@kyro-cms/core 0.10.4 → 0.10.6

package/dist/chunk-RHCWCG3O.js

@@ -0,0 +1,114 @@
+import {a,d,j,k,e,h,i}from'./chunk-OG7CNQGU.js';import {sql,eq,desc,and,gt}from'drizzle-orm';import O from'bcryptjs';import {randomBytes}from'crypto';var D=false,S=class{db;prefix;sessionTTL;refreshTokenTTL;constructor(e){this.db=e.db,this.prefix=e.prefix||"kyro:",this.sessionTTL=e.sessionTTL||86400,this.refreshTokenTTL=e.refreshTokenTTL||604800;}async connect(){D||(await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "users" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "name" VARCHAR(255),
+        "email" VARCHAR(255) NOT NULL,
+        "password_hash" VARCHAR(255),
+        "role" VARCHAR(50) NOT NULL DEFAULT 'customer',
+        "tenant_id" UUID,
+        "email_verified" BOOLEAN DEFAULT false,
+        "locked" BOOLEAN DEFAULT false,
+        "last_login" TIMESTAMP,
+        "failed_login_attempts" INTEGER DEFAULT 0,
+        "metadata" JSONB,
+        "avatar" VARCHAR(255),
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "avatar" VARCHAR(255)`),await this.db.execute(sql`CREATE UNIQUE INDEX IF NOT EXISTS "users_email_idx" ON "users" ("email")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "users_tenant_idx" ON "users" ("tenant_id")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "users_role_idx" ON "users" ("role")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "sessions" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "token" VARCHAR(512) NOT NULL UNIQUE,
+        "refresh_token" VARCHAR(512),
+        "ip_address" VARCHAR(45),
+        "user_agent" TEXT,
+        "expires_at" TIMESTAMP NOT NULL,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_user_idx" ON "sessions" ("user_id")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_token_idx" ON "sessions" ("token")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_expires_idx" ON "sessions" ("expires_at")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "audit_logs" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "action" VARCHAR(100) NOT NULL,
+        "user_id" UUID REFERENCES "users"("id") ON DELETE SET NULL,
+        "user_email" VARCHAR(255),
+        "role" VARCHAR(50),
+        "resource" VARCHAR(100) NOT NULL,
+        "resource_id" VARCHAR(255),
+        "changes" JSONB,
+        "ip_address" VARCHAR(45),
+        "user_agent" TEXT,
+        "success" BOOLEAN NOT NULL DEFAULT true,
+        "error" TEXT,
+        "metadata" JSONB,
+        "timestamp" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`ALTER TABLE "audit_logs" ALTER COLUMN "resource_id" TYPE VARCHAR(255)`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_user_idx" ON "audit_logs" ("user_id")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_action_idx" ON "audit_logs" ("action")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_resource_idx" ON "audit_logs" ("resource")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_timestamp_idx" ON "audit_logs" ("timestamp")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "password_history" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "password_hash" VARCHAR(255) NOT NULL,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "password_history_user_idx" ON "password_history" ("user_id")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "lockouts" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "ip_address" VARCHAR(45),
+        "reason" VARCHAR(255),
+        "locked_until" TIMESTAMP NOT NULL,
+        "released_at" TIMESTAMP,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "lockouts_user_idx" ON "lockouts" ("user_id")`),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "lockouts_locked_until_idx" ON "lockouts" ("locked_until")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "roles" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "name" VARCHAR(100) NOT NULL UNIQUE,
+        "level" INTEGER NOT NULL DEFAULT 0,
+        "inherits" TEXT[],
+        "description" TEXT,
+        "permissions" JSONB DEFAULT '[]',
+        "is_system" BOOLEAN DEFAULT false,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "roles_level_idx" ON "roles" ("level")`),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "tenants" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "name" VARCHAR(255) NOT NULL,
+        "slug" VARCHAR(100) NOT NULL UNIQUE,
+        "settings" JSONB DEFAULT '{}',
+        "is_active" BOOLEAN DEFAULT true,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "api_keys" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "name" VARCHAR(255) NOT NULL,
+        "key" VARCHAR(64) NOT NULL UNIQUE,
+        "key_prefix" VARCHAR(8) NOT NULL,
+        "permissions" JSONB DEFAULT '[]',
+        "last_used_at" TIMESTAMP,
+        "expires_at" TIMESTAMP,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "email_verifications" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "token" VARCHAR(64) NOT NULL UNIQUE,
+        "expires_at" TIMESTAMP NOT NULL,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),await this.db.execute(sql`
+      CREATE TABLE IF NOT EXISTS "password_resets" (
+        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+        "token" VARCHAR(64) NOT NULL UNIQUE,
+        "expires_at" TIMESTAMP NOT NULL,
+        "used_at" TIMESTAMP,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+      )
+    `),D=true);}async disconnect(){}async createUser(e){let s=await this.hashPassword(e.password),[t]=await this.db.insert(a).values({email:e.email.toLowerCase(),name:e.name,passwordHash:s,role:e.role||"customer",avatar:e.avatar,tenantId:e.tenantId}).returning();return this.userToAuthUser(t)}async findUserByEmail(e){let[s]=await this.db.select().from(a).where(eq(a.email,e.toLowerCase())).limit(1);return s?this.userToAuthUser(s):null}async findUserById(e){let[s]=await this.db.select().from(a).where(eq(a.id,e)).limit(1);return s?this.userToAuthUser(s):null}async updateUser(e,s){let t={updatedAt:new Date};s.name!==void 0&&(t.name=s.name),s.email!==void 0&&(t.email=s.email),s.passwordHash!==void 0&&(t.passwordHash=s.passwordHash),s.role!==void 0&&(t.role=s.role),s.tenantId!==void 0&&(t.tenantId=s.tenantId),s.avatar!==void 0&&(t.avatar=s.avatar),s.emailVerified!==void 0&&(t.emailVerified=s.emailVerified),s.locked!==void 0&&(t.locked=s.locked),s.lastLogin!==void 0&&(t.lastLogin=s.lastLogin?new Date(s.lastLogin):null),s.failedLoginAttempts!==void 0&&(t.failedLoginAttempts=s.failedLoginAttempts);let[r]=await this.db.update(a).set(t).where(eq(a.id,e)).returning();return r?this.userToAuthUser(r):null}async deleteUser(e){return await this.db.delete(a).where(eq(a.id,e)),true}async findUsers(e={}){let s=e.page??1,t=e.limit??10,r=(s-1)*t,u=e.search;if(u){let m=`%${u}%`,[U,[{count:f}]]=await Promise.all([this.db.select().from(a).where(sql`${a.email} ILIKE ${m}`).orderBy(desc(a.createdAt)).limit(t).offset(r),this.db.select({count:sql`count(*)`}).from(a).where(sql`${a.email} ILIKE ${m}`)]);return {users:U.map(c=>this.userToAuthUser(c)),total:Number(f)}}let[l,[{count:E}]]=await Promise.all([this.db.select().from(a).orderBy(desc(a.createdAt)).limit(t).offset(r),this.db.select({count:sql`count(*)`}).from(a)]);return {users:l.map(m=>this.userToAuthUser(m)),total:Number(E)}}async verifyPassword(e,s){let t=await this.findUserByEmail(e);if(!t)return null;let[r]=await this.db.select().from(a).where(eq(a.email,e.toLowerCase())).limit(1);return r?.passwordHash&&await O.compare(s,r.passwordHash)?t:null}async hashPassword(e){return O.hash(e,12)}async createSession(e,s){let t=randomBytes(32).toString("base64url"),r=randomBytes(32).toString("base64url"),u=new Date(Date.now()+this.sessionTTL*1e3);new Date(Date.now()+this.refreshTokenTTL*1e3);let [E]=await this.db.insert(d).values({userId:e,token:t,refreshToken:r,ipAddress:s?.ipAddress,userAgent:s?.userAgent,expiresAt:u}).returning();return this.sessionToSession(E)}async findSessionByToken(e){let[s]=await this.db.select().from(d).where(and(eq(d.token,e),gt(d.expiresAt,new Date))).limit(1);return s?this.sessionToSession(s):null}async findSessionByRefreshToken(e){let[s]=await this.db.select().from(d).where(and(eq(d.refreshToken,e),gt(d.expiresAt,new Date))).limit(1);return s?this.sessionToSession(s):null}async deleteSession(e){return await this.db.delete(d).where(eq(d.id,e)),true}async deleteUserSessions(e){return await this.db.delete(d).where(eq(d.userId,e)),1}async addPasswordToHistory(e,s){await this.db.insert(j).values({userId:e,passwordHash:s});}async getPasswordHistory(e,s=5){return (await this.db.select({passwordHash:j.passwordHash}).from(j).where(eq(j.userId,e)).orderBy(desc(j.createdAt)).limit(s)).map(r=>r.passwordHash)}async isPasswordInHistory(e,s,t=5){let r=await this.getPasswordHistory(s,t);for(let u of r)if(await this.verifyPassword(e,u))return  true;return  false}async isLocked(e){let[s]=await this.db.select().from(k).where(and(eq(k.userId,e),gt(k.lockedUntil,new Date))).limit(1);return !!s}async getLockout(e){let[s]=await this.db.select().from(k).where(and(eq(k.userId,e),gt(k.lockedUntil,new Date))).limit(1);return s?{lockedUntil:s.lockedUntil}:null}async recordFailedAttempt(e,s){let r=((await this.findUserById(e))?.failedLoginAttempts||0)+1;await this.updateUser(e,{failedLoginAttempts:r});let l=r>=5;return l&&await this.db.insert(k).values({userId:e,ipAddress:s,reason:"Too many failed login attempts",lockedUntil:new Date(Date.now()+9e5)}),{attempts:r,locked:l}}async resetAttempts(e){await this.updateUser(e,{failedLoginAttempts:0});}async findAuditLogs(e$1){let{limit:s=50,offset:t=0,userId:r,action:u,resource:l,resourceId:E,success:m,startDate:U,endDate:f}=e$1,c=[];r&&c.push(eq(e.userId,r)),u&&(Array.isArray(u)?c.push(sql`${e.action} = ANY(${u})`):c.push(eq(e.action,u))),l&&c.push(eq(e.resource,l)),E&&c.push(eq(e.resourceId,E)),m!==void 0&&c.push(eq(e.success,m)),U&&c.push(sql`${e.timestamp} >= ${U}`),f&&c.push(sql`${e.timestamp} <= ${f}`);let R=c.length>0?and(...c):void 0,_=await this.db.select({count:sql`count(*)`}).from(e).where(R);return {logs:(await this.db.select().from(e).where(R).orderBy(desc(e.timestamp)).limit(s).offset(t)).map(o=>({id:o.id,timestamp:o.timestamp,action:o.action,userId:o.userId||void 0,userEmail:o.userEmail||void 0,role:o.role||void 0,resource:o.resource,resourceId:o.resourceId||void 0,changes:o.changes||void 0,ipAddress:o.ipAddress||void 0,userAgent:o.userAgent||void 0,success:o.success,error:o.error||void 0,metadata:o.metadata||void 0})),total:Number(_[0]?.count||0)}}async createAuditLog(e$1){let s=crypto.randomUUID(),t=new Date;return await this.db.insert(e).values({id:s,action:e$1.action,userId:e$1.userId??null,userEmail:e$1.userEmail??null,role:e$1.role??null,resource:e$1.resource,resourceId:e$1.resourceId??null,changes:e$1.changes??null,ipAddress:e$1.ipAddress??null,userAgent:e$1.userAgent??null,success:e$1.success,error:e$1.error??null,metadata:e$1.metadata??null,timestamp:t}),{...e$1,id:s,timestamp:t}}userToAuthUser(e){return {id:e.id,name:e.name||void 0,email:e.email,passwordHash:e.passwordHash||void 0,role:e.role,avatar:e.avatar&&typeof e.avatar=="object"?e.avatar.id||void 0:e.avatar||void 0,tenantId:e.tenantId||void 0,emailVerified:e.emailVerified||false,locked:e.locked||false,lastLogin:e.lastLogin?new Date(e.lastLogin).toISOString():void 0,failedLoginAttempts:e.failedLoginAttempts||0,createdAt:new Date(e.createdAt).toISOString(),updatedAt:new Date(e.updatedAt).toISOString()}}sessionToSession(e){return {id:e.id,userId:e.userId,token:e.token,refreshToken:e.refreshToken||void 0,expiresAt:new Date(e.expiresAt).toISOString(),createdAt:new Date(e.createdAt).toISOString(),ipAddress:e.ipAddress||void 0,userAgent:e.userAgent||void 0}}async createEmailVerificationToken(e){let s=randomBytes(32).toString("hex"),t=new Date(Date.now()+1440*60*1e3);return await this.db.insert(h).values({userId:e,token:s,expiresAt:t}),{token:s,expiresAt:t}}async verifyEmailToken(e){let[s]=await this.db.select().from(h).where(eq(h.token,e)).limit(1);return s?s.expiresAt<new Date?{success:false,error:"Verification token has expired"}:(await this.db.update(a).set({emailVerified:true}).where(eq(a.id,s.userId)),await this.db.delete(h).where(eq(h.id,s.id)),{success:true,userId:s.userId}):{success:false,error:"Invalid verification token"}}async createPasswordResetToken(e){let s=await this.findUserByEmail(e);if(!s)return {token:"",expiresAt:new Date,error:"User not found"};let t=randomBytes(32).toString("hex"),r=new Date(Date.now()+3600*1e3);return await this.db.insert(i).values({userId:s.id,token:t,expiresAt:r}),{token:t,expiresAt:r}}async resetPasswordWithToken(e,s){let[t]=await this.db.select().from(i).where(eq(i.token,e)).limit(1);if(!t)return {success:false,error:"Invalid reset token"};if(t.expiresAt<new Date)return {success:false,error:"Reset token has expired"};if(t.usedAt)return {success:false,error:"Reset token has already been used"};let r=await this.hashPassword(s);return await this.db.update(a).set({passwordHash:r,updatedAt:new Date}).where(eq(a.id,t.userId)),await this.db.update(i).set({usedAt:new Date}).where(eq(i.id,t.id)),await this.db.delete(d).where(eq(d.userId,t.userId)),{success:true}}};export{S as a};

package/dist/chunk-SL3LZQCF.js

@@ -0,0 +1 @@
+import {WebSocketServer,WebSocket}from'ws';var o=class{channels=new Map;maxListeners;constructor(e=100){this.maxListeners=e;}subscribe(e,t){this.channels.has(e)||this.channels.set(e,new Set);let s=this.channels.get(e);if(s.size>=this.maxListeners)throw new Error(`Max listeners (${this.maxListeners}) reached for channel "${e}"`);return s.add(t),()=>{s.delete(t),s.size===0&&this.channels.delete(e);}}publish(e,t){let s=this.channels.get(e);if(s)for(let n of s)try{let i=n(t);i instanceof Promise&&i.catch(l=>{console.error(`[PubSub] Error in handler for channel "${e}":`,l);});}catch(i){console.error(`[PubSub] Error in handler for channel "${e}":`,i);}}hasSubscribers(e){return this.channels.has(e)&&this.channels.get(e).size>0}getSubscriberCount(e){return this.channels.get(e)?.size||0}getChannels(){return Array.from(this.channels.keys())}clear(){this.channels.clear();}},c=class extends o{registry;constructor(e,t=100){super(t),this.registry=e;}publishCollectionEvent(e,t){this.publish(`collection:${e}`,t),this.publish("events:collection",t),t.tenantID&&(this.publish(`tenant:${t.tenantID}:collection:${e}`,t),this.publish(`tenant:${t.tenantID}:events`,t)),this.publish(`collection:${e}:${t.type}`,t);}subscribeToCollection(e,t){return this.subscribe(`collection:${e}`,t)}subscribeToCollectionEvent(e,t,s){return this.subscribe(`collection:${e}:${t}`,s)}subscribeToTenant(e,t){return this.subscribe(`tenant:${e}:events`,t)}subscribeToTenantCollection(e,t,s){return this.subscribe(`tenant:${e}:collection:${t}`,s)}subscribeToAllCollections(e){return this.subscribe("events:collection",e)}createAfterChangeHook(e){return async t=>{this.publishCollectionEvent(e,{type:t.operation==="create"?"create":"update",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantID:t.tenantID,timestamp:new Date().toISOString(),user:t.user});}}createAfterDeleteHook(e){return async t=>{this.publishCollectionEvent(e,{type:"delete",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantID:t.tenantID,timestamp:new Date().toISOString(),user:t.user});}}autoRegisterHooks(){let e=this.registry.getCollections();for(let t of e){let s=this.registry.getCollection(t.slug);s&&(s.hooks||(s.hooks={}),s.hooks.afterChange||(s.hooks.afterChange=[]),s.hooks.afterDelete||(s.hooks.afterDelete=[]),s.hooks.afterChange.push(this.createAfterChangeHook(t.slug)),s.hooks.afterDelete.push(this.createAfterDeleteHook(t.slug)));}}};var a=class{wss;clients=new Map;pubsub;options;pingTimer;constructor(e){this.options=e,this.pubsub=e.pubsub,this.wss=new WebSocketServer({port:e.port||8080}),this.setupServer(),this.startPingInterval();}setupServer(){this.wss.on("connection",(e,t)=>{let s=this.generateClientId();if(this.options.maxConnections&&this.clients.size>=this.options.maxConnections){e.close(1013,"Server at capacity");return}let n={id:s,ws:e,subscriptions:new Map,authenticated:false,connectedAt:new Date,lastActivity:new Date};this.clients.set(s,n),this.sendToClient(n,{type:"connected",clientId:s,timestamp:new Date().toISOString()}),e.on("message",i=>{this.handleMessage(n,i);}),e.on("error",i=>{console.error(`[WS] Client error ${s}:`,i);}),e.on("close",()=>{this.handleDisconnect(n);}),e.on("pong",()=>{n.lastActivity=new Date;});}),this.wss.on("error",e=>{console.error("[WS] Server error:",e);});}handleMessage(e,t){e.lastActivity=new Date;let s;try{s=JSON.parse(t.toString());}catch{this.sendToClient(e,{type:"error",error:"Invalid JSON"});return}switch(s.type){case "authenticate":this.handleAuthenticate(e,s);break;case "subscribe":this.handleSubscribe(e,s);break;case "unsubscribe":this.handleUnsubscribe(e,s);break;case "unsubscribeAll":this.handleUnsubscribeAll(e);break;case "list":this.handleList(e);break;case "ping":this.sendToClient(e,{type:"pong",timestamp:new Date().toISOString()});break;default:this.sendToClient(e,{type:"error",error:`Unknown message type: ${s.type}`});}}async handleAuthenticate(e,t){if(!this.options.requireAuth){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}if(!this.options.verifyToken){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}try{let s=await this.options.verifyToken(t.token);e.authenticated=!0,e.user=s,e.tenantID=s.tenantID,this.sendToClient(e,{type:"authenticated",success:!0,user:{id:s.id,email:s.email}});}catch(s){this.sendToClient(e,{type:"authenticated",success:false,error:s.message});}}handleSubscribe(e,t){if(this.options.requireAuth&&!e.authenticated){this.sendToClient(e,{type:"error",error:"Not authenticated"});return}let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}if(e.subscriptions.has(s)){this.sendToClient(e,{type:"subscribed",channel:s,success:true,message:"Already subscribed"});return}let n=this.pubsub.subscribe(s,i=>{this.sendToClient(e,{type:"event",channel:s,data:i,timestamp:new Date().toISOString()});});e.subscriptions.set(s,{channel:s,unsubscribe:n}),this.sendToClient(e,{type:"subscribed",channel:s,success:true});}handleUnsubscribe(e,t){let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}let n=e.subscriptions.get(s);n?(n.unsubscribe(),e.subscriptions.delete(s),this.sendToClient(e,{type:"unsubscribed",channel:s,success:true})):this.sendToClient(e,{type:"unsubscribed",channel:s,success:false,message:"Not subscribed"});}handleUnsubscribeAll(e){for(let[,t]of e.subscriptions)t.unsubscribe();e.subscriptions.clear(),this.sendToClient(e,{type:"unsubscribedAll",success:true});}handleList(e){let t=this.pubsub.getChannels();this.sendToClient(e,{type:"channels",channels:t,count:t.length});}handleDisconnect(e){for(let[,t]of e.subscriptions)t.unsubscribe();this.clients.delete(e.id);}sendToClient(e,t){e.ws.readyState===WebSocket.OPEN&&e.ws.send(JSON.stringify(t));}generateClientId(){return `ws_${Date.now()}_${Math.random().toString(36).slice(2,9)}`}startPingInterval(){this.options.pingInterval&&(this.pingTimer=setInterval(()=>{for(let[e,t]of this.clients)if(t.ws.readyState===WebSocket.OPEN){if(Date.now()-t.lastActivity.getTime()>this.options.pingInterval*3){t.ws.terminate(),this.handleDisconnect(t);continue}t.ws.ping();}},this.options.pingInterval));}broadcast(e,t){this.pubsub.publish(e,t);}getConnectedClients(){return Array.from(this.clients.values())}getClientCount(){return this.clients.size}getSubscriptionCount(){let e=0;for(let t of this.clients.values())e+=t.subscriptions.size;return e}async close(){this.pingTimer&&clearInterval(this.pingTimer);for(let e of this.clients.values())e.ws.close(1001,"Server shutting down");return new Promise(e=>{this.wss.close(()=>{e();});})}getServer(){return this.wss}};function p(r){return new a(r)}export{o as a,c as b,a as c,p as d};

package/dist/chunk-UBHFUFD4.cjs

@@ -0,0 +1 @@
+'use strict';

package/dist/chunk-UBRYJP2G.js

@@ -0,0 +1 @@
+import {pgTable,timestamp,jsonb,varchar,text,integer,uuid,index}from'drizzle-orm/pg-core';var m=pgTable("media",{id:uuid("id").primaryKey().defaultRandom(),filename:varchar("filename",{length:255}).notNull().unique(),title:varchar("title",{length:255}),originalName:varchar("original_name",{length:255}).notNull(),mimeType:varchar("mime_type",{length:100}).notNull(),fileSize:integer("file_size").notNull(),width:integer("width"),height:integer("height"),url:text("url").notNull().unique(),thumbnailUrl:text("thumbnail_url"),folder:varchar("folder",{length:255}),provider:varchar("provider",{length:50}).notNull(),alt:text("alt"),caption:text("caption"),type:varchar("type",{length:50}).notNull().default("other"),status:varchar("status",{length:20}).notNull().default("active"),metadata:jsonb("metadata").$type(),createdAt:timestamp("created_at").defaultNow().notNull(),updatedAt:timestamp("updated_at").defaultNow().notNull()},t=>[index("media_folder_idx").on(t.folder),index("media_provider_idx").on(t.provider),index("media_filename_idx").on(t.filename)]),p=pgTable("media_folders",{path:varchar("path",{length:500}).primaryKey(),name:varchar("name",{length:255}).notNull(),parentPath:varchar("parent_path",{length:500}),createdAt:timestamp("created_at").defaultNow().notNull()},t=>[index("media_folders_parent_idx").on(t.parentPath)]);export{m as a,p as b};

package/dist/chunk-UDSJGML2.cjs

@@ -0,0 +1,2 @@
+'use strict';var chunkDV4LFLPL_cjs=require('./chunk-DV4LFLPL.cjs'),crypto=require('crypto');var _=class extends chunkDV4LFLPL_cjs.a{client;db;database;connectionString;constructor(i){if(super(),i.connectionString){this.connectionString=i.connectionString;try{let e=new URL(i.connectionString);this.database=e.pathname.replace(/^\//,"")||"kyro_cms";}catch{this.database="kyro_cms";}}else this.client=i.client,this.database=i.database;}async connect(){if(this.connectionString&&!this.client){let{MongoClient:i}=await import('mongodb');this.client=new i(this.connectionString),await this.client.connect();}this.db=this.client.db(this.database),this.connected=true;}async disconnect(){this.client&&(await this.client.close(),this.connected=false);}getMongoCollection(i){if(!this.db)throw new Error("MongoDB not connected");return this.db.collection(i)}async find(i){let{collection:e,where:n={},sort:s,limit:t=10,page:o=1,tenantID:r,select:a,draft:l}=i,c=this.getCollectionConfig(e),g=this.getMongoCollection(e),u={...n};this.tenantContext&&c.tenantScoped&&(u=chunkDV4LFLPL_cjs.c({where:u},e,this.tenantContext,chunkDV4LFLPL_cjs.b).where||{});let d=this.buildFilter(u,r);l||(d.status="published");let h=this.parseSort(s),p={[h.field]:h.direction==="asc"?1:-1},I=(o-1)*t,[R,b]=await Promise.all([g.find(d).sort(p).skip(I).limit(t).project(this.buildProjection(a)).toArray(),g.countDocuments(d)]),m=R.map(f=>this.processResult(f,c));return this.tenantContext&&!this.tenantContext.isSuperAdmin&&(m=m.filter(f=>chunkDV4LFLPL_cjs.d(f,e,this.tenantContext,chunkDV4LFLPL_cjs.b))),l&&(m=await Promise.all(m.map(async f=>{let D=await this.getMongoCollection(`${e}_versions`).findOne({document_id:f.id},{sort:{createdAt:-1}});if(D){let $=D.data||{};return {...f,...$,status:f.status}}return f}))),{docs:m,...this.calculatePagination(o,t,b)}}async findByID(i){let{collection:e,id:n,tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e);if(this.tenantContext&&o.tenantScoped){let g={_id:n,tenantId:this.tenantContext.tenantId};if(!chunkDV4LFLPL_cjs.d(g,e,this.tenantContext,chunkDV4LFLPL_cjs.b))return null}let a={_id:n};s&&(a.tenantId=s),t||(a.status="published");let l=await r.findOne(a);if(!l)return null;let c=this.processResult(l,o);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:c.id},{sort:{createdAt:-1}});if(u){let d=u.data||{};c={...c,...d,status:c.status};}}return c}async create(i){let{collection:e,data:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={...this.prepareData(n,t),_id:this.generateId()};return s&&(r.tenantId=s),await o.insertOne(r),this.processResult(r,t)}async update(i){let{collection:e,id:n,data:s,tenantID:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a={_id:n};t&&(a.tenantId=t);let l=this.prepareData(s,o),c=await r.findOneAndUpdate(a,{$set:l},{returnDocument:"after"});if(!c)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(c,o)}async delete(i){let{collection:e,id:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={_id:n};s&&(r.tenantId=s);let a=await o.findOneAndDelete(r);if(!a)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(a,t)}async count(i){let{collection:e,where:n={},tenantID:s}=i,t=this.getMongoCollection(e),o=this.buildFilter(n,s);return t.countDocuments(o)}async findOne(i){let{collection:e,where:n={},tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a=this.buildFilter(n,s);t||(a.status="published");let l=await r.findOne(a);if(!l)return null;let c=this.processResult(l,o);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:c.id},{sort:{createdAt:-1}});if(u){let d=u.data||{};c={...c,...d,status:c.status};}}return c}async findVersions(i){let{collection:e,documentId:n,sort:s,limit:t=10,page:o=1,tenantID:r}=i,a=this.getMongoCollection(`${e}_versions`),l={document_id:n,autosave:{$ne:true}};r&&(l.tenant_id=r);let c=(o-1)*t,g=this.parseSort(s),u={[g.field]:g.direction==="asc"?1:-1},[d,h]=await Promise.all([a.find(l).sort(u).skip(c).limit(t).toArray(),a.countDocuments(l)]);return {docs:d.map(p=>this.processResult(p,{})),...this.calculatePagination(o,t,h)}}async findVersionByID(i){let{collection:e,versionId:n,tenantID:s}=i,t=this.getMongoCollection(`${e}_versions`),o={_id:n};s&&(o.tenant_id=s);let r=await t.findOne(o);return r?this.processResult(r,{}):null}async createVersion(i){let{collection:e,documentId:n,data:s,status:t,createdBy:o,changeDescription:r,tenantID:a,autosave:l}=i,c=this.getMongoCollection(`${e}_versions`);if(l){let d={document_id:n,collection_slug:e,autosave:true};a&&(d.tenant_id=a);let h=await c.findOne(d);if(h){let p=new Date().toISOString();return await c.updateOne({_id:h._id},{$set:{data:s,status:t,updatedAt:p}}),this.processResult({...h,data:s,status:t,updatedAt:p},{})}}let g=new Date().toISOString(),u={_id:this.generateId(),document_id:n,collection_slug:e,tenant_id:a,data:s,status:t,autosave:l===true,created_by:o,change_description:r,createdAt:g,updatedAt:g};if(await c.insertOne(u),!l){let d=this.getCollectionConfig(e);d.versions?.maxPerDoc&&await this.deleteVersions({collection:e,documentId:n,keepLatest:d.versions.maxPerDoc,tenantID:a});}return this.processResult(u,{})}async updateLatestVersion(i){return this.createVersion({...i,autosave:true})}async deleteVersions(i){let{collection:e,documentId:n,keepLatest:s,tenantID:t}=i,o=this.getMongoCollection(`${e}_versions`);if(s){let r={document_id:n,autosave:{$ne:true}};t&&(r.tenant_id=t);let l=(await o.find(r).sort({createdAt:-1}).limit(s).project({_id:1}).toArray()).map(c=>c._id);l.length>0&&await o.deleteMany({document_id:n,autosave:{$ne:true},_id:{$nin:l},...t?{tenant_id:t}:{}});}else {let r={document_id:n};t&&(r.tenant_id=t),await o.deleteMany(r);}}async migrate(){for(let i of this.collections.values()){let e=this.getMongoCollection(i.slug);await e.createIndex({_id:1}),i.tenantScoped&&await e.createIndex({tenantId:1}),i.timestamps&&await e.createIndex({createdAt:-1});for(let n of i.fields)n.unique&&n.name&&await e.createIndex({[n.name]:1},{unique:true}),n.indexed&&n.name&&await e.createIndex({[n.name]:1});}}getCollectionConfig(i){let e=this.collections.get(i);if(!e)throw new Error(`Collection "${i}" not found`);return e}buildFilter(i={},e){let n={};e&&(n.tenantId=e);for(let[s,t]of Object.entries(i))if(s==="AND"&&Array.isArray(t)){let o=t.map(r=>this.buildFilter(r));Object.assign(n,...o);}else if(s==="OR"&&Array.isArray(t))n.$or=t.map(o=>this.buildFilter(o));else if(typeof t=="object"&&t!==null&&!Array.isArray(t)){let o={};if(t.equals!==void 0){n[s==="id"?"_id":s]=t.equals;continue}t.not_equals!==void 0&&(o.$ne=t.not_equals),t.in!==void 0&&(o.$in=t.in),t.not_in!==void 0&&(o.$nin=t.not_in),t.greater_than!==void 0&&(o.$gt=t.greater_than),t.greater_than_equal!==void 0&&(o.$gte=t.greater_than_equal),t.less_than!==void 0&&(o.$lt=t.less_than),t.less_than_equal!==void 0&&(o.$lte=t.less_than_equal),t.like!==void 0&&(o.$regex=new RegExp(t.like.replace(/%/g,".*"),"i")),t.not_like!==void 0&&(o.$not=new RegExp(t.not_like.replace(/%/g,".*"),"i")),t.contains!==void 0&&(o.$regex=new RegExp(`.*${t.contains}.*`,"i")),t.exists!==void 0&&(o.$exists=t.exists),Object.keys(o).length>0&&(n[s==="id"?"_id":s]=o);}else n[s==="id"?"_id":s]=t;return n}buildProjection(i){if(!i||i.length===0)return;let e={_id:1};for(let n of i)e[n]=1;return e}processResult(i,e){if(!i)return null;let n={...i};return i._id&&(n.id=i._id,delete n._id),delete n.__v,n.createdAt&&(n.createdAt=new Date(n.createdAt).toISOString()),n.updatedAt&&(n.updatedAt=new Date(n.updatedAt).toISOString()),n}generateId(){let i=Date.now().toString(16).padStart(12,"0"),e=crypto.randomBytes(6).toString("hex");return i+e}};function M(w){return new _(w)}
+exports.a=_;exports.b=M;

package/dist/chunk-UHFDH3PG.js

@@ -0,0 +1,20 @@
+var a=class{constructor(s){this.config=s;}config;css=[];addRule(s,e){let n=Object.entries(e).map(([o,t])=>`  ${o}: ${t};`).join(`
+`);return this.css.push(`${s} {
+${n}
+}`),this}addMediaQuery(s,e){return this.css.push(`@media (min-width: ${s}) {
+  ${e.join(`
+  `)}
+}`),this}generate(){return this.css.join(`
+
+`)}};function p(r){return {theme:{extend:{colors:r.colors||{},fontFamily:r.fonts||{},spacing:r.spacing||{},borderRadius:r.borderRadius||{},boxShadow:r.shadows||{},screens:r.breakpoints||{}}}}}var i={colors:{primary:"#3b82f6",secondary:"#6366f1",accent:"#ec4899",background:"#ffffff",surface:"#f9fafb",text:"#111827",textMuted:"#6b7280",border:"#e5e7eb",error:"#ef4444",warning:"#f59e0b",success:"#10b981",info:"#3b82f6"},fonts:{sans:"system-ui, -apple-system, sans-serif",serif:"Georgia, serif",mono:"Menlo, monospace"},spacing:{xs:"0.25rem",sm:"0.5rem",md:"1rem",lg:"1.5rem",xl:"2rem","2xl":"3rem","3xl":"4rem"},borderRadius:{sm:"0.125rem",md:"0.375rem",lg:"0.5rem",xl:"0.75rem",full:"9999px"},shadows:{sm:"0 1px 2px 0 rgb(0 0 0 / 0.05)",md:"0 4px 6px -1px rgb(0 0 0 / 0.1)",lg:"0 10px 15px -3px rgb(0 0 0 / 0.1)",xl:"0 20px 25px -5px rgb(0 0 0 / 0.1)"}},l={colors:{primary:"#60a5fa",secondary:"#818cf8",accent:"#f472b6",background:"#111827",surface:"#1f2937",text:"#f9fafb",textMuted:"#9ca3af",border:"#374151",error:"#f87171",warning:"#fbbf24",success:"#34d399",info:"#60a5fa"},fonts:i.fonts,spacing:i.spacing,borderRadius:i.borderRadius,shadows:{sm:"0 1px 2px 0 rgb(0 0 0 / 0.3)",md:"0 4px 6px -1px rgb(0 0 0 / 0.4)",lg:"0 10px 15px -3px rgb(0 0 0 / 0.5)",xl:"0 20px 25px -5px rgb(0 0 0 / 0.6)"}},m={colors:{primary:"#FF6B35",secondary:"#1A1A2E",accent:"#16C79A",background:"#FFFFFF",surface:"#F8F9FA",text:"#1A1A2E",textMuted:"#6B7280",border:"#E5E7EB",error:"#EF4444",warning:"#F59E0B",success:"#16C79A",info:"#3B82F6"},fonts:{sans:'"Inter", "Satoshi", system-ui, sans-serif',serif:'"Playfair Display", Georgia, serif',mono:'"JetBrains Mono", monospace'},spacing:{xs:"0.125rem",sm:"0.25rem",md:"0.5rem",lg:"1rem",xl:"1.5rem","2xl":"2rem","3xl":"3rem","4xl":"4rem"},borderRadius:{sm:"0",md:"0",lg:"0",xl:"0",full:"9999px"},shadows:{sm:"0 1px 2px rgba(0,0,0,0.05)",md:"0 4px 6px rgba(0,0,0,0.07)",lg:"0 10px 15px rgba(0,0,0,0.1)",xl:"0 20px 25px rgba(0,0,0,0.15)"}};function d(r){let s=[];if(r.colors)for(let[e,n]of Object.entries(r.colors))s.push(`  --color-${e}: ${n};`);if(r.fonts)for(let[e,n]of Object.entries(r.fonts))s.push(`  --font-${e}: ${n};`);if(r.spacing)for(let[e,n]of Object.entries(r.spacing))s.push(`  --spacing-${e}: ${n};`);if(r.borderRadius)for(let[e,n]of Object.entries(r.borderRadius))s.push(`  --radius-${e}: ${n};`);if(r.shadows)for(let[e,n]of Object.entries(r.shadows))s.push(`  --shadow-${e}: ${n};`);return `:root {
+${s.join(`
+`)}
+}`}function f(r){let s=d(r.theme||i),e=[];if(r.componentOverrides)for(let[n,o]of Object.entries(r.componentOverrides)){let t=Object.entries(o).map(([g,c])=>`  ${g}: ${c};`).join(`
+`);e.push(`${n} {
+${t}
+}`);}return `
+    ${s}
+    ${r.customStyles||""}
+    ${e.join(`
+`)}
+  `}var x={text:{wrapper:{marginBottom:"var(--spacing-md)"},label:{display:"block",marginBottom:"var(--spacing-xs)",fontWeight:"500",color:"var(--color-text)"},input:{width:"100%",padding:"var(--spacing-sm) var(--spacing-md)",border:"1px solid var(--color-border)",borderRadius:"var(--radius-md)",fontSize:"0.875rem"},error:{color:"var(--color-error)",fontSize:"0.75rem",marginTop:"var(--spacing-xs)"}},number:{wrapper:{marginBottom:"var(--spacing-md)"},label:{display:"block",marginBottom:"var(--spacing-xs)",fontWeight:"500"},input:{width:"100%",padding:"var(--spacing-sm) var(--spacing-md)",border:"1px solid var(--color-border)",borderRadius:"var(--radius-md)"}},checkbox:{wrapper:{display:"flex",alignItems:"center",gap:"var(--spacing-sm)"},input:{width:"1rem",height:"1rem"},label:{cursor:"pointer"}},select:{wrapper:{marginBottom:"var(--spacing-md)"},input:{width:"100%",padding:"var(--spacing-sm) var(--spacing-md)",border:"1px solid var(--color-border)",borderRadius:"var(--radius-md)",backgroundColor:"white"}}};export{a,p as b,i as c,l as d,m as e,d as f,f as g,x as h};

package/dist/chunk-UJNSOOYZ.cjs

@@ -0,0 +1 @@
+'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs');async function f(t){let{adminEmail:e,adminPassword:r,adminRole:o="super_admin",tenantId:n,emailConfig:s,sendWelcomeEmail:c=false}=t,a=t.authAdapter||new chunkET6NN2V2_cjs.a({path:t.authDbPath||"./data/auth.db"});try{await a.connect?.();}catch{return {success:false,error:"Failed to connect to auth storage"}}let l=new chunkAJAZ7D3W_cjs.c().validate(r);if(!l.valid)return await a.disconnect?.(),{success:false,error:`Invalid password: ${l.errors.join(", ")}`};if(await a.findUserByEmail(e))return await a.disconnect?.(),{success:false,error:"Admin user already exists"};try{let i=await a.createUser({email:e,password:r,role:o||"admin",tenantId:n});if(c&&s){let u=new chunkAJAZ7D3W_cjs.b(s),A=u.getTemplates().welcome(e.split("@")[0]);await u.send({to:e,...A});}return await a.disconnect?.(),{success:!0,user:i}}catch(i){return await a.disconnect?.(),{success:false,error:i instanceof Error?i.message:"Failed to create admin user"}}}async function y(t,e){return !await t.findUserByEmail(e)}function w(){let t=process.env.KYRO_ADMIN_EMAIL,e=process.env.KYRO_ADMIN_PASSWORD;return !t||!e?null:{authDbPath:process.env.KYRO_AUTH_DB_PATH||"./data/auth.db",adminEmail:t,adminPassword:e,adminRole:process.env.KYRO_ADMIN_ROLE||"super_admin",tenantId:process.env.KYRO_ADMIN_TENANT_ID,emailConfig:process.env.SMTP_HOST?{provider:"smtp",smtp:{host:process.env.SMTP_HOST,port:parseInt(process.env.SMTP_PORT||"587",10),secure:process.env.SMTP_SECURE==="true",auth:{user:process.env.SMTP_USER||"",pass:process.env.SMTP_PASS||""}},from:process.env.SMTP_FROM||"noreply@example.com",fromName:process.env.SMTP_FROM_NAME}:void 0,sendWelcomeEmail:process.env.KYRO_ADMIN_SEND_WELCOME==="true"}}async function T(t){let e=w();if(!e)return null;t&&(e.authAdapter=t);try{if(await e.authAdapter?.connect?.(),await e.authAdapter?.findUserByEmail(e.adminEmail))return await e.authAdapter?.disconnect?.(),{success:!1,error:"Admin user already exists"}}catch{}let r=await f(e);return r.success||console.error(`Bootstrap failed: ${r.error}`),r}async function v(t,e=3,r=2e3){let o="";for(let n=0;n<e;n++){let s=await f(t);if(s.success||(o=s.error||"Unknown error",o.includes("already exists")))return s;n<e-1&&await new Promise(c=>setTimeout(c,r));}return {success:false,error:`Failed after ${e} retries: ${o}`}}exports.a=f;exports.b=y;exports.c=w;exports.d=T;exports.e=v;