@starklabs/forge 1.3.25-builtin-configs.0 → 2.0.0

package/dist/core/Pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Pagination.js","sourceRoot":"","sources":["../../src/core/Pagination.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAUhE,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAC1D,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,mFAAmF;AACnF,MAAM,OAAO,UAAU;IACQ,MAAM;IAAnC,YAA6B,MAAmB;sBAAnB,MAAM;IAAgB,CAAC;IAEpD,KAAK,CAAC,GAAY,EAAE,QAA2B;QAC7C,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;QACzF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,IAAI,CAAC,OAAoB,EAAE,KAAa;QACtC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACnH,CAAC;IAEO,WAAW,CAAC,GAAY,EAAE,IAAY,EAAE,QAAgB;QAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,QAAQ,CAAC;QACrD,uFAAuF;QACvF,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,+BAA+B,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,GAAY,EAAE,QAA2B;QACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;QAE/H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,eAAe,CAAC;oBACxB,OAAO,EAAE,mBAAmB,KAAK,IAAI;oBACrC,IAAI,EAAE,SAAS,CAAC,aAAa;oBAC7B,IAAI,EAAE,oBAAoB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBACrD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/ResponseSanitizer.d.ts

@@ -0,0 +1,18 @@
+import type { Doc } from "../data/Repository.js";
+export interface SanitizeOptions {
+    /** `Route.config.hiddenFields`. */
+    hiddenFields?: readonly string[] | undefined;
+    /** Encrypted fields that were decrypted for this response (their plain value is set by the caller). */
+    decrypted?: readonly string[] | undefined;
+}
+/** Removes everything a client must not see from documents. Never mutates its input. */
+export declare class ResponseSanitizer {
+    private readonly secrets;
+    constructor(extraSecrets?: readonly string[]);
+    /** Register fields that must never be returned (e.g. `select: false` fields, hashed fields). */
+    addSecrets(fields: readonly string[]): void;
+    one(doc: Doc, options?: SanitizeOptions): Record<string, unknown>;
+    many(docs: readonly Doc[], options?: SanitizeOptions): Record<string, unknown>[];
+    private strip;
+}
+//# sourceMappingURL=ResponseSanitizer.d.ts.map

package/dist/core/ResponseSanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseSanitizer.d.ts","sourceRoot":"","sources":["../../src/core/ResponseSanitizer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AASjD,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7C,uGAAuG;IACvG,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC3C;AAED,wFAAwF;AACxF,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC,YAAY,YAAY,GAAE,SAAS,MAAM,EAAO,EAE/C;IAED,gGAAgG;IAChG,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAE1C;IAED,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBpE;IAED,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAEnF;IAED,OAAO,CAAC,KAAK;CAiBd"}

package/dist/core/ResponseSanitizer.js

@@ -0,0 +1,65 @@
+import { isSealedValue } from "../security/CryptoVault.js";
+/** Fields that can never reach a client, whatever `hiddenFields` says. */
+const ALWAYS_SECRET = ["password", "tokenHash", "codeHash", "resetTokenHash"];
+/** Anything that looks like one of Forge's password hashes is dropped wherever it appears. */
+const HASH_PREFIX = "$argon2";
+/** Hidden unless a route opts back in with `"!field"`. */
+const HIDDEN_BY_DEFAULT = ["__v"];
+/** Removes everything a client must not see from documents. Never mutates its input. */
+export class ResponseSanitizer {
+    secrets;
+    constructor(extraSecrets = []) {
+        this.secrets = new Set([...ALWAYS_SECRET, ...extraSecrets]);
+    }
+    /** Register fields that must never be returned (e.g. `select: false` fields, hashed fields). */
+    addSecrets(fields) {
+        for (const field of fields)
+            this.secrets.add(field);
+    }
+    one(doc, options = {}) {
+        const hidden = new Set();
+        const optedIn = new Set();
+        for (const entry of options.hiddenFields ?? []) {
+            if (entry.startsWith("!"))
+                optedIn.add(entry.slice(1));
+            else
+                hidden.add(entry);
+        }
+        for (const field of HIDDEN_BY_DEFAULT)
+            if (!optedIn.has(field))
+                hidden.add(field);
+        const result = this.strip(doc, 0);
+        for (const key of Object.keys(result)) {
+            if (hidden.has(key) || (isSealedValue(result[key]) && !options.decrypted?.includes(key))) {
+                delete result[key];
+            }
+        }
+        return result;
+    }
+    many(docs, options = {}) {
+        return docs.map((doc) => this.one(doc, options));
+    }
+    strip(value, depth) {
+        if (depth > 8)
+            return value;
+        // Encrypted values inside nested objects (for example a populated document) are never decrypted, so they are dropped.
+        // The fields of the document itself (depth 0) are handled by `one`, which knows which ones were decrypted.
+        if (Array.isArray(value))
+            return value.filter((v) => !isSealedValue(v)).map((v) => this.strip(v, depth + 1));
+        if (value && typeof value === "object" && !(value instanceof Date) && !Buffer.isBuffer(value)) {
+            const out = {};
+            for (const [key, v] of Object.entries(value)) {
+                if (this.secrets.has(key))
+                    continue;
+                if (typeof v === "string" && v.startsWith(HASH_PREFIX))
+                    continue;
+                if (depth > 0 && isSealedValue(v))
+                    continue;
+                out[key] = this.strip(v, depth + 1);
+            }
+            return out;
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=ResponseSanitizer.js.map

package/dist/core/ResponseSanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseSanitizer.js","sourceRoot":"","sources":["../../src/core/ResponseSanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,0EAA0E;AAC1E,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,CAAU,CAAC;AACvF,8FAA8F;AAC9F,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAU,CAAC;AAS3C,wFAAwF;AACxF,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAc;IAEtC,YAAY,YAAY,GAAsB,EAAE;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,gGAAgG;IAChG,UAAU,CAAC,MAAyB;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,GAAG,CAAC,GAAQ,EAAE,OAAO,GAAoB,EAAE;QACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;;gBAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,iBAAiB;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAA4B,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,IAAoB,EAAE,OAAO,GAAoB,EAAE;QACtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,KAAc,EAAE,KAAa;QACzC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,sHAAsH;QACtH,2GAA2G;QAC3G,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7G,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9F,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACxE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACjE,IAAI,KAAK,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/core/RouteContext.d.ts

@@ -0,0 +1,30 @@
+import type { Request } from "express";
+import { type ZodObject, type ZodType } from "zod";
+import type { Repository } from "../data/Repository.js";
+import type { ActionContext, ActionOperation } from "../types/ActionHandler.js";
+import type { Collection } from "../types/Collection.js";
+import type { Route } from "../types/Route.js";
+import type { Services } from "./Services.js";
+/** Everything a handler needs to know about the route it serves. Built once at registration. */
+export declare class RouteContext {
+    readonly services: Services;
+    readonly collection: Collection;
+    /** The route with defaults applied (the developer's object is never mutated). */
+    readonly route: Route;
+    readonly validator: ZodObject<Record<string, ZodType>> | undefined;
+    readonly repository: Repository | undefined;
+    constructor(services: Services, collection: Collection, 
+    /** The route with defaults applied (the developer's object is never mutated). */
+    route: Route, validator: ZodObject<Record<string, ZodType>> | undefined, repository: Repository | undefined);
+    get modelName(): string;
+    get label(): string;
+    /** Validated, stripped request body. With no validation configured the route accepts no body fields. */
+    parseBody(body: unknown): Record<string, unknown>;
+    /**
+     * Validates every element of an array body against the route's validation. All problems are collected, each with
+     * the position of its item at the start of the path (for example `1.name`), so a client can tell which items to fix.
+     */
+    parseEach(body: unknown): Record<string, unknown>[];
+    actionContext(req: Request, operation: ActionOperation, data?: ActionContext["data"]): ActionContext;
+}
+//# sourceMappingURL=RouteContext.d.ts.map

package/dist/core/RouteContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteContext.d.ts","sourceRoot":"","sources":["../../src/core/RouteContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAA2B,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,gGAAgG;AAChG,qBAAa,YAAY;IAErB,QAAQ,CAAC,QAAQ,EAAE,QAAQ;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,KAAK;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS;IAClE,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS;IAN7C,YACW,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU;IAC/B,iFAAiF;IACxE,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,EACzD,UAAU,EAAE,UAAU,GAAG,SAAS,EACzC;IAEJ,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,wGAAwG;IACxG,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGhD;IAED;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAclD;IAED,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,GAAE,aAAa,CAAC,MAAM,CAAM,GAAG,aAAa,CAYvG;CACF"}

package/dist/core/RouteContext.js

@@ -0,0 +1,66 @@
+import { ZodError } from "zod";
+/** Everything a handler needs to know about the route it serves. Built once at registration. */
+export class RouteContext {
+    services;
+    collection;
+    route;
+    validator;
+    repository;
+    constructor(services, collection, 
+    /** The route with defaults applied (the developer's object is never mutated). */
+    route, validator, repository) {
+        this.services = services;
+        this.collection = collection;
+        this.route = route;
+        this.validator = validator;
+        this.repository = repository;
+    }
+    get modelName() {
+        return this.collection.model ?? this.collection.route;
+    }
+    get label() {
+        return `${this.route.method.toUpperCase()} ${this.services.config.apiPrefix}/${this.collection.route}${this.route.path}`;
+    }
+    /** Validated, stripped request body. With no validation configured the route accepts no body fields. */
+    parseBody(body) {
+        if (!this.validator)
+            return {};
+        return this.validator.parse(body ?? {});
+    }
+    /**
+     * Validates every element of an array body against the route's validation. All problems are collected, each with
+     * the position of its item at the start of the path (for example `1.name`), so a client can tell which items to fix.
+     */
+    parseEach(body) {
+        const items = Array.isArray(body) ? body : [];
+        const issues = [];
+        const parsed = items.map((item, index) => {
+            try {
+                return this.parseBody(item);
+            }
+            catch (error) {
+                if (!(error instanceof ZodError))
+                    throw error;
+                issues.push(...error.issues.map((issue) => ({ ...issue, path: [index, ...issue.path] })));
+                return {};
+            }
+        });
+        if (issues.length > 0)
+            throw new ZodError(issues);
+        return parsed;
+    }
+    actionContext(req, operation, data = {}) {
+        return {
+            req,
+            ...(req.user ? { user: req.user } : {}),
+            route: this.collection.route,
+            operation,
+            model: this.modelName,
+            repository: this.repository,
+            repositoryOf: (model) => this.services.data.repository(model),
+            Model: this.services.data.nativeModel?.(this.modelName),
+            data,
+        };
+    }
+}
+//# sourceMappingURL=RouteContext.js.map

package/dist/core/RouteContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteContext.js","sourceRoot":"","sources":["../../src/core/RouteContext.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA+C,MAAM,KAAK,CAAC;AAO5E,gGAAgG;AAChG,MAAM,OAAO,YAAY;IAEZ,QAAQ;IACR,UAAU;IAEV,KAAK;IACL,SAAS;IACT,UAAU;IANrB,YACW,QAAkB,EAClB,UAAsB;IAC/B,iFAAiF;IACxE,KAAY,EACZ,SAAyD,EACzD,UAAkC;wBALlC,QAAQ;0BACR,UAAU;qBAEV,KAAK;yBACL,SAAS;0BACT,UAAU;IAClB,CAAC;IAEJ,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;IACxD,CAAC;IAED,IAAI,KAAK;QACP,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3H,CAAC;IAED,wGAAwG;IACxG,SAAS,CAAC,IAAa;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAa;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACvC,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAa,CAAC,CAAC,CAAC;gBACtG,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CAAC,GAAY,EAAE,SAA0B,EAAE,IAAI,GAA0B,EAAE;QACtF,OAAO;YACL,GAAG;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS,CAA2B;YACjF,IAAI;SACL,CAAC;IACJ,CAAC;CACF"}

package/dist/core/ServiceFactory.d.ts

@@ -0,0 +1,20 @@
+import type { Services } from "./Services.js";
+import type { ForgeConfig } from "../config/ForgeConfig.js";
+import type { DataSource } from "../data/Repository.js";
+import type { EmailProvider } from "../email/EmailProvider.js";
+import type { StorageProvider } from "../upload/StorageProvider.js";
+import { Logger } from "../utils/Logger.js";
+/** Replace any collaborator - mostly useful in tests (fake database, fake mailer, fake storage). */
+export interface ForgeDependencies {
+    logger?: Logger;
+    dataSource?: DataSource;
+    emailProvider?: EmailProvider;
+    storageProviders?: StorageProvider[];
+    /** `fetch` used by the built-in OAuth providers (tests, proxies). */
+    fetch?: typeof fetch;
+}
+/** Builds the object graph once, from the validated configuration. */
+export declare class ServiceFactory {
+    create(config: ForgeConfig, deps?: ForgeDependencies): Services;
+}
+//# sourceMappingURL=ServiceFactory.d.ts.map

package/dist/core/ServiceFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceFactory.d.ts","sourceRoot":"","sources":["../../src/core/ServiceFactory.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAK9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAU/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAe,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEzD,oGAAoG;AACpG,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,sEAAsE;AACtE,qBAAa,cAAc;IACzB,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,QAAQ,CAkElE;CACF"}

package/dist/core/ServiceFactory.js

@@ -0,0 +1,81 @@
+import { AccessPolicy } from "./AccessPolicy.js";
+import { ActionRunner } from "./ActionRunner.js";
+import { FieldTransformer } from "./FieldTransformer.js";
+import { Pagination } from "./Pagination.js";
+import { ResponseSanitizer } from "./ResponseSanitizer.js";
+import { CookieWriter } from "../auth/CookieWriter.js";
+import { SessionResponder } from "../auth/SessionResponder.js";
+import { OAuthProviderFactory } from "../oauth/OAuthProviderFactory.js";
+import { SessionService } from "../auth/SessionService.js";
+import { MongooseDataSource } from "../data/MongooseDataSource.js";
+import { SchemaCompiler } from "../data/SchemaCompiler.js";
+import { ConsoleProvider } from "../email/ConsoleProvider.js";
+import { EmailService } from "../email/EmailService.js";
+import { ResendProvider } from "../email/ResendProvider.js";
+import { Authenticator } from "../http/Authenticator.js";
+import { RateLimiters } from "../http/middleware/RateLimiters.js";
+import { ResponseWriter } from "../http/ResponseWriter.js";
+import { CryptoVault } from "../security/CryptoVault.js";
+import { PasswordHasher } from "../security/PasswordHasher.js";
+import { TokenService } from "../security/TokenService.js";
+import { CloudinaryStorage } from "../upload/CloudinaryStorage.js";
+import { UploadService } from "../upload/UploadService.js";
+import { ConsoleSink, Logger } from "../utils/Logger.js";
+/** Builds the object graph once, from the validated configuration. */
+export class ServiceFactory {
+    create(config, deps = {}) {
+        const logger = deps.logger ?? new Logger(config.isTest ? "silent" : config.isProduction ? "info" : "debug", new ConsoleSink());
+        const userModel = config.auth.mode === "builtin"
+            ? config.auth.mongooseConfig?.model
+            : config.collections.find((c) => c.type === "auth")?.model;
+        const data = deps.dataSource ??
+            new MongooseDataSource({
+                uri: config.isOffline ? (config.mongoDBURI ?? "mongodb://127.0.0.1:27017") : config.mongoDBURI,
+                databaseName: config.databaseName,
+                logger,
+            });
+        const compiler = new SchemaCompiler();
+        const tokens = new TokenService(config.jwtSecret);
+        const hasher = new PasswordHasher();
+        const vault = new CryptoVault(config.masterKey);
+        const responses = new ResponseWriter();
+        const provider = deps.emailProvider ??
+            (config.resendAPIKey && !config.isOffline ? new ResendProvider(config.resendAPIKey) : new ConsoleProvider(logger));
+        const emails = new EmailService(config, provider);
+        const storage = deps.storageProviders ?? [];
+        const { apiKey, apiSecret, cloudName, folder } = config.cloudinary;
+        if (!deps.storageProviders && apiKey && apiSecret && cloudName) {
+            storage.push(new CloudinaryStorage({ apiKey, apiSecret, cloudName, folder }));
+        }
+        const uploads = new UploadService(config, logger, storage);
+        const authenticator = new Authenticator(config, tokens, data);
+        const sanitizer = new ResponseSanitizer();
+        const cookies = new CookieWriter(config);
+        const oauth = new OAuthProviderFactory().createRegistry(config.auth.oauth?.providers ?? [], deps.fetch ? { fetch: deps.fetch } : {});
+        return {
+            config,
+            logger,
+            data,
+            compiler,
+            tokens,
+            hasher,
+            vault,
+            emails,
+            uploads,
+            authenticator,
+            responses,
+            access: new AccessPolicy(config, authenticator),
+            sanitizer,
+            transformer: new FieldTransformer(vault, hasher),
+            actions: new ActionRunner(emails, logger),
+            pagination: new Pagination(config),
+            limiters: new RateLimiters(config),
+            sessions: new SessionService(config, tokens, data, logger),
+            cookies,
+            sessionResponder: new SessionResponder(config, cookies, sanitizer, responses),
+            oauth,
+            userModel,
+        };
+    }
+}
+//# sourceMappingURL=ServiceFactory.js.map

package/dist/core/ServiceFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceFactory.js","sourceRoot":"","sources":["../../src/core/ServiceFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAYzD,sEAAsE;AACtE,MAAM,OAAO,cAAc;IACzB,MAAM,CAAC,MAAmB,EAAE,IAAI,GAAsB,EAAE;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;QAE/H,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK;YACnC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;QAE/D,MAAM,IAAI,GACR,IAAI,CAAC,UAAU;YACf,IAAI,kBAAkB,CAAC;gBACrB,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,2BAA2B,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB;gBAC1G,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM;aACP,CAAC,CAAC;QAEL,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;QAEvC,MAAM,QAAQ,GACZ,IAAI,CAAC,aAAa;YAClB,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACrH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAElD,MAAM,OAAO,GAAsB,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,MAAM,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC,cAAc,CACrD,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAClC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CACxC,CAAC;QAEF,OAAO;YACL,MAAM;YACN,MAAM;YACN,IAAI;YACJ,QAAQ;YACR,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,aAAa;YACb,SAAS;YACT,MAAM,EAAE,IAAI,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC;YAC/C,SAAS;YACT,WAAW,EAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC;YAChD,OAAO,EAAE,IAAI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;YACzC,UAAU,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC;YAClC,QAAQ,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC;YAClC,QAAQ,EAAE,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;YAC1D,OAAO;YACP,gBAAgB,EAAE,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;YAC7E,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/core/Services.d.ts

@@ -0,0 +1,52 @@
+import type { ForgeConfig } from "../config/ForgeConfig.js";
+import type { DataSource } from "../data/Repository.js";
+import type { SchemaCompiler } from "../data/SchemaCompiler.js";
+import type { EmailService } from "../email/EmailService.js";
+import type { Authenticator } from "../http/Authenticator.js";
+import type { RateLimiters } from "../http/middleware/RateLimiters.js";
+import type { ResponseWriter } from "../http/ResponseWriter.js";
+import type { CryptoVault } from "../security/CryptoVault.js";
+import type { PasswordHasher } from "../security/PasswordHasher.js";
+import type { TokenService } from "../security/TokenService.js";
+import type { UploadService } from "../upload/UploadService.js";
+import type { CookieWriter } from "../auth/CookieWriter.js";
+import type { SessionResponder } from "../auth/SessionResponder.js";
+import type { OAuthProviderRegistry } from "../oauth/OAuthProviderRegistry.js";
+import type { SessionService } from "../auth/SessionService.js";
+import type { Logger } from "../utils/Logger.js";
+import type { AccessPolicy } from "./AccessPolicy.js";
+import type { ActionRunner } from "./ActionRunner.js";
+import type { FieldTransformer } from "./FieldTransformer.js";
+import type { Pagination } from "./Pagination.js";
+import type { ResponseSanitizer } from "./ResponseSanitizer.js";
+/**
+ * Every collaborator the feature modules need, built once per Forge instance.
+ * Passed explicitly (constructor injection) - there are no module-level singletons.
+ */
+export interface Services {
+    config: ForgeConfig;
+    logger: Logger;
+    data: DataSource;
+    compiler: SchemaCompiler;
+    tokens: TokenService;
+    hasher: PasswordHasher;
+    vault: CryptoVault;
+    emails: EmailService;
+    uploads: UploadService;
+    authenticator: Authenticator;
+    responses: ResponseWriter;
+    access: AccessPolicy;
+    sanitizer: ResponseSanitizer;
+    transformer: FieldTransformer;
+    actions: ActionRunner;
+    pagination: Pagination;
+    limiters: RateLimiters;
+    sessions: SessionService;
+    cookies: CookieWriter;
+    sessionResponder: SessionResponder;
+    /** Enabled "Sign in with ..." providers. Register more with `services.oauth.register(...)` before `build()`. */
+    oauth: OAuthProviderRegistry;
+    /** Name of the user model, when authentication is enabled. */
+    userModel: string | undefined;
+}
+//# sourceMappingURL=Services.d.ts.map

package/dist/core/Services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Services.d.ts","sourceRoot":"","sources":["../../src/core/Services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,YAAY,CAAC;IACtB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,gHAAgH;IAChH,KAAK,EAAE,qBAAqB,CAAC;IAC7B,8DAA8D;IAC9D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B"}

package/dist/core/Services.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Services.js.map

package/dist/core/Services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Services.js","sourceRoot":"","sources":["../../src/core/Services.ts"],"names":[],"mappings":""}

package/dist/core/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./Forge.js";
+export * from "./ServiceFactory.js";
+export * from "./FeatureModule.js";
+export * from "./RouteContext.js";
+export * from "./Services.js";
+export * from "./BuiltinCollections.js";
+export * from "./AccessPolicy.js";
+export * from "./ActionRunner.js";
+export * from "./FieldTransformer.js";
+export * from "./Pagination.js";
+export * from "./ResponseSanitizer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,12 @@
+export * from "./Forge.js";
+export * from "./ServiceFactory.js";
+export * from "./FeatureModule.js";
+export * from "./RouteContext.js";
+export * from "./Services.js";
+export * from "./BuiltinCollections.js";
+export * from "./AccessPolicy.js";
+export * from "./ActionRunner.js";
+export * from "./FieldTransformer.js";
+export * from "./Pagination.js";
+export * from "./ResponseSanitizer.js";
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC"}

package/dist/crud/CrudController.d.ts

@@ -0,0 +1,37 @@
+import type { Request, Response } from "express";
+import type { RouteContext } from "../core/RouteContext.js";
+import type { Services } from "../core/Services.js";
+import type { Collection } from "../types/Collection.js";
+import type { Route } from "../types/Route.js";
+/** The eight database handlers: read, readAll, create, createBulk, update, remove, removeMultiple, removeAll. */
+export declare class CrudController {
+    private readonly services;
+    private readonly support;
+    constructor(services: Services);
+    read: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    readAll: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    create: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    createBulk: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    update: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    remove: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    removeMultiple: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    removeAll: (req: Request, res: Response, ctx: RouteContext) => Promise<void>;
+    /** Startup check: `removeAll` on an open route would let anyone empty the collection. */
+    assertSafeRoute(route: RouteContext["route"]): string[];
+    /**
+     * Startup check for `config.populate` and `config.populateSelect`. A name that is not a reference would only fail on
+     * the first request, as a generic 500 from Mongoose, and a `populateSelect` that lists what to leave out (or nothing)
+     * would return every field of the referenced documents, including fields added to their schema later.
+     */
+    assertPopulate(collection: Collection, route: Route): string[];
+    private withOwner;
+    /**
+     * The documents a batch delete is about to remove, loaded only when the collection stores files that must be
+     * removed with them. Without file fields nothing needs the documents, so `removeAll` no longer reads a whole
+     * collection into memory just to delete it.
+     */
+    private documentsWithFiles;
+    private discardStored;
+    private isReplaced;
+}
+//# sourceMappingURL=CrudController.d.ts.map

package/dist/crud/CrudController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CrudController.d.ts","sourceRoot":"","sources":["../../src/crud/CrudController.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAO/C,iHAAiH;AACjH,qBAAa,cAAc;IAGb,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC,YAA6B,QAAQ,EAAE,QAAQ,EAE9C;IAED,IAAI,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAW1E;IAEF,OAAO,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAsB7E;IAEF,MAAM,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAsB5E;IAEF,UAAU,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CA2BhF;IAEF,MAAM,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CA+B5E;IAEF,MAAM,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAe5E;IAEF,cAAc,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAuBpF;IAEF,SAAS,QAAe,OAAO,OAAO,QAAQ,OAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAc/E;IAEF,yFAAyF;IACzF,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAKtD;IAED;;;;OAIG;IACH,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,CAiC7D;IAED,OAAO,CAAC,SAAS;IAOjB;;;;OAIG;YACW,kBAAkB;YAIlB,aAAa;IAO3B,OAAO,CAAC,UAAU;CAMnB"}