@selvajs/local-provider 0.11.0

package/dist/permissions/__tests__/conformance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.js","sourceRoot":"","sources":["../../../src/permissions/__tests__/conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,qCAAqC,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC7C,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,qCAAqC,CAAC;QACrC,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;YAC7D,OAAO;gBACN,KAAK;gBACL,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACpB,gEAAgE;oBAChE,6DAA6D;oBAC7D,iCAAiC;oBACjC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;oBACxB,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;gBACX,CAAC;aACD,CAAC;QACH,CAAC;KACD,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/permissions/index.d.ts

@@ -0,0 +1,2 @@
+export { LocalPlatformPermissionStore } from './LocalPlatformPermissionStore.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permissions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/permissions/index.js

@@ -0,0 +1,2 @@
+export { LocalPlatformPermissionStore } from './LocalPlatformPermissionStore.js';
+//# sourceMappingURL=index.js.map

package/dist/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/permissions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/projects/LocalProjectProvider.d.ts

@@ -0,0 +1,21 @@
+import type { IProjectStore, Project, ProjectRole, ProjectMember, RequestContext, ListOptions, Page } from '@selva/platform';
+import type { LocalOrgStoreLoader } from '../organizations/LocalOrganizationProvider.js';
+export declare class LocalProjectProvider implements IProjectStore {
+    private readonly loader;
+    constructor(loader: LocalOrgStoreLoader);
+    listProjects(_ctx: RequestContext, orgId: string, opts?: ListOptions): Promise<Page<Project>>;
+    getProject(_ctx: RequestContext, id: string): Promise<Project | null>;
+    getProjectBySlug(_ctx: RequestContext, orgId: string, slug: string): Promise<Project | null>;
+    createProject(_ctx: RequestContext, project: Project): Promise<void>;
+    updateProject(_ctx: RequestContext, id: string, patch: Partial<Pick<Project, 'name' | 'slug' | 'description' | 'visibility'>>): Promise<void>;
+    deleteProject(_ctx: RequestContext, id: string): Promise<void>;
+    listProjectMembers(_ctx: RequestContext, projectId: string, opts?: ListOptions): Promise<Page<ProjectMember>>;
+    getProjectMember(_ctx: RequestContext, projectId: string, userId: string): Promise<ProjectMember | null>;
+    addProjectMember(_ctx: RequestContext, member: ProjectMember): Promise<void>;
+    updateProjectMemberRole(_ctx: RequestContext, projectId: string, userId: string, role: ProjectRole): Promise<void>;
+    removeProjectMember(_ctx: RequestContext, projectId: string, userId: string): Promise<void>;
+    canEdit(ctx: RequestContext, projectId: string): Promise<boolean>;
+    canManage(ctx: RequestContext, projectId: string): Promise<boolean>;
+    canEditProjectSettings(ctx: RequestContext, projectId: string): Promise<boolean>;
+}
+//# sourceMappingURL=LocalProjectProvider.d.ts.map

package/dist/projects/LocalProjectProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalProjectProvider.d.ts","sourceRoot":"","sources":["../../src/projects/LocalProjectProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,aAAa,EACb,OAAO,EACP,WAAW,EACX,aAAa,EACb,cAAc,EACd,WAAW,EACX,IAAI,EACJ,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAEzF,qBAAa,oBAAqB,YAAW,aAAa;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;gBAEjC,MAAM,EAAE,mBAAmB;IAMjC,YAAY,CACjB,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAKnB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAKrE,gBAAgB,CACrB,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAKpB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAepE,aAAa,CAClB,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,GAC3E,OAAO,CAAC,IAAI,CAAC;IAgBV,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9D,kBAAkB,CACvB,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAKzB,gBAAgB,CACrB,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAK1B,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5E,uBAAuB,CAC5B,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC;IAQV,mBAAmB,CACxB,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAWV,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBjE,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnE,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAWtF"}

package/dist/projects/LocalProjectProvider.js

@@ -0,0 +1,125 @@
+import { ProviderError, hasPermission } from '@selva/platform';
+import { paginate, applyOrder } from '../pagination.js';
+export class LocalProjectProvider {
+    loader;
+    constructor(loader) {
+        this.loader = loader;
+    }
+    // ── Projects ─────────────────────────────────────────────────────────────────
+    async listProjects(_ctx, orgId, opts) {
+        const { projects } = await this.loader.get();
+        return paginate(applyOrder(projects.filter((p) => p.orgId === orgId), opts), opts);
+    }
+    async getProject(_ctx, id) {
+        const { projects } = await this.loader.get();
+        return projects.find((p) => p.id === id) ?? null;
+    }
+    async getProjectBySlug(_ctx, orgId, slug) {
+        const { projects } = await this.loader.get();
+        return projects.find((p) => p.orgId === orgId && p.slug === slug) ?? null;
+    }
+    async createProject(_ctx, project) {
+        const store = await this.loader.get();
+        if (!store.orgs.some((o) => o.id === project.orgId)) {
+            throw new ProviderError(`Org '${project.orgId}' not found`, 404);
+        }
+        if (store.projects.some((p) => p.id === project.id)) {
+            throw new ProviderError(`Project '${project.id}' already exists`, 409);
+        }
+        if (store.projects.some((p) => p.orgId === project.orgId && p.slug === project.slug)) {
+            throw new ProviderError(`Project slug '${project.slug}' already in use`, 409);
+        }
+        store.projects.push(project);
+        await this.loader.write(store);
+    }
+    async updateProject(_ctx, id, patch) {
+        const store = await this.loader.get();
+        const idx = store.projects.findIndex((p) => p.id === id);
+        if (idx === -1)
+            throw new ProviderError(`Project '${id}' not found`, 404);
+        if (patch.slug && patch.slug !== store.projects[idx].slug) {
+            const orgId = store.projects[idx].orgId;
+            if (store.projects.some((p) => p.orgId === orgId && p.slug === patch.slug && p.id !== id)) {
+                throw new ProviderError(`Project slug '${patch.slug}' already in use`, 409);
+            }
+        }
+        store.projects[idx] = { ...store.projects[idx], ...patch, updatedAt: new Date().toISOString() };
+        await this.loader.write(store);
+    }
+    async deleteProject(_ctx, id) {
+        const store = await this.loader.get();
+        const idx = store.projects.findIndex((p) => p.id === id);
+        if (idx === -1)
+            throw new ProviderError(`Project '${id}' not found`, 404);
+        store.projects.splice(idx, 1);
+        store.projectMembers = store.projectMembers.filter((m) => m.projectId !== id);
+        await this.loader.write(store);
+    }
+    // ── Project members ──────────────────────────────────────────────────────────
+    async listProjectMembers(_ctx, projectId, opts) {
+        const { projectMembers } = await this.loader.get();
+        return paginate(projectMembers.filter((m) => m.projectId === projectId), opts);
+    }
+    async getProjectMember(_ctx, projectId, userId) {
+        const { projectMembers } = await this.loader.get();
+        return projectMembers.find((m) => m.projectId === projectId && m.userId === userId) ?? null;
+    }
+    async addProjectMember(_ctx, member) {
+        const store = await this.loader.get();
+        store.projectMembers.push(member);
+        await this.loader.write(store);
+    }
+    async updateProjectMemberRole(_ctx, projectId, userId, role) {
+        const store = await this.loader.get();
+        const m = store.projectMembers.find((m) => m.projectId === projectId && m.userId === userId);
+        if (!m)
+            throw new ProviderError(`Project member '${userId}' not found`, 404);
+        m.role = role;
+        await this.loader.write(store);
+    }
+    async removeProjectMember(_ctx, projectId, userId) {
+        const store = await this.loader.get();
+        store.projectMembers = store.projectMembers.filter((m) => !(m.projectId === projectId && m.userId === userId));
+        await this.loader.write(store);
+    }
+    // ── Access checks ─────────────────────────────────────────────────────────────
+    // UI gating only — the mutating methods above are the real security boundary.
+    async canEdit(ctx, projectId) {
+        if (hasPermission(ctx, 'platform_admin'))
+            return true;
+        const { projectMembers, projects, orgMembers } = await this.loader.get();
+        const member = projectMembers.find((m) => m.projectId === projectId && m.userId === ctx.userId);
+        if (member?.role === 'owner' || member?.role === 'editor')
+            return true;
+        // manage_definitions permission allows editing public projects in orgs where user is a member
+        if (hasPermission(ctx, 'manage_definitions')) {
+            const project = projects.find((p) => p.id === projectId);
+            if (project?.visibility === 'public') {
+                const isOrgMember = orgMembers.some((m) => m.orgId === project.orgId && m.userId === ctx.userId);
+                return isOrgMember;
+            }
+        }
+        return false;
+    }
+    async canManage(ctx, projectId) {
+        if (hasPermission(ctx, 'platform_admin'))
+            return true;
+        const { projectMembers } = await this.loader.get();
+        const member = projectMembers.find((m) => m.projectId === projectId && m.userId === ctx.userId);
+        return member?.role === 'owner';
+    }
+    async canEditProjectSettings(ctx, projectId) {
+        if (hasPermission(ctx, 'platform_admin'))
+            return true;
+        const { projectMembers } = await this.loader.get();
+        const member = projectMembers.find((m) => m.projectId === projectId && m.userId === ctx.userId);
+        // project owners can always edit
+        if (member?.role === 'owner')
+            return true;
+        // manage_definitions permission allows editing project settings if they're an editor
+        if (hasPermission(ctx, 'manage_definitions') && member?.role === 'editor')
+            return true;
+        return false;
+    }
+}
+//# sourceMappingURL=LocalProjectProvider.js.map

package/dist/projects/LocalProjectProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalProjectProvider.js","sourceRoot":"","sources":["../../src/projects/LocalProjectProvider.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAsB;IAE7C,YAAY,MAA2B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,gFAAgF;IAEhF,KAAK,CAAC,YAAY,CACjB,IAAoB,EACpB,KAAa,EACb,IAAkB;QAElB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAoB,EAAE,EAAU;QAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,IAAoB,EACpB,KAAa,EACb,IAAY;QAEZ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAoB,EAAE,OAAgB;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,aAAa,CAAC,QAAQ,OAAO,CAAC,KAAK,aAAa,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,aAAa,CAAC,YAAY,OAAO,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,aAAa,CAAC,iBAAiB,OAAO,CAAC,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,IAAoB,EACpB,EAAU,EACV,KAA6E;QAE7E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAE1E,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,aAAa,CAAC,iBAAiB,KAAK,CAAC,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAC;YAC7E,CAAC;QACF,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAChG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAoB,EAAE,EAAU;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC1E,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,gFAAgF;IAEhF,KAAK,CAAC,kBAAkB,CACvB,IAAoB,EACpB,SAAiB,EACjB,IAAkB;QAElB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,IAAoB,EACpB,SAAiB,EACjB,MAAc;QAEd,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAoB,EAAE,MAAqB;QACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC5B,IAAoB,EACpB,SAAiB,EACjB,MAAc,EACd,IAAiB;QAEjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC7F,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,MAAM,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,mBAAmB,CACxB,IAAoB,EACpB,SAAiB,EACjB,MAAc;QAEd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAC1D,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,iFAAiF;IACjF,8EAA8E;IAE9E,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,SAAiB;QACnD,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QAChG,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvE,8FAA8F;QAC9F,IAAI,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YACzD,IAAI,OAAO,EAAE,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjG,OAAO,WAAW,CAAC;YACpB,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAmB,EAAE,SAAiB;QACrD,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QAChG,OAAO,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAmB,EAAE,SAAiB;QAClE,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QAChG,iCAAiC;QACjC,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1C,qFAAqF;QACrF,IAAI,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvF,OAAO,KAAK,CAAC;IACd,CAAC;CAED"}

package/dist/projects/__tests__/conformance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conformance.test.d.ts.map

package/dist/projects/__tests__/conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.d.ts","sourceRoot":"","sources":["../../../src/projects/__tests__/conformance.test.ts"],"names":[],"mappings":""}

package/dist/projects/__tests__/conformance.test.js

@@ -0,0 +1,44 @@
+import { describe, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { runProjectStoreConformance } from '@selva/platform/testing';
+import { ALL_PLATFORM_PERMISSIONS, ALL_ORG_PERMISSIONS } from '@selva/platform';
+import { LocalOrgStoreLoader, LocalOrganizationProvider } from '../../organizations/LocalOrganizationProvider.js';
+import { LocalProjectProvider } from '../LocalProjectProvider.js';
+describe('LocalProjectProvider', () => {
+    let tempDir;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-test-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    runProjectStoreConformance({
+        name: 'LocalProjectProvider',
+        createStore: async () => {
+            const loader = new LocalOrgStoreLoader(tempDir);
+            const orgs = new LocalOrganizationProvider(loader);
+            const store = new LocalProjectProvider(loader);
+            // Explicitly create the host org for the project tests.
+            const ownerId = randomUUID();
+            const orgId = randomUUID();
+            const now = new Date().toISOString();
+            await orgs.createOrg({
+                userId: ownerId,
+                platformPermissions: [...ALL_PLATFORM_PERMISSIONS],
+                orgPermissions: [...ALL_ORG_PERMISSIONS]
+            }, {
+                id: orgId,
+                name: 'Test Org',
+                slug: 'test',
+                ownerId,
+                createdAt: now,
+                updatedAt: now
+            });
+            return { store, orgId, ownerId };
+        }
+    });
+});
+//# sourceMappingURL=conformance.test.js.map

package/dist/projects/__tests__/conformance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.js","sourceRoot":"","sources":["../../../src/projects/__tests__/conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,0BAA0B,CAAC;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC/C,wDAAwD;YACxD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,SAAS,CACnB;gBACC,MAAM,EAAE,OAAO;gBACf,mBAAmB,EAAE,CAAC,GAAG,wBAAwB,CAAC;gBAClD,cAAc,EAAE,CAAC,GAAG,mBAAmB,CAAC;aACxC,EACD;gBACC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,MAAM;gBACZ,OAAO;gBACP,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACd,CACD,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;KACD,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/projects/index.d.ts

@@ -0,0 +1,2 @@
+export { LocalProjectProvider } from './LocalProjectProvider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/projects/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/projects/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/projects/index.js

@@ -0,0 +1,2 @@
+export { LocalProjectProvider } from './LocalProjectProvider.js';
+//# sourceMappingURL=index.js.map

package/dist/projects/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/projects/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/storage/LocalStorageProvider.d.ts

@@ -0,0 +1,27 @@
+import type { IStorageProvider } from '@selvajs/platform/storage';
+/**
+ * Filesystem implementation of IStorageProvider.
+ * Files are stored under DATA_PATH/{path}.
+ * Images are auto-transcoded to WebP on put() via the shared platform helper
+ * (`transcodeImageIfNeeded`) — the same helper the Supabase adapter uses,
+ * so both providers produce identical bytes for the same upload.
+ */
+export declare class LocalStorageProvider implements IStorageProvider {
+    private readonly basePath;
+    private readonly publicUrlBase;
+    static fromEnv(env: Record<string, string | undefined>): LocalStorageProvider;
+    constructor(basePath: string, publicUrlBase?: string);
+    /**
+     * Resolve a caller-provided path under basePath, rejecting anything that
+     * would escape the root. Last line of defense against traversal — while
+     * platform-side helpers (definitionPaths) also assert safe keys, this
+     * adapter is reached by any IStorageProvider caller.
+     */
+    private resolvePath;
+    get(storagePath: string): Promise<Uint8Array | null>;
+    put(storagePath: string, data: Uint8Array, contentType?: string): Promise<void>;
+    delete(storagePath: string): Promise<void>;
+    deletePrefix(prefix: string): Promise<void>;
+    getPublicUrl(storagePath: string): string;
+}
+//# sourceMappingURL=LocalStorageProvider.d.ts.map

package/dist/storage/LocalStorageProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalStorageProvider.d.ts","sourceRoot":"","sources":["../../src/storage/LocalStorageProvider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,oBAAoB;gBAKjE,QAAQ,EAAE,MAAM,EAAE,aAAa,SAAe;IAK1D;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IASb,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAUpD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/E,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjD,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;CAGzC"}

package/dist/storage/LocalStorageProvider.js

@@ -0,0 +1,74 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { transcodeImageIfNeeded } from '@selvajs/platform/storage';
+/**
+ * Filesystem implementation of IStorageProvider.
+ * Files are stored under DATA_PATH/{path}.
+ * Images are auto-transcoded to WebP on put() via the shared platform helper
+ * (`transcodeImageIfNeeded`) — the same helper the Supabase adapter uses,
+ * so both providers produce identical bytes for the same upload.
+ */
+export class LocalStorageProvider {
+    basePath;
+    publicUrlBase;
+    static fromEnv(env) {
+        if (!env.DATA_PATH)
+            throw new Error('Missing required env var: DATA_PATH');
+        return new LocalStorageProvider(env.DATA_PATH, '/api/files');
+    }
+    constructor(basePath, publicUrlBase = '/api/files') {
+        this.basePath = basePath;
+        this.publicUrlBase = publicUrlBase;
+    }
+    /**
+     * Resolve a caller-provided path under basePath, rejecting anything that
+     * would escape the root. Last line of defense against traversal — while
+     * platform-side helpers (definitionPaths) also assert safe keys, this
+     * adapter is reached by any IStorageProvider caller.
+     */
+    resolvePath(storagePath) {
+        const base = path.resolve(this.basePath);
+        const full = path.resolve(base, storagePath);
+        if (full !== base && !full.startsWith(base + path.sep)) {
+            throw new Error(`Path escapes base: ${storagePath}`);
+        }
+        return full;
+    }
+    async get(storagePath) {
+        try {
+            const buffer = await fs.readFile(this.resolvePath(storagePath));
+            return new Uint8Array(buffer);
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return null;
+            throw err;
+        }
+    }
+    async put(storagePath, data, contentType) {
+        // Normalize images through the shared transcoder — rewrites `.png` → `.webp`,
+        // caps dimensions, and re-encodes at the platform's canonical quality.
+        // Non-images pass through untouched.
+        const transcoded = await transcodeImageIfNeeded(data, contentType, storagePath);
+        const fullPath = this.resolvePath(transcoded.path);
+        await fs.mkdir(path.dirname(fullPath), { recursive: true });
+        await fs.writeFile(fullPath, Buffer.from(transcoded.data));
+    }
+    async delete(storagePath) {
+        try {
+            await fs.unlink(this.resolvePath(storagePath));
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                throw err;
+        }
+    }
+    async deletePrefix(prefix) {
+        const fullPath = this.resolvePath(prefix);
+        await fs.rm(fullPath, { recursive: true, force: true });
+    }
+    getPublicUrl(storagePath) {
+        return `${this.publicUrlBase}/${storagePath}`;
+    }
+}
+//# sourceMappingURL=LocalStorageProvider.js.map

package/dist/storage/LocalStorageProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalStorageProvider.js","sourceRoot":"","sources":["../../src/storage/LocalStorageProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACf,QAAQ,CAAS;IACjB,aAAa,CAAS;IAEvC,MAAM,CAAC,OAAO,CAAC,GAAuC;QACrD,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,YAAY,QAAgB,EAAE,aAAa,GAAG,YAAY;QACzD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,WAAmB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;YAChE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,IAAgB,EAAE,WAAoB;QACpE,8EAA8E;QAC9E,uEAAuE;QACvE,qCAAqC;QACrC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC/B,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QACjE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,YAAY,CAAC,WAAmB;QAC/B,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC;IAC/C,CAAC;CACD"}

package/dist/storage/__tests__/conformance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conformance.test.d.ts.map

package/dist/storage/__tests__/conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.d.ts","sourceRoot":"","sources":["../../../src/storage/__tests__/conformance.test.ts"],"names":[],"mappings":""}

package/dist/storage/__tests__/conformance.test.js

@@ -0,0 +1,20 @@
+import { describe, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { runStorageProviderConformance } from '@selvajs/platform/testing';
+import { LocalStorageProvider } from '../LocalStorageProvider.js';
+describe('LocalStorageProvider', () => {
+    let tempDir;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-storage-test-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    runStorageProviderConformance({
+        name: 'LocalStorageProvider',
+        createStorage: () => new LocalStorageProvider(tempDir)
+    });
+});
+//# sourceMappingURL=conformance.test.js.map

package/dist/storage/__tests__/conformance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.js","sourceRoot":"","sources":["../../../src/storage/__tests__/conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,6BAA6B,CAAC;QAC7B,IAAI,EAAE,sBAAsB;QAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/storage/index.d.ts

@@ -0,0 +1,2 @@
+export { LocalStorageProvider } from './LocalStorageProvider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/storage/index.js

@@ -0,0 +1,2 @@
+export { LocalStorageProvider } from './LocalStorageProvider.js';
+//# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/userProfile/LocalUserProfileProvider.d.ts

@@ -0,0 +1,25 @@
+import type { IUserProfileStore, RecentRun, RequestContext, UserManagementResult, UserProfile } from '@selvajs/platform';
+/**
+ * Filesystem-backed user-profile store. Reads and writes `user-data.json`,
+ * shared with `LocalPlatformPermissionStore`. Identity (email, password
+ * hash) lives separately on the auth provider — this store keys exclusively
+ * by user ID.
+ *
+ * `IDataProvider.ensureUser` (called from `hooks.server.ts`) seeds an empty
+ * row for every authed user, mirroring Supabase's `handle_new_auth_user`
+ * trigger.
+ */
+export declare class LocalUserProfileProvider implements IUserProfileStore {
+    private readonly data;
+    constructor(userDataFilePath: string);
+    static fromEnv(env: Record<string, string | undefined>): LocalUserProfileProvider;
+    getProfile(ctx: RequestContext, userId: string): Promise<UserProfile | null>;
+    getProfiles(_ctx: RequestContext, userIds: readonly string[]): Promise<UserProfile[]>;
+    updateProfile(ctx: RequestContext, userId: string, patch: {
+        displayName?: string;
+    }): Promise<UserManagementResult>;
+    starDefinition(ctx: RequestContext, userId: string, definitionId: string): Promise<UserManagementResult>;
+    unstarDefinition(ctx: RequestContext, userId: string, definitionId: string): Promise<UserManagementResult>;
+    recordRun(ctx: RequestContext, userId: string, run: RecentRun): Promise<UserManagementResult>;
+}
+//# sourceMappingURL=LocalUserProfileProvider.d.ts.map

package/dist/userProfile/LocalUserProfileProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalUserProfileProvider.d.ts","sourceRoot":"","sources":["../../src/userProfile/LocalUserProfileProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,MAAM,mBAAmB,CAAC;AAiB3B;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,YAAW,iBAAiB;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;gBAE9B,gBAAgB,EAAE,MAAM;IAIpC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,wBAAwB;IAK3E,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAM5E,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IASrF,aAAa,CAClB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,oBAAoB,CAAC;IAa1B,cAAc,CACnB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,CAAC;IAW1B,gBAAgB,CACrB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,CAAC;IAW1B,SAAS,CACd,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,SAAS,GACZ,OAAO,CAAC,oBAAoB,CAAC;CAUhC"}

package/dist/userProfile/LocalUserProfileProvider.js

@@ -0,0 +1,110 @@
+import * as path from 'node:path';
+import { ProviderError, hasPermission } from '@selvajs/platform';
+import { createLocalUserDataStore } from '../data/userData.js';
+function toProfile(u) {
+    return {
+        userId: u.userId,
+        displayName: u.displayName,
+        starredDefinitions: u.starredDefinitions ?? [],
+        recentRuns: u.recentRuns ?? []
+    };
+}
+/**
+ * Filesystem-backed user-profile store. Reads and writes `user-data.json`,
+ * shared with `LocalPlatformPermissionStore`. Identity (email, password
+ * hash) lives separately on the auth provider — this store keys exclusively
+ * by user ID.
+ *
+ * `IDataProvider.ensureUser` (called from `hooks.server.ts`) seeds an empty
+ * row for every authed user, mirroring Supabase's `handle_new_auth_user`
+ * trigger.
+ */
+export class LocalUserProfileProvider {
+    data;
+    constructor(userDataFilePath) {
+        this.data = createLocalUserDataStore(userDataFilePath);
+    }
+    static fromEnv(env) {
+        if (!env.DATA_PATH)
+            throw new Error('Missing required env var: DATA_PATH');
+        return new LocalUserProfileProvider(path.join(env.DATA_PATH, 'user-data.json'));
+    }
+    async getProfile(ctx, userId) {
+        assertCanAccess(ctx, userId);
+        const u = await this.data.findById(userId);
+        return u ? toProfile(u) : null;
+    }
+    async getProfiles(_ctx, userIds) {
+        // Batch read is read-only and used for display name lookups across the UI;
+        // scoping to a single user defeats the purpose. Adapters with stricter
+        // requirements should override.
+        const all = await this.data.listAll();
+        const wanted = new Set(userIds);
+        return all.filter((u) => wanted.has(u.userId)).map(toProfile);
+    }
+    async updateProfile(ctx, userId, patch) {
+        assertCanAccess(ctx, userId);
+        try {
+            if (patch.displayName !== undefined) {
+                await this.data.updateDisplayName(userId, patch.displayName);
+            }
+            return 'ok';
+        }
+        catch (err) {
+            if (err instanceof ProviderError && err.statusCode === 404)
+                return 'not_found';
+            throw err;
+        }
+    }
+    async starDefinition(ctx, userId, definitionId) {
+        assertCanAccess(ctx, userId);
+        try {
+            await this.data.starDefinition(userId, definitionId);
+            return 'ok';
+        }
+        catch (err) {
+            if (err instanceof ProviderError && err.statusCode === 404)
+                return 'not_found';
+            throw err;
+        }
+    }
+    async unstarDefinition(ctx, userId, definitionId) {
+        assertCanAccess(ctx, userId);
+        try {
+            await this.data.unstarDefinition(userId, definitionId);
+            return 'ok';
+        }
+        catch (err) {
+            if (err instanceof ProviderError && err.statusCode === 404)
+                return 'not_found';
+            throw err;
+        }
+    }
+    async recordRun(ctx, userId, run) {
+        assertCanAccess(ctx, userId);
+        try {
+            await this.data.recordRun(userId, run);
+            return 'ok';
+        }
+        catch (err) {
+            if (err instanceof ProviderError && err.statusCode === 404)
+                return 'not_found';
+            throw err;
+        }
+    }
+}
+/**
+ * Profile reads/writes are scoped to the user themselves. `instance_admin`
+ * bypasses for admin tooling. `system: true` (background jobs, signup
+ * auto-seed) also passes — those flows have already authorized.
+ */
+function assertCanAccess(ctx, userId) {
+    if (ctx.system)
+        return;
+    if (ctx.userId === userId)
+        return;
+    if (hasPermission(ctx, 'instance_admin'))
+        return;
+    throw new ProviderError('Forbidden: cannot access another user’s profile', 403);
+}
+//# sourceMappingURL=LocalUserProfileProvider.js.map

package/dist/userProfile/LocalUserProfileProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalUserProfileProvider.js","sourceRoot":"","sources":["../../src/userProfile/LocalUserProfileProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACN,wBAAwB,EAGxB,MAAM,qBAAqB,CAAC;AAE7B,SAAS,SAAS,CAAC,CAAiB;IACnC,OAAO;QACN,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;KAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAwB;IACnB,IAAI,CAAqB;IAE1C,YAAY,gBAAwB;QACnC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,GAAuC;QACrD,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,OAAO,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,MAAc;QACnD,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAoB,EAAE,OAA0B;QACjE,2EAA2E;QAC3E,uEAAuE;QACvE,gCAAgC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,GAAmB,EACnB,MAAc,EACd,KAA+B;QAE/B,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,WAAW,CAAC;YAC/E,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,GAAmB,EACnB,MAAc,EACd,YAAoB;QAEpB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,WAAW,CAAC;YAC/E,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,GAAmB,EACnB,MAAc,EACd,YAAoB;QAEpB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,WAAW,CAAC;YAC/E,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,SAAS,CACd,GAAmB,EACnB,MAAc,EACd,GAAc;QAEd,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,WAAW,CAAC;YAC/E,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;CACD;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAmB,EAAE,MAAc;IAC3D,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO;IACvB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO;IAClC,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC;QAAE,OAAO;IACjD,MAAM,IAAI,aAAa,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/userProfile/__tests__/conformance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conformance.test.d.ts.map

package/dist/userProfile/__tests__/conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.d.ts","sourceRoot":"","sources":["../../../src/userProfile/__tests__/conformance.test.ts"],"names":[],"mappings":""}

package/dist/userProfile/__tests__/conformance.test.js

@@ -0,0 +1,40 @@
+import { describe, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { runUserProfileStoreConformance } from '@selvajs/platform/testing';
+import { LocalAuthProvider } from '../../auth/LocalAuthProvider.js';
+import { LocalUserProfileProvider } from '../LocalUserProfileProvider.js';
+import { createLocalUserDataStore } from '../../data/userData.js';
+describe('LocalUserProfileProvider', () => {
+    let tempDir;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-userprofile-test-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    runUserProfileStoreConformance({
+        name: 'LocalUserProfileProvider',
+        createStore: async () => {
+            const auth = new LocalAuthProvider({
+                hmacSecret: 'test-secret',
+                usersFilePath: path.join(tempDir, 'auth-users.json')
+            });
+            const userDataPath = path.join(tempDir, 'user-data.json');
+            const userData = createLocalUserDataStore(userDataPath);
+            const store = new LocalUserProfileProvider(userDataPath);
+            return {
+                store,
+                seedUser: async (email) => {
+                    // Real user creation: auth-users row + user-data row, mirroring
+                    // what `hooks.server.ts` does in production via `ensureUser`.
+                    const user = await auth.passwordAuth.createUserWithPassword(email, 'pw');
+                    await userData.ensure(user.id);
+                    return user;
+                }
+            };
+        }
+    });
+});
+//# sourceMappingURL=conformance.test.js.map