@package-broker/core 0.17.4 → 0.19.5

package/dist/routes/api/auth.js

@@ -1,277 +0,0 @@
-/*
- * PACKAGE.broker
- * Copyright (C) 2025 Łukasz Bajsarowicz
- * Licensed under AGPL-3.0
- */
-import { UserService } from '../../services/UserService';
-import { getAnalytics } from '../../utils/analytics';
-// Generate a session token
-function generateSessionToken() {
-    const bytes = crypto.getRandomValues(new Uint8Array(32));
-    return btoa(String.fromCharCode(...bytes))
-        .replace(/\+/g, '-')
-        .replace(/\//g, '_')
-        .replace(/=/g, '');
-}
-/**
- * POST /api/auth/login
- * Authenticate admin user and return session token
- */
-export async function loginRoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const body = c.req.valid('json');
-    const { email, password } = body;
-    const user = await userService.verifyCredentials(email, password);
-    const requestId = c.get('requestId');
-    const analytics = getAnalytics();
-    if (!user) {
-        analytics.trackAuthLogin({
-            requestId,
-            userId: 'unknown',
-            success: false,
-        });
-        return c.json({ error: 'Invalid credentials' }, 401);
-    }
-    // Check 2FA
-    if (user.two_factor_enabled) {
-        const { code } = body;
-        if (!code) {
-            return c.json({ error: '2FA required', code: '2fa_required' }, 403);
-        }
-        const isValid = await userService.validateTwoFactorLogin(user.id, code);
-        if (!isValid) {
-            analytics.trackAuthLogin({
-                requestId,
-                userId: user.id,
-                success: false,
-            });
-            return c.json({ error: 'Invalid 2FA code' }, 401);
-        }
-    }
-    // Generate session token
-    const sessionToken = generateSessionToken();
-    analytics.trackAuthLogin({
-        requestId,
-        userId: user.id,
-        success: true,
-    });
-    // Store session in cache (expires in 24 hours)
-    // Use injected cache driver (Node.js) or fall back to c.env.KV (Cloudflare)
-    const cache = c.get('cache') || c.env?.KV;
-    if (!cache) {
-        throw new Error('No session storage available (cache driver or KV not configured)');
-    }
-    await cache.put(`session:${sessionToken}`, JSON.stringify({
-        userId: user.id,
-        email: user.email,
-        role: user.role,
-        createdAt: Date.now(),
-    }), {
-        expirationTtl: 86400, // 24 hours
-    });
-    return c.json({
-        token: sessionToken,
-        user: {
-            id: user.id,
-            email: user.email,
-            role: user.role,
-            two_factor_enabled: user.two_factor_enabled,
-        },
-    });
-}
-/**
- * POST /api/auth/logout
- * Invalidate session token
- */
-export async function logoutRoute(c) {
-    const authHeader = c.req.header('Authorization');
-    if (authHeader?.startsWith('Bearer ')) {
-        const token = authHeader.slice(7);
-        const cache = c.get('cache') || c.env?.KV;
-        if (cache) {
-            await cache.delete(`session:${token}`);
-        }
-    }
-    return c.json({ message: 'Logged out' });
-}
-/**
- * GET /api/auth/me
- * Get current authenticated user
- */
-export async function meRoute(c) {
-    const session = c.get('session');
-    if (!session) {
-        return c.json({ error: 'Not authenticated' }, 401);
-    }
-    // Refresh user data from DB to get latest status
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const user = await userService.findById(session.userId);
-    if (!user) {
-        return c.json({ error: 'User not found' }, 404);
-    }
-    return c.json({
-        user: {
-            id: user.id,
-            email: user.email,
-            role: user.role,
-            two_factor_enabled: user.two_factor_enabled
-        }
-    });
-}
-/**
- * POST /api/setup
- * Create initial admin user
- */
-export async function setupRoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    // Check if any user exists
-    const count = await userService.count();
-    if (count > 0) {
-        return c.json({ error: 'Setup already completed' }, 403);
-    }
-    let body;
-    try {
-        body = await c.req.json();
-    }
-    catch {
-        return c.json({ error: 'Invalid JSON' }, 400);
-    }
-    const { email, password } = body;
-    if (!email || !password) {
-        return c.json({ error: 'Email and password required' }, 400);
-    }
-    // Create first admin
-    const user = await userService.create({
-        email,
-        password,
-        role: 'admin'
-    });
-    return c.json({
-        message: 'Setup complete',
-        user: {
-            id: user?.id,
-            email: user?.email
-        }
-    });
-}
-/**
- * POST /api/auth/2fa/setup
- * Start 2FA setup flow
- */
-export async function setup2FARoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const session = c.get('session');
-    // Generate new secret
-    const secret = await userService.setupTwoFactor(session.userId);
-    const qrCode = await userService.generateTwoFactorQrCode(session.email, secret);
-    return c.json({ secret, qrCode });
-}
-/**
- * POST /api/auth/2fa/enable
- * Confirm 2FA setup with code
- */
-export async function enable2FARoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const session = c.get('session');
-    let body;
-    try {
-        body = await c.req.json();
-    }
-    catch {
-        return c.json({ error: 'Invalid JSON' }, 400);
-    }
-    const { secret, code } = body;
-    if (!secret || !code) {
-        return c.json({ error: 'Secret and code required' }, 400);
-    }
-    try {
-        const recoveryCodes = await userService.enableTwoFactor(session.userId, secret, code);
-        return c.json({ recoveryCodes });
-    }
-    catch (err) {
-        return c.json({ error: err.message }, 400);
-    }
-}
-/**
- * POST /api/auth/2fa/disable
- * Disable 2FA
- */
-export async function disable2FARoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const session = c.get('session');
-    await userService.disableTwoFactor(session.userId);
-    return c.json({ message: '2FA disabled' });
-}
-/**
- * POST /api/auth/invite/accept
- * Accept invite and set password
- */
-export async function acceptInviteRoute(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    let body;
-    try {
-        body = await c.req.json();
-    }
-    catch {
-        return c.json({ error: 'Invalid JSON' }, 400);
-    }
-    const { token, password } = body;
-    if (!token || !password) {
-        return c.json({ error: 'Token and password required' }, 400);
-    }
-    try {
-        const user = await userService.acceptInvite(token, password);
-        return c.json({ message: 'Invite accepted', user: { email: user.email } });
-    }
-    catch (err) {
-        return c.json({ error: err.message }, 400);
-    }
-}
-/**
- * Middleware to verify session token
- */
-export async function sessionMiddleware(c, next) {
-    const authHeader = c.req.header('Authorization');
-    if (!authHeader || !authHeader.startsWith('Bearer ')) {
-        return c.json({ error: 'Unauthorized', message: 'Session token required' }, 401);
-    }
-    const token = authHeader.slice(7);
-    // Check cache for session (use injected cache or fall back to c.env.KV)
-    const cache = c.get('cache') || c.env?.KV;
-    if (!cache) {
-        return c.json({ error: 'Server Error', message: 'Session storage not configured' }, 500);
-    }
-    // Try to get session - handle both CachePort (getJson) and KV (get with 'json' type)
-    let sessionData;
-    if (typeof cache.getJson === 'function') {
-        sessionData = await cache.getJson(`session:${token}`);
-    }
-    else {
-        sessionData = await cache.get(`session:${token}`, 'json');
-    }
-    if (!sessionData) {
-        return c.json({ error: 'Unauthorized', message: 'Invalid or expired session' }, 401);
-    }
-    // Attach session to context
-    c.set('session', sessionData);
-    return await next();
-}
-/**
- * Check if auth is required / setup is needed
- */
-export async function checkAuthRequired(c) {
-    const db = c.get('database');
-    const userService = new UserService(db);
-    const count = await userService.count();
-    return c.json({
-        auth_required: count > 0,
-    });
-}
-//# sourceMappingURL=auth.js.map

package/dist/routes/api/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/routes/api/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,2BAA2B;AAC3B,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;SACvC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAmE;IAClG,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAuB,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,SAAS,CAAC,cAAc,CAAC;YACvB,SAAS;YACT,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,cAAc,CAAC;gBACvB,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAE5C,SAAS,CAAC,cAAc,CAAC;QACvB,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,+CAA+C;IAC/C,4EAA4E;IAC5E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,YAAY,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC;QACxD,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,EAAE;QACF,aAAa,EAAE,KAAK,EAAE,WAAW;KAClC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAiB;IACjD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,CAAU;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,iDAAiD;IACjD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAU;IACzC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAExC,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;IACxC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAEjC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,qBAAqB;IACrB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;QACpC,KAAK;QACL,QAAQ;QACR,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,EAAE,EAAE;YACZ,KAAK,EAAE,IAAI,EAAE,KAAK;SACnB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAU;IAC5C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjC,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEhF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAU;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAU;IAC9C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjC,MAAM,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,CAAU;IAChD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAEjC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,CAAU,EAAE,IAAyB;IAC3E,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAElC,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,qFAAqF;IACrF,IAAI,WAAW,CAAC;IAChB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACxC,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,4BAA4B;IAC5B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAE9B,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,CAAiB;IACvD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;IAExC,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,aAAa,EAAE,KAAK,GAAG,CAAC;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/api/index.d.ts

@@ -1,10 +0,0 @@
-export * from './repositories';
-export * from './tokens';
-export * from './packages';
-export * from './stats';
-export * from './artifacts';
-export * from './auth';
-export * from './users';
-export * from './settings';
-export * from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/routes/api/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/api/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC"}

package/dist/routes/api/index.js

@@ -1,11 +0,0 @@
-// API routes exports
-export * from './repositories';
-export * from './tokens';
-export * from './packages';
-export * from './stats';
-export * from './artifacts';
-export * from './auth';
-export * from './users';
-export * from './settings';
-export * from './types';
-//# sourceMappingURL=index.js.map

package/dist/routes/api/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/api/index.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC"}

package/dist/routes/api/openapi/artifacts.d.ts

@@ -1,80 +0,0 @@
-import { z } from '@hono/zod-openapi';
-export declare const deleteArtifactRouteDef: {
-    method: "delete";
-    path: "/artifacts/{id}";
-    summary: string;
-    description: string;
-    security: {
-        Bearer: never[];
-    }[];
-    request: {
-        params: z.ZodObject<{
-            id: z.ZodString;
-        }, z.core.$strip>;
-    };
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        message: z.ZodString;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        404: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        code: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/artifacts/:id";
-};
-export declare const cleanupArtifactsRouteDef: {
-    method: "post";
-    path: "/artifacts/cleanup";
-    summary: string;
-    description: string;
-    security: {
-        Bearer: never[];
-    }[];
-    request: {
-        body: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        retention_days: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
-                    }, z.core.$strip>;
-                };
-            };
-        };
-    };
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        message: z.ZodString;
-                        deleted_count: z.ZodNumber;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/artifacts/cleanup";
-};
-//# sourceMappingURL=artifacts.d.ts.map

package/dist/routes/api/openapi/artifacts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/openapi/artifacts.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAGnD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCjC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BnC,CAAC"}

package/dist/routes/api/openapi/artifacts.js

@@ -1,73 +0,0 @@
-/*
- * PACKAGE.broker
- * Copyright (C) 2025 Łukasz Bajsarowicz
- * Licensed under AGPL-3.0
- */
-import { createRoute, z } from '@hono/zod-openapi';
-import { errorResponseSchema } from '@package-broker/shared';
-export const deleteArtifactRouteDef = createRoute({
-    method: 'delete',
-    path: '/artifacts/{id}',
-    summary: 'Delete artifact',
-    description: 'Delete an artifact from storage and database',
-    security: [{ Bearer: [] }],
-    request: {
-        params: z.object({
-            id: z.string(),
-        }),
-    },
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.object({
-                        message: z.string(),
-                    }),
-                },
-            },
-            description: 'Artifact deleted',
-        },
-        404: {
-            content: {
-                'application/json': {
-                    schema: errorResponseSchema,
-                },
-            },
-            description: 'Artifact not found',
-        },
-    },
-    tags: ['Artifacts'],
-});
-export const cleanupArtifactsRouteDef = createRoute({
-    method: 'post',
-    path: '/artifacts/cleanup',
-    summary: 'Cleanup artifacts',
-    description: 'Clean up old artifacts based on retention days',
-    security: [{ Bearer: [] }],
-    request: {
-        body: {
-            content: {
-                'application/json': {
-                    schema: z.object({
-                        retention_days: z.number().int().positive().default(90).optional(),
-                    }),
-                },
-            },
-        },
-    },
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.object({
-                        message: z.string(),
-                        deleted_count: z.number(),
-                    }),
-                },
-            },
-            description: 'Cleanup completed',
-        },
-    },
-    tags: ['Artifacts'],
-});
-//# sourceMappingURL=artifacts.js.map

package/dist/routes/api/openapi/artifacts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../../src/routes/api/openapi/artifacts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC;IAChD,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,iBAAiB;IAC1B,WAAW,EAAE,8CAA8C;IAC3D,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1B,OAAO,EAAE;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;SACf,CAAC;KACH;IACD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;wBACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;qBACpB,CAAC;iBACH;aACF;YACD,WAAW,EAAE,kBAAkB;SAChC;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,mBAAmB;iBAC5B;aACF;YACD,WAAW,EAAE,oBAAoB;SAClC;KACF;IACD,IAAI,EAAE,CAAC,WAAW,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;IAClD,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,mBAAmB;IAC5B,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1B,OAAO,EAAE;QACP,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;wBACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;qBACnE,CAAC;iBACH;aACF;SACF;KACF;IACD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;wBACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;wBACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;qBAC1B,CAAC;iBACH;aACF;YACD,WAAW,EAAE,mBAAmB;SACjC;KACF;IACD,IAAI,EAAE,CAAC,WAAW,CAAC;CACpB,CAAC,CAAC"}

package/dist/routes/api/openapi/auth.d.ts

@@ -1,187 +0,0 @@
-import { z } from '@hono/zod-openapi';
-export declare const loginRouteDef: {
-    method: "post";
-    path: "/auth/login";
-    summary: string;
-    description: string;
-    request: {
-        body: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        email: z.ZodString;
-                        password: z.ZodString;
-                        code: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-        };
-    };
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        token: z.ZodString;
-                        user: z.ZodObject<{
-                            id: z.ZodString;
-                            email: z.ZodString;
-                            role: z.ZodEnum<{
-                                admin: "admin";
-                                viewer: "viewer";
-                            }>;
-                            two_factor_enabled: z.ZodBoolean;
-                        }, z.core.$strip>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        400: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        code: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        401: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        code: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        403: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                        code: z.ZodString;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/auth/login";
-};
-export declare const logoutRouteDef: {
-    method: "post";
-    path: "/auth/logout";
-    summary: string;
-    description: string;
-    security: {
-        Bearer: never[];
-    }[];
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        message: z.ZodString;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/auth/logout";
-};
-export declare const meRouteDef: {
-    method: "get";
-    path: "/auth/me";
-    summary: string;
-    description: string;
-    security: {
-        Bearer: never[];
-    }[];
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        user: z.ZodObject<{
-                            id: z.ZodString;
-                            email: z.ZodString;
-                            role: z.ZodEnum<{
-                                admin: "admin";
-                                viewer: "viewer";
-                            }>;
-                            two_factor_enabled: z.ZodBoolean;
-                        }, z.core.$strip>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        401: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        code: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-        404: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        error: z.ZodString;
-                        message: z.ZodOptional<z.ZodString>;
-                        code: z.ZodOptional<z.ZodString>;
-                        requestId: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/auth/me";
-};
-export declare const checkAuthRequiredRouteDef: {
-    method: "get";
-    path: "/auth/check";
-    summary: string;
-    description: string;
-    responses: {
-        200: {
-            content: {
-                'application/json': {
-                    schema: z.ZodObject<{
-                        auth_required: z.ZodBoolean;
-                    }, z.core.$strip>;
-                };
-            };
-            description: string;
-        };
-    };
-    tags: string[];
-} & {
-    getRoutingPath(): "/auth/check";
-};
-//# sourceMappingURL=auth.d.ts.map

package/dist/routes/api/openapi/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/openapi/auth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAQnD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDxB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;CAmBzB,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCrB,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;CAkBpC,CAAC"}