@questpie/admin 1.1.1 → 2.0.0

package/dist/server/modules/admin/functions/preview.mjs

@@ -0,0 +1,243 @@
+import { getPreviewSecret } from "../../../../shared/preview-utils.mjs";
+import { z } from "zod";
+import { fn } from "questpie";
+import { createHmac, timingSafeEqual } from "node:crypto";
+
+//#region src/server/modules/admin/functions/preview.ts
+/**
+* Preview Functions - Server-side
+*
+* RPC functions for draft mode preview.
+* Handles token minting for secure, shareable preview links.
+*
+* Browser-safe utilities (isDraftMode, createDraftModeCookie, etc.) are in @questpie/admin/shared
+*/
+function base64UrlEncode(input) {
+	return (Buffer.isBuffer(input) ? input : Buffer.from(input)).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+function base64UrlDecode(input) {
+	let base64 = input.replace(/-/g, "+").replace(/_/g, "/");
+	const padding = base64.length % 4;
+	if (padding) base64 += "=".repeat(4 - padding);
+	return Buffer.from(base64, "base64").toString("utf8");
+}
+const mintPreviewTokenSchema = z.object({
+	path: z.string().min(1, "Path is required"),
+	ttlMs: z.number().positive().optional()
+});
+const mintPreviewTokenOutputSchema = z.object({
+	token: z.string(),
+	expiresAt: z.number()
+});
+const verifyPreviewTokenSchema = z.object({ token: z.string() });
+const verifyPreviewTokenOutputSchema = z.object({
+	valid: z.boolean(),
+	path: z.string().optional(),
+	error: z.string().optional()
+});
+const DEFAULT_TTL_MS = 3600 * 1e3;
+/**
+* Create preview-related RPC functions.
+*
+* @param secret - Secret key for signing tokens
+* @returns Object with preview functions
+*/
+function createPreviewFunctions(secret) {
+	const signPayload = (payload) => {
+		return base64UrlEncode(createHmac("sha256", secret).update(payload).digest());
+	};
+	return {
+		mintPreviewToken: fn({
+			type: "mutation",
+			schema: mintPreviewTokenSchema,
+			outputSchema: mintPreviewTokenOutputSchema,
+			handler: async ({ input, session }) => {
+				if (!session) throw new Error("Unauthorized: Admin session required");
+				const { path, ttlMs = DEFAULT_TTL_MS } = input;
+				const expiresAt = Date.now() + ttlMs;
+				const payload = {
+					path,
+					exp: expiresAt
+				};
+				const encodedPayload = base64UrlEncode(JSON.stringify(payload));
+				return {
+					token: `${encodedPayload}.${signPayload(encodedPayload)}`,
+					expiresAt
+				};
+			}
+		}),
+		verifyPreviewToken: fn({
+			type: "query",
+			schema: verifyPreviewTokenSchema,
+			outputSchema: verifyPreviewTokenOutputSchema,
+			handler: async ({ input }) => {
+				const { token } = input;
+				const [encodedPayload, signature] = token.split(".");
+				if (!encodedPayload || !signature) return {
+					valid: false,
+					error: "Invalid token format"
+				};
+				const expectedSignature = signPayload(encodedPayload);
+				const signatureBuffer = Uint8Array.from(Buffer.from(signature));
+				const expectedBuffer = Uint8Array.from(Buffer.from(expectedSignature));
+				if (signatureBuffer.length !== expectedBuffer.length) return {
+					valid: false,
+					error: "Invalid signature"
+				};
+				if (!timingSafeEqual(signatureBuffer, expectedBuffer)) return {
+					valid: false,
+					error: "Invalid signature"
+				};
+				try {
+					const payload = JSON.parse(base64UrlDecode(encodedPayload));
+					if (!payload?.exp || typeof payload.exp !== "number") return {
+						valid: false,
+						error: "Invalid payload"
+					};
+					if (payload.exp < Date.now()) return {
+						valid: false,
+						error: "Token expired"
+					};
+					if (!payload.path || typeof payload.path !== "string") return {
+						valid: false,
+						error: "Invalid path"
+					};
+					return {
+						valid: true,
+						path: payload.path
+					};
+				} catch {
+					return {
+						valid: false,
+						error: "Invalid payload"
+					};
+				}
+			}
+		})
+	};
+}
+/**
+* Verify a preview token without RPC.
+* Used directly in route handlers where RPC is not available.
+*
+* @param token - The preview token to verify
+* @param secret - The secret used to sign the token
+* @returns The payload if valid, null otherwise
+*/
+function verifyPreviewTokenDirect(token, secret) {
+	const [encodedPayload, signature] = token.split(".");
+	if (!encodedPayload || !signature) return null;
+	const expectedSignature = base64UrlEncode(createHmac("sha256", secret).update(encodedPayload).digest());
+	const signatureBuffer = Uint8Array.from(Buffer.from(signature));
+	const expectedBuffer = Uint8Array.from(Buffer.from(expectedSignature));
+	if (signatureBuffer.length !== expectedBuffer.length) return null;
+	if (!timingSafeEqual(signatureBuffer, expectedBuffer)) return null;
+	try {
+		const payload = JSON.parse(base64UrlDecode(encodedPayload));
+		if (!payload?.exp || typeof payload.exp !== "number") return null;
+		if (payload.exp < Date.now()) return null;
+		if (!payload.path || typeof payload.path !== "string") return null;
+		return payload;
+	} catch {
+		return null;
+	}
+}
+/**
+* Create a preview token verifier with bound secret.
+* Use this in route handlers to avoid passing secret repeatedly.
+*
+* @param secret - The secret used to sign tokens (optional, uses env if not provided)
+* @returns A verify function that only needs the token
+*
+* @example
+* ```ts
+* // Create once at module level
+* const verifyPreviewToken = createPreviewTokenVerifier();
+*
+* // Use in route handler
+* const payload = verifyPreviewToken(token);
+* if (!payload) {
+*   return new Response("Invalid token", { status: 401 });
+* }
+* ```
+*/
+function createPreviewTokenVerifier(secret) {
+	const resolvedSecret = secret ?? getPreviewSecret();
+	return (token) => {
+		return verifyPreviewTokenDirect(token, resolvedSecret);
+	};
+}
+const getPreviewUrlSchema = z.object({
+	collection: z.string().min(1, "Collection name is required"),
+	record: z.record(z.string(), z.unknown()),
+	locale: z.string().optional()
+});
+const getPreviewUrlOutputSchema = z.object({
+	url: z.string().nullable(),
+	error: z.string().optional()
+});
+/**
+* Get preview URL for a collection record.
+*
+* Calls the server-side url() function from the collection's .preview() config.
+* This is needed because url() is a function that cannot be serialized to JSON.
+*
+* @example
+* ```ts
+* const { url } = await client.rpc.getPreviewUrl({
+*   collection: "pages",
+*   record: { slug: "about", title: "About Us" },
+*   locale: "en",
+* });
+* // Returns: "/about?preview=true"
+* ```
+*/
+const getPreviewUrl = fn({
+	type: "query",
+	schema: getPreviewUrlSchema,
+	outputSchema: getPreviewUrlOutputSchema,
+	handler: async ({ input, app, session }) => {
+		if (!session) return {
+			url: null,
+			error: "Unauthorized: Admin session required"
+		};
+		const { collection: collectionName, record, locale } = input;
+		const collection = app.getCollections()[collectionName];
+		if (!collection) return {
+			url: null,
+			error: `Collection '${collectionName}' not found`
+		};
+		const previewConfig = collection.state.adminPreview;
+		if (!previewConfig?.url) return {
+			url: null,
+			error: "No preview URL configured for this collection"
+		};
+		if (previewConfig.enabled === false) return {
+			url: null,
+			error: "Preview is disabled for this collection"
+		};
+		try {
+			return { url: previewConfig.url({
+				record,
+				locale
+			}) };
+		} catch (err) {
+			return {
+				url: null,
+				error: `Failed to generate preview URL: ${err instanceof Error ? err.message : "Unknown error"}`
+			};
+		}
+	}
+});
+/**
+* Default preview functions bundle with env-based secret.
+* Used by adminModule to register preview RPC functions.
+*/
+const previewFunctions = {
+	...createPreviewFunctions(getPreviewSecret()),
+	getPreviewUrl
+};
+
+//#endregion
+export { createPreviewFunctions, createPreviewTokenVerifier, getPreviewUrl, previewFunctions, verifyPreviewTokenDirect };
+//# sourceMappingURL=preview.mjs.map

package/dist/server/modules/admin/functions/preview.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.mjs","names":["payload: PreviewTokenPayload"],"sources":["../../../../../src/server/modules/admin/functions/preview.ts"],"sourcesContent":["/**\n * Preview Functions - Server-side\n *\n * RPC functions for draft mode preview.\n * Handles token minting for secure, shareable preview links.\n *\n * Browser-safe utilities (isDraftMode, createDraftModeCookie, etc.) are in @questpie/admin/shared\n */\n\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { fn, type Questpie } from \"questpie\";\nimport { z } from \"zod\";\nimport { getPreviewSecret } from \"#questpie/admin/shared/preview-utils.js\";\nimport type { PreviewConfig } from \"../../../augmentation.js\";\n\n// ============================================================================\n// Token Utilities\n// ============================================================================\n\nfunction base64UrlEncode(input: string | Buffer): string {\n\tconst buffer = Buffer.isBuffer(input) ? input : Buffer.from(input);\n\treturn buffer\n\t\t.toString(\"base64\")\n\t\t.replace(/\\+/g, \"-\")\n\t\t.replace(/\\//g, \"_\")\n\t\t.replace(/=+$/g, \"\");\n}\n\nfunction base64UrlDecode(input: string): string {\n\tlet base64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n\tconst padding = base64.length % 4;\n\tif (padding) {\n\t\tbase64 += \"=\".repeat(4 - padding);\n\t}\n\treturn Buffer.from(base64, \"base64\").toString(\"utf8\");\n}\n\n// ============================================================================\n// Schema Definitions\n// ============================================================================\n\nconst mintPreviewTokenSchema = z.object({\n\tpath: z.string().min(1, \"Path is required\"),\n\tttlMs: z.number().positive().optional(),\n});\n\nconst mintPreviewTokenOutputSchema = z.object({\n\ttoken: z.string(),\n\texpiresAt: z.number(),\n});\n\nconst verifyPreviewTokenSchema = z.object({\n\ttoken: z.string(),\n});\n\nconst verifyPreviewTokenOutputSchema = z.object({\n\tvalid: z.boolean(),\n\tpath: z.string().optional(),\n\terror: z.string().optional(),\n});\n\n// ============================================================================\n// Preview Token Payload\n// ============================================================================\n\nexport interface PreviewTokenPayload {\n\tpath: string;\n\texp: number;\n}\n\n// ============================================================================\n// Functions Factory\n// ============================================================================\n\nconst DEFAULT_TTL_MS = 60 * 60 * 1000; // 1 hour\n\n/**\n * Create preview-related RPC functions.\n *\n * @param secret - Secret key for signing tokens\n * @returns Object with preview functions\n */\nexport function createPreviewFunctions(secret: string) {\n\tconst signPayload = (payload: string): string => {\n\t\tconst signature = createHmac(\"sha256\", secret).update(payload).digest();\n\t\treturn base64UrlEncode(signature);\n\t};\n\n\t/**\n\t * Mint a preview token for draft mode access.\n\t *\n\t * Requires authenticated admin session.\n\t * Token contains the target path and expiration time.\n\t *\n\t * @example\n\t * ```ts\n\t * const { token } = await client.rpc.mintPreviewToken({\n\t *   path: \"/pages/about\",\n\t *   ttlMs: 30 * 60 * 1000, // 30 minutes\n\t * });\n\t * // Use: /api/preview?token=${token}\n\t * ```\n\t */\n\tconst mintPreviewToken = fn({\n\t\ttype: \"mutation\",\n\t\tschema: mintPreviewTokenSchema,\n\t\toutputSchema: mintPreviewTokenOutputSchema,\n\t\thandler: async ({ input, session }) => {\n\t\t\t// Require authenticated admin session\n\t\t\tif (!session) {\n\t\t\t\tthrow new Error(\"Unauthorized: Admin session required\");\n\t\t\t}\n\n\t\t\tconst { path, ttlMs = DEFAULT_TTL_MS } = input;\n\t\t\tconst expiresAt = Date.now() + ttlMs;\n\n\t\t\tconst payload: PreviewTokenPayload = { path, exp: expiresAt };\n\t\t\tconst payloadString = JSON.stringify(payload);\n\t\t\tconst encodedPayload = base64UrlEncode(payloadString);\n\t\t\tconst signature = signPayload(encodedPayload);\n\n\t\t\treturn {\n\t\t\t\ttoken: `${encodedPayload}.${signature}`,\n\t\t\t\texpiresAt,\n\t\t\t};\n\t\t},\n\t});\n\n\t/**\n\t * Verify a preview token.\n\t *\n\t * Used by the preview route to validate tokens before setting draft mode cookie.\n\t * Does not require authentication (token IS the authentication).\n\t *\n\t * @example\n\t * ```ts\n\t * const result = await client.rpc.verifyPreviewToken({ token });\n\t * if (result.valid) {\n\t *   // Redirect to result.path with draft mode cookie\n\t * }\n\t * ```\n\t */\n\tconst verifyPreviewToken = fn({\n\t\ttype: \"query\",\n\t\tschema: verifyPreviewTokenSchema,\n\t\toutputSchema: verifyPreviewTokenOutputSchema,\n\t\thandler: async ({ input }) => {\n\t\t\tconst { token } = input;\n\n\t\t\tconst [encodedPayload, signature] = token.split(\".\");\n\t\t\tif (!encodedPayload || !signature) {\n\t\t\t\treturn { valid: false, error: \"Invalid token format\" };\n\t\t\t}\n\n\t\t\t// Verify signature\n\t\t\tconst expectedSignature = signPayload(encodedPayload);\n\t\t\tconst signatureBuffer = Uint8Array.from(Buffer.from(signature));\n\t\t\tconst expectedBuffer = Uint8Array.from(Buffer.from(expectedSignature));\n\n\t\t\tif (signatureBuffer.length !== expectedBuffer.length) {\n\t\t\t\treturn { valid: false, error: \"Invalid signature\" };\n\t\t\t}\n\n\t\t\tif (!timingSafeEqual(signatureBuffer, expectedBuffer)) {\n\t\t\t\treturn { valid: false, error: \"Invalid signature\" };\n\t\t\t}\n\n\t\t\t// Parse and validate payload\n\t\t\ttry {\n\t\t\t\tconst payload = JSON.parse(\n\t\t\t\t\tbase64UrlDecode(encodedPayload),\n\t\t\t\t) as PreviewTokenPayload;\n\n\t\t\t\tif (!payload?.exp || typeof payload.exp !== \"number\") {\n\t\t\t\t\treturn { valid: false, error: \"Invalid payload\" };\n\t\t\t\t}\n\n\t\t\t\tif (payload.exp < Date.now()) {\n\t\t\t\t\treturn { valid: false, error: \"Token expired\" };\n\t\t\t\t}\n\n\t\t\t\tif (!payload.path || typeof payload.path !== \"string\") {\n\t\t\t\t\treturn { valid: false, error: \"Invalid path\" };\n\t\t\t\t}\n\n\t\t\t\treturn { valid: true, path: payload.path };\n\t\t\t} catch {\n\t\t\t\treturn { valid: false, error: \"Invalid payload\" };\n\t\t\t}\n\t\t},\n\t});\n\n\treturn {\n\t\tmintPreviewToken,\n\t\tverifyPreviewToken,\n\t};\n}\n\n// ============================================================================\n// Standalone Token Verification (for route handlers)\n// ============================================================================\n\n/**\n * Verify a preview token without RPC.\n * Used directly in route handlers where RPC is not available.\n *\n * @param token - The preview token to verify\n * @param secret - The secret used to sign the token\n * @returns The payload if valid, null otherwise\n */\nexport function verifyPreviewTokenDirect(\n\ttoken: string,\n\tsecret: string,\n): PreviewTokenPayload | null {\n\tconst [encodedPayload, signature] = token.split(\".\");\n\tif (!encodedPayload || !signature) return null;\n\n\tconst expectedSignature = base64UrlEncode(\n\t\tcreateHmac(\"sha256\", secret).update(encodedPayload).digest(),\n\t);\n\n\tconst signatureBuffer = Uint8Array.from(Buffer.from(signature));\n\tconst expectedBuffer = Uint8Array.from(Buffer.from(expectedSignature));\n\n\tif (signatureBuffer.length !== expectedBuffer.length) return null;\n\tif (!timingSafeEqual(signatureBuffer, expectedBuffer)) return null;\n\n\ttry {\n\t\tconst payload = JSON.parse(\n\t\t\tbase64UrlDecode(encodedPayload),\n\t\t) as PreviewTokenPayload;\n\n\t\tif (!payload?.exp || typeof payload.exp !== \"number\") return null;\n\t\tif (payload.exp < Date.now()) return null;\n\t\tif (!payload.path || typeof payload.path !== \"string\") return null;\n\n\t\treturn payload;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n// ============================================================================\n// Factory & Helpers\n// ============================================================================\n\n/**\n * Create a preview token verifier with bound secret.\n * Use this in route handlers to avoid passing secret repeatedly.\n *\n * @param secret - The secret used to sign tokens (optional, uses env if not provided)\n * @returns A verify function that only needs the token\n *\n * @example\n * ```ts\n * // Create once at module level\n * const verifyPreviewToken = createPreviewTokenVerifier();\n *\n * // Use in route handler\n * const payload = verifyPreviewToken(token);\n * if (!payload) {\n *   return new Response(\"Invalid token\", { status: 401 });\n * }\n * ```\n */\nexport function createPreviewTokenVerifier(secret?: string) {\n\tconst resolvedSecret = secret ?? getPreviewSecret();\n\n\treturn (token: string): PreviewTokenPayload | null => {\n\t\treturn verifyPreviewTokenDirect(token, resolvedSecret);\n\t};\n}\n\n// ============================================================================\n// Preview URL Generation\n// ============================================================================\n\nconst getPreviewUrlSchema = z.object({\n\tcollection: z.string().min(1, \"Collection name is required\"),\n\trecord: z.record(z.string(), z.unknown()),\n\tlocale: z.string().optional(),\n});\n\nconst getPreviewUrlOutputSchema = z.object({\n\turl: z.string().nullable(),\n\terror: z.string().optional(),\n});\n\n/**\n * Get preview URL for a collection record.\n *\n * Calls the server-side url() function from the collection's .preview() config.\n * This is needed because url() is a function that cannot be serialized to JSON.\n *\n * @example\n * ```ts\n * const { url } = await client.rpc.getPreviewUrl({\n *   collection: \"pages\",\n *   record: { slug: \"about\", title: \"About Us\" },\n *   locale: \"en\",\n * });\n * // Returns: \"/about?preview=true\"\n * ```\n */\nexport const getPreviewUrl = fn({\n\ttype: \"query\",\n\tschema: getPreviewUrlSchema,\n\toutputSchema: getPreviewUrlOutputSchema,\n\thandler: async ({ input, app, session }) => {\n\t\t// Require authenticated admin session\n\t\tif (!session) {\n\t\t\treturn { url: null, error: \"Unauthorized: Admin session required\" };\n\t\t}\n\n\t\tconst { collection: collectionName, record, locale } = input;\n\t\tconst cms = app as Questpie<any>;\n\n\t\t// Get collection from CMS\n\t\tconst collections = cms.getCollections();\n\t\tconst collection = collections[collectionName];\n\n\t\tif (!collection) {\n\t\t\treturn { url: null, error: `Collection '${collectionName}' not found` };\n\t\t}\n\n\t\t// Get preview config from collection state\n\t\tconst previewConfig = (collection.state as any).adminPreview as\n\t\t\t| PreviewConfig\n\t\t\t| undefined;\n\n\t\tif (!previewConfig?.url) {\n\t\t\treturn {\n\t\t\t\turl: null,\n\t\t\t\terror: \"No preview URL configured for this collection\",\n\t\t\t};\n\t\t}\n\n\t\tif (previewConfig.enabled === false) {\n\t\t\treturn { url: null, error: \"Preview is disabled for this collection\" };\n\t\t}\n\n\t\ttry {\n\t\t\tconst url = previewConfig.url({ record, locale });\n\t\t\treturn { url };\n\t\t} catch (err) {\n\t\t\treturn {\n\t\t\t\turl: null,\n\t\t\t\terror: `Failed to generate preview URL: ${err instanceof Error ? err.message : \"Unknown error\"}`,\n\t\t\t};\n\t\t}\n\t},\n});\n\n// ============================================================================\n// Default Functions Bundle\n// ============================================================================\n\n/**\n * Default preview functions bundle with env-based secret.\n * Used by adminModule to register preview RPC functions.\n */\nexport const previewFunctions = {\n\t...createPreviewFunctions(getPreviewSecret()),\n\tgetPreviewUrl,\n};\n"],"mappings":";;;;;;;;;;;;;;AAmBA,SAAS,gBAAgB,OAAgC;AAExD,SADe,OAAO,SAAS,MAAM,GAAG,QAAQ,OAAO,KAAK,MAAM,EAEhE,SAAS,SAAS,CAClB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,IAAI,CACnB,QAAQ,QAAQ,GAAG;;AAGtB,SAAS,gBAAgB,OAAuB;CAC/C,IAAI,SAAS,MAAM,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI;CACxD,MAAM,UAAU,OAAO,SAAS;AAChC,KAAI,QACH,WAAU,IAAI,OAAO,IAAI,QAAQ;AAElC,QAAO,OAAO,KAAK,QAAQ,SAAS,CAAC,SAAS,OAAO;;AAOtD,MAAM,yBAAyB,EAAE,OAAO;CACvC,MAAM,EAAE,QAAQ,CAAC,IAAI,GAAG,mBAAmB;CAC3C,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CACvC,CAAC;AAEF,MAAM,+BAA+B,EAAE,OAAO;CAC7C,OAAO,EAAE,QAAQ;CACjB,WAAW,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,2BAA2B,EAAE,OAAO,EACzC,OAAO,EAAE,QAAQ,EACjB,CAAC;AAEF,MAAM,iCAAiC,EAAE,OAAO;CAC/C,OAAO,EAAE,SAAS;CAClB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAeF,MAAM,iBAAiB,OAAU;;;;;;;AAQjC,SAAgB,uBAAuB,QAAgB;CACtD,MAAM,eAAe,YAA4B;AAEhD,SAAO,gBADW,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,QAAQ,CACtC;;AA2GlC,QAAO;EACN,kBA1FwB,GAAG;GAC3B,MAAM;GACN,QAAQ;GACR,cAAc;GACd,SAAS,OAAO,EAAE,OAAO,cAAc;AAEtC,QAAI,CAAC,QACJ,OAAM,IAAI,MAAM,uCAAuC;IAGxD,MAAM,EAAE,MAAM,QAAQ,mBAAmB;IACzC,MAAM,YAAY,KAAK,KAAK,GAAG;IAE/B,MAAMA,UAA+B;KAAE;KAAM,KAAK;KAAW;IAE7D,MAAM,iBAAiB,gBADD,KAAK,UAAU,QAAQ,CACQ;AAGrD,WAAO;KACN,OAAO,GAAG,eAAe,GAHR,YAAY,eAAe;KAI5C;KACA;;GAEF,CAAC;EAoED,oBApD0B,GAAG;GAC7B,MAAM;GACN,QAAQ;GACR,cAAc;GACd,SAAS,OAAO,EAAE,YAAY;IAC7B,MAAM,EAAE,UAAU;IAElB,MAAM,CAAC,gBAAgB,aAAa,MAAM,MAAM,IAAI;AACpD,QAAI,CAAC,kBAAkB,CAAC,UACvB,QAAO;KAAE,OAAO;KAAO,OAAO;KAAwB;IAIvD,MAAM,oBAAoB,YAAY,eAAe;IACrD,MAAM,kBAAkB,WAAW,KAAK,OAAO,KAAK,UAAU,CAAC;IAC/D,MAAM,iBAAiB,WAAW,KAAK,OAAO,KAAK,kBAAkB,CAAC;AAEtE,QAAI,gBAAgB,WAAW,eAAe,OAC7C,QAAO;KAAE,OAAO;KAAO,OAAO;KAAqB;AAGpD,QAAI,CAAC,gBAAgB,iBAAiB,eAAe,CACpD,QAAO;KAAE,OAAO;KAAO,OAAO;KAAqB;AAIpD,QAAI;KACH,MAAM,UAAU,KAAK,MACpB,gBAAgB,eAAe,CAC/B;AAED,SAAI,CAAC,SAAS,OAAO,OAAO,QAAQ,QAAQ,SAC3C,QAAO;MAAE,OAAO;MAAO,OAAO;MAAmB;AAGlD,SAAI,QAAQ,MAAM,KAAK,KAAK,CAC3B,QAAO;MAAE,OAAO;MAAO,OAAO;MAAiB;AAGhD,SAAI,CAAC,QAAQ,QAAQ,OAAO,QAAQ,SAAS,SAC5C,QAAO;MAAE,OAAO;MAAO,OAAO;MAAgB;AAG/C,YAAO;MAAE,OAAO;MAAM,MAAM,QAAQ;MAAM;YACnC;AACP,YAAO;MAAE,OAAO;MAAO,OAAO;MAAmB;;;GAGnD,CAAC;EAKD;;;;;;;;;;AAeF,SAAgB,yBACf,OACA,QAC6B;CAC7B,MAAM,CAAC,gBAAgB,aAAa,MAAM,MAAM,IAAI;AACpD,KAAI,CAAC,kBAAkB,CAAC,UAAW,QAAO;CAE1C,MAAM,oBAAoB,gBACzB,WAAW,UAAU,OAAO,CAAC,OAAO,eAAe,CAAC,QAAQ,CAC5D;CAED,MAAM,kBAAkB,WAAW,KAAK,OAAO,KAAK,UAAU,CAAC;CAC/D,MAAM,iBAAiB,WAAW,KAAK,OAAO,KAAK,kBAAkB,CAAC;AAEtE,KAAI,gBAAgB,WAAW,eAAe,OAAQ,QAAO;AAC7D,KAAI,CAAC,gBAAgB,iBAAiB,eAAe,CAAE,QAAO;AAE9D,KAAI;EACH,MAAM,UAAU,KAAK,MACpB,gBAAgB,eAAe,CAC/B;AAED,MAAI,CAAC,SAAS,OAAO,OAAO,QAAQ,QAAQ,SAAU,QAAO;AAC7D,MAAI,QAAQ,MAAM,KAAK,KAAK,CAAE,QAAO;AACrC,MAAI,CAAC,QAAQ,QAAQ,OAAO,QAAQ,SAAS,SAAU,QAAO;AAE9D,SAAO;SACA;AACP,SAAO;;;;;;;;;;;;;;;;;;;;;;AA2BT,SAAgB,2BAA2B,QAAiB;CAC3D,MAAM,iBAAiB,UAAU,kBAAkB;AAEnD,SAAQ,UAA8C;AACrD,SAAO,yBAAyB,OAAO,eAAe;;;AAQxD,MAAM,sBAAsB,EAAE,OAAO;CACpC,YAAY,EAAE,QAAQ,CAAC,IAAI,GAAG,8BAA8B;CAC5D,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;CACzC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,4BAA4B,EAAE,OAAO;CAC1C,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;;;;;;;;;;;;;;;;;AAkBF,MAAa,gBAAgB,GAAG;CAC/B,MAAM;CACN,QAAQ;CACR,cAAc;CACd,SAAS,OAAO,EAAE,OAAO,KAAK,cAAc;AAE3C,MAAI,CAAC,QACJ,QAAO;GAAE,KAAK;GAAM,OAAO;GAAwC;EAGpE,MAAM,EAAE,YAAY,gBAAgB,QAAQ,WAAW;EAKvD,MAAM,aAJM,IAGY,gBAAgB,CACT;AAE/B,MAAI,CAAC,WACJ,QAAO;GAAE,KAAK;GAAM,OAAO,eAAe,eAAe;GAAc;EAIxE,MAAM,gBAAiB,WAAW,MAAc;AAIhD,MAAI,CAAC,eAAe,IACnB,QAAO;GACN,KAAK;GACL,OAAO;GACP;AAGF,MAAI,cAAc,YAAY,MAC7B,QAAO;GAAE,KAAK;GAAM,OAAO;GAA2C;AAGvE,MAAI;AAEH,UAAO,EAAE,KADG,cAAc,IAAI;IAAE;IAAQ;IAAQ,CAAC,EACnC;WACN,KAAK;AACb,UAAO;IACN,KAAK;IACL,OAAO,mCAAmC,eAAe,QAAQ,IAAI,UAAU;IAC/E;;;CAGH,CAAC;;;;;AAUF,MAAa,mBAAmB;CAC/B,GAAG,uBAAuB,kBAAkB,CAAC;CAC7C;CACA"}

package/dist/server/modules/admin/functions/reactive.d.mts

@@ -0,0 +1,99 @@
+import * as questpie18956 from "questpie";
+
+//#region src/server/modules/admin/functions/reactive.d.ts
+
+/**
+ * Reactive Field RPC Endpoints
+ *
+ * Provides server-side execution of reactive field handlers:
+ * - /reactive: Batch endpoint for compute, hidden, readOnly, disabled
+ * - /options: Dynamic options for select/relation fields
+ */
+/**
+ * Batch reactive endpoint.
+ * Executes multiple reactive handlers in a single request.
+ */
+declare const batchReactive: questpie18956.JsonFunctionDefinition<{
+  collection: string;
+  type: "collection" | "global";
+  requests: {
+    field: string;
+    type: "disabled" | "readOnly" | "hidden" | "compute";
+    formData: Record<string, unknown>;
+    siblingData?: Record<string, unknown> | null | undefined;
+    prevData?: Record<string, unknown> | null | undefined;
+    prevSiblingData?: Record<string, unknown> | null | undefined;
+  }[];
+}, {
+  results: {
+    field: string;
+    type: "disabled" | "readOnly" | "hidden" | "compute";
+    value: unknown;
+    error?: string | undefined;
+  }[];
+}>;
+/**
+ * Dynamic options endpoint.
+ * Fetches options for select/relation fields with search and pagination.
+ */
+declare const fieldOptions: questpie18956.JsonFunctionDefinition<{
+  collection: string;
+  type: "collection" | "global";
+  field: string;
+  formData: Record<string, unknown>;
+  search: string;
+  page: number;
+  limit: number;
+  siblingData?: Record<string, unknown> | null | undefined;
+}, {
+  options: {
+    value: string | number;
+    label: string | Record<string, string>;
+  }[];
+  hasMore?: boolean | undefined;
+  total?: number | undefined;
+}>;
+/**
+ * Reactive functions bundle.
+ */
+declare const reactiveFunctions: {
+  readonly batchReactive: questpie18956.JsonFunctionDefinition<{
+    collection: string;
+    type: "collection" | "global";
+    requests: {
+      field: string;
+      type: "disabled" | "readOnly" | "hidden" | "compute";
+      formData: Record<string, unknown>;
+      siblingData?: Record<string, unknown> | null | undefined;
+      prevData?: Record<string, unknown> | null | undefined;
+      prevSiblingData?: Record<string, unknown> | null | undefined;
+    }[];
+  }, {
+    results: {
+      field: string;
+      type: "disabled" | "readOnly" | "hidden" | "compute";
+      value: unknown;
+      error?: string | undefined;
+    }[];
+  }>;
+  readonly fieldOptions: questpie18956.JsonFunctionDefinition<{
+    collection: string;
+    type: "collection" | "global";
+    field: string;
+    formData: Record<string, unknown>;
+    search: string;
+    page: number;
+    limit: number;
+    siblingData?: Record<string, unknown> | null | undefined;
+  }, {
+    options: {
+      value: string | number;
+      label: string | Record<string, string>;
+    }[];
+    hasMore?: boolean | undefined;
+    total?: number | undefined;
+  }>;
+};
+//#endregion
+export { batchReactive, fieldOptions, reactiveFunctions };
+//# sourceMappingURL=reactive.d.mts.map

package/dist/server/modules/admin/functions/reactive.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactive.d.mts","names":[],"sources":["../../../../../src/server/modules/admin/functions/reactive.ts"],"sourcesContent":[],"mappings":";;;;;;;AAygBA;;;;;;;AAmFA;cAnFa,6BAAa;;;;IAmFD,KAAA,EAAA,MAAA;IA0GZ,IAAA,EAAA,UAGH,GAAA,UAAA,GAAA,QAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;cA7GG,4BAAY;;;;;;;;;;;;;;;;;;;;cA0GZ"}