@sonicjs-cms/core 3.0.0-beta.11 → 3.0.0-beta.13

package/dist/{chunk-SXLVXD2X.js → chunk-3FBZFYSQ.js}

@@ -1,22 +1,21 @@
 import { isFirstUserRegistration, isRegistrationEnabled, authValidationService } from './chunk-IESEVHXL.js';
 import { renderDocumentFormPage, renderAlert } from './chunk-RMRJGMDE.js';
 import { getCacheService, CACHE_CONFIGS, SettingsService, getLogger, getAppInstance, buildRouteList, CATEGORY_INFO } from './chunk-RQ6N3FTV.js';
-import { DocumentTypeRegistry, requireAuth, requireRole, optionalAuth, isPluginActive, rateLimit, AuthManager, getJwtExpirySecondsFromDb, getJwtRefreshGraceSecondsFromDb, logActivity, generateCsrfToken } from './chunk-3PU4WVU6.js';
+import { DocumentTypeRegistry, requireAuth, requireRole, optionalAuth, isPluginActive, rateLimit, AuthManager, getJwtExpirySecondsFromDb, getJwtRefreshGraceSecondsFromDb, logActivity, generateCsrfToken } from './chunk-BK3NB35S.js';
 import { DocumentsService, documentSecondsToMs, RbacService } from './chunk-BLMTL57B.js';
 import { nanoid } from './chunk-GCDZZNIN.js';
-import { getCollectionRegistry, collectionRecordToRow, loadCollectionConfigs, getVisibleCollections, PluginService, PLUGIN_REGISTRY, findPluginByCodeName, isCodeCollectionInternal, isDbDocTypeInternal, invalidateTenantCache } from './chunk-QLFTG3QJ.js';
-import { MigrationService } from './chunk-6H66MSSL.js';
+import { getCollectionRegistry, collectionRecordToRow, loadCollectionConfigs, getVisibleCollections, PluginService, PLUGIN_REGISTRY, findPluginByCodeName, isCodeCollectionInternal, isDbDocTypeInternal, invalidateTenantCache } from './chunk-KG6GQE6B.js';
+import { MigrationService } from './chunk-IV3NA6WZ.js';
 import { renderCheckboxPage, renderAlert as renderAlert$1, renderTable, renderPagination, renderConfirmationDialog, getConfirmationDialogScript, renderAdminLayout, adminLayoutV2, renderForm } from './chunk-OBA2RYZN.js';
 import { init_admin_layout_catalyst_template, renderAdminLayoutCatalyst } from './chunk-5V62WT6M.js';
-import { createServiceSingleton, definePlugin, getPluginDefinition, applySchemaDefaults, renderSchemaFields, parseFormDataToSettings } from './chunk-HPAJKZAQ.js';
+import { createServiceSingleton, definePlugin, getPluginDefinition, applySchemaDefaults, renderSchemaFields, parseFormDataToSettings } from './chunk-EKMN6W5B.js';
 import { hasHookSystem, getTypedHooks } from './chunk-RNZFGN4R.js';
 import { QueryFilterBuilder, getBlocksFieldConfig, parseBlocksValue } from './chunk-QZGABF2M.js';
 import { metricsTracker } from './chunk-FICTAGD4.js';
-import { getCoreVersion } from './chunk-ZUEIQFE5.js';
+import { getCoreVersion } from './chunk-PPFQDMZE.js';
 import { escapeHtml, sanitizeRichText, sanitizeInput } from './chunk-TQABQWOP.js';
 import { Hono } from 'hono';
 import { z } from 'zod';
-import { cors } from 'hono/cors';
 import { setCookie, getCookie } from 'hono/cookie';
 import { html, raw } from 'hono/html';
 
@@ -1260,16 +1259,6 @@ apiRoutes.use("*", async (c, next) => {
   c.set("cacheEnabled", cacheEnabled);
   await next();
 });
-apiRoutes.use("*", cors({
-  origin: (origin, c) => {
-    const allowed = c.env?.CORS_ORIGINS;
-    if (!allowed) return null;
-    const list = allowed.split(",").map((s) => s.trim());
-    return list.includes(origin) ? origin : null;
-  },
-  allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
-  allowHeaders: ["Content-Type", "Authorization", "X-API-Key"]
-}));
 function addTimingMeta(c, meta = {}, executionStartTime) {
   const totalTime = Date.now() - c.get("startTime");
   const executionTime = executionStartTime ? Date.now() - executionStartTime : void 0;
@@ -3400,7 +3389,7 @@ adminApiRoutes.patch("/collections/:id", collectionsReadOnly);
 adminApiRoutes.delete("/collections/:id", collectionsReadOnly);
 adminApiRoutes.get("/migrations/status", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-XQLBY7E5.js');
+    const { MigrationService: MigrationService2 } = await import('./migrations-KKLQ2CEF.js');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const status = await migrationService.getMigrationStatus();
@@ -3443,7 +3432,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
 });
 adminApiRoutes.get("/migrations/validate", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-XQLBY7E5.js');
+    const { MigrationService: MigrationService2 } = await import('./migrations-KKLQ2CEF.js');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const validation = await migrationService.validateSchema();
@@ -7115,6 +7104,20 @@ authRoutes.post(
       await setCsrfCookie(c);
       const baBody = await baRes.json();
       const user = baBody.user ?? {};
+      const tokenTtl = await getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const token = await AuthManager.generateToken(
+        user.id,
+        user.email,
+        user.role ?? "viewer",
+        c.env.JWT_SECRET,
+        tokenTtl
+      );
+      setCookie(c, "auth_token", token, {
+        httpOnly: true,
+        secure: true,
+        sameSite: "Strict",
+        maxAge: tokenTtl
+      });
       return c.json({
         user: {
           id: user.id,
@@ -7122,7 +7125,8 @@ authRoutes.post(
           firstName: user.name?.split(" ")[0] ?? "",
           lastName: user.name?.split(" ").slice(1).join(" ") ?? "",
           role: user.role ?? "viewer"
-        }
+        },
+        token
       });
     } catch (error) {
       console.error("Login error:", error);
@@ -26639,5 +26643,5 @@ var ROUTES_INFO = {
 };
 
 export { DocumentRepository, ROUTES_INFO, TenantService, VALID_MEMBER_ROLES, adminCheckboxRoutes, adminCollectionsRoutes, adminDocumentsRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, admin_api_default, admin_content_default, apiDocumentsRoutes, api_content_crud_default, api_default, api_media_default, api_system_default, auth_default, createUserProfilesPlugin, defineUserProfile, denyIfNotAllowed, dispatchHookEvent, getConfirmationDialogScript2 as getConfirmationDialogScript, getCustomData, getEmailService, getUserProfileConfig, getVariablesCached, hasEmailService, invalidateVariablesCache, isValidMemberRole, lexicalEditorPlugin, renderConfirmationDialog2 as renderConfirmationDialog, renderTable2 as renderTable, resolveDocScope, resolveVariablesInObject, router, router2, setEmailService, setVariablesCache, test_cleanup_default, userProfilesPlugin, userRoutes };
-//# sourceMappingURL=chunk-SXLVXD2X.js.map
-//# sourceMappingURL=chunk-SXLVXD2X.js.map
+//# sourceMappingURL=chunk-3FBZFYSQ.js.map
+//# sourceMappingURL=chunk-3FBZFYSQ.js.map