@seifer-webapp-factory/kits 0.1.0

package/dist/backend/test-kit/core/factories.js

@@ -0,0 +1,57 @@
+/**
+ * US-1402 — Fixture-factories. Generiek `defineFactory`-mechanisme: defaults samengevoegd met overrides,
+ * `buildList(n)` met een per-build oplopende sequence voor unieke sleutels. Geen domein-fixtures — de
+ * consumer levert de velden. Optioneel persisteren via een geïnjecteerde store.
+ */
+import { UnknownFactoryError } from './errors.js';
+export function defineFactory(builder) {
+    let seq = 0;
+    const build = (overrides = {}) => {
+        seq += 1;
+        return { ...builder({ seq }), ...overrides };
+    };
+    return {
+        build,
+        buildList: (n, overrides) => Array.from({ length: n }, () => build(overrides)),
+    };
+}
+export function createFactoryRegistry() {
+    const registry = new Map();
+    const get = (name) => {
+        const factory = registry.get(name);
+        if (!factory)
+            throw new UnknownFactoryError(name);
+        return factory;
+    };
+    return {
+        register: (name, factory) => {
+            registry.set(name, factory);
+        },
+        define: (name, builder) => {
+            const factory = defineFactory(builder);
+            registry.set(name, factory);
+            return factory;
+        },
+        build: (name, overrides) => get(name).build(overrides),
+        buildList: (name, n, overrides) => get(name).buildList(n, overrides),
+        has: (name) => registry.has(name),
+    };
+}
+/** Wikkelt een factory zodat elk gebouwd object via de geïnjecteerde `persist`-functie wordt opgeslagen. */
+export function withPersistence(factory, persist) {
+    const create = async (overrides) => {
+        const item = factory.build(overrides);
+        const saved = await persist(item);
+        return (saved ?? item);
+    };
+    return {
+        create,
+        async createList(n, overrides) {
+            const out = [];
+            for (let i = 0; i < n; i += 1)
+                out.push(await create(overrides));
+            return out;
+        },
+    };
+}
+//# sourceMappingURL=factories.js.map

package/dist/backend/test-kit/core/factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../../../backend/src/test-kit/core/factories.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAYlD,MAAM,UAAU,aAAa,CAAmB,OAAmC;IACjF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,CAAC,YAAwB,EAAE,EAAK,EAAE;QAC9C,GAAG,IAAI,CAAC,CAAC;QACT,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,SAAS,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAmB,EAAE;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YAC1B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAA0B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAA0B,CAAC,CAAC;YAC/C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAA4B,CAAU;QAClF,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAA4B,CAAU;QAChG,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;KAClC,CAAC;AACJ,CAAC;AASD,4GAA4G;AAC5G,MAAM,UAAU,eAAe,CAC7B,OAAmB,EACnB,OAAuC;IAEvC,MAAM,MAAM,GAAG,KAAK,EAAE,SAAsB,EAAc,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAM,CAAC;IAC9B,CAAC,CAAC;IACF,OAAO;QACL,MAAM;QACN,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS;YAC3B,MAAM,GAAG,GAAQ,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACjE,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/test-kit/core/http-client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * US-1403 — HTTP-test-client. Een fluent client (`get/post/put/patch/delete`) over een base-URL, met
+ * helpers voor headers, bearer-tokens en JSON-body's. Responses exposen status/headers/geparste body;
+ * de client gooit nooit op een foutstatus (foutbody blijft beschikbaar voor assertions). Framework-
+ * agnostisch: de app wordt via een structurele adapter geïnjecteerd.
+ */
+export interface TestResponse<B = unknown> {
+    status: number;
+    ok: boolean;
+    headers: Headers;
+    body: B;
+}
+export interface RequestOptions {
+    headers?: Record<string, string>;
+    token?: string;
+    body?: unknown;
+}
+export interface TestClient {
+    request<B = unknown>(method: string, path: string, options?: RequestOptions): Promise<TestResponse<B>>;
+    get<B = unknown>(path: string, options?: Omit<RequestOptions, 'body'>): Promise<TestResponse<B>>;
+    post<B = unknown>(path: string, body?: unknown, options?: Omit<RequestOptions, 'body'>): Promise<TestResponse<B>>;
+    put<B = unknown>(path: string, body?: unknown, options?: Omit<RequestOptions, 'body'>): Promise<TestResponse<B>>;
+    patch<B = unknown>(path: string, body?: unknown, options?: Omit<RequestOptions, 'body'>): Promise<TestResponse<B>>;
+    delete<B = unknown>(path: string, options?: Omit<RequestOptions, 'body'>): Promise<TestResponse<B>>;
+    withToken(token: string): TestClient;
+    withHeaders(headers: Record<string, string>): TestClient;
+}
+export interface TestClientOptions {
+    headers?: Record<string, string>;
+    token?: string;
+}
+export declare function httpTestClient(baseUrl: string, options?: TestClientOptions): TestClient;
+/** Structureel contract van een gebootstrapte app (compatibel met NestJS `INestApplication`). */
+export interface ListeningApp {
+    listen(port: number, hostname?: string): Promise<unknown>;
+    getUrl(): Promise<string>;
+    close(): Promise<unknown>;
+}
+export interface StartedTestApp {
+    client: TestClient;
+    url: string;
+    close(): Promise<void>;
+}
+/** Start de geïnjecteerde app op een efemere poort en levert een client + close-hook. */
+export declare function startTestApp(app: ListeningApp, options?: TestClientOptions): Promise<StartedTestApp>;
+//# sourceMappingURL=http-client.d.ts.map

package/dist/backend/test-kit/core/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../../../backend/src/test-kit/core/http-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC;CAC1D;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,UAAU,CAoC3F;AAiBD,iGAAiG;AACjG,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,yFAAyF;AACzF,wBAAsB,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC,CAU9G"}

package/dist/backend/test-kit/core/http-client.js

@@ -0,0 +1,63 @@
+/**
+ * US-1403 — HTTP-test-client. Een fluent client (`get/post/put/patch/delete`) over een base-URL, met
+ * helpers voor headers, bearer-tokens en JSON-body's. Responses exposen status/headers/geparste body;
+ * de client gooit nooit op een foutstatus (foutbody blijft beschikbaar voor assertions). Framework-
+ * agnostisch: de app wordt via een structurele adapter geïnjecteerd.
+ */
+export function httpTestClient(baseUrl, options = {}) {
+    const base = baseUrl.replace(/\/$/, '');
+    async function request(method, path, opts = {}) {
+        const headers = { ...(options.headers ?? {}), ...(opts.headers ?? {}) };
+        const token = opts.token ?? options.token;
+        if (token)
+            headers['authorization'] = `Bearer ${token}`;
+        let body;
+        if (opts.body !== undefined) {
+            headers['content-type'] = headers['content-type'] ?? 'application/json';
+            body = typeof opts.body === 'string' ? opts.body : JSON.stringify(opts.body);
+        }
+        const res = await fetch(`${base}${path.startsWith('/') ? path : `/${path}`}`, {
+            method,
+            headers,
+            ...(body !== undefined ? { body } : {}),
+        });
+        return { status: res.status, ok: res.ok, headers: res.headers, body: (await parseBody(res)) };
+    }
+    return {
+        request,
+        get: (path, o) => request('GET', path, o),
+        post: (path, body, o = {}) => request('POST', path, { ...o, body }),
+        put: (path, body, o = {}) => request('PUT', path, { ...o, body }),
+        patch: (path, body, o = {}) => request('PATCH', path, { ...o, body }),
+        delete: (path, o) => request('DELETE', path, o),
+        withToken: (token) => httpTestClient(base, { ...options, token }),
+        withHeaders: (headers) => httpTestClient(base, { ...options, headers: { ...(options.headers ?? {}), ...headers } }),
+    };
+}
+async function parseBody(res) {
+    const text = await res.text();
+    if (!text)
+        return undefined;
+    if ((res.headers.get('content-type') ?? '').includes('application/json')) {
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+    return text;
+}
+/** Start de geïnjecteerde app op een efemere poort en levert een client + close-hook. */
+export async function startTestApp(app, options = {}) {
+    await app.listen(0, '127.0.0.1');
+    const url = await app.getUrl();
+    return {
+        client: httpTestClient(url, options),
+        url,
+        close: async () => {
+            await app.close();
+        },
+    };
+}
+//# sourceMappingURL=http-client.js.map

package/dist/backend/test-kit/core/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../../../backend/src/test-kit/core/http-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAA6B,EAAE;IAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAExC,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,OAAuB,EAAE;QAEzB,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAChG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAC1C,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAExD,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;YACxE,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE;YAC5E,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAM,EAAE,CAAC;IACrG,CAAC;IAED,OAAO;QACL,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACnE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACrE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;QACjE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;KACpH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAa;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAiBD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAiB,EAAE,UAA6B,EAAE;IACnF,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAC/B,OAAO;QACL,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QACpC,GAAG;QACH,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/test-kit/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `test-kit` — domein-loos testfundament: fixture-factories (US-1402), een HTTP-test-client (US-1403) en
+ * een contract-test-harness (US-1404). Dependency-vrij. De testcontainers-bootstrap (US-1401) zit onder
+ * de subpath `@seifer-webapp-factory/kits/backend/test-kit/infra` (vereist de optionele peer `testcontainers`).
+ */
+export { defineFactory, createFactoryRegistry, withPersistence, type Factory, type FactoryContext, type FactoryRegistry, type PersistentFactory, } from './core/factories.js';
+export { httpTestClient, startTestApp, type TestClient, type TestClientOptions, type TestResponse, type RequestOptions, type ListeningApp, type StartedTestApp, } from './core/http-client.js';
+export { verifyContracts, type Contract, type ContractMethod, type ContractProvider, type ContractReport, type ContractResult, type Deviation, } from './core/contract.js';
+export { TestKitError, UnknownFactoryError } from './core/errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/test-kit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../backend/src/test-kit/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,eAAe,EACf,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,eAAe,EACf,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/backend/test-kit/index.js

@@ -0,0 +1,14 @@
+/**
+ * `test-kit` — domein-loos testfundament: fixture-factories (US-1402), een HTTP-test-client (US-1403) en
+ * een contract-test-harness (US-1404). Dependency-vrij. De testcontainers-bootstrap (US-1401) zit onder
+ * de subpath `@seifer-webapp-factory/kits/backend/test-kit/infra` (vereist de optionele peer `testcontainers`).
+ */
+// Fixture-factories (US-1402)
+export { defineFactory, createFactoryRegistry, withPersistence, } from './core/factories.js';
+// HTTP-test-client (US-1403)
+export { httpTestClient, startTestApp, } from './core/http-client.js';
+// Contract-test-harness (US-1404)
+export { verifyContracts, } from './core/contract.js';
+// Fouten
+export { TestKitError, UnknownFactoryError } from './core/errors.js';
+//# sourceMappingURL=index.js.map

package/dist/backend/test-kit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../backend/src/test-kit/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,8BAA8B;AAC9B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,eAAe,GAKhB,MAAM,qBAAqB,CAAC;AAE7B,6BAA6B;AAC7B,OAAO,EACL,cAAc,EACd,YAAY,GAOb,MAAM,uBAAuB,CAAC;AAE/B,kCAAkC;AAClC,OAAO,EACL,eAAe,GAOhB,MAAM,oBAAoB,CAAC;AAE5B,SAAS;AACT,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/backend/test-kit/infra.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Subpath `@seifer-webapp-factory/kits/backend/test-kit/infra` — de testcontainers-bootstrap (US-1401). Vereist de
+ * optionele peer-dependencies `testcontainers` en (voor Postgres) `pg`.
+ */
+export { bootstrapTestInfra, type TestInfra, type TestInfraOptions, type PostgresInfraOptions, type RedisInfraOptions, type RedisHandle, } from './adapters/infra-bootstrap.js';
+//# sourceMappingURL=infra.d.ts.map

package/dist/backend/test-kit/infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../../backend/src/test-kit/infra.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,WAAW,GACjB,MAAM,+BAA+B,CAAC"}

package/dist/backend/test-kit/infra.js

@@ -0,0 +1,6 @@
+/**
+ * Subpath `@seifer-webapp-factory/kits/backend/test-kit/infra` — de testcontainers-bootstrap (US-1401). Vereist de
+ * optionele peer-dependencies `testcontainers` en (voor Postgres) `pg`.
+ */
+export { bootstrapTestInfra, } from './adapters/infra-bootstrap.js';
+//# sourceMappingURL=infra.js.map

package/dist/backend/test-kit/infra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.js","sourceRoot":"","sources":["../../../backend/src/test-kit/infra.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,kBAAkB,GAMnB,MAAM,+BAA+B,CAAC"}

package/dist/frontend/access-control/core/permissions.d.ts

@@ -0,0 +1,44 @@
+import type { PermissionClaims, PermissionSource, PolicyPredicate, PolicyResolver } from './ports.js';
+/**
+ * Pure permissie-/rol-evaluator (US-F0501). Leidt rechten af uit een geïnjecteerde
+ * `PermissionSource` en biedt een deny-by-default, domein-loze beslissings-API. De evaluator houdt
+ * géén eigen state aan: elke check leest de actuele claims via `source.getClaims()`, zodat een
+ * reactieve source vanzelf reactieve uitkomsten oplevert (login/logout/refresh) — reactief-agnostisch
+ * en SSR/hydratie-veilig (geen module-globale mutable state).
+ */
+/** Lege claims: een anonieme sessie zonder rollen of permissies. */
+export declare const ANONYMOUS_CLAIMS: PermissionClaims;
+/** De publieke evaluator-API. Reactief-vrij: pure booleaanse beslissingen. */
+export interface PermissionEvaluator {
+    /** True als de exacte permissie-string in de claims aanwezig is. */
+    has(permission: string): boolean;
+    /** True als de rol in de claims aanwezig is. */
+    hasRole(role: string): boolean;
+    /** True als álle opgegeven permissies aanwezig zijn (lege lijst = triviaal true). */
+    canAll(permissions: readonly string[]): boolean;
+    /** True als minstens één van de opgegeven permissies aanwezig is (lege lijst = false). */
+    canAny(permissions: readonly string[]): boolean;
+    /**
+     * Policy-check. Met een geïnjecteerde `PolicyResolver` delegeert `can` naar die policy; anders
+     * valt hij terug op een permissie-string-check (`resource:action` als resource is opgegeven,
+     * anders de kale action).
+     */
+    can(action: string, resource?: string): boolean;
+}
+export interface CreatePermissionEvaluatorOptions {
+    /** Optionele policy-resolver voor `can(action, resource?)`. */
+    readonly policy?: PolicyResolver;
+}
+/** Bouwt een `PolicyResolver` uit een kaal predicaat (adapter-gemak). */
+export declare function policyResolver(predicate: PolicyPredicate): PolicyResolver;
+/** Bevriest en verpakt een statische claims-set als source (geen reactiviteit; handig in tests). */
+export declare function staticPermissionSource(claims: PermissionClaims): PermissionSource;
+/**
+ * Verpakt een claims-accessor als source. De accessor mag een reactieve waarde uitlezen
+ * (bv. `() => sessionStore.claims`), zodat de evaluator per-request en reactief blijft zonder dat
+ * de kit de auth-/sessie-kit importeert.
+ */
+export declare function claimsPermissionSource(accessor: () => PermissionClaims): PermissionSource;
+/** Maakt een evaluator bovenop een geïnjecteerde source (+ optionele policy). */
+export declare function createPermissionEvaluator(source: PermissionSource, options?: CreatePermissionEvaluatorOptions): PermissionEvaluator;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/frontend/access-control/core/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../frontend/src/access-control/core/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AAEH,oEAAoE;AACpE,eAAO,MAAM,gBAAgB,EAAE,gBAG7B,CAAC;AAEH,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,gDAAgD;IAChD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,qFAAqF;IACrF,MAAM,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;IAChD,0FAA0F;IAC1F,MAAM,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;IAChD;;;;OAIG;IACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACjD;AAED,MAAM,WAAW,gCAAgC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,cAAc,CAIzE;AAED,oGAAoG;AACpG,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAMjF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,gBAAgB,GAAG,gBAAgB,CAEzF;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,gCAAqC,GAC7C,mBAAmB,CA+BrB"}

package/dist/frontend/access-control/core/permissions.js

@@ -0,0 +1,61 @@
+/**
+ * Pure permissie-/rol-evaluator (US-F0501). Leidt rechten af uit een geïnjecteerde
+ * `PermissionSource` en biedt een deny-by-default, domein-loze beslissings-API. De evaluator houdt
+ * géén eigen state aan: elke check leest de actuele claims via `source.getClaims()`, zodat een
+ * reactieve source vanzelf reactieve uitkomsten oplevert (login/logout/refresh) — reactief-agnostisch
+ * en SSR/hydratie-veilig (geen module-globale mutable state).
+ */
+/** Lege claims: een anonieme sessie zonder rollen of permissies. */
+export const ANONYMOUS_CLAIMS = Object.freeze({
+    roles: Object.freeze([]),
+    permissions: Object.freeze([]),
+});
+/** Bouwt een `PolicyResolver` uit een kaal predicaat (adapter-gemak). */
+export function policyResolver(predicate) {
+    return {
+        resolve: (action, resource, claims) => predicate(claims, action, resource),
+    };
+}
+/** Bevriest en verpakt een statische claims-set als source (geen reactiviteit; handig in tests). */
+export function staticPermissionSource(claims) {
+    const frozen = Object.freeze({
+        roles: Object.freeze([...claims.roles]),
+        permissions: Object.freeze([...claims.permissions]),
+    });
+    return { getClaims: () => frozen };
+}
+/**
+ * Verpakt een claims-accessor als source. De accessor mag een reactieve waarde uitlezen
+ * (bv. `() => sessionStore.claims`), zodat de evaluator per-request en reactief blijft zonder dat
+ * de kit de auth-/sessie-kit importeert.
+ */
+export function claimsPermissionSource(accessor) {
+    return { getClaims: accessor };
+}
+/** Maakt een evaluator bovenop een geïnjecteerde source (+ optionele policy). */
+export function createPermissionEvaluator(source, options = {}) {
+    const policy = options.policy;
+    const has = (permission) => {
+        if (typeof permission !== 'string' || permission.length === 0) {
+            return false;
+        }
+        return source.getClaims().permissions.includes(permission);
+    };
+    const hasRole = (role) => {
+        if (typeof role !== 'string' || role.length === 0) {
+            return false;
+        }
+        return source.getClaims().roles.includes(role);
+    };
+    const canAll = (permissions) => permissions.every(has);
+    const canAny = (permissions) => permissions.some(has);
+    const can = (action, resource) => {
+        if (policy) {
+            return policy.resolve(action, resource, source.getClaims());
+        }
+        const key = resource !== undefined && resource.length > 0 ? `${resource}:${action}` : action;
+        return has(key);
+    };
+    return { has, hasRole, canAll, canAny, can };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/frontend/access-control/core/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../frontend/src/access-control/core/permissions.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AAEH,oEAAoE;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAqB,MAAM,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAsB;IAC7C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAsB;CACpD,CAAC,CAAC;AAyBH,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,SAA0B;IACvD,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,MAAM,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC7C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAsB;QAC5D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAsB;KACzE,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgC;IACrE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CACvC,MAAwB,EACxB,UAA4C,EAAE;IAE9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,MAAM,GAAG,GAAG,CAAC,UAAkB,EAAW,EAAE;QAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,WAA8B,EAAW,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,CAAC,WAA8B,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAElF,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,QAAiB,EAAW,EAAE;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,GACP,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACnF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/C,CAAC"}

package/dist/frontend/access-control/core/ports.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Ports voor de access-control-kit. De core kent alleen deze abstracties; het project levert de
+ * adapters (permission-source uit sessie/claims, optionele policy-resolver). Geen domeinkennis,
+ * geen framework, geen koppeling aan de auth-kit: rollen/permissies komen via injectie binnen.
+ *
+ * Permissie- en rolnamen zijn opaque strings; de kit interpreteert ze niet.
+ */
+/** Claims-snapshot: de rollen en permissies die uit de sessie zijn afgeleid. */
+export interface PermissionClaims {
+    readonly roles: readonly string[];
+    readonly permissions: readonly string[];
+}
+/**
+ * Permission-source-port: levert de huidige claims-snapshot. De implementatie mag reactief zijn
+ * (bv. een accessor die een reactieve sessie-ref uitleest); de pure core roept `getClaims()` bij
+ * elke evaluatie opnieuw aan en blijft zo reactief-agnostisch.
+ */
+export interface PermissionSource {
+    /** Huidige claims. Een anonieme sessie levert lege sets op (deny-by-default). */
+    getClaims(): PermissionClaims;
+}
+/** Predicaat voor een policy-check: beslist over (action, resource) gegeven de claims. */
+export type PolicyPredicate = (claims: PermissionClaims, action: string, resource?: string) => boolean;
+/**
+ * Optionele policy-resolver-port. Wordt geïnjecteerd om `can(action, resource?)` een rijkere
+ * beslissing te geven dan een kale permissie-string-check (bv. een policy-map of ABAC-predicaat).
+ */
+export interface PolicyResolver {
+    resolve(action: string, resource: string | undefined, claims: PermissionClaims): boolean;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/frontend/access-control/core/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../../../frontend/src/access-control/core/ports.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,SAAS,IAAI,gBAAgB,CAAC;CAC/B;AAED,0FAA0F;AAC1F,MAAM,MAAM,eAAe,GAAG,CAC5B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC;AAEb;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;CAC1F"}

package/dist/frontend/access-control/core/ports.js

@@ -0,0 +1,9 @@
+/**
+ * Ports voor de access-control-kit. De core kent alleen deze abstracties; het project levert de
+ * adapters (permission-source uit sessie/claims, optionele policy-resolver). Geen domeinkennis,
+ * geen framework, geen koppeling aan de auth-kit: rollen/permissies komen via injectie binnen.
+ *
+ * Permissie- en rolnamen zijn opaque strings; de kit interpreteert ze niet.
+ */
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/frontend/access-control/core/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../../frontend/src/access-control/core/ports.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/frontend/access-control/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * access-control-kit (frontend) — een domein-loze, injecteerbare permissie-/rol-evaluator met
+ * deny-by-default beslissingen (US-F0501/0502/0503). Rollen en permissies komen via een
+ * geïnjecteerde `PermissionSource` binnen (geen koppeling aan de auth-kit); permissie-namen zijn
+ * opaque strings. Pure core hier; de Vue-/Nuxt-adapters leven onder `./vue` en `./nuxt`.
+ */
+export type { PermissionClaims, PermissionSource, PolicyPredicate, PolicyResolver, } from './core/ports.js';
+export { ANONYMOUS_CLAIMS, createPermissionEvaluator, staticPermissionSource, claimsPermissionSource, policyResolver, } from './core/permissions.js';
+export type { PermissionEvaluator, CreatePermissionEvaluatorOptions, } from './core/permissions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/frontend/access-control/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../frontend/src/access-control/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}

package/dist/frontend/access-control/index.js

@@ -0,0 +1,2 @@
+export { ANONYMOUS_CLAIMS, createPermissionEvaluator, staticPermissionSource, claimsPermissionSource, policyResolver, } from './core/permissions.js';
+//# sourceMappingURL=index.js.map

package/dist/frontend/access-control/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../frontend/src/access-control/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,GACf,MAAM,uBAAuB,CAAC"}

package/dist/frontend/access-control/nuxt/module.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Nuxt-module-adapter (dun) voor de access-control-kit. Registreert een plugin dat een
+ * permissie-evaluator opbouwt uit een reactieve claims-state en die per-app provside, plus de
+ * `<Can>`-component en de `v-can`-directive globaal registreert. De claims-bron blijft die van de
+ * consumer (bv. een `useState`-key gevuld door de auth-/sessie-laag): de kit importeert géén
+ * sibling-kit en kent geen domeinkennis.
+ *
+ * De plugin-code wordt als template geëmit (getypecheckt door Nuxt's build), zodat dit package niet
+ * afhankelijk is van Nuxt's `#app`-virtuals.
+ */
+export interface AccessControlModuleOptions {
+    /** `useState`-key met het reactieve claims-record ({ roles, permissions }). Default: 'claims'. */
+    readonly claimsStateKey?: string;
+}
+declare const _default: NuxtModule<TOptions, TOptions, false>;
+export default _default;
+//# sourceMappingURL=module.d.ts.map

package/dist/frontend/access-control/nuxt/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../frontend/src/access-control/nuxt/module.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B;IACzC,kGAAkG;IAClG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;;AAED,wBA2BG"}

package/dist/frontend/access-control/nuxt/module.js

@@ -0,0 +1,30 @@
+import { defineNuxtModule, addPluginTemplate } from '@nuxt/kit';
+export default defineNuxtModule({
+    meta: {
+        name: '@seifer-webapp-factory/kits/frontend/access-control',
+        configKey: 'foundationAccessControl',
+        compatibility: { nuxt: '>=3.10.0' },
+    },
+    defaults: { claimsStateKey: 'claims' },
+    setup(options) {
+        const claimsKey = options.claimsStateKey ?? 'claims';
+        addPluginTemplate({
+            filename: 'foundation-access-control-plugin.mjs',
+            getContents: () => `
+import { defineNuxtPlugin, useState } from '#app';
+import { providePermissions, Can, createCanDirective } from '@seifer-webapp-factory/kits/frontend/access-control/vue';
+import { createPermissionEvaluator, claimsPermissionSource } from '@seifer-webapp-factory/kits/frontend/access-control';
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const claims = useState(${JSON.stringify(claimsKey)}, () => ({ roles: [], permissions: [] }));
+  const source = claimsPermissionSource(() => claims.value);
+  const evaluator = createPermissionEvaluator(source);
+  providePermissions(nuxtApp.vueApp, evaluator);
+  nuxtApp.vueApp.component('Can', Can);
+  nuxtApp.vueApp.directive('can', createCanDirective(evaluator));
+});
+`,
+        });
+    },
+});
+//# sourceMappingURL=module.js.map

package/dist/frontend/access-control/nuxt/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../frontend/src/access-control/nuxt/module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAiBhE,eAAe,gBAAgB,CAA6B;IAC1D,IAAI,EAAE;QACJ,IAAI,EAAE,qDAAqD;QAC3D,SAAS,EAAE,yBAAyB;QACpC,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;KACpC;IACD,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;IACtC,KAAK,CAAC,OAAmC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC;QACrD,iBAAiB,CAAC;YAChB,QAAQ,EAAE,sCAAsC;YAChD,WAAW,EAAE,GAAG,EAAE,CAAC;;;;;;4BAMG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;;;;;;;CAOpD;SACI,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/frontend/access-control/vue/can-component.d.ts

@@ -0,0 +1,62 @@
+import { type PropType } from 'vue';
+export declare const Can: import("vue").DefineComponent<import("vue").ExtractPropTypes<{
+    permission: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    role: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    any: {
+        type: PropType<readonly string[]>;
+        default: undefined;
+    };
+    all: {
+        type: PropType<readonly string[]>;
+        default: undefined;
+    };
+    action: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    resource: {
+        type: StringConstructor;
+        default: undefined;
+    };
+}>, () => import("vue").VNode<import("vue").RendererNode, import("vue").RendererElement, {
+    [key: string]: any;
+}>[], {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<import("vue").ExtractPropTypes<{
+    permission: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    role: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    any: {
+        type: PropType<readonly string[]>;
+        default: undefined;
+    };
+    all: {
+        type: PropType<readonly string[]>;
+        default: undefined;
+    };
+    action: {
+        type: StringConstructor;
+        default: undefined;
+    };
+    resource: {
+        type: StringConstructor;
+        default: undefined;
+    };
+}>> & Readonly<{}>, {
+    action: string;
+    permission: string;
+    role: string;
+    any: readonly string[];
+    all: readonly string[];
+    resource: string;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+//# sourceMappingURL=can-component.d.ts.map

package/dist/frontend/access-control/vue/can-component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-component.d.ts","sourceRoot":"","sources":["../../../../frontend/src/access-control/vue/can-component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC;AAyDrD,eAAO,MAAM,GAAG;;;;;;;;;;cAKU,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;;;;cAC3B,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;cAD3B,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;;;;cAC3B,QAAQ,CAAC,SAAS,MAAM,EAAE,CAAC;;;;;;;;;;;;;;;;;;4EAanD,CAAC"}

package/dist/frontend/access-control/vue/can-component.js

@@ -0,0 +1,59 @@
+import { defineComponent } from 'vue';
+import { useCan } from './provide.js';
+/**
+ * `<Can>`-guard-component (US-F0502). Rendert het default-slot bij toegang en het `#fallback`-slot
+ * bij weigering. De beslissing komt uit de geïnjecteerde evaluator (`useCan()`) en wordt in de
+ * render-functie gelezen, dus bij een reactieve source past de rendering zich vanzelf aan zodra de
+ * claims wijzigen. Condities zijn combineerbaar (AND): `permission`, `role`, `any`, `all` en
+ * `action`/`resource`. Zonder enige conditie geldt deny-by-default.
+ */
+function isDev() {
+    return typeof process === 'undefined' || process.env['NODE_ENV'] !== 'production';
+}
+/** Combineert de opgegeven condities (AND). Geen enkele conditie => false (deny-by-default). */
+function isAllowed(evaluator, props) {
+    const checks = [];
+    if (props.permission !== undefined) {
+        checks.push(evaluator.has(props.permission));
+    }
+    if (props.role !== undefined) {
+        checks.push(evaluator.hasRole(props.role));
+    }
+    if (props.any !== undefined) {
+        checks.push(evaluator.canAny(props.any));
+    }
+    if (props.all !== undefined) {
+        checks.push(evaluator.canAll(props.all));
+    }
+    if (props.action !== undefined) {
+        checks.push(evaluator.can(props.action, props.resource));
+    }
+    if (checks.length === 0) {
+        if (isDev()) {
+            console.warn('[access-control] <Can>: geen conditie opgegeven (permission/role/any/all/action); fallback getoond (deny-by-default).');
+        }
+        return false;
+    }
+    return checks.every(Boolean);
+}
+export const Can = defineComponent({
+    name: 'Can',
+    props: {
+        permission: { type: String, default: undefined },
+        role: { type: String, default: undefined },
+        any: { type: Array, default: undefined },
+        all: { type: Array, default: undefined },
+        action: { type: String, default: undefined },
+        resource: { type: String, default: undefined },
+    },
+    setup(props, { slots }) {
+        const evaluator = useCan();
+        return () => {
+            if (isAllowed(evaluator, props)) {
+                return slots.default ? slots.default() : [];
+            }
+            return slots.fallback ? slots.fallback() : [];
+        };
+    },
+});
+//# sourceMappingURL=can-component.js.map

package/dist/frontend/access-control/vue/can-component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-component.js","sourceRoot":"","sources":["../../../../frontend/src/access-control/vue/can-component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAiB,MAAM,KAAK,CAAC;AAErD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;;;GAMG;AAEH,SAAS,KAAK;IACZ,OAAO,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC;AACpF,CAAC;AAWD,gGAAgG;AAChG,SAAS,SAAS,CAAC,SAA8B,EAAE,KAAe;IAChE,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,KAAK,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CACV,uHAAuH,CACxH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,eAAe,CAAC;IACjC,IAAI,EAAE,KAAK;IACX,KAAK,EAAE;QACL,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;QAChD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1C,GAAG,EAAE,EAAE,IAAI,EAAE,KAAoC,EAAE,OAAO,EAAE,SAAS,EAAE;QACvE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAoC,EAAE,OAAO,EAAE,SAAS,EAAE;QACvE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;QAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;KAC/C;IACD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE;QACpB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,OAAO,GAAG,EAAE;YACV,IAAI,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}