@arch-cadre/core 0.0.56 → 0.0.58

package/dist/core/auth/rbac.js

@@ -1,134 +0,0 @@
-"use server";
-import { and, eq, inArray } from "drizzle-orm";
-import { db } from "../../server/database/inject";
-import { permissionsTable, rolesTable, rolesToPermissionsTable, usersToPermissionsTable, usersToRolesTable, } from "../../server/database/schema";
-import { notificationService } from "../notifications/index";
-// Ensure notification service is loaded
-if (typeof window === "undefined") {
-    notificationService.init();
-}
-/**
- * CORE RBAC LOGIC
- * This file handles all database operations for Roles and Permissions.
- */
-// --- Roles ---
-export async function getRoles() {
-    return await db.select().from(rolesTable).orderBy(rolesTable.name);
-}
-export async function getRoleById(roleId) {
-    const [role] = await db
-        .select()
-        .from(rolesTable)
-        .where(eq(rolesTable.id, roleId));
-    return role;
-}
-export async function createRole(name, description) {
-    return await db.insert(rolesTable).values({ name, description }).returning();
-}
-export async function deleteRole(roleId) {
-    return await db.delete(rolesTable).where(eq(rolesTable.id, roleId));
-}
-// --- Permissions ---
-export async function getPermissions() {
-    return await db
-        .select()
-        .from(permissionsTable)
-        .orderBy(permissionsTable.name);
-}
-export async function createPermission(name, description) {
-    return await db
-        .insert(permissionsTable)
-        .values({ name, description })
-        .returning();
-}
-export async function deletePermission(permissionId) {
-    return await db
-        .delete(permissionsTable)
-        .where(eq(permissionsTable.id, permissionId));
-}
-// --- Mappings ---
-export async function getRolePermissions(roleId) {
-    return await db
-        .select({
-        id: permissionsTable.id,
-        name: permissionsTable.name,
-    })
-        .from(rolesToPermissionsTable)
-        .innerJoin(permissionsTable, eq(rolesToPermissionsTable.permissionId, permissionsTable.id))
-        .where(eq(rolesToPermissionsTable.roleId, roleId));
-}
-export async function assignPermissionToRole(roleId, permissionId) {
-    return await db
-        .insert(rolesToPermissionsTable)
-        .values({ roleId, permissionId })
-        .onConflictDoNothing();
-}
-export async function revokePermissionFromRole(roleId, permissionId) {
-    return await db
-        .delete(rolesToPermissionsTable)
-        .where(and(eq(rolesToPermissionsTable.roleId, roleId), eq(rolesToPermissionsTable.permissionId, permissionId)));
-}
-// --- User Assignment ---
-export async function assignRoleToUser(userId, roleId) {
-    return await db
-        .insert(usersToRolesTable)
-        .values({ userId, roleId })
-        .onConflictDoNothing();
-}
-export async function revokeRoleFromUser(userId, roleId) {
-    return await db
-        .delete(usersToRolesTable)
-        .where(and(eq(usersToRolesTable.userId, userId), eq(usersToRolesTable.roleId, roleId)));
-}
-export async function assignPermissionToUser(userId, permissionId) {
-    return await db
-        .insert(usersToPermissionsTable)
-        .values({ userId, permissionId })
-        .onConflictDoNothing();
-}
-export async function revokePermissionFromUser(userId, permissionId) {
-    return await db
-        .delete(usersToPermissionsTable)
-        .where(and(eq(usersToPermissionsTable.userId, userId), eq(usersToPermissionsTable.permissionId, permissionId)));
-}
-export async function getUserRbacData(userId) {
-    const roles = await db
-        .select({
-        id: rolesTable.id,
-        name: rolesTable.name,
-    })
-        .from(usersToRolesTable)
-        .innerJoin(rolesTable, eq(usersToRolesTable.roleId, rolesTable.id))
-        .where(eq(usersToRolesTable.userId, userId));
-    const directPermissions = await db
-        .select({
-        id: permissionsTable.id,
-        name: permissionsTable.name,
-    })
-        .from(usersToPermissionsTable)
-        .innerJoin(permissionsTable, eq(usersToPermissionsTable.permissionId, permissionsTable.id))
-        .where(eq(usersToPermissionsTable.userId, userId));
-    // Fetch inherited permissions from roles
-    let rolePermissions = [];
-    if (roles.length > 0) {
-        const roleIds = roles.map((r) => r.id);
-        rolePermissions = await db
-            .select({
-            id: permissionsTable.id,
-            name: permissionsTable.name,
-        })
-            .from(rolesToPermissionsTable)
-            .innerJoin(permissionsTable, eq(rolesToPermissionsTable.permissionId, permissionsTable.id))
-            .where(inArray(rolesToPermissionsTable.roleId, roleIds));
-    }
-    // Combine for effective permissions
-    const effectiveMap = new Map();
-    for (const p of [...directPermissions, ...rolePermissions]) {
-        effectiveMap.set(p.id, p);
-    }
-    return {
-        roles,
-        directPermissions,
-        effectivePermissions: Array.from(effectiveMap.values()),
-    };
-}

package/dist/core/auth/session.d.ts

@@ -1,50 +0,0 @@
-import type { AuthSession, Session, SessionFlags, UserSession } from "./types";
-/**
- * Returns the user's IP address.
- */
-export declare function getIPAddress(): Promise<string | null>;
-/**
- * Validates the session token.
- */
-export declare function validateSessionToken(token: string): Promise<AuthSession>;
-/**
- * Returns the current user session from cookies.
- */
-export declare const getCurrentSession: () => Promise<AuthSession>;
-/**
- * Invalidates a single session.
- */
-export declare function invalidateSession(sessionId: string): Promise<void>;
-/**
- * Invalidates all user sessions.
- */
-export declare function invalidateUserSessions(userId: string): Promise<void>;
-/**
- * Sets the session token in a cookie.
- */
-export declare function setSessionTokenCookie(token: string, expiresAt: Date): Promise<void>;
-/**
- * Removes the session token cookie.
- */
-export declare function deleteSessionTokenCookie(): Promise<void>;
-/**
- * Generates a new random session token.
- */
-export declare function generateSessionToken(): Promise<string>;
-/**
- * Creates a new session in the database.
- */
-export declare function createSession(token: string, userId: string, flags: SessionFlags): Promise<Session>;
-/**
- * Signs the user out and redirects to the sign-in page.
- */
-export declare function sessionSignOut(): Promise<void>;
-/**
- * Get all active sessions for a user.
- */
-export declare function getUserSessions(userId: string, currentSessionId: string): Promise<UserSession[]>;
-/**
- * Invalidate all sessions for a user except the specified current one.
- */
-export declare function invalidateOtherSessions(userId: string, currentSessionId: string): Promise<void>;
-//# sourceMappingURL=session.d.ts.map

package/dist/core/auth/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/core/auth/session.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,WAAW,EACX,OAAO,EACP,YAAY,EAEZ,WAAW,EACZ,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE3D;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,WAAW,CAAC,CAoCtB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,WAAW,CAS7D,CAAC;AAEF;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExE;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,IAAI,GACd,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;GAEG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG9D;AAED;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAI5D;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;GAEG;AACH,wBAAsB,cAAc,kBASnC;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAYxB;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/core/auth/session.js

@@ -1,152 +0,0 @@
-"use server";
-import { sha256 } from "@oslojs/crypto/sha2";
-import { encodeBase32LowerCaseNoPadding, encodeHexLowerCase, } from "@oslojs/encoding";
-import { addDays } from "date-fns";
-import { and, eq, ne } from "drizzle-orm";
-import { cookies, headers } from "next/headers";
-import { redirect } from "next/navigation";
-import { db } from "../../server/database/inject";
-import { sessionTable, userTable } from "../../server/database/schema";
-import { augmentSession } from "./augment";
-import { performFullUserAugmentation } from "./logic";
-/**
- * Returns the user's IP address.
- */
-export async function getIPAddress() {
-    return (await headers()).get("x-forwarded-for");
-}
-/**
- * Validates the session token.
- */
-export async function validateSessionToken(token) {
-    const sessionId = encodeHexLowerCase(sha256(new TextEncoder().encode(token)));
-    const [row] = await db
-        .select({
-        session: sessionTable,
-        user: userTable,
-    })
-        .from(sessionTable)
-        .innerJoin(userTable, eq(sessionTable.userId, userTable.id))
-        .where(eq(sessionTable.id, sessionId));
-    if (!row || !row.user) {
-        return { session: null, user: null };
-    }
-    const { session: baseSession, user: baseUser } = row;
-    // STRICTLY remove non-serializable and sensitive fields
-    const { password, recovery_code, ...safeUser } = baseUser;
-    // Check if session is expired
-    if (new Date() > baseSession.expiresAt) {
-        await db.delete(sessionTable).where(eq(sessionTable.id, baseSession.id));
-        return { session: null, user: null };
-    }
-    // AUGMENT (EXTENSIBILITY POINTS)
-    const augmentedUser = await performFullUserAugmentation(safeUser);
-    const augmentedSession = await augmentSession(baseSession);
-    // ENSURE PLAIN OBJECTS for Client Components
-    return {
-        session: augmentedSession ? { ...augmentedSession } : null,
-        user: augmentedUser ? { ...augmentedUser } : null,
-    };
-}
-/**
- * Returns the current user session from cookies.
- */
-export const getCurrentSession = async () => {
-    var _a, _b;
-    const cookieStore = await cookies();
-    const token = (_b = (_a = cookieStore.get("session")) === null || _a === void 0 ? void 0 : _a.value) !== null && _b !== void 0 ? _b : null;
-    if (token === null) {
-        return { session: null, user: null };
-    }
-    return await validateSessionToken(token);
-};
-/**
- * Invalidates a single session.
- */
-export async function invalidateSession(sessionId) {
-    await db.delete(sessionTable).where(eq(sessionTable.id, sessionId));
-}
-/**
- * Invalidates all user sessions.
- */
-export async function invalidateUserSessions(userId) {
-    await db.delete(sessionTable).where(eq(sessionTable.userId, userId));
-}
-/**
- * Sets the session token in a cookie.
- */
-export async function setSessionTokenCookie(token, expiresAt) {
-    const cookieStore = await cookies();
-    cookieStore.set("session", token, {
-        httpOnly: true,
-        path: "/",
-        secure: process.env.NODE_ENV === "production",
-        sameSite: "lax",
-        expires: expiresAt,
-    });
-}
-/**
- * Removes the session token cookie.
- */
-export async function deleteSessionTokenCookie() {
-    const cookieStore = await cookies();
-    cookieStore.delete("session");
-}
-/**
- * Generates a new random session token.
- */
-export async function generateSessionToken() {
-    const tokenBytes = new Uint8Array(20);
-    crypto.getRandomValues(tokenBytes);
-    return encodeBase32LowerCaseNoPadding(tokenBytes).toLowerCase();
-}
-/**
- * Creates a new session in the database.
- */
-export async function createSession(token, userId, flags) {
-    const sessionId = encodeHexLowerCase(sha256(new TextEncoder().encode(token)));
-    const [session] = await db
-        .insert(sessionTable)
-        .values({
-        id: sessionId,
-        expiresAt: new Date(addDays(new Date(), 7)),
-        active_organization_id: flags.activeOrganizationId,
-        userId: userId,
-    })
-        .returning();
-    return session;
-}
-/**
- * Signs the user out and redirects to the sign-in page.
- */
-export async function sessionSignOut() {
-    const { session } = await getCurrentSession();
-    if (session) {
-        await invalidateSession(session.id);
-        await deleteSessionTokenCookie();
-    }
-    redirect("/signin");
-}
-/**
- * Get all active sessions for a user.
- */
-export async function getUserSessions(userId, currentSessionId) {
-    const sessions = await db
-        .select()
-        .from(sessionTable)
-        .where(eq(sessionTable.userId, userId));
-    return sessions.map((session) => ({
-        id: session.id,
-        createdAt: session.createdAt,
-        expiresAt: session.expiresAt,
-        isCurrent: session.id === currentSessionId,
-    }));
-}
-/**
- * Invalidate all sessions for a user except the specified current one.
- */
-export async function invalidateOtherSessions(userId, currentSessionId) {
-    await db
-        .delete(sessionTable)
-        .where(and(eq(sessionTable.userId, userId), ne(sessionTable.id, currentSessionId)));
-}

package/dist/core/auth/types.d.ts

@@ -1,52 +0,0 @@
-import type { passwordResetSessionTable, sessionTable, userTable } from "../../server/database/schema";
-import type { UserPermission, UserRole } from "../types";
-export type { UserRole, UserPermission };
-export type User = typeof userTable.$inferSelect;
-export type Session = typeof sessionTable.$inferSelect & Record<string, any>;
-export type PasswordResetSession = typeof passwordResetSessionTable.$inferSelect & Record<string, any>;
-/**
- * Represents a user with all potential extensions.
- * Use this type in UI components that require data added by modules.
- */
-export type FullUser = User & Record<string, any> & {
-    roles: UserRole[];
-    permissions: UserPermission[];
-};
-/**
- * Basic session context.
- */
-export interface AuthSession {
-    session: Session | null;
-    user: FullUser | null;
-}
-export interface SessionFlags {
-    [key: string]: any;
-}
-export type UserSession = {
-    id: string;
-    createdAt: Date;
-    expiresAt: Date;
-    isCurrent: boolean;
-    [key: string]: any;
-};
-export type AuthResponse = {
-    status: "SUCCESS";
-    session: Session;
-    user: FullUser;
-    redirect?: string;
-} | {
-    status: "CHALLENGE_REQUIRED";
-    type: string;
-    userId: string;
-    tempToken?: string;
-    redirect?: string;
-} | {
-    status: "ERROR";
-    message: string;
-    redirect?: string;
-};
-export interface PasswordResetAuthSession {
-    session: PasswordResetSession | null;
-    user: FullUser | null;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/auth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACV,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzD,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AAEzC,MAAM,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACjD,MAAM,MAAM,OAAO,GAAG,OAAO,YAAY,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7E,MAAM,MAAM,oBAAoB,GAC9B,OAAO,yBAAyB,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtE;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,IAAI,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;IACpB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B,CAAC;AAEJ;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E;IACA,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvB"}

package/dist/core/auth/types.js

@@ -1 +0,0 @@
-export {};

package/dist/core/auth/utils/encode.d.ts

@@ -1,12 +0,0 @@
-/**
- * Generates a random one-time code (OTP).
- * @param length Length of the generated code (default 6).
- * @returns A random uppercase base32 string.
- */
-export declare function generateRandomOTP(length?: number): string;
-/**
- * Generates a random recovery code.
- * @returns A random uppercase base32 string.
- */
-export declare function generateRandomRecoveryCode(): string;
-//# sourceMappingURL=encode.d.ts.map

package/dist/core/auth/utils/encode.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encode.d.ts","sourceRoot":"","sources":["../../../../src/core/auth/utils/encode.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,SAAI,GAAG,MAAM,CAIpD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAInD"}

package/dist/core/auth/utils/encode.js

@@ -1,20 +0,0 @@
-import { encodeBase32UpperCaseNoPadding } from "@oslojs/encoding";
-/**
- * Generates a random one-time code (OTP).
- * @param length Length of the generated code (default 6).
- * @returns A random uppercase base32 string.
- */
-export function generateRandomOTP(length = 6) {
-    const bytes = new Uint8Array(5);
-    crypto.getRandomValues(bytes);
-    return encodeBase32UpperCaseNoPadding(bytes).substring(0, length);
-}
-/**
- * Generates a random recovery code.
- * @returns A random uppercase base32 string.
- */
-export function generateRandomRecoveryCode() {
-    const recoveryCodeBytes = new Uint8Array(10);
-    crypto.getRandomValues(recoveryCodeBytes);
-    return encodeBase32UpperCaseNoPadding(recoveryCodeBytes);
-}

package/dist/core/auth/utils/encryption.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../../src/core/auth/utils/encryption.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAUpD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAezD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAExD"}

package/dist/core/auth/utils/encryption.js

@@ -1,62 +0,0 @@
-import { createCipheriv, createDecipheriv } from "node:crypto";
-import { DynamicBuffer } from "@oslojs/binary";
-import { decodeBase64 } from "@oslojs/encoding";
-const ENCRYPTION_KEY = process.env.ENCRYPTION_KEY;
-if (!ENCRYPTION_KEY) {
-    throw new Error("ENCRYPTION_KEY environment variable is not set");
-}
-/**
- * The encryption key decoded from base64.
- */
-const key = decodeBase64(ENCRYPTION_KEY);
-/**
- * Encrypts data using AES-128-GCM.
- * @param data Data to be encrypted.
- * @returns Encrypted data including IV and auth tag.
- */
-export function encrypt(data) {
-    const iv = new Uint8Array(16);
-    crypto.getRandomValues(iv);
-    const cipher = createCipheriv("aes-128-gcm", key, iv);
-    const encrypted = new DynamicBuffer(0);
-    encrypted.write(iv);
-    encrypted.write(cipher.update(data));
-    encrypted.write(cipher.final());
-    encrypted.write(cipher.getAuthTag());
-    return encrypted.bytes();
-}
-/**
- * Encrypts a string.
- * @param data String to be encrypted.
- * @returns Encrypted data as Uint8Array.
- */
-export function encryptString(data) {
-    return encrypt(new TextEncoder().encode(data));
-}
-/**
- * Decrypts data using AES-128-GCM.
- * @param encrypted Encrypted data (IV + content + auth tag).
- * @returns Decrypted data.
- */
-export function decrypt(encrypted) {
-    if (encrypted.byteLength < 33) {
-        throw new Error("Invalid encrypted data length");
-    }
-    const iv = encrypted.slice(0, 16);
-    const authTag = encrypted.slice(encrypted.byteLength - 16);
-    const content = encrypted.slice(16, encrypted.byteLength - 16);
-    const decipher = createDecipheriv("aes-128-gcm", key, iv);
-    decipher.setAuthTag(authTag);
-    const decrypted = new DynamicBuffer(0);
-    decrypted.write(decipher.update(content));
-    decrypted.write(decipher.final());
-    return decrypted.bytes();
-}
-/**
- * Decrypts data to a string.
- * @param data Encrypted data.
- * @returns Odszyfrowany ciąg znaków.
- */
-export function decryptToString(data) {
-    return new TextDecoder().decode(decrypt(data));
-}

package/dist/core/auth/validation.d.ts

@@ -1,44 +0,0 @@
-import { z } from "zod";
-export declare const loginSchema: z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-    remember: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-export declare const registerSchema: z.ZodObject<{
-    username: z.ZodString;
-    email: z.ZodString;
-    password: z.ZodString;
-    terms: z.ZodBoolean;
-}, z.core.$strip>;
-export declare const forgotPasswordSchema: z.ZodObject<{
-    email: z.ZodString;
-}, z.core.$strip>;
-export declare const resetPasswordSchema: z.ZodObject<{
-    password: z.ZodString;
-    confirm: z.ZodString;
-}, z.core.$strip>;
-export declare const verifyEmailSchema: z.ZodObject<{
-    code: z.ZodString;
-}, z.core.$strip>;
-export declare const totpSetupSchema: z.ZodObject<{
-    code: z.ZodString;
-}, z.core.$strip>;
-export declare const totpVerifySchema: z.ZodObject<{
-    code: z.ZodString;
-}, z.core.$strip>;
-export declare const passkeysSetupSchema: z.ZodObject<{
-    name: z.ZodString;
-}, z.core.$strip>;
-export declare const recoveryCodeVerifySchema: z.ZodObject<{
-    code: z.ZodString;
-}, z.core.$strip>;
-export type LoginInput = z.infer<typeof loginSchema>;
-export type RegisterInput = z.infer<typeof registerSchema>;
-export type ForgotPasswordInput = z.infer<typeof forgotPasswordSchema>;
-export type ResetPasswordInput = z.infer<typeof resetPasswordSchema>;
-export type TOTPSetupInput = z.infer<typeof totpSetupSchema>;
-export type TOTPVerifyInput = z.infer<typeof totpVerifySchema>;
-export type PasskeysSetupInput = z.infer<typeof passkeysSetupSchema>;
-export type VerifyEmailInput = z.infer<typeof verifyEmailSchema>;
-export type RecoveryVerifyInput = z.infer<typeof recoveryCodeVerifySchema>;
-//# sourceMappingURL=validation.d.ts.map

package/dist/core/auth/validation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/core/auth/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;iBAItB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAEH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;iBAQ5B,CAAC;AAEL,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAGH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAGH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACrD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC3D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACrE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACjE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/core/auth/validation.js

@@ -1,41 +0,0 @@
-import { z } from "zod";
-// Auth validation schemas - CLEAN (No DB dependencies for client-side)
-export const loginSchema = z.object({
-    email: z.string().email("Invalid email address"),
-    password: z.string().min(8),
-    remember: z.boolean().optional(),
-});
-export const registerSchema = z.object({
-    username: z.string().min(2, "Name must be at least 2 characters"),
-    email: z.string().email("Invalid email address"),
-    password: z.string().min(8, "Password must be at least 8 characters"),
-    terms: z.boolean().refine((val) => val === true, "You must accept the terms"),
-});
-export const forgotPasswordSchema = z.object({
-    email: z.string().email("Invalid email address"),
-});
-export const resetPasswordSchema = z
-    .object({
-    password: z.string().min(8, "Password must be at least 8 characters"),
-    confirm: z.string(),
-})
-    .refine((data) => data.password === data.confirm, {
-    message: "Passwords do not match",
-    path: ["confirm"],
-});
-export const verifyEmailSchema = z.object({
-    code: z.string().min(6).max(6),
-});
-// mfa validation schemas
-export const totpSetupSchema = z.object({
-    code: z.string().regex(/^\d{6}$/, "Code must be 6 digits"),
-});
-export const totpVerifySchema = z.object({
-    code: z.string().regex(/^\d{6}$/, "Code must be 6 digits"),
-});
-export const passkeysSetupSchema = z.object({
-    name: z.string().min(1, "Passkey name is required"),
-});
-export const recoveryCodeVerifySchema = z.object({
-    code: z.string().min(16, "Recovery code is required").max(16),
-});

package/dist/core/bootstrap.d.ts

@@ -1,2 +0,0 @@
-export declare function ensureSystemInitialized(providedDb?: any): Promise<void>;
-//# sourceMappingURL=bootstrap.d.ts.map

package/dist/core/bootstrap.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/core/bootstrap.ts"],"names":[],"mappings":"AAQA,wBAAsB,uBAAuB,CAAC,UAAU,CAAC,EAAE,GAAG,iBAoD7D"}

package/dist/core/bootstrap.js

@@ -1,51 +0,0 @@
-import { injectDb } from "../server/database/inject";
-import { initEmailVerification } from "./auth/email-verification";
-import { eventBus } from "./event-bus";
-import { filesystemService } from "./filesystem/index";
-import { LocalFileProvider } from "./filesystem/providers/local";
-import { notificationService } from "./notifications/service";
-import { isSystemInstalled } from "./setup";
-export async function ensureSystemInitialized(providedDb) {
-    if (typeof window !== "undefined")
-        return;
-    const g = globalThis;
-    // 1. Immediate injection if provided
-    if (providedDb) {
-        injectDb(providedDb);
-    }
-    // 2. Prevent infinite recursion and double initialization
-    if (g.__KRYO_INITIALIZED__)
-        return;
-    if (g.__KRYO_INITIALIZING__)
-        return; // Already in progress, don't block/deadlock
-    g.__KRYO_INITIALIZING__ = true;
-    try {
-        console.log("[Kryo:Bootstrap] Starting system initialization...");
-        // Check if we have DB after any possible injection
-        if (!g.__KRYO_DB__) {
-            console.warn("[Kryo:Bootstrap] DB not detected during bootstrap start. Trying to continue...");
-        }
-        // Check if system is installed before initializing modules
-        if (await isSystemInstalled()) {
-            // Order matters: services first, then modules (which use services)
-            notificationService.init();
-            await initEmailVerification();
-            // Auto-register local filesystem provider as a fallback
-            const local = new LocalFileProvider();
-            filesystemService.registerProvider(local);
-            filesystemService.setDefaultProvider(local.id);
-        }
-        else {
-            console.log("[Kryo:Bootstrap] System not installed. Skipping module initialization.");
-        }
-        await eventBus.publish("system:start", { runtime: "nodejs" });
-        console.log("[Kryo:Bootstrap] System initialized successfully.");
-        g.__KRYO_INITIALIZED__ = true;
-    }
-    catch (error) {
-        console.error("[Kryo:Bootstrap] Initialization failed:", error);
-    }
-    finally {
-        g.__KRYO_INITIALIZING__ = false;
-    }
-}

package/dist/core/config.d.ts

@@ -1,9 +0,0 @@
-export interface KryoConfig {
-    /**
-     * Path to the directory with local modules.
-     * Default: "./modules"
-     */
-    modulesDirectory?: string;
-}
-export declare const DEFAULT_CONFIG: KryoConfig;
-//# sourceMappingURL=config.d.ts.map

package/dist/core/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,cAAc,EAAE,UAE5B,CAAC"}