@soulbatical/tetra-core 0.1.13 → 0.1.15

package/dist/generators/rpc/validator.js

@@ -0,0 +1,398 @@
+/**
+ * SQL Generator Validator
+ * Validates feature configs before generating SQL
+ */
+/**
+ * Validate feature config for SQL generation
+ */
+export function validateConfig(config) {
+    const errors = [];
+    const warnings = [];
+    // Check required fields
+    if (!config.tableName) {
+        errors.push({
+            type: 'error',
+            field: 'tableName',
+            message: 'tableName is required',
+            suggestion: 'Add tableName to feature config'
+        });
+    }
+    if (!config.organizationIdField) {
+        errors.push({
+            type: 'error',
+            field: 'organizationIdField',
+            message: 'organizationIdField is required',
+            suggestion: 'Add organizationIdField to feature config (usually "organization_id")'
+        });
+    }
+    if (!config.filters || config.filters.length === 0) {
+        errors.push({
+            type: 'error',
+            field: 'filters',
+            message: 'No filters defined',
+            suggestion: 'Add at least one filter to filters array'
+        });
+        return { valid: false, errors, warnings };
+    }
+    // Validate searchFields (root level)
+    if (config.searchFields) {
+        const supportedRelations = ['user', 'order'];
+        config.searchFields.forEach((field, index) => {
+            if (field.includes('.')) {
+                const [relation] = field.split('.');
+                if (!supportedRelations.includes(relation)) {
+                    errors.push({
+                        type: 'error',
+                        field: `searchFields[${index}]`,
+                        message: `Unsupported relation "${relation}" in field "${field}"`,
+                        suggestion: `Supported relations: ${supportedRelations.join(', ')}`
+                    });
+                }
+            }
+        });
+    }
+    // Validate each filter
+    const filterNames = new Set();
+    const countsKeys = new Set();
+    config.filters.forEach((filter, index) => {
+        // Check duplicate filter names
+        if (filterNames.has(filter.name)) {
+            errors.push({
+                type: 'error',
+                field: `filters[${index}].name`,
+                message: `Duplicate filter name: ${filter.name}`,
+                suggestion: 'Filter names must be unique'
+            });
+        }
+        filterNames.add(filter.name);
+        // Check filter name is snake_case (for RPC param naming)
+        if (filter.name.match(/[A-Z]/)) {
+            errors.push({
+                type: 'error',
+                field: `filters[${index}].name`,
+                message: `Filter name "${filter.name}" uses camelCase, must be snake_case`,
+                suggestion: `Change to snake_case (e.g., "paymentStatus" → "payment_status")`
+            });
+        }
+        // CRITICAL: Validate customWhereClause handles 'all' for ALL filter types
+        validateCustomWhereClause(filter, index, errors);
+        // Validate filter based on type
+        switch (filter.type) {
+            case 'enum':
+                validateEnumFilter(filter, index, errors, warnings);
+                break;
+            case 'boolean':
+                // Boolean is treated as enum with custom SQL
+                validateBooleanFilter(filter, index, errors, warnings);
+                break;
+            case 'column':
+                validateColumnFilter(filter, index, errors, warnings);
+                break;
+            case 'nullable':
+                validateNullableFilter(filter, index, errors, warnings);
+                break;
+            case 'related':
+                validateRelatedFilter(filter, index, errors, warnings);
+                break;
+            case 'time':
+                validateTimeFilter(filter, index, errors, warnings);
+                break;
+            case 'search':
+                validateSearchFilter(filter, index, errors, warnings);
+                break;
+            case 'array':
+                validateArrayFilter(filter, index, errors, warnings);
+                break;
+            default:
+                errors.push({
+                    type: 'error',
+                    field: `filters[${index}].type`,
+                    message: `Unsupported filter type: ${filter.type}`,
+                    suggestion: 'Use: enum, boolean, column, nullable, related, time, search, or array'
+                });
+        }
+        // Check duplicate counts keys
+        if (filter.countsKey) {
+            if (countsKeys.has(filter.countsKey)) {
+                errors.push({
+                    type: 'error',
+                    field: `filters[${index}].countsKey`,
+                    message: `Duplicate countsKey: ${filter.countsKey}`,
+                    suggestion: 'Counts keys must be unique'
+                });
+            }
+            countsKeys.add(filter.countsKey);
+        }
+        // Validate UI config
+        if (!filter.ui) {
+            warnings.push({
+                type: 'warning',
+                field: `filters[${index}].ui`,
+                message: `Filter "${filter.name}" missing UI config`,
+                suggestion: 'Add ui object with label, placeholder, options'
+            });
+        }
+    });
+    return {
+        valid: errors.length === 0,
+        errors,
+        warnings
+    };
+}
+/**
+ * CRITICAL VALIDATION: Validate customWhereClause handles 'all' value
+ *
+ * When a filter has customWhereClause, mapFiltersToRPC() does NOT convert 'all' to null.
+ * This means the SQL MUST explicitly handle the 'all' value, otherwise it returns 0 items!
+ *
+ * Exception: Array filters (type='array') are excluded from this check because
+ * mapFiltersToRPC() ALWAYS converts 'all' to null for array parameters (line 237-242).
+ * Array parameters cannot be 'all' string - PostgreSQL expects array or null.
+ *
+ * Example problem:
+ * - Frontend sends: search=all (default value)
+ * - Backend passes: p_search='all' to RPC
+ * - SQL says: WHERE p_search IS NULL OR p_search = '' OR EXISTS(...)
+ * - Result: 0 items! (because 'all' !== NULL and 'all' !== '')
+ *
+ * Solution:
+ * - SQL must include: p_search IS NULL OR p_search = '' OR p_search = 'all' OR EXISTS(...)
+ */
+function validateCustomWhereClause(filter, index, errors) {
+    const customWhereClause = filter.sqlGeneration?.customWhereClause;
+    if (!customWhereClause) {
+        return; // No custom WHERE clause, no validation needed
+    }
+    // SKIP validation for array filters - they never receive 'all' value
+    // mapFiltersToRPC() converts 'all' → null for array types (config-driven-filters.ts:237-242)
+    if (filter.type === 'array') {
+        return; // Array filters are safe - no 'all' check needed
+    }
+    const paramName = `p_${filter.rpcParam || filter.name}`;
+    // Check if customWhereClause handles the 'all' value
+    const hasAllCheck = customWhereClause.includes(`${paramName} = 'all'`) ||
+        customWhereClause.includes(`${paramName} = "all"`);
+    if (!hasAllCheck) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].sqlGeneration.customWhereClause`,
+            message: `CRITICAL: Filter "${filter.name}" with customWhereClause MUST handle 'all' value!`,
+            suggestion: `Your SQL will return 0 items when this filter is set to 'all' (the default)!\n\n` +
+                `Fix: Add this to your WHERE clause:\n` +
+                `${paramName} IS NULL OR ${paramName} = '' OR ${paramName} = 'all'\n\n` +
+                `Why: Filters with customWhereClause don't auto-convert 'all' to null,\n` +
+                `so the SQL must explicitly handle it. Without this, the API returns empty results!`
+        });
+    }
+}
+function validateEnumFilter(filter, index, errors, warnings) {
+    if (!filter.column) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].column`,
+            message: `Enum filter "${filter.name}" missing column`,
+            suggestion: 'Add column property (e.g., column: "status")'
+        });
+    }
+    if (!filter.values || filter.values.length === 0) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].values`,
+            message: `Enum filter "${filter.name}" missing values`,
+            suggestion: 'Add values array (e.g., values: ["paid", "pending"])'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Enum filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey (e.g., countsKey: "byStatus")'
+        });
+    }
+}
+function validateBooleanFilter(filter, index, errors, warnings) {
+    if (!filter.column) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].column`,
+            message: `Boolean filter "${filter.name}" missing column`,
+            suggestion: 'Add column property (e.g., column: "is_active")'
+        });
+    }
+    if (!filter.values || filter.values.length !== 2) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].values`,
+            message: `Boolean filter "${filter.name}" must have exactly 2 values: ['true', 'false']`,
+            suggestion: 'Add values: ["true", "false"]'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Boolean filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey (e.g., countsKey: "byIsActive")'
+        });
+    }
+    // Boolean type requires custom SQL (handled by generator)
+    if (!filter.sqlGeneration?.customWhereClause) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].sqlGeneration.customWhereClause`,
+            message: `Boolean filter "${filter.name}" missing custom WHERE clause`,
+            suggestion: 'Add sqlGeneration.customWhereClause for boolean conversion (::boolean cast)'
+        });
+    }
+}
+function validateColumnFilter(filter, index, errors, warnings) {
+    if (!filter.column) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].column`,
+            message: `Column filter "${filter.name}" missing column`,
+            suggestion: 'Add column property'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Column filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey for dynamic counts'
+        });
+    }
+}
+function validateNullableFilter(filter, index, errors, warnings) {
+    if (!filter.column) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].column`,
+            message: `Nullable filter "${filter.name}" missing column`,
+            suggestion: 'Add column property to check for NULL'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Nullable filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey (e.g., countsKey: "byUser")'
+        });
+    }
+}
+function validateRelatedFilter(filter, index, errors, warnings) {
+    if (!filter.relatedTable) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].relatedTable`,
+            message: `Related filter "${filter.name}" missing relatedTable`,
+            suggestion: 'Add relatedTable property'
+        });
+    }
+    if (!filter.foreignKey) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].foreignKey`,
+            message: `Related filter "${filter.name}" missing foreignKey`,
+            suggestion: 'Add foreignKey property'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Related filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey (e.g., countsKey: "byVoucher")'
+        });
+    }
+}
+function validateTimeFilter(filter, index, _errors, warnings) {
+    if (!filter.dateField && !filter.column) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].dateField`,
+            message: `Time filter "${filter.name}" missing dateField, will use created_at`,
+            suggestion: 'Add dateField property or column (e.g., dateField: "order_date")'
+        });
+    }
+    if (!filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: `Time filter "${filter.name}" missing countsKey`,
+            suggestion: 'Add countsKey (e.g., countsKey: "byTimePeriod")'
+        });
+    }
+}
+function validateSearchFilter(filter, index, errors, _warnings) {
+    const searchFields = filter.sqlGeneration?.searchFields;
+    if (!searchFields || searchFields.length === 0) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].sqlGeneration.searchFields`,
+            message: `Search filter "${filter.name}" missing searchFields`,
+            suggestion: 'Add sqlGeneration.searchFields array (e.g., ["reference", "email"])'
+        });
+        return;
+    }
+    // Validate relation syntax (e.g., "order.reference")
+    searchFields.forEach((field, fieldIndex) => {
+        if (field.includes('.')) {
+            const [relation, columnName] = field.split('.');
+            // Check if relation is supported
+            const supportedRelations = ['user', 'order'];
+            if (!supportedRelations.includes(relation)) {
+                errors.push({
+                    type: 'error',
+                    field: `filters[${index}].sqlGeneration.searchFields[${fieldIndex}]`,
+                    message: `Unsupported relation "${relation}" in field "${field}"`,
+                    suggestion: `Supported relations: ${supportedRelations.join(', ')}`
+                });
+            }
+            // Warn if column name looks wrong
+            if (columnName.includes('_') && !columnName.match(/^[a-z_]+$/)) {
+                _warnings.push({
+                    type: 'warning',
+                    field: `filters[${index}].sqlGeneration.searchFields[${fieldIndex}]`,
+                    message: `Column name "${columnName}" in "${field}" looks unusual`,
+                    suggestion: 'Database columns are usually snake_case (e.g., first_name)'
+                });
+            }
+        }
+    });
+}
+/**
+ * Validate array filter (for by-ids navigation)
+ */
+function validateArrayFilter(filter, index, errors, warnings) {
+    // Array filters need dbField or column to know which field to filter
+    if (!filter.dbField && !filter.column) {
+        errors.push({
+            type: 'error',
+            field: `filters[${index}].dbField`,
+            message: 'Array filters require dbField or column',
+            suggestion: 'Add dbField: "id" (or another field to filter by)'
+        });
+    }
+    // Array filters don't need countsKey (no counts generated)
+    if (filter.countsKey) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].countsKey`,
+            message: 'Array filters don\'t generate counts - countsKey will be ignored',
+            suggestion: 'Remove countsKey (array filters are for specific item lookup)'
+        });
+    }
+    // Array filters don't need UI config (not rendered in UI)
+    if (filter.ui) {
+        warnings.push({
+            type: 'warning',
+            field: `filters[${index}].ui`,
+            message: 'Array filters are not rendered in UI - ui config will be ignored',
+            suggestion: 'Remove ui config (array filters are for backend-only filtering)'
+        });
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/generators/rpc/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/generators/rpc/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,wBAAwB;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,iCAAiC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,iCAAiC;YAC1C,UAAU,EAAE,uEAAuE;SACpF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,oBAAoB;YAC7B,UAAU,EAAE,0CAA0C;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,KAAK,GAAG;wBAC/B,OAAO,EAAE,yBAAyB,QAAQ,eAAe,KAAK,GAAG;wBACjE,UAAU,EAAE,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACpE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACvC,+BAA+B;QAC/B,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,WAAW,KAAK,QAAQ;gBAC/B,OAAO,EAAE,0BAA0B,MAAM,CAAC,IAAI,EAAE;gBAChD,UAAU,EAAE,6BAA6B;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7B,yDAAyD;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,WAAW,KAAK,QAAQ;gBAC/B,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,sCAAsC;gBAC1E,UAAU,EAAE,iEAAiE;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAC1E,yBAAyB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAEjD,gCAAgC;QAChC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,MAAM;gBACT,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,SAAS;gBACZ,6CAA6C;gBAC7C,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACvD,MAAM;YACR,KAAK,QAAQ;gBACX,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,UAAU;gBACb,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,SAAS;gBACZ,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACvD,MAAM;YACR,KAAK,MAAM;gBACT,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,QAAQ;gBACX,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,OAAO;gBACV,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACrD,MAAM;YACR;gBACE,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,WAAW,KAAK,QAAQ;oBAC/B,OAAO,EAAE,4BAA4B,MAAM,CAAC,IAAI,EAAE;oBAClD,UAAU,EAAE,uEAAuE;iBACpF,CAAC,CAAC;QACP,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,WAAW,KAAK,aAAa;oBACpC,OAAO,EAAE,wBAAwB,MAAM,CAAC,SAAS,EAAE;oBACnD,UAAU,EAAE,4BAA4B;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,WAAW,KAAK,MAAM;gBAC7B,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,qBAAqB;gBACpD,UAAU,EAAE,gDAAgD;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,yBAAyB,CAChC,MAAoB,EACpB,KAAa,EACb,MAAyB;IAEzB,MAAM,iBAAiB,GAAG,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAElE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,qEAAqE;IACrE,6FAA6F;IAC7F,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IAExD,qDAAqD;IACrD,MAAM,WAAW,GACf,iBAAiB,CAAC,QAAQ,CAAC,GAAG,SAAS,UAAU,CAAC;QAClD,iBAAiB,CAAC,QAAQ,CAAC,GAAG,SAAS,UAAU,CAAC,CAAC;IAErD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,mCAAmC;YAC1D,OAAO,EAAE,qBAAqB,MAAM,CAAC,IAAI,mDAAmD;YAC5F,UAAU,EACR,kFAAkF;gBAClF,uCAAuC;gBACvC,GAAG,SAAS,eAAe,SAAS,YAAY,SAAS,cAAc;gBACvE,yEAAyE;gBACzE,oFAAoF;SACvF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,kBAAkB;YACtD,UAAU,EAAE,8CAA8C;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,kBAAkB;YACtD,UAAU,EAAE,sDAAsD;SACnE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,qBAAqB;YACzD,UAAU,EAAE,6CAA6C;SAC1D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,kBAAkB;YACzD,UAAU,EAAE,iDAAiD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,iDAAiD;YACxF,UAAU,EAAE,+BAA+B;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,qBAAqB;YAC5D,UAAU,EAAE,+CAA+C;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,mCAAmC;YAC1D,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,+BAA+B;YACtE,UAAU,EAAE,6EAA6E;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,kBAAkB;YACxD,UAAU,EAAE,qBAAqB;SAClC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,qBAAqB;YAC3D,UAAU,EAAE,kCAAkC;SAC/C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,UAAU;YACjC,OAAO,EAAE,oBAAoB,MAAM,CAAC,IAAI,kBAAkB;YAC1D,UAAU,EAAE,uCAAuC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,oBAAoB,MAAM,CAAC,IAAI,qBAAqB;YAC7D,UAAU,EAAE,2CAA2C;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,gBAAgB;YACvC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,wBAAwB;YAC/D,UAAU,EAAE,2BAA2B;SACxC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,cAAc;YACrC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,sBAAsB;YAC7D,UAAU,EAAE,yBAAyB;SACtC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,qBAAqB;YAC5D,UAAU,EAAE,8CAA8C;SAC3D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAoB,EACpB,KAAa,EACb,OAA0B,EAC1B,QAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,0CAA0C;YAC9E,UAAU,EAAE,kEAAkE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,qBAAqB;YACzD,UAAU,EAAE,iDAAiD;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,SAA4B;IAE5B,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC;IAExD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,8BAA8B;YACrD,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,wBAAwB;YAC9D,UAAU,EAAE,qEAAqE;SAClF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEhD,iCAAiC;YACjC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,WAAW,KAAK,gCAAgC,UAAU,GAAG;oBACpE,OAAO,EAAE,yBAAyB,QAAQ,eAAe,KAAK,GAAG;oBACjE,UAAU,EAAE,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACpE,CAAC,CAAC;YACL,CAAC;YAED,kCAAkC;YAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/D,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,WAAW,KAAK,gCAAgC,UAAU,GAAG;oBACpE,OAAO,EAAE,gBAAgB,UAAU,SAAS,KAAK,iBAAiB;oBAClE,UAAU,EAAE,4DAA4D;iBACzE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,MAAoB,EACpB,KAAa,EACb,MAAyB,EACzB,QAA2B;IAE3B,qEAAqE;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,WAAW,KAAK,WAAW;YAClC,OAAO,EAAE,yCAAyC;YAClD,UAAU,EAAE,mDAAmD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,aAAa;YACpC,OAAO,EAAE,kEAAkE;YAC3E,UAAU,EAAE,+DAA+D;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,WAAW,KAAK,MAAM;YAC7B,OAAO,EAAE,kEAAkE;YAC3E,UAAU,EAAE,iEAAiE;SAC9E,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -84,7 +84,15 @@ export { defaultAffiliateFeatureConfig } from './shared/affiliate/affiliateFeatu
 export { addAffiliateAdminRoutes, addAffiliateUserRoutes, addAffiliatePublicRoutes } from './shared/affiliate/routes.js';
 export type { AffiliateConfig, AffiliateTierConfig, AffiliateAttribution, AffiliateOrder, Affiliate, AffiliateCommission, AffiliateClick, AffiliatePayment, AffiliateTierHistory, AffiliateFilters, AffiliateDashboard, AffiliateDashboardStats, AffiliateDashboardCommission, AffiliateTierProgress } from './shared/affiliate/types.js';
 export { addPublicAuthRoutes } from './shared/auth/routes.js';
-export type { PublicAuthRoutesConfig, OnNewUserResult, OAuthProvider, InviteConfig, UserProfileOrg } from './shared/auth/types.js';
+export type { PublicAuthRoutesConfig, OnNewUserResult, OAuthProvider, InviteConfig, MagicLinkConfig, UserProfileOrg } from './shared/auth/types.js';
+export { generateRLS, generateRLSBatch } from './generators/rls-generator.js';
+export type { RLSConfig, RLSTableType, RLSGeneratorResult } from './generators/rls-generator.js';
+export { getAuditChecks, generateAuditSQL } from './generators/rls-auditor.js';
+export type { AuditCheck } from './generators/rls-auditor.js';
+export { runRLSCheck, runRLSCheckDebug } from './generators/rls-checker.js';
+export type { RLSReport, RLSCheckResult, RLSViolation, RLSCategorySummary } from './generators/rls-checker.js';
+export { RPCGenerator, DetailRPCGenerator, validateConfig as validateRPCConfig, generateAuthCheck, generateAuthWhereClause, generateAuthDeclarations, generateTimestamp, getTableAlias, escapeIdentifier } from './generators/rpc/index.js';
+export type { GeneratedSQL, FilterDefinition, RPCGeneratorOptions, DetailRPCGeneratorOptions, ValidationResult as RPCValidationResult, ValidationError as RPCValidationError, AccessLevel, CreatorVisibilityConfig as RPCCreatorVisibilityConfig } from './generators/rpc/index.js';
 export { createApp } from './core/createApp.js';
 export type { CreateAppConfig } from './core/createApp.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,uBAAuB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAClY,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AACjF,YAAY,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACjG,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC/J,YAAY,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAG9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAG9F,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC3G,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,YAAY,EAAE,iBAAiB,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAGjE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC9N,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAChJ,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,YAAY,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC9K,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAGjH,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACtP,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAGjI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7D,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACpO,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACtJ,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACpH,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGzF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAGpI,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAOjL,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACzH,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAG1U,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGnI,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,uBAAuB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAClY,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AACjF,YAAY,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACjG,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC/J,YAAY,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAG9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAG9F,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC3G,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,YAAY,EAAE,iBAAiB,IAAI,UAAU,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAGjE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC9N,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAChJ,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,YAAY,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC9K,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAGjH,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACtP,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAGjI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7D,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACpO,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACtJ,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACpH,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGzF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAGpI,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAOjL,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACzH,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAG1U,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGpJ,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/E,YAAY,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAG/G,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,IAAI,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC5O,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,eAAe,IAAI,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAGpR,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -81,6 +81,12 @@ export { defaultAffiliateFeatureConfig } from './shared/affiliate/affiliateFeatu
 export { addAffiliateAdminRoutes, addAffiliateUserRoutes, addAffiliatePublicRoutes } from './shared/affiliate/routes.js';
 // ─── Public Auth Routes ─────────────────────────────────────
 export { addPublicAuthRoutes } from './shared/auth/routes.js';
+// ─── Generators ──────────────────────────────────────────────
+export { generateRLS, generateRLSBatch } from './generators/rls-generator.js';
+export { getAuditChecks, generateAuditSQL } from './generators/rls-auditor.js';
+export { runRLSCheck, runRLSCheckDebug } from './generators/rls-checker.js';
+// RPC Generator (SQL Generator v3.17)
+export { RPCGenerator, DetailRPCGenerator, validateConfig as validateRPCConfig, generateAuthCheck, generateAuthWhereClause, generateAuthDeclarations, generateTimestamp, getTableAlias, escapeIdentifier } from './generators/rpc/index.js';
 // ─── App Bootstrap ──────────────────────────────────────────
 export { createApp } from './core/createApp.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAMtE,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAE9F,+DAA+D;AAC/D,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE3G,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEzE,+DAA+D;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,gEAAgE;AAChE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE9N,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAChJ,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAGvE,2CAA2C;AAC3C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAG9K,mCAAmC;AACnC,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAGtP,+DAA+D;AAC/D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEpO,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGpH,+DAA+D;AAC/D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAKpI,gEAAgE;AAChE,wEAAwE;AACxE,uFAAuF;AAEvF,8DAA8D;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,8DAA8D;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGzH,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9D,+DAA+D;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAMtE,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAE9F,+DAA+D;AAC/D,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE3G,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEzE,+DAA+D;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,gEAAgE;AAChE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE9N,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAChJ,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAGvE,2CAA2C;AAC3C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAG9K,mCAAmC;AACnC,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAGtP,+DAA+D;AAC/D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEpO,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGpH,+DAA+D;AAC/D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAKpI,gEAAgE;AAChE,wEAAwE;AACxE,uFAAuF;AAEvF,8DAA8D;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,8DAA8D;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGzH,+DAA+D;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9D,gEAAgE;AAChE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG5E,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,IAAI,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG5O,+DAA+D;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/shared/auth/index.d.ts

@@ -1,3 +1,3 @@
 export { addPublicAuthRoutes } from './routes.js';
-export type { PublicAuthRoutesConfig, OnNewUserResult, OAuthProvider, InviteConfig, UserProfileOrg } from './types.js';
+export type { PublicAuthRoutesConfig, OnNewUserResult, OAuthProvider, InviteConfig, MagicLinkConfig, UserProfileOrg } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/shared/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/shared/auth/routes.d.ts

@@ -3,7 +3,7 @@
  *
  * Standardized authentication routes for all Tetra projects.
  * Handles: login, signup, OAuth, token refresh, session, /me, register,
- * logout, and optionally invites.
+ * logout, and optionally magic link and invites.
  *
  * Usage:
  * ```typescript
@@ -39,6 +39,9 @@ import type { PublicAuthRoutesConfig } from './types.js';
  * Routes created (enableMe, default true):
  * - GET  /me            — Full user profile + organizations + role
  *
+ * Routes created (enableMagicLink):
+ * - POST /magic-link     — Send passwordless login email
+ *
  * Routes created (enableInvites):
  * - POST /invite        — Create org invite (requires auth)
  * - POST /invite/accept — Accept invite (requires auth)

package/dist/shared/auth/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/shared/auth/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAIpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAyBzD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,sBAA2B,GAClC,IAAI,CA6pBN"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/shared/auth/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAIpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAkDzD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,sBAA2B,GAClC,IAAI,CAquBN"}

package/dist/shared/auth/routes.js

@@ -3,7 +3,7 @@
  *
  * Standardized authentication routes for all Tetra projects.
  * Handles: login, signup, OAuth, token refresh, session, /me, register,
- * logout, and optionally invites.
+ * logout, and optionally magic link and invites.
  *
  * Usage:
  * ```typescript
@@ -42,6 +42,25 @@ function extractToken(req) {
         return null;
     return header.substring(7);
 }
+// ─── Auto-provision helper ───────────────────────────────────
+async function autoProvisionIfNeeded(user, supabase, onNewUser) {
+    if (!onNewUser)
+        return;
+    const { data: existing } = await supabase
+        .from('users_public')
+        .select('id')
+        .eq('id', user.id)
+        .maybeSingle();
+    if (existing)
+        return;
+    const result = await onNewUser(user, supabase);
+    if (result) {
+        logger.info({ userId: user.id, email: user.email, organizationId: result.organizationId }, 'Auto-provisioned new user');
+    }
+    else {
+        logger.warn({ userId: user.id, email: user.email }, 'onNewUser returned null during auto-provision');
+    }
+}
 // ─── Route Factory ───────────────────────────────────────────
 /**
  * Add standard public authentication routes to a router.
@@ -59,6 +78,9 @@ function extractToken(req) {
  * Routes created (enableMe, default true):
  * - GET  /me            — Full user profile + organizations + role
  *
+ * Routes created (enableMagicLink):
+ * - POST /magic-link     — Send passwordless login email
+ *
  * Routes created (enableInvites):
  * - POST /invite        — Create org invite (requires auth)
  * - POST /invite/accept — Accept invite (requires auth)
@@ -137,6 +159,8 @@ export function addPublicAuthRoutes(router, config = {}) {
                 });
                 return;
             }
+            // Auto-provision users_public + org if onNewUser is configured
+            await autoProvisionIfNeeded(data.user, supabase, config.onNewUser);
             logger.info({ email, userId: data.user.id }, 'Signup successful');
             res.status(201).json({
                 success: true,
@@ -312,6 +336,8 @@ export function addPublicAuthRoutes(router, config = {}) {
                 RFC7807ErrorResponse.unauthorized(res, 'Failed to exchange authorization code');
                 return;
             }
+            // Auto-provision users_public + org for new OAuth users
+            await autoProvisionIfNeeded(data.user, supabase, config.onNewUser);
             logger.info({ email: data.user.email, userId: data.user.id }, 'OAuth login successful');
             res.json({
                 success: true,
@@ -403,6 +429,62 @@ export function addPublicAuthRoutes(router, config = {}) {
             res.json({ success: true });
         }
     });
+    // ── POST /magic-link (optional) ─────────────────────────────
+    if (config.enableMagicLink) {
+        const mlConfig = config.magicLinkConfig || {};
+        const mlRedirectPath = mlConfig.redirectPath || callbackPath;
+        router.post('/magic-link', async (req, res) => {
+            const { email } = req.body;
+            if (!email) {
+                RFC7807ErrorResponse.badRequest(res, 'Email is required');
+                return;
+            }
+            // Basic email validation
+            if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+                RFC7807ErrorResponse.badRequest(res, 'Invalid email format');
+                return;
+            }
+            try {
+                const supabase = getSystemDB();
+                const redirectTo = `${frontendUrl}${mlRedirectPath}`;
+                if (mlConfig.sendEmail) {
+                    // Custom email sender: generate link via admin API (does NOT send email)
+                    const { data: linkData, error: linkError } = await supabase.auth.admin.generateLink({
+                        type: 'magiclink',
+                        email,
+                        options: { redirectTo },
+                    });
+                    if (linkError || !linkData.properties?.action_link) {
+                        logger.error({ error: linkError?.message, email }, 'Magic link generation failed');
+                        RFC7807ErrorResponse.internalError(res, 'Failed to generate magic link');
+                        return;
+                    }
+                    await mlConfig.sendEmail(email, linkData.properties.action_link, supabase);
+                }
+                else {
+                    // Default: let Supabase send the email
+                    const { error } = await supabase.auth.signInWithOtp({
+                        email,
+                        options: { emailRedirectTo: redirectTo },
+                    });
+                    if (error) {
+                        logger.error({ error: error.message, email }, 'Magic link send failed');
+                        RFC7807ErrorResponse.internalError(res, 'Failed to send magic link');
+                        return;
+                    }
+                }
+                logger.info({ email }, 'Magic link sent');
+                res.json({
+                    success: true,
+                    data: { message: 'Check your email for the login link.' },
+                });
+            }
+            catch (err) {
+                logger.error({ err }, 'Magic link error');
+                RFC7807ErrorResponse.internalError(res, 'Internal server error');
+            }
+        });
+    }
     // ── Invite Routes (optional) ──────────────────────────────
     if (config.enableInvites) {
         const invCfg = config.inviteConfig || {};