@jant/core 0.2.16 → 0.2.18

package/dist/app.d.ts

@@ -9,6 +9,7 @@ export interface AppVariables {
     services: Services;
     auth: Auth;
     config: JantConfig;
+    themeStyle: string;
 }
 export type App = Hono<{
     Bindings: Bindings;
@@ -20,12 +21,15 @@ export type App = Hono<{
  * @param config - Optional configuration
  * @returns Hono app instance
  *
+ * Site settings (name, description, language) should be configured via
+ * environment variables (SITE_NAME, SITE_DESCRIPTION, SITE_LANGUAGE).
+ * They can also be set in the dashboard, which stores them in the database.
+ *
  * @example
  * ```typescript
  * import { createApp } from "@jant/core";
  *
  * export default createApp({
- *   site: { name: "My Blog" },
  *   theme: { components: { PostCard: MyPostCard } },
  * });
  * ```

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAGlD,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAoCvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,MAAM,GAAE,UAAe,GAAG,GAAG,CAodtD"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAGlD,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAwCvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,SAAS,CAAC,MAAM,GAAE,UAAe,GAAG,GAAG,CA+qBtD"}

package/dist/app.js

@@ -7,6 +7,8 @@ import { createServices } from "./services/index.js";
 import { createAuth } from "./auth.js";
 import { i18nMiddleware } from "./i18n/index.js";
 import { useLingui as $_useLingui } from "@jant/core/i18n";
+import { SETTINGS_KEYS } from "./lib/constants.js";
+import { hashPassword } from "better-auth/crypto";
 // Routes - Pages
 import { homeRoutes } from "./routes/pages/home.js";
 import { postRoutes } from "./routes/pages/post.js";
@@ -22,6 +24,7 @@ import { mediaRoutes as dashMediaRoutes } from "./routes/dash/media.js";
 import { settingsRoutes as dashSettingsRoutes } from "./routes/dash/settings.js";
 import { redirectsRoutes as dashRedirectsRoutes } from "./routes/dash/redirects.js";
 import { collectionsRoutes as dashCollectionsRoutes } from "./routes/dash/collections.js";
+import { appearanceRoutes as dashAppearanceRoutes } from "./routes/dash/appearance.js";
 // Routes - API
 import { postsApiRoutes } from "./routes/api/posts.js";
 import { uploadApiRoutes } from "./routes/api/upload.js";
@@ -34,18 +37,22 @@ import { requireAuth } from "./middleware/auth.js";
 // Layouts for auth pages
 import { BaseLayout } from "./theme/layouts/index.js";
 import { sse } from "./lib/sse.js";
+import { getAvailableThemes, buildThemeStyle } from "./lib/theme.js";
 /**
  * Create a Jant application
  *
  * @param config - Optional configuration
  * @returns Hono app instance
  *
+ * Site settings (name, description, language) should be configured via
+ * environment variables (SITE_NAME, SITE_DESCRIPTION, SITE_LANGUAGE).
+ * They can also be set in the dashboard, which stores them in the database.
+ *
  * @example
  * ```typescript
  * import { createApp } from "@jant/core";
  *
  * export default createApp({
- *   site: { name: "My Blog" },
  *   theme: { components: { PostCard: MyPostCard } },
  * });
  * ```
@@ -53,12 +60,18 @@ import { sse } from "./lib/sse.js";
     const app = new Hono();
     // Initialize services, auth, and config middleware
     app.use("*", async (c, next)=>{
-        const db = createDatabase(c.env.DB);
-        const services = createServices(db, c.env.DB);
+        // Use withSession() to enable D1 Read Replication
+        // Automatically routes read queries to the nearest replica for lower latency
+        // See: https://developers.cloudflare.com/d1/best-practices/read-replication/
+        const session = c.env.DB.withSession();
+        // Note: Drizzle ORM doesn't officially support D1DatabaseSession yet (issue #2226)
+        // but it works at runtime. We use type assertion as a temporary workaround.
+        const db = createDatabase(session);
+        const services = createServices(db, session);
         c.set("services", services);
         c.set("config", config);
         if (c.env.AUTH_SECRET) {
-            const auth = createAuth(c.env.DB, {
+            const auth = createAuth(session, {
                 secret: c.env.AUTH_SECRET,
                 baseURL: c.env.SITE_URL
             });
@@ -66,6 +79,15 @@ import { sse } from "./lib/sse.js";
         }
         await next();
     });
+    // Theme middleware - resolve active color theme and build CSS
+    app.use("*", async (c, next)=>{
+        const themeId = await c.var.services.settings.get(SETTINGS_KEYS.THEME);
+        const themes = getAvailableThemes(config);
+        const activeTheme = themeId ? themes.find((t)=>t.id === themeId) : undefined;
+        const themeStyle = buildThemeStyle(activeTheme, config.theme?.cssVariables);
+        c.set("themeStyle", themeStyle);
+        await next();
+    });
     // i18n middleware
     app.use("*", i18nMiddleware());
     // Trailing slash redirect (redirect /foo/ to /foo)
@@ -125,112 +147,85 @@ import { sse } from "./lib/sse.js";
                             }),
                             /*#__PURE__*/ _jsx("p", {
                                 children: $__i18n._({
-                                    id: "ig4hg2",
-                                    message: "Let's set up your site."
+                                    id: "GX2VMa",
+                                    message: "Create your admin account."
                                 })
                             })
                         ]
                     }),
-                    /*#__PURE__*/ _jsxs("section", {
-                        children: [
-                            /*#__PURE__*/ _jsx("div", {
-                                id: "setup-message"
-                            }),
-                            /*#__PURE__*/ _jsxs("form", {
-                                "data-signals": "{siteName: '', name: '', email: '', password: ''}",
-                                "data-on:submit__prevent": "@post('/setup')",
-                                class: "flex flex-col gap-4",
-                                children: [
-                                    /*#__PURE__*/ _jsxs("div", {
-                                        class: "field",
-                                        children: [
-                                            /*#__PURE__*/ _jsx("label", {
-                                                class: "label",
-                                                children: $__i18n._({
-                                                    id: "SJmfuf",
-                                                    message: "Site Name"
-                                                })
-                                            }),
-                                            /*#__PURE__*/ _jsx("input", {
-                                                type: "text",
-                                                "data-bind": "siteName",
-                                                class: "input",
-                                                required: true,
-                                                placeholder: $__i18n._({
-                                                    id: "HfyyXl",
-                                                    message: "My Blog"
-                                                })
+                    /*#__PURE__*/ _jsx("section", {
+                        children: /*#__PURE__*/ _jsxs("form", {
+                            "data-signals": "{name: '', email: '', password: ''}",
+                            "data-on:submit__prevent": "@post('/setup')",
+                            class: "flex flex-col gap-4",
+                            children: [
+                                /*#__PURE__*/ _jsxs("div", {
+                                    class: "field",
+                                    children: [
+                                        /*#__PURE__*/ _jsx("label", {
+                                            class: "label",
+                                            children: $__i18n._({
+                                                id: "/Rj5P4",
+                                                message: "Your Name"
                                             })
-                                        ]
-                                    }),
-                                    /*#__PURE__*/ _jsxs("div", {
-                                        class: "field",
-                                        children: [
-                                            /*#__PURE__*/ _jsx("label", {
-                                                class: "label",
-                                                children: $__i18n._({
-                                                    id: "/Rj5P4",
-                                                    message: "Your Name"
-                                                })
-                                            }),
-                                            /*#__PURE__*/ _jsx("input", {
-                                                type: "text",
-                                                "data-bind": "name",
-                                                class: "input",
-                                                required: true,
-                                                placeholder: "John Doe"
-                                            })
-                                        ]
-                                    }),
-                                    /*#__PURE__*/ _jsxs("div", {
-                                        class: "field",
-                                        children: [
-                                            /*#__PURE__*/ _jsx("label", {
-                                                class: "label",
-                                                children: $__i18n._({
-                                                    id: "O3oNi5",
-                                                    message: "Email"
-                                                })
-                                            }),
-                                            /*#__PURE__*/ _jsx("input", {
-                                                type: "email",
-                                                "data-bind": "email",
-                                                class: "input",
-                                                required: true,
-                                                placeholder: "you@example.com"
+                                        }),
+                                        /*#__PURE__*/ _jsx("input", {
+                                            type: "text",
+                                            "data-bind": "name",
+                                            class: "input",
+                                            required: true,
+                                            placeholder: "John Doe"
+                                        })
+                                    ]
+                                }),
+                                /*#__PURE__*/ _jsxs("div", {
+                                    class: "field",
+                                    children: [
+                                        /*#__PURE__*/ _jsx("label", {
+                                            class: "label",
+                                            children: $__i18n._({
+                                                id: "O3oNi5",
+                                                message: "Email"
                                             })
-                                        ]
-                                    }),
-                                    /*#__PURE__*/ _jsxs("div", {
-                                        class: "field",
-                                        children: [
-                                            /*#__PURE__*/ _jsx("label", {
-                                                class: "label",
-                                                children: $__i18n._({
-                                                    id: "8ZsakT",
-                                                    message: "Password"
-                                                })
-                                            }),
-                                            /*#__PURE__*/ _jsx("input", {
-                                                type: "password",
-                                                "data-bind": "password",
-                                                class: "input",
-                                                required: true,
-                                                minLength: 8
+                                        }),
+                                        /*#__PURE__*/ _jsx("input", {
+                                            type: "email",
+                                            "data-bind": "email",
+                                            class: "input",
+                                            required: true,
+                                            placeholder: "you@example.com"
+                                        })
+                                    ]
+                                }),
+                                /*#__PURE__*/ _jsxs("div", {
+                                    class: "field",
+                                    children: [
+                                        /*#__PURE__*/ _jsx("label", {
+                                            class: "label",
+                                            children: $__i18n._({
+                                                id: "8ZsakT",
+                                                message: "Password"
                                             })
-                                        ]
-                                    }),
-                                    /*#__PURE__*/ _jsx("button", {
-                                        type: "submit",
-                                        class: "btn",
-                                        children: $__i18n._({
-                                            id: "EGwzOK",
-                                            message: "Complete Setup"
+                                        }),
+                                        /*#__PURE__*/ _jsx("input", {
+                                            type: "password",
+                                            "data-bind": "password",
+                                            class: "input",
+                                            required: true,
+                                            minLength: 8
                                         })
+                                    ]
+                                }),
+                                /*#__PURE__*/ _jsx("button", {
+                                    type: "submit",
+                                    class: "btn",
+                                    children: $__i18n._({
+                                        id: "EGwzOK",
+                                        message: "Complete Setup"
                                     })
-                                ]
-                            })
-                        ]
+                                })
+                            ]
+                        })
                     })
                 ]
             })
@@ -250,20 +245,20 @@ import { sse } from "./lib/sse.js";
         const isComplete = await c.var.services.settings.isOnboardingComplete();
         if (isComplete) return c.redirect("/");
         const body = await c.req.json();
-        const { siteName, name, email, password } = body;
-        if (!siteName || !name || !email || !password) {
+        const { name, email, password } = body;
+        if (!name || !email || !password) {
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="setup-message"><div class="alert-destructive mb-4"><h2>All fields are required</h2></div></div>');
+                await stream.toast("All fields are required", "error");
             });
         }
         if (password.length < 8) {
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="setup-message"><div class="alert-destructive mb-4"><h2>Password must be at least 8 characters</h2></div></div>');
+                await stream.toast("Password must be at least 8 characters", "error");
             });
         }
         if (!c.var.auth) {
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="setup-message"><div class="alert-destructive mb-4"><h2>AUTH_SECRET not configured</h2></div></div>');
+                await stream.toast("AUTH_SECRET not configured", "error");
             });
         }
         try {
@@ -276,22 +271,18 @@ import { sse } from "./lib/sse.js";
             });
             if (!signUpResponse || "error" in signUpResponse) {
                 return sse(c, async (stream)=>{
-                    await stream.patchElements('<div id="setup-message"><div class="alert-destructive mb-4"><h2>Failed to create account</h2></div></div>');
+                    await stream.toast("Failed to create account", "error");
                 });
             }
-            await c.var.services.settings.setMany({
-                SITE_NAME: siteName,
-                SITE_LANGUAGE: "en"
-            });
             await c.var.services.settings.completeOnboarding();
             return sse(c, async (stream)=>{
-                await stream.redirect("/signin");
+                await stream.redirect("/signin?setup");
             });
         } catch (err) {
             // eslint-disable-next-line no-console -- Error logging is intentional
             console.error("Setup error:", err);
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="setup-message"><div class="alert-destructive mb-4"><h2>Failed to create account</h2></div></div>');
+                await stream.toast("Failed to create account", "error");
             });
         }
     });
@@ -317,9 +308,6 @@ import { sse } from "./lib/sse.js";
                     }),
                     /*#__PURE__*/ _jsxs("section", {
                         children: [
-                            /*#__PURE__*/ _jsx("div", {
-                                id: "signin-message"
-                            }),
                             demoEmail && demoPassword && /*#__PURE__*/ _jsx("p", {
                                 class: "text-muted-foreground text-sm mb-4",
                                 children: $__i18n._({
@@ -386,9 +374,22 @@ import { sse } from "./lib/sse.js";
     };
     // Signin page
     app.get("/signin", async (c)=>{
+        const isSetup = c.req.query("setup") !== undefined;
+        const isReset = c.req.query("reset") !== undefined;
+        let toast;
+        if (isSetup) {
+            toast = {
+                message: "Account created successfully. Please sign in."
+            };
+        } else if (isReset) {
+            toast = {
+                message: "Password reset successfully. Please sign in."
+            };
+        }
         return c.html(/*#__PURE__*/ _jsx(BaseLayout, {
             title: "Sign In - Jant",
             c: c,
+            toast: toast,
             children: /*#__PURE__*/ _jsx(SigninContent, {
                 demoEmail: c.env.DEMO_EMAIL,
                 demoPassword: c.env.DEMO_PASSWORD
@@ -398,7 +399,7 @@ import { sse } from "./lib/sse.js";
     app.post("/signin", async (c)=>{
         if (!c.var.auth) {
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="signin-message"><div class="alert-destructive mb-4"><h2>Auth not configured</h2></div></div>');
+                await stream.toast("Auth not configured", "error");
             });
         }
         const body = await c.req.json();
@@ -417,7 +418,7 @@ import { sse } from "./lib/sse.js";
             const response = await c.var.auth.handler(signInRequest);
             if (!response.ok) {
                 return sse(c, async (stream)=>{
-                    await stream.patchElements('<div id="signin-message"><div class="alert-destructive mb-4"><h2>Invalid email or password</h2></div></div>');
+                    await stream.toast("Invalid email or password", "error");
                 });
             }
             // Forward Set-Cookie headers from auth response
@@ -435,7 +436,7 @@ import { sse } from "./lib/sse.js";
             // eslint-disable-next-line no-console -- Error logging is intentional
             console.error("Signin error:", err);
             return sse(c, async (stream)=>{
-                await stream.patchElements('<div id="signin-message"><div class="alert-destructive mb-4"><h2>Invalid email or password</h2></div></div>');
+                await stream.toast("Invalid email or password", "error");
             });
         }
     });
@@ -451,6 +452,217 @@ import { sse } from "./lib/sse.js";
         }
         return c.redirect("/");
     });
+    // Password reset via one-time token
+    const ResetContent = ({ token })=>{
+        const { i18n: $__i18n, _: $__ } = $_useLingui();
+        const signals = JSON.stringify({
+            password: "",
+            confirmPassword: "",
+            token
+        }).replace(/</g, "\\u003c");
+        return /*#__PURE__*/ _jsx("div", {
+            class: "min-h-screen flex items-center justify-center",
+            children: /*#__PURE__*/ _jsxs("div", {
+                class: "card max-w-md w-full",
+                children: [
+                    /*#__PURE__*/ _jsxs("header", {
+                        children: [
+                            /*#__PURE__*/ _jsx("h2", {
+                                children: $__i18n._({
+                                    id: "KbS2K9",
+                                    message: "Reset Password"
+                                })
+                            }),
+                            /*#__PURE__*/ _jsx("p", {
+                                children: $__i18n._({
+                                    id: "hWOZIv",
+                                    message: "Enter your new password."
+                                })
+                            })
+                        ]
+                    }),
+                    /*#__PURE__*/ _jsx("section", {
+                        children: /*#__PURE__*/ _jsxs("form", {
+                            "data-signals": signals,
+                            "data-on:submit__prevent": "@post('/reset')",
+                            class: "flex flex-col gap-4",
+                            children: [
+                                /*#__PURE__*/ _jsxs("div", {
+                                    class: "field",
+                                    children: [
+                                        /*#__PURE__*/ _jsx("label", {
+                                            class: "label",
+                                            children: $__i18n._({
+                                                id: "7vhWI8",
+                                                message: "New Password"
+                                            })
+                                        }),
+                                        /*#__PURE__*/ _jsx("input", {
+                                            type: "password",
+                                            "data-bind": "password",
+                                            class: "input",
+                                            required: true,
+                                            minLength: 8,
+                                            autocomplete: "new-password"
+                                        })
+                                    ]
+                                }),
+                                /*#__PURE__*/ _jsxs("div", {
+                                    class: "field",
+                                    children: [
+                                        /*#__PURE__*/ _jsx("label", {
+                                            class: "label",
+                                            children: $__i18n._({
+                                                id: "p2/GCq",
+                                                message: "Confirm Password"
+                                            })
+                                        }),
+                                        /*#__PURE__*/ _jsx("input", {
+                                            type: "password",
+                                            "data-bind": "confirmPassword",
+                                            class: "input",
+                                            required: true,
+                                            minLength: 8,
+                                            autocomplete: "new-password"
+                                        })
+                                    ]
+                                }),
+                                /*#__PURE__*/ _jsx("button", {
+                                    type: "submit",
+                                    class: "btn",
+                                    children: $__i18n._({
+                                        id: "KbS2K9",
+                                        message: "Reset Password"
+                                    })
+                                })
+                            ]
+                        })
+                    })
+                ]
+            })
+        });
+    };
+    const ResetErrorContent = ()=>{
+        const { i18n: $__i18n, _: $__ } = $_useLingui();
+        return /*#__PURE__*/ _jsx("div", {
+            class: "min-h-screen flex items-center justify-center",
+            children: /*#__PURE__*/ _jsxs("div", {
+                class: "card max-w-md w-full",
+                children: [
+                    /*#__PURE__*/ _jsx("header", {
+                        children: /*#__PURE__*/ _jsx("h2", {
+                            children: $__i18n._({
+                                id: "7aECQB",
+                                message: "Invalid or Expired Link"
+                            })
+                        })
+                    }),
+                    /*#__PURE__*/ _jsx("section", {
+                        children: /*#__PURE__*/ _jsx("p", {
+                            class: "text-muted-foreground",
+                            children: $__i18n._({
+                                id: "GbVAnd",
+                                message: "This password reset link is invalid or has expired. Please generate a new one."
+                            })
+                        })
+                    })
+                ]
+            })
+        });
+    };
+    app.get("/reset", async (c)=>{
+        const token = c.req.query("token");
+        if (!token) {
+            return c.html(/*#__PURE__*/ _jsx(BaseLayout, {
+                title: "Reset Password - Jant",
+                c: c,
+                children: /*#__PURE__*/ _jsx(ResetErrorContent, {})
+            }));
+        }
+        const stored = await c.var.services.settings.get(SETTINGS_KEYS.PASSWORD_RESET_TOKEN);
+        if (!stored) {
+            return c.html(/*#__PURE__*/ _jsx(BaseLayout, {
+                title: "Reset Password - Jant",
+                c: c,
+                children: /*#__PURE__*/ _jsx(ResetErrorContent, {})
+            }));
+        }
+        const separatorIndex = stored.lastIndexOf(":");
+        const storedToken = stored.substring(0, separatorIndex);
+        const expiry = parseInt(stored.substring(separatorIndex + 1), 10);
+        const now = Math.floor(Date.now() / 1000);
+        if (token !== storedToken || now > expiry) {
+            return c.html(/*#__PURE__*/ _jsx(BaseLayout, {
+                title: "Reset Password - Jant",
+                c: c,
+                children: /*#__PURE__*/ _jsx(ResetErrorContent, {})
+            }));
+        }
+        return c.html(/*#__PURE__*/ _jsx(BaseLayout, {
+            title: "Reset Password - Jant",
+            c: c,
+            children: /*#__PURE__*/ _jsx(ResetContent, {
+                token: token
+            })
+        }));
+    });
+    app.post("/reset", async (c)=>{
+        const body = await c.req.json();
+        const { password, confirmPassword, token } = body;
+        // Validate token
+        const stored = await c.var.services.settings.get(SETTINGS_KEYS.PASSWORD_RESET_TOKEN);
+        if (!stored) {
+            return sse(c, async (stream)=>{
+                await stream.toast("Invalid or expired reset link.", "error");
+            });
+        }
+        const separatorIndex = stored.lastIndexOf(":");
+        const storedToken = stored.substring(0, separatorIndex);
+        const expiry = parseInt(stored.substring(separatorIndex + 1), 10);
+        const now = Math.floor(Date.now() / 1000);
+        if (token !== storedToken || now > expiry) {
+            return sse(c, async (stream)=>{
+                await stream.toast("Invalid or expired reset link.", "error");
+            });
+        }
+        // Validate passwords
+        if (!password || password.length < 8) {
+            return sse(c, async (stream)=>{
+                await stream.toast("Password must be at least 8 characters.", "error");
+            });
+        }
+        if (password !== confirmPassword) {
+            return sse(c, async (stream)=>{
+                await stream.toast("Passwords do not match.", "error");
+            });
+        }
+        try {
+            const hashedPassword = await hashPassword(password);
+            const db = c.env.DB.withSession();
+            // Get admin user
+            const userResult = await db.prepare("SELECT id FROM user LIMIT 1").first();
+            if (!userResult) {
+                return sse(c, async (stream)=>{
+                    await stream.toast("No user account found.", "error");
+                });
+            }
+            // Update password
+            await db.prepare("UPDATE account SET password = ? WHERE user_id = ? AND provider_id = 'credential'").bind(hashedPassword, userResult.id).run();
+            // Delete all sessions
+            await db.prepare("DELETE FROM session WHERE user_id = ?").bind(userResult.id).run();
+            // Delete the reset token
+            await c.var.services.settings.remove(SETTINGS_KEYS.PASSWORD_RESET_TOKEN);
+            return sse(c, async (stream)=>{
+                await stream.redirect("/signin?reset");
+            });
+        } catch (err) {
+            // eslint-disable-next-line no-console -- Error logging is intentional
+            console.error("Password reset error:", err);
+            return sse(c, async (stream)=>{
+                await stream.toast("Failed to reset password.", "error");
+            });
+        }
+    });
     // Dashboard routes (protected)
     app.use("/dash/*", requireAuth());
     app.route("/dash", dashIndexRoutes);
@@ -460,6 +672,7 @@ import { sse } from "./lib/sse.js";
     app.route("/dash/settings", dashSettingsRoutes);
     app.route("/dash/redirects", dashRedirectsRoutes);
     app.route("/dash/collections", dashCollectionsRoutes);
+    app.route("/dash/appearance", dashAppearanceRoutes);
     // API routes
     app.route("/api/upload", uploadApiRoutes);
     app.route("/api/search", searchApiRoutes);

package/dist/i18n/context.d.ts

@@ -21,7 +21,7 @@ type TranslationDescriptor = {
  *
  * @example
  * ```tsx
- * import { I18nProvider } from "@/i18n";
+ * import { I18nProvider } from "../i18n/index.js";
  *
  * return c.html(
  *   <I18nProvider c={c}>
@@ -41,7 +41,7 @@ export declare const I18nProvider: FC<I18nProviderProps>;
  * @example
  * ```tsx
  * import { t } from "@lingui/core/macro";
- * import { useLingui } from "@/i18n";
+ * import { useLingui } from "../i18n/index.js";
  *
  * function MyComponent() {
  *   const { t: _ } = useLingui();  // Use _ to avoid conflict with macro

package/dist/i18n/context.js

@@ -22,7 +22,7 @@ export const I18nProvider = ({ c, children })=>{
  * @example
  * ```tsx
  * import { t } from "@lingui/core/macro";
- * import { useLingui } from "@/i18n";
+ * import { useLingui } from "../i18n/index.js";
  *
  * function MyComponent() {
  *   const { t: _ } = useLingui();  // Use _ to avoid conflict with macro