@shohaghinfo/aerojs 0.4.0 → 0.4.2

package/AGENTS.md

@@ -337,16 +337,17 @@ const db = knex({
 useKnex(db);
 ```
 
-#### 3. Using SQLite (`client: 'better-sqlite3'`)
-Change `.env` to `DB_CONNECTION=sqlite`, `DB_DATABASE=storage/database.sqlite`:
+#### 3. Using SQLite (Native `useSqlite` or `better-sqlite3`)
 ```typescript
-import knex from 'knex';
-import { useKnex } from 'aerojs';
-import { databaseConfig } from './config/database.js';
+import { useSqlite, useKnex } from 'aerojs';
+
+// Option A: Built-in Native SQLite (Node.js >= 22 zero-dependency node:sqlite)
+useSqlite('storage/database.sqlite'); // or ':memory:'
 
+// Option B: SQLite via Knex (better-sqlite3)
 const db = knex({
   client: 'better-sqlite3',
-  connection: databaseConfig.connections.sqlite,
+  connection: { filename: 'storage/database.sqlite' },
   useNullAsDefault: true,
 });
 useKnex(db);
@@ -813,9 +814,9 @@ router.get('/secure/download', validateSignedUrl(), async (ctx) => {
 ```bash
 aero make:job ProcessPayment
 aero make:mail OrderReceipt
-aero make:policy PatientPolicy
-aero make:event PatientAdmitted
-aero make:listener NotifyDoctor
+aero make:policy PostPolicy
+aero make:event UserRegistered
+aero make:listener SendWelcomeNotification
 ```
 
 ---
@@ -823,7 +824,7 @@ aero make:listener NotifyDoctor
 ## 12. Advanced Enterprise Architecture (v0.4.0)
 
 ### 12.1 Field-Level AES-256-GCM Encryption (`Crypt`, `@encrypted`)
-Protect sensitive compliance data (SSN, medical records, credit cards, credentials) transparently at rest:
+Protect sensitive compliance data (SSN, tax records, credentials, confidential notes) transparently at rest:
 
 ```typescript
 import { Model, encrypted, Crypt } from 'aerojs';
@@ -833,13 +834,13 @@ const ciphertext = Crypt.encrypt('secret-data');
 const plaintext = Crypt.decrypt(ciphertext);
 
 // Model field-level transparent encryption
-export class Patient extends Model {
-  public static override table = 'patients';
+export class AccountRecord extends Model {
+  public static override table = 'accounts';
   public static override primaryKey = 'id';
-  public static override fillable = ['name', 'ssn', 'medical_record', 'diagnosis'];
+  public static override fillable = ['name', 'ssn', 'private_notes'];
   
   // Mark fields for automatic AES-256-GCM encryption
-  public static override encrypted = ['ssn', 'medical_record'];
+  public static override encrypted = ['ssn', 'private_notes'];
 
   // Or use TypeScript property decorator:
   // @encrypted()
@@ -847,10 +848,10 @@ export class Patient extends Model {
 }
 
 // Automatically encrypted on .save() and decrypted on .find() / .all() / .toJSON()
-const patient = await Patient.create({
+const account = await AccountRecord.create({
   name: 'John Doe',
   ssn: '123-45-6789',
-  medical_record: 'Asthma diagnosis',
+  private_notes: 'Confidential client notes',
 });
 ```
 

package/README.md

@@ -940,71 +940,144 @@ app.listen(3000);
 
 ---
 
-### 22. Active Record ORM & QueryBuilder (`Model`, `DB`, `Migrator`)
+### 22. Active Record ORM, QueryBuilder & Dialects (`Model`, `DB`, `Schema`, `useSqlite`)
 
-Eloquent and Lucid inspired Active Record ORM with Proxy auto-wiring, relationships, and schema migrations:
+AeroJS ships with a batteries-included, zero-lock-in database tier supporting **MySQL**, **PostgreSQL**, and **SQLite** (Node.js 24 zero-dependency `node:sqlite`).
 
+```text
+┌────────────────────────────────────────────────────────┐
+│                   AeroJS Database Tier                 │
+├──────────────────────────┬─────────────────────────────┤
+│ Tier 1: Batteries-Included│ Tier 2: Zero Lock-In        │
+│ Native ORM & QueryBuilder│ External ORM Bridges        │
+│ ├─ Active Record Model   │ ├─ Drizzle ORM              │
+│ ├─ Fluent QueryBuilder   │ ├─ Prisma Client            │
+│ ├─ Schema Migrations     │ └─ Knex.js                  │
+│ └─ Native SQLite / PG / MySQL                          │
+└──────────────────────────┴─────────────────────────────┘
+```
+
+#### 22.1 Defining Active Record Models & Relationships
 ```typescript
-import { Model, DB, Schema, Migrator } from 'aero';
+import { Model } from 'aerojs';
 
-// 1. Define Model with Relationships
-class User extends Model {
+export class User extends Model {
   public static override table = 'users';
+  public static override primaryKey = 'id';
+  public static override fillable = ['name', 'email', 'role'];
   public static override hidden = ['password'];
   public static override softDeletes = true;
 
   public posts() {
     return this.hasMany(Post, 'user_id', 'id');
   }
+
+  public profile() {
+    return this.hasOne(Profile, 'user_id', 'id');
+  }
 }
 
-class Post extends Model {
+export class Post extends Model {
   public static override table = 'posts';
+
+  public user() {
+    return this.belongsTo(User, 'user_id', 'id');
+  }
 }
+```
+
+#### 22.2 Active Record Persistence & Dirty Tracking
+```typescript
+// Create
+const user = await User.create({ name: 'Alice', email: 'alice@aerojs.dev' });
 
-// 2. Active Record Operations & Mutation via Proxy
-const user = await User.create({ name: 'Alice', email: 'alice@aero.org' });
+// Mutate via Proxied getters/setters & Dirty Tracking
 user.name = 'Alice Smith';
-await user.save();
+await user.save(); // Only updates modified 'name' column
 
-// 3. Eager Loading (Solves N+1 Query Problem)
-const usersWithPosts = await User.query().with('posts').get();
+// Eager Loading (Eliminates N+1 queries)
+const usersWithPosts = await User.with('posts', 'profile').get();
 
-// 4. Fluent QueryBuilder
-const admins = await DB.table('users')
-  .where('role', 'admin')
-  .orderBy('id', 'DESC')
-  .paginate(1, 15);
+// Soft Deletes
+await user.delete();   // Sets deleted_at = NOW()
+await user.restore();  // Clears deleted_at
+```
+
+#### 22.3 Fluent QueryBuilder (`DB.table(...)`)
+```typescript
+import { DB } from 'aerojs';
+
+// Conditionals, Joins & Pagination
+const results = await DB.table('orders')
+  .select('orders.*', 'users.name as customer_name')
+  .join('users', 'orders.user_id', 'users.id')
+  .where('orders.status', '=', 'completed')
+  .whereIn('orders.currency', ['USD', 'EUR'])
+  .orderBy('orders.created_at', 'DESC')
+  .paginate(1, 15); // Returns { data, total, page, perPage, lastPage }
+
+// Pessimistic Locking
+const order = await DB.table('orders')
+  .where('id', 1)
+  .forUpdate()
+  .first();
+
+// Atomic Transactions & Savepoints
+await DB.transaction(async (trx) => {
+  await trx.table('accounts').where('id', 1).decrement('balance', 100);
+  await trx.table('accounts').where('id', 2).increment('balance', 100);
+});
+```
+
+#### 22.4 Native Zero-Dependency SQLite Adapter
+```typescript
+import { Aero, useSqlite } from 'aerojs';
+
+const app = new Aero();
+
+// Out-of-the-box in-memory or persistent SQLite without native compilation:
+app.useSqlite('storage/database.sqlite');
+
+app.get('/items', async (ctx) => {
+  const items = await ctx.sqlite.query('SELECT * FROM items WHERE is_active = ?', [1]);
+  ctx.status(200).json(items);
+});
 ```
 
 ---
 
-### 23. Knex, Prisma & Drizzle ORM Integrations
+### 23. Zero Lock-In External Integrations (Drizzle, Prisma & Knex)
 
-First-class adapters allowing developers to choose any database query engine while enjoying full Aero integration:
+AeroJS gives you complete freedom. You can leverage AeroJS's ultra-fast HTTP routing, middleware pipeline, authentication, websockets, job queues, and error dashboard while bringing your favorite database library:
 
 ```typescript
-import Aero from 'aero';
+import { Aero } from 'aerojs';
 import knex from 'knex';
 import { PrismaClient } from '@prisma/client';
 import { drizzle } from 'drizzle-orm/node-postgres';
 
 const app = new Aero();
 
-// 1. Knex Integration
+// 1. Pluggable Knex.js
 app.useKnex(knex({ client: 'pg', connection: process.env.DATABASE_URL }));
 
-// 2. Prisma Integration
+// 2. Pluggable Prisma Client
 app.usePrisma(new PrismaClient());
 
-// 3. Drizzle Integration
+// 3. Pluggable Drizzle ORM
 app.useDrizzle(drizzle(process.env.DATABASE_URL));
 
-app.get('/users', async (ctx) => {
-  // Access via context
-  const usersKnex = await ctx.knex('users').where('active', true);
-  const usersPrisma = await ctx.prisma.user.findMany();
-  const usersDrizzle = await ctx.drizzle.select().from(...);
+app.get('/dashboard', async (ctx) => {
+  // Direct injection into request context with full TypeScript inference:
+  const activeOrders = await ctx.knex('orders').where({ status: 'pending' });
+  const usersPrisma  = await ctx.prisma.user.findMany({ where: { active: true } });
+  const drizzlePosts = await ctx.drizzle.select().from(postsTable);
+
+  // Or strongly-typed generics:
+  const customPrisma = ctx.getPrisma<PrismaClient>();
+  const customDrizzle = ctx.getDrizzle<typeof drizzleDb>();
+
+  ctx.status(200).json({ activeOrders, usersPrisma, drizzlePosts });
 });
 ```
 
@@ -1225,10 +1298,10 @@ Mail.configure({
 
 // 2. Dispatch with attachments & HTML
 await Mail.send((msg) => {
-  msg.to('patient@example.com')
-     .from('billing@hospital.org', 'Hospital Billing')
+  msg.to('customer@example.com')
+     .from('billing@example.org', 'Billing Department')
      .subject('Monthly Statement & Invoice')
-     .html('<h1>Hello!</h1><p>Please find your medical invoice attached.</p>')
+     .html('<h1>Hello!</h1><p>Please find your monthly invoice attached.</p>')
      .attach('invoice.pdf', pdfBuffer, 'application/pdf');
 });
 ```
@@ -1306,25 +1379,25 @@ AeroJS ships with a powerful, zero-dependency fluent HTTP client built on native
 import { Http } from '@shohaghinfo/aerojs';
 
 // 1. Fluent API calls
-const response = await Http.baseUrl('https://api.hospital-network.com/v1')
+const response = await Http.baseUrl('https://api.example.com/v1')
   .withToken(process.env.API_KEY!)
   .withQuery({ status: 'active', limit: 50 })
   .timeout(5000)
   .retry(3, 200)
-  .get('/patients');
+  .get('/users');
 
 if (response.successful) {
-  const patients = response.json();
-  console.log('Patients fetched:', patients);
+  const users = response.json();
+  console.log('Users fetched:', users);
 }
 
 // 2. Testing Fakes (Mocking external services)
 Http.fake({
-  '/patients': [{ id: 1, name: 'Alice Smith' }],
+  '/users': [{ id: 1, name: 'Alice Smith' }],
   '/billing': Http.response({ invoiceId: 'INV-101' }, 201),
 });
 
-const res = await Http.post('https://api.hospital-network.com/v1/billing', { amount: 500 });
+const res = await Http.post('https://api.example.com/v1/billing', { amount: 500 });
 expect(res.status).toBe(201);
 
 Http.assertSent((req) => req.url.includes('/billing') && req.method === 'POST');
@@ -1446,24 +1519,24 @@ Ensure HIPAA, GDPR, and PCI-DSS compliance by transparently encrypting sensitive
 ```typescript
 import { Model, encrypted, Crypt } from '@shohaghinfo/aerojs';
 
-class PatientRecord extends Model {
-  public static override table = 'patients';
-  public static override fillable = ['name', 'ssn', 'medical_history'];
-  public static override encrypted = ['ssn', 'medical_history'];
+class AccountRecord extends Model {
+  public static override table = 'accounts';
+  public static override fillable = ['name', 'ssn', 'private_notes'];
+  public static override encrypted = ['ssn', 'private_notes'];
 
   @encrypted()
   public ssn!: string;
 }
 
 // 1. Create - Data is stored as aero:enc:<iv>:<tag>:<ciphertext> in the database
-const patient = await PatientRecord.create({
+const account = await AccountRecord.create({
   name: 'Rahim Khan',
   ssn: '019-99-8888',
-  medical_history: 'Diabetes Type 2, Hypertension',
+  private_notes: 'Confidential client information',
 });
 
 // 2. Read - Transparently decrypted on fetch
-const loaded = await PatientRecord.find(patient.id);
+const loaded = await AccountRecord.find(account.id);
 console.log(loaded.ssn); // '019-99-8888' (Plaintext in app code)
 
 // 3. Arbitrary payload encryption via Crypt facade:
@@ -1509,7 +1582,7 @@ const app = new Aero();
 
 // Mount the dashboard with optional role-based protection
 app.useQueueDashboard('/__aero/queue', {
-  title: 'My Hospital Queue Horizon',
+  title: 'AeroJS Queue Horizon',
   pollInterval: 3, // auto-refresh every 3s
   auth: (ctx) => ctx.session?.get('user')?.role === 'superadmin',
 });

package/dist/audit/audit-trail.d.ts

@@ -2,12 +2,11 @@
  * @file audit-trail.ts
  * @description Immutable Audit Trail System for AeroJS.
  *
- * Hospital Architecture Section 38:
- * "হাসপাতালের কোনো মেডিকেল ও ফিন্যান্সিয়াল ডাটা ডাটাবেস থেকে কখনো DELETE করা যাবে না।
- * ভুল এন্ট্রি হলে তা STATUS = VOID বা CANCELLED হবে এবং রিভার্সাল এন্ট্রি পড়বে।"
+ * Provides tamper-evident compliance tracking for sensitive database entities.
+ * Ensures auditable state history without destructive data loss.
  *
  * Stores: User ID, Table/Module, Record ID, Action, Old Value, New Value,
- *         IP Address, Timestamp, Cancellation Reason.
+ *         IP Address, Timestamp, Reason.
  */
 export type AuditAction = 'CREATE' | 'UPDATE' | 'VOID' | 'APPROVE' | 'REJECT' | 'PRINT' | 'LOGIN' | 'LOGOUT' | 'LOCK' | 'RESTORE' | 'EXPORT';
 export interface AuditLogEntry {
@@ -80,12 +79,12 @@ export declare class AuditTrailManager {
     log(entry: AuditLogEntry): Promise<void>;
     /**
      * Get full history of changes for a specific record.
-     * Hospital use: "Who changed this invoice? Show all modifications."
+     * Example: "Who modified this transaction? Show all changes."
      */
     getHistory(tableName: string, recordId: string | number): Promise<AuditLogRecord[]>;
     /**
      * Get all activity by a specific user in a time range.
-     * Hospital use: "What did cashier #42 do during the night shift?"
+     * Example: "Show all actions performed by user #42 today."
      */
     getUserActivity(userId: string | number, from?: Date, to?: Date): Promise<AuditLogRecord[]>;
 }

package/dist/audit/audit-trail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../../src/audit/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,SAAS,GACT,QAAQ,GACR,OAAO,GACP,OAAO,GACP,QAAQ,GACR,MAAM,GACN,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACpF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CAC7F;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,KAAK,CAAS;gBAEV,KAAK,SAAe;IAInB,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBxC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQnF,eAAe,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,CAAC,EAAE,IAAI,EACX,EAAE,CAAC,EAAE,IAAI,GACR,OAAO,CAAC,cAAc,EAAE,CAAC;CAM7B;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,WAAW;IAC5C,IAAI,EAAE,CAAC,aAAa,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,EAAE,CAAM;IACtE,OAAO,CAAC,OAAO,CAAK;IAEP,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAMvD,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAKrD;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAwC;IAE/C,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAK3C;;;;;;;;;;;;;;;OAeG;IACU,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IASrD;;;OAGG;IACU,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAIhG;;;OAGG;IACU,eAAe,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,CAAC,EAAE,IAAI,EACX,EAAE,CAAC,EAAE,IAAI,GACR,OAAO,CAAC,cAAc,EAAE,CAAC;CAG7B;AAED,eAAO,MAAM,UAAU,mBAA0B,CAAC;AAIlD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,yBAAyB,qDAAqD,CAAC"}
+{"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../../src/audit/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,SAAS,GACT,QAAQ,GACR,OAAO,GACP,OAAO,GACP,QAAQ,GACR,MAAM,GACN,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACpF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CAC7F;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,KAAK,CAAS;gBAEV,KAAK,SAAe;IAInB,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBxC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQnF,eAAe,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,CAAC,EAAE,IAAI,EACX,EAAE,CAAC,EAAE,IAAI,GACR,OAAO,CAAC,cAAc,EAAE,CAAC;CAM7B;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,WAAW;IAC5C,IAAI,EAAE,CAAC,aAAa,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,EAAE,CAAM;IACtE,OAAO,CAAC,OAAO,CAAK;IAEP,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAMvD,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAKrD;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAwC;IAE/C,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAK3C;;;;;;;;;;;;;;;OAeG;IACU,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IASrD;;;OAGG;IACU,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAIhG;;;OAGG;IACU,eAAe,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,CAAC,EAAE,IAAI,EACX,EAAE,CAAC,EAAE,IAAI,GACR,OAAO,CAAC,cAAc,EAAE,CAAC;CAG7B;AAED,eAAO,MAAM,UAAU,mBAA0B,CAAC;AAIlD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,yBAAyB,qDAAqD,CAAC"}

package/dist/audit/audit-trail.js

@@ -2,12 +2,11 @@
  * @file audit-trail.ts
  * @description Immutable Audit Trail System for AeroJS.
  *
- * Hospital Architecture Section 38:
- * "হাসপাতালের কোনো মেডিকেল ও ফিন্যান্সিয়াল ডাটা ডাটাবেস থেকে কখনো DELETE করা যাবে না।
- * ভুল এন্ট্রি হলে তা STATUS = VOID বা CANCELLED হবে এবং রিভার্সাল এন্ট্রি পড়বে।"
+ * Provides tamper-evident compliance tracking for sensitive database entities.
+ * Ensures auditable state history without destructive data loss.
  *
  * Stores: User ID, Table/Module, Record ID, Action, Old Value, New Value,
- *         IP Address, Timestamp, Cancellation Reason.
+ *         IP Address, Timestamp, Reason.
  */
 import { DB } from '../database/connection.js';
 /**
@@ -107,14 +106,14 @@ export class AuditTrailManager {
     }
     /**
      * Get full history of changes for a specific record.
-     * Hospital use: "Who changed this invoice? Show all modifications."
+     * Example: "Who modified this transaction? Show all changes."
      */
     async getHistory(tableName, recordId) {
         return await this.driver.getHistory(tableName, recordId);
     }
     /**
      * Get all activity by a specific user in a time range.
-     * Hospital use: "What did cashier #42 do during the night shift?"
+     * Example: "Show all actions performed by user #42 today."
      */
     async getUserActivity(userId, from, to) {
         return await this.driver.getUserActivity(userId, from, to);

package/dist/audit/audit-trail.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../../src/audit/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,2BAA2B,CAAC;AA8C/C;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,KAAK,CAAS;IAEtB,YAAY,KAAK,GAAG,YAAY;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAC9B,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;aACpC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;aAC7B,GAAG,EAAsB,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,MAAuB,EACvB,IAAW,EACX,EAAS;QAET,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,EAAE;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,EAAsB,CAAC;IAC1E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACrB,IAAI,GAAwD,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC;IAEb,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,IAAI,CAAC,IAAI;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;aACnF,OAAO,EAAsB,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAuB;QAClD,OAAO,IAAI,CAAC,IAAI;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;aAClD,OAAO,EAAsB,CAAC;IACnC,CAAC;CACF;AAED,iFAAiF;AAEjF,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAgB,IAAI,iBAAiB,EAAE,CAAC;IAE/C,SAAS,CAAC,MAAmB;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oDAAoD;YACpD,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAC1B,MAAuB,EACvB,IAAW,EACX,EAAS;QAET,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAElD,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kDAAkD,CAAC"}
+{"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../../src/audit/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,2BAA2B,CAAC;AA8C/C;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,KAAK,CAAS;IAEtB,YAAY,KAAK,GAAG,YAAY;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAC9B,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;aACpC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;aAC7B,GAAG,EAAsB,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,MAAuB,EACvB,IAAW,EACX,EAAS;QAET,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,EAAE;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,GAAG,EAAsB,CAAC;IAC1E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACrB,IAAI,GAAwD,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC;IAEb,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,IAAI,CAAC,IAAI;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;aACnF,OAAO,EAAsB,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,MAAuB;QAClD,OAAO,IAAI,CAAC,IAAI;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;aAClD,OAAO,EAAsB,CAAC;IACnC,CAAC;CACF;AAED,iFAAiF;AAEjF,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAgB,IAAI,iBAAiB,EAAE,CAAC;IAE/C,SAAS,CAAC,MAAmB;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,GAAG,CAAC,KAAoB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oDAAoD;YACpD,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAyB;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAC1B,MAAuB,EACvB,IAAW,EACX,EAAS;QAET,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAElD,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kDAAkD,CAAC"}

package/dist/auth/auth-manager.d.ts

@@ -2,7 +2,7 @@
  * @file auth-manager.ts
  * @description Central Auth Manager for AeroJS.
  * Manages multiple named guards (session, jwt, api) and exposes ctx.auth.use('guard').
- * Hospital use: ctx.auth.use('session') for cashiers, ctx.auth.use('jwt') for doctors.
+ * Example: ctx.auth.use('session') for web dashboard, ctx.auth.use('jwt') for mobile API.
  */
 import type { AeroContext } from '../core/context.js';
 import type { AuthUser } from './guards/guard.js';
@@ -47,10 +47,10 @@ export declare class Auth {
      * Guards are lazily instantiated per request.
      *
      * @example
-     * // Cashier session auth
+     * // Web session auth
      * await ctx.auth.use('session').authenticate();
      *
-     * // Doctor JWT auth
+     * // Mobile / API JWT auth
      * const user = await ctx.auth.use('jwt').authenticate();
      */
     use(name?: string): any;
@@ -88,8 +88,8 @@ export declare function authPlugin(manager: AuthManager, sessionManager?: Sessio
  * Throws UnauthorizedError if not authenticated.
  *
  * @example
- * router.get('/cashier/dashboard', handler).middleware(auth('session'));
- * router.get('/api/doctor/patients', handler).middleware(auth('jwt'));
+ * router.get('/dashboard', handler).middleware(auth('session'));
+ * router.get('/api/users', handler).middleware(auth('jwt'));
  */
 export declare function auth(guardName?: string): Middleware;
 //# sourceMappingURL=auth-manager.d.ts.map

package/dist/auth/auth-manager.js

@@ -2,7 +2,7 @@
  * @file auth-manager.ts
  * @description Central Auth Manager for AeroJS.
  * Manages multiple named guards (session, jwt, api) and exposes ctx.auth.use('guard').
- * Hospital use: ctx.auth.use('session') for cashiers, ctx.auth.use('jwt') for doctors.
+ * Example: ctx.auth.use('session') for web dashboard, ctx.auth.use('jwt') for mobile API.
  */
 import { SessionGuard } from './guards/session-guard.js';
 import { JwtGuard } from './guards/jwt-guard.js';
@@ -28,10 +28,10 @@ export class Auth {
      * Guards are lazily instantiated per request.
      *
      * @example
-     * // Cashier session auth
+     * // Web session auth
      * await ctx.auth.use('session').authenticate();
      *
-     * // Doctor JWT auth
+     * // Mobile / API JWT auth
      * const user = await ctx.auth.use('jwt').authenticate();
      */
     use(name) {
@@ -115,8 +115,8 @@ export function authPlugin(manager, sessionManager) {
  * Throws UnauthorizedError if not authenticated.
  *
  * @example
- * router.get('/cashier/dashboard', handler).middleware(auth('session'));
- * router.get('/api/doctor/patients', handler).middleware(auth('jwt'));
+ * router.get('/dashboard', handler).middleware(auth('session'));
+ * router.get('/api/users', handler).middleware(auth('jwt'));
  */
 export function auth(guardName) {
     return async (ctx, next) => {

package/dist/auth/bouncer.d.ts

@@ -8,10 +8,10 @@
  * - Policy-based authorization: ctx.bouncer.authorize(DiscountPolicy, 'approve', discount)
  * - Data-scoped checks: enforcing branch-level data isolation
  *
- * Hospital use:
- *   - Section 22: Discount approval matrix (cashier 0%, supervisor 5%, MS 15%, CEO any)
- *   - Section 37: Maker-Checker dual control for refunds, POs, supplier payments
- *   - Section 25: Branch-scoped data access (operator sees only own branch)
+ * Enterprise use:
+ *   - Role-based authorization matrix
+ *   - Maker-Checker dual control for approvals and transactions
+ *   - Branch-scoped or organization-scoped data access
  */
 import type { AuthUser } from '../auth/guards/guard.js';
 import type { Middleware } from '../core/types.js';
@@ -22,7 +22,7 @@ export type PolicyConstructor = new () => PolicyContract;
 export interface PermissionStore {
     /**
      * Returns all roles for a given user ID.
-     * Example: ['cashier', 'ipd_operator']
+     * Example: ['member', 'editor', 'admin']
      */
     getRoles(userId: string | number): Promise<string[]>;
     /**
@@ -72,13 +72,7 @@ export declare class Bouncer {
      */
     cannot(permission: string): Promise<boolean>;
     /**
-     * Hospital-specific: Check discount approval authority.
-     *
-     * Rules (Section 22):
-     *   cashier     → 0%
-     *   supervisor  → up to 5%
-     *   ms          → up to 15%
-     *   director/ceo → unlimited
+     * Enterprise approval check: Check approval authority threshold based on role.
      *
      * @example
      * if (!await ctx.bouncer.canApproveDiscount(12.5)) {
@@ -87,11 +81,10 @@ export declare class Bouncer {
      */
     canApproveDiscount(percent: number): Promise<boolean>;
     /**
-     * Hospital-specific: Check if user belongs to a specific branch.
-     * Enforces Section 25 — branch data scoping.
+     * Enterprise data scoping: Check if user belongs to a specific organizational branch or tenant.
      *
      * @example
-     * await ctx.bouncer.assertBranch(patient.branchId);
+     * await ctx.bouncer.assertBranch(resource.branchId);
      */
     assertBranch(resourceBranchId: string | number): Promise<void>;
     /**

package/dist/auth/bouncer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bouncer.d.ts","sourceRoot":"","sources":["../../src/auth/bouncer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,WAAW,cAAc;IAC7B,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClF;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,cAAc,CAAC;AAIzD,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC5D;AAID,qBAAa,OAAO;IAClB,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,KAAK,CAAC,CAAkB;IAChC,OAAO,CAAC,QAAQ,CAAqC;gBAEzC,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,eAAe;IAK1D;;OAEG;YACW,SAAS;IAUvB;;OAEG;YACW,eAAe;IAU7B;;;;;OAKG;IACU,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM/C;;;;;OAKG;IACU,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAMrD;;;;;OAKG;IACU,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtD;;OAEG;IACU,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzD;;;;;;;;;;;;;OAaG;IACU,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlE;;;;;;OAMG;IACU,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3E;;;;;;;OAOG;IACU,SAAS,CACpB,WAAW,EAAE,iBAAiB,EAC9B,MAAM,EAAE,MAAM,EACd,GAAG,IAAI,EAAE,GAAG,EAAE,GACb,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACU,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD;;OAEG;IACU,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK1D;AAID,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAC,CAAkB;IAEzB,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAKvC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO;CAG/C;AAED,eAAO,MAAM,cAAc,gBAAuB,CAAC;AAEnD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,UAAU,CAOjE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAS1D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAOhE"}
+{"version":3,"file":"bouncer.d.ts","sourceRoot":"","sources":["../../src/auth/bouncer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,WAAW,cAAc;IAC7B,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClF;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,cAAc,CAAC;AAIzD,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC5D;AAID,qBAAa,OAAO;IAClB,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,KAAK,CAAC,CAAkB;IAChC,OAAO,CAAC,QAAQ,CAAqC;gBAEzC,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,eAAe;IAK1D;;OAEG;YACW,SAAS;IAUvB;;OAEG;YACW,eAAe;IAU7B;;;;;OAKG;IACU,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM/C;;;;;OAKG;IACU,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAMrD;;;;;OAKG;IACU,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtD;;OAEG;IACU,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzD;;;;;;;OAOG;IACU,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlE;;;;;OAKG;IACU,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3E;;;;;;;OAOG;IACU,SAAS,CACpB,WAAW,EAAE,iBAAiB,EAC9B,MAAM,EAAE,MAAM,EACd,GAAG,IAAI,EAAE,GAAG,EAAE,GACb,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACU,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD;;OAEG;IACU,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK1D;AAID,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAC,CAAkB;IAEzB,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAKvC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO;CAG/C;AAED,eAAO,MAAM,cAAc,gBAAuB,CAAC;AAEnD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,UAAU,CAOjE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAS1D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAOhE"}

package/dist/auth/bouncer.js

@@ -8,10 +8,10 @@
  * - Policy-based authorization: ctx.bouncer.authorize(DiscountPolicy, 'approve', discount)
  * - Data-scoped checks: enforcing branch-level data isolation
  *
- * Hospital use:
- *   - Section 22: Discount approval matrix (cashier 0%, supervisor 5%, MS 15%, CEO any)
- *   - Section 37: Maker-Checker dual control for refunds, POs, supplier payments
- *   - Section 25: Branch-scoped data access (operator sees only own branch)
+ * Enterprise use:
+ *   - Role-based authorization matrix
+ *   - Maker-Checker dual control for approvals and transactions
+ *   - Branch-scoped or organization-scoped data access
  */
 import { ForbiddenError, UnauthorizedError } from '../core/errors.js';
 // ─── Bouncer Core ─────────────────────────────────────────────────────────────
@@ -96,13 +96,7 @@ export class Bouncer {
         return !(await this.can(permission));
     }
     /**
-     * Hospital-specific: Check discount approval authority.
-     *
-     * Rules (Section 22):
-     *   cashier     → 0%
-     *   supervisor  → up to 5%
-     *   ms          → up to 15%
-     *   director/ceo → unlimited
+     * Enterprise approval check: Check approval authority threshold based on role.
      *
      * @example
      * if (!await ctx.bouncer.canApproveDiscount(12.5)) {
@@ -115,18 +109,17 @@ export class Bouncer {
         const roles = await this.loadRoles();
         if (roles.includes('ceo') || roles.includes('director') || roles.includes('admin'))
             return true;
-        if (roles.includes('ms') || roles.includes('medical_superintendent'))
+        if (roles.includes('manager') || roles.includes('lead'))
             return percent <= 15;
-        if (roles.includes('supervisor') || roles.includes('incharge'))
+        if (roles.includes('supervisor'))
             return percent <= 5;
-        return percent <= 0; // cashier — no discount authority
+        return percent <= 0;
     }
     /**
-     * Hospital-specific: Check if user belongs to a specific branch.
-     * Enforces Section 25 — branch data scoping.
+     * Enterprise data scoping: Check if user belongs to a specific organizational branch or tenant.
      *
      * @example
-     * await ctx.bouncer.assertBranch(patient.branchId);
+     * await ctx.bouncer.assertBranch(resource.branchId);
      */
     async assertBranch(resourceBranchId) {
         if (!this.user)