@selvajs/platform 0.14.2 → 0.15.0-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selvajs/platform",
-  "version": "0.14.2",
+  "version": "0.15.0-beta.1",
   "description": "Pure TypeScript interfaces for Selva platform providers (auth, definitions, compute)",
   "license": "MIT",
   "publishConfig": {
@@ -8,106 +8,91 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/VektorNode/selva.git",
+    "url": "git+https://github.com/VektorNode/selva.git",
     "directory": "packages/platform"
   },
+  "engines": {
+    "node": ">=22.0.0"
+  },
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "source": "./src/index.ts",
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
     "./auth": {
-      "source": "./src/auth/index.ts",
       "types": "./dist/auth/index.d.ts",
       "import": "./dist/auth/index.js"
     },
     "./data": {
-      "source": "./src/data/index.ts",
       "types": "./dist/data/index.d.ts",
       "import": "./dist/data/index.js"
     },
     "./storage": {
-      "source": "./src/storage/index.ts",
       "types": "./dist/storage/index.d.ts",
       "import": "./dist/storage/index.js"
     },
     "./permissions": {
-      "source": "./src/permissions/index.ts",
       "types": "./dist/permissions/index.d.ts",
       "import": "./dist/permissions/index.js"
     },
     "./userProfile": {
-      "source": "./src/userProfile/index.ts",
       "types": "./dist/userProfile/index.d.ts",
       "import": "./dist/userProfile/index.js"
     },
     "./projects": {
-      "source": "./src/projects/index.ts",
       "types": "./dist/projects/index.d.ts",
       "import": "./dist/projects/index.js"
     },
     "./platformProjects": {
-      "source": "./src/platformProjects/index.ts",
       "types": "./dist/platformProjects/index.d.ts",
       "import": "./dist/platformProjects/index.js"
     },
     "./organizations": {
-      "source": "./src/organizations/index.ts",
       "types": "./dist/organizations/index.d.ts",
       "import": "./dist/organizations/index.js"
     },
     "./invites": {
-      "source": "./src/invites/index.ts",
       "types": "./dist/invites/index.d.ts",
       "import": "./dist/invites/index.js"
     },
     "./shareLinks": {
-      "source": "./src/shareLinks/index.ts",
       "types": "./dist/shareLinks/index.d.ts",
       "import": "./dist/shareLinks/index.js"
     },
     "./definitions": {
-      "source": "./src/definitions/index.ts",
       "types": "./dist/definitions/index.d.ts",
       "import": "./dist/definitions/index.js"
     },
     "./computeServer": {
-      "source": "./src/computeServer/index.ts",
       "types": "./dist/computeServer/index.d.ts",
       "import": "./dist/computeServer/index.js"
     },
     "./access": {
-      "source": "./src/access/index.ts",
       "types": "./dist/access/index.d.ts",
       "import": "./dist/access/index.js"
     },
     "./events": {
-      "source": "./src/events/index.ts",
       "types": "./dist/events/index.d.ts",
       "import": "./dist/events/index.js"
     },
     "./utils": {
-      "source": "./src/utils/index.ts",
       "types": "./dist/utils/index.d.ts",
       "import": "./dist/utils/index.js"
     },
     "./testing": {
-      "source": "./src/testing/index.ts",
       "types": "./dist/testing/index.d.ts",
       "import": "./dist/testing/index.js"
     }
   },
   "files": [
-    "dist",
-    "src"
+    "dist"
   ],
   "dependencies": {
     "zod": "^4.3.6",
-    "@selvajs/schemas": "4.6.1"
+    "@selvajs/schemas": "^4.7.0-beta.0"
   },
   "peerDependencies": {
     "sharp": "^0.34.0",
@@ -123,8 +108,8 @@
   },
   "devDependencies": {
     "sharp": "^0.34.5",
-    "typescript": "^5.9.3",
-    "vitest": "^3.2.6"
+    "typescript": "^6.0.3",
+    "vitest": "^3.2.7"
   },
   "scripts": {
     "build": "tsc",

package/src/access/index.ts

@@ -1,23 +0,0 @@
-export type {
-	ProjectAccessInput,
-	DefinitionAccessInput,
-	VisibilityChangeInput,
-	ReclaimAccessInput,
-	CreateProjectAccessInput,
-	OwnerRemovalInput,
-	OwnerRemovalCheck
-} from './rules.js';
-
-export {
-	canView,
-	canSolve,
-	canEdit,
-	canManage,
-	canEditProjectSettings,
-	canChangeVisibilityToPublic,
-	canEditDefinition,
-	canReclaim,
-	canCreateProject,
-	checkOwnerRemoval,
-	withAdminBypass
-} from './rules.js';

package/src/access/rules.ts

@@ -1,276 +0,0 @@
-import type { PlatformPermission } from '../permissions/types.js';
-import type { OrgPermission } from '../organizations/schemas.js';
-import type { Project, ProjectMember } from '../projects/types.js';
-import type { OrgMember } from '../organizations/types.js';
-import type { DefinitionRecord } from '../definitions/types.js';
-import type { PlatformProjectGrant } from '../platformProjects/types.js';
-
-/**
- * Pure access-control rules — single source of truth for UI gating across
- * adapters. Mutating store methods MUST re-enforce the same predicate
- * independently (RLS in SQL, code in local/JSON).
- *
- * `instance_admin` bypass is NOT baked into rule bodies — wrap calls with
- * `withAdminBypass` at the call site.
- */
-
-function isInstanceAdmin(platformPermissions: readonly PlatformPermission[]): boolean {
-	return platformPermissions.includes('instance_admin');
-}
-
-export function withAdminBypass(
-	platformPermissions: readonly PlatformPermission[],
-	rule: () => boolean
-): boolean {
-	if (isInstanceAdmin(platformPermissions)) return true;
-	return rule();
-}
-
-export interface ProjectAccessInput {
-	orgPermissions: readonly OrgPermission[];
-	platformPermissions: readonly PlatformPermission[];
-	project: Project | null;
-	member: ProjectMember | null;
-	orgMember: OrgMember | null;
-	/**
-	 * `ALLOW_CROSS_ORG_PUBLIC` flag. When false, `public` visibility means
-	 * "everyone in the parent org" rather than "everyone on the instance".
-	 */
-	allowCrossOrgPublic: boolean;
-	/**
-	 * `ENABLE_PLATFORM_PROJECTS` flag. When false, every rule treats a
-	 * `platform`-visibility project as inaccessible — even for instance
-	 * admins — so the feature can be hidden silently without deleting data.
-	 */
-	enablePlatformProjects: boolean;
-	/**
-	 * Grants for `platform`-visibility projects. Pass an empty array for
-	 * non-platform projects — the rule only consults this for `platform`.
-	 */
-	platformGrants: readonly PlatformProjectGrant[];
-	/** `ctx.actingOrgId` — used to match org grants on platform projects. */
-	actingOrgId: string | null;
-	/** `ctx.userId` — used to match user grants on platform projects. */
-	userId: string;
-}
-
-/**
- * Authenticated-user view rule. Anonymous access is delivered via share-link
- * tokens — the route resolves a valid token before this rule runs.
- *
- * For `platform` projects: `instance_admin` always passes; otherwise any
- * grant (view-only or canSolve) satisfies view access.
- */
-export function canView(input: ProjectAccessInput): boolean {
-	const {
-		project,
-		member,
-		orgMember,
-		allowCrossOrgPublic,
-		enablePlatformProjects,
-		platformPermissions,
-		platformGrants,
-		actingOrgId,
-		userId
-	} = input;
-	if (!project) return false;
-
-	if (project.visibility === 'platform') {
-		if (!enablePlatformProjects) return false;
-		if (isInstanceAdmin(platformPermissions)) return true;
-		return platformGrants.some(
-			(g) =>
-				(g.granteeType === 'user' && g.granteeId === userId) ||
-				(g.granteeType === 'org' && g.granteeId === actingOrgId)
-		);
-	}
-
-	if (project.visibility === 'private') return member !== null;
-	if (project.visibility === 'org') return orgMember !== null;
-	if (project.visibility === 'public') return allowCrossOrgPublic ? true : orgMember !== null;
-	return false;
-}
-
-/**
- * For non-platform projects: same as `canView` today — kept distinct for
- * future cost gating.
- *
- * For `platform` projects: `instance_admin` always passes; a view-only grant
- * satisfies `canView` but NOT `canSolve` — the grant must have `canSolve=true`.
- */
-export function canSolve(input: ProjectAccessInput): boolean {
-	const {
-		project,
-		enablePlatformProjects,
-		platformPermissions,
-		platformGrants,
-		actingOrgId,
-		userId
-	} = input;
-	if (!project) return false;
-
-	if (project.visibility === 'platform') {
-		if (!enablePlatformProjects) return false;
-		if (isInstanceAdmin(platformPermissions)) return true;
-		return platformGrants.some(
-			(g) =>
-				g.canSolve &&
-				((g.granteeType === 'user' && g.granteeId === userId) ||
-					(g.granteeType === 'org' && g.granteeId === actingOrgId))
-		);
-	}
-
-	return canView(input);
-}
-
-/**
- * Platform projects: `instance_admin` only (they have no member rows).
- * All other visibilities: project owner/editor.
- */
-export function canEdit(input: ProjectAccessInput): boolean {
-	const { member, project, enablePlatformProjects, platformPermissions } = input;
-	if (project?.visibility === 'platform') {
-		if (!enablePlatformProjects) return false;
-		return isInstanceAdmin(platformPermissions);
-	}
-	return member?.role === 'owner' || member?.role === 'editor';
-}
-
-/** Platform projects: `instance_admin` only. All other visibilities: project owner. */
-export function canManage(input: ProjectAccessInput): boolean {
-	if (input.project?.visibility === 'platform') {
-		if (!input.enablePlatformProjects) return false;
-		return isInstanceAdmin(input.platformPermissions);
-	}
-	return input.member?.role === 'owner';
-}
-
-/** Platform projects: `instance_admin` only. All other visibilities: project owner. */
-export function canEditProjectSettings(input: ProjectAccessInput): boolean {
-	if (input.project?.visibility === 'platform') {
-		if (!input.enablePlatformProjects) return false;
-		return isInstanceAdmin(input.platformPermissions);
-	}
-	return input.member?.role === 'owner';
-}
-
-export interface VisibilityChangeInput {
-	orgMember: OrgMember | null;
-}
-
-/**
- * Authorization to flip a project to `public`. The `ALLOW_CROSS_ORG_PUBLIC`
- * flag only changes what `public` means post-flip; the flip itself is gated
- * by org owner/admin role.
- */
-export function canChangeVisibilityToPublic(input: VisibilityChangeInput): boolean {
-	const role = input.orgMember?.role;
-	return role === 'owner' || role === 'admin';
-}
-
-export interface DefinitionAccessInput {
-	project: Project | null;
-	definition: DefinitionRecord | null;
-	member: ProjectMember | null;
-	userId: string;
-	platformPermissions: readonly PlatformPermission[];
-	/**
-	 * `ENABLE_PLATFORM_PROJECTS` flag. When false, definitions in
-	 * platform-visibility projects are not editable by anyone, matching the
-	 * other project rules.
-	 */
-	enablePlatformProjects: boolean;
-}
-
-/**
- * For platform projects: `instance_admin` only.
- * For all other projects: project editor/owner can always edit (moderation).
- * On commons projects (`autoJoinOnUpload=true`) the definition owner can edit their own.
- */
-export function canEditDefinition(input: DefinitionAccessInput): boolean {
-	const { project, definition, member, userId, platformPermissions, enablePlatformProjects } =
-		input;
-	if (!project || !definition) return false;
-
-	if (project.visibility === 'platform') {
-		if (!enablePlatformProjects) return false;
-		return isInstanceAdmin(platformPermissions);
-	}
-
-	if (member?.role === 'owner' || member?.role === 'editor') return true;
-	if (project.autoJoinOnUpload && userId === definition.ownerId) return true;
-
-	return false;
-}
-
-export interface ReclaimAccessInput {
-	project: Project | null;
-	orgMember: OrgMember | null;
-	/** `ctx.actingOrgId` — must match `project.orgId`. */
-	actingOrgId: string | null;
-}
-
-/**
- * Org leadership escape hatch. Reclaim adds the actor as co-owner; it does
- * NOT demote the existing owner. Tenancy must match.
- *
- * Platform projects cannot be reclaimed — `instance_admin` always has
- * management access to them without needing the Reclaim mechanism.
- */
-export function canReclaim(input: ReclaimAccessInput): boolean {
-	const { project, orgMember, actingOrgId } = input;
-	if (!project || !actingOrgId) return false;
-	if (project.visibility === 'platform') return false;
-	if (actingOrgId !== project.orgId) return false;
-	const role = orgMember?.role;
-	return role === 'owner' || role === 'admin';
-}
-
-export interface CreateProjectAccessInput {
-	orgPermissions: readonly OrgPermission[];
-	orgMember: OrgMember | null;
-	actingOrgId: string | null;
-	targetOrgId: string;
-}
-
-/**
- * Owner/admin can always create. A `member` needs `manage_projects` org
- * permission. Tenancy is enforced.
- *
- * Platform projects (`visibility='platform'`) are created via the admin API
- * and gated on `instance_admin` — this rule is not consulted for them.
- */
-export function canCreateProject(input: CreateProjectAccessInput): boolean {
-	const { orgMember, orgPermissions, actingOrgId, targetOrgId } = input;
-	if (actingOrgId !== targetOrgId) return false;
-	const role = orgMember?.role;
-	if (role === 'owner' || role === 'admin') return true;
-	if (role === 'member' && orgPermissions.includes('manage_projects')) return true;
-	return false;
-}
-
-/**
- * Pre-flight check for project-owner removal. Pure function over already-
- * loaded membership rows so route handlers can call it after `canManage`.
- *
- * - `ok` — proceed
- * - `sole_owner` — last owner; route surfaces 409 + suggests reclaim
- * - `needs_confirm` — owner-on-owner removal without `?confirm=true`
- *
- * Non-owner targets always return `ok`.
- */
-export type OwnerRemovalCheck = 'ok' | 'sole_owner' | 'needs_confirm';
-
-export interface OwnerRemovalInput {
-	target: { role: 'owner' | 'editor' | 'viewer' };
-	allMembers: readonly { role: 'owner' | 'editor' | 'viewer' }[];
-	confirmed: boolean;
-}
-
-export function checkOwnerRemoval(input: OwnerRemovalInput): OwnerRemovalCheck {
-	if (input.target.role !== 'owner') return 'ok';
-	const ownerCount = input.allMembers.filter((m) => m.role === 'owner').length;
-	if (ownerCount <= 1) return 'sole_owner';
-	if (!input.confirmed) return 'needs_confirm';
-	return 'ok';
-}

package/src/auth/index.ts

@@ -1,8 +0,0 @@
-export type { AuthUser, UserManagementResult, LoginResult } from './types.js';
-export type {
-	IAuthProvider,
-	IOAuthAuth,
-	IPasswordAuth,
-	IEmailLinkAuth,
-	IProxyAuth
-} from './interface.js';