@kyro-cms/core 0.12.44 → 0.12.45

package/dist/chunk-FZ6Q2EBJ.cjs

@@ -1,20 +0,0 @@
-'use strict';var a=require('path'),h=require('fs');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var a__default=/*#__PURE__*/_interopDefault(a);var h__default=/*#__PURE__*/_interopDefault(h);var c=r=>{let s=typeof process<"u"&&process.cwd?a__default.default.join(process.cwd(),"node_modules","@kyro-cms","core","dist"):"",e=a__default.default.resolve(s,`${r}.ts`),o=a__default.default.resolve(s,`${r}.js`);return h__default.default.existsSync(e)?e:o},b=c("api-handler"),S=c("api-handler-graphql"),g=c("api-handler-trpc");function _(r={}){let{configPath:s="./kyro.config.ts",apiPath:e="/api",adminPath:o="/admin",admin:k=true,enableGraphQL:l=false,enableTRPC:p=false,enableWebSocket:m=false}=r;return {name:"@kyro-cms/core",hooks:{"astro:config:setup":async({config:f,updateConfig:u,injectRoute:i,logger:n})=>{if(n.info(`Setting up Kyro CMS (API: ${e}, Admin: ${o})`),e===o)throw new Error(`Kyro CMS: apiPath and adminPath cannot be the same ("${e}")`);let d=a__default.default.resolve(f.root.pathname,s),y=d;h__default.default.existsSync(d)||n.warn(`Kyro config file not found at ${s}. The API will fail to boot if collections are needed.`),u({security:{checkOrigin:false},vite:{ssr:{external:["@kyro-cms/core","@kyro-cms/admin","@kyro-cms/astro","@kyro-cms/ai","@kyro-cms/connect","crypto","node:crypto","module","node:module","fs","node:fs","fs/promises","node:fs/promises","path","node:path","util","node:util","stream","node:stream","events","node:events","url","node:url","http","node:http","https","node:https","os","node:os","child_process","node:child_process","assert","node:assert","zlib","node:zlib","buffer","node:buffer","better-sqlite3","pg","mongodb","ioredis","sharp","ssh2","cpu-features","ssh2-sftp-client","nodemailer","jsonwebtoken","@mapbox/node-pre-gyp","mock-aws-s3","aws-sdk","nock"]},build:{rollupOptions:{external:["@kyro-cms/core","@kyro-cms/admin","@kyro-cms/astro","@kyro-cms/ai","@kyro-cms/connect","better-sqlite3","pg","mongodb","ioredis","sharp","ssh2","cpu-features","ssh2-sftp-client","nodemailer","jsonwebtoken","@mapbox/node-pre-gyp","mock-aws-s3","aws-sdk","nock"]}},optimizeDeps:{exclude:["@kyro-cms/core","@kyro-cms/admin","@kyro-cms/astro","@kyro-cms/ai","@kyro-cms/connect","better-sqlite3","pg","mongodb","ioredis","sharp","ssh2","cpu-features","ssh2-sftp-client","nodemailer","jsonwebtoken","@mapbox/node-pre-gyp","mock-aws-s3","aws-sdk","nock"]},server:{watch:{ignored:["**/*.db","**/*.db-*","**/data/**","**/public/uploads/**","**/.kyro/**"]}},plugins:[{name:"use-sync-external-store-shim-fix",enforce:"pre",resolveId(t){if(t==="use-sync-external-store/shim"||t==="use-sync-external-store/shim/index.js")return "\0virtual:use-sync-external-store-shim";if(t==="use-sync-external-store/shim/with-selector"||t==="use-sync-external-store/shim/with-selector.js")return "\0virtual:use-sync-external-store-shim-with-selector"},load(t){if(t==="\0virtual:use-sync-external-store-shim")return 'export { useSyncExternalStore } from "react";';if(t==="\0virtual:use-sync-external-store-shim-with-selector")return `
-import { useSyncExternalStore, useMemo } from "react";
-export function useSyncExternalStoreWithSelector(subscribe, getSnapshot, getServerSnapshot, selector, isEqual) {
-  const memoizedSelector = useMemo(() => {
-    let last, lastSnap, hasMemo = false;
-    return (snap) => {
-      if (!hasMemo || !Object.is(lastSnap, snap)) {
-        const next = selector(snap);
-        if (!hasMemo || !(isEqual ? isEqual(last, next) : Object.is(last, next))) {
-          last = next; lastSnap = snap; hasMemo = true;
-        }
-      }
-      return last;
-    };
-  }, [selector, isEqual]);
-  const getSelection = () => memoizedSelector(getSnapshot());
-  const getServerSelection = getServerSnapshot != null ? () => memoizedSelector(getServerSnapshot()) : undefined;
-  return useSyncExternalStore(subscribe, getSelection, getServerSelection);
-}
-`}}],resolve:{alias:{"kyro:config":y}},define:{__KYRO_API_PATH__:JSON.stringify(e),__KYRO_ADMIN_PATH__:JSON.stringify(o),__KYRO_ENABLE_GRAPHQL__:JSON.stringify(l),__KYRO_ENABLE_TRPC__:JSON.stringify(p),__KYRO_ENABLE_WS__:JSON.stringify(m)}}}),i({pattern:`${e}/[...path]`,entrypoint:b}),l&&(i({pattern:`${e}/graphql`,entrypoint:S}),n.info(`GraphQL endpoint enabled at ${e}/graphql`)),p&&(i({pattern:`${e}/trpc/[...path]`,entrypoint:g}),n.info(`tRPC endpoint enabled at ${e}/trpc`)),m&&n.info("WebSocket support enabled (auto-starts at first request)");}}}}exports.a=_;

package/dist/chunk-G3J2EU5D.cjs

@@ -1 +0,0 @@
-'use strict';var ws=require('ws');var o=class{channels=new Map;maxListeners;constructor(e=100){this.maxListeners=e;}subscribe(e,t){this.channels.has(e)||this.channels.set(e,new Set);let s=this.channels.get(e);if(s.size>=this.maxListeners)throw new Error(`Max listeners (${this.maxListeners}) reached for channel "${e}"`);return s.add(t),()=>{s.delete(t),s.size===0&&this.channels.delete(e);}}publish(e,t){let s=this.channels.get(e);if(s)for(let n of s)try{let i=n(t);i instanceof Promise&&i.catch(l=>{console.error(`[PubSub] Error in handler for channel "${e}":`,l);});}catch(i){console.error(`[PubSub] Error in handler for channel "${e}":`,i);}}hasSubscribers(e){return this.channels.has(e)&&this.channels.get(e).size>0}getSubscriberCount(e){return this.channels.get(e)?.size||0}getChannels(){return Array.from(this.channels.keys())}clear(){this.channels.clear();}},c=class extends o{registry;constructor(e,t=100){super(t),this.registry=e;}publishCollectionEvent(e,t){this.publish(`collection:${e}`,t),this.publish("events:collection",t),t.tenantId&&(this.publish(`tenant:${t.tenantId}:collection:${e}`,t),this.publish(`tenant:${t.tenantId}:events`,t)),this.publish(`collection:${e}:${t.type}`,t);}subscribeToCollection(e,t){return this.subscribe(`collection:${e}`,t)}subscribeToCollectionEvent(e,t,s){return this.subscribe(`collection:${e}:${t}`,s)}subscribeToTenant(e,t){return this.subscribe(`tenant:${e}:events`,t)}subscribeToTenantCollection(e,t,s){return this.subscribe(`tenant:${e}:collection:${t}`,s)}subscribeToAllCollections(e){return this.subscribe("events:collection",e)}createAfterChangeHook(e){return async t=>{this.publishCollectionEvent(e,{type:t.operation==="create"?"create":"update",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantId:t.tenantId,timestamp:new Date().toISOString(),user:t.user});}}createAfterDeleteHook(e){return async t=>{this.publishCollectionEvent(e,{type:"delete",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantId:t.tenantId,timestamp:new Date().toISOString(),user:t.user});}}autoRegisterHooks(){let e=this.registry.getCollections();for(let t of e){let s=this.registry.getCollection(t.slug);s&&(s.hooks||(s.hooks={}),s.hooks.afterChange||(s.hooks.afterChange=[]),s.hooks.afterDelete||(s.hooks.afterDelete=[]),s.hooks.afterChange.push(this.createAfterChangeHook(t.slug)),s.hooks.afterDelete.push(this.createAfterDeleteHook(t.slug)));}}};var a=class{wss;clients=new Map;pubsub;options;pingTimer;constructor(e){this.options=e,this.pubsub=e.pubsub,this.wss=new ws.WebSocketServer({port:e.port||8080}),this.setupServer(),this.startPingInterval();}setupServer(){this.wss.on("connection",(e,t)=>{let s=this.generateClientId();if(this.options.maxConnections&&this.clients.size>=this.options.maxConnections){e.close(1013,"Server at capacity");return}let n={id:s,ws:e,subscriptions:new Map,authenticated:false,connectedAt:new Date,lastActivity:new Date};this.clients.set(s,n),this.sendToClient(n,{type:"connected",clientId:s,timestamp:new Date().toISOString()}),e.on("message",i=>{this.handleMessage(n,i);}),e.on("error",i=>{console.error(`[WS] Client error ${s}:`,i);}),e.on("close",()=>{this.handleDisconnect(n);}),e.on("pong",()=>{n.lastActivity=new Date;});}),this.wss.on("error",e=>{console.error("[WS] Server error:",e);});}handleMessage(e,t){e.lastActivity=new Date;let s;try{s=JSON.parse(t.toString());}catch{this.sendToClient(e,{type:"error",error:"Invalid JSON"});return}switch(s.type){case "authenticate":this.handleAuthenticate(e,s);break;case "subscribe":this.handleSubscribe(e,s);break;case "unsubscribe":this.handleUnsubscribe(e,s);break;case "unsubscribeAll":this.handleUnsubscribeAll(e);break;case "list":this.handleList(e);break;case "ping":this.sendToClient(e,{type:"pong",timestamp:new Date().toISOString()});break;default:this.sendToClient(e,{type:"error",error:`Unknown message type: ${s.type}`});}}async handleAuthenticate(e,t){if(!this.options.requireAuth){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}if(!this.options.verifyToken){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}try{let s=await this.options.verifyToken(t.token);e.authenticated=!0,e.user=s,e.tenantId=s.tenantId,this.sendToClient(e,{type:"authenticated",success:!0,user:{id:s.id,email:s.email}});}catch(s){this.sendToClient(e,{type:"authenticated",success:false,error:s.message});}}handleSubscribe(e,t){if(this.options.requireAuth&&!e.authenticated){this.sendToClient(e,{type:"error",error:"Not authenticated"});return}let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}if(e.subscriptions.has(s)){this.sendToClient(e,{type:"subscribed",channel:s,success:true,message:"Already subscribed"});return}let n=this.pubsub.subscribe(s,i=>{this.sendToClient(e,{type:"event",channel:s,data:i,timestamp:new Date().toISOString()});});e.subscriptions.set(s,{channel:s,unsubscribe:n}),this.sendToClient(e,{type:"subscribed",channel:s,success:true});}handleUnsubscribe(e,t){let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}let n=e.subscriptions.get(s);n?(n.unsubscribe(),e.subscriptions.delete(s),this.sendToClient(e,{type:"unsubscribed",channel:s,success:true})):this.sendToClient(e,{type:"unsubscribed",channel:s,success:false,message:"Not subscribed"});}handleUnsubscribeAll(e){for(let[,t]of e.subscriptions)t.unsubscribe();e.subscriptions.clear(),this.sendToClient(e,{type:"unsubscribedAll",success:true});}handleList(e){let t=this.pubsub.getChannels();this.sendToClient(e,{type:"channels",channels:t,count:t.length});}handleDisconnect(e){for(let[,t]of e.subscriptions)t.unsubscribe();this.clients.delete(e.id);}sendToClient(e,t){e.ws.readyState===ws.WebSocket.OPEN&&e.ws.send(JSON.stringify(t));}generateClientId(){return `ws_${Date.now()}_${Math.random().toString(36).slice(2,9)}`}startPingInterval(){this.options.pingInterval&&(this.pingTimer=setInterval(()=>{for(let[e,t]of this.clients)if(t.ws.readyState===ws.WebSocket.OPEN){if(Date.now()-t.lastActivity.getTime()>this.options.pingInterval*3){t.ws.terminate(),this.handleDisconnect(t);continue}t.ws.ping();}},this.options.pingInterval));}broadcast(e,t){this.pubsub.publish(e,t);}getConnectedClients(){return Array.from(this.clients.values())}getClientCount(){return this.clients.size}getSubscriptionCount(){let e=0;for(let t of this.clients.values())e+=t.subscriptions.size;return e}async close(){this.pingTimer&&clearInterval(this.pingTimer);for(let e of this.clients.values())e.ws.close(1001,"Server shutting down");return new Promise(e=>{this.wss.close(()=>{e();});})}getServer(){return this.wss}};function d(r){return new a(r)}exports.a=o;exports.b=c;exports.c=a;exports.d=d;

package/dist/chunk-G7SSHELM.cjs

@@ -1 +0,0 @@
-'use strict';function a(e){if(e==null)return e;if(Array.isArray(e))return e.map(n=>a(n));if(typeof e=="object"&&!(e instanceof Date)&&!(e instanceof RegExp)){let n={};for(let r of Object.keys(e))/^\d+$/.test(r)||(n[r]=a(e[r]));return n}return e}exports.a=a;

package/dist/chunk-GKYEJ2UF.js

@@ -1 +0,0 @@
-import {WebSocketServer,WebSocket}from'ws';var o=class{channels=new Map;maxListeners;constructor(e=100){this.maxListeners=e;}subscribe(e,t){this.channels.has(e)||this.channels.set(e,new Set);let s=this.channels.get(e);if(s.size>=this.maxListeners)throw new Error(`Max listeners (${this.maxListeners}) reached for channel "${e}"`);return s.add(t),()=>{s.delete(t),s.size===0&&this.channels.delete(e);}}publish(e,t){let s=this.channels.get(e);if(s)for(let n of s)try{let i=n(t);i instanceof Promise&&i.catch(l=>{console.error(`[PubSub] Error in handler for channel "${e}":`,l);});}catch(i){console.error(`[PubSub] Error in handler for channel "${e}":`,i);}}hasSubscribers(e){return this.channels.has(e)&&this.channels.get(e).size>0}getSubscriberCount(e){return this.channels.get(e)?.size||0}getChannels(){return Array.from(this.channels.keys())}clear(){this.channels.clear();}},c=class extends o{registry;constructor(e,t=100){super(t),this.registry=e;}publishCollectionEvent(e,t){this.publish(`collection:${e}`,t),this.publish("events:collection",t),t.tenantId&&(this.publish(`tenant:${t.tenantId}:collection:${e}`,t),this.publish(`tenant:${t.tenantId}:events`,t)),this.publish(`collection:${e}:${t.type}`,t);}subscribeToCollection(e,t){return this.subscribe(`collection:${e}`,t)}subscribeToCollectionEvent(e,t,s){return this.subscribe(`collection:${e}:${t}`,s)}subscribeToTenant(e,t){return this.subscribe(`tenant:${e}:events`,t)}subscribeToTenantCollection(e,t,s){return this.subscribe(`tenant:${e}:collection:${t}`,s)}subscribeToAllCollections(e){return this.subscribe("events:collection",e)}createAfterChangeHook(e){return async t=>{this.publishCollectionEvent(e,{type:t.operation==="create"?"create":"update",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantId:t.tenantId,timestamp:new Date().toISOString(),user:t.user});}}createAfterDeleteHook(e){return async t=>{this.publishCollectionEvent(e,{type:"delete",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantId:t.tenantId,timestamp:new Date().toISOString(),user:t.user});}}autoRegisterHooks(){let e=this.registry.getCollections();for(let t of e){let s=this.registry.getCollection(t.slug);s&&(s.hooks||(s.hooks={}),s.hooks.afterChange||(s.hooks.afterChange=[]),s.hooks.afterDelete||(s.hooks.afterDelete=[]),s.hooks.afterChange.push(this.createAfterChangeHook(t.slug)),s.hooks.afterDelete.push(this.createAfterDeleteHook(t.slug)));}}};var a=class{wss;clients=new Map;pubsub;options;pingTimer;constructor(e){this.options=e,this.pubsub=e.pubsub,this.wss=new WebSocketServer({port:e.port||8080}),this.setupServer(),this.startPingInterval();}setupServer(){this.wss.on("connection",(e,t)=>{let s=this.generateClientId();if(this.options.maxConnections&&this.clients.size>=this.options.maxConnections){e.close(1013,"Server at capacity");return}let n={id:s,ws:e,subscriptions:new Map,authenticated:false,connectedAt:new Date,lastActivity:new Date};this.clients.set(s,n),this.sendToClient(n,{type:"connected",clientId:s,timestamp:new Date().toISOString()}),e.on("message",i=>{this.handleMessage(n,i);}),e.on("error",i=>{console.error(`[WS] Client error ${s}:`,i);}),e.on("close",()=>{this.handleDisconnect(n);}),e.on("pong",()=>{n.lastActivity=new Date;});}),this.wss.on("error",e=>{console.error("[WS] Server error:",e);});}handleMessage(e,t){e.lastActivity=new Date;let s;try{s=JSON.parse(t.toString());}catch{this.sendToClient(e,{type:"error",error:"Invalid JSON"});return}switch(s.type){case "authenticate":this.handleAuthenticate(e,s);break;case "subscribe":this.handleSubscribe(e,s);break;case "unsubscribe":this.handleUnsubscribe(e,s);break;case "unsubscribeAll":this.handleUnsubscribeAll(e);break;case "list":this.handleList(e);break;case "ping":this.sendToClient(e,{type:"pong",timestamp:new Date().toISOString()});break;default:this.sendToClient(e,{type:"error",error:`Unknown message type: ${s.type}`});}}async handleAuthenticate(e,t){if(!this.options.requireAuth){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}if(!this.options.verifyToken){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}try{let s=await this.options.verifyToken(t.token);e.authenticated=!0,e.user=s,e.tenantId=s.tenantId,this.sendToClient(e,{type:"authenticated",success:!0,user:{id:s.id,email:s.email}});}catch(s){this.sendToClient(e,{type:"authenticated",success:false,error:s.message});}}handleSubscribe(e,t){if(this.options.requireAuth&&!e.authenticated){this.sendToClient(e,{type:"error",error:"Not authenticated"});return}let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}if(e.subscriptions.has(s)){this.sendToClient(e,{type:"subscribed",channel:s,success:true,message:"Already subscribed"});return}let n=this.pubsub.subscribe(s,i=>{this.sendToClient(e,{type:"event",channel:s,data:i,timestamp:new Date().toISOString()});});e.subscriptions.set(s,{channel:s,unsubscribe:n}),this.sendToClient(e,{type:"subscribed",channel:s,success:true});}handleUnsubscribe(e,t){let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}let n=e.subscriptions.get(s);n?(n.unsubscribe(),e.subscriptions.delete(s),this.sendToClient(e,{type:"unsubscribed",channel:s,success:true})):this.sendToClient(e,{type:"unsubscribed",channel:s,success:false,message:"Not subscribed"});}handleUnsubscribeAll(e){for(let[,t]of e.subscriptions)t.unsubscribe();e.subscriptions.clear(),this.sendToClient(e,{type:"unsubscribedAll",success:true});}handleList(e){let t=this.pubsub.getChannels();this.sendToClient(e,{type:"channels",channels:t,count:t.length});}handleDisconnect(e){for(let[,t]of e.subscriptions)t.unsubscribe();this.clients.delete(e.id);}sendToClient(e,t){e.ws.readyState===WebSocket.OPEN&&e.ws.send(JSON.stringify(t));}generateClientId(){return `ws_${Date.now()}_${Math.random().toString(36).slice(2,9)}`}startPingInterval(){this.options.pingInterval&&(this.pingTimer=setInterval(()=>{for(let[e,t]of this.clients)if(t.ws.readyState===WebSocket.OPEN){if(Date.now()-t.lastActivity.getTime()>this.options.pingInterval*3){t.ws.terminate(),this.handleDisconnect(t);continue}t.ws.ping();}},this.options.pingInterval));}broadcast(e,t){this.pubsub.publish(e,t);}getConnectedClients(){return Array.from(this.clients.values())}getClientCount(){return this.clients.size}getSubscriptionCount(){let e=0;for(let t of this.clients.values())e+=t.subscriptions.size;return e}async close(){this.pingTimer&&clearInterval(this.pingTimer);for(let e of this.clients.values())e.ws.close(1001,"Server shutting down");return new Promise(e=>{this.wss.close(()=>{e();});})}getServer(){return this.wss}};function d(r){return new a(r)}export{o as a,c as b,a as c,d};

package/dist/chunk-GO34AOBZ.cjs

@@ -1 +0,0 @@
-'use strict';var e={slug:"users",label:"Users",auth:true,fields:[{name:"name",type:"text",label:"Name"},{name:"email",type:"email",required:true},{name:"passwordHash",type:"text",label:"Password Hash",admin:{hidden:true}},{name:"role",type:"select",options:[{label:"Super Admin",value:"super_admin"},{label:"Admin",value:"admin"},{label:"Editor",value:"editor"},{label:"Author",value:"author"},{label:"Customer",value:"customer"},{label:"Guest",value:"guest"}],required:true},{name:"avatar",type:"upload",relationTo:"media",label:"Profile Picture"},{name:"tenantId",type:"text",label:"Tenant"},{name:"emailVerified",type:"checkbox",label:"Email Verified"},{name:"locked",type:"checkbox"},{name:"lastLogin",type:"date",time:true,label:"Last Login",admin:{readOnly:true}},{name:"failedLoginAttempts",type:"number",label:"Failed Login Attempts",admin:{readOnly:true}}],timestamps:true,admin:{useAsTitle:"email",defaultColumns:["email","role","tenantId","lastLogin"]}},t={slug:"audit_logs",label:"Audit Logs",access:{create:()=>false,update:()=>false,delete:()=>false},fields:[{name:"action",type:"text",required:true},{name:"userId",type:"text",label:"User ID"},{name:"userEmail",type:"email",label:"User Email"},{name:"role",type:"text"},{name:"resource",type:"text",label:"Resource"},{name:"ipAddress",type:"text",label:"IP Address"},{name:"success",type:"checkbox"},{name:"timestamp",type:"date",time:true,required:true,admin:{readOnly:true}}],admin:{defaultColumns:["action","userEmail","resource","success","timestamp"]}},a={users:e,audit_logs:t};exports.a=e;exports.b=a;

package/dist/chunk-GYQMNXXW.cjs

@@ -1,114 +0,0 @@
-'use strict';var chunkMIOMMB23_cjs=require('./chunk-MIOMMB23.cjs'),drizzleOrm=require('drizzle-orm'),O=require('bcryptjs'),crypto$1=require('crypto');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var O__default=/*#__PURE__*/_interopDefault(O);var D=false,S=class{db;prefix;sessionTTL;refreshTokenTTL;constructor(e){this.db=e.db,this.prefix=e.prefix||"kyro:",this.sessionTTL=e.sessionTTL||86400,this.refreshTokenTTL=e.refreshTokenTTL||604800;}async connect(){D||(await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "users" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(255),
-        "email" VARCHAR(255) NOT NULL,
-        "password_hash" VARCHAR(255),
-        "role" VARCHAR(50) NOT NULL DEFAULT 'customer',
-        "tenant_id" UUID,
-        "email_verified" BOOLEAN DEFAULT false,
-        "locked" BOOLEAN DEFAULT false,
-        "last_login" TIMESTAMP,
-        "failed_login_attempts" INTEGER DEFAULT 0,
-        "metadata" JSONB,
-        "avatar" VARCHAR(255),
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "avatar" VARCHAR(255)`),await this.db.execute(drizzleOrm.sql`CREATE UNIQUE INDEX IF NOT EXISTS "users_email_idx" ON "users" ("email")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "users_tenant_idx" ON "users" ("tenant_id")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "users_role_idx" ON "users" ("role")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "sessions" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(512) NOT NULL UNIQUE,
-        "refresh_token" VARCHAR(512),
-        "ip_address" VARCHAR(45),
-        "user_agent" TEXT,
-        "expires_at" TIMESTAMP NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "sessions_user_idx" ON "sessions" ("user_id")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "sessions_token_idx" ON "sessions" ("token")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "sessions_expires_idx" ON "sessions" ("expires_at")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "audit_logs" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "action" VARCHAR(100) NOT NULL,
-        "user_id" UUID REFERENCES "users"("id") ON DELETE SET NULL,
-        "user_email" VARCHAR(255),
-        "role" VARCHAR(50),
-        "resource" VARCHAR(100) NOT NULL,
-        "resource_id" VARCHAR(255),
-        "changes" JSONB,
-        "ip_address" VARCHAR(45),
-        "user_agent" TEXT,
-        "success" BOOLEAN NOT NULL DEFAULT true,
-        "error" TEXT,
-        "metadata" JSONB,
-        "timestamp" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`ALTER TABLE "audit_logs" ALTER COLUMN "resource_id" TYPE VARCHAR(255)`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "audit_logs_user_idx" ON "audit_logs" ("user_id")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "audit_logs_action_idx" ON "audit_logs" ("action")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "audit_logs_resource_idx" ON "audit_logs" ("resource")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "audit_logs_timestamp_idx" ON "audit_logs" ("timestamp")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "password_history" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "password_hash" VARCHAR(255) NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "password_history_user_idx" ON "password_history" ("user_id")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "lockouts" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "ip_address" VARCHAR(45),
-        "reason" VARCHAR(255),
-        "locked_until" TIMESTAMP NOT NULL,
-        "released_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "lockouts_user_idx" ON "lockouts" ("user_id")`),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "lockouts_locked_until_idx" ON "lockouts" ("locked_until")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "roles" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(100) NOT NULL UNIQUE,
-        "level" INTEGER NOT NULL DEFAULT 0,
-        "inherits" TEXT[],
-        "description" TEXT,
-        "permissions" JSONB DEFAULT '[]',
-        "is_system" BOOLEAN DEFAULT false,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`CREATE INDEX IF NOT EXISTS "roles_level_idx" ON "roles" ("level")`),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "tenants" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(255) NOT NULL,
-        "slug" VARCHAR(100) NOT NULL UNIQUE,
-        "settings" JSONB DEFAULT '{}',
-        "is_active" BOOLEAN DEFAULT true,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "api_keys" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "name" VARCHAR(255) NOT NULL,
-        "key" VARCHAR(64) NOT NULL UNIQUE,
-        "key_prefix" VARCHAR(8) NOT NULL,
-        "permissions" JSONB DEFAULT '[]',
-        "last_used_at" TIMESTAMP,
-        "expires_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "email_verifications" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(64) NOT NULL UNIQUE,
-        "expires_at" TIMESTAMP NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),await this.db.execute(drizzleOrm.sql`
-      CREATE TABLE IF NOT EXISTS "password_resets" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(64) NOT NULL UNIQUE,
-        "expires_at" TIMESTAMP NOT NULL,
-        "used_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `),D=true);}async disconnect(){}async createUser(e){let s=await this.hashPassword(e.password),[t]=await this.db.insert(chunkMIOMMB23_cjs.a).values({email:e.email.toLowerCase(),name:e.name,passwordHash:s,role:e.role||"customer",avatar:e.avatar,tenantId:e.tenantId}).returning();return this.userToAuthUser(t)}async findUserByEmail(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.a).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.email,e.toLowerCase())).limit(1);return s?this.userToAuthUser(s):null}async findUserById(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.a).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.id,e)).limit(1);return s?this.userToAuthUser(s):null}async updateUser(e,s){let t={updatedAt:new Date};s.name!==void 0&&(t.name=s.name),s.email!==void 0&&(t.email=s.email),s.passwordHash!==void 0&&(t.passwordHash=s.passwordHash),s.role!==void 0&&(t.role=s.role),s.tenantId!==void 0&&(t.tenantId=s.tenantId),s.avatar!==void 0&&(t.avatar=s.avatar),s.emailVerified!==void 0&&(t.emailVerified=s.emailVerified),s.locked!==void 0&&(t.locked=s.locked),s.lastLogin!==void 0&&(t.lastLogin=s.lastLogin?new Date(s.lastLogin):null),s.failedLoginAttempts!==void 0&&(t.failedLoginAttempts=s.failedLoginAttempts);let[r]=await this.db.update(chunkMIOMMB23_cjs.a).set(t).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.id,e)).returning();return r?this.userToAuthUser(r):null}async deleteUser(e){return await this.db.delete(chunkMIOMMB23_cjs.a).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.id,e)),true}async findUsers(e={}){let s=e.page??1,t=e.limit??10,r=(s-1)*t,u=e.search;if(u){let m=`%${u}%`,[U,[{count:f}]]=await Promise.all([this.db.select().from(chunkMIOMMB23_cjs.a).where(drizzleOrm.sql`${chunkMIOMMB23_cjs.a.email} ILIKE ${m}`).orderBy(drizzleOrm.desc(chunkMIOMMB23_cjs.a.createdAt)).limit(t).offset(r),this.db.select({count:drizzleOrm.sql`count(*)`}).from(chunkMIOMMB23_cjs.a).where(drizzleOrm.sql`${chunkMIOMMB23_cjs.a.email} ILIKE ${m}`)]);return {users:U.map(c=>this.userToAuthUser(c)),total:Number(f)}}let[l,[{count:E}]]=await Promise.all([this.db.select().from(chunkMIOMMB23_cjs.a).orderBy(drizzleOrm.desc(chunkMIOMMB23_cjs.a.createdAt)).limit(t).offset(r),this.db.select({count:drizzleOrm.sql`count(*)`}).from(chunkMIOMMB23_cjs.a)]);return {users:l.map(m=>this.userToAuthUser(m)),total:Number(E)}}async verifyPassword(e,s){let t=await this.findUserByEmail(e);if(!t)return null;let[r]=await this.db.select().from(chunkMIOMMB23_cjs.a).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.email,e.toLowerCase())).limit(1);return r?.passwordHash&&await O__default.default.compare(s,r.passwordHash)?t:null}async hashPassword(e){return O__default.default.hash(e,12)}async createSession(e,s){let t=crypto$1.randomBytes(32).toString("base64url"),r=crypto$1.randomBytes(32).toString("base64url"),u=new Date(Date.now()+this.sessionTTL*1e3);new Date(Date.now()+this.refreshTokenTTL*1e3);let [E]=await this.db.insert(chunkMIOMMB23_cjs.d).values({userId:e,token:t,refreshToken:r,ipAddress:s?.ipAddress,userAgent:s?.userAgent,expiresAt:u}).returning();return this.sessionToSession(E)}async findSessionByToken(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.d).where(drizzleOrm.and(drizzleOrm.eq(chunkMIOMMB23_cjs.d.token,e),drizzleOrm.gt(chunkMIOMMB23_cjs.d.expiresAt,new Date))).limit(1);return s?this.sessionToSession(s):null}async findSessionByRefreshToken(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.d).where(drizzleOrm.and(drizzleOrm.eq(chunkMIOMMB23_cjs.d.refreshToken,e),drizzleOrm.gt(chunkMIOMMB23_cjs.d.expiresAt,new Date))).limit(1);return s?this.sessionToSession(s):null}async deleteSession(e){return await this.db.delete(chunkMIOMMB23_cjs.d).where(drizzleOrm.eq(chunkMIOMMB23_cjs.d.id,e)),true}async deleteUserSessions(e){return await this.db.delete(chunkMIOMMB23_cjs.d).where(drizzleOrm.eq(chunkMIOMMB23_cjs.d.userId,e)),1}async addPasswordToHistory(e,s){await this.db.insert(chunkMIOMMB23_cjs.j).values({userId:e,passwordHash:s});}async getPasswordHistory(e,s=5){return (await this.db.select({passwordHash:chunkMIOMMB23_cjs.j.passwordHash}).from(chunkMIOMMB23_cjs.j).where(drizzleOrm.eq(chunkMIOMMB23_cjs.j.userId,e)).orderBy(drizzleOrm.desc(chunkMIOMMB23_cjs.j.createdAt)).limit(s)).map(r=>r.passwordHash)}async isPasswordInHistory(e,s,t=5){let r=await this.getPasswordHistory(s,t);for(let u of r)if(await this.verifyPassword(e,u))return  true;return  false}async isLocked(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.k).where(drizzleOrm.and(drizzleOrm.eq(chunkMIOMMB23_cjs.k.userId,e),drizzleOrm.gt(chunkMIOMMB23_cjs.k.lockedUntil,new Date))).limit(1);return !!s}async getLockout(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.k).where(drizzleOrm.and(drizzleOrm.eq(chunkMIOMMB23_cjs.k.userId,e),drizzleOrm.gt(chunkMIOMMB23_cjs.k.lockedUntil,new Date))).limit(1);return s?{lockedUntil:s.lockedUntil}:null}async recordFailedAttempt(e,s){let r=((await this.findUserById(e))?.failedLoginAttempts||0)+1;await this.updateUser(e,{failedLoginAttempts:r});let l=r>=5;return l&&await this.db.insert(chunkMIOMMB23_cjs.k).values({userId:e,ipAddress:s,reason:"Too many failed login attempts",lockedUntil:new Date(Date.now()+9e5)}),{attempts:r,locked:l}}async resetAttempts(e){await this.updateUser(e,{failedLoginAttempts:0});}async findAuditLogs(e){let{limit:s=50,offset:t=0,userId:r,action:u,resource:l,resourceId:E,success:m,startDate:U,endDate:f}=e,c=[];r&&c.push(drizzleOrm.eq(chunkMIOMMB23_cjs.e.userId,r)),u&&(Array.isArray(u)?c.push(drizzleOrm.sql`${chunkMIOMMB23_cjs.e.action} = ANY(${u})`):c.push(drizzleOrm.eq(chunkMIOMMB23_cjs.e.action,u))),l&&c.push(drizzleOrm.eq(chunkMIOMMB23_cjs.e.resource,l)),E&&c.push(drizzleOrm.eq(chunkMIOMMB23_cjs.e.resourceId,E)),m!==void 0&&c.push(drizzleOrm.eq(chunkMIOMMB23_cjs.e.success,m)),U&&c.push(drizzleOrm.sql`${chunkMIOMMB23_cjs.e.timestamp} >= ${U}`),f&&c.push(drizzleOrm.sql`${chunkMIOMMB23_cjs.e.timestamp} <= ${f}`);let R=c.length>0?drizzleOrm.and(...c):void 0,_=await this.db.select({count:drizzleOrm.sql`count(*)`}).from(chunkMIOMMB23_cjs.e).where(R);return {logs:(await this.db.select().from(chunkMIOMMB23_cjs.e).where(R).orderBy(drizzleOrm.desc(chunkMIOMMB23_cjs.e.timestamp)).limit(s).offset(t)).map(o=>({id:o.id,timestamp:o.timestamp,action:o.action,userId:o.userId||void 0,userEmail:o.userEmail||void 0,role:o.role||void 0,resource:o.resource,resourceId:o.resourceId||void 0,changes:o.changes||void 0,ipAddress:o.ipAddress||void 0,userAgent:o.userAgent||void 0,success:o.success,error:o.error||void 0,metadata:o.metadata||void 0})),total:Number(_[0]?.count||0)}}async createAuditLog(e){let s=crypto.randomUUID(),t=new Date;return await this.db.insert(chunkMIOMMB23_cjs.e).values({id:s,action:e.action,userId:e.userId??null,userEmail:e.userEmail??null,role:e.role??null,resource:e.resource,resourceId:e.resourceId??null,changes:e.changes??null,ipAddress:e.ipAddress??null,userAgent:e.userAgent??null,success:e.success,error:e.error??null,metadata:e.metadata??null,timestamp:t}),{...e,id:s,timestamp:t}}userToAuthUser(e){return {id:e.id,name:e.name||void 0,email:e.email,passwordHash:e.passwordHash||void 0,role:e.role,avatar:e.avatar&&typeof e.avatar=="object"?e.avatar.id||void 0:e.avatar||void 0,tenantId:e.tenantId||void 0,emailVerified:e.emailVerified||false,locked:e.locked||false,lastLogin:e.lastLogin?new Date(e.lastLogin).toISOString():void 0,failedLoginAttempts:e.failedLoginAttempts||0,createdAt:new Date(e.createdAt).toISOString(),updatedAt:new Date(e.updatedAt).toISOString()}}sessionToSession(e){return {id:e.id,userId:e.userId,token:e.token,refreshToken:e.refreshToken||void 0,expiresAt:new Date(e.expiresAt).toISOString(),createdAt:new Date(e.createdAt).toISOString(),ipAddress:e.ipAddress||void 0,userAgent:e.userAgent||void 0}}async createEmailVerificationToken(e){let s=crypto$1.randomBytes(32).toString("hex"),t=new Date(Date.now()+1440*60*1e3);return await this.db.insert(chunkMIOMMB23_cjs.h).values({userId:e,token:s,expiresAt:t}),{token:s,expiresAt:t}}async verifyEmailToken(e){let[s]=await this.db.select().from(chunkMIOMMB23_cjs.h).where(drizzleOrm.eq(chunkMIOMMB23_cjs.h.token,e)).limit(1);return s?s.expiresAt<new Date?{success:false,error:"Verification token has expired"}:(await this.db.update(chunkMIOMMB23_cjs.a).set({emailVerified:true}).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.id,s.userId)),await this.db.delete(chunkMIOMMB23_cjs.h).where(drizzleOrm.eq(chunkMIOMMB23_cjs.h.id,s.id)),{success:true,userId:s.userId}):{success:false,error:"Invalid verification token"}}async createPasswordResetToken(e){let s=await this.findUserByEmail(e);if(!s)return {token:"",expiresAt:new Date,error:"User not found"};let t=crypto$1.randomBytes(32).toString("hex"),r=new Date(Date.now()+3600*1e3);return await this.db.insert(chunkMIOMMB23_cjs.i).values({userId:s.id,token:t,expiresAt:r}),{token:t,expiresAt:r}}async resetPasswordWithToken(e,s){let[t]=await this.db.select().from(chunkMIOMMB23_cjs.i).where(drizzleOrm.eq(chunkMIOMMB23_cjs.i.token,e)).limit(1);if(!t)return {success:false,error:"Invalid reset token"};if(t.expiresAt<new Date)return {success:false,error:"Reset token has expired"};if(t.usedAt)return {success:false,error:"Reset token has already been used"};let r=await this.hashPassword(s);return await this.db.update(chunkMIOMMB23_cjs.a).set({passwordHash:r,updatedAt:new Date}).where(drizzleOrm.eq(chunkMIOMMB23_cjs.a.id,t.userId)),await this.db.update(chunkMIOMMB23_cjs.i).set({usedAt:new Date}).where(drizzleOrm.eq(chunkMIOMMB23_cjs.i.id,t.id)),await this.db.delete(chunkMIOMMB23_cjs.d).where(drizzleOrm.eq(chunkMIOMMB23_cjs.d.userId,t.userId)),{success:true}}};exports.a=S;

package/dist/chunk-HLSB2MCK.js

@@ -1 +0,0 @@
-import {timingSafeEqual}from'crypto';async function u(e,r){return typeof e=="boolean"?e:typeof e=="function"?await e(r):true}function A(...e){let r={};for(let t of e)t&&typeof t=="object"&&Object.assign(r,t);return r}function g(e,r){return u(e,r).then(t=>{if(t!==true)return t===false?{_id:{$eq:null}}:t})}var c="api_keys";function f(e){return e.substring(0,8)}function p(e,r){if(e.length!==r.length)return  false;try{return timingSafeEqual(Buffer.from(e),Buffer.from(r))}catch{return  false}}async function x(e,r,t){if(!e||typeof e!="string")return {valid:false,error:"No API key provided"};if(!e.startsWith("kyro_"))return {valid:false,error:"Invalid API key format"};let a=f(e);try{let s=await r.find({collection:c,where:{keyPrefix:{equals:a}},limit:100,page:1});if(!s.docs||s.docs.length===0)return {valid:!1,error:"Invalid API key"};let n=null;for(let i of s.docs){let l=i;if(p(l.key,e)){n=l;break}}if(!n)return {valid:!1,error:"Invalid API key"};if(n.expiresAt&&new Date(n.expiresAt)<new Date)return {valid:!1,error:"API key has expired"};try{await r.update({collection:c,id:n.id,data:{lastUsedAt:new Date().toISOString()}});}catch{}let o={id:n.userId,role:n.role||"author",tenantId:n.tenantId};if(t){let i=await t(n.userId);i&&Object.assign(o,i);}return {valid:!0,userId:n.userId,user:o,permissions:n.permissions||[],apiKeyId:n.id,tenantId:o.tenantId,role:o.role}}catch(s){return console.error("[ApiKey] Validation error:",s),{valid:false,error:"Failed to validate API key"}}}function I(e){let r=e.headers.get("Authorization");if(r){if(r.startsWith("ApiKey "))return r.slice(7).trim();if(r.startsWith("Bearer "))return null}let t=e.headers.get("X-API-Key");return t?t.trim():null}function m(e){return !e.valid||!e.userId?null:{userId:e.userId,user:e.user||{},permissions:e.permissions||[],apiKeyId:e.apiKeyId||"",tenantId:e.tenantId,role:e.role}}function C(e,r){if(e.length===0)return  false;if(e.includes("*")||e.includes(r))return  true;let[t,a]=r.split(":");return !!e.includes(`${t}:*`)}function P(){let e="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(let t=0;t<32;t++)r+=e[Math.floor(Math.random()*e.length)];return `kyro_${r}`}function K(e){return e.substring(0,8)}export{u as a,A as b,g as c,c as d,x as e,I as f,m as g,C as h,P as i,K as j};