@stacksjs/actions 0.70.86 → 0.70.88

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/actions",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.86",
+  "version": "0.70.88",
   "description": "The Stacks actions.",
   "author": "Chris Breuer",
   "contributors": [
@@ -69,23 +69,23 @@
     "@stacksjs/ts-md": "^0.1.1"
   },
   "devDependencies": {
-    "@stacksjs/api": "0.70.86",
-    "@stacksjs/cli": "0.70.86",
-    "@stacksjs/config": "0.70.86",
-    "@stacksjs/database": "0.70.86",
+    "@stacksjs/api": "0.70.88",
+    "@stacksjs/cli": "0.70.88",
+    "@stacksjs/config": "0.70.88",
+    "@stacksjs/database": "0.70.88",
     "@stacksjs/tlsx": "^0.13.2",
     "better-dx": "^0.2.16",
-    "@stacksjs/dns": "0.70.86",
-    "@stacksjs/enums": "0.70.86",
-    "@stacksjs/env": "0.70.86",
-    "@stacksjs/error-handling": "0.70.86",
-    "@stacksjs/logging": "0.70.86",
-    "@stacksjs/path": "0.70.86",
-    "@stacksjs/security": "0.70.86",
-    "@stacksjs/storage": "0.70.86",
-    "@stacksjs/strings": "0.70.86",
-    "@stacksjs/utils": "0.70.86",
-    "@stacksjs/validation": "0.70.86"
+    "@stacksjs/dns": "0.70.88",
+    "@stacksjs/enums": "0.70.88",
+    "@stacksjs/env": "0.70.88",
+    "@stacksjs/error-handling": "0.70.88",
+    "@stacksjs/logging": "0.70.88",
+    "@stacksjs/path": "0.70.88",
+    "@stacksjs/security": "0.70.88",
+    "@stacksjs/storage": "0.70.88",
+    "@stacksjs/strings": "0.70.88",
+    "@stacksjs/utils": "0.70.88",
+    "@stacksjs/validation": "0.70.88"
   },
   "peerDependencies": {
     "pickier": "^0.1.28"

package/dist/action.d.ts

@@ -1,149 +0,0 @@
-import type { ExtractParams, InferValidations, JobOptions, RequestInstance } from '@stacksjs/types';
-/**
- * Shape of `validations:` on an action. Each entry pairs a
- * ts-validation `Validator<T>` rule with an optional error message.
- *
- * Kept loose at the index-signature level so existing actions with
- * untyped validation objects keep compiling. New code that wants the
- * body-inference benefit (stacksjs/stacks#1851 Phase 2b) declares
- * validations `as const` so {@link InferValidations} can read the
- * concrete rule types.
- *
- * Exported so the router can run validations without redeclaring the
- * type (stacksjs/stacks#1870 R-3 — the previous copy in
- * `stacks-router.ts` would drift out of sync).
- */
-export declare interface ActionValidations {
-  [key: string]: {
-    rule: { validate: (value: any) => any }
-    message?: string | Record<string, string>
-  }
-}
-/**
- * Shape of {@link validateActionInput}'s return value. Lives here next
- * to {@link ActionValidations} so the router and actions package share
- * a single declaration (stacksjs/stacks#1870 R-3).
- */
-export declare interface ValidationResult {
-  valid: boolean
-  errors: Record<string, string[]>
-}
-declare interface ActionOptions<TModel = string, TValidations extends ActionValidations | undefined = undefined, TPath extends string = '',> {
-  name?: string
-  description?: string
-  apiResponse?: boolean
-  validations?: TValidations
-  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'
-  rate?: JobOptions['rate']
-  tries?: JobOptions['tries']
-  backoff?: JobOptions['backoff']
-  enabled?: JobOptions['enabled']
-  path?: TPath
-  requestFile?: string
-  model?: TModel
-  skipCsrf?: boolean
-  csrf?: boolean
-  authorize?: (
-    request: InferRequest<TModel, TValidations, TPath>,
-  ) => boolean | Response | Promise<boolean | Response>
-  before?: (
-    request: InferRequest<TModel, TValidations, TPath>,
-  ) => void | Response | Promise<void | Response>
-  handle: {
-    bivarianceHack: (
-      request: InferRequest<TModel, TValidations, TPath>,
-    ) => ActionResult | Promise<ActionResult>
-  }['bivarianceHack']
-  dependencies?: () => Record<string, unknown>
-}
-/**
- * Resolve the body shape (`TFields`) for an action's request:
- *
- *   1. If `model:` is a `defineModel()` return, use its row shape —
- *      preserves the existing model-aware ergonomics.
- *   2. Else if `validations:` is set as a const, infer the body
- *      from each rule's `Validator<T>` output type
- *      (stacksjs/stacks#1851 Phase 2b).
- *   3. Else fall back to `Record<string, any>` — bare-typed action
- *      with no narrowing.
- */
-declare type ResolveBody<TModel, TValidations> = TModel extends { _isStacksModel: true }
-    ? TModel
-    : TValidations extends ActionValidations
-      ? InferValidations<TValidations>
-      : Record<string, any>;
-/**
- * Build the request type passed to the action's `handle()`. Combines
- * the body resolution above with path-extracted params from `TPath`
- * (stacksjs/stacks#1851 Phase 2a).
- */
-declare type InferRequest<TModel, TValidations, TPath extends string> = TPath extends ''
-    ? RequestInstance<ResolveBody<TModel, TValidations>>
-    : RequestInstance<ResolveBody<TModel, TValidations>, ExtractParams<TPath>>;
-/**
- * Everything an action's `handle()` is allowed to return. The router's
- * `formatResult()` walks each branch:
- *
- *   - `Response`                       → returned as-is (caller built their own)
- *   - `null` / `undefined`             → `204` for API clients, empty `200` for browser
- *   - object / array (incl. records)   → `Response.json(...)`
- *   - `string` / `number` / `boolean`  → JSON-encoded for API clients, `text/plain`
- *                                        for top-level browser navigations
- *   - `ReadableStream`                 → streamed back (stacksjs/stacks#1870 R-4)
- *
- * Previously typed `Promise<any> | any`, which let non-serializable returns
- * (class instances with cycles, undefined-bearing tuples, etc.) sneak through
- * to runtime. Narrowing here surfaces them at the call site instead.
- * See stacksjs/stacks#1870 R-11.
- */
-export type ActionResult = | Response
-  | ReadableStream
-  | null
-  | undefined
-  | string
-  | number
-  | boolean
-  | object
-  | unknown[];
-export declare class Action<TModel = string, TValidations extends ActionValidations | undefined = undefined, TPath extends string = '',> {
-  name?: string;
-  description?: string;
-  apiResponse?: boolean;
-  rate?: ActionOptions['rate'];
-  tries?: ActionOptions['tries'];
-  backoff?: ActionOptions['backoff'];
-  enabled?: ActionOptions['enabled'];
-  path?: ActionOptions<TModel, TValidations, TPath>['path'];
-  method?: ActionOptions['method'];
-  validations?: TValidations;
-  requestFile?: string;
-  skipCsrf?: boolean;
-  csrf?: boolean;
-  authorize?: ActionOptions<TModel, TValidations, TPath>['authorize'];
-  before?: ActionOptions<TModel, TValidations, TPath>['before'];
-  handle: ActionOptions<TModel, TValidations, TPath>['handle'];
-  model?: string;
-  constructor({
-  name,
-  description,
-  apiResponse,
-  validations,
-  handle,
-  rate,
-  tries,
-  backoff,
-  enabled,
-  path,
-  method,
-  requestFile,
-  model,
-  skipCsrf,
-  csrf,
-  authorize,
-  before,
-  dependencies,
-}: ActionOptions<TModel, TValidations, TPath>);
-  get deps(): Record<string, unknown>;
-  overrideDependencies(overrides: Record<string, unknown>): void;
-  resetDependencies(): void;
-}

package/dist/action.js

@@ -1,2 +0,0 @@
-// @bun
-import{Hb as a}from"./chunk-6bk53y02.js";import"./chunk-h3d81wrg.js";export{a as Action};

package/dist/actions.d.ts

@@ -1,2 +0,0 @@
-export * from './helpers/utils';
-export * as actions from './helpers/utils';

package/dist/actions.js

@@ -1,2 +0,0 @@
-// @bun
-import{Ib as a,Jb as e,Kb as f}from"./chunk-0gadhvn7.js";import"./chunk-h3d81wrg.js";export{e as runActions,a as runAction,f as hasAction,t as actions};

package/dist/add.d.ts

@@ -1,6 +0,0 @@
-import type { AddOptions } from '@stacksjs/types';
-export declare function invoke(options: AddOptions): Promise<void>;
-export declare function add(options: AddOptions): Promise<void>;
-export declare function addTable(): Promise<void>;
-export declare function addCalendar(): Promise<void>;
-export declare function installPackages(names: string[]): Promise<void>;

package/dist/add.js

@@ -1,2 +0,0 @@
-// @bun
-import"./chunk-h3d81wrg.js";import{installPackage as t}from"@stacksjs/cli";async function o(a){if(a?.table)await n();if(a?.calendar)await s()}async function r(a){return await o(a)}async function n(){await t("@stacksjs/table")}async function s(){await t("@stacksjs/calendar")}async function d(a){for(let i of a)await t(i)}export{o as invoke,d as installPackages,n as addTable,s as addCalendar,r as add};

package/dist/ai/request-model-access.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/ai/request-model-access.js

@@ -1,2 +0,0 @@
-// @bun
-import"../chunk-h3d81wrg.js";import{requestModelAccess as e}from"@stacksjs/ai";async function o(){try{await e()}catch(r){console.error("Error requesting model access:",r)}}if(import.meta.main)o();

package/dist/auth/client.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/auth/client.js

@@ -1,3 +0,0 @@
-// @bun
-import L from"process";import{randomBytes as T,scryptSync as _}from"crypto";import{db as $}from"@stacksjs/database";import{HttpError as w}from"@stacksjs/error-handling";import{log as D}from"@stacksjs/logging";var J=L.argv.slice(2),U=(G)=>{let M=J.findIndex((z)=>z.startsWith(`--${G}=`)||z.startsWith(`-${G.charAt(0)}=`));if(M!==-1){let z=J[M];if(!z)return;let O=z.indexOf("=");return O>=0?z.slice(O+1):void 0}let N=J.findIndex((z)=>z===`--${G}`||z===`-${G.charAt(0)}`),K=N!==-1?J[N+1]:void 0;if(K&&!K.startsWith("-"))return K;return},V=(G)=>{return J.includes(`--${G}`)},W=U("name")||"OAuth Client",X=U("redirect")||"http://localhost",C=V("personal"),E=V("password");D.info(`Creating OAuth client: ${W}`);var Y=T(40).toString("hex"),Q=T(16).toString("hex"),H=`${Q}:${_(Y,Q,64).toString("hex")}`,R=await $.insertInto("oauth_clients").values({name:W,secret:H,provider:"local",redirect:X,personal_access_client:C,password_client:E,revoked:!1}).executeTakeFirst(),Z=R?.insertId||Number(R?.numInsertedOrUpdatedRows);if(!Z)throw new w(500,"Failed to create OAuth client");D.success("OAuth client created successfully");D.info("");D.info("Client Details:");D.info(`  Client ID: ${Z}`);D.info("  Client Secret: [REDACTED]");L.stdout.write(`Client Secret (save now, shown once): ${Y}
-`);D.info(`  Redirect URI: ${X}`);D.info("");D.warn("Make sure to save the client secret. You will not be able to retrieve it again.");L.exit(0);

package/dist/auth/prune.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/auth/prune.js

@@ -1,2 +0,0 @@
-// @bun
-import S from"process";import{db as T,sql as V}from"@stacksjs/database";import{log as B}from"@stacksjs/logging";var G=S.argv.slice(2),U=(w)=>{return G.includes(`--${w}`)},W=(w)=>{let L=G.findIndex((z)=>z.startsWith(`--${w}=`)||z.startsWith(`-${w.charAt(0)}=`));if(L!==-1){let z=G[L];if(!z)return;let N=z.indexOf("=");return N>=0?z.slice(N+1):void 0}let M=G.findIndex((z)=>z===`--${w}`||z===`-${w.charAt(0)}`),H=M!==-1?G[M+1]:void 0;if(H&&!H.startsWith("-"))return H;return},X=!U("no-expired"),Y=!U("no-revoked"),Q=Number(W("days"))||7;B.info("Pruning authentication tokens...");var J=0,K=0;if(X)B.info("Removing expired tokens..."),J=await T.deleteFrom("personal_access_tokens").where("expires_at","<",V.raw("NOW()")).execute(),B.success(`Removed ${J} expired token(s)`);if(Y){B.info(`Removing tokens revoked more than ${Q} day(s) ago...`);let w=new Date;w.setDate(w.getDate()-Q),K=await T.deleteFrom("personal_access_tokens").where("revoked_at","is not",null).where("revoked_at","<",w.toISOString()).execute(),B.success(`Removed ${K} revoked token(s)`)}B.success(`Token pruning complete. Total removed: ${J+K}`);S.exit(0);

package/dist/auth/setup.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/auth/setup.js

@@ -1,206 +0,0 @@
-// @bun
-import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"@stacksjs/database";import{log as z}from"@stacksjs/logging";import{makeHash as W}from"@stacksjs/security";import{env as X}from"@stacksjs/env";import{sqlHelpers as Y,usersEmailVerifiedAtSql as Z,usersPasswordChangedAtSql as _}from"@stacksjs/database";var O=X.DB_CONNECTION||"sqlite",K=Y(O),{isPostgres:G,isMysql:I,now:$,boolTrue:f,boolFalse:D}=K;z.info("Setting up authentication...");z.info(`Database driver: ${O}`);z.info("Ensuring OAuth tables exist...");try{if(G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_clients (
-        id SERIAL PRIMARY KEY,
-        name VARCHAR(255) NOT NULL,
-        secret VARCHAR(100),
-        provider VARCHAR(255),
-        redirect VARCHAR(2000) NOT NULL,
-        personal_access_client BOOLEAN NOT NULL DEFAULT false,
-        password_client BOOLEAN NOT NULL DEFAULT false,
-        revoked BOOLEAN NOT NULL DEFAULT false,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_clients (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        name VARCHAR(255) NOT NULL,
-        secret VARCHAR(100),
-        provider VARCHAR(255),
-        redirect VARCHAR(2000) NOT NULL,
-        personal_access_client BOOLEAN NOT NULL DEFAULT 0,
-        password_client BOOLEAN NOT NULL DEFAULT 0,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_clients (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        name VARCHAR(255) NOT NULL,
-        secret VARCHAR(100),
-        provider VARCHAR(255),
-        redirect VARCHAR(2000) NOT NULL,
-        personal_access_client BOOLEAN NOT NULL DEFAULT 0,
-        password_client BOOLEAN NOT NULL DEFAULT 0,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP
-      )
-    `);if(G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_access_tokens (
-        id SERIAL PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        oauth_client_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        name VARCHAR(255),
-        scopes TEXT,
-        revoked BOOLEAN NOT NULL DEFAULT false,
-        expires_at TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_access_tokens (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        oauth_client_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        name VARCHAR(255),
-        scopes TEXT,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        expires_at TIMESTAMP NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP NULL
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_access_tokens (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        user_id INTEGER NOT NULL,
-        oauth_client_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        name VARCHAR(255),
-        scopes TEXT,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        expires_at TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP
-      )
-    `);if(await x.unsafe(`
-    CREATE INDEX IF NOT EXISTS idx_oauth_access_tokens_token ON oauth_access_tokens(token)
-  `),G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
-        id SERIAL PRIMARY KEY,
-        access_token_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        revoked BOOLEAN NOT NULL DEFAULT false,
-        expires_at TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        access_token_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        expires_at TIMESTAMP NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        access_token_id INTEGER NOT NULL,
-        token TEXT NOT NULL,
-        revoked BOOLEAN NOT NULL DEFAULT 0,
-        expires_at TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);await x.unsafe(`
-    CREATE INDEX IF NOT EXISTS idx_oauth_refresh_tokens_token ON oauth_refresh_tokens(token)
-  `),z.success("OAuth tables ready")}catch(F){z.error("Failed to create OAuth tables",F),J.exit(1)}z.info("Ensuring password_resets table exists...");try{if(G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS password_resets (
-        id SERIAL PRIMARY KEY,
-        email VARCHAR(255) NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS password_resets (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        email VARCHAR(255) NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS password_resets (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        email VARCHAR(255) NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);try{await x.unsafe("ALTER TABLE password_resets ADD COLUMN expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP")}catch{}await x.unsafe(`
-    CREATE UNIQUE INDEX IF NOT EXISTS idx_password_resets_email_unique ON password_resets(email)
-  `),z.success("Password resets table ready")}catch(F){z.error("Failed to create password_resets table",F),J.exit(1)}z.info("Ensuring email_verifications table exists...");try{if(G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS email_verifications (
-        id SERIAL PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS email_verifications (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS email_verifications (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        user_id INTEGER NOT NULL,
-        token VARCHAR(255) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);await x.unsafe(`
-    CREATE UNIQUE INDEX IF NOT EXISTS idx_email_verifications_user_id_unique ON email_verifications(user_id)
-  `);try{await x.unsafe(Z(K))}catch{}try{await x.unsafe(_(K))}catch{}z.success("Email verifications table ready")}catch(F){z.error("Failed to create email_verifications table",F),J.exit(1)}z.info("Ensuring webauthn_challenges table exists...");try{if(G)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS webauthn_challenges (
-        id SERIAL PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        challenge TEXT NOT NULL,
-        purpose VARCHAR(32) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else if(I)await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS webauthn_challenges (
-        id INTEGER AUTO_INCREMENT PRIMARY KEY,
-        user_id INTEGER NOT NULL,
-        challenge TEXT NOT NULL,
-        purpose VARCHAR(32) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);else await x.unsafe(`
-      CREATE TABLE IF NOT EXISTS webauthn_challenges (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        user_id INTEGER NOT NULL,
-        challenge TEXT NOT NULL,
-        purpose VARCHAR(32) NOT NULL,
-        expires_at TIMESTAMP NOT NULL,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-      )
-    `);await x.unsafe(`
-    CREATE UNIQUE INDEX IF NOT EXISTS idx_webauthn_challenges_user_purpose ON webauthn_challenges(user_id, purpose)
-  `),z.success("WebAuthn challenges table ready")}catch(F){z.error("Failed to create webauthn_challenges table",F),J.exit(1)}z.info("Creating personal access client...");try{if((await x.unsafe(`
-    SELECT id FROM oauth_clients WHERE personal_access_client = ${f} LIMIT 1
-  `))?.length>0)console.log(`
-\u2713 Personal access client already exists`);else{let R=U(40).toString("hex"),N=await W(R,{algorithm:"bcrypt"});if(G)await x.unsafe(`
-        INSERT INTO oauth_clients (name, secret, provider, redirect, personal_access_client, password_client, revoked, created_at)
-        VALUES ($1, $2, $3, $4, $5, $6, $7, NOW())
-      `,["Personal Access Client",N,"local","http://localhost",!0,!1,!1]);else await x.unsafe(`
-        INSERT INTO oauth_clients (name, secret, provider, redirect, personal_access_client, password_client, revoked, created_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ${$})
-      `,["Personal Access Client",N,"local","http://localhost",1,0,0]);console.log(`
-\u2713 Personal access client created successfully`)}}catch(F){console.error("Failed to create personal access client:",F),J.exit(1)}console.log(`
-\u2713 Authentication setup complete!`);console.log(`
-Features enabled:`);console.log("  - Token hashing (SHA-256) for secure storage");console.log("  - Refresh tokens for seamless token renewal");console.log("  - Scope-based authorization");console.log("  - Password reset flow");console.log(`
-Next steps:`);console.log("  1. Use createToken(userId, name, scopes) to generate tokens");console.log("  2. Use refreshToken(token) to exchange refresh tokens");console.log('  3. Use the "auth" middleware to protect routes');console.log("  4. Use tokenCan(scope) for authorization checks");console.log("  5. POST /password/forgot to request password reset");console.log(`  6. POST /password/reset to reset password with token
-`);J.exit(0);

package/dist/auth/token.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/auth/token.js

@@ -1,2 +0,0 @@
-// @bun
-import q from"process";import{createPersonalAccessClient as v}from"@stacksjs/auth";import{log as w}from"@stacksjs/logging";var m=await v();if(m?.isErr)console.error(m.error),w.error("createPersonalAccessClient failed",m.error),q.exit(1);q.exit(0);

package/dist/blog.d.ts

@@ -1,19 +0,0 @@
-/**
- * Render a blog request via BunPress, or return null to let the caller handle
- * non-blog paths. Handles the listing, posts, the RSS feed, and the sitemap.
- */
-export declare function renderBlog(req: Request): Promise<Response | null>;
-/*.md` frontmatter with NO BunPress dependency, so they work in
- * dev and production alike. Returns null for any non-feed path (the stx page
- * layer then handles /blog and /blog/<slug>). Absolute URLs use the configured
- * site url (blog config), never the loopback request origin.
- */
-export declare function renderBlogFeed(req: Request): Promise<Response | null>;
-/**
- * Build the blog to a static directory the same way /docs is built (see
- * config/cloud.ts). Emits clean-URL pages (`<slug>/index.html`), the listing,
- * the RSS feed, and the sitemap. `baseUrl` is the deployed site origin
- * (e.g. https://stacksjs.com) — used for absolute feed/sitemap/share URLs.
- */
-export declare function buildBlog(options?: { outDir: string, baseUrl?: string }): Promise<void>;
-declare type BlogThemeMode = 'colored' | 'light' | 'dark';

package/dist/blog.js

@@ -1,148 +0,0 @@
-// @bun
-import"./chunk-h3d81wrg.js";import{existsSync as R,mkdirSync as C,readdirSync as b,readFileSync as X,writeFileSync as o}from"fs";import{homedir as i}from"os";import{join as B}from"path";var M=B(process.cwd(),"content/blog"),E=B(M,".theme.css"),y={title:"The Stacks Blog",description:"Notes from building a full-stack TypeScript framework whose only dependencies are TypeScript and Bun.",siteTitle:"Stacks Blog",author:"The Stacks Team",url:"https://stacksjs.com",nav:[{text:"Blog",link:"/blog"},{text:"Docs",link:"/docs"},{text:"GitHub",link:"https://github.com/stacksjs/stacks"}],themes:["colored","light","dark"],defaultTheme:"colored",colophon:'Built with Stacks \xB7 TypeScript &amp; Bun \xB7 <a href="/blog/feed.xml">RSS</a>',emptyTitle:"No posts yet",emptyText:"The first one is in the works. Leave your email and it will land in your inbox the moment it ships."},q=null;function w(){if(!q)q=(async()=>{try{let z=(await import(B(process.cwd(),"config/blog.ts"))).default??{},J={...y,...z};if(!z.siteTitle&&z.title)J.siteTitle=z.title;return J}catch{return y}})();return q}var O=null;async function U(){if(!O)O=(async()=>{let G=[B(i(),"Code/Tools/bunpress/packages/bunpress/dist/src/index.js"),B(process.cwd(),"pantry/@stacksjs/bunpress/dist/src/index.js"),"@stacksjs/bunpress"];for(let z of G)try{if(z.startsWith("@")||R(z))return await import(z)}catch{}return null})();return O}function $(G){return String(G).replace(/[&<>"]/g,(z)=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;"})[z])}function L(G){return String(G).replace(/[&<>"']/g,(z)=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&apos;"})[z])}function S(G,z){return`${G.replace(/\/$/,"")}/blog/${z}`}function r(G){if(!G)return"";let z=new Date(G);return Number.isNaN(z.getTime())?G:z.toUTCString()}async function H(G){let z=await w(),J=G||z.url,W=x().slice(0,50).map((Z)=>{let V=S(J,Z.slug);return`    <item>
-      <title>${L(Z.fm.title||Z.slug)}</title>
-      <link>${L(V)}</link>
-      <guid>${L(V)}</guid>
-      <pubDate>${L(r(Z.fm.date))}</pubDate>
-      <description>${L(Z.fm.description||"")}</description>
-    </item>`}).join(`
-`);return`<?xml version="1.0" encoding="UTF-8"?>
-<rss version="2.0">
-  <channel>
-    <title>${L(z.title)}</title>
-    <link>${L(`${J}/blog`)}</link>
-    <description>${L(z.description)}</description>
-${W}
-  </channel>
-</rss>`}async function h(G){let z=await w(),J=G||z.url;return`<?xml version="1.0" encoding="UTF-8"?>
-<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
-${[`${J}/blog`,...x().map((W)=>S(J,W.slug))].map((W)=>`  <url><loc>${L(W)}</loc></url>`).join(`
-`)}
-</urlset>`}function m(G){let z=G.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);if(!z)return{data:{},body:G};let J={},Y=z[1]??"";for(let W of Y.split(`
-`)){let Z=W.indexOf(":");if(Z===-1)continue;let V=W.slice(0,Z).trim(),Q=W.slice(Z+1).trim();if(Q.startsWith('"')&&Q.endsWith('"')||Q.startsWith("'")&&Q.endsWith("'"))Q=Q.slice(1,-1);J[V]=Q}return{data:J,body:z[2]??""}}function T(G){if(!G)return"";let z=new Date(G);if(Number.isNaN(z.getTime()))return G;return`${["January","February","March","April","May","June","July","August","September","October","November","December"][z.getUTCMonth()]} ${z.getUTCDate()}, ${z.getUTCFullYear()}`}var P={colored:{label:"Park theme",glyph:"\uD83C\uDF32"},light:{label:"Light theme",glyph:"\u2600"},dark:{label:"Dark theme",glyph:"\uD83C\uDF19"}};async function D(){let G=await w(),z=G.themes.length?G.themes:y.themes,J=z.includes(G.defaultTheme)?G.defaultTheme:z[0],Y=z.map((Z)=>`<button type="button" data-t="${Z}" title="${P[Z].label}" aria-label="${P[Z].label}" onclick="stxBlogTheme('${Z}')">${P[Z].glyph}</button>`).join(`
-      `),W=z.length>1?`<div class="blog-theme-toggle" role="group" aria-label="Theme">
-      ${Y}
-    </div>`:"";return`<script>
-    (function () {
-      var modes = ${JSON.stringify(z)}
-      function ok(theme) {
-        return modes.indexOf(theme) !== -1
-      }
-
-      var queryTheme = ''
-      try {
-        queryTheme = new URLSearchParams(location.search).get('theme') || ''
-      }
-      catch {}
-
-      var savedTheme = ''
-      try {
-        savedTheme = localStorage.getItem('stacks-blog-theme') || ''
-      }
-      catch {}
-
-      var theme = ok(queryTheme) ? queryTheme : (ok(savedTheme) ? savedTheme : ${JSON.stringify(J)})
-      document.documentElement.setAttribute('data-theme', theme)
-      window.stxBlogTheme = function (nextTheme) {
-        try {
-          localStorage.setItem('stacks-blog-theme', nextTheme)
-        }
-        catch {}
-        document.documentElement.setAttribute('data-theme', nextTheme)
-      }
-    })()
-  </script>
-    ${W}`}async function F(){return`<div class="blog-landscape" aria-hidden="true">
-      <span class="ridge"></span>
-      <span class="river"></span>
-      <p class="colophon">${(await w()).colophon}</p>
-    </div>`}async function v(G,z){let J=await w(),Y=R(E)?X(E,"utf-8"):"",W=G.defaultConfig.markdown?.css||"";return{...G.defaultConfig,title:z.title||J.title,description:z.description||J.description,docsDir:M,theme:"vitepress",markdown:{...G.defaultConfig.markdown,css:`${W}
-${Y}`},themeConfig:{siteTitle:J.siteTitle,nav:J.nav}}}function x(){if(!R(M))return[];return b(M).filter((G)=>G.endsWith(".md")).map((G)=>{let{data:z}=m(X(B(M,G),"utf-8"));return{slug:G.replace(/\.md$/,""),fm:z}}).filter((G)=>!!G.fm.title&&!!G.fm.date).sort((G,z)=>{let J=G.fm.featured==="true"?1:0,Y=z.fm.featured==="true"?1:0;if(J!==Y)return Y-J;return(z.fm.date||"").localeCompare(G.fm.date||"")})}async function l(G){return G.wrapInLayout(await D()+`
-    <a class="blog-back" href="/blog">\u2190 All posts</a>
-    <div class="blog-404">
-      <span class="blog-404-art" aria-hidden="true"></span>
-      <h1>Nothing here</h1>
-      <p>This post doesn't exist (or it moved). Head back to <a href="/blog">all posts</a>.</p>
-    </div>`+await F(),await v(G,{title:"Not found"}),"/blog","page")}async function u(G,z,J){let Y=await w(),W=B(M,`${z}.md`);if(!R(W))return null;let Z=X(W,"utf-8"),{html:V,frontmatter:Q}=await G.markdownToHtml(Z,M);if(!Q.title||!Q.date)return null;let K=Q.author||Y.author,k=$(K.charAt(0).toUpperCase()),j=`
-    <a class="blog-back" href="/blog">\u2190 All posts</a>
-    <div class="blog-post-head">
-      <h1>${$(Q.title||z)}</h1>
-      <p class="blog-post-meta">
-        <span class="author">${$(K)}</span>
-        <span class="dot">\xB7</span>
-        <time>${$(T(Q.date))}</time>
-      </p>
-      ${Q.poster?`<figure class="blog-post-poster"><img src="${$(Q.poster)}" alt="${$(Q.title||"")}"></figure>`:""}
-    </div>`,I=Q.authorBio?`<aside class="blog-author-card">
-        <div class="avatar">${k}</div>
-        <div><span class="name">${$(K)}</span><p class="bio">${$(Q.authorBio)}</p></div>
-      </aside>`:"",_=`${J}/blog/${z}`,n=`
-    <div class="blog-share">
-      <span class="blog-share-label">Share</span>
-      <a href="https://twitter.com/intent/tweet?url=${encodeURIComponent(_)}&text=${encodeURIComponent(Q.title||"")}" target="_blank" rel="noreferrer">X / Twitter</a>
-      <a href="https://www.linkedin.com/sharing/share-offsite/?url=${encodeURIComponent(_)}" target="_blank" rel="noreferrer">LinkedIn</a>
-    </div>`,N=x().filter((A)=>A.slug!==z).slice(0,3),c=N.length?`<nav class="blog-more">
-        <h2>More from the blog</h2>
-        <ul>${N.map((A)=>`<li><a href="/blog/${$(A.slug)}">${$(A.fm.title||A.slug)}</a></li>`).join("")}</ul>
-      </nav>`:"";return G.wrapInLayout(await D()+j+V+I+n+c+await F(),await v(G,Q),`/blog/${z}`,"page")}async function d(G){let z=await w(),Y=x().map((V)=>{let Q=V.fm.featured==="true",K=V.fm.poster?`<div class="blog-card-media"><img src="${$(V.fm.poster)}" alt="" loading="lazy"></div>`:"";return`<a class="blog-card${Q?" is-featured":""}" href="/blog/${$(V.slug)}">
-      ${K}
-      <div>
-        ${Q?'<span class="blog-card-flag">Featured</span>':""}
-        <h2 class="blog-card-title">${$(V.fm.title||V.slug)}</h2>
-        <p class="blog-card-excerpt">${$((V.fm.description||"").slice(0,180))}</p>
-        <div class="blog-card-meta">${$(V.fm.author||z.author)} \xB7 ${$(T(V.fm.date))}</div>
-      </div>
-    </a>`}).join(`
-`),W=`
-    <div class="blog-empty">
-      <h2>${$(z.emptyTitle)}</h2>
-      <p>${$(z.emptyText)}</p>
-      <form class="blog-subscribe" method="POST" action="/api/email/subscribe">
-        <input type="email" name="email" placeholder="you@example.com" autocomplete="email" aria-label="Email address" required>
-        <input type="hidden" name="source" value="blog-empty">
-        <button type="submit">Subscribe</button>
-        <p class="blog-form-note" role="status" aria-live="polite"></p>
-      </form>
-    </div>
-    <script>
-      (function () {
-        var form = document.querySelector('.blog-subscribe')
-        if (!form) return
-        var note = form.querySelector('.blog-form-note')
-        var button = form.querySelector('button[type="submit"]')
-        var say = function (text) { if (note) note.textContent = text }
-        form.addEventListener('submit', function (event) {
-          event.preventDefault()
-          var input = form.querySelector('input[name="email"]')
-          if (!input || !input.value) { say('Enter an email address first.'); return }
-          if (button) button.disabled = true
-          say('Subscribing...')
-          var body = new URLSearchParams()
-          body.set('email', input.value)
-          body.set('source', 'blog-empty')
-          fetch('/api/email/subscribe', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-          })
-            .then(function (res) { return res.json().catch(function () { return {} }) })
-            .then(function (data) {
-              if (data && data.success) {
-                say(data.message === 'Already subscribed' ? 'You are already on the list.' : 'Subscribed. Check your inbox to confirm.')
-                form.reset()
-              }
-              else {
-                say((data && data.message) || 'Something went wrong. Try again.')
-              }
-            })
-            .catch(function () { say('Network error. Try again in a moment.') })
-            .finally(function () { if (button) button.disabled = false })
-        })
-      })()
-    </script>`,Z=`
-    <div class="blog-listing-head">
-      <span class="sign" aria-hidden="true"></span>
-      <h1>${$(z.title)}</h1>
-      <p>${$(z.description)}</p>
-    </div>
-    <div class="blog-cards">${Y||W}</div>`;return G.wrapInLayout(await D()+Z+await F(),await v(G,{title:z.title,description:z.description}),"/blog","page")}async function g(G,z){let J=await w(),Y={...await v(G,{title:J.title}),sitemap:{enabled:!0,baseUrl:`${z}/blog`}};return typeof G.buildRssFeed==="function"?G.buildRssFeed(M,Y,{enabled:!0,title:J.title,description:J.description,maxItems:50}):H(z)}async function f(G,z){let J={...await v(G,{title:"Blog"}),sitemap:{enabled:!0,baseUrl:`${z}/blog`}};return typeof G.buildSitemap==="function"?G.buildSitemap(M,J):h(z)}async function s(G){if(G.method!=="GET"&&G.method!=="HEAD")return null;let z=new URL(G.url),{pathname:J}=z,Y=J==="/blog/feed.xml",W=J==="/blog/sitemap.xml",Z=J==="/blog"||J==="/blog/"||/^\/blog\/[^/.]+$/.test(J);if(!Y&&!W&&!Z)return null;let V=await U();if(!V)return null;let Q=(j,I=200)=>new Response(j,{status:I,headers:{"Content-Type":"text/html; charset=utf-8"}});if(Y)return new Response(await g(V,z.origin),{headers:{"Content-Type":"application/rss+xml; charset=utf-8"}});if(W)return new Response(await f(V,z.origin),{headers:{"Content-Type":"application/xml; charset=utf-8"}});if(J==="/blog"||J==="/blog/")return Q(await d(V));let K=J.replace(/^\/blog\//,"").replace(/\/$/,""),k=await u(V,K,z.origin);return k?Q(k):Q(await l(V),404)}async function e(G){if(G.method!=="GET"&&G.method!=="HEAD")return null;let{pathname:z}=new URL(G.url);if(z==="/blog/feed.xml")return new Response(await H(""),{headers:{"Content-Type":"application/rss+xml; charset=utf-8"}});if(z==="/blog/sitemap.xml")return new Response(await h(""),{headers:{"Content-Type":"application/xml; charset=utf-8"}});return null}async function zz(G={outDir:"dist/blog"}){let z=G.outDir||"dist/blog",J=(G.baseUrl||(await w()).url).replace(/\/$/,""),Y=await U();if(!Y)throw Error("[blog] BunPress not found \u2014 cannot build the blog.");C(z,{recursive:!0});let W=(V,Q)=>{let K=B(z,V);C(B(K,".."),{recursive:!0}),o(K,Q,"utf-8")};W("index.html",await d(Y));let Z=x();for(let V of Z){let Q=await u(Y,V.slug,J);if(Q)W(B(V.slug,"index.html"),Q)}W("feed.xml",await g(Y,J)),W("sitemap.xml",await f(Y,J)),console.log(`[blog] built ${Z.length} post(s) + listing, feed.xml, sitemap.xml \u2192 ${z}`)}export{e as renderBlogFeed,s as renderBlog,zz as buildBlog};

package/dist/build/cli.d.ts

@@ -1 +0,0 @@
-export {};