sitero 0.0.1

package/dist/src/core/server/infrastructure/i18n/intor-config.js

@@ -0,0 +1,19 @@
+import { defineIntorConfig } from 'intor';
+import { CMS_LOCALES_ARRAY, CMS_DEFAULT_LOCALE } from '../../../../constants/cms-locale.js';
+import { EnUS } from './messages/en-US/index.js';
+import { ZhTW } from './messages/zh-TW/index.js';
+
+function createIntorConfig({ cookieName }) {
+  return defineIntorConfig({
+    id: "webcms-cms-server",
+    defaultLocale: CMS_DEFAULT_LOCALE,
+    supportedLocales: CMS_LOCALES_ARRAY,
+    cookie: { name: cookieName },
+    messages: {
+      "en-US": EnUS,
+      "zh-TW": ZhTW
+    }
+  });
+}
+
+export { createIntorConfig };

package/dist/src/core/server/infrastructure/i18n/messages/en-US/email.js

@@ -0,0 +1,7 @@
+const email = {
+  "forgot-password": { text: "You have requested to reset your password" },
+  "verify-email": { text: "Activate your admin account" },
+  "new-inquiry": { text: "New inquiry received" }
+};
+
+export { email };

package/dist/src/core/server/infrastructure/i18n/messages/en-US/error.js

@@ -0,0 +1,17 @@
+const error = {
+  unauthorized: "Unauthorized",
+  forbidden: "Forbidden",
+  "not-found": "Not found",
+  "internal-server-error": "Internal Server Error",
+  "credentials-incorrect": "Credentials incorrect",
+  "email-not-found": "Email not found",
+  "reset-password-token-invalid": "The password reset token is invalid. Please ensure you clicked the correct link from your email.",
+  "email-verify-token-invalid": "The email verify token is invalid. Please ensure you clicked the correct link from your email.",
+  "admins-destroy-forbidden": "Unable to delete this administrator",
+  "files-upload-already-exists": "The file already exists in the system. Please ensure you are not uploading the same file again.",
+  "files-destroy-is-locked": "This file is locked due to use by other resources. Please ensure it's not in use before deletion.",
+  "files-batch-destroy-no": "No files were deleted because some files are locked.",
+  "too-many-attempts": "Too many failed attempts. Please try again later."
+};
+
+export { error };

package/dist/src/core/server/infrastructure/i18n/messages/en-US/index.js

@@ -0,0 +1,8 @@
+import { email } from './email.js';
+import { error } from './error.js';
+import { ok } from './ok.js';
+import { validator } from './validator.js';
+
+const EnUS = { ok, error, email, validator };
+
+export { EnUS };

package/dist/src/core/server/infrastructure/i18n/messages/en-US/ok.js

@@ -0,0 +1,19 @@
+const ok = {
+  ok: "Successful",
+  "sign-in-ok": "Signed in successfully",
+  "sign-out-ok": "Signed out successfully",
+  "change-password-ok": "Password changed successfully",
+  "forgot-password-ok": "Password reset email sent successfully",
+  "reset-password-ok": "Password reset successfully",
+  "verify-email-ok": "You have successfully verified your email",
+  "email-unverified-ok": "Verification email sent successfully",
+  "store-ok": "Created successfully",
+  "destroy-ok": "Deleted successfully",
+  "update-ok": "Updated successfully",
+  "restore-ok": "Restored successfully",
+  "admins-store-ok": "Created successfully, please verify the email and activate this admin member",
+  "admins-update-email-ok": "Updated successfully, please verify the email and activate this admin member",
+  "files-batch-destroy-has-locked": "Deleted successfully, but some files could not be deleted because they are locked"
+};
+
+export { ok };

package/dist/src/core/server/infrastructure/i18n/messages/en-US/validator.js

@@ -0,0 +1,9 @@
+const validator = {
+  "password-confirm": "Passwords do not match",
+  unique: "already exists",
+  exist: "not exists",
+  bcp47: "Invalid locale format",
+  "og-locale": "Invalid OG locale format"
+};
+
+export { validator };

package/dist/src/core/server/infrastructure/i18n/messages/zh-TW/email.js

@@ -0,0 +1,7 @@
+const email = {
+  "forgot-password": { text: "\u60A8\u5DF2\u8ACB\u6C42\u91CD\u8A2D\u60A8\u7684\u5BC6\u78BC" },
+  "verify-email": { text: "\u555F\u7528\u60A8\u7684\u7BA1\u7406\u54E1\u5E33\u865F" },
+  "new-inquiry": { text: "\u6536\u5230\u65B0\u7684\u8AEE\u8A62\u8868\u55AE" }
+};
+
+export { email };

package/dist/src/core/server/infrastructure/i18n/messages/zh-TW/error.js

@@ -0,0 +1,17 @@
+const error = {
+  unauthorized: "\u672A\u6388\u6B0A",
+  forbidden: "\u7981\u6B62\u5B58\u53D6",
+  "not-found": "\u6307\u5B9A\u7684\u8CC7\u6E90\u4E0D\u5B58\u5728",
+  "internal-server-error": "\u5167\u90E8\u4F3A\u670D\u5668\u932F\u8AA4",
+  "credentials-incorrect": "\u8F38\u5165\u7684\u8CC7\u6599\u6709\u8AA4\uFF0C\u7121\u6CD5\u9A57\u8B49\u60A8\u7684\u8EAB\u4EFD",
+  "email-not-found": "\u627E\u4E0D\u5230\u6B64\u96FB\u5B50\u90F5\u4EF6",
+  "reset-password-token-invalid": "\u7121\u6548\u7684\u91CD\u8A2D\u5BC6\u78BC\u91D1\u9470\uFF0C\u8ACB\u78BA\u4FDD\u5F9E\u4FE1\u7BB1\u9EDE\u9078\u6B63\u78BA\u7684\u9023\u7D50",
+  "email-verify-token-invalid": "\u7121\u6548\u7684\u4FE1\u7BB1\u9A57\u8B49\u91D1\u9470\uFF0C\u8ACB\u78BA\u4FDD\u5F9E\u4FE1\u7BB1\u9EDE\u9078\u6B63\u78BA\u7684\u9023\u7D50",
+  "admins-destroy-forbidden": "\u7121\u6CD5\u522A\u9664\u6B64\u7BA1\u7406\u54E1",
+  "files-upload-already-exists": "\u6B64\u6A94\u6848\u5DF2\u7D93\u5B58\u5728\u65BC\u7CFB\u7D71\u4E2D\uFF0C\u8ACB\u78BA\u8A8D\u60A8\u4E26\u672A\u91CD\u8907\u4E0A\u50B3\u76F8\u540C\u6A94\u6848",
+  "files-destroy-is-locked": "\u6B64\u6A94\u6848\u56E0\u5176\u4ED6\u8CC7\u6E90\u4F7F\u7528\u4E2D\u800C\u88AB\u9396\u5B9A\uFF0C\u8ACB\u78BA\u8A8D\u672A\u88AB\u4F7F\u7528\u5F8C\u518D\u522A\u9664",
+  "files-batch-destroy-no": "\u6C92\u6709\u522A\u9664\u4EFB\u4F55\u6A94\u6848\uFF0C\u56E0\u70BA\u6709\u4E9B\u6A94\u6848\u88AB\u9396\u5B9A",
+  "too-many-attempts": "\u60A8\u5DF2\u5931\u6557\u592A\u591A\u6B21\uFF0C\u8ACB\u65BC\u7A0D\u5F8C\u518D\u8A66"
+};
+
+export { error };

package/dist/src/core/server/infrastructure/i18n/messages/zh-TW/index.js

@@ -0,0 +1,8 @@
+import { email } from './email.js';
+import { error } from './error.js';
+import { ok } from './ok.js';
+import { validator } from './validator.js';
+
+const ZhTW = { ok, error, email, validator };
+
+export { ZhTW };

package/dist/src/core/server/infrastructure/i18n/messages/zh-TW/ok.js

@@ -0,0 +1,19 @@
+const ok = {
+  ok: "\u6210\u529F",
+  "sign-in-ok": "\u767B\u5165\u6210\u529F",
+  "sign-out-ok": "\u767B\u51FA\u6210\u529F",
+  "change-password-ok": "\u5BC6\u78BC\u66F4\u6539\u6210\u529F",
+  "forgot-password-ok": "\u91CD\u8A2D\u5BC6\u78BC\u4FE1\u5DF2\u6210\u529F\u5BC4\u51FA",
+  "reset-password-ok": "\u5BC6\u78BC\u91CD\u8A2D\u6210\u529F",
+  "verify-email-ok": "\u60A8\u5DF2\u6210\u529F\u9A57\u8B49\u60A8\u7684\u96FB\u5B50\u4FE1\u7BB1",
+  "email-unverified-ok": "\u9A57\u8B49\u4FE1\u5DF2\u6210\u529F\u5BC4\u51FA",
+  "store-ok": "\u5EFA\u7ACB\u6210\u529F",
+  "destroy-ok": "\u522A\u9664\u6210\u529F",
+  "update-ok": "\u66F4\u65B0\u6210\u529F",
+  "restore-ok": "\u5FA9\u539F\u6210\u529F",
+  "admins-store-ok": "\u5EFA\u7ACB\u6210\u529F\uFF0C\u8ACB\u9A57\u8B49\u96FB\u5B50\u90F5\u4EF6\u4E26\u555F\u7528\u6B64\u7BA1\u7406\u54E1",
+  "admins-update-email-ok": "\u66F4\u65B0\u6210\u529F\uFF0C\u8ACB\u9A57\u8B49\u96FB\u5B50\u90F5\u4EF6\u4E26\u555F\u7528\u6B64\u7BA1\u7406\u54E1",
+  "files-batch-destroy-has-locked": "\u522A\u9664\u6210\u529F\uFF0C\u4F46\u6709\u4E9B\u6A94\u6848\u56E0\u70BA\u88AB\u9396\u5B9A\u7121\u6CD5\u522A\u9664"
+};
+
+export { ok };

package/dist/src/core/server/infrastructure/i18n/messages/zh-TW/validator.js

@@ -0,0 +1,9 @@
+const validator = {
+  "password-confirm": "\u5BC6\u78BC\u8207\u78BA\u8A8D\u5BC6\u78BC\u4E0D\u4E00\u81F4",
+  unique: "\u5DF2\u7D93\u5B58\u5728",
+  exist: "\u4E0D\u5B58\u5728",
+  bcp47: "\u8A9E\u8A00\u4EE3\u78BC\u683C\u5F0F\u7121\u6548",
+  "og-locale": "OG \u8A9E\u8A00\u4EE3\u78BC\u683C\u5F0F\u7121\u6548"
+};
+
+export { validator };

package/dist/src/core/server/infrastructure/jwt/jwt-service.js

@@ -0,0 +1,37 @@
+import jwt from 'jsonwebtoken';
+
+function createJwtService({
+  defaultSecret,
+  ...options
+}) {
+  function sign({
+    payload = {},
+    secret = defaultSecret,
+    expiresIn = 60 * 60
+  }) {
+    return jwt.sign(payload, secret, {
+      algorithm: "HS256",
+      expiresIn,
+      ...options
+    });
+  }
+  function verify({
+    token,
+    secret = defaultSecret
+  }) {
+    const payload = jwt.verify(token, secret, {
+      algorithms: ["HS256"],
+      ...options
+    });
+    if (typeof payload === "string") {
+      throw new TypeError("Invalid JWT payload");
+    }
+    return payload;
+  }
+  return {
+    sign,
+    verify
+  };
+}
+
+export { createJwtService };

package/dist/src/core/server/infrastructure/storage/object-storage/object-storage-service.js

@@ -0,0 +1,76 @@
+import { CopyObjectCommand, DeleteObjectCommand, PutObjectCommand } from '@aws-sdk/client-s3';
+import { createObjectKey } from '../utils.js';
+
+function createObjectStorageService({
+  client,
+  bucketName,
+  logger
+}) {
+  async function upload({
+    blobFile,
+    folderKey = ""
+  }) {
+    const key = createObjectKey({
+      filename: blobFile.name,
+      mimeType: blobFile.type,
+      folderKey
+    });
+    try {
+      const buffer = Buffer.from(await blobFile.arrayBuffer());
+      await client.send(
+        new PutObjectCommand({
+          Bucket: bucketName,
+          Key: key,
+          Body: buffer,
+          ContentType: blobFile.type || void 0
+        })
+      );
+      logger.debug("Upload success", { key });
+      return key;
+    } catch (error) {
+      logger.error("Upload failed", { key, error });
+      throw error;
+    }
+  }
+  async function remove({ key }) {
+    try {
+      await client.send(
+        new DeleteObjectCommand({
+          Bucket: bucketName,
+          Key: key
+        })
+      );
+      logger.debug("Object removed", { key });
+    } catch (error) {
+      logger.error("Remove failed", { key, error });
+      throw error;
+    }
+  }
+  async function move({ fromKey, toKey }) {
+    if (fromKey === toKey) {
+      logger.debug("Move skipped (same key)", { key: fromKey });
+      return;
+    }
+    try {
+      await client.send(
+        new CopyObjectCommand({
+          Bucket: bucketName,
+          CopySource: `${bucketName}/${encodeURIComponent(fromKey)}`,
+          Key: toKey
+        })
+      );
+      await remove({ key: fromKey });
+      logger.debug("Object moved", { fromKey, toKey });
+    } catch (error) {
+      logger.error("Move failed", { fromKey, toKey, error });
+      throw error;
+    }
+  }
+  return {
+    upload,
+    remove,
+    move
+  };
+}
+
+export { createObjectStorageService };

package/dist/src/core/server/infrastructure/storage/sftp/sftp-pool.js

@@ -0,0 +1,53 @@
+import { createPool } from 'generic-pool';
+import SFTPClient from 'ssh2-sftp-client';
+
+const createSftpPool = ({
+  sftpClientOptions,
+  logger
+}) => {
+  return createPool(
+    {
+      create: async () => {
+        const client = new SFTPClient();
+        try {
+          await client.connect({
+            readyTimeout: 2e4,
+            keepaliveInterval: 1e4,
+            keepaliveCountMax: 3,
+            ...sftpClientOptions
+          });
+          return client;
+        } catch (error) {
+          logger.error("SFTP connect failed", { error });
+          throw error;
+        }
+      },
+      validate: async (client) => {
+        try {
+          await client.realPath("/");
+          return true;
+        } catch {
+          logger.debug("SFTP session invalid, removing from pool");
+          return false;
+        }
+      },
+      destroy: async (client) => {
+        try {
+          await client.end();
+        } catch (error) {
+          logger.error("SFTP destroy failed", { error });
+        }
+      }
+    },
+    {
+      max: 3,
+      min: 0,
+      idleTimeoutMillis: 6e4,
+      acquireTimeoutMillis: 1e4,
+      evictionRunIntervalMillis: 3e4,
+      testOnBorrow: true
+    }
+  );
+};
+
+export { createSftpPool };

package/dist/src/core/server/infrastructure/storage/sftp/sftp-service.js

@@ -0,0 +1,74 @@
+import path from 'node:path/posix';
+import { createObjectKey } from '../utils.js';
+
+function createSftpService({
+  sftpPool,
+  basePath,
+  logger
+}) {
+  async function upload({
+    blobFile,
+    folderKey = ""
+  }) {
+    const key = createObjectKey({
+      filename: blobFile.name,
+      mimeType: blobFile.type,
+      folderKey
+    });
+    const fullPath = path.join(basePath, key);
+    const client = await sftpPool.acquire();
+    try {
+      const buffer = Buffer.from(await blobFile.arrayBuffer());
+      await client.put(buffer, fullPath);
+      logger.debug("SFTP upload success", { key });
+      return key;
+    } catch (error) {
+      logger.error("SFTP upload failed", { key, error });
+      throw error;
+    } finally {
+      await sftpPool.release(client);
+    }
+  }
+  async function remove({ key }) {
+    const fullPath = path.join(basePath, key);
+    const client = await sftpPool.acquire();
+    try {
+      await client.delete(fullPath);
+      logger.debug("SFTP object removed", { key });
+    } catch (error) {
+      if (error instanceof Error && /no such file/i.test(error.message)) {
+        logger.debug("SFTP remove skipped (not found)", { key });
+        return;
+      }
+      logger.error("SFTP remove failed", { key, error });
+      throw error;
+    } finally {
+      await sftpPool.release(client);
+    }
+  }
+  async function move({ fromKey, toKey }) {
+    if (fromKey === toKey) {
+      logger.debug("SFTP move skipped (same key)", { key: fromKey });
+      return;
+    }
+    const fromPath = path.join(basePath, fromKey);
+    const toPath = path.join(basePath, toKey);
+    const client = await sftpPool.acquire();
+    try {
+      await client.rename(fromPath, toPath);
+      logger.debug("SFTP object moved", { fromKey, toKey });
+    } catch (error) {
+      logger.error("SFTP move failed", { fromKey, toKey, error });
+      throw error;
+    } finally {
+      await sftpPool.release(client);
+    }
+  }
+  return {
+    upload,
+    remove,
+    move
+  };
+}
+
+export { createSftpService };

package/dist/src/core/server/infrastructure/storage/utils.js

@@ -0,0 +1,23 @@
+import path from 'node:path/posix';
+import { ulid } from 'ulid';
+import { mimeToExtension } from '../../../../shared/blob-file/mime-to-extension.js';
+import 'mime-types';
+import 'clsx';
+import 'tailwind-merge';
+
+function createObjectKey({
+  filename,
+  mimeType,
+  folderKey = ""
+}) {
+  const extensionFromFilename = path.extname(filename ?? "").toLowerCase();
+  const extensionFromMime = !extensionFromFilename && mimeType ? `.${mimeToExtension(mimeType)}` : "";
+  const extension = extensionFromFilename || extensionFromMime;
+  const normalizedFolder = folderKey.replace(/^\/+/, "").replace(/\/+$/, "");
+  const id = ulid();
+  const filenameWithId = id + extension;
+  if (!normalizedFolder) return filenameWithId;
+  return path.join(normalizedFolder, filenameWithId);
+}
+
+export { createObjectKey };

package/dist/src/core/server/infrastructure/zod/rules/bcp47.js

@@ -0,0 +1,12 @@
+function bcp47(locale) {
+  if (typeof locale !== "string") return false;
+  const BCP47_REGEX = new RegExp(
+    "^[a-zA-Z]{2,3}(?:-[A-Z][a-z]{3})?" + // optional region
+    String.raw`(?:-(?:[A-Z]{2}|\d{3}))?` + // optional variants
+    String.raw`(?:-(?:[a-zA-Z0-9]{5,8}|\d[a-zA-Z0-9]{3}))*` + // optional extensions
+    "(?:-(?:[0-9A-WY-Za-wy-z]-[a-zA-Z0-9]{2,8}(?:-[a-zA-Z0-9]{2,8})*))*(?:-x(?:-[a-zA-Z0-9]{1,8})+)?$"
+  );
+  return BCP47_REGEX.test(locale);
+}
+
+export { bcp47 };

package/dist/src/core/server/infrastructure/zod/rules/exist.js

@@ -0,0 +1,24 @@
+function createExist(prisma) {
+  return async function exist(value, options) {
+    if (!value) return false;
+    const column = options.column || "id";
+    const query = `
+    SELECT COUNT(*) AS count 
+    FROM ${options.table} 
+    WHERE ${column} = $1
+  `;
+    try {
+      const result = await prisma.$queryRawUnsafe(
+        query,
+        value
+      );
+      const count = Number(result[0]?.count || 0);
+      return count > 0;
+    } catch (error) {
+      console.error("Exist check failed:", error);
+      return false;
+    }
+  };
+}
+
+export { createExist };

package/dist/src/core/server/infrastructure/zod/rules/og-locale.js

@@ -0,0 +1,7 @@
+function ogLocale(locale) {
+  if (typeof locale !== "string") return false;
+  const OG_LOCALE_REGEX = /^[a-z]{2}_[A-Z]{2}$/;
+  return OG_LOCALE_REGEX.test(locale);
+}
+
+export { ogLocale };

package/dist/src/core/server/infrastructure/zod/rules/unique.js

@@ -0,0 +1,35 @@
+function createUnique(prisma) {
+  return async function unique(value, options) {
+    if (!value) return true;
+    let query = `
+    SELECT COUNT(*) AS count 
+    FROM ${options.table} 
+    WHERE ${options.column} = $1
+  `;
+    const params = [value];
+    const appendCondition = (op, sc) => {
+      const paramIndex = params.length + 1;
+      const cast = sc.cast ? `::"${sc.cast}"` : "";
+      query += ` AND ${sc.name} ${op} $${paramIndex}${cast}`;
+      params.push(sc.value);
+    };
+    if (options.scope) {
+      options.scope.forEach((sc) => appendCondition("=", sc));
+    }
+    if (options.excludeSelf) {
+      appendCondition("!=", options.excludeSelf);
+    }
+    try {
+      const result = await prisma.$queryRawUnsafe(
+        query,
+        ...params
+      );
+      return Number(result[0]?.count || 0) === 0;
+    } catch (error) {
+      console.error("Unique check failed:", error);
+      return false;
+    }
+  };
+}
+
+export { createUnique };

package/dist/src/core/server/infrastructure/zod/schemas/file.js

@@ -0,0 +1,40 @@
+import 'mime-types';
+import 'clsx';
+import 'tailwind-merge';
+import { SIZE } from '../../../../../shared/units.js';
+
+function createFileSchema({
+  z,
+  maxSizeInMb
+}) {
+  return function fileSchema({
+    size = maxSizeInMb * SIZE.MB,
+    extensions = []
+  } = {}) {
+    return z.instanceof(File, { error: "Invalid file" }).refine((file) => file.size <= size, {
+      error: `File is too large, max ${size / SIZE.MB}MB`
+    }).refine(
+      (file) => {
+        if (extensions.length === 0) return true;
+        return extensions.some(
+          (ext) => file.name.toLocaleLowerCase().endsWith(ext)
+        );
+      },
+      { error: `Only ${extensions.join(", ")} files are allowed` }
+    ).transform((file) => file);
+  };
+}
+function createMultiFileSchema({
+  z,
+  fileSchema,
+  maxSizeInMb
+}) {
+  return function multiFilesSchema({
+    size = maxSizeInMb * SIZE.MB,
+    extensions = []
+  } = {}) {
+    return z.array(fileSchema({ size, extensions }));
+  };
+}
+
+export { createFileSchema, createMultiFileSchema };

package/dist/src/core/server/infrastructure/zod/schemas/schemas.js

@@ -0,0 +1,95 @@
+function createSchemas({
+  z,
+  exist
+}) {
+  const trimmedString = () => z.string().trim();
+  const MAX_NUMBER = 2147483647;
+  const MAX_STRING = 1e5;
+  function text() {
+    return trimmedString().max(MAX_STRING);
+  }
+  function positiveNumber() {
+    return z.preprocess((val) => {
+      if (val == null || val === "") return;
+      const num = Number(typeof val === "string" ? val.trim() : val);
+      return Number.isNaN(num) ? void 0 : num;
+    }, z.number().min(0).max(MAX_NUMBER));
+  }
+  function positiveInteger() {
+    return z.preprocess((val) => {
+      if (val == null || val === "") return;
+      const num = Number(typeof val === "string" ? val.trim() : val);
+      return Number.isNaN(num) ? void 0 : Math.trunc(num);
+    }, z.number().int().min(0).max(MAX_NUMBER));
+  }
+  function email() {
+    return z.email().max(254).toLowerCase();
+  }
+  function password() {
+    return trimmedString().min(6).max(255);
+  }
+  function isoString() {
+    return trimmedString().regex(
+      /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/
+    );
+  }
+  function array(schema) {
+    return z.array(schema).max(100).transform(
+      (arr) => arr.filter((v) => v != null)
+    );
+  }
+  function id() {
+    return trimmedString().length(26).regex(/^[0-9A-Z]{26}$/);
+  }
+  function key() {
+    return trimmedString().max(1024);
+  }
+  function sha256Hash() {
+    return trimmedString().length(64).regex(/^[a-f0-9]{64}$/);
+  }
+  function slug() {
+    return trimmedString().regex(/^$|^[\p{L}0-9-_]+$/u).max(100);
+  }
+  function pathSegment() {
+    return trimmedString().min(1).regex(/^(?!\.\.?$)[^\u0000-\u001F/\\]+$/u).max(255);
+  }
+  function singleItem(options) {
+    return z.object({
+      id: id().refine((v) => exist(v, options), {
+        error: "Resource does not exist"
+      })
+    }).nullable();
+  }
+  function multiItems(options) {
+    return array(
+      z.object({
+        id: id().refine((v) => exist(v, options), {
+          error: "Resource does not exist"
+        })
+      })
+    );
+  }
+  return {
+    z,
+    // base
+    text,
+    positiveNumber,
+    positiveInteger,
+    // url,
+    email,
+    password,
+    isoString,
+    array,
+    // resource related
+    id,
+    key,
+    sha256Hash,
+    slug,
+    pathSegment,
+    // item
+    singleItem,
+    multiItems
+  };
+}
+
+export { createSchemas };

package/dist/src/core/server/infrastructure/zod/schemas/toc-item.js

@@ -0,0 +1,22 @@
+function createTocItemSchema({
+  z,
+  schemas
+}) {
+  const tocItem = z.lazy(
+    () => z.object({
+      text: schemas.text(),
+      id: schemas.text(),
+      level: z.union([
+        z.literal(2),
+        z.literal(3),
+        z.literal(4),
+        z.literal(5),
+        z.literal(6)
+      ]),
+      children: z.array(tocItem).default([])
+    })
+  );
+  return tocItem;
+}
+
+export { createTocItemSchema };