@sonicjs-cms/core 3.0.0-beta.23 → 3.0.0-beta.25

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 export { B as Bindings, a as BootIsolateFn, b as SonicJSApp, S as SonicJSConfig, V as Variables, c as createSonicJSApp, s as setupCoreMiddleware, d as setupCoreRoutes } from './app-aj39TGHB.cjs';
-import { o as DefinedPlugin } from './define-plugin-DMcvEy_C.cjs';
-export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-DMcvEy_C.cjs';
+import { o as DefinedPlugin } from './define-plugin-rjXmGOgu.cjs';
+export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-rjXmGOgu.cjs';
 import { D1Database as D1Database$1 } from '@cloudflare/workers-types';
 import { z } from 'zod';
 import { E as EmailProvider, N as NormalizedEmailMessage, t as SendResult } from './types-DT7XN5TX.cjs';
@@ -159,6 +159,14 @@ declare class RbacService {
     getRolesForUser(userId: string): Promise<RbacRole[]>;
     /** Grants attached to a set of role ids (from the embedded role grants). */
     private grantsForRoleIds;
+    /**
+     * Does the role (matched by document slug OR data.name) have a grant for resource+verb?
+     * Matches the role principal id from the request context, which can be either the RBAC slug
+     * (e.g. 'role-public') or the legacy role name (e.g. 'public').
+     */
+    isGrantedForRole(roleNameOrSlug: string, resource: string, verb: string): Promise<boolean>;
+    /** True if a role document exists for this id or name. Use to distinguish "no RBAC role → default allow" from "role exists but no grant → deny". */
+    hasRbacRole(idOrName: string): Promise<boolean>;
     /** Does a single grant row satisfy the requested (resource, verb)? */
     private grantMatches;
     private strongestScope;
@@ -352,6 +360,7 @@ declare class DocumentRepository {
     getById(id: string): Promise<Document | null>;
     getCurrentDraft(rootId: string): Promise<Document | null>;
     getPublished(rootId: string): Promise<Document | null>;
+    getBySlug(typeId: string, slug: string): Promise<Document | null>;
     list(opts?: ListDocumentsOptions): Promise<Document[]>;
     listPublished(opts?: ListDocumentsOptions): Promise<Document[]>;
     listDrafts(opts?: ListDocumentsOptions): Promise<Document[]>;
@@ -709,6 +718,32 @@ declare function getUserProfileConfig(): UserProfileConfig | null;
 declare const userProfilesPlugin: DefinedPlugin;
 declare function createUserProfilesPlugin(): DefinedPlugin;
 
+/**
+ * MCP plugin configuration.
+ *
+ * Config is supplied in code when the operator adds `mcpPlugin({...})` to the app's
+ * plugin register array — captured in a closure and resolved against the live
+ * CollectionRegistry on each request (so newly registered collections appear
+ * without a restart). All fields are optional with safe defaults.
+ */
+
+declare const mcpConfigSchema: z.ZodObject<{
+    expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    types: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        read: z.ZodDefault<z.ZodBoolean>;
+        write: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    redactFields: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    listLimit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+type McpConfigInput = z.input<typeof mcpConfigSchema>;
+type McpConfig = z.infer<typeof mcpConfigSchema>;
+
+/** Build an MCP plugin instance bound to the given config. */
+declare function mcpPlugin(options?: McpConfigInput): DefinedPlugin;
+/** Alias matching the repo's `createXPlugin` convention. */
+declare function createMcpPlugin(options?: McpConfigInput): DefinedPlugin;
+
 /**
  * @sonicjs/core - Main Entry Point
  *
@@ -729,4 +764,4 @@ declare function createUserProfilesPlugin(): DefinedPlugin;
 
 declare const VERSION: string;
 
-export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };
+export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, type McpConfig, type McpConfigInput, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createMcpPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, mcpPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { B as Bindings, a as BootIsolateFn, b as SonicJSApp, S as SonicJSConfig, V as Variables, c as createSonicJSApp, s as setupCoreMiddleware, d as setupCoreRoutes } from './app-01M0dIwt.js';
-import { o as DefinedPlugin } from './define-plugin-D_6D9vVZ.js';
-export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-D_6D9vVZ.js';
+import { o as DefinedPlugin } from './define-plugin-DDe8a_bh.js';
+export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-DDe8a_bh.js';
 import { D1Database as D1Database$1 } from '@cloudflare/workers-types';
 import { z } from 'zod';
 import { E as EmailProvider, N as NormalizedEmailMessage, t as SendResult } from './types-DT7XN5TX.js';
@@ -159,6 +159,14 @@ declare class RbacService {
     getRolesForUser(userId: string): Promise<RbacRole[]>;
     /** Grants attached to a set of role ids (from the embedded role grants). */
     private grantsForRoleIds;
+    /**
+     * Does the role (matched by document slug OR data.name) have a grant for resource+verb?
+     * Matches the role principal id from the request context, which can be either the RBAC slug
+     * (e.g. 'role-public') or the legacy role name (e.g. 'public').
+     */
+    isGrantedForRole(roleNameOrSlug: string, resource: string, verb: string): Promise<boolean>;
+    /** True if a role document exists for this id or name. Use to distinguish "no RBAC role → default allow" from "role exists but no grant → deny". */
+    hasRbacRole(idOrName: string): Promise<boolean>;
     /** Does a single grant row satisfy the requested (resource, verb)? */
     private grantMatches;
     private strongestScope;
@@ -352,6 +360,7 @@ declare class DocumentRepository {
     getById(id: string): Promise<Document | null>;
     getCurrentDraft(rootId: string): Promise<Document | null>;
     getPublished(rootId: string): Promise<Document | null>;
+    getBySlug(typeId: string, slug: string): Promise<Document | null>;
     list(opts?: ListDocumentsOptions): Promise<Document[]>;
     listPublished(opts?: ListDocumentsOptions): Promise<Document[]>;
     listDrafts(opts?: ListDocumentsOptions): Promise<Document[]>;
@@ -709,6 +718,32 @@ declare function getUserProfileConfig(): UserProfileConfig | null;
 declare const userProfilesPlugin: DefinedPlugin;
 declare function createUserProfilesPlugin(): DefinedPlugin;
 
+/**
+ * MCP plugin configuration.
+ *
+ * Config is supplied in code when the operator adds `mcpPlugin({...})` to the app's
+ * plugin register array — captured in a closure and resolved against the live
+ * CollectionRegistry on each request (so newly registered collections appear
+ * without a restart). All fields are optional with safe defaults.
+ */
+
+declare const mcpConfigSchema: z.ZodObject<{
+    expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    types: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        read: z.ZodDefault<z.ZodBoolean>;
+        write: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    redactFields: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    listLimit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+type McpConfigInput = z.input<typeof mcpConfigSchema>;
+type McpConfig = z.infer<typeof mcpConfigSchema>;
+
+/** Build an MCP plugin instance bound to the given config. */
+declare function mcpPlugin(options?: McpConfigInput): DefinedPlugin;
+/** Alias matching the repo's `createXPlugin` convention. */
+declare function createMcpPlugin(options?: McpConfigInput): DefinedPlugin;
+
 /**
  * @sonicjs/core - Main Entry Point
  *
@@ -729,4 +764,4 @@ declare function createUserProfilesPlugin(): DefinedPlugin;
 
 declare const VERSION: string;
 
-export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };
+export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, type McpConfig, type McpConfigInput, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createMcpPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, mcpPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };