@kyro-cms/core 0.1.4 → 0.1.5

package/dist/index.d.ts

@@ -12,15 +12,15 @@ export { PubSub, createWSServer } from './ws/index.js';
 import { ZodTypeAny } from 'zod';
 export { z } from 'zod';
 import { A as AbstractBaseAdapter } from './base-CQkFzqQl.js';
-import { A as AuthAdapter, U as UserRole, a as AuthUser, S as Session, b as AuthTokenConfig, R as RegisterData, c as AuthResult, L as LoginCredentials, J as JWTPayload } from './index-BVFlb7uU.js';
-export { D as DrizzleAdapter, P as PostgresAuthAdapter, d as collectionToDrizzleSchema, e as createDatabase, f as createDrizzleAdapter, g as fieldToDrizzleType, r as runMigrations, s as seedDefaultRoles } from './index-BVFlb7uU.js';
+import { A as AuthAdapter, U as UserRole, a as AuthUser, S as Session, b as AuthTokenConfig, R as RegisterData, c as AuthResult, L as LoginCredentials, J as JWTPayload } from './index-CMUNCIWQ.js';
+export { D as DrizzleAdapter, P as PostgresAuthAdapter, d as collectionToDrizzleSchema, e as createDatabase, f as createDrizzleAdapter, g as fieldToDrizzleType, r as runMigrations, s as seedDefaultRoles } from './index-CMUNCIWQ.js';
 export { MongoDBAdapter, createMongoDBAdapter } from './mongodb/index.js';
 export { buildGraphQLSchema, createGraphQLSchema } from './graphql/index.js';
 export { createHonoApp, createRESTAPI } from './rest/index.js';
+import Database from 'better-sqlite3';
 export { TemplateConfig, allSettingsGlobals, blogCollections, blogGlobals, coreSettingsGlobals, createTemplateConfig, ecommerceCollections, ecommerceGlobals, ecommerceSettingsGlobals, kitchenSinkCollections, mediaCollections, minimalCollections } from './templates/index.js';
 import Redis from 'ioredis';
 import { SentMessageInfo } from 'nodemailer';
-import Database from 'better-sqlite3';
 import 'ws';
 import 'drizzle-orm/postgres-js';
 import 'postgres';
@@ -73,9 +73,9 @@ declare function collectionToUpdateZod(collection: CollectionConfig): ZodTypeAny
 declare function collectionToWhereZod(collection: CollectionConfig): ZodTypeAny;
 declare function globalToZod(global: GlobalConfig): ZodTypeAny;
 
-type DatabaseType = 'postgres' | 'mysql' | 'sqlite' | 'mongodb';
+type DatabaseType$1 = 'postgres' | 'mysql' | 'sqlite' | 'mongodb';
 interface DatabaseConnectionOptions {
-    type: DatabaseType;
+    type: DatabaseType$1;
     host?: string;
     port?: number;
     database?: string;
@@ -392,47 +392,6 @@ declare class RedisAuthAdapter implements AuthAdapter {
     private hashToSession;
 }
 
-interface SQLiteAuthAdapterOptions {
-    path?: string;
-    db?: Database.Database;
-    saltRounds?: number;
-}
-declare class SQLiteAuthAdapter implements AuthAdapter {
-    private db;
-    private path;
-    private saltRounds;
-    private externalDb;
-    constructor(options?: SQLiteAuthAdapterOptions);
-    connect(): Promise<void>;
-    disconnect(): Promise<void>;
-    private ensureTables;
-    createUser(data: {
-        email: string;
-        passwordHash: string;
-        role?: UserRole;
-        tenantId?: string;
-    }): Promise<AuthUser>;
-    findUserByEmail(email: string): Promise<AuthUser | null>;
-    findUserById(userId: string): Promise<AuthUser | null>;
-    updateUser(userId: string, data: Partial<AuthUser>): Promise<AuthUser | null>;
-    deleteUser(userId: string): Promise<boolean>;
-    hashPassword(password: string): Promise<string>;
-    verifyPassword(password: string, hash: string): Promise<boolean>;
-    createSession(userId: string, data?: {
-        ipAddress?: string;
-        userAgent?: string;
-    }): Promise<Session>;
-    findSessionByToken(token: string): Promise<Session | null>;
-    findSessionByRefreshToken(refreshToken: string): Promise<Session | null>;
-    deleteSession(sessionId: string): Promise<boolean>;
-    deleteUserSessions(userId: string): Promise<number>;
-    hasAnyUsers(): Promise<boolean>;
-    addPasswordToHistory(userId: string, passwordHash: string): Promise<void>;
-    getPasswordHistory(userId: string, count?: number): Promise<string[]>;
-    private rowToUser;
-    private rowToSession;
-}
-
 interface EmailConfig {
     host: string;
     port: number;
@@ -495,11 +454,8 @@ declare class EmailTransport {
 }
 
 interface BootstrapConfig {
-    redisUrl?: string;
-    redisHost?: string;
-    redisPort?: number;
-    redisPassword?: string;
     authAdapter?: AuthAdapter;
+    authDbPath?: string;
     adminEmail: string;
     adminPassword: string;
     adminRole?: string;
@@ -687,22 +643,90 @@ declare function createAuditContext(req: Request): {
     userAgent: string;
 };
 
+declare class InMemoryRateLimiter {
+    private storage;
+    private userStorage;
+    private limits;
+    private userLimits;
+    constructor(limits?: Record<string, RateLimitConfig>, userLimits?: Record<string, RateLimitConfig>);
+    private getKey;
+    private getUserKey;
+    private cleanupOldEntries;
+    check(type: string, identifier: string): Promise<RateLimitResult>;
+    checkUser(type: string, userId: string, identifier: string): Promise<RateLimitResult>;
+    reset(type: string, identifier: string): Promise<void>;
+    resetUser(type: string, userId: string, identifier: string): Promise<void>;
+    getStatus(type: string, identifier: string): Promise<{
+        count: number;
+        limit: number;
+        remaining: number;
+        resetAt: number;
+    }>;
+    setLimit(type: string, config: RateLimitConfig): void;
+    setUserLimit(type: string, config: RateLimitConfig): void;
+}
+
+declare class InMemoryAccountLockout {
+    private storage;
+    private history;
+    private config;
+    constructor(config?: Partial<LockoutConfig>);
+    checkLockout(userId: string): Promise<LockoutStatus>;
+    recordFailedAttempt(userId: string): Promise<LockoutStatus>;
+    lockAccount(userId: string, duration?: number): Promise<void>;
+    unlockAccount(userId: string): Promise<void>;
+    resetAttempts(userId: string): Promise<void>;
+    getLockoutHistory(userId: string, limit?: number): Promise<Date[]>;
+    getLockoutStats(userId: string): Promise<{
+        totalFailedAttempts: number;
+        lockoutCount: number;
+        lastLockout: Date | null;
+        averageAttemptsBeforeLockout: number;
+    }>;
+    shouldNotifyAdmin(currentAttempts: number): boolean;
+    getConfig(): LockoutConfig;
+    setConfig(config: Partial<LockoutConfig>): void;
+}
+
+declare class InMemoryAuditLogger {
+    private logs;
+    private retentionDays;
+    constructor(retentionDays?: number);
+    log(data: Omit<AuditLog, "id" | "timestamp">): Promise<string>;
+    get(id: string): Promise<AuditLog | null>;
+    query(filter?: AuditLogFilter): Promise<{
+        logs: AuditLog[];
+        total: number;
+    }>;
+    getRecent(limit?: number): Promise<AuditLog[]>;
+    getUserActivity(userId: string, limit?: number): Promise<AuditLog[]>;
+    getStats(startDate?: Date, endDate?: Date): Promise<{
+        totalEvents: number;
+        byAction: Record<string, number>;
+        successRate: number;
+        failedLogins: number;
+        uniqueUsers: Set<string>;
+    }>;
+    cleanup(): Promise<number>;
+    private cleanupOldLogs;
+}
+
 interface AuthRoutesConfig {
-    redis: RedisAuthAdapter;
+    redis: AuthAdapter;
     email?: EmailTransport;
     jwtSecret: string;
     jwtExpiresIn?: string;
     jwtIssuer?: string;
     jwtAudience?: string;
     passwordPolicy?: PasswordPolicy;
-    lockout?: AccountLockout;
-    rateLimiter?: RateLimiter;
-    auditLogger?: AuditLogger;
+    lockout?: InMemoryAccountLockout;
+    rateLimiter?: InMemoryRateLimiter;
+    auditLogger?: InMemoryAuditLogger;
     baseUrl?: string;
     emailVerificationRequired?: boolean;
 }
 declare class AuthRoutes {
-    private redis;
+    private authAdapter;
     private email?;
     private jwtSecret;
     private jwtExpiresIn;
@@ -730,19 +754,55 @@ declare class AuthRoutes {
     private rateLimitResponse;
 }
 
+type DatabaseType = "sqlite" | "postgres" | "mysql" | "mongodb" | "memory";
 interface KyroAuthConfig {
-    redis: RedisAuthAdapter;
-    redisClient: Redis;
+    authAdapter: AuthAdapter;
+    databaseType?: string;
     email?: EmailTransport;
     passwordPolicy: PasswordPolicy;
-    lockout?: AccountLockout;
-    rateLimiter?: RateLimiter;
-    auditLogger?: AuditLogger;
+    lockout?: InMemoryAccountLockout;
+    rateLimiter?: InMemoryRateLimiter;
+    auditLogger?: InMemoryAuditLogger;
     routes: AuthRoutes;
 }
-declare function createAuthConfig(): Promise<KyroAuthConfig>;
+declare function createAuthConfig(databaseType?: string): Promise<KyroAuthConfig>;
 declare const authConfig: Promise<KyroAuthConfig>;
 
+declare class InMemoryAuthAdapter implements AuthAdapter {
+    private users;
+    private sessions;
+    private refreshTokens;
+    private emailToUserId;
+    private passwordHistory;
+    private externalDb;
+    constructor();
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    createUser(data: {
+        email: string;
+        passwordHash: string;
+        role?: UserRole;
+        tenantId?: string;
+    }): Promise<AuthUser>;
+    findUserByEmail(email: string): Promise<AuthUser | null>;
+    findUserById(userId: string): Promise<AuthUser | null>;
+    updateUser(userId: string, data: Partial<AuthUser>): Promise<AuthUser | null>;
+    deleteUser(userId: string): Promise<boolean>;
+    hashPassword(password: string): Promise<string>;
+    verifyPassword(password: string, hash: string): Promise<boolean>;
+    createSession(userId: string, data?: {
+        ipAddress?: string;
+        userAgent?: string;
+    }): Promise<Session>;
+    findSessionByToken(token: string): Promise<Session | null>;
+    deleteSession(sessionId: string): Promise<boolean>;
+    deleteUserSessions(userId: string): Promise<number>;
+    addPasswordToHistory(userId: string, passwordHash: string): Promise<void>;
+    getPasswordHistory(userId: string, count?: number): Promise<string[]>;
+    isPasswordInHistory(password: string, userId: string, historyCount?: number): Promise<boolean>;
+    hasAnyUsers(): Promise<boolean>;
+}
+
 declare class Auth {
     private adapter;
     private config;
@@ -763,6 +823,113 @@ declare class Auth {
 }
 declare function createAuth(adapter: AuthAdapter, config: AuthTokenConfig): Auth;
 
+interface SQLiteAuthAdapterOptions {
+    path?: string;
+    db?: Database.Database;
+    saltRounds?: number;
+    busyTimeout?: number;
+    walAutoCheckpoint?: number;
+    cacheSize?: number;
+    mmapSize?: number;
+}
+declare class SQLiteAuthAdapter implements AuthAdapter {
+    private db;
+    private path;
+    private saltRounds;
+    private externalDb;
+    private busyTimeout;
+    private walAutoCheckpoint;
+    private cacheSize;
+    private mmapSize;
+    private preparedStatements;
+    constructor(options?: SQLiteAuthAdapterOptions);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    private ensureTables;
+    private prepareStatements;
+    private stmt;
+    cleanupExpiredSessions(): Promise<number>;
+    cleanupOldAuditLogs(retentionDays?: number): Promise<number>;
+    getStats(): Promise<{
+        userCount: number;
+        activeSessionCount: number;
+        auditLogCount: number;
+    }>;
+    createUser(data: {
+        email: string;
+        passwordHash: string;
+        role?: UserRole;
+        tenantId?: string;
+    }): Promise<AuthUser>;
+    findUserByEmail(email: string): Promise<AuthUser | null>;
+    findUserById(userId: string): Promise<AuthUser | null>;
+    updateUser(userId: string, data: Partial<AuthUser>): Promise<AuthUser | null>;
+    deleteUser(userId: string): Promise<boolean>;
+    hashPassword(password: string): Promise<string>;
+    verifyPassword(password: string, hash: string): Promise<boolean>;
+    createSession(userId: string, data?: {
+        ipAddress?: string;
+        userAgent?: string;
+    }): Promise<Session>;
+    findSessionByToken(token: string): Promise<Session | null>;
+    findSessionByRefreshToken(refreshToken: string): Promise<Session | null>;
+    deleteSession(sessionId: string): Promise<boolean>;
+    deleteUserSessions(userId: string): Promise<number>;
+    hasAnyUsers(): Promise<boolean>;
+    addPasswordToHistory(userId: string, passwordHash: string): Promise<void>;
+    getPasswordHistory(userId: string, count?: number): Promise<string[]>;
+    isPasswordInHistory(password: string, userId: string, historyCount?: number): Promise<boolean>;
+    recordFailedAttempt(userId: string): Promise<void>;
+    resetAttempts(userId: string): Promise<void>;
+    checkLockout(userId: string): Promise<{
+        locked: boolean;
+        attemptsRemaining: number;
+        lockedUntil?: Date;
+        totalAttempts: number;
+    }>;
+    logAudit(data: {
+        action: string;
+        userId?: string;
+        userEmail?: string;
+        role?: string;
+        resource: string;
+        resourceId?: string;
+        ipAddress?: string;
+        userAgent?: string;
+        success: boolean;
+        error?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<string>;
+    queryAuditLogs(options?: {
+        action?: string;
+        userId?: string;
+        resource?: string;
+        success?: boolean;
+        startDate?: Date;
+        endDate?: Date;
+        limit?: number;
+        offset?: number;
+    }): Promise<{
+        logs: Array<{
+            id: string;
+            timestamp: Date;
+            action: string;
+            userId?: string;
+            userEmail?: string;
+            resource: string;
+            resourceId?: string;
+            ipAddress?: string;
+            userAgent?: string;
+            success: boolean;
+            error?: string;
+            metadata?: Record<string, unknown>;
+        }>;
+        total: number;
+    }>;
+    private rowToUser;
+    private rowToSession;
+}
+
 type VersionStatus = 'draft' | 'published' | 'archived';
 interface Version<T = Record<string, unknown>> {
     id: string;
@@ -878,4 +1045,4 @@ declare function defineConfig(config: {
     debug?: KyroConfig["debug"];
 }): KyroConfig;
 
-export { AbstractBaseAdapter, AccountLockout, type AdapterOptions, type AdminStylingConfig, AnalyticsPlugin, type AuditAction, type AuditLog, type AuditLogFilter, AuditLogger, Auth, AuthAdapter, AuthResult, Session as AuthSession, AuthTokenConfig, AuthUser, BaseAdapter, CSSGenerator, CollectionConfig, CommentsPlugin, type CompareVersionsOptions, ConfigValidationError, CreateArgs, type CreateVersionOptions, type DatabaseConnectionOptions, type DatabaseType, DeleteArgs, type DraftPublishConfig, type DrizzleAdapterOptions, EmailTransport, Field, type FieldStyling, FindArgs, FindByIDArgs, FindResult, GlobalConfig, Hook, JWTPayload, Kyro, type KyroAuthConfig, KyroConfig, KyroPlugin, KyroPubSub, KyroWSServer, LocalAdapter, LoginCredentials, type MongoDBAdapterOptions, PasswordPolicy, type PluginAPI, type PluginHooks, PluginManager, type PublishVersionOptions, RateLimiter, RedisAuthAdapter, RegisterData, Registry, Request$1 as Request, ReviewsPlugin, SEOPLugin, SQLiteAuthAdapter, type StylingConfig, type StylingMode, type ThemeBorderRadius, type ThemeColors, type ThemeConfig, type ThemeFonts, type ThemeShadows, type ThemeSpacing, UpdateArgs, User, UserRole, type Version, type VersionAdapter, type VersionDiff, type VersionHistoryOptions, VersionManager, type VersionPublishSchedule, type VersionStatus, WishlistPlugin, authConfig, autoBootstrap, bootstrapAdmin, collectionToCreateZod, collectionToUpdateZod, collectionToWhereZod, collectionToZod, createAdminStyling, createAuditContext, createAuth, createAuthConfig, createKyro, createLocalAdapter, createVersionManager, defaultDarkTheme, defaultFieldStyling, defaultLightTheme, defineConfig, ecommerce2026Theme, fieldToZod, generateCSSVariables, generateTailwindConfig, getBootstrapFromEnv, getDefaultDraftPublishConfig, globalToZod, isArchived, isDraft, isPublished, presetPlugins, validateCollection, validateConfig, validateFields, validateGlobal };
+export { AbstractBaseAdapter, AccountLockout, type AdapterOptions, type AdminStylingConfig, AnalyticsPlugin, type AuditAction, type AuditLog, type AuditLogFilter, AuditLogger, Auth, AuthAdapter, AuthResult, Session as AuthSession, AuthTokenConfig, AuthUser, BaseAdapter, CSSGenerator, CollectionConfig, CommentsPlugin, type CompareVersionsOptions, ConfigValidationError, CreateArgs, type CreateVersionOptions, type DatabaseConnectionOptions, type DatabaseType, type DatabaseType$1 as DbAdapterType, DeleteArgs, type DraftPublishConfig, type DrizzleAdapterOptions, EmailTransport, Field, type FieldStyling, FindArgs, FindByIDArgs, FindResult, GlobalConfig, Hook, InMemoryAccountLockout, InMemoryAuditLogger, InMemoryAuthAdapter, InMemoryRateLimiter, JWTPayload, Kyro, type KyroAuthConfig, KyroConfig, KyroPlugin, KyroPubSub, KyroWSServer, LocalAdapter, LoginCredentials, type MongoDBAdapterOptions, PasswordPolicy, type PluginAPI, type PluginHooks, PluginManager, type PublishVersionOptions, RateLimiter, RedisAuthAdapter, RegisterData, Registry, Request$1 as Request, ReviewsPlugin, SEOPLugin, SQLiteAuthAdapter, type StylingConfig, type StylingMode, type ThemeBorderRadius, type ThemeColors, type ThemeConfig, type ThemeFonts, type ThemeShadows, type ThemeSpacing, UpdateArgs, User, UserRole, type Version, type VersionAdapter, type VersionDiff, type VersionHistoryOptions, VersionManager, type VersionPublishSchedule, type VersionStatus, WishlistPlugin, authConfig, autoBootstrap, bootstrapAdmin, collectionToCreateZod, collectionToUpdateZod, collectionToWhereZod, collectionToZod, createAdminStyling, createAuditContext, createAuth, createAuthConfig, createKyro, createLocalAdapter, createVersionManager, defaultDarkTheme, defaultFieldStyling, defaultLightTheme, defineConfig, ecommerce2026Theme, fieldToZod, generateCSSVariables, generateTailwindConfig, getBootstrapFromEnv, getDefaultDraftPublishConfig, globalToZod, isArchived, isDraft, isPublished, presetPlugins, validateCollection, validateConfig, validateFields, validateGlobal };