@realiizlabs/admin 0.11.2 → 0.13.0

package/dist/members-nhbRSYyr.d.cts

@@ -0,0 +1,106 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * Types for the identity layer. All config arrives as arguments — never env.
+ */
+/**
+ * Either cookie-store shape a host can hand us:
+ *  - @supabase/ssr's CookieMethodsServer: { getAll, setAll }
+ *  - Next's `await cookies()` store:      { getAll, set }
+ * `setAll` is preferred when present; otherwise each cookie goes through `set`.
+ */
+interface CookieStore {
+    getAll(): {
+        name: string;
+        value: string;
+    }[] | Promise<{
+        name: string;
+        value: string;
+    }[]>;
+    setAll?(cookies: {
+        name: string;
+        value: string;
+        options?: Record<string, unknown>;
+    }[]): void | Promise<void>;
+    set?(name: string, value: string, options?: Record<string, unknown>): unknown;
+}
+/** Enough to read the signed-in user with the anon key + their cookies. */
+interface IdentityContext {
+    url: string;
+    anonKey: string;
+    cookies: CookieStore;
+}
+/** Server-only. The service-role key bypasses RLS; the module checks roles in code first. */
+interface ServiceContext {
+    url: string;
+    serviceRoleKey: string;
+}
+type SiteRole = "staff" | "owner" | "editor";
+declare const ROLE_RANK: Record<SiteRole, number>;
+interface IdentityUser {
+    id: string;
+    email: string | null;
+}
+interface SiteMembership {
+    userId: string;
+    siteId: string;
+    role: "owner" | "editor";
+}
+
+/**
+ * createIdentityClient — a Supabase client bound to the request's cookies.
+ *
+ * Built per request from arguments. A Next 16 route does:
+ *
+ *   const store = await cookies();
+ *   const client = createIdentityClient({ url, anonKey, cookies: store });
+ *
+ * No `next` import here. The CookieStore interface accepts either shape a
+ * host might hand us: @supabase/ssr's { getAll, setAll }, or Next's
+ * cookies() store, which has { getAll, set } — the session cookies are
+ * written through whichever exists. (Observed 2026-09-08: with only setAll
+ * supported, Next's store silently wrote nothing and every sign-in bounced.)
+ */
+
+type IdentityClient = SupabaseClient;
+declare function createIdentityClient(ctx: IdentityContext): IdentityClient;
+
+/**
+ * Per-site branding — the Business tab. Reads and writes public.sites through
+ * the signed-in user's client, so RLS decides who may (members read; owners
+ * and staff write). Nothing here needs the service role.
+ */
+
+interface SiteBranding {
+    name: string;
+    logoUrl: string | null;
+    faviconUrl: string | null;
+    businessEmail: string | null;
+    businessPhone: string | null;
+}
+type BrandingPatch = Partial<SiteBranding> & {
+    name: string;
+};
+declare function getSiteBranding(client: IdentityClient, siteId: string): Promise<SiteBranding | null>;
+/** Upsert the row. RLS refuses anyone but the site's owners or staff. */
+declare function updateSiteBranding(client: IdentityClient, siteId: string, patch: BrandingPatch): Promise<void>;
+
+/**
+ * The Team roster — public.site_members(site_id), a SECURITY DEFINER function
+ * that returns rows only to that site's owners or staff (editors get a 42501).
+ * Read with the signed-in user's client; writes are in service.ts.
+ */
+
+interface SiteMember {
+    userId: string;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "owner" | "editor";
+    /** "invited" until the person has signed in once. */
+    status: "invited" | "active";
+    invitedAt: string;
+}
+declare function listSiteMembers(client: IdentityClient, siteId: string): Promise<SiteMember[]>;
+
+export { type BrandingPatch as B, type CookieStore as C, type IdentityClient as I, ROLE_RANK as R, type ServiceContext as S, type IdentityUser as a, type IdentityContext as b, type SiteBranding as c, type SiteMember as d, type SiteMembership as e, type SiteRole as f, createIdentityClient as g, getSiteBranding as h, listSiteMembers as l, updateSiteBranding as u };

package/dist/members-nhbRSYyr.d.ts

@@ -0,0 +1,106 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * Types for the identity layer. All config arrives as arguments — never env.
+ */
+/**
+ * Either cookie-store shape a host can hand us:
+ *  - @supabase/ssr's CookieMethodsServer: { getAll, setAll }
+ *  - Next's `await cookies()` store:      { getAll, set }
+ * `setAll` is preferred when present; otherwise each cookie goes through `set`.
+ */
+interface CookieStore {
+    getAll(): {
+        name: string;
+        value: string;
+    }[] | Promise<{
+        name: string;
+        value: string;
+    }[]>;
+    setAll?(cookies: {
+        name: string;
+        value: string;
+        options?: Record<string, unknown>;
+    }[]): void | Promise<void>;
+    set?(name: string, value: string, options?: Record<string, unknown>): unknown;
+}
+/** Enough to read the signed-in user with the anon key + their cookies. */
+interface IdentityContext {
+    url: string;
+    anonKey: string;
+    cookies: CookieStore;
+}
+/** Server-only. The service-role key bypasses RLS; the module checks roles in code first. */
+interface ServiceContext {
+    url: string;
+    serviceRoleKey: string;
+}
+type SiteRole = "staff" | "owner" | "editor";
+declare const ROLE_RANK: Record<SiteRole, number>;
+interface IdentityUser {
+    id: string;
+    email: string | null;
+}
+interface SiteMembership {
+    userId: string;
+    siteId: string;
+    role: "owner" | "editor";
+}
+
+/**
+ * createIdentityClient — a Supabase client bound to the request's cookies.
+ *
+ * Built per request from arguments. A Next 16 route does:
+ *
+ *   const store = await cookies();
+ *   const client = createIdentityClient({ url, anonKey, cookies: store });
+ *
+ * No `next` import here. The CookieStore interface accepts either shape a
+ * host might hand us: @supabase/ssr's { getAll, setAll }, or Next's
+ * cookies() store, which has { getAll, set } — the session cookies are
+ * written through whichever exists. (Observed 2026-09-08: with only setAll
+ * supported, Next's store silently wrote nothing and every sign-in bounced.)
+ */
+
+type IdentityClient = SupabaseClient;
+declare function createIdentityClient(ctx: IdentityContext): IdentityClient;
+
+/**
+ * Per-site branding — the Business tab. Reads and writes public.sites through
+ * the signed-in user's client, so RLS decides who may (members read; owners
+ * and staff write). Nothing here needs the service role.
+ */
+
+interface SiteBranding {
+    name: string;
+    logoUrl: string | null;
+    faviconUrl: string | null;
+    businessEmail: string | null;
+    businessPhone: string | null;
+}
+type BrandingPatch = Partial<SiteBranding> & {
+    name: string;
+};
+declare function getSiteBranding(client: IdentityClient, siteId: string): Promise<SiteBranding | null>;
+/** Upsert the row. RLS refuses anyone but the site's owners or staff. */
+declare function updateSiteBranding(client: IdentityClient, siteId: string, patch: BrandingPatch): Promise<void>;
+
+/**
+ * The Team roster — public.site_members(site_id), a SECURITY DEFINER function
+ * that returns rows only to that site's owners or staff (editors get a 42501).
+ * Read with the signed-in user's client; writes are in service.ts.
+ */
+
+interface SiteMember {
+    userId: string;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "owner" | "editor";
+    /** "invited" until the person has signed in once. */
+    status: "invited" | "active";
+    invitedAt: string;
+}
+declare function listSiteMembers(client: IdentityClient, siteId: string): Promise<SiteMember[]>;
+
+export { type BrandingPatch as B, type CookieStore as C, type IdentityClient as I, ROLE_RANK as R, type ServiceContext as S, type IdentityUser as a, type IdentityContext as b, type SiteBranding as c, type SiteMember as d, type SiteMembership as e, type SiteRole as f, createIdentityClient as g, getSiteBranding as h, listSiteMembers as l, updateSiteBranding as u };

package/dist/roles-BjWuj2_v.d.cts

@@ -0,0 +1,25 @@
+import { f as SiteRole, I as IdentityClient, a as IdentityUser } from './members-nhbRSYyr.cjs';
+
+/**
+ * Role resolution and the request gate.
+ *
+ * Two selects on the caller's OWN rows — both permitted by RLS with the anon
+ * key, so this never needs the service role. Staff wins over any site role.
+ */
+
+declare function getSiteRole(client: IdentityClient, siteId: string, userId?: string): Promise<SiteRole | null>;
+declare function roleAtLeast(actual: SiteRole | null, minimum: SiteRole): boolean;
+interface RequireOptions {
+    /** Default "editor" — any member of the site. */
+    minimumRole?: SiteRole;
+}
+/**
+ * The gate. Throws UnauthenticatedError (→ sign in) or ForbiddenError (→ 403);
+ * otherwise returns the user and their effective role for this site.
+ */
+declare function requireSiteUser(client: IdentityClient, siteId: string, opts?: RequireOptions): Promise<{
+    user: IdentityUser;
+    role: SiteRole;
+}>;
+
+export { type RequireOptions as R, roleAtLeast as a, getSiteRole as g, requireSiteUser as r };

package/dist/roles-Dnwj-DAm.d.ts

@@ -0,0 +1,25 @@
+import { f as SiteRole, I as IdentityClient, a as IdentityUser } from './members-nhbRSYyr.js';
+
+/**
+ * Role resolution and the request gate.
+ *
+ * Two selects on the caller's OWN rows — both permitted by RLS with the anon
+ * key, so this never needs the service role. Staff wins over any site role.
+ */
+
+declare function getSiteRole(client: IdentityClient, siteId: string, userId?: string): Promise<SiteRole | null>;
+declare function roleAtLeast(actual: SiteRole | null, minimum: SiteRole): boolean;
+interface RequireOptions {
+    /** Default "editor" — any member of the site. */
+    minimumRole?: SiteRole;
+}
+/**
+ * The gate. Throws UnauthenticatedError (→ sign in) or ForbiddenError (→ 403);
+ * otherwise returns the user and their effective role for this site.
+ */
+declare function requireSiteUser(client: IdentityClient, siteId: string, opts?: RequireOptions): Promise<{
+    user: IdentityUser;
+    role: SiteRole;
+}>;
+
+export { type RequireOptions as R, roleAtLeast as a, getSiteRole as g, requireSiteUser as r };

package/dist/shell/index.d.cts

@@ -1,62 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes, AnchorHTMLAttributes } from 'react';
-
-/**
- * Light / dark, remembered per browser. The attribute lives on the .rz-admin
- * root (not <html>) so the host site's own theme is never touched.
- *
- * No flash of the wrong theme: the server renders defaultTheme, and the effect
- * only flips when a stored value differs — a single client-side change, never
- * a mismatch between server HTML and first client render.
- */
-type Theme = "light" | "dark";
-declare function useTheme(defaultTheme?: Theme): [Theme, (t: Theme) => void];
-declare function ThemeToggle({ theme, onChange }: {
-    theme: Theme;
-    onChange: (t: Theme) => void;
-}): react.JSX.Element;
-
-interface ShellUser {
-    email: string;
-    name?: string | null;
-    /** Profile photo; initials show when absent. */
-    avatarUrl?: string | null;
-}
-declare function firstNameOf(user: ShellUser): string;
-declare function initialsOf(user: ShellUser): string;
-declare function AccountMenu({ user, role, theme, onTheme, signOutPath, accountHref, helpHref }: {
-    user: ShellUser;
-    role: string;
-    theme: Theme;
-    onTheme: (t: Theme) => void;
-    signOutPath: string;
-    /** The Account page (My Profile · Change Password · Team · Business). Omit to hide the item. */
-    accountHref?: string;
-    /** The Help centre. Omit to hide the item. */
-    helpHref?: string;
-}): react.JSX.Element;
-
-/**
- * Sidebar — items from the content-type registry (via navFromContentTypes),
- * active by href prefix, collapsible with the state remembered per browser.
- * Plain anchors: the package does not know which router the host uses.
- */
-interface NavItem {
-    id: string;
-    label: string;
-    href: string;
-    /** Icon id; unknown ids fall back to a document icon. Defaults to `id`. */
-    icon?: string;
-    /** Shown greyed out and not navigable — a section that is coming but not built yet. */
-    disabled?: boolean;
-}
-declare function isActive(item: NavItem, activeHref: string, basePath: string): boolean;
-declare function Sidebar({ items, pinned, activeHref, basePath }: {
-    items: NavItem[];
-    pinned?: NavItem[];
-    activeHref: string;
-    basePath: string;
-}): react.JSX.Element;
+import { S as ShellUser, N as NavItem, T as Theme } from '../Sidebar-CNuphww6.cjs';
+export { A as AccountMenu, a as Sidebar, b as ThemeToggle, f as firstNameOf, i as initialsOf, c as isActive, u as useTheme } from '../Sidebar-CNuphww6.cjs';
 
 interface AdminShellProps {
     siteName: string;
@@ -213,4 +158,4 @@ declare function Tabs({ options, value, onChange, label }: {
     label?: string;
 }): react.JSX.Element;
 
-export { AccountMenu, AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, type NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, type ShellUser, Sidebar, StatusPill, type StepState, Steps, type TabOption, Tabs, type Theme, ThemeToggle, TopBar, buttonClass, buttonStyle, firstNameOf, iconFor, initialsOf, isActive, useTheme };
+export { AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, ShellUser, StatusPill, type StepState, Steps, type TabOption, Tabs, Theme, TopBar, buttonClass, buttonStyle, iconFor };

package/dist/shell/index.d.ts

@@ -1,62 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes, AnchorHTMLAttributes } from 'react';
-
-/**
- * Light / dark, remembered per browser. The attribute lives on the .rz-admin
- * root (not <html>) so the host site's own theme is never touched.
- *
- * No flash of the wrong theme: the server renders defaultTheme, and the effect
- * only flips when a stored value differs — a single client-side change, never
- * a mismatch between server HTML and first client render.
- */
-type Theme = "light" | "dark";
-declare function useTheme(defaultTheme?: Theme): [Theme, (t: Theme) => void];
-declare function ThemeToggle({ theme, onChange }: {
-    theme: Theme;
-    onChange: (t: Theme) => void;
-}): react.JSX.Element;
-
-interface ShellUser {
-    email: string;
-    name?: string | null;
-    /** Profile photo; initials show when absent. */
-    avatarUrl?: string | null;
-}
-declare function firstNameOf(user: ShellUser): string;
-declare function initialsOf(user: ShellUser): string;
-declare function AccountMenu({ user, role, theme, onTheme, signOutPath, accountHref, helpHref }: {
-    user: ShellUser;
-    role: string;
-    theme: Theme;
-    onTheme: (t: Theme) => void;
-    signOutPath: string;
-    /** The Account page (My Profile · Change Password · Team · Business). Omit to hide the item. */
-    accountHref?: string;
-    /** The Help centre. Omit to hide the item. */
-    helpHref?: string;
-}): react.JSX.Element;
-
-/**
- * Sidebar — items from the content-type registry (via navFromContentTypes),
- * active by href prefix, collapsible with the state remembered per browser.
- * Plain anchors: the package does not know which router the host uses.
- */
-interface NavItem {
-    id: string;
-    label: string;
-    href: string;
-    /** Icon id; unknown ids fall back to a document icon. Defaults to `id`. */
-    icon?: string;
-    /** Shown greyed out and not navigable — a section that is coming but not built yet. */
-    disabled?: boolean;
-}
-declare function isActive(item: NavItem, activeHref: string, basePath: string): boolean;
-declare function Sidebar({ items, pinned, activeHref, basePath }: {
-    items: NavItem[];
-    pinned?: NavItem[];
-    activeHref: string;
-    basePath: string;
-}): react.JSX.Element;
+import { S as ShellUser, N as NavItem, T as Theme } from '../Sidebar-CNuphww6.js';
+export { A as AccountMenu, a as Sidebar, b as ThemeToggle, f as firstNameOf, i as initialsOf, c as isActive, u as useTheme } from '../Sidebar-CNuphww6.js';
 
 interface AdminShellProps {
     siteName: string;
@@ -213,4 +158,4 @@ declare function Tabs({ options, value, onChange, label }: {
     label?: string;
 }): react.JSX.Element;
 
-export { AccountMenu, AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, type NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, type ShellUser, Sidebar, StatusPill, type StepState, Steps, type TabOption, Tabs, type Theme, ThemeToggle, TopBar, buttonClass, buttonStyle, firstNameOf, iconFor, initialsOf, isActive, useTheme };
+export { AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, ShellUser, StatusPill, type StepState, Steps, type TabOption, Tabs, Theme, TopBar, buttonClass, buttonStyle, iconFor };