includio-cms 0.1.0 → 0.1.2

package/dist/admin/remote/invite.js

@@ -0,0 +1,44 @@
+import { db } from '../../server/db/index.js';
+import { invitation, user } from '../../server/db/schema/auth-schema.js';
+import { eq, and, isNull, gt } from 'drizzle-orm';
+export async function createInvitation(email, role, createdBy) {
+    const token = crypto.randomUUID();
+    const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days
+    const id = crypto.randomUUID();
+    const [row] = await db
+        .insert(invitation)
+        .values({ id, email, role, token, expiresAt, createdBy })
+        .returning();
+    return row;
+}
+export async function getInvitationByToken(token) {
+    const [row] = await db
+        .select()
+        .from(invitation)
+        .where(and(eq(invitation.token, token), isNull(invitation.usedAt), gt(invitation.expiresAt, new Date())));
+    return row ?? null;
+}
+export async function markInvitationUsed(id) {
+    await db.update(invitation).set({ usedAt: new Date() }).where(eq(invitation.id, id));
+}
+export async function getPendingInvitations() {
+    return db
+        .select()
+        .from(invitation)
+        .where(and(isNull(invitation.usedAt), gt(invitation.expiresAt, new Date())))
+        .orderBy(invitation.createdAt);
+}
+export async function getInvitationById(id) {
+    const [row] = await db
+        .select()
+        .from(invitation)
+        .where(and(eq(invitation.id, id), isNull(invitation.usedAt), gt(invitation.expiresAt, new Date())));
+    return row ?? null;
+}
+export async function deleteInvitation(id) {
+    await db.delete(invitation).where(eq(invitation.id, id));
+}
+export async function checkEmailExists(email) {
+    const [row] = await db.select({ id: user.id }).from(user).where(eq(user.email, email)).limit(1);
+    return !!row;
+}

package/dist/admin/remote/middleware/auth.d.ts

@@ -1,5 +1,10 @@
 import type { Session, User } from 'better-auth';
+import type { UserRole } from '../../../types/roles.js';
 export declare function requireAuth(): {
     user: User;
     session: Session;
 };
+export declare function requireRole(...roles: UserRole[]): {
+    user: User;
+    session: Session;
+};

package/dist/admin/remote/middleware/auth.js

@@ -7,3 +7,10 @@ export function requireAuth() {
     }
     return { user: authLocals.user, session: authLocals.session };
 }
+export function requireRole(...roles) {
+    const { user, session } = requireAuth();
+    if (!roles.includes(user.role)) {
+        throw new Error('Forbidden');
+    }
+    return { user, session };
+}

package/dist/admin/utils/parseUserAgent.d.ts

@@ -0,0 +1,5 @@
+export declare function parseUserAgent(ua: string | null | undefined): {
+    browser: string;
+    os: string;
+    isMobile: boolean;
+};

package/dist/admin/utils/parseUserAgent.js

@@ -0,0 +1,26 @@
+export function parseUserAgent(ua) {
+    if (!ua)
+        return { browser: 'Unknown', os: 'Unknown', isMobile: false };
+    const isMobile = /mobile|android|iphone|ipad/i.test(ua);
+    let browser = 'Unknown';
+    if (ua.includes('Firefox'))
+        browser = 'Firefox';
+    else if (ua.includes('Edg'))
+        browser = 'Edge';
+    else if (ua.includes('Chrome'))
+        browser = 'Chrome';
+    else if (ua.includes('Safari'))
+        browser = 'Safari';
+    let os = 'Unknown';
+    if (ua.includes('iPhone') || ua.includes('iPad'))
+        os = 'iOS';
+    else if (ua.includes('Android'))
+        os = 'Android';
+    else if (ua.includes('Windows'))
+        os = 'Windows';
+    else if (ua.includes('Mac'))
+        os = 'macOS';
+    else if (ua.includes('Linux'))
+        os = 'Linux';
+    return { browser, os, isMobile };
+}

package/dist/components/ui/input-group/input-group-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const InputGroupInput: import("svelte").Component<(Omit<import("svelte/e
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "email" | "checkbox" | "hidden" | (string & {}) | "password" | "reset" | "search" | "time" | "color" | "button" | "submit" | "tel" | "datetime-local" | "month" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "email" | "checkbox" | "hidden" | "password" | (string & {}) | "reset" | "search" | "time" | "color" | "button" | "submit" | "tel" | "datetime-local" | "month" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/components/ui/sidebar/sidebar-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const SidebarInput: import("svelte").Component<(Omit<import("svelte/elem
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "email" | "checkbox" | "hidden" | (string & {}) | "password" | "reset" | "search" | "time" | "color" | "button" | "submit" | "tel" | "datetime-local" | "month" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "email" | "checkbox" | "hidden" | "password" | (string & {}) | "reset" | "search" | "time" | "color" | "button" | "submit" | "tel" | "datetime-local" | "month" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/core/cms.d.ts

@@ -12,7 +12,7 @@ export declare class CMS implements ICMS {
     private config;
     databaseAdapter: DatabaseAdapter;
     filesAdapter: FilesAdapter;
-    emailAdapter: EmailAdapter;
+    emailAdapter: EmailAdapter | null;
     aiAdapter: AIAdapter | null;
     collections: Record<string, CollectionConfigWithType>;
     singles: Record<string, SingleConfigWithType>;

package/dist/core/cms.js

@@ -14,7 +14,7 @@ export class CMS {
         this.config = config;
         this.databaseAdapter = config.db;
         this.filesAdapter = config.files;
-        this.emailAdapter = config.email;
+        this.emailAdapter = config.email ?? null;
         this.aiAdapter = config.ai || null;
         this.mediaConfig = config.media || {};
         this.collections = {};

package/dist/core/fields/fieldSchemaToTs.js

@@ -74,10 +74,24 @@ export function generateZodSchemaFromField(field, languages, options = {
                 ? z.discriminatedUnion('slug', schemas)
                 : schemas[0];
             let schema = z.array(itemSchema);
-            if (field.minItems !== undefined)
-                schema = schema.min(field.minItems, { message: `Minimum ${field.minItems} elementów` });
-            if (field.maxItems !== undefined)
-                schema = schema.max(field.maxItems, { message: `Maksimum ${field.maxItems} elementów` });
+            if (field.minItems !== undefined &&
+                field.maxItems !== undefined &&
+                field.minItems === field.maxItems &&
+                field.minItems > 0) {
+                schema = schema.length(field.minItems, {
+                    message: `Wymagane dokładnie ${field.minItems} elementów`
+                });
+            }
+            else {
+                if (field.minItems !== undefined)
+                    schema = schema.min(field.minItems, {
+                        message: `Minimum ${field.minItems} elementów`
+                    });
+                if (field.maxItems !== undefined)
+                    schema = schema.max(field.maxItems, {
+                        message: `Maksimum ${field.maxItems} elementów`
+                    });
+            }
             return schema.default([]); // Default to empty array if not required
         }
         case 'slug': {

package/dist/core/server/forms/submissions/operations/create.js

@@ -16,7 +16,7 @@ export const createFormSubmission = async (options) => {
             ip,
             userAgent
         });
-        if (config.notificationEmailAddresses && config.notificationEmailAddresses.length > 0) {
+        if (config.notificationEmailAddresses && config.notificationEmailAddresses.length > 0 && getCMS().emailAdapter) {
             await getCMS().emailAdapter.sendMail({
                 to: config.notificationEmailAddresses,
                 subject: `New submission for form "${getLocalizedLabel(config.label, 'en')}"`,

package/dist/email-nodemailer/index.d.ts

@@ -5,6 +5,7 @@ interface Options {
     transportOptions: {
         host: string;
         port: number;
+        secure?: boolean;
         auth: {
             user: string;
             pass: string;

package/dist/server/auth.d.ts

@@ -1167,14 +1167,14 @@ export declare const auth: import("better-auth", { with: { "resolution-mode": "r
                 <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
                     body: ({
                         permission: {
-                            readonly user?: ("update" | "delete" | "list" | "get" | "create" | "set-role" | "ban" | "impersonate" | "set-password")[] | undefined;
-                            readonly session?: ("delete" | "list" | "revoke")[] | undefined;
+                            readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
+                            readonly session?: ("list" | "delete" | "revoke")[] | undefined;
                         };
                         permissions?: never;
                     } | {
                         permissions: {
-                            readonly user?: ("update" | "delete" | "list" | "get" | "create" | "set-role" | "ban" | "impersonate" | "set-password")[] | undefined;
-                            readonly session?: ("delete" | "list" | "revoke")[] | undefined;
+                            readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
+                            readonly session?: ("list" | "delete" | "revoke")[] | undefined;
                         };
                         permission?: never;
                     }) & {
@@ -1270,14 +1270,14 @@ export declare const auth: import("better-auth", { with: { "resolution-mode": "r
                         $Infer: {
                             body: ({
                                 permission: {
-                                    readonly user?: ("update" | "delete" | "list" | "get" | "create" | "set-role" | "ban" | "impersonate" | "set-password")[] | undefined;
-                                    readonly session?: ("delete" | "list" | "revoke")[] | undefined;
+                                    readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
+                                    readonly session?: ("list" | "delete" | "revoke")[] | undefined;
                                 };
                                 permissions?: never;
                             } | {
                                 permissions: {
-                                    readonly user?: ("update" | "delete" | "list" | "get" | "create" | "set-role" | "ban" | "impersonate" | "set-password")[] | undefined;
-                                    readonly session?: ("delete" | "list" | "revoke")[] | undefined;
+                                    readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
+                                    readonly session?: ("list" | "delete" | "revoke")[] | undefined;
                                 };
                                 permission?: never;
                             }) & {

package/dist/server/db/schema/auth-schema.d.ts

@@ -689,6 +689,149 @@ export declare const verification: import("drizzle-orm/pg-core/table", { with: {
     };
     dialect: "pg";
 }>;
+export declare const invitation: import("drizzle-orm/pg-core/table", { with: { "resolution-mode": "require" } }).PgTableWithColumns<{
+    name: "invitation";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "id";
+            tableName: "invitation";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        email: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "email";
+            tableName: "invitation";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        role: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "role";
+            tableName: "invitation";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        token: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "token";
+            tableName: "invitation";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "expires_at";
+            tableName: "invitation";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "created_at";
+            tableName: "invitation";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdBy: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "created_by";
+            tableName: "invitation";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        usedAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "used_at";
+            tableName: "invitation";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
 export declare const userRelations: import("drizzle-orm/relations", { with: { "resolution-mode": "require" } }).Relations<"user", {
     sessions: import("drizzle-orm/relations", { with: { "resolution-mode": "require" } }).Many<"session">;
     accounts: import("drizzle-orm/relations", { with: { "resolution-mode": "require" } }).Many<"account">;

package/dist/server/db/schema/auth-schema.js

@@ -61,6 +61,18 @@ export const verification = pgTable('verification', {
         .$onUpdate(() => /* @__PURE__ */ new Date())
         .notNull()
 }, (table) => [index('verification_identifier_idx').on(table.identifier)]);
+export const invitation = pgTable('invitation', {
+    id: text('id').primaryKey(),
+    email: text('email').notNull(),
+    role: text('role').notNull().default('user'),
+    token: text('token').notNull().unique(),
+    expiresAt: timestamp('expires_at').notNull(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    createdBy: text('created_by')
+        .notNull()
+        .references(() => user.id, { onDelete: 'cascade' }),
+    usedAt: timestamp('used_at')
+}, (table) => [index('invitation_token_idx').on(table.token)]);
 export const userRelations = relations(user, ({ many }) => ({
     sessions: many(session),
     accounts: many(account)

package/dist/sveltekit/server/handle.js

@@ -8,6 +8,8 @@ const adminGuard = async ({ event, resolve }) => {
     if (event.url.pathname.startsWith('/admin') || event.url.pathname.startsWith('/api/admin')) {
         if (!event.url.pathname.startsWith('/admin/login') &&
             !event.url.pathname.startsWith('/api/admin/login') &&
+            !event.url.pathname.startsWith('/admin/accept-invite') &&
+            !event.url.pathname.startsWith('/admin/api/accept-invite') &&
             (!user || !session)) {
             setFlash({
                 message: 'You must be logged in to access the admin panel.',
@@ -18,6 +20,17 @@ const adminGuard = async ({ event, resolve }) => {
                 headers: { location: '/admin/login' }
             });
         }
+        // Admin-only routes
+        if (event.url.pathname.startsWith('/admin/users') && user && user.role !== 'admin') {
+            setFlash({
+                message: 'Insufficient permissions.',
+                type: 'error'
+            }, event);
+            return new Response(null, {
+                status: 303,
+                headers: { location: '/admin' }
+            });
+        }
     }
     if (event.url.pathname === '/admin/login' && user && session) {
         // If the user is already logged in, redirect to the admin dashboard

package/dist/types/cms.d.ts

@@ -18,7 +18,7 @@ export interface CMSConfig {
     forms?: FormConfig[];
     db: DatabaseAdapter;
     files: FilesAdapter;
-    email: EmailAdapter;
+    email?: EmailAdapter;
     plugins?: PluginConfig[];
     ai?: AIAdapter;
     media?: MediaConfig;
@@ -30,7 +30,7 @@ export interface ICMS {
     languages: Language[];
     databaseAdapter: DatabaseAdapter;
     filesAdapter: FilesAdapter;
-    emailAdapter: EmailAdapter;
+    emailAdapter: EmailAdapter | null;
     plugins: PluginConfig[];
     aiAdapter: AIAdapter | null;
     mediaConfig: MediaConfig;

package/dist/types/roles.d.ts

@@ -0,0 +1 @@
+export type UserRole = 'admin' | 'user';

package/dist/types/roles.js

@@ -0,0 +1 @@
+export {};

package/dist/updates/0.1.1/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;

package/dist/updates/0.1.1/index.js

@@ -0,0 +1,17 @@
+export const update = {
+    version: '0.1.1',
+    date: '2026-02-18',
+    description: 'Field constraint UI — visible limits, counters, and hints',
+    features: [
+        'Text fields: character counter (X / Y) with aria-live, destructive color at limit',
+        'Text fields: constraint hints (min/max chars, pattern format) in description',
+        'Text fields: native minlength/maxlength HTML attributes on input/textarea',
+        'Number fields: native min/max/step HTML attributes on input',
+        'Number fields: range and step hints in description',
+        'Array fields: items counter (X / Y) next to label when maxItems defined',
+        'Array fields: Add/Duplicate buttons disabled at maxItems limit',
+        'Array fields: fixed-length mode (minItems === maxItems) — pre-populated, reorder only'
+    ],
+    fixes: [],
+    breakingChanges: []
+};

package/dist/updates/0.1.2/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;

package/dist/updates/0.1.2/index.js

@@ -0,0 +1,36 @@
+export const update = {
+    version: '0.1.2',
+    date: '2026-02-18',
+    description: 'User management & RBAC',
+    features: [
+        'Role type system (admin/user) with UserRole type',
+        'RBAC middleware: requireRole() for server-side role checks',
+        'Admin users page: list, search, pagination via authClient.admin.listUsers',
+        'Create user dialog: email, password, name, role via authClient.admin.createUser',
+        'Edit user dialog: name, email, role with self-demotion protection',
+        'Delete user dialog with self-deletion protection',
+        'Route gating: /admin/users restricted to admin role',
+        'Sidebar gating: Users nav item visible only for admins',
+        'Auth client: adminClient() plugin added',
+        'CLI: addUser rewritten to use better-auth API with role prompt',
+        'Admin session management: view/revoke other users\' sessions',
+        'Email invitation system: invite users by email with role assignment',
+        'Accept invite page: public registration via invite token',
+        'Pending invitations list with cancel and resend support',
+        'Email adapter now optional in CMS config'
+    ],
+    fixes: [],
+    breakingChanges: [],
+    migration: `CREATE TABLE IF NOT EXISTS invitation (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL,
+  role TEXT NOT NULL DEFAULT 'user',
+  token TEXT NOT NULL UNIQUE,
+  expires_at TIMESTAMP NOT NULL,
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  created_by TEXT NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
+  used_at TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS invitation_token_idx ON invitation (token);`
+};

package/dist/updates/index.js

@@ -4,7 +4,9 @@ import { update as update0067 } from './0.0.67/index.js';
 import { update as update0068 } from './0.0.68/index.js';
 import { update as update0069 } from './0.0.69/index.js';
 import { update as update010 } from './0.1.0/index.js';
-export const updates = [update0065, update0066, update0067, update0068, update0069, update010];
+import { update as update011 } from './0.1.1/index.js';
+import { update as update012 } from './0.1.2/index.js';
+export const updates = [update0065, update0066, update0067, update0068, update0069, update010, update011, update012];
 export const getUpdatesFrom = (fromVersion) => {
     const fromParts = fromVersion.split('.').map(Number);
     return updates.filter((update) => {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "includio-cms",
-	"version": "0.1.0",
+	"version": "0.1.2",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build && npm run prepack",
@@ -20,7 +20,7 @@
 		"db:studio": "drizzle-kit studio",
 		"storybook": "storybook dev -p 6006",
 		"build-storybook": "storybook build",
-		"create:user": "tsx src/lib/core/server/auth/scripts/createUser.ts",
+		"create:user": "tsx cli/addUser/index.ts",
 		"cli": "tsx cli/init/index.ts",
 		"build:cli": "tsc cli/init/index.ts --outDir dist/cli/init --module commonjs --esModuleInterop",
 		"changelog": "tsx scripts/generate-changelog.ts",