@nextsparkjs/core 0.1.0-beta.75 → 0.1.0-beta.77

package/dist/lib/api/entity-handler.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Entity Route Handler
+ *
+ * Base handler for entity API routes with automatic permission checking,
+ * field filtering, and standardized responses.
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { CRUDOperation, EntityConfig } from '../entities/types';
+/**
+ * Entity handler context
+ */
+export interface EntityHandlerContext {
+    user: {
+        id: string;
+        email: string;
+        role: string;
+    };
+    entity: EntityConfig;
+    request: NextRequest;
+    pagination?: {
+        page: number;
+        limit: number;
+        offset: number;
+    };
+}
+/**
+ * Entity handler options
+ */
+export interface EntityHandlerOptions {
+    allowMetadata?: boolean;
+    customValidation?: (context: EntityHandlerContext) => Promise<{
+        valid: boolean;
+        error?: string;
+    }>;
+}
+/**
+ * CRUD handler functions
+ */
+export interface EntityCRUDHandlers {
+    list?: (context: EntityHandlerContext) => Promise<{
+        data: Array<Record<string, unknown>>;
+        total: number;
+    }>;
+    create?: (context: EntityHandlerContext, data: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    read?: (context: EntityHandlerContext, id: string) => Promise<Record<string, unknown> | null>;
+    update?: (context: EntityHandlerContext, id: string, data: Record<string, unknown>) => Promise<Record<string, unknown> | null>;
+    delete?: (context: EntityHandlerContext, id: string) => Promise<boolean>;
+}
+/**
+ * Legacy function - use createEntityListHandlers or createEntityDetailHandlers instead
+ * @deprecated
+ */
+export declare function createEntityHandlers(entityName: string, handlers: EntityCRUDHandlers, options?: EntityHandlerOptions): {
+    GET: (request: NextRequest) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>[];
+        info: {
+            timestamp: string;
+        };
+    }>>;
+    POST: (request: NextRequest) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>;
+        info: {
+            timestamp: string;
+        };
+    }>>;
+};
+/**
+ * Wrapper for entity auth - simplified without permissions
+ */
+export declare function withEntityAuth(entityName: string, action: CRUDOperation, options?: EntityHandlerOptions): <T extends unknown[]>(handler: (context: EntityHandlerContext, ...args: T) => Promise<NextResponse>) => (request: NextRequest, ...args: T) => Promise<NextResponse>;
+/**
+ * Create standardized CRUD handlers for an entity (list and create only)
+ */
+export declare function createEntityListHandlers(entityName: string, handlers: EntityCRUDHandlers, options?: EntityHandlerOptions): {
+    GET: (request: NextRequest) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>[];
+        info: {
+            timestamp: string;
+        };
+    }>>;
+    POST: (request: NextRequest) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>;
+        info: {
+            timestamp: string;
+        };
+    }>>;
+};
+/**
+ * Create standardized CRUD handlers for entity detail routes (with [id])
+ */
+export declare function createEntityDetailHandlers(entityName: string, handlers: EntityCRUDHandlers, options?: EntityHandlerOptions): {
+    GET: (request: NextRequest, routeContext: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>;
+        info: {
+            timestamp: string;
+        };
+    }>>;
+    PATCH: (request: NextRequest, routeContext: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: Record<string, unknown>;
+        info: {
+            timestamp: string;
+        };
+    }>>;
+    DELETE: (request: NextRequest, routeContext: {
+        params: Promise<{
+            id: string;
+        }>;
+    }) => Promise<NextResponse<{
+        success: boolean;
+        error: string;
+        code: string;
+        details: unknown;
+        info: {
+            timestamp: string;
+        };
+    }> | NextResponse<{
+        success: boolean;
+        data: {
+            success: boolean;
+            id: string;
+        };
+        info: {
+            timestamp: string;
+        };
+    }>>;
+};
+/**
+ * Simple wrapper for single-action handlers
+ */
+export declare function withEntityAction(entityName: string, action: CRUDOperation, options?: EntityHandlerOptions): <T extends unknown[]>(handler: (context: EntityHandlerContext, ...args: T) => Promise<NextResponse>) => (request: NextRequest, ...args: T) => Promise<NextResponse>;
+/**
+ * Helper to create database query context with RLS
+ */
+export declare function createQueryContext(context: EntityHandlerContext): {
+    userId: string;
+    userRole: string;
+    userFlags: any[];
+    entityConfig: EntityConfig;
+};
+//# sourceMappingURL=entity-handler.d.ts.map

package/dist/lib/api/entity-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-handler.d.ts","sourceRoot":"","sources":["../../../src/lib/api/entity-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAgBrE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnG;AA2CD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAChD,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/H,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,oBAAyB;mBAyEN,WAAW;;;;;;;;;;;;;;;oBAyDV,WAAW;;;;;;;;;;;;;;;EA9HzC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,oBAAyB,IAElB,CAAC,SAAS,OAAO,EAAE,EACjC,SAAS,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,MAEvD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CA4CjF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,oBAAyB;mBAIN,WAAW;;;;;;;;;;;;;;;oBAyDV,WAAW;;;;;;;;;;;;;;;EA0EzC;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,oBAAyB;mBAIN,WAAW,gBAAgB;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;;;;;;;;;;;;;;;qBA0D5D,WAAW,gBAAgB;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;;;;;;;;;;;;;;;sBA+E7D,WAAW,gBAAgB;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;;;;;;;;;;;;;;;;;;EAuD9F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,oBAAyB,IAlZlB,CAAC,SAAS,OAAO,EAAE,WACxB,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,MAEvD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAkZjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB;;;;;EAO/D"}

package/dist/lib/api/helpers.d.ts

@@ -0,0 +1,200 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { ApiKeyAuth } from './auth';
+interface SessionAuth {
+    userId: string;
+    scopes: string[];
+    flags: import('../entities/types').UserFlag[];
+    isSession: true;
+}
+type Auth = ApiKeyAuth | SessionAuth;
+/**
+ * Validates authentication using session or API key
+ * Prefers session auth if available, falls back to API key
+ */
+export declare function validateAndAuthenticateRequest(request: NextRequest): Promise<{
+    auth: Auth;
+    rateLimitResponse?: NextResponse;
+}>;
+/**
+ * Valida la API key y aplica rate limiting
+ * Esta función debe ser llamada al inicio de cada endpoint API v1
+ */
+export declare function validateAndAuthenticateApiRequest(request: NextRequest): Promise<{
+    auth: ApiKeyAuth;
+    rateLimitResponse?: NextResponse;
+}>;
+/**
+ * Extrae la información de autenticación API de los headers de la request
+ * @deprecated Use validateAndAuthenticateApiRequest instead
+ */
+export declare function getApiAuth(request: NextRequest): ApiKeyAuth;
+/**
+ * Verifica que la autenticación tenga el scope requerido
+ * Retorna un NextResponse de error si no tiene permisos, null si está autorizado
+ */
+export declare function checkScope(auth: Auth, requiredScope: string): NextResponse | null;
+/**
+ * Crea una respuesta exitosa estandarizada para la API
+ */
+export declare function createApiResponse<T>(data: T, responseMeta?: Record<string, unknown>, status?: number): NextResponse<{
+    success: boolean;
+    data: T;
+    info: {
+        timestamp: string;
+    };
+}>;
+/**
+ * Crea una respuesta de error estandarizada para la API
+ */
+export declare function createApiError(message: string, status?: number, details?: unknown, code?: string): NextResponse<{
+    success: boolean;
+    error: string;
+    code: string;
+    details: unknown;
+    info: {
+        timestamp: string;
+    };
+}>;
+/**
+ * Parsea y valida parámetros de paginación
+ */
+export declare function parsePaginationParams(request: NextRequest): {
+    page: number;
+    limit: number;
+    offset: number;
+};
+/**
+ * Crea metadatos de paginación para respuestas
+ */
+export declare function createPaginationMeta(page: number, limit: number, total: number): {
+    page: number;
+    limit: number;
+    total: number;
+    totalPages: number;
+    hasNextPage: boolean;
+    hasPrevPage: boolean;
+};
+/**
+ * Registra el uso de la API para auditoría
+ */
+export declare function logApiUsage(auth: ApiKeyAuth, request: NextRequest, statusCode: number, responseTime?: number, requestBody?: unknown): Promise<void>;
+/**
+ * Wrapper para endpoints que agrega logging automático
+ */
+export declare function withApiLogging<T extends unknown[]>(handler: (request: NextRequest, ...args: T) => Promise<NextResponse>): (request: NextRequest, ...args: T) => Promise<NextResponse>;
+/**
+ * Valida que un UUID tenga formato válido
+ */
+export declare function isValidUUID(uuid: string): boolean;
+/**
+ * Sanitiza parámetros de búsqueda para prevenir inyección SQL
+ */
+export declare function sanitizeSearchQuery(query: string): string;
+/**
+ * Parsea filtros de query parameters
+ *
+ * Note: Replaces hardcoded allowedFilters array with registry-based configuration.
+ * Previously violated anti-hardcoding policies with static filter list.
+ */
+export declare function parseFilters(request: NextRequest): Record<string, string>;
+/**
+ * Agrega headers de CORS para API externa
+ * Uses unified getCorsOrigins() for single source of truth
+ */
+export declare function addCorsHeaders(response: NextResponse, request?: NextRequest): Promise<NextResponse>;
+/**
+ * Maneja requests OPTIONS para CORS preflight
+ */
+export declare function handleCorsPreflightRequest(request?: NextRequest): Promise<NextResponse>;
+/**
+ * Wraps an auth handler response with CORS headers
+ *
+ * Better Auth handles OPTIONS preflight but doesn't add CORS headers to actual responses.
+ * This utility wraps responses to add proper CORS headers for cross-origin requests.
+ *
+ * @param handler - The original handler function (GET, POST, etc.)
+ * @param request - The incoming request
+ * @returns Response with CORS headers added
+ *
+ * @example
+ * ```ts
+ * // In your auth route:
+ * import { wrapAuthHandlerWithCors } from '@nextsparkjs/core/lib/api/helpers'
+ *
+ * export async function POST(req: NextRequest) {
+ *   return wrapAuthHandlerWithCors(() => handlers.POST(req), req)
+ * }
+ * ```
+ */
+export declare function wrapAuthHandlerWithCors(handler: () => Promise<Response>, request: NextRequest): Promise<Response>;
+/**
+ * Parsea los parámetros de metadata de una request
+ * Soporta: metas=all, metas=key1,key2,key3, o sin parámetro
+ */
+export interface MetaParams {
+    includeMetadata: boolean;
+    specificKeys?: string[];
+    includeAll: boolean;
+}
+export declare function parseMetaParams(request: NextRequest): MetaParams;
+/**
+ * Child entity parameters for request parsing
+ */
+export interface ChildParams {
+    includeChildren: boolean;
+    includeAll: boolean;
+    specificChildren?: string[];
+}
+/**
+ * Parse child entities parameters from request URL
+ * Supports: child=all, child=audiences, child=audiences,products
+ */
+export declare function parseChildParams(request: NextRequest): ChildParams;
+/**
+ * Helper para incluir metadata en entidades según parámetros de request
+ * Uso: await includeEntityMetadata('user', users, metaParams, userId)
+ */
+export declare function includeEntityMetadata<T extends {
+    id: string;
+}>(entityType: string, entities: T[], metaParams: MetaParams, userId: string): Promise<(T & {
+    metas?: Record<string, unknown>;
+})[]>;
+/**
+ * Helper para incluir child entities en entidades según parámetros de request
+ * Uso: await includeEntityChildren('client', clients, childParams, userId, entityConfig)
+ */
+export declare function includeEntityChildren<T extends {
+    id: string;
+}>(entityName: string, entities: T[], childParams: ChildParams, userId: string, entityConfig?: unknown): Promise<(T & {
+    child?: Record<string, unknown[]>;
+})[]>;
+/**
+ * Helper para incluir metadata en una entidad individual según parámetros de request
+ * Uso: await includeEntityMetadataForSingle('user', user, metaParams, userId)
+ */
+export declare function includeEntityMetadataForSingle<T extends {
+    id: string;
+}>(entityType: string, entity: T, metaParams: MetaParams, userId: string): Promise<T & {
+    metas?: Record<string, unknown>;
+}>;
+/**
+ * Helper para manejar metadata en CREATE/UPDATE: responder con metadata solo si se envió en el payload
+ * Uso: await handleEntityMetadataInResponse('user', entity, metaWasProvided, userId)
+ */
+export declare function handleEntityMetadataInResponse<T extends {
+    id: string;
+}>(entityType: string, entity: T, metaWasProvided: boolean, userId: string): Promise<T & {
+    metas?: Record<string, unknown>;
+}>;
+/**
+ * Helper para procesar metadata en CREATE/UPDATE
+ * Uso: await processEntityMetadata('user', entityId, meta, userId)
+ *
+ * NOTE: Metas tables do NOT have teamId - security is inherited from parent entity via RLS.
+ */
+export declare function processEntityMetadata(entityType: string, entityId: string, meta: unknown, userId: string): Promise<{
+    success: boolean;
+    errors: string[];
+}>;
+export {};
+//# sourceMappingURL=helpers.d.ts.map

package/dist/lib/api/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/api/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,UAAU,EAAkB,MAAM,QAAQ,CAAC;AAapD,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,OAAO,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAC9C,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,KAAK,IAAI,GAAG,UAAU,GAAG,WAAW,CAAC;AAErC;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IAClF,IAAI,EAAE,IAAI,CAAC;IACX,iBAAiB,CAAC,EAAE,YAAY,CAAC;CAClC,CAAC,CAoCD;AAgFD;;;GAGG;AACH,wBAAsB,iCAAiC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IACrF,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,CAAC,EAAE,YAAY,CAAC;CAClC,CAAC,CA4BD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAwB3D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAkBjF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAE,MAAY;;;;;;GASzG;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAY,EACpB,OAAO,CAAC,EAAE,OAAO,EACjB,IAAI,CAAC,EAAE,MAAM;;;;;;;;GAWd;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAQA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;;;;;;;EAUd;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,EAChD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CA6CvE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAezE;AAUD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA0CzG;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAG7F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,EAChC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,QAAQ,CAAC,CAqCnB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CA0BhE;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CA0BlE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CA6BtD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CAgExD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CA2BlD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,eAAe,EAAE,OAAO,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAiBlD;AAoBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+DjD"}

package/dist/lib/api/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * API Library - Public API functionality
+ *
+ * This module exports all the core functionality for the public API system,
+ * including authentication, rate limiting, caching, and utilities.
+ */
+export * from './auth';
+export * from './auth/dual-auth';
+export * from './keys';
+export * from './helpers';
+export * from './rate-limit';
+export * from './cache';
+export * from './distributed-cache';
+export type { ApiKeyAuth, ApiKeyValidationResult } from './auth';
+export type { ApiScope } from './keys';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/api/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AAGpC,YAAY,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AACjE,YAAY,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC"}

package/dist/lib/api/index.js

@@ -1,4 +1,5 @@
 export * from "./auth.js";
+export * from "./auth/dual-auth.js";
 export * from "./keys.js";
 export * from "./helpers.js";
 export * from "./rate-limit.js";

package/dist/lib/api/keys.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Gestión de API Keys para acceso externo
+ */
+export declare class ApiKeyManager {
+    /**
+     * Genera una nueva API key con formato seguro
+     * Formato: sk_live_1234567890abcdef... (56 caracteres total)
+     */
+    static generateApiKey(): Promise<{
+        key: string;
+        hash: string;
+        prefix: string;
+    }>;
+    /**
+     * Valida el formato de una API key
+     */
+    static validateKeyFormat(key: string): boolean;
+    /**
+     * Extrae el prefix de una API key para identificación
+     */
+    static extractPrefix(key: string): string;
+    /**
+     * Genera hash SHA-256 de una API key
+     */
+    static hashKey(key: string): Promise<string>;
+    /**
+     * Valida que los scopes sean válidos
+     */
+    static validateScopes(scopes: string[]): {
+        valid: boolean;
+        invalidScopes: string[];
+    };
+    /**
+     * Genera un nombre sugerido para la API key basado en scopes
+     */
+    static suggestKeyName(scopes: string[]): string;
+}
+/**
+ * Definición de scopes disponibles para API keys
+ */
+export declare const API_SCOPES: {
+    readonly 'users:read': "Leer información de usuarios";
+    readonly 'users:write': "Crear y actualizar usuarios";
+    readonly 'users:delete': "Eliminar usuarios";
+    readonly 'tasks:read': "Leer tasks";
+    readonly 'tasks:write': "Crear y actualizar tasks";
+    readonly 'tasks:delete': "Eliminar tasks";
+    readonly 'media:read': "Leer información de archivos y media";
+    readonly 'media:write': "Subir y actualizar archivos";
+    readonly 'media:delete': "Eliminar archivos";
+    readonly 'admin:api-keys': "Gestionar API keys";
+    readonly 'admin:users': "Administración completa de usuarios";
+    readonly '*': "Acceso completo (solo superadmin)";
+};
+export type ApiScope = keyof typeof API_SCOPES;
+/**
+ * Categorías de scopes para organización en UI
+ */
+export declare const SCOPE_CATEGORIES: {
+    readonly users: {
+        readonly name: "Usuarios";
+        readonly description: "Gestión de usuarios del sistema";
+        readonly scopes: ApiScope[];
+    };
+    readonly tasks: {
+        readonly name: "Tasks";
+        readonly description: "Gestión de tareas y TODOs";
+        readonly scopes: ApiScope[];
+    };
+    readonly admin: {
+        readonly name: "Administración";
+        readonly description: "Funciones administrativas";
+        readonly scopes: ApiScope[];
+    };
+    readonly system: {
+        readonly name: "Sistema";
+        readonly description: "Acceso completo al sistema";
+        readonly scopes: ApiScope[];
+    };
+};
+/**
+ * Configuración de límites de API keys
+ */
+export declare const API_KEY_LIMITS: {
+    readonly maxKeysPerUser: number;
+    readonly maxKeyNameLength: 100;
+    readonly keyExpirationDays: 365;
+};
+/**
+ * Configuración de rate limiting por scope
+ */
+export declare const RATE_LIMITS: {
+    readonly default: {
+        readonly requests: 1000;
+        readonly windowMs: 60000;
+    };
+    readonly 'users:write': {
+        readonly requests: 100;
+        readonly windowMs: 60000;
+    };
+    readonly 'users:delete': {
+        readonly requests: 10;
+        readonly windowMs: 60000;
+    };
+    readonly 'tasks:write': {
+        readonly requests: 500;
+        readonly windowMs: 60000;
+    };
+    readonly 'teams:invite': {
+        readonly requests: 20;
+        readonly windowMs: 60000;
+    };
+    readonly 'teams:invite:respond': {
+        readonly requests: 50;
+        readonly windowMs: 60000;
+    };
+    readonly '*': {
+        readonly requests: 5000;
+        readonly windowMs: 60000;
+    };
+};
+/**
+ * Obtiene el rate limit aplicable para un conjunto de scopes
+ */
+export declare function getRateLimitForScopes(scopes: string[]): {
+    requests: number;
+    windowMs: number;
+};
+//# sourceMappingURL=keys.d.ts.map

package/dist/lib/api/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/lib/api/keys.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,aAAa;IACxB;;;OAGG;WACU,cAAc,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyBrF;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAM9C;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAKzC;;OAEG;WACU,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE;IAUpF;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM;CAchD;AAED;;GAEG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;CAsBb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,UAAU,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;yBAIgC,QAAQ,EAAE;;;;;yBAKV,QAAQ,EAAE;;;;;yBAKtB,QAAQ,EAAE;;;;;yBAKtC,QAAQ,EAAE;;CAErB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,cAAc;;;;CAIjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASd,CAAC;AAEX;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAmB9F"}

package/dist/lib/api/meta.middleware.d.ts

@@ -0,0 +1,16 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { EntityType } from '../../types/meta.types';
+interface RouteContext {
+    params: Promise<{
+        id: string;
+        [key: string]: string;
+    }>;
+}
+/**
+ * Middleware que procesa meta datos en endpoints existentes
+ */
+export declare function withUnifiedMeta(entityType: EntityType): <T extends {
+    id: string;
+}>(handler: (req: NextRequest, context: RouteContext) => Promise<NextResponse | T | T[]>) => (req: NextRequest, context: RouteContext) => Promise<any>;
+export {};
+//# sourceMappingURL=meta.middleware.d.ts.map

package/dist/lib/api/meta.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.middleware.d.ts","sourceRoot":"","sources":["../../../src/lib/api/meta.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,UAAU,YAAY;IACpB,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,IACnC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACvC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAE9D,KAAK,WAAW,EAAE,SAAS,YAAY,kBAYjE"}