectors/by-domain/public.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAC3B,eAAO,MAAQ,GAAG,sEAAE,CAAC,sEAAE,MAAM,kFAAE,UAAU,oEAAwD,CAAA"}