@trokky/trokky 2.0.3

package/dist/core/types/storage-adapters.d.ts

@@ -0,0 +1,611 @@
+/**
+ * Split Storage Adapter Interfaces
+ *
+ * This file defines the new storage architecture that separates:
+ * - DataStorageAdapter: Documents, users, and app tokens (structured data)
+ * - MediaStorageAdapter: Files and media content (unstructured data)
+ *
+ * This enables optimal deployment patterns like:
+ * - Cloudflare: D1 for data + R2 for media
+ * - AWS: DynamoDB for data + S3 for media
+ * - Hybrid: Filesystem for data + R2 for media
+ */
+import type { Document, AuditLog, DocumentData, ListOptions, MediaFile, MediaMetadata, Migration, User, UserListOptions, CreateUserData, UpdateUserData, AppToken, AppTokenListOptions, CreateAppTokenData, UpdateAppTokenData, AuditContext } from './index.js';
+import type { WebhookConfig } from '../events/types.js';
+/**
+ * Studio settings configuration
+ */
+export interface SettingsConfig {
+    /** Unique identifier for settings */
+    id: string;
+    /** Public website URL for "View Live" links */
+    publicUrl: string;
+    /** Studio title displayed in interface */
+    studioTitle: string;
+    /** Default theme for new users */
+    defaultTheme: 'light' | 'dark' | 'system';
+    /** Organization/company name for branding */
+    organizationName?: string;
+    /** Primary brand color (hex format) */
+    primaryColor?: string;
+    /** Secondary brand color (hex format) */
+    secondaryColor?: string;
+    /** Logo URL or path */
+    logo?: string;
+    /** Require MFA for all users */
+    mfaRequired?: boolean;
+    /** Roles that require MFA (role-based enforcement) */
+    mfaEnforcedRoles?: ('admin' | 'editor' | 'author' | 'viewer')[];
+    /** Allowed MFA methods */
+    mfaAllowedMethods?: ('totp' | 'email')[];
+    /** Days to trust a device (skip MFA) */
+    mfaTrustDeviceDays?: number;
+    /** Grace period (days) before MFA is enforced for existing users */
+    mfaGracePeriodDays?: number;
+    /** Settings creation timestamp */
+    _createdAt?: string;
+    /** Settings last update timestamp */
+    _updatedAt?: string;
+    /** User who last updated settings */
+    _updatedBy?: string;
+}
+/**
+ * DataStorageAdapter handles all structured data operations
+ *
+ * This adapter is responsible for:
+ * - Content documents (articles, pages, etc.)
+ * - System users and authentication
+ * - App tokens for API access
+ * - Transactional operations
+ * - Queries and filtering
+ *
+ * Optimal backends: SQL databases (D1, PostgreSQL, MySQL), NoSQL with query support
+ */
+export interface DataStorageAdapter {
+    /**
+     * Retrieve a single document by collection and ID
+     * @param collection - The collection name (e.g., 'articles', 'pages')
+     * @param id - The document ID
+     * @returns The document or null if not found
+     * @throws Error if collection/id are invalid or storage fails
+     */
+    getDocument(collection: string, id: string): Promise<Document | null>;
+    /**
+     * Save (create or update) a document
+     * @param collection - The collection name
+     * @param id - The document ID
+     * @param data - The document data (without metadata)
+     * @param auditContext - Optional audit context with user information
+     * @returns The saved document with metadata
+     * @throws Error if validation fails or storage fails
+     */
+    saveDocument(collection: string, id: string, data: DocumentData, auditContext?: AuditContext): Promise<Document>;
+    /**
+     * List documents in a collection with filtering, sorting, and pagination
+     * @param collection - The collection name
+     * @param options - Query options (limit, offset, filter, sort)
+     * @returns Array of matching documents
+     * @throws Error if query is invalid or storage fails
+     */
+    listDocuments(collection: string, options?: ListOptions): Promise<Document[]>;
+    /**
+     * Delete a document permanently
+     * @param collection - The collection name
+     * @param id - The document ID
+     * @throws Error if document doesn't exist or storage fails
+     */
+    deleteDocument(collection: string, id: string): Promise<void>;
+    /**
+     * Check if a document exists (optimized check without full retrieval)
+     * @param collection - The collection name
+     * @param id - The document ID
+     * @returns True if document exists
+     */
+    documentExists?(collection: string, id: string): Promise<boolean>;
+    /**
+     * Get document count in a collection (with optional filtering)
+     * @param collection - The collection name
+     * @param filter - Optional filter criteria
+     * @returns Number of matching documents
+     */
+    countDocuments?(collection: string, filter?: Record<string, unknown>): Promise<number>;
+    /**
+     * Create an audit log entry
+     * @param auditLog - The audit log data
+     * @returns The created audit log entry
+     * @throws Error if storage fails
+     */
+    createAuditLog?(auditLog: Omit<AuditLog, 'id'>): Promise<AuditLog>;
+    /**
+     * Get audit logs for a specific document
+     * @param documentId - The document ID
+     * @param options - Query options (limit, offset)
+     * @returns Array of audit log entries
+     */
+    getDocumentAuditLogs?(documentId: string, options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<AuditLog[]>;
+    /**
+     * Get audit logs for a collection
+     * @param collection - The collection name
+     * @param options - Query options (limit, offset)
+     * @returns Array of audit log entries
+     */
+    getCollectionAuditLogs?(collection: string, options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<AuditLog[]>;
+    /**
+     * Get audit logs by actor
+     * @param actorId - The actor ID
+     * @param options - Query options (limit, offset)
+     * @returns Array of audit log entries
+     */
+    getActorAuditLogs?(actorId: string, options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<AuditLog[]>;
+    /**
+     * Retrieve a user by ID
+     * @param id - The user ID
+     * @returns The user or null if not found
+     * @throws Error if storage fails
+     */
+    getUser(id: string): Promise<User | null>;
+    /**
+     * Create or update a user
+     * @param id - The user ID
+     * @param userData - The user data (partial for updates)
+     * @returns The saved user
+     * @throws Error if validation fails or storage fails
+     */
+    saveUser(id: string, userData: CreateUserData | Partial<UpdateUserData>): Promise<User>;
+    /**
+     * Conditionally update a user, but only while the stored password hash still
+     * matches the expected one. The comparison and the write must be atomic
+     * (a single conditional statement for SQL backends, a lock for file backends)
+     * so a concurrent password change cannot be overwritten.
+     *
+     * Optional: adapters that do not implement it fall back to a
+     * read-compare-write, which is not race free.
+     *
+     * @param id - The user ID
+     * @param userData - The user fields to update
+     * @param condition - The password hash the caller expects to still be stored
+     * @returns The updated user, or null if the stored hash no longer matches (nothing written)
+     * @throws Error if storage fails
+     */
+    saveUserIf?(id: string, userData: Partial<UpdateUserData>, condition: {
+        passwordHash: string;
+    }): Promise<User | null>;
+    /**
+     * List users with filtering and pagination
+     * @param options - Query options (role, isActive, limit, offset)
+     * @returns Array of matching users
+     * @throws Error if query is invalid or storage fails
+     */
+    listUsers(options?: UserListOptions): Promise<User[]>;
+    /**
+     * Delete a user permanently
+     * @param id - The user ID
+     * @throws Error if user doesn't exist or storage fails
+     */
+    deleteUser(id: string): Promise<void>;
+    /**
+     * Find user by username (for authentication)
+     * @param username - The username to search for
+     * @returns The user or null if not found
+     * @throws Error if storage fails
+     */
+    getUserByUsername(username: string): Promise<User | null>;
+    /**
+     * Find user by email address (for authentication and uniqueness checks)
+     * @param email - The email address to search for
+     * @returns The user or null if not found
+     * @throws Error if storage fails
+     */
+    getUserByEmail(email: string): Promise<User | null>;
+    /**
+     * Check if username is available (optimized check)
+     * @param username - The username to check
+     * @returns True if username is available
+     */
+    isUsernameAvailable?(username: string): Promise<boolean>;
+    /**
+     * Check if email is available (optimized check)
+     * @param email - The email to check
+     * @returns True if email is available
+     */
+    isEmailAvailable?(email: string): Promise<boolean>;
+    /**
+     * Find user by OAuth provider (for OAuth login)
+     * @param provider - The OAuth provider name (e.g., 'google')
+     * @param providerId - The provider's unique user ID
+     * @returns The user or null if not found
+     * @throws Error if storage fails
+     */
+    getUserByOAuthProvider?(provider: string, providerId: string): Promise<User | null>;
+    /**
+     * Retrieve an app token by ID
+     * @param id - The token ID
+     * @returns The app token or null if not found
+     * @throws Error if storage fails
+     */
+    getAppToken(id: string): Promise<AppToken | null>;
+    /**
+     * Create or update an app token
+     * @param id - The token ID
+     * @param tokenData - The token data (partial for updates)
+     * @returns The saved app token
+     * @throws Error if validation fails or storage fails
+     */
+    saveAppToken(id: string, tokenData: CreateAppTokenData | Partial<UpdateAppTokenData>): Promise<AppToken>;
+    /**
+     * List app tokens with filtering and pagination
+     * @param options - Query options (createdBy, isActive, limit, offset)
+     * @returns Array of matching app tokens
+     * @throws Error if query is invalid or storage fails
+     */
+    listAppTokens(options?: AppTokenListOptions): Promise<AppToken[]>;
+    /**
+     * Delete an app token permanently
+     * @param id - The token ID
+     * @throws Error if token doesn't exist or storage fails
+     */
+    deleteAppToken(id: string): Promise<void>;
+    /**
+     * Find app token by hash (for authentication)
+     * @param hash - The hashed token value
+     * @returns The app token or null if not found
+     * @throws Error if storage fails
+     */
+    getAppTokenByHash(hash: string): Promise<AppToken | null>;
+    /**
+     * Retrieve a webhook by ID
+     * @param id - The webhook ID
+     * @returns The webhook configuration or null if not found
+     * @throws Error if storage fails
+     */
+    getWebhook?(id: string): Promise<WebhookConfig | null>;
+    /**
+     * Create or update a webhook
+     * @param id - The webhook ID
+     * @param webhookData - The webhook data (partial for updates)
+     * @returns The saved webhook configuration
+     * @throws Error if validation fails or storage fails
+     */
+    saveWebhook?(id: string, webhookData: Partial<WebhookConfig>): Promise<WebhookConfig>;
+    /**
+     * List webhooks with filtering and pagination
+     * @param options - Query options (active, limit, offset)
+     * @returns Array of matching webhooks
+     * @throws Error if query is invalid or storage fails
+     */
+    listWebhooks?(options?: WebhookListOptions): Promise<WebhookConfig[]>;
+    /**
+     * Delete a webhook permanently
+     * @param id - The webhook ID
+     * @throws Error if webhook doesn't exist or storage fails
+     */
+    deleteWebhook?(id: string): Promise<void>;
+    /**
+     * Retrieve studio settings
+     * @returns The settings configuration or null if not found
+     * @throws Error if storage fails
+     */
+    getSettings?(): Promise<SettingsConfig | null>;
+    /**
+     * Create or update studio settings
+     * @param settings - The settings configuration
+     * @throws Error if validation fails or storage fails
+     */
+    saveSettings?(settings: SettingsConfig): Promise<void>;
+    /**
+     * Health check for the data storage system
+     * @returns True if storage is healthy and accessible
+     * @throws Error if storage is unhealthy
+     */
+    healthCheck(): Promise<boolean>;
+    /**
+     * Run database migrations for schema changes
+     * @param migrations - Array of migrations to run
+     * @throws Error if migration fails
+     */
+    migrate?(migrations: Migration[]): Promise<void>;
+    /**
+     * Get storage statistics and information
+     * @returns Storage metadata and statistics
+     */
+    getStorageInfo?(): Promise<{
+        collections: string[];
+        documentCount: number;
+        userCount: number;
+        tokenCount: number;
+        storageSize?: number;
+        [key: string]: unknown;
+    }>;
+    /**
+     * Begin a transaction (if supported by the storage backend)
+     * @returns Transaction context or undefined if not supported
+     */
+    beginTransaction?(): Promise<DataTransaction | undefined>;
+    /**
+     * Release whatever the adapter is holding open — connection pools, sockets, timers.
+     *
+     * Optional because most backends hold nothing: the filesystem and in-memory adapters have
+     * no handle to give back, and requiring the method would break every third-party adapter
+     * written against the interface before it existed. Implement it only when there is
+     * genuinely something to release, and make it safe to call twice — shutdown paths are
+     * rarely as orderly as they look.
+     */
+    close?(): Promise<void>;
+}
+/**
+ * Transaction interface for data operations (optional)
+ * Allows atomic operations across multiple documents/users/tokens
+ */
+export interface DataTransaction {
+    /**
+     * Commit the transaction
+     */
+    commit(): Promise<void>;
+    /**
+     * Rollback the transaction
+     */
+    rollback(): Promise<void>;
+    /**
+     * Execute multiple operations within the transaction
+     */
+    execute<T>(operations: () => Promise<T>): Promise<T>;
+}
+/**
+ * MediaStorageAdapter handles all unstructured data operations
+ *
+ * This adapter is responsible for:
+ * - File uploads and storage
+ * - Media metadata management
+ * - Image variant generation storage
+ * - Binary content serving
+ * - Large file handling
+ *
+ * Optimal backends: Object storage (R2, S3), CDN integration, file systems
+ */
+export interface MediaStorageAdapter {
+    /**
+     * Upload and store a file
+     * @param file - The file to upload
+     * @param metadata - File metadata (ID, filename, content type, etc.)
+     * @returns The stored media file record
+     * @throws Error if upload fails or file is invalid
+     */
+    uploadFile(file: File, metadata: MediaMetadata): Promise<MediaFile>;
+    /**
+     * Retrieve media file metadata by ID
+     * @param id - The file ID
+     * @returns The media file record or null if not found
+     * @throws Error if storage fails
+     */
+    getFile(id: string): Promise<MediaFile | null>;
+    /**
+     * Update media file metadata (not the content)
+     * @param id - The file ID
+     * @param metadata - Updated metadata
+     * @returns The updated media file record
+     * @throws Error if file doesn't exist or update fails
+     */
+    updateFile(id: string, metadata: Record<string, any>): Promise<MediaFile>;
+    /**
+     * Retrieve the binary content of a file
+     * @param id - The file ID
+     * @returns The file content as ArrayBuffer or null if not found
+     * @throws Error if storage fails
+     */
+    getFileContent(id: string): Promise<ArrayBuffer | null>;
+    /**
+     * Get a streaming URL for the file (if supported)
+     * @param id - The file ID
+     * @param options - Optional URL generation options (expiration time, etc.)
+     * @returns Public URL for the file or null if not available
+     */
+    getFileUrl?(id: string, options?: {
+        expiresIn?: number;
+    }): Promise<string | null>;
+    /**
+     * List media files with filtering and pagination
+     * @param options - Query options (limit, offset, content type filters, etc.)
+     * @returns Paginated result with items and total count
+     * @throws Error if query is invalid or storage fails
+     */
+    listMedia(options?: MediaListOptions): Promise<MediaListResult>;
+    /**
+     * Delete a file and all its variants permanently
+     * @param id - The file ID
+     * @throws Error if file doesn't exist or deletion fails
+     */
+    deleteFile(id: string): Promise<void>;
+    /**
+     * Check if a file exists (optimized check without full retrieval)
+     * @param id - The file ID
+     * @returns True if file exists
+     */
+    fileExists?(id: string): Promise<boolean>;
+    /**
+     * Get file size without downloading content
+     * @param id - The file ID
+     * @returns File size in bytes or null if file doesn't exist
+     */
+    getFileSize?(id: string): Promise<number | null>;
+    /**
+     * Save a processed variant of a media file
+     * @param parentId - The original file ID
+     * @param variantName - The variant name (e.g., 'thumbnail', 'preview')
+     * @param buffer - The processed file content
+     * @param format - The output format (e.g., 'webp', 'jpeg')
+     * @returns The variant ID or path
+     * @throws Error if save fails
+     */
+    saveVariantFile(parentId: string, variantName: string, buffer: Buffer, format: string): Promise<string>;
+    /**
+     * Retrieve the binary content of a variant
+     * @param parentId - The original file ID
+     * @param variantName - The variant name
+     * @returns The variant content as ArrayBuffer or null if not found
+     * @throws Error if storage fails
+     */
+    getVariantContent(parentId: string, variantName: string): Promise<ArrayBuffer | null>;
+    /**
+     * Get a public URL for a variant (if supported)
+     * @param parentId - The original file ID
+     * @param variantName - The variant name
+     * @param options - Optional URL generation options (expiration time, etc.)
+     * @returns Public URL for the variant or null if not available
+     */
+    getVariantUrl?(parentId: string, variantName: string, options?: {
+        expiresIn?: number;
+    }): Promise<string | null>;
+    /**
+     * List all variants for a media file
+     * @param parentId - The original file ID
+     * @returns Array of variant information
+     */
+    listVariants?(parentId: string): Promise<MediaVariant[]>;
+    /**
+     * Delete all variants of a media file
+     * @param parentId - The original file ID
+     * @throws Error if deletion fails
+     */
+    deleteVariantFiles(parentId: string): Promise<void>;
+    /**
+     * Delete a specific variant
+     * @param parentId - The original file ID
+     * @param variantName - The variant name
+     * @throws Error if variant doesn't exist or deletion fails
+     */
+    deleteVariant?(parentId: string, variantName: string): Promise<void>;
+    /**
+     * Health check for the media storage system
+     * @returns True if storage is healthy and accessible
+     * @throws Error if storage is unhealthy
+     */
+    healthCheck(): Promise<boolean>;
+    /**
+     * Get storage statistics and quota information
+     * @returns Storage usage statistics
+     */
+    getStorageInfo?(): Promise<{
+        totalFiles: number;
+        totalSize: number;
+        availableSpace?: number;
+        usedSpace?: number;
+        [key: string]: unknown;
+    }>;
+    /**
+     * Clean up orphaned files and variants
+     * @returns Number of files cleaned up
+     */
+    cleanup?(): Promise<number>;
+    /**
+     * Optimize storage (compress, deduplicate, etc.)
+     * @returns Optimization results
+     */
+    optimize?(): Promise<{
+        filesProcessed: number;
+        spaceSaved: number;
+        [key: string]: unknown;
+    }>;
+    /**
+     * Release whatever the adapter is holding open — clients, sockets, timers.
+     *
+     * Optional for the same reason as on `DataStorageAdapter`: a filesystem or in-memory media
+     * backend has no handle to release, and third-party adapters written before this method
+     * existed must keep compiling. Note this is not `cleanup()` above — that one deletes
+     * orphaned files, this one lets the process exit.
+     */
+    close?(): Promise<void>;
+}
+/**
+ * Extended media list options with more filtering capabilities
+ */
+export interface MediaListOptions {
+    limit?: number;
+    offset?: number;
+    /** Filter by content type (e.g., 'image/*', 'video/mp4') */
+    contentType?: string;
+    /** Filter by file size range */
+    sizeRange?: {
+        min?: number;
+        max?: number;
+    };
+    /** Filter by upload date range */
+    dateRange?: {
+        from?: Date;
+        to?: Date;
+    };
+    /** Sort options */
+    sort?: 'name' | 'size' | 'date' | 'type';
+    /** Sort direction */
+    sortDirection?: 'asc' | 'desc';
+    /** Include variant information in results */
+    includeVariants?: boolean;
+}
+/**
+ * Result of listing media files with pagination metadata
+ */
+export interface MediaListResult {
+    /** The media files for the current page */
+    items: MediaFile[];
+    /** Total number of media files matching the query (before pagination) */
+    total: number;
+}
+/**
+ * Media variant information
+ */
+export interface MediaVariant {
+    name: string;
+    format: string;
+    size: number;
+    width?: number;
+    height?: number;
+    url?: string;
+    createdAt: Date;
+}
+/**
+ * Configuration options for split storage adapters
+ */
+export interface SplitStorageConfig {
+    /** Data storage adapter configuration */
+    data: {
+        adapter: string;
+        options?: Record<string, unknown>;
+    };
+    /** Media storage adapter configuration */
+    media: {
+        adapter: string;
+        options?: Record<string, unknown>;
+    };
+}
+/**
+ * Webhook list options for filtering and pagination
+ */
+export interface WebhookListOptions {
+    /** Filter by active status */
+    active?: boolean;
+    /** Maximum number of results */
+    limit?: number;
+    /** Skip this many results (for pagination) */
+    offset?: number;
+    /** Filter by event patterns */
+    events?: string[];
+    /** Filter by creator user ID */
+    createdBy?: string;
+}
+/**
+ * Combined storage adapter container
+ * This is what TrokkyCore will use internally
+ */
+export interface TrokkyStorageAdapters {
+    data: DataStorageAdapter;
+    media: MediaStorageAdapter;
+}
+//# sourceMappingURL=storage-adapters.d.ts.map

package/dist/core/types/storage-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-adapters.d.ts","sourceRoot":"","sources":["../../../src/core/types/storage-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,aAAa,EACb,SAAS,EACT,IAAI,EACJ,eAAe,EACf,cAAc,EACd,cAAc,EACd,QAAQ,EACR,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACb,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAMvD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,kCAAkC;IAClC,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;IACzC,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,gCAAgC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,CAAC,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAA;IAC/D,0BAA0B;IAC1B,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;IACxC,wCAAwC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAE3B,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IAKjC;;;;;;OAMG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAErE;;;;;;;;OAQG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAEhH;;;;;;OAMG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE7E;;;;;OAKG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;OAKG;IACH,cAAc,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEjE;;;;;OAKG;IACH,cAAc,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAMtF;;;;;OAKG;IACH,cAAc,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAElE;;;;;OAKG;IACH,oBAAoB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE7G;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE/G;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAMvG;;;;;OAKG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAEzC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAErH;;;;;OAKG;IACH,SAAS,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAErD;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErC;;;;;OAKG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAEzD;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAEnD;;;;OAIG;IACH,mBAAmB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAExD;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAElD;;;;;;OAMG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAMnF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAEjD;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAExG;;;;;OAKG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAEjE;;;;OAIG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAMzD;;;;;OAKG;IACH,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAEtD;;;;;;OAMG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAErF;;;;;OAKG;IACH,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IAErE;;;;OAIG;IACH,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAMzC;;;;OAIG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAE9C;;;;OAIG;IACH,YAAY,CAAC,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAMtD;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAE/B;;;;OAIG;IACH,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhD;;;OAGG;IACH,cAAc,CAAC,IAAI,OAAO,CAAC;QACzB,WAAW,EAAE,MAAM,EAAE,CAAA;QACrB,aAAa,EAAE,MAAM,CAAA;QACrB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAC,CAAA;IAEF;;;OAGG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAA;IAEzD;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvB;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzB;;OAEG;IACH,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACrD;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAKlC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAEnE;;;;;OAKG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAE9C;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAEzE;;;;;OAKG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAEjF;;;;;OAKG;IACH,SAAS,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAE/D;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErC;;;;OAIG;IACH,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEzC;;;;OAIG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAMhD;;;;;;;;OAQG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEvG;;;;;;OAMG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAErF;;;;;;OAMG;IACH,aAAa,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAE/G;;;;OAIG;IACH,YAAY,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAExD;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnD;;;;;OAKG;IACH,aAAa,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAMpE;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAE/B;;;OAGG;IACH,cAAc,CAAC,IAAI,OAAO,CAAC;QACzB,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAC,CAAA;IAEF;;;OAGG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3B;;;OAGG;IACH,QAAQ,CAAC,IAAI,OAAO,CAAC;QACnB,cAAc,EAAE,MAAM,CAAA;QACtB,UAAU,EAAE,MAAM,CAAA;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAC,CAAA;IAEF;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gCAAgC;IAChC,SAAS,CAAC,EAAE;QACV,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,kCAAkC;IAClC,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,IAAI,CAAA;QACX,EAAE,CAAC,EAAE,IAAI,CAAA;KACV,CAAA;IACD,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;IACxC,qBAAqB;IACrB,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAC9B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,IAAI,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC,CAAA;IACD,0CAA0C;IAC1C,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,mBAAmB,CAAA;CAC3B"}

package/dist/core/types/storage-adapters.js

@@ -0,0 +1,14 @@
+/**
+ * Split Storage Adapter Interfaces
+ *
+ * This file defines the new storage architecture that separates:
+ * - DataStorageAdapter: Documents, users, and app tokens (structured data)
+ * - MediaStorageAdapter: Files and media content (unstructured data)
+ *
+ * This enables optimal deployment patterns like:
+ * - Cloudflare: D1 for data + R2 for media
+ * - AWS: DynamoDB for data + S3 for media
+ * - Hybrid: Filesystem for data + R2 for media
+ */
+export {};
+//# sourceMappingURL=storage-adapters.js.map

package/dist/core/types/storage-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-adapters.js","sourceRoot":"","sources":["../../../src/core/types/storage-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/core/types/user.d.ts

@@ -0,0 +1,10 @@
+/**
+ * System user types for CMS authentication and authorization
+ * These are internal system entities, separate from user-defined content schemas
+ *
+ * Types are now centralized in @trokky/types and re-exported here for backwards compatibility.
+ */
+export type { OAuthProviderType, OAuthProvider, MFAMethodType, MFAMethod, TrustedDevice, MFAConfig, UserRole, Permission, UserPreferences, User, CreateUserData, UpdateUserData, UserListOptions, LoginCredentials, UserSession, AppToken, CreateAppTokenData, UpdateAppTokenData, AppTokenListOptions, AuthenticatedUser, AuthenticatedAppToken, AuthContext, UserTokenPayload, AppTokenPayload, MFAPendingTokenPayload, MFASetupTokenPayload, TokenPayload, AuthenticationSuccessResult, AuthenticationMFARequiredResult, AuthenticationMFASetupRequiredResult, AuthenticationResult } from '../../types/index.js';
+import type { UserRole, Permission } from '../../types/index.js';
+export declare const ROLE_PERMISSIONS: Record<UserRole, Permission[]>;
+//# sourceMappingURL=user.d.ts.map

package/dist/core/types/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/core/types/user.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAEV,iBAAiB,EACjB,aAAa,EAEb,aAAa,EACb,SAAS,EACT,aAAa,EACb,SAAS,EAET,QAAQ,EACR,UAAU,EACV,eAAe,EAEf,IAAI,EACJ,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,WAAW,EAEX,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EAEnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EAEX,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EAEZ,2BAA2B,EAC3B,+BAA+B,EAC/B,oCAAoC,EACpC,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGhE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,CAoC3D,CAAA"}