@rangka/core 0.0.1

package/dist/api/__tests__/swagger.test.js

@@ -0,0 +1,144 @@
+import { describe, it, expect } from 'vitest';
+import { createServer } from '../server.js';
+import { generateRoutes } from '../route-generator.js';
+function makeModel() {
+    return {
+        qualifiedName: 'sales.customer',
+        app: 'test',
+        module: 'sales',
+        name: 'customer',
+        label: 'Customer',
+        auditLog: false,
+        traits: [],
+        fields: [
+            {
+                name: 'name',
+                config: { type: 'string', required: true, label: 'Customer Name' },
+                provenance: { source: 'base' },
+            },
+            {
+                name: 'email',
+                config: { type: 'string', required: true, label: 'Email' },
+                provenance: { source: 'base' },
+            },
+            {
+                name: 'status',
+                config: { type: 'enum', options: ['Active', 'Inactive'], label: 'Status' },
+                provenance: { source: 'base' },
+            },
+            {
+                name: 'balance',
+                config: { type: 'decimal', label: 'Balance' },
+                provenance: { source: 'base' },
+            },
+        ],
+        indexes: [],
+    };
+}
+function makeRegistry() {
+    const model = makeModel();
+    return {
+        getModelsByModule: () => new Map([['sales', [model]]]),
+        getRelationshipsForModel: () => [],
+    };
+}
+function makeMockDb() {
+    const buildQuery = () => {
+        const q = {};
+        q.select = () => q;
+        q.selectAll = () => q;
+        q.where = () => q;
+        q.orderBy = () => q;
+        q.offset = () => q;
+        q.limit = () => q;
+        q.execute = async () => [];
+        q.executeTakeFirst = async () => ({ count: '0' });
+        q.executeTakeFirstOrThrow = async () => ({});
+        q.values = () => q;
+        q.set = () => q;
+        q.returningAll = () => q;
+        return q;
+    };
+    return {
+        selectFrom: () => buildQuery(),
+        insertInto: () => buildQuery(),
+        updateTable: () => buildQuery(),
+        deleteFrom: () => buildQuery(),
+        kysely: { fn: { countAll: () => ({ as: () => 'count' }) } },
+    };
+}
+describe('Swagger API Docs', () => {
+    it('registers swagger and /api/docs/json returns valid OpenAPI document', async () => {
+        const server = await createServer();
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs/json' });
+        expect(res.statusCode).toBe(200);
+        const spec = JSON.parse(res.body);
+        expect(spec.openapi).toBe('3.1.0');
+        expect(spec.info.title).toBe('Rangka API');
+        expect(spec.paths).toBeDefined();
+    });
+    it('includes model fields in component schemas via route body', async () => {
+        const server = await createServer();
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs/json' });
+        const spec = JSON.parse(res.body);
+        const postPath = spec.paths['/api/sales/customer'];
+        expect(postPath).toBeDefined();
+        expect(postPath.post).toBeDefined();
+        const bodySchema = postPath.post.requestBody.content['application/json'].schema;
+        expect(bodySchema.properties.name).toEqual({ type: 'string', description: 'Customer Name' });
+        expect(bodySchema.properties.email).toEqual({ type: 'string', description: 'Email' });
+        expect(bodySchema.properties.status).toEqual({
+            type: 'string',
+            enum: ['Active', 'Inactive'],
+            description: 'Status',
+        });
+        expect(bodySchema.properties.balance).toEqual({ type: 'number', description: 'Balance' });
+    });
+    it('documents query parameters on list endpoints', async () => {
+        const server = await createServer();
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs/json' });
+        const spec = JSON.parse(res.body);
+        const listPath = spec.paths['/api/sales/customer'];
+        expect(listPath.get).toBeDefined();
+        const params = listPath.get.parameters;
+        const paramNames = params.map((p) => p.name);
+        expect(paramNames).toContain('page');
+        expect(paramNames).toContain('limit');
+        expect(paramNames).toContain('sort');
+        expect(paramNames).toContain('fields');
+        expect(paramNames).toContain('include');
+    });
+    it('does not register docs when docs: false', async () => {
+        const server = await createServer({ docs: false });
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs/json' });
+        expect(res.statusCode).toBe(404);
+    });
+    it('serves Swagger UI HTML at /api/docs', async () => {
+        const server = await createServer();
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs' });
+        expect(res.statusCode).toBe(200);
+        expect(res.headers['content-type']).toContain('text/html');
+        expect(res.body).toContain('swagger');
+    });
+    it('groups endpoints by module tag', async () => {
+        const server = await createServer({ tags: [{ name: 'sales' }] });
+        generateRoutes(server, makeRegistry(), makeMockDb());
+        await server.ready();
+        const res = await server.inject({ method: 'GET', url: '/api/docs/json' });
+        const spec = JSON.parse(res.body);
+        const listPath = spec.paths['/api/sales/customer'];
+        expect(listPath.get.tags).toContain('sales');
+        expect(listPath.post.tags).toContain('sales');
+    });
+});
+//# sourceMappingURL=swagger.test.js.map

package/dist/api/__tests__/swagger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swagger.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/swagger.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAKvD,SAAS,SAAS;IAChB,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,GAAG,EAAE,MAAM;QACX,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;gBAClE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC/B;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC1D,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC/B;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;gBAC1E,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC/B;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7C,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC/B;SACF;QACD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,OAAO;QACL,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,wBAAwB,EAAE,GAAG,EAAE,CAAC,EAAE;KACN,CAAC;AACjC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,CAAC,GAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3B,CAAC,CAAC,gBAAgB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,uBAAuB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC9B,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC/B,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC9B,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;KAC/B,CAAC;AACjC,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC3C,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/api/handlers.d.ts

@@ -0,0 +1,23 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { Kysely } from 'kysely';
+import type { ResolvedModel } from '../schema/types.js';
+import type { SchemaRegistry } from '../schema/registry.js';
+import type { ModelAccessOptions } from '../model-api/types.js';
+/** Shared dependencies passed to each handler factory. */
+export interface HandlerContext {
+    model: ResolvedModel;
+    registry: SchemaRegistry;
+    db: Kysely<any>;
+    modelAccessOpts: Omit<ModelAccessOptions, 'auth'>;
+}
+/** GET /model — Returns a paginated list of records with filtering, sorting, and field selection. */
+export declare function listHandler(ctx: HandlerContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+/** GET /model/:id — Returns a single record by ID with optional field selection. */
+export declare function getHandler(ctx: HandlerContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+/** POST /model — Creates a new record after validating required fields. */
+export declare function createHandler(ctx: HandlerContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+/** PUT /model/:id — Updates an existing record after verifying it exists within auth scopes. */
+export declare function updateHandler(ctx: HandlerContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+/** DELETE /model/:id — Deletes a record after verifying it exists within auth scopes. */
+export declare function deleteHandler(ctx: HandlerContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+//# sourceMappingURL=handlers.d.ts.map

package/dist/api/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,eAAe,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;CACnD;AAuBD,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,IAC/B,SAAS,cAAc,EAAE,OAAO,YAAY,oBA2E3D;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,GAAG,EAAE,cAAc,IAC9B,SAAS,cAAc,EAAE,OAAO,YAAY,oBA+C3D;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,IACjC,SAAS,cAAc,EAAE,OAAO,YAAY,oBA+B3D;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,IACjC,SAAS,cAAc,EAAE,OAAO,YAAY,oBAiC3D;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,IACjC,SAAS,cAAc,EAAE,OAAO,YAAY,oBAoB3D"}

package/dist/api/handlers.js

@@ -0,0 +1,182 @@
+import { createModelAccess } from '../model-api/index.js';
+import { QueryParser, QueryValidationError } from './query-parser.js';
+import { resolveIncludes } from './include-resolver.js';
+import { getAuthContext } from '../auth/session.js';
+import { isOwnerOnly, modelHasCreatedBy } from '../auth/model-permissions.js';
+import { validateFields } from '../validation/field-validator.js';
+import { toBool } from '../helpers/coerce.js';
+import { assertOwnership } from '../helpers/assert-ownership.js';
+import { stampCreate, stampUpdate } from '../helpers/stamping.js';
+import { findMissingRequiredFields } from '../helpers/validation.js';
+import { BadRequestError, ForbiddenError, NotFoundError } from '../errors.js';
+// ---------- Internal helpers ----------
+/** Creates a QueryParser configured with the model's fields and relationship names. */
+function createParserForModel(ctx) {
+    const relationFieldNames = ctx.registry
+        .getRelationshipsForModel(ctx.model.qualifiedName)
+        .map((r) => r.field);
+    return new QueryParser(ctx.model.fields, relationFieldNames);
+}
+/** Validates that the request body is a non-null object. Throws BadRequestError if invalid. */
+function parseRequestBody(request) {
+    const body = request.body;
+    if (!body || typeof body !== 'object') {
+        throw new BadRequestError('VALIDATION_ERROR', 'Request body is required');
+    }
+    return body;
+}
+// ---------- Route handler factories ----------
+/** GET /model — Returns a paginated list of records with filtering, sorting, and field selection. */
+export function listHandler(ctx) {
+    return async (request, reply) => {
+        try {
+            const parser = createParserForModel(ctx);
+            const parsed = parser.parse(request.query);
+            const includeArchived = toBool(request.query.includeArchived);
+            const authContext = getAuthContext(request);
+            const models = createModelAccess({ ...ctx.modelAccessOpts, auth: authContext });
+            const ownerRead = isOwnerOnly(authContext.permissions, ctx.model.qualifiedName, 'read');
+            if (ownerRead && !modelHasCreatedBy(ctx.model)) {
+                throw new ForbiddenError('FORBIDDEN', `Owner-based read requires created_by field on ${ctx.model.qualifiedName}`);
+            }
+            let queryBuilder = models.query(ctx.model.qualifiedName);
+            if (includeArchived) {
+                queryBuilder = queryBuilder.includeArchived();
+            }
+            // Apply parsed filters directly (already translated by QueryParser)
+            queryBuilder = queryBuilder.filterRaw(parsed.filters);
+            // Apply search across searchable fields
+            if (parsed.search) {
+                const searchableFields = ctx.model.fields
+                    .filter((f) => 'searchable' in f.config && f.config.searchable)
+                    .map((f) => f.name);
+                if (searchableFields.length > 0) {
+                    queryBuilder = queryBuilder.search(parsed.search, searchableFields);
+                }
+            }
+            // Apply owner-only filter
+            if (ownerRead) {
+                queryBuilder = queryBuilder.filter({ created_by: authContext.user.id });
+            }
+            // Apply field selection
+            if (parsed.fields.length > 0) {
+                queryBuilder = queryBuilder.fields(parsed.fields);
+            }
+            // Apply sorting
+            for (const s of parsed.sort) {
+                queryBuilder = queryBuilder.sort(s.field, s.direction);
+            }
+            // Apply pagination
+            queryBuilder = queryBuilder.limit(parsed.pagination.limit).page(parsed.pagination.page);
+            const result = await queryBuilder.execWithMeta();
+            if (parsed.includes.length > 0) {
+                await resolveIncludes(result.data, parsed.includes, ctx.registry, ctx.db, ctx.model.qualifiedName, request);
+            }
+            return reply.send({ data: result.data, meta: result.meta });
+        }
+        catch (err) {
+            if (err instanceof QueryValidationError) {
+                throw new BadRequestError(err.code, err.message);
+            }
+            throw err;
+        }
+    };
+}
+/** GET /model/:id — Returns a single record by ID with optional field selection. */
+export function getHandler(ctx) {
+    return async (request, reply) => {
+        try {
+            const { id } = request.params;
+            const parser = createParserForModel(ctx);
+            const parsed = parser.parse(request.query);
+            const authContext = getAuthContext(request);
+            const models = createModelAccess({ ...ctx.modelAccessOpts, auth: authContext });
+            let queryBuilder = models.query(ctx.model.qualifiedName).filter({ id });
+            if (parsed.fields.length > 0) {
+                queryBuilder = queryBuilder.fields(parsed.fields);
+            }
+            const record = await queryBuilder.first();
+            if (!record) {
+                throw new NotFoundError(`Record not found: ${id}`);
+            }
+            if (isOwnerOnly(authContext.permissions, ctx.model.qualifiedName, 'read')) {
+                if (!modelHasCreatedBy(ctx.model) || record.created_by !== authContext.user?.id) {
+                    throw new NotFoundError(`Record not found: ${id}`);
+                }
+            }
+            if (parsed.includes.length > 0) {
+                await resolveIncludes([record], parsed.includes, ctx.registry, ctx.db, ctx.model.qualifiedName, request);
+            }
+            return reply.send({ data: record });
+        }
+        catch (err) {
+            if (err instanceof QueryValidationError) {
+                throw new BadRequestError(err.code, err.message);
+            }
+            throw err;
+        }
+    };
+}
+/** POST /model — Creates a new record after validating required fields. */
+export function createHandler(ctx) {
+    return async (request, reply) => {
+        const body = parseRequestBody(request);
+        // Validate required fields
+        const missing = findMissingRequiredFields(ctx.model, body);
+        if (missing.length > 0) {
+            throw new BadRequestError('VALIDATION_ERROR', `Missing required fields: ${missing.join(', ')}`, missing);
+        }
+        // Validate field rules
+        const violations = validateFields(ctx.model, body, 'create');
+        if (violations.length > 0) {
+            throw new BadRequestError('VALIDATION_ERROR', violations.map((v) => v.message).join('; '), violations);
+        }
+        const authContext = getAuthContext(request);
+        stampCreate(body, ctx.model, authContext);
+        const models = createModelAccess({ ...ctx.modelAccessOpts, auth: authContext });
+        const record = await models.create(ctx.model.qualifiedName, body);
+        return reply.status(201).send({ data: record });
+    };
+}
+/** PUT /model/:id — Updates an existing record after verifying it exists within auth scopes. */
+export function updateHandler(ctx) {
+    return async (request, reply) => {
+        const { id } = request.params;
+        const body = parseRequestBody(request);
+        // Validate field rules
+        const violations = validateFields(ctx.model, body, 'update');
+        if (violations.length > 0) {
+            throw new BadRequestError('VALIDATION_ERROR', violations.map((v) => v.message).join('; '), violations);
+        }
+        const authContext = getAuthContext(request);
+        const models = createModelAccess({ ...ctx.modelAccessOpts, auth: authContext });
+        // Verify record exists within auth scopes
+        const existing = await models.query(ctx.model.qualifiedName).filter({ id }).first();
+        if (!existing) {
+            throw new NotFoundError(`Record not found: ${id}`);
+        }
+        // Check owner-only permission
+        assertOwnership(authContext.permissions, ctx.model, existing, authContext.user?.id, 'write');
+        stampUpdate(body, ctx.model, authContext);
+        const record = await models.update(ctx.model.qualifiedName, id, body);
+        return reply.send({ data: record });
+    };
+}
+/** DELETE /model/:id — Deletes a record after verifying it exists within auth scopes. */
+export function deleteHandler(ctx) {
+    return async (request, reply) => {
+        const { id } = request.params;
+        const authContext = getAuthContext(request);
+        const models = createModelAccess({ ...ctx.modelAccessOpts, auth: authContext });
+        // Verify record exists within auth scopes
+        const existing = await models.query(ctx.model.qualifiedName).filter({ id }).first();
+        if (!existing) {
+            throw new NotFoundError(`Record not found: ${id}`);
+        }
+        // Check owner-only permission
+        assertOwnership(authContext.permissions, ctx.model, existing, authContext.user?.id, 'delete');
+        await models.delete(ctx.model.qualifiedName, id);
+        return reply.status(204).send();
+    };
+}
+//# sourceMappingURL=handlers.js.map

package/dist/api/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAY9E,yCAAyC;AAEzC,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,GAAmB;IAC/C,MAAM,kBAAkB,GAAG,GAAG,CAAC,QAAQ;SACpC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAC/D,CAAC;AAED,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,OAAuB;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAA2C,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gDAAgD;AAEhD,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,GAAmB;IAC7C,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,MAAM,CAAE,OAAO,CAAC,KAAa,CAAC,eAAe,CAAC,CAAC;YAEvE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAEhF,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,SAAS,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,cAAc,CACtB,WAAW,EACX,iDAAiD,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAC3E,CAAC;YACJ,CAAC;YAED,IAAI,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEzD,IAAI,eAAe,EAAE,CAAC;gBACpB,YAAY,GAAG,YAAY,CAAC,eAAe,EAAE,CAAC;YAChD,CAAC;YAED,oEAAoE;YACpE,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEtD,wCAAwC;YACxC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM;qBACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;qBAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,IAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC;YAED,wBAAwB;YACxB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAED,gBAAgB;YAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YACzD,CAAC;YAED,mBAAmB;YACnB,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAExF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC;YAEjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,eAAe,CACnB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,QAAQ,EACf,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,KAAK,CAAC,aAAa,EACvB,OAAO,CACR,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,GAAmB;IAC5C,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;YAEhD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;YAEtE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAEhF,IAAI,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAExE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;oBAChF,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,eAAe,CACnB,CAAC,MAAM,CAAC,EACR,MAAM,CAAC,QAAQ,EACf,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,KAAK,CAAC,aAAa,EACvB,OAAO,CACR,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEvC,2BAA2B;QAC3B,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAChD,OAAO,CACR,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3C,UAAU,CACX,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAElE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAEhD,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEvC,uBAAuB;QACvB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3C,UAAU,CACX,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAEhF,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAEpF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,8BAA8B;QAC9B,eAAe,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAE7F,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAEtE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAEhD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAEhF,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAEpF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,8BAA8B;QAC9B,eAAe,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE9F,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAEjD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/api/include-resolver.d.ts

@@ -0,0 +1,6 @@
+import type { Kysely } from 'kysely';
+import type { SchemaRegistry } from '../schema/registry.js';
+import type { ParsedInclude } from './query-parser.js';
+import { type IncludeResolverOptions } from '../db/model-include-resolver.js';
+export declare function resolveIncludes(records: Record<string, unknown>[], includes: ParsedInclude[], registry: SchemaRegistry, db: Kysely<any>, sourceModel: string, _request: unknown, options?: IncludeResolverOptions): Promise<void>;
+//# sourceMappingURL=include-resolver.d.ts.map

package/dist/api/include-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"include-resolver.d.ts","sourceRoot":"","sources":["../../src/api/include-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAC;AAOzC,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAClC,QAAQ,EAAE,aAAa,EAAE,EACzB,QAAQ,EAAE,cAAc,EAExB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EACf,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/api/include-resolver.js

@@ -0,0 +1,13 @@
+import { resolveModelIncludes, } from '../db/model-include-resolver.js';
+function toIncludeSpec(parsed) {
+    if (!parsed.nested || parsed.nested.length === 0)
+        return parsed.relation;
+    return { relation: parsed.relation, nested: parsed.nested.map(toIncludeSpec) };
+}
+export async function resolveIncludes(records, includes, registry, 
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+db, sourceModel, _request, options) {
+    const specs = includes.map(toIncludeSpec);
+    await resolveModelIncludes(records, specs, registry, db, sourceModel, options);
+}
+//# sourceMappingURL=include-resolver.js.map

package/dist/api/include-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"include-resolver.js","sourceRoot":"","sources":["../../src/api/include-resolver.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,oBAAoB,GAGrB,MAAM,iCAAiC,CAAC;AAEzC,SAAS,aAAa,CAAC,MAAqB;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAkC,EAClC,QAAyB,EACzB,QAAwB;AACxB,8DAA8D;AAC9D,EAAe,EACf,WAAmB,EACnB,QAAiB,EACjB,OAAgC;IAEhC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACjF,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,5 @@
+export { createServer } from './server.js';
+export { QueryParser } from './query-parser.js';
+export { generateRoutes } from './route-generator.js';
+export type { ServerConfig, ApiDefinition } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,4 @@
+export { createServer } from './server.js';
+export { QueryParser } from './query-parser.js';
+export { generateRoutes } from './route-generator.js';
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/api/meta-handler.d.ts

@@ -0,0 +1,19 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { ModuleConfig, PageDefinition, WidgetDefinitionMeta } from '@rangka/shared';
+import type { SchemaRegistry } from '../schema/registry.js';
+export interface MetaBootContext {
+    schemaRegistry: SchemaRegistry;
+    pages: Array<{
+        module: string;
+        page: PageDefinition;
+    }>;
+    modules: ModuleConfig[];
+    widgets?: WidgetDefinitionMeta[];
+}
+/**
+ * Creates the GET /meta/boot handler that returns everything
+ * the client needs to render the shell: user info, permissions,
+ * navigation tree, page definitions, and model metadata.
+ */
+export declare function createMetaBootHandler(ctx: MetaBootContext): (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
+//# sourceMappingURL=meta-handler.d.ts.map

package/dist/api/meta-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-handler.d.ts","sourceRoot":"","sources":["../../src/api/meta-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EAMd,oBAAoB,EAErB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IACvD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,IAC1C,SAAS,cAAc,EAAE,OAAO,YAAY,oBA8B3D"}

package/dist/api/meta-handler.js

@@ -0,0 +1,188 @@
+import { getAuthContext } from '../auth/session.js';
+import { UnauthorizedError } from '../errors.js';
+/**
+ * Creates the GET /meta/boot handler that returns everything
+ * the client needs to render the shell: user info, permissions,
+ * navigation tree, page definitions, and model metadata.
+ */
+export function createMetaBootHandler(ctx) {
+    return async (request, reply) => {
+        const authCtx = getAuthContext(request);
+        if (!authCtx.user || !authCtx.permissions) {
+            throw new UnauthorizedError('Not authenticated');
+        }
+        const { user, permissions } = authCtx;
+        const accessiblePages = resolveAccessiblePages(ctx.pages, permissions);
+        const navigation = buildNavigationTree(ctx.modules, accessiblePages);
+        const models = buildModelMeta(accessiblePages, ctx.schemaRegistry);
+        const response = {
+            user: {
+                id: user.id,
+                name: user.full_name,
+                email: user.email,
+                roles: authCtx.roles ?? [],
+            },
+            permissions: {
+                models: permissions.models,
+                pages: permissions.pages,
+            },
+            navigation,
+            pages: accessiblePages.map((p) => p.page),
+            models,
+            widgets: ctx.widgets,
+        };
+        return reply.send(response);
+    };
+}
+// --- Page access resolution ---
+/**
+ * Filters pages to only those the user can access.
+ * A page is accessible if explicitly listed in page permissions,
+ * or if the user has read access to any model the page references.
+ */
+function resolveAccessiblePages(pages, permissions) {
+    return pages.filter(({ page }) => {
+        if (permissions.pages.includes(page.key)) {
+            return true;
+        }
+        const referencedModels = collectModelRefs(page);
+        if (referencedModels.length === 0) {
+            return true;
+        }
+        return referencedModels.some((model) => permissions.models[model]?.read === true);
+    });
+}
+/**
+ * Collects all model names referenced by a page's body widget tree.
+ */
+function collectModelRefs(page) {
+    const models = new Set();
+    for (const node of page.body) {
+        collectModelRefsFromNode(node, models);
+    }
+    return Array.from(models);
+}
+/** Recursively collects model references from a widget node tree. */
+function collectModelRefsFromNode(node, models) {
+    if (node.source?.model) {
+        models.add(node.source.model);
+    }
+    if (node.bind?.model?.name) {
+        models.add(node.bind.model.name);
+    }
+    if (node.children) {
+        for (const child of node.children) {
+            collectModelRefsFromNode(child, models);
+        }
+    }
+}
+// --- Navigation tree ---
+/**
+ * Builds the navigation tree by filtering each module's nav sections
+ * down to only pages the user can access, then sorting by module order.
+ */
+function buildNavigationTree(modules, accessiblePages) {
+    const accessiblePageKeys = new Set(accessiblePages.map((p) => p.page.key));
+    const tree = [];
+    for (const mod of modules) {
+        if (!mod.navigation)
+            continue;
+        const sections = buildAccessibleSections(mod.navigation, accessiblePageKeys);
+        if (sections.length === 0)
+            continue;
+        tree.push({
+            module: mod.name,
+            label: mod.label,
+            description: mod.description,
+            icon: mod.icon,
+            color: mod.color,
+            order: mod.order,
+            type: mod.type,
+            sections,
+        });
+    }
+    tree.sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
+    return tree;
+}
+/** Filters a module's navigation sections to only include accessible pages. */
+function buildAccessibleSections(navigation, accessiblePageKeys) {
+    const sections = [];
+    for (const section of navigation) {
+        const visibleItems = section.items.filter((item) => accessiblePageKeys.has(item.page));
+        if (visibleItems.length === 0)
+            continue;
+        sections.push({
+            section: section.section,
+            items: visibleItems.map((item) => ({
+                page: item.page,
+                label: item.label,
+                icon: item.icon,
+            })),
+        });
+    }
+    return sections;
+}
+// --- Model metadata ---
+/**
+ * Builds a map of model metadata for all models referenced by accessible pages.
+ */
+function buildModelMeta(accessiblePages, schemaRegistry) {
+    const referencedModelNames = new Set();
+    for (const { page } of accessiblePages) {
+        for (const ref of collectModelRefs(page)) {
+            referencedModelNames.add(ref);
+        }
+    }
+    const result = {};
+    for (const name of referencedModelNames) {
+        const model = schemaRegistry.getModel(name);
+        if (!model)
+            continue;
+        result[name] = {
+            qualifiedName: model.qualifiedName,
+            label: model.label,
+            fields: model.fields.map((field) => resolvedFieldToMeta(field)),
+        };
+    }
+    return result;
+}
+/** Converts a resolved field definition into the client-facing FieldMeta shape. */
+function resolvedFieldToMeta(field) {
+    const meta = {
+        name: field.name,
+        type: field.config.type,
+    };
+    if ('label' in field.config && field.config.label) {
+        meta.label = field.config.label;
+    }
+    if ('required' in field.config && field.config.required) {
+        meta.required = true;
+    }
+    if ('searchable' in field.config && field.config.searchable) {
+        meta.searchable = true;
+    }
+    if (field.config.type === 'enum') {
+        meta.options = field.config.options;
+    }
+    // Attach relationship metadata based on field type
+    meta.relationship = extractRelationshipMeta(field.config);
+    return meta;
+}
+/** Extracts relationship metadata from a field config, or returns undefined for non-relational fields. */
+function extractRelationshipMeta(config) {
+    switch (config.type) {
+        case 'link':
+            return { type: 'link', model: config.model };
+        case 'hasMany':
+            return { type: 'hasMany', model: config.model, foreignKey: config.foreignKey };
+        case 'children':
+            return { type: 'children', model: config.model, foreignKey: config.foreignKey };
+        case 'manyToMany':
+            return { type: 'manyToMany', model: config.model, through: config.through };
+        case 'dynamicLink':
+            return { type: 'dynamicLink', modelField: config.modelField };
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=meta-handler.js.map