@stacksjs/actions 0.70.87 → 0.70.90

package/dist/action.js

@@ -1,2 +1,78 @@
-// @bun
-import{Hb as a}from"./chunk-6bk53y02.js";import"./chunk-h3d81wrg.js";export{a as Action};
+export class Action {
+  name;
+  description;
+  apiResponse;
+  rate;
+  tries;
+  backoff;
+  enabled;
+  path;
+  method;
+  validations;
+  requestFile;
+  skipCsrf;
+  csrf;
+  authorize;
+  before;
+  handle;
+  model;
+  _dependenciesFactory;
+  _resolvedDeps;
+  _depsOverrides;
+  constructor({
+    name,
+    description,
+    apiResponse,
+    validations,
+    handle,
+    rate,
+    tries,
+    backoff,
+    enabled,
+    path,
+    method,
+    requestFile,
+    model,
+    skipCsrf,
+    csrf,
+    authorize,
+    before,
+    dependencies
+  }) {
+    this.name = name;
+    this.description = description;
+    this.apiResponse = apiResponse;
+    this.validations = validations;
+    this.rate = rate;
+    this.tries = tries;
+    this.backoff = backoff;
+    this.enabled = enabled;
+    this.path = path;
+    this.method = method;
+    this.handle = handle;
+    this.requestFile = requestFile;
+    this.skipCsrf = skipCsrf;
+    this.csrf = csrf;
+    this.authorize = authorize;
+    this.before = before;
+    this._dependenciesFactory = dependencies;
+    if (model && typeof model === "object" && "name" in model)
+      this.model = model.name;
+    else if (typeof model === "string")
+      this.model = model;
+  }
+  get deps() {
+    if (!this._resolvedDeps)
+      this._resolvedDeps = this._dependenciesFactory?.() ?? {};
+    if (this._depsOverrides)
+      return { ...this._resolvedDeps, ...this._depsOverrides };
+    return this._resolvedDeps;
+  }
+  overrideDependencies(overrides) {
+    this._depsOverrides = { ...this._depsOverrides ?? {}, ...overrides };
+  }
+  resetDependencies() {
+    this._depsOverrides = void 0;
+    this._resolvedDeps = void 0;
+  }
+}

package/dist/actions.js

@@ -1,2 +1,2 @@
-// @bun
-import{Ib as a,Jb as e,Kb as f}from"./chunk-0gadhvn7.js";import"./chunk-h3d81wrg.js";export{e as runActions,a as runAction,f as hasAction,t as actions};
+export * from "./helpers/utils";
+export * as actions from "./helpers/utils";

package/dist/add.js

@@ -1,2 +1,20 @@
-// @bun
-import"./chunk-h3d81wrg.js";import{installPackage as t}from"@stacksjs/cli";async function o(a){if(a?.table)await n();if(a?.calendar)await s()}async function r(a){return await o(a)}async function n(){await t("@stacksjs/table")}async function s(){await t("@stacksjs/calendar")}async function d(a){for(let i of a)await t(i)}export{o as invoke,d as installPackages,n as addTable,s as addCalendar,r as add};
+import { installPackage } from "@stacksjs/cli";
+export async function invoke(options) {
+  if (options?.table)
+    await addTable();
+  if (options?.calendar)
+    await addCalendar();
+}
+export async function add(options) {
+  return await invoke(options);
+}
+export async function addTable() {
+  await installPackage("@stacksjs/table");
+}
+export async function addCalendar() {
+  await installPackage("@stacksjs/calendar");
+}
+export async function installPackages(names) {
+  for (const name of names)
+    await installPackage(name);
+}

package/dist/ai/request-model-access.js

@@ -1,2 +1,10 @@
-// @bun
-import"../chunk-h3d81wrg.js";import{requestModelAccess as e}from"@stacksjs/ai";async function o(){try{await e()}catch(r){console.error("Error requesting model access:",r)}}if(import.meta.main)o();
+var {require}=import.meta;import { requestModelAccess } from "@stacksjs/ai";
+async function main() {
+  try {
+    await requestModelAccess();
+  } catch (error) {
+    console.error("Error requesting model access:", error);
+  }
+}
+if (import.meta.main)
+  main();

package/dist/auth/client.js

@@ -1,3 +1,44 @@
-// @bun
-import L from"process";import{randomBytes as T,scryptSync as _}from"crypto";import{db as $}from"@stacksjs/database";import{HttpError as w}from"@stacksjs/error-handling";import{log as D}from"@stacksjs/logging";var J=L.argv.slice(2),U=(G)=>{let M=J.findIndex((z)=>z.startsWith(`--${G}=`)||z.startsWith(`-${G.charAt(0)}=`));if(M!==-1){let z=J[M];if(!z)return;let O=z.indexOf("=");return O>=0?z.slice(O+1):void 0}let N=J.findIndex((z)=>z===`--${G}`||z===`-${G.charAt(0)}`),K=N!==-1?J[N+1]:void 0;if(K&&!K.startsWith("-"))return K;return},V=(G)=>{return J.includes(`--${G}`)},W=U("name")||"OAuth Client",X=U("redirect")||"http://localhost",C=V("personal"),E=V("password");D.info(`Creating OAuth client: ${W}`);var Y=T(40).toString("hex"),Q=T(16).toString("hex"),H=`${Q}:${_(Y,Q,64).toString("hex")}`,R=await $.insertInto("oauth_clients").values({name:W,secret:H,provider:"local",redirect:X,personal_access_client:C,password_client:E,revoked:!1}).executeTakeFirst(),Z=R?.insertId||Number(R?.numInsertedOrUpdatedRows);if(!Z)throw new w(500,"Failed to create OAuth client");D.success("OAuth client created successfully");D.info("");D.info("Client Details:");D.info(`  Client ID: ${Z}`);D.info("  Client Secret: [REDACTED]");L.stdout.write(`Client Secret (save now, shown once): ${Y}
-`);D.info(`  Redirect URI: ${X}`);D.info("");D.warn("Make sure to save the client secret. You will not be able to retrieve it again.");L.exit(0);
+import process from "node:process";
+import { randomBytes, scryptSync } from "node:crypto";
+import { db } from "@stacksjs/database";
+import { HttpError } from "@stacksjs/error-handling";
+import { log } from "@stacksjs/logging";
+const args = process.argv.slice(2), getArg = (name) => {
+  const idx = args.findIndex((a) => a.startsWith(`--${name}=`) || a.startsWith(`-${name.charAt(0)}=`));
+  if (idx !== -1) {
+    const arg = args[idx];
+    if (!arg)
+      return;
+    const eqIdx = arg.indexOf("=");
+    return eqIdx >= 0 ? arg.slice(eqIdx + 1) : void 0;
+  }
+  const flagIdx = args.findIndex((a) => a === `--${name}` || a === `-${name.charAt(0)}`), value = flagIdx !== -1 ? args[flagIdx + 1] : void 0;
+  if (value && !value.startsWith("-"))
+    return value;
+  return;
+}, hasFlag = (name) => {
+  return args.includes(`--${name}`);
+}, name = getArg("name") || "OAuth Client", redirect = getArg("redirect") || "http://localhost", isPersonalAccess = hasFlag("personal"), isPasswordClient = hasFlag("password");
+log.info(`Creating OAuth client: ${name}`);
+const secret = randomBytes(40).toString("hex"), salt = randomBytes(16).toString("hex"), hashedSecret = `${salt}:${scryptSync(secret, salt, 64).toString("hex")}`, result = await db.insertInto("oauth_clients").values({
+  name,
+  secret: hashedSecret,
+  provider: "local",
+  redirect,
+  personal_access_client: isPersonalAccess,
+  password_client: isPasswordClient,
+  revoked: !1
+}).executeTakeFirst(), insertId = result?.insertId || Number(result?.numInsertedOrUpdatedRows);
+if (!insertId)
+  throw new HttpError(500, "Failed to create OAuth client");
+log.success("OAuth client created successfully");
+log.info("");
+log.info("Client Details:");
+log.info(`  Client ID: ${insertId}`);
+log.info("  Client Secret: [REDACTED]");
+process.stdout.write(`Client Secret (save now, shown once): ${secret}
+`);
+log.info(`  Redirect URI: ${redirect}`);
+log.info("");
+log.warn("Make sure to save the client secret. You will not be able to retrieve it again.");
+process.exit(0);

package/dist/auth/prune.js

@@ -1,2 +1,35 @@
-// @bun
-import S from"process";import{db as T,sql as V}from"@stacksjs/database";import{log as B}from"@stacksjs/logging";var G=S.argv.slice(2),U=(w)=>{return G.includes(`--${w}`)},W=(w)=>{let L=G.findIndex((z)=>z.startsWith(`--${w}=`)||z.startsWith(`-${w.charAt(0)}=`));if(L!==-1){let z=G[L];if(!z)return;let N=z.indexOf("=");return N>=0?z.slice(N+1):void 0}let M=G.findIndex((z)=>z===`--${w}`||z===`-${w.charAt(0)}`),H=M!==-1?G[M+1]:void 0;if(H&&!H.startsWith("-"))return H;return},X=!U("no-expired"),Y=!U("no-revoked"),Q=Number(W("days"))||7;B.info("Pruning authentication tokens...");var J=0,K=0;if(X)B.info("Removing expired tokens..."),J=await T.deleteFrom("personal_access_tokens").where("expires_at","<",V.raw("NOW()")).execute(),B.success(`Removed ${J} expired token(s)`);if(Y){B.info(`Removing tokens revoked more than ${Q} day(s) ago...`);let w=new Date;w.setDate(w.getDate()-Q),K=await T.deleteFrom("personal_access_tokens").where("revoked_at","is not",null).where("revoked_at","<",w.toISOString()).execute(),B.success(`Removed ${K} revoked token(s)`)}B.success(`Token pruning complete. Total removed: ${J+K}`);S.exit(0);
+import process from "node:process";
+import { db, sql } from "@stacksjs/database";
+import { log } from "@stacksjs/logging";
+const args = process.argv.slice(2), hasFlag = (name) => {
+  return args.includes(`--${name}`);
+}, getArg = (name) => {
+  const idx = args.findIndex((a) => a.startsWith(`--${name}=`) || a.startsWith(`-${name.charAt(0)}=`));
+  if (idx !== -1) {
+    const arg = args[idx];
+    if (!arg)
+      return;
+    const eqIdx = arg.indexOf("=");
+    return eqIdx >= 0 ? arg.slice(eqIdx + 1) : void 0;
+  }
+  const flagIdx = args.findIndex((a) => a === `--${name}` || a === `-${name.charAt(0)}`), value = flagIdx !== -1 ? args[flagIdx + 1] : void 0;
+  if (value && !value.startsWith("-"))
+    return value;
+  return;
+}, pruneExpired = !hasFlag("no-expired"), pruneRevoked = !hasFlag("no-revoked"), daysOld = Number(getArg("days")) || 7;
+log.info("Pruning authentication tokens...");
+let expiredCount = 0, revokedCount = 0;
+if (pruneExpired) {
+  log.info("Removing expired tokens...");
+  expiredCount = await db.deleteFrom("personal_access_tokens").where("expires_at", "<", sql.raw("NOW()")).execute();
+  log.success(`Removed ${expiredCount} expired token(s)`);
+}
+if (pruneRevoked) {
+  log.info(`Removing tokens revoked more than ${daysOld} day(s) ago...`);
+  const cutoffDate = new Date;
+  cutoffDate.setDate(cutoffDate.getDate() - daysOld);
+  revokedCount = await db.deleteFrom("personal_access_tokens").where("revoked_at", "is not", null).where("revoked_at", "<", cutoffDate.toISOString()).execute();
+  log.success(`Removed ${revokedCount} revoked token(s)`);
+}
+log.success(`Token pruning complete. Total removed: ${expiredCount + revokedCount}`);
+process.exit(0);

package/dist/auth/setup.js

@@ -1,5 +1,17 @@
-// @bun
-import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"@stacksjs/database";import{log as z}from"@stacksjs/logging";import{makeHash as W}from"@stacksjs/security";import{env as X}from"@stacksjs/env";import{sqlHelpers as Y,usersEmailVerifiedAtSql as Z,usersPasswordChangedAtSql as _}from"@stacksjs/database";var O=X.DB_CONNECTION||"sqlite",K=Y(O),{isPostgres:G,isMysql:I,now:$,boolTrue:f,boolFalse:D}=K;z.info("Setting up authentication...");z.info(`Database driver: ${O}`);z.info("Ensuring OAuth tables exist...");try{if(G)await x.unsafe(`
+import process from "node:process";
+import { randomBytes } from "node:crypto";
+import { db } from "@stacksjs/database";
+import { log } from "@stacksjs/logging";
+import { makeHash } from "@stacksjs/security";
+import { env } from "@stacksjs/env";
+import { sqlHelpers, usersEmailVerifiedAtSql, usersPasswordChangedAtSql } from "@stacksjs/database";
+const dbDriver = env.DB_CONNECTION || "sqlite", sql = sqlHelpers(dbDriver), { isPostgres, isMysql, now, boolTrue, boolFalse: _boolFalse } = sql;
+log.info("Setting up authentication...");
+log.info(`Database driver: ${dbDriver}`);
+log.info("Ensuring OAuth tables exist...");
+try {
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_clients (
         id SERIAL PRIMARY KEY,
         name VARCHAR(255) NOT NULL,
@@ -12,7 +24,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_clients (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         name VARCHAR(255) NOT NULL,
@@ -25,7 +39,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_clients (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         name VARCHAR(255) NOT NULL,
@@ -38,7 +54,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP
       )
-    `);if(G)await x.unsafe(`
+    `);
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_access_tokens (
         id SERIAL PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -51,7 +69,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_access_tokens (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -64,7 +84,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP NULL
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_access_tokens (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         user_id INTEGER NOT NULL,
@@ -77,9 +99,12 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMP
       )
-    `);if(await x.unsafe(`
+    `);
+  await db.unsafe(`
     CREATE INDEX IF NOT EXISTS idx_oauth_access_tokens_token ON oauth_access_tokens(token)
-  `),G)await x.unsafe(`
+  `);
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
         id SERIAL PRIMARY KEY,
         access_token_id INTEGER NOT NULL,
@@ -88,7 +113,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         access_token_id INTEGER NOT NULL,
@@ -97,7 +124,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         access_token_id INTEGER NOT NULL,
@@ -106,9 +135,19 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);await x.unsafe(`
+    `);
+  await db.unsafe(`
     CREATE INDEX IF NOT EXISTS idx_oauth_refresh_tokens_token ON oauth_refresh_tokens(token)
-  `),z.success("OAuth tables ready")}catch(F){z.error("Failed to create OAuth tables",F),J.exit(1)}z.info("Ensuring password_resets table exists...");try{if(G)await x.unsafe(`
+  `);
+  log.success("OAuth tables ready");
+} catch (error) {
+  log.error("Failed to create OAuth tables", error);
+  process.exit(1);
+}
+log.info("Ensuring password_resets table exists...");
+try {
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS password_resets (
         id SERIAL PRIMARY KEY,
         email VARCHAR(255) NOT NULL,
@@ -116,7 +155,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS password_resets (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         email VARCHAR(255) NOT NULL,
@@ -124,7 +165,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS password_resets (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         email VARCHAR(255) NOT NULL,
@@ -132,9 +175,22 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);try{await x.unsafe("ALTER TABLE password_resets ADD COLUMN expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP")}catch{}await x.unsafe(`
+    `);
+  try {
+    await db.unsafe("ALTER TABLE password_resets ADD COLUMN expires_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP");
+  } catch {}
+  await db.unsafe(`
     CREATE UNIQUE INDEX IF NOT EXISTS idx_password_resets_email_unique ON password_resets(email)
-  `),z.success("Password resets table ready")}catch(F){z.error("Failed to create password_resets table",F),J.exit(1)}z.info("Ensuring email_verifications table exists...");try{if(G)await x.unsafe(`
+  `);
+  log.success("Password resets table ready");
+} catch (error) {
+  log.error("Failed to create password_resets table", error);
+  process.exit(1);
+}
+log.info("Ensuring email_verifications table exists...");
+try {
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS email_verifications (
         id SERIAL PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -142,7 +198,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS email_verifications (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -150,7 +208,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS email_verifications (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         user_id INTEGER NOT NULL,
@@ -158,9 +218,25 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);await x.unsafe(`
+    `);
+  await db.unsafe(`
     CREATE UNIQUE INDEX IF NOT EXISTS idx_email_verifications_user_id_unique ON email_verifications(user_id)
-  `);try{await x.unsafe(Z(K))}catch{}try{await x.unsafe(_(K))}catch{}z.success("Email verifications table ready")}catch(F){z.error("Failed to create email_verifications table",F),J.exit(1)}z.info("Ensuring webauthn_challenges table exists...");try{if(G)await x.unsafe(`
+  `);
+  try {
+    await db.unsafe(usersEmailVerifiedAtSql(sql));
+  } catch {}
+  try {
+    await db.unsafe(usersPasswordChangedAtSql(sql));
+  } catch {}
+  log.success("Email verifications table ready");
+} catch (error) {
+  log.error("Failed to create email_verifications table", error);
+  process.exit(1);
+}
+log.info("Ensuring webauthn_challenges table exists...");
+try {
+  if (isPostgres)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS webauthn_challenges (
         id SERIAL PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -169,7 +245,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else if(I)await x.unsafe(`
+    `);
+  else if (isMysql)
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS webauthn_challenges (
         id INTEGER AUTO_INCREMENT PRIMARY KEY,
         user_id INTEGER NOT NULL,
@@ -178,7 +256,9 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);else await x.unsafe(`
+    `);
+  else
+    await db.unsafe(`
       CREATE TABLE IF NOT EXISTS webauthn_challenges (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         user_id INTEGER NOT NULL,
@@ -187,20 +267,56 @@ import J from"process";import{randomBytes as U}from"crypto";import{db as x}from"
         expires_at TIMESTAMP NOT NULL,
         created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
       )
-    `);await x.unsafe(`
+    `);
+  await db.unsafe(`
     CREATE UNIQUE INDEX IF NOT EXISTS idx_webauthn_challenges_user_purpose ON webauthn_challenges(user_id, purpose)
-  `),z.success("WebAuthn challenges table ready")}catch(F){z.error("Failed to create webauthn_challenges table",F),J.exit(1)}z.info("Creating personal access client...");try{if((await x.unsafe(`
-    SELECT id FROM oauth_clients WHERE personal_access_client = ${f} LIMIT 1
-  `))?.length>0)console.log(`
-\u2713 Personal access client already exists`);else{let R=U(40).toString("hex"),N=await W(R,{algorithm:"bcrypt"});if(G)await x.unsafe(`
+  `);
+  log.success("WebAuthn challenges table ready");
+} catch (error) {
+  log.error("Failed to create webauthn_challenges table", error);
+  process.exit(1);
+}
+log.info("Creating personal access client...");
+try {
+  if ((await db.unsafe(`
+    SELECT id FROM oauth_clients WHERE personal_access_client = ${boolTrue} LIMIT 1
+  `))?.length > 0)
+    console.log(`
+\u2713 Personal access client already exists`);
+  else {
+    const secret = randomBytes(40).toString("hex"), hashedSecret = await makeHash(secret, { algorithm: "bcrypt" });
+    if (isPostgres)
+      await db.unsafe(`
         INSERT INTO oauth_clients (name, secret, provider, redirect, personal_access_client, password_client, revoked, created_at)
         VALUES ($1, $2, $3, $4, $5, $6, $7, NOW())
-      `,["Personal Access Client",N,"local","http://localhost",!0,!1,!1]);else await x.unsafe(`
+      `, ["Personal Access Client", hashedSecret, "local", "http://localhost", !0, !1, !1]);
+    else
+      await db.unsafe(`
         INSERT INTO oauth_clients (name, secret, provider, redirect, personal_access_client, password_client, revoked, created_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ${$})
-      `,["Personal Access Client",N,"local","http://localhost",1,0,0]);console.log(`
-\u2713 Personal access client created successfully`)}}catch(F){console.error("Failed to create personal access client:",F),J.exit(1)}console.log(`
-\u2713 Authentication setup complete!`);console.log(`
-Features enabled:`);console.log("  - Token hashing (SHA-256) for secure storage");console.log("  - Refresh tokens for seamless token renewal");console.log("  - Scope-based authorization");console.log("  - Password reset flow");console.log(`
-Next steps:`);console.log("  1. Use createToken(userId, name, scopes) to generate tokens");console.log("  2. Use refreshToken(token) to exchange refresh tokens");console.log('  3. Use the "auth" middleware to protect routes');console.log("  4. Use tokenCan(scope) for authorization checks");console.log("  5. POST /password/forgot to request password reset");console.log(`  6. POST /password/reset to reset password with token
-`);J.exit(0);
+        VALUES (?, ?, ?, ?, ?, ?, ?, ${now})
+      `, ["Personal Access Client", hashedSecret, "local", "http://localhost", 1, 0, 0]);
+    console.log(`
+\u2713 Personal access client created successfully`);
+  }
+} catch (error) {
+  console.error("Failed to create personal access client:", error);
+  process.exit(1);
+}
+console.log(`
+\u2713 Authentication setup complete!`);
+console.log(`
+Features enabled:`);
+console.log("  - Token hashing (SHA-256) for secure storage");
+console.log("  - Refresh tokens for seamless token renewal");
+console.log("  - Scope-based authorization");
+console.log("  - Password reset flow");
+console.log(`
+Next steps:`);
+console.log("  1. Use createToken(userId, name, scopes) to generate tokens");
+console.log("  2. Use refreshToken(token) to exchange refresh tokens");
+console.log('  3. Use the "auth" middleware to protect routes');
+console.log("  4. Use tokenCan(scope) for authorization checks");
+console.log("  5. POST /password/forgot to request password reset");
+console.log(`  6. POST /password/reset to reset password with token
+`);
+process.exit(0);

package/dist/auth/token.js

@@ -1,2 +1,10 @@
-// @bun
-import q from"process";import{createPersonalAccessClient as v}from"@stacksjs/auth";import{log as w}from"@stacksjs/logging";var m=await v();if(m?.isErr)console.error(m.error),w.error("createPersonalAccessClient failed",m.error),q.exit(1);q.exit(0);
+import process from "node:process";
+import { createPersonalAccessClient } from "@stacksjs/auth";
+import { log } from "@stacksjs/logging";
+const result = await createPersonalAccessClient();
+if (result?.isErr) {
+  console.error(result.error);
+  log.error("createPersonalAccessClient failed", result.error);
+  process.exit(1);
+}
+process.exit(0);

package/dist/blog-admin.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Turn a title into a filename-safe slug.
+ *
+ * Kept intentionally strict (lowercase a-z, 0-9, single hyphens) because the
+ * slug becomes both a filename and a public URL.
+ */
+export declare function slugify(input: string): string;
+/**
+ * Every post on disk, newest first, drafts included.
+ *
+ * Unlike the public `listPosts` in `blog.ts` this does not require a `date`, so
+ * a half-finished post still shows up in the dashboard instead of vanishing.
+ */
+export declare function listBlogPosts(): BlogPost[];
+export declare function getBlogPost(slug: string): BlogPost | null;
+/**
+ * Create or update a post file.
+ *
+ * Pass `originalSlug` to rename: the new file is written first, then the old one
+ * is removed, so a failure mid-way leaves the original post intact.
+ */
+export declare function saveBlogPost(input: BlogPostInput): BlogPost;
+export declare function deleteBlogPost(slug: string): boolean;
+export declare interface BlogPost {
+  slug: string
+  title: string
+  description: string
+  date: string
+  author: string
+  authorBio: string
+  poster: string
+  featured: boolean
+  draft: boolean
+  body: string
+  wordCount: number
+  readingTime: number
+  updatedAt: string
+}
+export declare interface BlogPostInput {
+  slug?: string
+  originalSlug?: string
+  title: string
+  description?: string
+  date?: string
+  author?: string
+  authorBio?: string
+  poster?: string
+  featured?: boolean
+  draft?: boolean
+  body?: string
+}
+export declare class BlogAdminError extends Error {
+  readonly status?: number;
+  constructor(message: string, status?: number);
+}