@trokky/trokky 2.0.3

package/dist/types/auth.d.ts

@@ -0,0 +1,394 @@
+/**
+ * @trokky/types - Authentication and Authorization Types
+ *
+ * Core authentication types used across the Trokky ecosystem.
+ * These types define users, roles, permissions, tokens, and auth contexts.
+ */
+import type { PasskeyCredential } from './passkey.js';
+/**
+ * Supported OAuth provider types
+ */
+export type OAuthProviderType = 'google' | 'github' | 'microsoft';
+/**
+ * OAuth provider configuration for linked accounts
+ */
+export interface OAuthProvider {
+    /** OAuth provider type */
+    provider: OAuthProviderType;
+    /** Provider's unique user ID (e.g., Google's 'sub' claim) */
+    providerId: string;
+    /** Email from OAuth provider */
+    email: string;
+    /** ISO date when account was linked */
+    linkedAt: string;
+    /** Last time used for login */
+    lastUsedAt?: string;
+}
+/**
+ * Supported MFA method types
+ */
+export type MFAMethodType = 'totp' | 'email';
+/**
+ * MFA method configuration
+ */
+export interface MFAMethod {
+    /** Type of MFA method */
+    type: MFAMethodType;
+    /** Whether this method is enabled */
+    enabled: boolean;
+    /** Whether this method has been verified */
+    verified: boolean;
+    /** TOTP specific - encrypted secret for authenticator apps */
+    secret?: string;
+    /** Timestamp when this method was verified/enabled */
+    verifiedAt?: string;
+}
+/**
+ * Trusted device configuration for MFA bypass
+ */
+export interface TrustedDevice {
+    /** Unique device identifier (fingerprint hash) */
+    id: string;
+    /** Human-readable name, e.g., "Chrome on MacOS" */
+    name: string;
+    /** ISO date when device was trusted */
+    trustedAt: string;
+    /** ISO date when trust expires */
+    expiresAt: string;
+    /** Last time MFA was skipped due to trust */
+    lastUsedAt?: string;
+    /** IP address when device was trusted */
+    ipAddress?: string;
+    /** User agent string for identification */
+    userAgent?: string;
+}
+/**
+ * MFA configuration for a user
+ */
+export interface MFAConfig {
+    /** Whether MFA is active for this user */
+    enabled: boolean;
+    /** Configured MFA methods */
+    methods: MFAMethod[];
+    /** Hashed one-time backup codes */
+    backupCodes?: string[];
+    /** When backup codes were last generated */
+    backupCodesGeneratedAt?: string;
+    /** Devices that can skip MFA */
+    trustedDevices?: TrustedDevice[];
+    /** When org MFA requirement was applied to this user */
+    enforcedAt?: string;
+}
+/**
+ * System user roles
+ * - admin: Full access to all features
+ * - editor: Can create, edit, delete, and publish content
+ * - author: Can create, edit, and publish own content
+ * - writer: Can create and edit content, but cannot publish (requires editor review)
+ * - viewer: Read-only access to content
+ * - api: For API tokens (permissions come from token itself)
+ */
+export type UserRole = 'admin' | 'editor' | 'author' | 'writer' | 'viewer' | 'api';
+/**
+ * Granular permissions with resource-based scoping
+ */
+export type Permission = 'content:read' | 'content:write' | 'content:delete' | 'content:publish' | 'content:*' | 'media:read' | 'media:upload' | 'media:edit' | 'media:delete' | 'users:read' | 'users:write' | 'users:delete' | 'users:invite' | 'settings:read' | 'settings:write' | 'studio:access' | 'tokens:read' | 'tokens:write' | 'tokens:delete' | 'webhooks:read' | 'webhooks:write' | 'webhooks:delete' | 'webhooks:test' | string;
+/**
+ * User preferences for UI and localization
+ */
+export interface UserPreferences {
+    /** UI theme preference */
+    theme?: 'light' | 'dark';
+    /** Preferred language */
+    language?: string;
+    /** Preferred timezone */
+    timezone?: string;
+    /** Additional custom preferences */
+    [key: string]: unknown;
+}
+/**
+ * System user entity
+ */
+export interface User {
+    /** Unique user ID */
+    id: string;
+    /** Username for login */
+    username: string;
+    /** Email address */
+    email: string;
+    /** Hashed password */
+    passwordHash: string;
+    /** First name */
+    firstName: string;
+    /** Last name */
+    lastName: string;
+    /** User role */
+    role: UserRole;
+    /** Granted permissions */
+    permissions: Permission[];
+    /** Whether the user is active */
+    isActive: boolean;
+    /** Profile image URL */
+    profileImage?: string;
+    /** User preferences */
+    preferences?: UserPreferences;
+    /** Linked OAuth accounts */
+    oauthProviders?: OAuthProvider[];
+    /** Multi-factor authentication configuration */
+    mfa?: MFAConfig;
+    /** Registered passkey credentials for passwordless authentication */
+    passkeys?: PasskeyCredential[];
+    /** Last login timestamp */
+    lastLoginAt?: string;
+    /** Account creation timestamp */
+    createdAt: string;
+    /** Last update timestamp */
+    updatedAt: string;
+}
+/**
+ * Data required to create a new user
+ */
+export interface CreateUserData {
+    username: string;
+    email: string;
+    /** Plain text password (will be hashed) */
+    password: string;
+    firstName: string;
+    lastName: string;
+    role: UserRole;
+    permissions?: Permission[];
+    isActive?: boolean;
+    profileImage?: string;
+    preferences?: UserPreferences;
+}
+/**
+ * Data for updating a user
+ */
+export interface UpdateUserData {
+    username?: string;
+    email?: string;
+    firstName?: string;
+    lastName?: string;
+    role?: UserRole;
+    permissions?: Permission[];
+    isActive?: boolean;
+    profileImage?: string;
+    preferences?: UserPreferences;
+    mfa?: MFAConfig;
+    lastLoginAt?: string;
+    passwordHash?: string;
+}
+/**
+ * Options for listing users
+ */
+export interface UserListOptions {
+    role?: UserRole;
+    isActive?: boolean;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Login credentials
+ */
+export interface LoginCredentials {
+    username: string;
+    password: string;
+}
+/**
+ * User session information
+ */
+export interface UserSession {
+    userId: string;
+    username: string;
+    role: UserRole;
+    permissions: Permission[];
+    loginAt: string;
+    expiresAt?: string;
+}
+/**
+ * Application token for API access
+ */
+export interface AppToken {
+    /** Unique token ID */
+    id: string;
+    /** Human-readable token name */
+    name: string;
+    /** Optional description */
+    description?: string;
+    /** Hashed version of the actual token */
+    tokenHash: string;
+    /** Permissions granted to this token */
+    permissions: Permission[];
+    /** User ID who created the token */
+    createdBy: string;
+    /** Whether the token is active */
+    isActive: boolean;
+    /** Last time the token was used */
+    lastUsedAt?: string;
+    /** Number of times the token has been used */
+    usageCount?: number;
+    /** Optional expiration date */
+    expiresAt?: string;
+    /** Creation timestamp */
+    createdAt: string;
+    /** Last update timestamp */
+    updatedAt: string;
+}
+/**
+ * Data required to create an app token
+ */
+export interface CreateAppTokenData {
+    name: string;
+    description?: string;
+    permissions: Permission[];
+    /** Optional expiration date */
+    expiresAt?: string;
+}
+/**
+ * Data for updating an app token
+ */
+export interface UpdateAppTokenData {
+    name?: string;
+    description?: string;
+    permissions?: Permission[];
+    isActive?: boolean;
+    expiresAt?: string;
+}
+/**
+ * Options for listing app tokens
+ */
+export interface AppTokenListOptions {
+    createdBy?: string;
+    isActive?: boolean;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Authenticated user (without sensitive data like passwordHash)
+ */
+export interface AuthenticatedUser {
+    id: string;
+    username: string;
+    email: string;
+    firstName: string;
+    lastName: string;
+    role: UserRole;
+    permissions: Permission[];
+    isActive: boolean;
+    oauthProviders?: OAuthProvider[];
+}
+/**
+ * Authenticated app token (without sensitive data)
+ */
+export interface AuthenticatedAppToken {
+    id: string;
+    name: string;
+    permissions: Permission[];
+    createdBy: string;
+    isActive: boolean;
+}
+/**
+ * Authentication context - represents the authenticated entity
+ */
+export type AuthContext = {
+    type: 'user';
+    user: AuthenticatedUser;
+} | {
+    type: 'app_token';
+    token: AuthenticatedAppToken;
+} | {
+    type: 'anonymous';
+};
+/**
+ * JWT payload for user tokens
+ */
+export interface UserTokenPayload {
+    type: 'user';
+    userId: string;
+    username: string;
+    role: UserRole;
+    permissions: Permission[];
+    iat: number;
+    exp: number;
+}
+/**
+ * JWT payload for app tokens
+ */
+export interface AppTokenPayload {
+    type: 'app_token';
+    tokenId: string;
+    name: string;
+    permissions: Permission[];
+    createdBy: string;
+    iat: number;
+    exp?: number;
+}
+/**
+ * JWT payload for MFA pending state
+ */
+export interface MFAPendingTokenPayload {
+    type: 'mfa_pending';
+    userId: string;
+    username: string;
+    /** Available MFA methods for this user */
+    mfaMethods: MFAMethodType[];
+    iat: number;
+    /** Short-lived: 5 minutes */
+    exp: number;
+}
+/**
+ * JWT payload for MFA setup state
+ */
+export interface MFASetupTokenPayload {
+    type: 'mfa_setup';
+    userId: string;
+    username: string;
+    /** Methods allowed by org settings */
+    allowedMethods: MFAMethodType[];
+    iat: number;
+    /** Limited scope: 15 minutes */
+    exp: number;
+}
+/**
+ * Union type for all token payloads
+ */
+export type TokenPayload = UserTokenPayload | AppTokenPayload | MFAPendingTokenPayload | MFASetupTokenPayload;
+/**
+ * Successful authentication result
+ */
+export interface AuthenticationSuccessResult {
+    type: 'success';
+    user: User;
+    token: string;
+    refreshToken: string;
+    /** ISO date string when token expires */
+    expiresAt: string;
+}
+/**
+ * MFA required authentication result
+ */
+export interface AuthenticationMFARequiredResult {
+    type: 'mfa_required';
+    requiresMFA: true;
+    mfaToken: string;
+    methods: MFAMethodType[];
+    /** Seconds until mfaToken expires (default: 300 = 5 minutes) */
+    expiresIn: number;
+}
+/**
+ * MFA setup required authentication result
+ */
+export interface AuthenticationMFASetupRequiredResult {
+    type: 'mfa_setup_required';
+    requiresMFASetup: true;
+    setupToken: string;
+    allowedMethods: MFAMethodType[];
+    message: string;
+    /** Seconds until setupToken expires (default: 900 = 15 minutes) */
+    expiresIn: number;
+}
+/**
+ * Union type for all authentication results
+ */
+export type AuthenticationResult = AuthenticationSuccessResult | AuthenticationMFARequiredResult | AuthenticationMFASetupRequiredResult;
+//# sourceMappingURL=auth.d.ts.map

package/dist/types/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAMrD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAA;AAEjE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAMD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAA;AAE5C;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,yBAAyB;IACzB,IAAI,EAAE,aAAa,CAAA;IACnB,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,4CAA4C;IAC5C,QAAQ,EAAE,OAAO,CAAA;IACjB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,6BAA6B;IAC7B,OAAO,EAAE,SAAS,EAAE,CAAA;IACpB,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,4CAA4C;IAC5C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,gCAAgC;IAChC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAMD;;;;;;;;GAQG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAA;AAElF;;GAEG;AACH,MAAM,MAAM,UAAU,GAElB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GAEX,YAAY,GACZ,cAAc,GACd,YAAY,GACZ,cAAc,GAEd,YAAY,GACZ,aAAa,GACb,cAAc,GACd,cAAc,GAEd,eAAe,GACf,gBAAgB,GAEhB,eAAe,GAEf,aAAa,GACb,cAAc,GACd,eAAe,GAEf,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GAEf,MAAM,CAAA;AAEV;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oCAAoC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,0BAA0B;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,iCAAiC;IACjC,QAAQ,EAAE,OAAO,CAAA;IACjB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,uBAAuB;IACvB,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B,4BAA4B;IAC5B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,gDAAgD;IAChD,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,eAAe,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAA;IACjB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;IACjB,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA;AAMzB;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,aAAa,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,0CAA0C;IAC1C,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,sCAAsC;IACtC,cAAc,EAAE,aAAa,EAAE,CAAA;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,oBAAoB,CAAA;AAMxB;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,IAAI,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,cAAc,CAAA;IACpB,WAAW,EAAE,IAAI,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,oBAAoB,CAAA;IAC1B,gBAAgB,EAAE,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,aAAa,EAAE,CAAA;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B,2BAA2B,GAC3B,+BAA+B,GAC/B,oCAAoC,CAAA"}

package/dist/types/auth.js

@@ -0,0 +1,8 @@
+/**
+ * @trokky/types - Authentication and Authorization Types
+ *
+ * Core authentication types used across the Trokky ecosystem.
+ * These types define users, roles, permissions, tokens, and auth contexts.
+ */
+export {};
+//# sourceMappingURL=auth.js.map

package/dist/types/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/types/document.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Document Types
+ * Shared types for document handling across all Trokky packages
+ */
+export interface BaseDocument {
+    _id?: string;
+    _type: string;
+    _createdAt?: string;
+    _updatedAt?: string;
+    _version?: number;
+    [key: string]: any;
+}
+export interface DocumentResult<T = any> {
+    data: T;
+    _id: string;
+    _type: string;
+    _createdAt: string;
+    _updatedAt: string;
+    _version: number;
+}
+export interface CollectionResult<T = any> {
+    documents: DocumentResult<T>[];
+    pagination: {
+        page: number;
+        limit: number;
+        total: number;
+        pages: number;
+    };
+    meta: {
+        total: number;
+    };
+}
+export interface DocumentWithContent<T = any> extends BaseDocument {
+    data: T;
+}
+export interface QueryOptions {
+    filter?: Record<string, any>;
+    sort?: Record<string, 1 | -1 | 'asc' | 'desc'> | string;
+    limit?: number;
+    offset?: number;
+    select?: string[];
+}
+export interface ListOptions {
+    limit?: number;
+    offset?: number;
+    sort?: string;
+    filter?: Record<string, any>;
+}
+//# sourceMappingURL=document.d.ts.map

package/dist/types/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/types/document.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAGD,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,GAAG;IACrC,IAAI,EAAE,CAAC,CAAC;IACR,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,GAAG;IACvC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAGD,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,GAAG,CAAE,SAAQ,YAAY;IAChE,IAAI,EAAE,CAAC,CAAC;CACT;AAGD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAGD,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC9B"}

package/dist/types/document.js

@@ -0,0 +1,6 @@
+/**
+ * Document Types
+ * Shared types for document handling across all Trokky packages
+ */
+export {};
+//# sourceMappingURL=document.js.map

package/dist/types/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/types/document.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/types/field-system.d.ts

@@ -0,0 +1,197 @@
+/**
+ * @trokky/types - Field System Types
+ *
+ * Core field system types used across the Trokky ecosystem.
+ * These types define the foundation for field definitions, validation, and context.
+ */
+/**
+ * Operators for conditional field visibility
+ */
+export type ConditionalOperator = 'equals' | 'notEquals' | 'contains' | 'notContains' | 'exists' | 'notExists' | 'greaterThan' | 'lessThan';
+/**
+ * Configuration for conditional field visibility
+ * Supports both single conditions and multiple conditions with logic operators
+ */
+export interface ConditionalConfig {
+    /** Field name for single condition */
+    field?: string;
+    /** Value to compare against */
+    value?: any;
+    /** Comparison operator */
+    operator?: ConditionalOperator;
+    /** Multiple conditions for complex visibility rules */
+    conditions?: Array<{
+        field: string;
+        value?: any;
+        operator?: ConditionalOperator;
+    }>;
+    /** How to combine multiple conditions (default: 'and') */
+    logic?: 'and' | 'or';
+}
+/**
+ * Result of field validation
+ */
+export interface ValidationResult {
+    /** Whether the validation passed */
+    isValid: boolean;
+    /** Array of error messages */
+    errors: string[];
+    /** Optional array of warning messages */
+    warnings?: string[];
+}
+/**
+ * Base validation configuration
+ */
+export interface BaseValidation {
+    /** Whether the field is required */
+    required?: boolean;
+    /** Custom validation function */
+    custom?: (value: any) => ValidationResult;
+}
+/**
+ * Real-time validation state for field feedback
+ */
+export interface ValidationState {
+    /** Whether validation is currently in progress */
+    isValidating: boolean;
+    /** The last value that was validated */
+    lastValidatedValue?: any;
+    /** When the last validation occurred */
+    lastValidatedAt?: Date;
+}
+/**
+ * Categories for organizing field types
+ */
+export type FieldCategory = 'text' | 'number' | 'boolean' | 'date' | 'media' | 'reference' | 'structure' | 'location' | 'custom';
+/**
+ * Base options interface for field display and behavior
+ */
+export interface BaseFieldOptions {
+    /** Placeholder text for input fields */
+    placeholder?: string;
+    /** Help text displayed below the field */
+    helpText?: string;
+    /** Layout style for the field */
+    layout?: 'default' | 'compact' | 'inline';
+    /** Width of the field in the form */
+    width?: 'full' | 'half' | 'third' | 'quarter';
+    /** Additional CSS class name */
+    className?: string;
+}
+/**
+ * Base field definition that all field types extend
+ */
+export interface BaseFieldDefinition {
+    /** The field type identifier */
+    type: string;
+    /** Display title for the field */
+    title: string;
+    /** Optional description/help text */
+    description?: string;
+    /** Whether the field is required */
+    required?: boolean;
+    /**
+     * Field visibility control
+     * - boolean: Static visibility (always hidden or visible)
+     * - function: Dynamic visibility based on document state
+     *
+     * NOTE: Functions cannot be serialized over HTTP. If your schemas are sent from backend to frontend,
+     * use the `conditional` property instead for dynamic visibility.
+     */
+    hidden?: boolean | ((document: Record<string, any>) => boolean);
+    /** Whether the field is read-only */
+    readOnly?: boolean;
+    /** Hide field label in Studio (useful for display-only fields like info) */
+    hideLabel?: boolean;
+    /** Group name for organizing fields */
+    group?: string;
+    /**
+     * Declarative conditional visibility (serializable, works over HTTP)
+     * Prefer this over function-based `hidden` when schemas are sent via API
+     */
+    conditional?: ConditionalConfig;
+}
+/**
+ * Base value interface that all field values extend
+ */
+export interface BaseFieldValue {
+    /** Type identifier for the value */
+    _type: string;
+}
+/**
+ * Context provided to fields during rendering
+ * Contains document information, schema, and user context
+ */
+export interface DocumentContext {
+    /** The document ID (undefined for new documents) */
+    documentId?: string;
+    /** The schema/collection name */
+    schema: string;
+    /** Whether this is a new document being created */
+    isNewDocument: boolean;
+    /** All documents in the system, keyed by collection */
+    allDocuments?: Record<string, any[]>;
+    /** Current form values for field interactions */
+    allValues?: Record<string, any>;
+    /** Current authenticated user */
+    currentUser?: any;
+    /** User's permissions */
+    permissions?: string[];
+    /** Nesting level for object fields (0 = top-level, 1+ = nested) */
+    nestingLevel?: number;
+}
+/**
+ * Field plugin source types
+ */
+export type FieldPluginSource = 'builtin' | 'external' | 'custom';
+/**
+ * Base field plugin interface (without React component types)
+ * The full FieldPlugin interface with React components is in @trokky/fields
+ */
+export interface BaseFieldPlugin<TDefinition extends BaseFieldDefinition = BaseFieldDefinition, TValue = any> {
+    /** Unique type identifier for the field */
+    type: string;
+    /** Human-readable display name */
+    displayName: string;
+    /** Description of the field type */
+    description: string;
+    /** Category for organizing fields */
+    category: FieldCategory;
+    /** Validation function */
+    validate: (value: TValue, definition: TDefinition, context?: DocumentContext) => ValidationResult;
+    /** Default value generator */
+    getDefaultValue: (definition: TDefinition) => TValue;
+    /** Convert definition to schema field */
+    toSchemaField: (definition: TDefinition) => any;
+    /** Convert schema field to definition */
+    fromSchemaField: (schemaField: any) => TDefinition;
+    /** Optional settings for the field type */
+    settings?: {
+        icon?: string;
+        color?: string;
+        tags?: string[];
+    };
+    /** Demo configuration for auto-generated field demonstrations */
+    demoConfig?: {
+        examples: Array<{
+            name: string;
+            value: TValue;
+            description: string;
+        }>;
+        invalidValue?: TValue;
+        variants: Array<{
+            name: string;
+            definition: TDefinition;
+        }>;
+    };
+}
+/**
+ * Base registered field plugin with metadata (without React components)
+ */
+export interface BaseRegisteredFieldPlugin extends BaseFieldPlugin {
+    /** Source of the plugin */
+    source: FieldPluginSource;
+    /** When the plugin was registered */
+    registeredAt: Date;
+}
+//# sourceMappingURL=field-system.d.ts.map

package/dist/types/field-system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-system.d.ts","sourceRoot":"","sources":["../../src/types/field-system.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,WAAW,GACX,UAAU,GACV,aAAa,GACb,QAAQ,GACR,WAAW,GACX,aAAa,GACb,UAAU,CAAA;AAEd;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+BAA+B;IAC/B,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAE9B,uDAAuD;IACvD,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,GAAG,CAAA;QACX,QAAQ,CAAC,EAAE,mBAAmB,CAAA;KAC/B,CAAC,CAAA;IACF,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAA;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,iCAAiC;IACjC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,gBAAgB,CAAA;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,YAAY,EAAE,OAAO,CAAA;IACrB,wCAAwC;IACxC,kBAAkB,CAAC,EAAE,GAAG,CAAA;IACxB,wCAAwC;IACxC,eAAe,CAAC,EAAE,IAAI,CAAA;CACvB;AAMD;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,QAAQ,GACR,SAAS,GACT,MAAM,GACN,OAAO,GACP,WAAW,GACX,WAAW,GACX,UAAU,GACV,QAAQ,CAAA;AAEZ;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,iCAAiC;IACjC,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;IACzC,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IAC7C,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,CAAA;IAE/D,qCAAqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;;OAGG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAA;CACd;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,aAAa,EAAE,OAAO,CAAA;IACtB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACpC,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,iCAAiC;IACjC,WAAW,CAAC,EAAE,GAAG,CAAA;IACjB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAMD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEjE;;;GAGG;AACH,MAAM,WAAW,eAAe,CAC9B,WAAW,SAAS,mBAAmB,GAAG,mBAAmB,EAC7D,MAAM,GAAG,GAAG;IAEZ,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,QAAQ,EAAE,aAAa,CAAA;IAEvB,0BAA0B;IAC1B,QAAQ,EAAE,CACR,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,WAAW,EACvB,OAAO,CAAC,EAAE,eAAe,KACtB,gBAAgB,CAAA;IAErB,8BAA8B;IAC9B,eAAe,EAAE,CAAC,UAAU,EAAE,WAAW,KAAK,MAAM,CAAA;IAEpD,yCAAyC;IACzC,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,KAAK,GAAG,CAAA;IAC/C,yCAAyC;IACzC,eAAe,EAAE,CAAC,WAAW,EAAE,GAAG,KAAK,WAAW,CAAA;IAElD,2CAA2C;IAC3C,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAChB,CAAA;IAED,iEAAiE;IACjE,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,KAAK,CAAC;YACd,IAAI,EAAE,MAAM,CAAA;YACZ,KAAK,EAAE,MAAM,CAAA;YACb,WAAW,EAAE,MAAM,CAAA;SACpB,CAAC,CAAA;QACF,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,QAAQ,EAAE,KAAK,CAAC;YACd,IAAI,EAAE,MAAM,CAAA;YACZ,UAAU,EAAE,WAAW,CAAA;SACxB,CAAC,CAAA;KACH,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE,2BAA2B;IAC3B,MAAM,EAAE,iBAAiB,CAAA;IACzB,qCAAqC;IACrC,YAAY,EAAE,IAAI,CAAA;CACnB"}