@trokky/trokky 2.0.3

package/dist/core/services/trusted-device-service.js

@@ -0,0 +1,123 @@
+import { InvalidInputError } from '../errors/index.js';
+/**
+ * Trusted device management for MFA bypass.
+ */
+export class TrustedDeviceService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Trust a device to skip MFA
+     */
+    async trustDevice(userId, deviceId, deviceName, options) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Get trust duration from settings
+        const settings = await this.deps.getSettings();
+        const trustDays = settings?.mfaTrustDeviceDays ?? 30;
+        const trustedDevice = {
+            id: deviceId,
+            name: deviceName,
+            trustedAt: new Date().toISOString(),
+            expiresAt: new Date(Date.now() + trustDays * 24 * 60 * 60 * 1000).toISOString(),
+            lastUsedAt: new Date().toISOString(),
+            ipAddress: options?.ipAddress,
+            userAgent: options?.userAgent
+        };
+        const currentDevices = user.mfa?.trustedDevices || [];
+        // Remove existing device with same ID if present
+        const otherDevices = currentDevices.filter(d => d.id !== deviceId);
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                trustedDevices: [...otherDevices, trustedDevice]
+            }
+        });
+        this.deps.logger.info('Device trusted', { userId, deviceId, deviceName });
+        return trustedDevice;
+    }
+    /**
+     * Check if a device is trusted for MFA bypass
+     */
+    async isDeviceTrusted(userId, deviceId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            return false;
+        }
+        const device = user.mfa?.trustedDevices?.find(d => d.id === deviceId);
+        if (!device) {
+            return false;
+        }
+        // Check if trust has expired
+        if (new Date(device.expiresAt) < new Date()) {
+            // Clean up expired device
+            const updatedDevices = (user.mfa?.trustedDevices || []).filter(d => d.id !== deviceId);
+            await this.deps.updateUser(userId, {
+                mfa: {
+                    ...user.mfa,
+                    trustedDevices: updatedDevices
+                }
+            });
+            return false;
+        }
+        // Update last used time
+        const updatedDevices = (user.mfa?.trustedDevices || []).map(d => d.id === deviceId ? { ...d, lastUsedAt: new Date().toISOString() } : d);
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                trustedDevices: updatedDevices
+            }
+        });
+        return true;
+    }
+    /**
+     * Revoke trust for a specific device
+     */
+    async revokeTrustedDevice(userId, deviceId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        const updatedDevices = (user.mfa?.trustedDevices || []).filter(d => d.id !== deviceId);
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                trustedDevices: updatedDevices
+            }
+        });
+        this.deps.logger.info('Device trust revoked', { userId, deviceId });
+    }
+    /**
+     * Revoke trust for all devices
+     */
+    async revokeAllTrustedDevices(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                trustedDevices: []
+            }
+        });
+        this.deps.logger.info('All device trust revoked', { userId });
+    }
+    /**
+     * Get list of trusted devices for a user
+     */
+    async getTrustedDevices(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Filter out expired devices
+        const now = new Date();
+        const validDevices = (user.mfa?.trustedDevices || []).filter(d => new Date(d.expiresAt) > now);
+        return validDevices;
+    }
+}
+//# sourceMappingURL=trusted-device-service.js.map

package/dist/core/services/trusted-device-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-device-service.js","sourceRoot":"","sources":["../../../src/core/services/trusted-device-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAWtD;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,IAAsC;QAAtC,SAAI,GAAJ,IAAI,CAAkC;IAAG,CAAC;IAEvE;;OAEG;IACI,KAAK,CAAC,WAAW,CACtB,MAAc,EACd,QAAgB,EAChB,UAAkB,EAClB,OAAoD;QAEpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9C,MAAM,SAAS,GAAG,QAAQ,EAAE,kBAAkB,IAAI,EAAE,CAAA;QAEpD,MAAM,aAAa,GAAkB;YACnC,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC/E,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,SAAS,EAAE,OAAO,EAAE,SAAS;SAC9B,CAAA;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAA;QACrD,iDAAiD;QACjD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;QAElE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAI;gBACZ,cAAc,EAAE,CAAC,GAAG,YAAY,EAAE,aAAa,CAAC;aACjD;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;QAEzE,OAAO,aAAa,CAAA;IACtB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,QAAgB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAA;QACd,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5C,0BAA0B;YAC1B,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;YACtF,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;gBACjC,GAAG,EAAE;oBACH,GAAG,IAAI,CAAC,GAAI;oBACZ,cAAc,EAAE,cAAc;iBAC/B;aACgB,CAAC,CAAA;YACpB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,wBAAwB;QACxB,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC9D,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CACvE,CAAA;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAI;gBACZ,cAAc,EAAE,cAAc;aAC/B;SACgB,CAAC,CAAA;QAEpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,QAAgB;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;QAEtF,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAI;gBACZ,cAAc,EAAE,cAAc;aAC/B;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACrE,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,uBAAuB,CAAC,MAAc;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAI;gBACZ,cAAc,EAAE,EAAE;aACnB;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,6BAA6B;QAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CACjC,CAAA;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;CACF"}

package/dist/core/services/user-service.d.ts

@@ -0,0 +1,38 @@
+import { RateLimiter } from '../security/rate-limiter.js';
+import { IdGenerator } from '../utils/id-generator.js';
+import type { TrokkyLogger } from '../utils/logger.js';
+import { TrokkyEventBus } from '../events/index.js';
+import type { AuditEvent } from '../core/engine.js';
+import { DataStorageAdapter, User, CreateUserData, UpdateUserData, UserListOptions, Permission } from '../types/index.js';
+export interface UserServiceDependencies {
+    logger: TrokkyLogger;
+    dataStorage: DataStorageAdapter;
+    idGenerator: IdGenerator;
+    rateLimiter?: RateLimiter;
+    securityEnabled: boolean;
+    eventBus: TrokkyEventBus;
+    hashPassword: (password: string) => Promise<string>;
+    checkWeakPassword: (password: string) => {
+        isWeak: boolean;
+        reason?: string;
+    };
+    logAuditEvent: (event: AuditEvent) => void;
+    getUserCreatedWithPasswordCallback: () => ((user: User, temporaryPassword: string) => Promise<void>) | undefined;
+}
+/**
+ * User management operations (system entities) and env-based admin bootstrap.
+ */
+export declare class UserService {
+    private readonly deps;
+    constructor(deps: UserServiceDependencies);
+    createUser(userData: CreateUserData): Promise<User>;
+    getUser(id: string): Promise<User | null>;
+    getUserByUsername(username: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    updateUser(id: string, userData: UpdateUserData): Promise<User>;
+    listUsers(options?: UserListOptions): Promise<User[]>;
+    deleteUser(id: string): Promise<void>;
+    getDefaultPermissions(role: string): Permission[];
+    setupAdminFromEnv(): Promise<User | null>;
+}
+//# sourceMappingURL=user-service.d.ts.map

package/dist/core/services/user-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-service.d.ts","sourceRoot":"","sources":["../../../src/core/services/user-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,cAAc,EACd,eAAe,EACf,UAAU,EACX,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,YAAY,CAAA;IACpB,WAAW,EAAE,kBAAkB,CAAA;IAC/B,WAAW,EAAE,WAAW,CAAA;IACxB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,QAAQ,EAAE,cAAc,CAAA;IACxB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACnD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7E,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IAC1C,kCAAkC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAA;CACjH;AAED;;GAEG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,uBAAuB;IAG7C,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAoFnD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAazC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAazD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAanD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA2C/D,SAAS,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IASrD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiC3C,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE;IAc3C,iBAAiB,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;CAsEvD"}

package/dist/core/services/user-service.js

@@ -0,0 +1,265 @@
+import { SecurityValidator } from '../security/validation.js';
+import { DocumentNotFoundError } from '../errors/index.js';
+/**
+ * User management operations (system entities) and env-based admin bootstrap.
+ */
+export class UserService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    // User management operations (system entities)
+    async createUser(userData) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('createUser');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateEmail(userData.email);
+            SecurityValidator.validateUsername(userData.username);
+        }
+        // User operations are handled by data storage adapter
+        // Check if user already exists (use generic error message to prevent enumeration)
+        const existingUserByEmail = await this.getUserByEmail(userData.email);
+        if (existingUserByEmail) {
+            throw new Error('User registration failed. Please check your details.');
+        }
+        const existingUserByUsername = await this.getUserByUsername(userData.username);
+        if (existingUserByUsername) {
+            throw new Error('User registration failed. Please check your details.');
+        }
+        // Hash password before saving
+        const passwordHash = await this.deps.hashPassword(userData.password);
+        const userId = this.deps.idGenerator.generate({ prefix: 'user' });
+        const now = new Date().toISOString();
+        const userToSave = {
+            username: userData.username,
+            email: userData.email,
+            passwordHash,
+            firstName: userData.firstName,
+            lastName: userData.lastName,
+            role: userData.role,
+            permissions: userData.permissions || this.getDefaultPermissions(userData.role),
+            isActive: userData.isActive ?? true,
+            profileImage: userData.profileImage,
+            preferences: userData.preferences || {},
+            createdAt: now,
+            updatedAt: now
+        };
+        const createdUser = await this.deps.dataStorage.saveUser(userId, userToSave);
+        // Log audit event
+        this.deps.logAuditEvent({
+            type: 'user_created',
+            targetUserId: userId,
+            username: userData.username,
+            action: `User created with role: ${userData.role}`,
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: {
+                email: userData.email,
+                role: userData.role,
+                permissions: userData.permissions || this.getDefaultPermissions(userData.role)
+            }
+        });
+        // Emit user.created event (WITHOUT password for security)
+        await this.deps.eventBus.emitEvent({
+            type: 'user.created',
+            source: 'api',
+            data: {
+                user: createdUser,
+                userId: createdUser.id,
+            },
+        });
+        // Securely send password via callback (not logged in events)
+        const userCreatedWithPasswordCallback = this.deps.getUserCreatedWithPasswordCallback();
+        if (userCreatedWithPasswordCallback) {
+            try {
+                await userCreatedWithPasswordCallback(createdUser, userData.password);
+            }
+            catch (error) {
+                this.deps.logger.warn('User created callback failed (non-blocking)', error);
+            }
+        }
+        return createdUser;
+    }
+    async getUser(id) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('getUser');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        // User operations are handled by data storage adapter
+        return await this.deps.dataStorage.getUser(id);
+    }
+    async getUserByUsername(username) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('getUserByUsername');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateUsername(username);
+        }
+        // User operations are handled by data storage adapter
+        return await this.deps.dataStorage.getUserByUsername(username);
+    }
+    async getUserByEmail(email) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('getUserByEmail');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateEmail(email);
+        }
+        // User operations are handled by data storage adapter
+        return await this.deps.dataStorage.getUserByEmail(email);
+    }
+    async updateUser(id, userData) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('updateUser');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+            if (userData.email)
+                SecurityValidator.validateEmail(userData.email);
+            if (userData.username)
+                SecurityValidator.validateUsername(userData.username);
+        }
+        // User operations are handled by data storage adapter
+        const existingUser = await this.getUser(id);
+        if (!existingUser) {
+            throw new DocumentNotFoundError('users', id);
+        }
+        const updatedUserData = {
+            ...userData,
+            updatedAt: new Date().toISOString()
+        };
+        const updatedUser = await this.deps.dataStorage.saveUser(id, updatedUserData);
+        // Log audit event
+        this.deps.logAuditEvent({
+            type: 'user_updated',
+            targetUserId: id,
+            username: existingUser.username,
+            action: `User updated`,
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: {
+                updatedFields: Object.keys(userData),
+                previousRole: existingUser.role,
+                newRole: userData.role || existingUser.role
+            }
+        });
+        return updatedUser;
+    }
+    async listUsers(options) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('listUsers');
+        }
+        // User operations are handled by data storage adapter
+        return await this.deps.dataStorage.listUsers(options);
+    }
+    async deleteUser(id) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('deleteUser');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        // User operations are handled by data storage adapter
+        const existingUser = await this.getUser(id);
+        if (!existingUser) {
+            throw new DocumentNotFoundError('users', id);
+        }
+        await this.deps.dataStorage.deleteUser(id);
+        // Log audit event
+        this.deps.logAuditEvent({
+            type: 'user_deleted',
+            targetUserId: id,
+            username: existingUser.username,
+            action: `User deleted`,
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: {
+                email: existingUser.email,
+                role: existingUser.role
+            }
+        });
+    }
+    getDefaultPermissions(role) {
+        switch (role) {
+            case 'admin':
+                return ['content:read', 'content:write', 'content:delete', 'users:read', 'users:write', 'settings:read', 'settings:write', 'media:upload', 'media:delete', 'studio:access'];
+            case 'editor':
+                return ['content:read', 'content:write', 'media:upload', 'studio:access'];
+            case 'viewer':
+                return ['content:read', 'studio:access'];
+            default:
+                return ['content:read', 'studio:access'];
+        }
+    }
+    // Development utility: Setup admin user from environment variables
+    async setupAdminFromEnv() {
+        const adminEmail = (typeof process !== 'undefined' ? process.env?.TROKKY_ADMIN_EMAIL : undefined);
+        const adminPassword = (typeof process !== 'undefined' ? process.env?.TROKKY_ADMIN_PASSWORD : undefined);
+        // Only proceed if environment variables are set
+        if (!adminEmail || !adminPassword) {
+            return null;
+        }
+        // Check if any users exist
+        try {
+            const existingUsers = await this.listUsers({ limit: 1 });
+            if (existingUsers.length > 0) {
+                // Users already exist, don't create admin
+                return null;
+            }
+        }
+        catch (error) {
+            // If user operations aren't supported, skip
+            if (error instanceof Error && error.message.includes('not supported by storage adapter')) {
+                return null;
+            }
+            throw error;
+        }
+        // Create admin user from environment variables
+        const adminUser = await this.createUser({
+            username: 'admin',
+            email: adminEmail,
+            password: adminPassword,
+            firstName: 'Admin',
+            lastName: 'User',
+            role: 'admin',
+            permissions: ['content:read', 'content:write', 'content:delete', 'users:read', 'users:write', 'settings:read', 'settings:write', 'media:upload', 'media:delete', 'studio:access'],
+            isActive: true,
+            preferences: {
+                theme: 'dark',
+                language: 'en'
+            }
+        });
+        // Log admin creation with security warning
+        const envName = (typeof process !== 'undefined' ? process.env?.NODE_ENV : undefined);
+        if (envName !== 'test') {
+            console.log('🔧 Admin user created from environment variables');
+            console.log(`   Email: ${adminEmail}`);
+            console.log('   Username: admin');
+            // Enhanced password strength warnings
+            const isWeakPassword = this.deps.checkWeakPassword(adminPassword);
+            if (isWeakPassword.isWeak) {
+                console.warn('');
+                console.warn('🚨 SECURITY WARNING: Weak admin password detected!');
+                console.warn(`   Reason: ${isWeakPassword.reason}`);
+                console.warn('   Please use a strong password with:');
+                console.warn('   • At least 12 characters');
+                console.warn('   • Mixed case letters (A-z)');
+                console.warn('   • Numbers (0-9)');
+                console.warn('   • Special characters (!@#$%^&*)');
+                console.warn('   • No common words or patterns');
+                if (envName === 'production') {
+                    console.warn('🔥 CRITICAL: Change this password immediately in production!');
+                }
+            }
+            else {
+                console.log('✅ Password strength check passed');
+            }
+            console.log('');
+        }
+        return adminUser;
+    }
+}
+//# sourceMappingURL=user-service.js.map

package/dist/core/services/user-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-service.js","sourceRoot":"","sources":["../../../src/core/services/user-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAK7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAwB1D;;GAEG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,+CAA+C;IACxC,KAAK,CAAC,UAAU,CAAC,QAAwB;QAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC/C,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvD,CAAC;QAED,sDAAsD;QAEtD,kFAAkF;QAClF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACrE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC9E,IAAI,sBAAsB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAEpC,MAAM,UAAU,GAAkB;YAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,YAAY;YACZ,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;YACnC,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAA;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAE5E,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,MAAM;YACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,2BAA2B,QAAQ,CAAC,IAAI,EAAE;YAClD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;aAC/E;SACF,CAAC,CAAA;QAEF,0DAA0D;QAC1D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACjC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE;gBACJ,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,WAAW,CAAC,EAAE;aACvB;SACF,CAAC,CAAA;QAEF,6DAA6D;QAC7D,MAAM,+BAA+B,GAAG,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAA;QACtF,IAAI,+BAA+B,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,+BAA+B,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;YAC7E,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAU;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,sDAAsD;QACtD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAChD,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC9C,CAAC;QAED,sDAAsD;QACtD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa;QACvC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;QAC9D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC;QAED,sDAAsD;QACtD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC1D,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,QAAwB;QAC1D,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;YACxC,IAAI,QAAQ,CAAC,KAAK;gBAAE,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YACnE,IAAI,QAAQ,CAAC,QAAQ;gBAAE,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC9E,CAAC;QAED,sDAAsD;QAEtD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,eAAe,GAAkB;YACrC,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAA;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;QAE7E,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACpC,YAAY,EAAE,YAAY,CAAC,IAAI;gBAC/B,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI;aAC5C;SACF,CAAC,CAAA;QAEF,OAAO,WAAW,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,OAAyB;QAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QACzD,CAAC;QAED,sDAAsD;QACtD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACvD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,EAAU;QAChC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,sDAAsD;QAEtD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAE1C,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,IAAI,EAAE,YAAY,CAAC,IAAI;aACxB;SACF,CAAC,CAAA;IACJ,CAAC;IAEM,qBAAqB,CAAC,IAAY;QACvC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,OAAO;gBACV,OAAO,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,CAAC,CAAA;YAC7K,KAAK,QAAQ;gBACX,OAAO,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,CAAC,CAAA;YAC3E,KAAK,QAAQ;gBACX,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAA;YAC1C;gBACE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAED,mEAAmE;IAC5D,KAAK,CAAC,iBAAiB;QAC5B,MAAM,UAAU,GAAG,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACjG,MAAM,aAAa,GAAG,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAEvG,gDAAgD;QAChD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YACxD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,0CAA0C;gBAC1C,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4CAA4C;YAC5C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;gBACzF,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACtC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,OAAO;YAClB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,CAAC;YACjL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE;gBACX,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,IAAI;aACf;SACF,CAAC,CAAA;QAEF,2CAA2C;QAC3C,MAAM,OAAO,GAAG,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACpF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAA;YAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,CAAC,CAAA;YACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;YAEjC,sCAAsC;YACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;YACjE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChB,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;gBAClE,OAAO,CAAC,IAAI,CAAC,cAAc,cAAc,CAAC,MAAM,EAAE,CAAC,CAAA;gBACnD,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;gBACrD,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;gBAC3C,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;gBAC7C,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;gBAClC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;gBAClD,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;gBAChD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;gBAC9E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;YACjD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjB,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;CACF"}

package/dist/core/studio/integration.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Studio Integration for TrokkyCore
+ *
+ * Provides integrated Studio functionality directly in the CMS core,
+ * eliminating the need for separate Studio setup and HTTP discovery.
+ */
+import type { TrokkyCore } from '../core/engine.js';
+import type { HttpRequest, HttpResponse } from '../../types/http.js';
+export interface StudioConfig {
+    enabled?: boolean;
+    path?: string;
+    branding?: {
+        title?: string;
+        logo?: string;
+        theme?: 'light' | 'dark' | 'system';
+    };
+    structure?: unknown;
+    config?: {
+        pageSize?: number;
+        enableDrafts?: boolean;
+        enableVersioning?: boolean;
+    };
+    customFields?: unknown[];
+    getHTML?: (config: any, studioPath: string) => string;
+    getAsset?: (assetPath: string) => {
+        content: Buffer | Uint8Array;
+        contentType: string;
+    } | null;
+}
+export interface StudioRoute {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    path: string;
+    handler: (request: HttpRequest) => Promise<HttpResponse>;
+}
+export declare class StudioIntegration {
+    private core;
+    private config;
+    private routes;
+    private logger;
+    constructor(core: TrokkyCore, config?: StudioConfig);
+    private initializeRoutes;
+    private addRoute;
+    getRoutes(): StudioRoute[];
+    findRoute(method: string, path: string): StudioRoute | undefined;
+    private calculateSpecificity;
+    private matchesPattern;
+    extractParams(pattern: string, path: string): Record<string, string>;
+    private serveStudioHTML;
+    private serveStudioAssets;
+    private getSchemas;
+    private getSchema;
+    private errorResponse;
+}
+//# sourceMappingURL=integration.d.ts.map

package/dist/core/studio/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/core/studio/integration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AA2BpE,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;KACpC,CAAA;IACD,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAC3B,CAAA;IACD,YAAY,CAAC,EAAE,OAAO,EAAE,CAAA;IAExB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;IACrD,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK;QAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAC/F;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAA;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;CACzD;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAY;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,MAAM,CAA4C;gBAE9C,IAAI,EAAE,UAAU,EAAE,MAAM,GAAE,YAAiB;IAavD,OAAO,CAAC,gBAAgB;IA+BxB,OAAO,CAAC,QAAQ;IAMT,SAAS,IAAI,WAAW,EAAE;IAI1B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAkCvE,OAAO,CAAC,oBAAoB;IAiC5B,OAAO,CAAC,cAAc;IA4Bf,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAmB7D,eAAe;YAqDf,iBAAiB;YAiDjB,UAAU;YAwBV,SAAS;IA2BvB,OAAO,CAAC,aAAa;CAYtB"}