@runeya/runeya 1.33.20 → 1.33.23

package/www.js

@@ -104,9 +104,12 @@ var require_args = __commonJS({
     var { hideBin } = require("yargs/helpers");
     var { existsSync } = require("fs");
     var yarg = yargs(hideBin(process.argv)).usage("Usage: <path-to-your-stack> [options]").alias("pe", "pull-env").describe("pe", "Pull env from a service (need --environment and --service)").default("pe", false).alias("e", "environment").describe("e", "Choose your environment").default("e", void 0).alias("s", "service").describe("s", "Service").default("s", void 0).alias("ss", "services").describe("ss", "Services").default("ss", []).boolean(["pe"]).string(["e", "s"]).array(["ss"]).help("h").alias("h", "help").parse();
+    var rootPath = path.resolve(yarg["_"]?.[0] || ".");
     var args2 = Object.assign({
-      rootPath: path.resolve(yarg["_"]?.[0] || "."),
-      initialCwd: ""
+      rootPath,
+      initialCwd: "",
+      runeyaConfigPath: path.resolve(rootPath, ".runeya"),
+      runeyaGlobalConfigPath: path.resolve(require("os").homedir(), ".runeya-global")
     }, yarg);
     if (!existsSync(args2.rootPath)) {
       console.error("Error: Runeya was launched with an invalid root path that does not exist. Please check your launch command. \nPath: ", args2.rootPath);
@@ -128,6 +131,99 @@ var require_args = __commonJS({
   }
 });
 
+// helpers/migrateStackMonitor.js
+var require_migrateStackMonitor = __commonJS({
+  "helpers/migrateStackMonitor.js"(exports2, module2) {
+    "use strict";
+    var pathfs = require("path");
+    var { existsSync } = require("fs");
+    var { cp } = require("fs/promises");
+    var args2 = require_args();
+    module2.exports = async function migrateStackMonitor2() {
+      const localLegacyPath = pathfs.resolve(args2.runeyaConfigPath, "../.stackmonitor");
+      const localNewPath = args2.runeyaConfigPath;
+      if (existsSync(localLegacyPath) && !existsSync(localNewPath)) {
+        console.log("Legacy path found, copy to new path");
+        await cp(localLegacyPath, localNewPath, { recursive: true, force: true });
+      }
+      const globalLegacyPath = pathfs.resolve(args2.runeyaGlobalConfigPath, "../.stackmonitor");
+      const globalNewPath = args2.runeyaGlobalConfigPath;
+      if (existsSync(globalLegacyPath) && !existsSync(globalNewPath)) {
+        console.log("Legacy path found, copy to new path");
+        await cp(globalLegacyPath, globalNewPath, { recursive: true, force: true });
+      }
+      if (existsSync(localLegacyPath) && !existsSync(pathfs.resolve(args2.runeyaConfigPath, "dbs/overrides"))) {
+        console.log("Legacy path found, copy to new path");
+        await cp(pathfs.resolve(localLegacyPath, "dbs/overrides"), pathfs.resolve(args2.runeyaConfigPath, "dbs/overrides"), { recursive: true, force: true });
+      }
+      if (existsSync(localLegacyPath) && !existsSync(pathfs.resolve(args2.runeyaConfigPath, "dbs/encryption-key.json"))) {
+        console.log("Legacy path found, copy to new path");
+        await cp(pathfs.resolve(localLegacyPath, "dbs/encryption-key.json"), pathfs.resolve(args2.runeyaConfigPath, "dbs/encryption-key.json"), { recursive: true, force: true });
+      }
+    };
+  }
+});
+
+// helpers/conflictStorage.js
+var require_conflictStorage = __commonJS({
+  "helpers/conflictStorage.js"(exports2, module2) {
+    "use strict";
+    var pendingConflicts = [];
+    function storeConflict(conflict) {
+      const conflictId = Date.now().toString();
+      pendingConflicts.push({
+        id: conflictId,
+        timestamp: Date.now(),
+        ...conflict
+      });
+      if (pendingConflicts.length > 20) {
+        pendingConflicts.shift();
+      }
+      return conflictId;
+    }
+    function getPendingConflicts() {
+      return pendingConflicts;
+    }
+    function removeConflict(conflictId) {
+      const index = pendingConflicts.findIndex((c) => c.id === conflictId);
+      if (index !== -1) {
+        pendingConflicts.splice(index, 1);
+      }
+    }
+    module2.exports = {
+      storeConflict,
+      getPendingConflicts,
+      removeConflict
+    };
+  }
+});
+
+// helpers/reencrypt-nodered.js
+var require_reencrypt_nodered = __commonJS({
+  "helpers/reencrypt-nodered.js"(exports2, module2) {
+    "use strict";
+    var crypto = require("crypto");
+    var { readFile, writeFile } = require("fs/promises");
+    var encryptionAlgorithm = "aes-256-ctr";
+    module2.exports = async function decryptCreds(oldSecret, newScret, path) {
+      const oldKey = crypto.createHash("sha256").update(oldSecret).digest();
+      const newKey = crypto.createHash("sha256").update(newScret).digest();
+      const cipher = JSON.parse(await readFile(path, "utf-8"));
+      let flows = cipher["$"];
+      const vector = Buffer.from(flows.substring(0, 32), "hex");
+      flows = flows.substring(32);
+      const decipher = crypto.createDecipheriv(encryptionAlgorithm, oldKey, vector);
+      const decrypted = decipher.update(flows, "base64", "utf8") + decipher.final("utf8");
+      const newVector = crypto.randomBytes(16);
+      const newCipher = crypto.createCipheriv(encryptionAlgorithm, newKey, newVector);
+      const encrypted = newCipher.update(decrypted, "utf8", "base64") + newCipher.final("base64");
+      await writeFile(path, JSON.stringify({
+        "$": newVector.toString("hex") + encrypted
+      }, null, 2), "utf-8");
+    };
+  }
+});
+
 // ../../modules/bugs/backend/routes.js
 var require_routes = __commonJS({
   "../../modules/bugs/backend/routes.js"(exports2, module2) {
@@ -198,724 +294,281 @@ var require_backend2 = __commonJS({
   }
 });
 
-// helpers/conflictStorage.js
-var require_conflictStorage = __commonJS({
-  "helpers/conflictStorage.js"(exports2, module2) {
+// ../../modules/documentation/backend/Documentation.js
+var require_Documentation = __commonJS({
+  "../../modules/documentation/backend/Documentation.js"(exports2, module2) {
     "use strict";
-    var pendingConflicts = [];
-    function storeConflict(conflict) {
-      const conflictId = Date.now().toString();
-      pendingConflicts.push({
-        id: conflictId,
-        timestamp: Date.now(),
-        ...conflict
-      });
-      if (pendingConflicts.length > 20) {
-        pendingConflicts.shift();
+    var PromiseB2 = require("bluebird");
+    var { randomUUID: randomUUID2 } = require("crypto");
+    var dbs2 = require_dbs();
+    var db = dbs2.getDb(`documentations`);
+    var dbDocumentationTree = dbs2.getDb(`documentations-tree`, { encrypted: true, defaultData: [] }).alasql;
+    var Documentation = class {
+      /**
+       * @param {import('@runeya/common-typings').NonFunctionProperties<Documentation>} documentation
+       */
+      constructor(documentation) {
+        this.id = documentation.id || "";
+        this.text = documentation.text || "";
       }
-      return conflictId;
-    }
-    function getPendingConflicts() {
-      return pendingConflicts;
-    }
-    function removeConflict(conflictId) {
-      const index = pendingConflicts.findIndex((c) => c.id === conflictId);
-      if (index !== -1) {
-        pendingConflicts.splice(index, 1);
+      static async load(id) {
+      }
+      static async all() {
+        return db.alasql.select("Select * from ?");
+      }
+      static async find(envId) {
+        const documentations = await this.all();
+        return documentations.find((env) => env.id === envId);
+      }
+      async save() {
+        const obj = this.toStorage();
+        await dbs2.getDb(`documentations/${this.id}`).write(obj);
+        return this;
+      }
+      async update(env) {
+        this.transform = env.transform;
+        this.label = env.label;
+        await dbs2.getDb(`documentations/${this.id}`).write(this.toStorage());
+      }
+      async delete() {
+        await dbs2.getDb(`documentations/${this.id}`).delete();
+      }
+      toStorage() {
+        return {
+          id: this.id,
+          label: this.label,
+          transform: this.transform
+        };
       }
-    }
-    module2.exports = {
-      storeConflict,
-      getPendingConflicts,
-      removeConflict
-    };
-  }
-});
-
-// helpers/reencrypt-nodered.js
-var require_reencrypt_nodered = __commonJS({
-  "helpers/reencrypt-nodered.js"(exports2, module2) {
-    "use strict";
-    var crypto = require("crypto");
-    var { readFile, writeFile } = require("fs/promises");
-    var encryptionAlgorithm = "aes-256-ctr";
-    module2.exports = async function decryptCreds(oldSecret, newScret, path) {
-      const oldKey = crypto.createHash("sha256").update(oldSecret).digest();
-      const newKey = crypto.createHash("sha256").update(newScret).digest();
-      const cipher = JSON.parse(await readFile(path, "utf-8"));
-      let flows = cipher["$"];
-      const vector = Buffer.from(flows.substring(0, 32), "hex");
-      flows = flows.substring(32);
-      const decipher = crypto.createDecipheriv(encryptionAlgorithm, oldKey, vector);
-      const decrypted = decipher.update(flows, "base64", "utf8") + decipher.final("utf8");
-      const newVector = crypto.randomBytes(16);
-      const newCipher = crypto.createCipheriv(encryptionAlgorithm, newKey, newVector);
-      const encrypted = newCipher.update(decrypted, "utf8", "base64") + newCipher.final("base64");
-      await writeFile(path, JSON.stringify({
-        "$": newVector.toString("hex") + encrypted
-      }, null, 2), "utf-8");
     };
+    module2.exports = Documentation;
   }
 });
 
-// models/EncryptionKey.js
-var require_EncryptionKey = __commonJS({
-  "models/EncryptionKey.js"(exports2, module2) {
+// ../../modules/documentation/backend/Leaf.js
+var require_Leaf = __commonJS({
+  "../../modules/documentation/backend/Leaf.js"(exports2, module2) {
     "use strict";
-    var { existsSync } = require("fs");
-    var path = require("path");
-    var { writeFile, readFile, appendFile } = require("fs/promises");
+    var PromiseB2 = require("bluebird");
     var { randomUUID: randomUUID2 } = require("crypto");
     var dbs2 = require_dbs();
-    var { generateKey, encrypt, decrypt } = require_crypto();
-    var reencryptNodered = require_reencrypt_nodered();
-    var pathfs = require("path");
-    var args2 = require_args();
-    var _EncryptionKey_instances, getDb_fn;
-    var EncryptionKey = class {
-      constructor() {
-        __privateAdd(this, _EncryptionKey_instances);
-        this.encryptionKey = "";
-      }
-      async init() {
-        this.encryptionKey = (await __privateMethod(this, _EncryptionKey_instances, getDb_fn).call(this).read()).encryptionKey;
-        const dirname = path.dirname(await dbs2.getDb("encryption-key", { encrypted: false }).getPath());
-        const gitignorePath = path.resolve(dirname, ".gitignore");
-        if (!existsSync(gitignorePath)) {
-          writeFile(gitignorePath, "encryption-key.json");
-        } else {
-          const gitignoreFile = (await readFile(gitignorePath, "utf-8")).split("\n");
-          const gitignoreHasKey = (key) => gitignoreFile.some((line) => line.trim() === key);
-          if (!gitignoreHasKey("encryption-key.json")) await appendFile(gitignorePath, "\nencryption-key.json");
-          if (!gitignoreHasKey("overrides")) await appendFile(gitignorePath, "\noverrides");
-        }
+    var { v4 } = require("uuid");
+    var dbLeafTree = dbs2.getDb(`leafs-leafs`, { encrypted: true, defaultData: [] }).alasql;
+    var Leaf = class _Leaf {
+      /**
+       * @param {import('@runeya/common-typings').NonFunctionProperties<Leaf>} leaf
+       */
+      constructor(leaf) {
+        this.id = leaf.id || v4();
+        this.docId = leaf.docId || "";
+        this.serviceId = leaf.serviceId || "";
+        this.label = leaf.label || "";
+        this.position = leaf.position || -1;
+        this.text = leaf.text || "";
+        this.parentId = leaf.parentId || "";
       }
-      async update() {
-        return __privateMethod(this, _EncryptionKey_instances, getDb_fn).call(this).write(this.toStorage());
+      static async getTree(serviceLabel) {
+        const leafs = await dbLeafTree.read(`Select * from ${dbLeafTree.table} ${serviceLabel ? `where serviceId = '${serviceLabel}'` : `where serviceId=''`}`);
+        return leafs;
       }
       toStorage() {
         return {
-          encryptionKey: this.encryptionKey
+          docId: this.docId,
+          position: this.position,
+          serviceId: this.serviceId,
+          label: this.label,
+          text: this.text,
+          parentId: this.parentId
         };
       }
-      async generateKey() {
-        return generateKey();
+      async remove() {
+        return dbLeafTree.write(`DELETE from ${dbLeafTree.table} where id = '${this.id}'`);
       }
-      async testKey(encryptionKey) {
-        try {
-          const variable = randomUUID2();
-          const result = await encrypt(variable, { encryptionKey });
-          const decrypted = await decrypt(result, { encryptionKey });
-          if (decrypted === variable) return true;
-          return false;
-        } catch (error) {
-          console.error(error);
-          return false;
-        }
+      static async find({ id }) {
+        const [leaf] = await dbLeafTree.read(`Select * from ${dbLeafTree.table} where id='${id}'`);
+        return leaf ? new _Leaf(leaf) : null;
       }
-      async saveKey(key, { noReload } = { noReload: false }) {
-        if (!await this.testKey(key)) throw new Error("Key not valid");
-        try {
-          const envSample = (await dbs2.getDbs("envs"))[0];
-          if (envSample) await dbs2.getDb(`envs/${envSample}`).read();
-          if (this.encryptionKey) {
-            await reencryptNodered(this.encryptionKey, key, pathfs.resolve(require_stack().getRootPath(), "nodered/flow_cred.json"));
-            await dbs2.reencrypt(this.encryptionKey, key);
-          }
-          ;
-        } catch (error) {
-          console.error(error);
-        }
-        const shouldRestart = this.encryptionKey !== key;
-        this.encryptionKey = key;
-        await this.update();
-        if (!noReload) {
-          await require_stack().selectConf();
-        }
-        if (shouldRestart) {
-          console.log("Restart...");
-          require("child_process").spawn(process.argv[0], process.argv.slice(1), {
-            cwd: args2.initialCwd,
-            detached: true,
-            stdio: "inherit"
-          }).unref();
-          process.exit(0);
-        }
-        return key;
+      async save() {
+        const leafExists = await _Leaf.find({ id: this.id });
+        const storage = this.toStorage();
+        const set = dbLeafTree.buildUpdateQuery(storage);
+        await leafExists ? dbLeafTree.write(`update ${dbLeafTree.table} set ${set} where id='${this.id}'`) : dbLeafTree.write(`insert into ${dbLeafTree.table} (id, docId, position, serviceId, label, text, parentId) values ('${this.id}', '${this.docId}', ${this.position}, '${this.serviceId}', '${this.label.replace(/'/g, "''")}', '${this.text.replace(/'/g, "''")}', '${this.parentId}')`);
+        return this;
       }
     };
-    _EncryptionKey_instances = new WeakSet();
-    getDb_fn = function() {
-      return dbs2.getDb("encryption-key", { encrypted: false });
-    };
-    module2.exports = new EncryptionKey();
+    module2.exports = Leaf;
   }
 });
 
-// helpers/crypto.js
-var require_crypto = __commonJS({
-  "helpers/crypto.js"(exports2, module2) {
+// ../../modules/documentation/backend/routes.js
+var require_routes2 = __commonJS({
+  "../../modules/documentation/backend/routes.js"(exports2, module2) {
     "use strict";
-    var _sodium = require("libsodium-wrappers");
-    var crypto = require("crypto");
-    var { sockets: sockets2 } = require_src();
-    var conflictStorage = require_conflictStorage();
-    var path = require("path");
-    module2.exports.generateKey = async () => {
-      await _sodium.ready;
-      const sodium = _sodium;
-      const key = sodium.crypto_aead_aegis256_keygen();
-      return sodium.to_base64(key);
-    };
-    module2.exports.encrypt = async (data, { additionnalNonce = "", encryptionKey = "" } = {}) => {
-      await _sodium.ready;
-      const sodium = _sodium;
-      if (!encryptionKey) encryptionKey = require_EncryptionKey().encryptionKey;
-      const key = sodium.from_base64(encryptionKey);
-      if (!key || key.length !== sodium.crypto_secretbox_KEYBYTES) {
-        throw new Error("Invalid encryption key length");
-      }
-      let nonce;
-      if (additionnalNonce) {
-        const combinedHash = crypto.createHash("blake2b512").update(data + additionnalNonce).digest();
-        nonce = combinedHash.slice(0, sodium.crypto_secretbox_NONCEBYTES);
-      } else {
-        nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
-      }
-      const dataStr = typeof data === "string" ? data : String(data);
-      const dataArray = new TextEncoder().encode(dataStr);
-      const ciphertext = sodium.crypto_secretbox_easy(dataArray, nonce, key);
-      return Buffer.concat([
-        Buffer.from(nonce.buffer, nonce.byteOffset, nonce.byteLength),
-        Buffer.from(ciphertext.buffer, ciphertext.byteOffset, ciphertext.byteLength)
-      ]).toString("base64");
-    };
-    module2.exports.decryptFile = async (encryptedData, options = {}, filePath) => {
-      if (typeof encryptedData === "string" && (encryptedData.includes("<<<<<<< HEAD") || encryptedData.includes("=======") || encryptedData.includes(">>>>>>>"))) {
-        return await handleGitConflict(encryptedData, options, filePath);
-      }
-      return await module2.exports.decrypt(encryptedData, options);
+    var express = require("express");
+    var Leaf = require_Leaf();
+    var PromiseB2 = require("bluebird");
+    var router = express.Router();
+    module2.exports = (runeya) => {
+      const { findService } = runeya;
+      router.get("/documentation/tree", async (req, res) => {
+        const service = findService(req.query.serviceId?.toString() || "");
+        const result = await Leaf.getTree(service?.label);
+        return res.send(result);
+      });
+      router.post("/documentation/tree/sort", async (req, res) => {
+        const leafs = await PromiseB2.mapSeries(req.body, async (_leaf, index) => {
+          const leaf = await Leaf.find({ id: _leaf.id });
+          if (!leaf) return;
+          leaf.position = index;
+          await leaf.save();
+          return leaf;
+        });
+        return res.send(leafs);
+      });
+      router.post("/documentation/tree", async (req, res) => {
+        const result = await new Leaf({
+          ...req.body
+        }).save();
+        return res.send(result);
+      });
+      router.post("/documentation/tree/:key", async (req, res) => {
+        const result = await new Leaf({
+          ...req.body,
+          id: req.params.key
+        }).save();
+        return res.send(result);
+      });
+      router.delete("/documentation/tree/:key", async (req, res) => {
+        const result = await Leaf.find({
+          id: req.params.key
+        });
+        if (result) return res.send(await result.remove());
+        return res.send();
+      });
+      return router;
     };
-    module2.exports.decrypt = async (encryptedData, { additionnalNonce = "", encryptionKey = "" } = {}) => {
-      if (typeof encryptedData === "string" && (encryptedData.includes("<<<<<<< HEAD") || encryptedData.includes("=======") || encryptedData.includes(">>>>>>>"))) {
-        return await handleGitConflict(encryptedData, { additionnalNonce, encryptionKey });
-      }
-      await _sodium.ready;
-      const sodium = _sodium;
-      if (!encryptionKey) encryptionKey = require_EncryptionKey().encryptionKey;
-      const key = sodium.from_base64(encryptionKey);
-      if (!key || key.length !== sodium.crypto_secretbox_KEYBYTES) {
-        throw new Error("Invalid decryption key length");
-      }
-      const encryptedBuffer = Buffer.from(encryptedData, "base64");
-      const nonce = encryptedBuffer.slice(0, sodium.crypto_secretbox_NONCEBYTES);
-      const ciphertext = encryptedBuffer.slice(sodium.crypto_secretbox_NONCEBYTES);
-      let decrypted;
-      try {
-        const ciphertextArray = new Uint8Array(ciphertext);
-        const nonceArray = new Uint8Array(nonce);
-        decrypted = sodium.crypto_secretbox_open_easy(ciphertextArray, nonceArray, key);
-      } catch (error) {
-        throw new Error("Decryption failed");
-      }
-      if (!decrypted) {
-        throw new Error("Decryption failed");
+  }
+});
+
+// ../../modules/documentation/backend/index.js
+var require_backend3 = __commonJS({
+  "../../modules/documentation/backend/index.js"(exports2, module2) {
+    "use strict";
+    var { readFile } = require("fs/promises");
+    var PromiseB2 = require("bluebird");
+    var pathfs = require("path");
+    var Documentation = require_Documentation();
+    var plugin = {
+      enabled: true,
+      name: "Documentation",
+      displayName: "Documentation",
+      description: "Read documentation for a given service",
+      icon: "fas fa-book",
+      // export: Documentation,
+      placements: ["service"],
+      order: 6,
+      routes: require_routes2(),
+      finder: async (search, runeya) => {
       }
-      return Buffer.from(decrypted).toString("utf-8");
     };
-    async function handleGitConflict(conflictedData, options, filePath) {
-      const headMatch = conflictedData.match(/<<<<<<< HEAD\r?\n([\s\S]*?)\r?\n=======\r?\n([\s\S]*?)\r?\n>>>>>>>.*/);
-      if (!headMatch) {
-        throw new Error("Git conflict detected but could not be properly parsed");
-      }
-      try {
-        const ourVersion = headMatch[1];
-        const theirVersion = headMatch[2];
-        let ourDecrypted = "";
-        let theirDecrypted = "";
-        try {
-          ourDecrypted = await module2.exports.decrypt(ourVersion, options);
-        } catch (err) {
-          const errorMessage = err instanceof Error ? err.message : String(err);
-          ourDecrypted = `[ERROR DECRYPTING OUR VERSION: ${errorMessage}]`;
-        }
-        try {
-          theirDecrypted = await module2.exports.decrypt(theirVersion, options);
-        } catch (err) {
-          const errorMessage = err instanceof Error ? err.message : String(err);
-          theirDecrypted = `[ERROR DECRYPTING THEIR VERSION: ${errorMessage}]`;
-        }
-        const conflictData = {
-          original: conflictedData,
-          ourVersion: ourDecrypted,
-          theirVersion: theirDecrypted,
-          filePath: filePath || null,
-          filename: filePath ? path.basename(filePath) : null
-        };
-        const conflictId = conflictStorage.storeConflict(conflictData);
-        conflictData.id = conflictId;
-        sockets2.emit("crypto:conflict", conflictData);
-        return `${JSON.stringify({
-          ourVersion: ourDecrypted,
-          theirVersion: theirDecrypted
-        })}`;
-      } catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        console.error("Error handling git conflict:", errorMessage);
-        throw new Error(`Git conflict detected, but failed to process: ${errorMessage}`);
-      }
-    }
+    module2.exports = plugin;
   }
 });
 
-// helpers/dbs.js
-var require_dbs = __commonJS({
-  "helpers/dbs.js"(exports2, module2) {
+// ../../modules/finder/backend/routes.js
+var require_routes3 = __commonJS({
+  "../../modules/finder/backend/routes.js"(exports2, module2) {
     "use strict";
-    var {
-      existsSync,
-      mkdirSync,
-      writeFileSync,
-      readFileSync,
-      unlinkSync
-    } = require("fs");
-    var pathfs = require("path");
-    var {
-      readdir,
-      mkdir,
-      writeFile,
-      readFile,
-      unlink
-    } = require("fs/promises");
-    var { fdir } = require("fdir");
+    var express = require("express");
+    var router = express.Router();
     var PromiseB2 = require("bluebird");
-    var { sockets: sockets2 } = require_src();
-    var args2 = require_args();
-    var { encrypt, decrypt, decryptFile } = require_crypto();
-    var alasql = require("alasql");
-    module2.exports = new class {
-      constructor() {
-        __publicField(this, "cache", {});
-      }
-      getRootPath() {
-        const rootPath = pathfs.resolve(args2.rootPath, ".runeya/dbs");
-        if (!existsSync(rootPath)) mkdirSync(rootPath, { recursive: true });
-        return rootPath;
-      }
-      async getDbs(namespace = "") {
-        const pathToDbs = pathfs.resolve(this.getRootPath(), namespace);
-        if (!existsSync(pathToDbs)) await mkdir(pathToDbs, { recursive: true });
-        return (await readdir(pathToDbs)).map((id) => id.replace(pathfs.extname(id), "").replace(".encrypted", ""));
+    function pluginToUrl(plugin) {
+      for (let i = 0; i < plugin.placements.length; i += 1) {
+        const placement = plugin.placements[i];
+        if (typeof placement !== "string") {
+          if (placement.position === "toolbox") {
+            return `/toolbox${placement.goTo?.path || placement.goTo}`;
+          }
+          if (placement.position === "sidebar") {
+            return `${placement.goTo?.path || placement.goTo}`;
+          }
+        }
       }
-      async reencrypt(oldKey, newKey) {
-        const api = new fdir().withFullPaths().filter((path) => path.endsWith("encrypted.json")).crawl(this.getRootPath());
-        await PromiseB2.map(api.withPromise(), async (file) => {
-          const fileEncrypted = await readFile(file, "utf-8");
-          const additionnalNonce = file.split(".runeya").pop();
-          const fileDecrypted = await decrypt(fileEncrypted, { additionnalNonce, encryptionKey: oldKey });
-          const fileReEncrypted = await encrypt(fileDecrypted, { additionnalNonce, encryptionKey: newKey });
-          await writeFile(file, fileReEncrypted, "utf-8");
-        });
-      }
-      getDb(id, { encrypted, defaultData } = { encrypted: true, defaultData: {} }) {
-        const getPath = async () => {
-          const persistencePath = pathfs.resolve(`${this.getRootPath()}/${id}${encrypted ? ".encrypted" : ""}.json`);
-          if (!existsSync(pathfs.dirname(persistencePath))) await mkdirSync(pathfs.dirname(persistencePath), { recursive: true });
-          if (!existsSync(persistencePath)) {
-            let defaultDB = JSON.stringify(defaultData || [], null, 2);
-            if (encrypted) defaultDB = await encrypt(defaultDB, { additionnalNonce: persistencePath.split(".runeya").pop() });
-            await writeFile(persistencePath, defaultDB, "utf-8");
-            this.cache[id] = defaultDB;
-          }
-          return persistencePath;
-        };
-        const table = id.replace(/[^a-z0-9]|\s+|\r?\n|\r/gmi, "_");
-        const read = async () => {
-          if (this.cache[id]) return this.cache[id];
-          const path = await getPath();
-          const additionnalNonce = path.split(".runeya").pop();
-          let db = readFileSync(path, "utf-8");
-          if (encrypted) {
-            try {
-              if (typeof db === "string" && (db.includes("<<<<<<< HEAD") || db.includes("=======") || db.includes(">>>>>>>"))) {
-                db = await decryptFile(db, { additionnalNonce }, path);
-              } else {
-                db = await decrypt(db, { additionnalNonce }).catch((err) => {
-                  console.error(path, err);
-                  sockets2.emit("system:wrongKey");
-                  throw err;
-                });
-              }
-            } catch (err) {
-              console.error(path, err);
-              sockets2.emit("system:wrongKey");
-              throw err;
-            }
-          }
-          this.cache[id] = JSON.parse(db);
-          if (!alasql.tables[table]) {
-            await alasql(`CREATE TABLE ${table}`);
-          }
-          alasql.tables[table].data = this.cache[id];
-          return this.cache[id];
-        };
-        const write = async (data) => {
-          let db = JSON.stringify(data, null, 2);
-          const path = await getPath();
-          const additionnalNonce = path.split(".runeya").pop();
-          if (encrypted) db = await encrypt(db, { additionnalNonce });
-          writeFileSync(path, db, "utf-8");
-          this.cache[id] = data;
-          if (alasql.tables[table]) {
-            alasql.tables[table].data = data;
-          }
-        };
-        const escapeQuote = (data) => {
-          if (typeof data === "string") {
-            return data.replace(/'/g, "''");
-          }
-          return data;
-        };
-        const setValue = (item) => {
-          if (item == null) {
-            return "NULL";
-          }
-          if (item instanceof Date && item.toISOString) {
-            return `'${item.toISOString()}'`;
-          }
-          if (typeof item === "string") {
-            return `'${escapeQuote(item)}'`;
-          }
-          return `${item}`;
-        };
-        return {
-          getPath,
-          alasql: {
-            table,
-            buildUpdateQuery(data) {
-              const set = [];
-              Object.keys(data).forEach((key) => {
-                set.push(`${key} = ${setValue(data[key])}`);
-              });
-              return set.join(", ");
-            },
-            read: async (sql) => {
-              await read();
-              return alasql.promise(sql);
-            },
-            /**
-             * 
-             * @param {{where?: string, orderBy?: string, limit?: number, offset?: number}} param0 
-             * @returns {Promise<any[]>}
-             */
-            simpleSelect: async ({ where, orderBy, limit, offset }) => {
-              await read();
-              return alasql.promise(`SELECT * FROM ${table} ${where ? `WHERE ${where}` : ""} ${orderBy ? `ORDER BY ${orderBy}` : ""} ${limit ? `LIMIT ${limit}` : ""} ${offset ? `OFFSET ${offset}` : ""}`);
-            },
-            /** @param {string} where */
-            delete: async (where) => {
-              await read();
-              await alasql.promise(`DELETE FROM ${table} WHERE ${where}`);
-              await write(await alasql(`select * from ${table}`));
-            },
-            insertOne: async (data) => {
-              await read();
-              await alasql.promise(`INSERT INTO ${table} VALUES ${JSON.stringify(data)}`);
-              await write(await alasql(`select * from ${table}`));
-            },
-            write: async (sql, value) => {
-              await read();
-              await alasql.promise(sql, value);
-              await write(await alasql(`select * from ${table}`));
-            }
-          },
-          write,
-          read,
-          delete: async () => {
-            delete this.cache[id];
-            return unlink(await getPath());
-          }
-        };
-      }
-    }();
+      return "";
+    }
+    var routes = (runeya) => {
+      const {
+        getServices,
+        helpers: { searchString }
+      } = runeya;
+      router.get("/finder/search", async (req, res) => {
+        const search = req.query.q?.toString()?.toUpperCase() || "";
+        const services = getServices().filter((service) => searchString(service?.label, search)).map((service) => ({
+          title: service.label,
+          description: service.description,
+          group: "Service",
+          url: `/stack-single/${service.label}`
+        }));
+        const { plugins } = runeya;
+        const _plugins = (await PromiseB2.map(Object.keys(plugins), (key) => plugins[key]).map(async (plugin) => [
+          ...await plugin?.finder?.(search, runeya)?.catch?.(() => []) || [],
+          ...searchString(plugin.name, search) ? [{
+            title: plugin.displayName || plugin.name,
+            description: plugin.description,
+            group: "Plugin",
+            icon: plugin.icon,
+            url: pluginToUrl(plugin) || ""
+          }] : []
+        ])).flat().filter((a) => a?.url);
+        const result = [
+          ...services,
+          ..._plugins
+        ].filter((a) => a);
+        res.send(result);
+      });
+      return router;
+    };
+    module2.exports = routes;
   }
 });
 
-// ../../modules/documentation/backend/Documentation.js
-var require_Documentation = __commonJS({
-  "../../modules/documentation/backend/Documentation.js"(exports2, module2) {
+// ../../modules/finder/backend/index.js
+var require_backend4 = __commonJS({
+  "../../modules/finder/backend/index.js"(exports2, module2) {
     "use strict";
-    var PromiseB2 = require("bluebird");
-    var { randomUUID: randomUUID2 } = require("crypto");
-    var dbs2 = require_dbs();
-    var db = dbs2.getDb(`documentations`);
-    var dbDocumentationTree = dbs2.getDb(`documentations-tree`, { encrypted: true, defaultData: [] }).alasql;
-    var Documentation = class {
-      /**
-       * @param {import('@runeya/common-typings').NonFunctionProperties<Documentation>} documentation
-       */
-      constructor(documentation) {
-        this.id = documentation.id || "";
-        this.text = documentation.text || "";
-      }
-      static async load(id) {
-      }
-      static async all() {
-        return db.alasql.select("Select * from ?");
-      }
-      static async find(envId) {
-        const documentations = await this.all();
-        return documentations.find((env) => env.id === envId);
-      }
-      async save() {
-        const obj = this.toStorage();
-        await dbs2.getDb(`documentations/${this.id}`).write(obj);
-        return this;
-      }
-      async update(env) {
-        this.transform = env.transform;
-        this.label = env.label;
-        await dbs2.getDb(`documentations/${this.id}`).write(this.toStorage());
-      }
-      async delete() {
-        await dbs2.getDb(`documentations/${this.id}`).delete();
-      }
-      toStorage() {
-        return {
-          id: this.id,
-          label: this.label,
-          transform: this.transform
-        };
-      }
+    var commandExists = require("command-exists");
+    var plugin = {
+      enabled: true,
+      name: "Finder",
+      displayName: "Finder",
+      description: "Find all you want inside this app",
+      icon: "fab fa-git-alt",
+      export: null,
+      order: -1,
+      placements: ["global", {
+        position: "sidebar",
+        label: "Finder",
+        icon: "fas fa-search",
+        goTo: { path: "/Finder" },
+        active: "Finder"
+      }],
+      hidden: () => commandExists("git").then(() => false).catch(() => true),
+      routes: require_routes3()
     };
-    module2.exports = Documentation;
+    module2.exports = plugin;
   }
 });
 
-// ../../modules/documentation/backend/Leaf.js
-var require_Leaf = __commonJS({
-  "../../modules/documentation/backend/Leaf.js"(exports2, module2) {
+// helpers/exec.js
+var require_exec = __commonJS({
+  "helpers/exec.js"(exports2, module2) {
     "use strict";
-    var PromiseB2 = require("bluebird");
-    var { randomUUID: randomUUID2 } = require("crypto");
-    var dbs2 = require_dbs();
-    var { v4 } = require("uuid");
-    var dbLeafTree = dbs2.getDb(`leafs-leafs`, { encrypted: true, defaultData: [] }).alasql;
-    var Leaf = class _Leaf {
+    var { exec } = require("child_process");
+    module2.exports = {
       /**
-       * @param {import('@runeya/common-typings').NonFunctionProperties<Leaf>} leaf
-       */
-      constructor(leaf) {
-        this.id = leaf.id || v4();
-        this.docId = leaf.docId || "";
-        this.serviceId = leaf.serviceId || "";
-        this.label = leaf.label || "";
-        this.position = leaf.position || -1;
-        this.text = leaf.text || "";
-        this.parentId = leaf.parentId || "";
-      }
-      static async getTree(serviceLabel) {
-        const leafs = await dbLeafTree.read(`Select * from ${dbLeafTree.table} ${serviceLabel ? `where serviceId = '${serviceLabel}'` : `where serviceId=''`}`);
-        return leafs;
-      }
-      toStorage() {
-        return {
-          docId: this.docId,
-          position: this.position,
-          serviceId: this.serviceId,
-          label: this.label,
-          text: this.text,
-          parentId: this.parentId
-        };
-      }
-      async remove() {
-        return dbLeafTree.write(`DELETE from ${dbLeafTree.table} where id = '${this.id}'`);
-      }
-      static async find({ id }) {
-        const [leaf] = await dbLeafTree.read(`Select * from ${dbLeafTree.table} where id='${id}'`);
-        return leaf ? new _Leaf(leaf) : null;
-      }
-      async save() {
-        const leafExists = await _Leaf.find({ id: this.id });
-        const storage = this.toStorage();
-        const set = dbLeafTree.buildUpdateQuery(storage);
-        await leafExists ? dbLeafTree.write(`update ${dbLeafTree.table} set ${set} where id='${this.id}'`) : dbLeafTree.write(`insert into ${dbLeafTree.table} (id, docId, position, serviceId, label, text, parentId) values ('${this.id}', '${this.docId}', ${this.position}, '${this.serviceId}', '${this.label.replace(/'/g, "''")}', '${this.text.replace(/'/g, "''")}', '${this.parentId}')`);
-        return this;
-      }
-    };
-    module2.exports = Leaf;
-  }
-});
-
-// ../../modules/documentation/backend/routes.js
-var require_routes2 = __commonJS({
-  "../../modules/documentation/backend/routes.js"(exports2, module2) {
-    "use strict";
-    var express = require("express");
-    var Leaf = require_Leaf();
-    var PromiseB2 = require("bluebird");
-    var router = express.Router();
-    module2.exports = (runeya) => {
-      const { findService } = runeya;
-      router.get("/documentation/tree", async (req, res) => {
-        const service = findService(req.query.serviceId?.toString() || "");
-        const result = await Leaf.getTree(service?.label);
-        return res.send(result);
-      });
-      router.post("/documentation/tree/sort", async (req, res) => {
-        const leafs = await PromiseB2.mapSeries(req.body, async (_leaf, index) => {
-          const leaf = await Leaf.find({ id: _leaf.id });
-          if (!leaf) return;
-          leaf.position = index;
-          await leaf.save();
-          return leaf;
-        });
-        return res.send(leafs);
-      });
-      router.post("/documentation/tree", async (req, res) => {
-        const result = await new Leaf({
-          ...req.body
-        }).save();
-        return res.send(result);
-      });
-      router.post("/documentation/tree/:key", async (req, res) => {
-        const result = await new Leaf({
-          ...req.body,
-          id: req.params.key
-        }).save();
-        return res.send(result);
-      });
-      router.delete("/documentation/tree/:key", async (req, res) => {
-        const result = await Leaf.find({
-          id: req.params.key
-        });
-        if (result) return res.send(await result.remove());
-        return res.send();
-      });
-      return router;
-    };
-  }
-});
-
-// ../../modules/documentation/backend/index.js
-var require_backend3 = __commonJS({
-  "../../modules/documentation/backend/index.js"(exports2, module2) {
-    "use strict";
-    var { readFile } = require("fs/promises");
-    var PromiseB2 = require("bluebird");
-    var pathfs = require("path");
-    var Documentation = require_Documentation();
-    var plugin = {
-      enabled: true,
-      name: "Documentation",
-      displayName: "Documentation",
-      description: "Read documentation for a given service",
-      icon: "fas fa-book",
-      // export: Documentation,
-      placements: ["service"],
-      order: 6,
-      routes: require_routes2(),
-      finder: async (search, runeya) => {
-      }
-    };
-    module2.exports = plugin;
-  }
-});
-
-// ../../modules/finder/backend/routes.js
-var require_routes3 = __commonJS({
-  "../../modules/finder/backend/routes.js"(exports2, module2) {
-    "use strict";
-    var express = require("express");
-    var router = express.Router();
-    var PromiseB2 = require("bluebird");
-    function pluginToUrl(plugin) {
-      for (let i = 0; i < plugin.placements.length; i += 1) {
-        const placement = plugin.placements[i];
-        if (typeof placement !== "string") {
-          if (placement.position === "toolbox") {
-            return `/toolbox${placement.goTo?.path || placement.goTo}`;
-          }
-          if (placement.position === "sidebar") {
-            return `${placement.goTo?.path || placement.goTo}`;
-          }
-        }
-      }
-      return "";
-    }
-    var routes = (runeya) => {
-      const {
-        getServices,
-        helpers: { searchString }
-      } = runeya;
-      router.get("/finder/search", async (req, res) => {
-        const search = req.query.q?.toString()?.toUpperCase() || "";
-        const services = getServices().filter((service) => searchString(service?.label, search)).map((service) => ({
-          title: service.label,
-          description: service.description,
-          group: "Service",
-          url: `/stack-single/${service.label}`
-        }));
-        const { plugins } = runeya;
-        const _plugins = (await PromiseB2.map(Object.keys(plugins), (key) => plugins[key]).map(async (plugin) => [
-          ...await plugin?.finder?.(search, runeya)?.catch?.(() => []) || [],
-          ...searchString(plugin.name, search) ? [{
-            title: plugin.displayName || plugin.name,
-            description: plugin.description,
-            group: "Plugin",
-            icon: plugin.icon,
-            url: pluginToUrl(plugin) || ""
-          }] : []
-        ])).flat().filter((a) => a?.url);
-        const result = [
-          ...services,
-          ..._plugins
-        ].filter((a) => a);
-        res.send(result);
-      });
-      return router;
-    };
-    module2.exports = routes;
-  }
-});
-
-// ../../modules/finder/backend/index.js
-var require_backend4 = __commonJS({
-  "../../modules/finder/backend/index.js"(exports2, module2) {
-    "use strict";
-    var commandExists = require("command-exists");
-    var plugin = {
-      enabled: true,
-      name: "Finder",
-      displayName: "Finder",
-      description: "Find all you want inside this app",
-      icon: "fab fa-git-alt",
-      export: null,
-      order: -1,
-      placements: ["global", {
-        position: "sidebar",
-        label: "Finder",
-        icon: "fas fa-search",
-        goTo: { path: "/Finder" },
-        active: "Finder"
-      }],
-      hidden: () => commandExists("git").then(() => false).catch(() => true),
-      routes: require_routes3()
-    };
-    module2.exports = plugin;
-  }
-});
-
-// helpers/exec.js
-var require_exec = __commonJS({
-  "helpers/exec.js"(exports2, module2) {
-    "use strict";
-    var { exec } = require("child_process");
-    module2.exports = {
-      /**
-       * @param {string} cmd
-       * @param {import('child_process').ExecOptions} options
-       * @returns {Promise<string>}
+       * @param {string} cmd
+       * @param {import('child_process').ExecOptions} options
+       * @returns {Promise<string>}
        */
       execAsync(cmd, options) {
         return new Promise((res, rej) => {
@@ -3601,7 +3254,7 @@ var require_stack = __commonJS({
     var CustomObservable = require_CustomObservable();
     var args2 = require_args();
     var { existsSync, mkdirSync } = require("fs");
-    var { rename } = require("fs/promises");
+    var { rename, cp, rmdir, rm } = require("fs/promises");
     var pathfs = require("path");
     var { default: axios } = require("axios");
     function Stack(stack) {
@@ -3672,7 +3325,6 @@ var require_stack = __commonJS({
     };
     Stack.getRootPath = () => {
       const rootPath = pathfs.resolve(args2.rootPath, ".runeya");
-      if (!existsSync(rootPath)) mkdirSync(rootPath, { recursive: true });
       return rootPath;
     };
     Stack.parse = async function() {
@@ -3735,18 +3387,6 @@ var require_stack = __commonJS({
       return Stack.findService(serviceLabel);
     };
     Stack.selectConf = async function() {
-      const localLegacyPath = pathfs.resolve(require_stack().getRootPath(), "../.stackmonitor");
-      const localNewPath = pathfs.resolve(require_stack().getRootPath(), ".runeya");
-      if (existsSync(localLegacyPath) && !existsSync(localNewPath)) {
-        console.log("Legacy path found, move to new path");
-        await rename(localLegacyPath, localNewPath);
-      }
-      const globalLegacyPath = pathfs.resolve(require("os").homedir(), ".stackmonitor");
-      const globalNewPath = pathfs.resolve(require("os").homedir(), ".runeya-global");
-      if (existsSync(globalLegacyPath) && !existsSync(globalNewPath)) {
-        console.log("Legacy path found, move to new path");
-        await rename(globalLegacyPath, globalNewPath);
-      }
       await EncryptionKey.init();
       if (!EncryptionKey.encryptionKey) {
         await EncryptionKey.saveKey(await EncryptionKey.generateKey());
@@ -3806,6 +3446,414 @@ var require_stack = __commonJS({
   }
 });
 
+// models/EncryptionKey.js
+var require_EncryptionKey = __commonJS({
+  "models/EncryptionKey.js"(exports2, module2) {
+    "use strict";
+    var { existsSync } = require("fs");
+    var path = require("path");
+    var { writeFile, readFile, appendFile } = require("fs/promises");
+    var { randomUUID: randomUUID2 } = require("crypto");
+    var dbs2 = require_dbs();
+    var { generateKey, encrypt, decrypt } = require_crypto();
+    var reencryptNodered = require_reencrypt_nodered();
+    var pathfs = require("path");
+    var args2 = require_args();
+    var _EncryptionKey_instances, getDb_fn;
+    var EncryptionKey = class {
+      constructor() {
+        __privateAdd(this, _EncryptionKey_instances);
+        this.encryptionKey = "";
+      }
+      async init() {
+        this.encryptionKey = (await __privateMethod(this, _EncryptionKey_instances, getDb_fn).call(this).read()).encryptionKey;
+      }
+      async update() {
+        return __privateMethod(this, _EncryptionKey_instances, getDb_fn).call(this).write(this.toStorage());
+      }
+      toStorage() {
+        return {
+          encryptionKey: this.encryptionKey
+        };
+      }
+      async generateKey() {
+        return generateKey();
+      }
+      async testKey(encryptionKey) {
+        try {
+          const variable = randomUUID2();
+          const result = await encrypt(variable, { encryptionKey });
+          const decrypted = await decrypt(result, { encryptionKey });
+          if (decrypted === variable) return true;
+          return false;
+        } catch (error) {
+          console.error(error);
+          return false;
+        }
+      }
+      async saveKey(key, { noReload } = { noReload: false }) {
+        if (!await this.testKey(key)) throw new Error("Key not valid");
+        try {
+          const envSample = (await dbs2.getDbs("envs"))[0];
+          if (envSample) await dbs2.getDb(`envs/${envSample}`).read();
+          if (this.encryptionKey) {
+            await reencryptNodered(this.encryptionKey, key, pathfs.resolve(require_stack().getRootPath(), "nodered/flow_cred.json"));
+            await dbs2.reencrypt(this.encryptionKey, key);
+          }
+          ;
+        } catch (error) {
+          console.error(error);
+        }
+        const shouldRestart = this.encryptionKey !== key;
+        this.encryptionKey = key;
+        await this.update();
+        if (!noReload) {
+          await require_stack().selectConf();
+        }
+        if (shouldRestart) {
+          console.log("Restart...");
+          require("child_process").spawn(process.argv[0], process.argv.slice(1), {
+            cwd: args2.initialCwd,
+            detached: true,
+            stdio: "inherit"
+          }).unref();
+          process.exit(0);
+        }
+        return key;
+      }
+    };
+    _EncryptionKey_instances = new WeakSet();
+    getDb_fn = function() {
+      return dbs2.getDb("encryption-key", { encrypted: false });
+    };
+    module2.exports = new EncryptionKey();
+  }
+});
+
+// helpers/crypto.js
+var require_crypto = __commonJS({
+  "helpers/crypto.js"(exports2, module2) {
+    "use strict";
+    var _sodium = require("libsodium-wrappers");
+    var crypto = require("crypto");
+    var { sockets: sockets2 } = require_src();
+    var conflictStorage = require_conflictStorage();
+    var path = require("path");
+    module2.exports.generateKey = async () => {
+      await _sodium.ready;
+      const sodium = _sodium;
+      const key = sodium.crypto_aead_aegis256_keygen();
+      return sodium.to_base64(key);
+    };
+    module2.exports.encrypt = async (data, { additionnalNonce = "", encryptionKey = "" } = {}) => {
+      await _sodium.ready;
+      const sodium = _sodium;
+      if (!encryptionKey) encryptionKey = require_EncryptionKey().encryptionKey;
+      const key = sodium.from_base64(encryptionKey);
+      if (!key || key.length !== sodium.crypto_secretbox_KEYBYTES) {
+        throw new Error("Invalid encryption key length");
+      }
+      let nonce;
+      if (additionnalNonce) {
+        const combinedHash = crypto.createHash("blake2b512").update(data + additionnalNonce).digest();
+        nonce = combinedHash.slice(0, sodium.crypto_secretbox_NONCEBYTES);
+      } else {
+        nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+      }
+      const dataStr = typeof data === "string" ? data : String(data);
+      const dataArray = new TextEncoder().encode(dataStr);
+      const ciphertext = sodium.crypto_secretbox_easy(dataArray, nonce, key);
+      return Buffer.concat([
+        Buffer.from(nonce.buffer, nonce.byteOffset, nonce.byteLength),
+        Buffer.from(ciphertext.buffer, ciphertext.byteOffset, ciphertext.byteLength)
+      ]).toString("base64");
+    };
+    module2.exports.decryptFile = async (encryptedData, options = {}, filePath) => {
+      if (typeof encryptedData === "string" && (encryptedData.includes("<<<<<<< HEAD") || encryptedData.includes("=======") || encryptedData.includes(">>>>>>>"))) {
+        return await handleGitConflict(encryptedData, options, filePath);
+      }
+      return await module2.exports.decrypt(encryptedData, options);
+    };
+    module2.exports.decrypt = async (encryptedData, { additionnalNonce = "", encryptionKey = "" } = {}) => {
+      if (typeof encryptedData === "string" && (encryptedData.includes("<<<<<<< HEAD") || encryptedData.includes("=======") || encryptedData.includes(">>>>>>>"))) {
+        return await handleGitConflict(encryptedData, { additionnalNonce, encryptionKey });
+      }
+      await _sodium.ready;
+      const sodium = _sodium;
+      if (!encryptionKey) encryptionKey = require_EncryptionKey().encryptionKey;
+      const key = sodium.from_base64(encryptionKey);
+      if (!key || key.length !== sodium.crypto_secretbox_KEYBYTES) {
+        throw new Error("Invalid decryption key length");
+      }
+      const encryptedBuffer = Buffer.from(encryptedData, "base64");
+      const nonce = encryptedBuffer.slice(0, sodium.crypto_secretbox_NONCEBYTES);
+      const ciphertext = encryptedBuffer.slice(sodium.crypto_secretbox_NONCEBYTES);
+      let decrypted;
+      try {
+        const ciphertextArray = new Uint8Array(ciphertext);
+        const nonceArray = new Uint8Array(nonce);
+        decrypted = sodium.crypto_secretbox_open_easy(ciphertextArray, nonceArray, key);
+      } catch (error) {
+        throw new Error("Decryption failed");
+      }
+      if (!decrypted) {
+        throw new Error("Decryption failed");
+      }
+      return Buffer.from(decrypted).toString("utf-8");
+    };
+    async function handleGitConflict(conflictedData, options, filePath) {
+      const headMatch = conflictedData.match(/<<<<<<< HEAD\r?\n([\s\S]*?)\r?\n=======\r?\n([\s\S]*?)\r?\n>>>>>>>.*/);
+      if (!headMatch) {
+        throw new Error("Git conflict detected but could not be properly parsed");
+      }
+      try {
+        const ourVersion = headMatch[1];
+        const theirVersion = headMatch[2];
+        let ourDecrypted = "";
+        let theirDecrypted = "";
+        try {
+          ourDecrypted = await module2.exports.decrypt(ourVersion, options);
+        } catch (err) {
+          const errorMessage = err instanceof Error ? err.message : String(err);
+          ourDecrypted = `[ERROR DECRYPTING OUR VERSION: ${errorMessage}]`;
+        }
+        try {
+          theirDecrypted = await module2.exports.decrypt(theirVersion, options);
+        } catch (err) {
+          const errorMessage = err instanceof Error ? err.message : String(err);
+          theirDecrypted = `[ERROR DECRYPTING THEIR VERSION: ${errorMessage}]`;
+        }
+        const conflictData = {
+          original: conflictedData,
+          ourVersion: ourDecrypted,
+          theirVersion: theirDecrypted,
+          filePath: filePath || null,
+          filename: filePath ? path.basename(filePath) : null
+        };
+        const conflictId = conflictStorage.storeConflict(conflictData);
+        conflictData.id = conflictId;
+        sockets2.emit("crypto:conflict", conflictData);
+        return `${JSON.stringify({
+          ourVersion: ourDecrypted,
+          theirVersion: theirDecrypted
+        })}`;
+      } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        console.error("Error handling git conflict:", errorMessage);
+        throw new Error(`Git conflict detected, but failed to process: ${errorMessage}`);
+      }
+    }
+  }
+});
+
+// helpers/dbs.js
+var require_dbs = __commonJS({
+  "helpers/dbs.js"(exports2, module2) {
+    "use strict";
+    var {
+      existsSync,
+      mkdirSync,
+      writeFileSync,
+      readFileSync,
+      unlinkSync
+    } = require("fs");
+    var pathfs = require("path");
+    var {
+      readdir,
+      mkdir,
+      writeFile,
+      readFile,
+      unlink
+    } = require("fs/promises");
+    var { fdir } = require("fdir");
+    var PromiseB2 = require("bluebird");
+    var { sockets: sockets2 } = require_src();
+    var args2 = require_args();
+    var { encrypt, decrypt, decryptFile } = require_crypto();
+    var alasql = require("alasql");
+    module2.exports = new class {
+      constructor() {
+        __publicField(this, "cache", {});
+      }
+      getRootPath() {
+        const rootPath = pathfs.resolve(args2.rootPath, ".runeya/dbs");
+        if (!existsSync(rootPath)) mkdirSync(rootPath, { recursive: true });
+        return rootPath;
+      }
+      async getDbs(namespace = "") {
+        const pathToDbs = pathfs.resolve(this.getRootPath(), namespace);
+        if (!existsSync(pathToDbs)) await mkdir(pathToDbs, { recursive: true });
+        return (await readdir(pathToDbs)).map((id) => id.replace(pathfs.extname(id), "").replace(".encrypted", ""));
+      }
+      async reencrypt(oldKey, newKey) {
+        const api = new fdir().withFullPaths().filter((path) => path.endsWith("encrypted.json")).crawl(this.getRootPath());
+        await PromiseB2.map(api.withPromise(), async (file) => {
+          const fileEncrypted = await readFile(file, "utf-8");
+          const additionnalNonce = file.split(".runeya").pop();
+          const fileDecrypted = await decrypt(fileEncrypted, { additionnalNonce, encryptionKey: oldKey });
+          const fileReEncrypted = await encrypt(fileDecrypted, { additionnalNonce, encryptionKey: newKey });
+          await writeFile(file, fileReEncrypted, "utf-8");
+        });
+      }
+      getDb(id, { encrypted, defaultData } = { encrypted: true, defaultData: {} }) {
+        const getPath = async () => {
+          const persistencePath = pathfs.resolve(`${this.getRootPath()}/${id}${encrypted ? ".encrypted" : ""}.json`);
+          if (!existsSync(pathfs.dirname(persistencePath))) await mkdirSync(pathfs.dirname(persistencePath), { recursive: true });
+          if (!existsSync(persistencePath)) {
+            let defaultDB = JSON.stringify(defaultData || [], null, 2);
+            if (encrypted) defaultDB = await encrypt(defaultDB, { additionnalNonce: persistencePath.split(".runeya").pop() });
+            await writeFile(persistencePath, defaultDB, "utf-8");
+            this.cache[id] = defaultDB;
+          }
+          return persistencePath;
+        };
+        const table = id.replace(/[^a-z0-9]|\s+|\r?\n|\r/gmi, "_");
+        const read = async () => {
+          if (this.cache[id]) return this.cache[id];
+          const path = await getPath();
+          const additionnalNonce = path.split(".runeya").pop();
+          let db = readFileSync(path, "utf-8");
+          if (encrypted) {
+            try {
+              if (typeof db === "string" && (db.includes("<<<<<<< HEAD") || db.includes("=======") || db.includes(">>>>>>>"))) {
+                db = await decryptFile(db, { additionnalNonce }, path);
+              } else {
+                db = await decrypt(db, { additionnalNonce }).catch((err) => {
+                  console.error(path, err);
+                  sockets2.emit("system:wrongKey");
+                  throw err;
+                });
+              }
+            } catch (err) {
+              console.error(path, err);
+              sockets2.emit("system:wrongKey");
+              throw err;
+            }
+          }
+          this.cache[id] = JSON.parse(db);
+          if (!alasql.tables[table]) {
+            await alasql(`CREATE TABLE ${table}`);
+          }
+          alasql.tables[table].data = this.cache[id];
+          return this.cache[id];
+        };
+        const write = async (data) => {
+          let db = JSON.stringify(data, null, 2);
+          const path = await getPath();
+          const additionnalNonce = path.split(".runeya").pop();
+          if (encrypted) db = await encrypt(db, { additionnalNonce });
+          writeFileSync(path, db, "utf-8");
+          this.cache[id] = data;
+          if (alasql.tables[table]) {
+            alasql.tables[table].data = data;
+          }
+        };
+        const escapeQuote = (data) => {
+          if (typeof data === "string") {
+            return data.replace(/'/g, "''");
+          }
+          return data;
+        };
+        const setValue = (item) => {
+          if (item == null) {
+            return "NULL";
+          }
+          if (item instanceof Date && item.toISOString) {
+            return `'${item.toISOString()}'`;
+          }
+          if (typeof item === "string") {
+            return `'${escapeQuote(item)}'`;
+          }
+          return `${item}`;
+        };
+        return {
+          getPath,
+          alasql: {
+            table,
+            buildUpdateQuery(data) {
+              const set = [];
+              Object.keys(data).forEach((key) => {
+                set.push(`${key} = ${setValue(data[key])}`);
+              });
+              return set.join(", ");
+            },
+            read: async (sql) => {
+              await read();
+              return alasql.promise(sql);
+            },
+            /**
+             * 
+             * @param {{where?: string, orderBy?: string, limit?: number, offset?: number}} param0 
+             * @returns {Promise<any[]>}
+             */
+            simpleSelect: async ({ where, orderBy, limit, offset }) => {
+              await read();
+              return alasql.promise(`SELECT * FROM ${table} ${where ? `WHERE ${where}` : ""} ${orderBy ? `ORDER BY ${orderBy}` : ""} ${limit ? `LIMIT ${limit}` : ""} ${offset ? `OFFSET ${offset}` : ""}`);
+            },
+            /** @param {string} where */
+            delete: async (where) => {
+              await read();
+              await alasql.promise(`DELETE FROM ${table} WHERE ${where}`);
+              await write(await alasql(`select * from ${table}`));
+            },
+            insertOne: async (data) => {
+              await read();
+              await alasql.promise(`INSERT INTO ${table} VALUES ${JSON.stringify(data)}`);
+              await write(await alasql(`select * from ${table}`));
+            },
+            write: async (sql, value) => {
+              await read();
+              await alasql.promise(sql, value);
+              await write(await alasql(`select * from ${table}`));
+            }
+          },
+          write,
+          read,
+          delete: async () => {
+            delete this.cache[id];
+            return unlink(await getPath());
+          }
+        };
+      }
+    }();
+  }
+});
+
+// helpers/createDefaultFiles.js
+var require_createDefaultFiles = __commonJS({
+  "helpers/createDefaultFiles.js"(exports2, module2) {
+    "use strict";
+    var pathfs = require("path");
+    var { existsSync } = require("fs");
+    var { writeFile, readFile, appendFile } = require("fs/promises");
+    var args2 = require_args();
+    var dbs2 = require_dbs();
+    module2.exports = async function createDefaultFiles2() {
+      await createGitignore();
+      await createPluginsGitignore();
+    };
+    async function createPluginsGitignore() {
+      const gitignorePath = pathfs.resolve(args2.runeyaConfigPath, ".gitignore");
+      if (!existsSync(gitignorePath)) await writeFile(gitignorePath, "");
+      const gitignoreFile = (await readFile(gitignorePath, "utf-8")).split("\n");
+      const gitignoreHasKey = (key) => gitignoreFile.some((line) => line.trim() === key);
+      if (!gitignoreHasKey("plugins.json")) await appendFile(gitignorePath, "\nplugins.json");
+      if (!gitignoreHasKey("plugins")) await appendFile(gitignorePath, "\nplugins");
+    }
+    async function createGitignore() {
+      const dirname = pathfs.dirname(await dbs2.getDb("encryption-key", { encrypted: false, defaultData: {} }).getPath());
+      const gitignorePath = pathfs.resolve(dirname, ".gitignore");
+      if (!existsSync(gitignorePath)) {
+        await writeFile(gitignorePath, "encryption-key.json");
+      }
+      const gitignoreFile = (await readFile(gitignorePath, "utf-8")).split("\n");
+      const gitignoreHasKey = (key) => gitignoreFile.some((line) => line.trim() === key);
+      if (!gitignoreHasKey("encryption-key.json")) await appendFile(gitignorePath, "\nencryption-key.json");
+      if (!gitignoreHasKey("overrides")) await appendFile(gitignorePath, "\noverrides");
+    }
+  }
+});
+
 // helpers/console.table.js
 var require_console_table = __commonJS({
   "helpers/console.table.js"(exports2, module2) {
@@ -3845,7 +3893,7 @@ var require_plugins2 = __commonJS({
     var { tmpdir } = require("os");
     var path = require("path");
     var { existsSync } = require("fs");
-    var { writeFile, mkdir, readFile, cp, rm, readdir } = require("fs/promises");
+    var { writeFile, mkdir, readFile, cp, rm, readdir, appendFile } = require("fs/promises");
     var { spawn } = require("child_process");
     var dbs2 = require_dbs();
     var HTTPError = require_src2();
@@ -5028,10 +5076,14 @@ var require_server = __commonJS({
 
 // bin/www
 var { sockets } = require_src();
+var migrateStackMonitor = require_migrateStackMonitor();
+var createDefaultFiles = require_createDefaultFiles();
 process.title = "runeya";
 var args = require_args();
 require("dotenv").config();
 (async () => {
+  await migrateStackMonitor();
+  await createDefaultFiles();
   if (args["pull-env"]) {
     await require_stack().selectConf();
     const service = require_stack().findService(args.s);