betterstart-cli 0.0.12 → 0.0.13

package/dist/assets/adapters/next/templates/init/lib/actions/audit/register.ts

@@ -0,0 +1,13 @@
+import { registerAdminHook } from '@admin/lib/lifecycle-hooks/registry'
+import { recordAuditEvent } from './record-audit-event'
+
+let auditHooksRegistered = false
+
+export function registerAuditHooks(): void {
+  if (auditHooksRegistered) return
+  auditHooksRegistered = true
+
+  registerAdminHook({}, async (event) => {
+    await recordAuditEvent(event)
+  })
+}

package/dist/assets/adapters/next/templates/init/lib/actions/audit/request-metadata.ts

@@ -0,0 +1,37 @@
+import { headers } from 'next/headers'
+
+const MAX_IP_LENGTH = 100
+const MAX_USER_AGENT_LENGTH = 500
+
+function truncate(value: string | null, maxLength: number): string | null {
+  if (!value) return null
+  return value.length > maxLength ? value.slice(0, maxLength) : value
+}
+
+function firstHeaderValue(value: string | null): string | null {
+  return value?.split(',')[0]?.trim() || null
+}
+
+export async function getAuditRequestMetadata(): Promise<{
+  ipAddress: string | null
+  userAgent: string | null
+}> {
+  try {
+    const requestHeaders = await headers()
+    const ipAddress =
+      firstHeaderValue(requestHeaders.get('x-forwarded-for')) ??
+      firstHeaderValue(requestHeaders.get('x-real-ip')) ??
+      firstHeaderValue(requestHeaders.get('cf-connecting-ip'))
+    const userAgent = requestHeaders.get('user-agent')?.trim() || null
+
+    return {
+      ipAddress: truncate(ipAddress, MAX_IP_LENGTH),
+      userAgent: truncate(userAgent, MAX_USER_AGENT_LENGTH)
+    }
+  } catch {
+    return {
+      ipAddress: null,
+      userAgent: null
+    }
+  }
+}

package/dist/assets/adapters/next/templates/init/lib/actions/audit/types.ts

@@ -0,0 +1,72 @@
+export const AUDIT_LOG_CATEGORIES = [
+  'entity',
+  'settings',
+  'user',
+  'auth',
+  'media',
+  'system'
+] as const
+export const AUDIT_LOG_ACTIONS = [
+  'create',
+  'update',
+  'delete',
+  'publish',
+  'unpublish',
+  'cleanup'
+] as const
+export const AUDIT_LOG_SOURCE_TYPES = ['admin_ui', 'server_action', 'system_job'] as const
+
+export type AuditLogCategory = (typeof AUDIT_LOG_CATEGORIES)[number]
+export type AuditLogAction = (typeof AUDIT_LOG_ACTIONS)[number]
+export type AuditLogSourceType = (typeof AUDIT_LOG_SOURCE_TYPES)[number]
+
+export interface AuditLogEntry {
+  id: string
+  category: AuditLogCategory
+  action: AuditLogAction
+  targetType: string
+  targetId: string | null
+  targetLabel: string | null
+  actorUserId: string | null
+  actorEmail: string | null
+  actorName: string | null
+  actorRole: string | null
+  sourceType: AuditLogSourceType
+  ipAddress: string | null
+  userAgent: string | null
+  changedFields: string[]
+  metadata: Record<string, unknown> | null
+  createdAt: string
+}
+
+export interface AuditLogQuery {
+  search?: string
+  category?: AuditLogCategory
+  action?: AuditLogAction
+  targetType?: string
+  actor?: string
+  createdAtFrom?: string
+  createdAtTo?: string
+  page?: number
+  pageSize?: number
+}
+
+export interface AuditLogPage {
+  auditLogs: AuditLogEntry[]
+  total: number
+  page: number
+  pageSize: number
+  totalPages: number
+}
+
+export interface CleanupAuditLogsResult {
+  success: boolean
+  error?: string
+  deletedCount?: number
+  cutoff?: string
+  skipped?: boolean
+}
+
+export const auditLogCacheTags = {
+  all: 'audit-log:all'
+} as const

package/dist/assets/adapters/next/templates/init/lib/actions/forms/upsert-form-settings.ts

@@ -1,5 +1,6 @@
 'use server'
 
+import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { formSettings } from '@admin/db/schema'
 import { updateTag } from 'next/cache'
@@ -10,6 +11,8 @@ export async function upsertFormSettings(
   formName: string,
   data: UpsertFormSettingsInput
 ): Promise<FormSettingsResult> {
+  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+
   try {
     const [settings] = await db
       .insert(formSettings)

package/dist/assets/adapters/next/templates/init/lib/actions/media/create-media.ts

@@ -1,8 +1,11 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { getSession } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { adminMedia } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
+import { getTouchedFieldNames } from '@admin/utils/audit/audit'
 import { updateTag } from 'next/cache'
 import { getMediaById } from './get-media-by-id'
 import { type CreateMediaInput, type CreateMediaResult, mediaCacheTags } from './types'
@@ -12,6 +15,7 @@ export async function createMedia(data: CreateMediaInput): Promise<CreateMediaRe
     const session = await getSession()
     const actorId = session?.user?.id ?? null
     const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
     const [row] = await db
       .insert(adminMedia)
       .values({
@@ -27,6 +31,21 @@ export async function createMedia(data: CreateMediaInput): Promise<CreateMediaRe
       updateTag(mediaCacheTags.byId(row.id))
     }
     const media = row ? await getMediaById(row.id) : null
+    if (media) {
+      runAdminEventHooks({
+        category: 'media',
+        action: 'create',
+        targetType: 'media',
+        targetId: media.id,
+        targetLabel: media.filename,
+        user: session?.user ?? null,
+        timestamp: now,
+        sourceType: 'admin_ui' as const,
+        changedFields: getTouchedFieldNames(data as unknown as Record<string, unknown>),
+        metadata: { contentType: media.contentType, size: media.size },
+        ...auditRequestMetadata
+      })
+    }
     return media
       ? { success: true, media }
       : { success: false, error: 'Failed to create media record' }

package/dist/assets/adapters/next/templates/init/lib/actions/media/delete-media-bulk.ts

@@ -1,16 +1,24 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
+import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { adminMedia } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
 import { inArray } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { DeleteMediaBulkResult } from './types'
 import { mediaCacheTags } from './types'
 
 export async function deleteMediaBulk(ids: string[]): Promise<DeleteMediaBulkResult> {
+  const actor = await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+
   if (ids.length === 0) return { success: true, deletedCount: 0 }
 
   try {
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
+    const mediaRows = await db.select().from(adminMedia).where(inArray(adminMedia.id, ids))
     const deletedRows = await db
       .delete(adminMedia)
       .where(inArray(adminMedia.id, ids))
@@ -19,6 +27,21 @@ export async function deleteMediaBulk(ids: string[]): Promise<DeleteMediaBulkRes
     for (const id of ids) {
       updateTag(mediaCacheTags.byId(id))
     }
+    for (const media of mediaRows) {
+      runAdminEventHooks({
+        category: 'media',
+        action: 'delete',
+        targetType: 'media',
+        targetId: media.id,
+        targetLabel: media.filename,
+        user: actor,
+        timestamp: now,
+        sourceType: 'admin_ui' as const,
+        changedFields: [],
+        metadata: { contentType: media.contentType, bulk: true },
+        ...auditRequestMetadata
+      })
+    }
     return { success: true, deletedCount: deletedRows.length }
   } catch (error) {
     return {

package/dist/assets/adapters/next/templates/init/lib/actions/media/delete-media.ts

@@ -1,17 +1,38 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
+import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { adminMedia } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
 import { eq } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { DeleteMediaResult } from './types'
 import { mediaCacheTags } from './types'
 
 export async function deleteMedia(id: string): Promise<DeleteMediaResult> {
+  const actor = await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+
   try {
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
+    const [deletedMedia] = await db.select().from(adminMedia).where(eq(adminMedia.id, id)).limit(1)
     await db.delete(adminMedia).where(eq(adminMedia.id, id))
     updateTag(mediaCacheTags.all)
     updateTag(mediaCacheTags.byId(id))
+    runAdminEventHooks({
+      category: 'media',
+      action: 'delete',
+      targetType: 'media',
+      targetId: id,
+      targetLabel: deletedMedia?.filename ?? id,
+      user: actor,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: [],
+      metadata: { contentType: deletedMedia?.contentType ?? null },
+      ...auditRequestMetadata
+    })
     return { success: true }
   } catch (error) {
     return {

package/dist/assets/adapters/next/templates/init/lib/actions/media/update-media.ts

@@ -1,8 +1,11 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { getSession } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { adminMedia } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
+import { getChangedFieldNames } from '@admin/utils/audit/audit'
 import { eq } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { UpdateMediaResult } from './types'
@@ -15,16 +18,35 @@ export async function updateMedia(
   try {
     const session = await getSession()
     const actorId = session?.user?.id ?? null
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
+    const [previousMedia] = await db.select().from(adminMedia).where(eq(adminMedia.id, id)).limit(1)
     await db
       .update(adminMedia)
       .set({
         ...data,
-        updatedAt: new Date().toISOString(),
+        updatedAt: now,
         updatedBy: actorId
       })
       .where(eq(adminMedia.id, id))
     updateTag(mediaCacheTags.all)
     updateTag(mediaCacheTags.byId(id))
+    runAdminEventHooks({
+      category: 'media',
+      action: 'update',
+      targetType: 'media',
+      targetId: id,
+      targetLabel: previousMedia?.filename ?? id,
+      user: session?.user ?? null,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: getChangedFieldNames(
+        previousMedia as unknown as Record<string, unknown>,
+        data as Record<string, unknown>
+      ),
+      metadata: { contentType: previousMedia?.contentType ?? null },
+      ...auditRequestMetadata
+    })
     return { success: true }
   } catch (error) {
     return {

package/dist/assets/adapters/next/templates/init/lib/actions/profile/update-email.ts

@@ -1,9 +1,11 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { auth } from '@admin/auth'
 import { getSession } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { user } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
 import { eq } from 'drizzle-orm'
 import { headers } from 'next/headers'
 import { invalidateUsersCache } from './invalidate-users-cache'
@@ -19,6 +21,8 @@ export async function updateEmail(
       return { success: false, error: 'Not authenticated' }
     }
 
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
     const verification = await auth.api
       .verifyPassword({
         body: { password: currentPassword },
@@ -46,6 +50,19 @@ export async function updateEmail(
       .where(eq(user.id, session.user.id))
 
     await invalidateUsersCache()
+    runAdminEventHooks({
+      category: 'auth',
+      action: 'update',
+      targetType: 'user',
+      targetId: session.user.id,
+      targetLabel: session.user.email,
+      user: session.user,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: ['email'],
+      metadata: { operation: 'email_change' },
+      ...auditRequestMetadata
+    })
 
     return { success: true }
   } catch (error) {

package/dist/assets/adapters/next/templates/init/lib/actions/upload/upload-files.ts

@@ -2,6 +2,7 @@
 
 import { createMedia } from '@admin/actions/media'
 import { saveUpload } from '@admin/actions/storage'
+import { requireRole, UserRole } from '@admin/auth/middleware'
 import type { UploadedFile } from '@admin/types'
 import type { FileValidationConfig, UploadResult } from './types'
 
@@ -9,6 +10,8 @@ export async function uploadFiles(
   formData: FormData,
   config: FileValidationConfig = {}
 ): Promise<UploadResult> {
+  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+
   try {
     const files: File[] = []
     const prefix = formData.get('prefix')?.toString() || 'uploads'

package/dist/assets/adapters/next/templates/init/lib/actions/upload/upload-media-from-url.ts

@@ -2,6 +2,7 @@
 
 import { createMedia } from '@admin/actions/media'
 import { saveUpload } from '@admin/actions/storage'
+import { requireRole, UserRole } from '@admin/auth/middleware'
 import {
   DEFAULT_REMOTE_ACCEPT,
   getRemoteFilename,
@@ -14,6 +15,8 @@ export async function uploadMediaFromUrl(
   mediaUrl: string,
   { prefix = 'media', accept = DEFAULT_REMOTE_ACCEPT, maxSizeInBytes }: RemoteUploadOptions = {}
 ): Promise<UploadResult> {
+  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+
   try {
     const url = new URL(mediaUrl)
     if (!['http:', 'https:'].includes(url.protocol)) {

package/dist/assets/adapters/next/templates/init/lib/actions/users/create-user.ts

@@ -1,18 +1,23 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { auth } from '@admin/auth'
 import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { user } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
+import { getTouchedFieldNames } from '@admin/utils/audit/audit'
 import { eq } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { CreateUserInput, CreateUserResult } from './types'
 import { usersCacheTags } from './types'
 
 export async function createUser(input: CreateUserInput): Promise<CreateUserResult> {
-  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+  const actor = await requireRole([UserRole.ADMIN, UserRole.EDITOR])
 
   try {
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
     const result = await auth.api.signUpEmail({
       body: {
         email: input.email,
@@ -33,6 +38,19 @@ export async function createUser(input: CreateUserInput): Promise<CreateUserResu
       })
       .where(eq(user.id, result.user.id))
     updateTag(usersCacheTags.all)
+    runAdminEventHooks({
+      category: 'user',
+      action: 'create',
+      targetType: 'user',
+      targetId: result.user.id,
+      targetLabel: result.user.email,
+      user: actor,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: getTouchedFieldNames(input as unknown as Record<string, unknown>),
+      metadata: { role: input.role },
+      ...auditRequestMetadata
+    })
 
     return {
       success: true,

package/dist/assets/adapters/next/templates/init/lib/actions/users/delete-user.ts

@@ -1,19 +1,41 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { user } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
 import { eq } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { DeleteUserResult } from './types'
 import { usersCacheTags } from './types'
 
 export async function deleteUser(userId: string): Promise<DeleteUserResult> {
-  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+  const actor = await requireRole([UserRole.ADMIN, UserRole.EDITOR])
 
   try {
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
+    const [deletedUser] = await db
+      .select({ email: user.email, name: user.name, role: user.role })
+      .from(user)
+      .where(eq(user.id, userId))
+      .limit(1)
     await db.delete(user).where(eq(user.id, userId))
     updateTag(usersCacheTags.all)
+    runAdminEventHooks({
+      category: 'user',
+      action: 'delete',
+      targetType: 'user',
+      targetId: userId,
+      targetLabel: deletedUser?.email ?? userId,
+      user: actor,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: [],
+      metadata: { role: deletedUser?.role ?? null },
+      ...auditRequestMetadata
+    })
     return { success: true }
   } catch (error) {
     return {

package/dist/assets/adapters/next/templates/init/lib/actions/users/update-user-role.ts

@@ -1,8 +1,10 @@
 'use server'
 
+import { getAuditRequestMetadata } from '@admin/actions/audit/request-metadata'
 import { requireRole, UserRole } from '@admin/auth/middleware'
 import db from '@admin/db'
 import { user } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
 import { eq } from 'drizzle-orm'
 import { updateTag } from 'next/cache'
 import type { UpdateUserRoleResult } from './types'
@@ -12,11 +14,31 @@ export async function updateUserRole(
   userId: string,
   role: UserRole
 ): Promise<UpdateUserRoleResult> {
-  await requireRole([UserRole.ADMIN, UserRole.EDITOR])
+  const actor = await requireRole([UserRole.ADMIN, UserRole.EDITOR])
 
   try {
+    const now = new Date().toISOString()
+    const auditRequestMetadata = await getAuditRequestMetadata()
+    const [previousUser] = await db
+      .select({ email: user.email, name: user.name, role: user.role })
+      .from(user)
+      .where(eq(user.id, userId))
+      .limit(1)
     await db.update(user).set({ role, updatedAt: new Date() }).where(eq(user.id, userId))
     updateTag(usersCacheTags.all)
+    runAdminEventHooks({
+      category: 'user',
+      action: 'update',
+      targetType: 'user',
+      targetId: userId,
+      targetLabel: previousUser?.email ?? userId,
+      user: actor,
+      timestamp: now,
+      sourceType: 'admin_ui' as const,
+      changedFields: previousUser?.role === role ? [] : ['role'],
+      metadata: { operation: 'role_update' },
+      ...auditRequestMetadata
+    })
 
     return { success: true }
   } catch (error) {

package/dist/assets/adapters/next/templates/init/lib/db/core/schema.ts

@@ -129,6 +129,55 @@ export const entityVersions = pgTable(
   ]
 )
 
+// ============================================================================
+// Audit Log
+// ============================================================================
+
+export const auditLog = pgTable(
+  'AuditLog',
+  {
+    id: uuid().defaultRandom().primaryKey().notNull(),
+    category: varchar('category', { length: 50 }).notNull(),
+    action: varchar('action', { length: 50 }).notNull(),
+    targetType: varchar('target_type', { length: 100 }).notNull(),
+    targetId: text('target_id'),
+    targetLabel: text('target_label'),
+    actorUserId: text('actor_user_id').references(() => user.id, {
+      onDelete: 'set null'
+    }),
+    actorEmail: text('actor_email'),
+    actorName: text('actor_name'),
+    actorRole: text('actor_role'),
+    sourceType: varchar('source_type', { length: 50 }).notNull().default('server_action'),
+    ipAddress: varchar('ip_address', { length: 100 }),
+    userAgent: varchar('user_agent', { length: 500 }),
+    changedFields: text('changed_fields').array().notNull().default(sql`ARRAY[]::text[]`),
+    metadata: jsonb('metadata'),
+    createdAt: timestamp('created_at', { precision: 3, mode: 'string' })
+      .default(sql`CURRENT_TIMESTAMP`)
+      .notNull()
+  },
+  (table) => [
+    index('AuditLog_createdAt_idx').using('btree', table.createdAt.desc().nullsLast()),
+    index('AuditLog_category_action_createdAt_idx').using(
+      'btree',
+      table.category.asc().nullsLast().op('text_ops'),
+      table.action.asc().nullsLast().op('text_ops'),
+      table.createdAt.desc().nullsLast()
+    ),
+    index('AuditLog_target_idx').using(
+      'btree',
+      table.targetType.asc().nullsLast().op('text_ops'),
+      table.targetId.asc().nullsLast().op('text_ops')
+    ),
+    index('AuditLog_actor_createdAt_idx').using(
+      'btree',
+      table.actorUserId.asc().nullsLast().op('text_ops'),
+      table.createdAt.desc().nullsLast()
+    )
+  ]
+)
+
 // ============================================================================
 // Media Library
 // ============================================================================

package/dist/assets/adapters/next/templates/init/lib/lifecycle-hooks/index.ts

@@ -3,11 +3,16 @@ import './register.local'
 
 export {
   getLifecycleHookSummary,
+  getRegisteredAdminHooks,
   getRegisteredHooks,
+  registerAdminHook,
   registerHook
 } from './registry'
-export { runAfterHooks, runBeforeHooks } from './runner'
+export { runAdminEventHooks, runAfterHooks, runBeforeHooks } from './runner'
 export type {
+  AdminEventContext,
+  AdminEventDescriptor,
+  AdminEventHookHandler,
   AfterLifecycleHookEvent,
   AfterLifecycleHookHandler,
   BeforeLifecycleHookEvent,

package/dist/assets/adapters/next/templates/init/lib/lifecycle-hooks/register.ts

@@ -7,3 +7,6 @@
 // registerHook('posts', 'afterCreate', async ({ user, entityId, data }) => {
 //   console.log('Post created', { userId: user.id, entityId, data })
 // })
+import { registerAuditHooks } from '@admin/actions/audit/register'
+
+registerAuditHooks()

package/dist/assets/adapters/next/templates/init/lib/lifecycle-hooks/registry.ts

@@ -1,8 +1,17 @@
-import type { LifecycleHookEvent, LifecycleHookHandler } from './types'
+import type {
+  AdminEventDescriptor,
+  AdminEventHookHandler,
+  LifecycleHookEvent,
+  LifecycleHookHandler
+} from './types'
 
 type HookBuckets = Map<LifecycleHookEvent, LifecycleHookHandler<LifecycleHookEvent>[]>
 
 const lifecycleHooks = new Map<string, HookBuckets>()
+const adminEventHooks: Array<{
+  descriptor: AdminEventDescriptor
+  handler: AdminEventHookHandler
+}> = []
 
 export function registerHook<Event extends LifecycleHookEvent>(
   entityType: string,
@@ -53,3 +62,29 @@ export function getLifecycleHookSummary(): Record<
 
   return summary
 }
+
+export function registerAdminHook(
+  descriptor: AdminEventDescriptor,
+  handler: AdminEventHookHandler
+): () => void {
+  adminEventHooks.push({ descriptor, handler })
+
+  return () => {
+    const index = adminEventHooks.findIndex((entry) => entry.handler === handler)
+    if (index >= 0) {
+      adminEventHooks.splice(index, 1)
+    }
+  }
+}
+
+export function getRegisteredAdminHooks(
+  event: Required<AdminEventDescriptor>
+): AdminEventHookHandler[] {
+  return adminEventHooks
+    .filter(({ descriptor }) => {
+      if (descriptor.category && descriptor.category !== event.category) return false
+      if (descriptor.action && descriptor.action !== event.action) return false
+      return true
+    })
+    .map(({ handler }) => handler)
+}