@stacksjs/api 0.70.358 → 0.70.362

package/dist/index.js

@@ -1,16 +1,16 @@
 // @bun
-var WJ=Object.defineProperty;var LJ=($)=>$;function XJ($,J){this[$]=LJ.bind(null,J)}var x$=($,J)=>{for(var O in J)WJ($,O,{get:J[O],enumerable:!0,configurable:!0,set:XJ.bind(J,O)})};var e=($,J)=>()=>($&&(J=$($=0)),J);var d=import.meta.require;var R$={};x$(R$,{schemaType:()=>w,renderOpenApiTypes:()=>TJ});function xJ($){return typeof $==="string"?JSON.stringify($):String($)}function w($){if(!$)return"unknown";if($.enum?.length)return $.enum.map(xJ).join(" | ");if($.type==="string")return"string";if($.type==="number"||$.type==="integer")return"number";if($.type==="boolean")return"boolean";if($.type==="null")return"null";if($.type==="array")return`Array<${w($.items)}>`;if($.type==="object"||$.properties||$.additionalProperties){let J=new Set($.required||[]),O=Object.entries($.properties||{}).map(([G,Z])=>`${JSON.stringify(G)}${J.has(G)?"":"?"}: ${w(Z)}`);if($.additionalProperties){let G=$.additionalProperties===!0?"unknown":w($.additionalProperties);O.push(`[key: string]: ${G}`)}return O.length?`{ ${O.join("; ")} }`:"Record<string, unknown>"}return"unknown"}function BJ($=[]){return`    parameters: {
+var XJ=Object.defineProperty;var YJ=($)=>$;function xJ($,J){this[$]=YJ.bind(null,J)}var x$=($,J)=>{for(var O in J)XJ($,O,{get:J[O],enumerable:!0,configurable:!0,set:xJ.bind(J,O)})};var d=($,J)=>()=>($&&(J=$($=0)),J);var o=import.meta.require;var R$={};x$(R$,{schemaType:()=>w,renderOpenApiTypes:()=>_J});function TJ($){return typeof $==="string"?JSON.stringify($):String($)}function w($){if(!$)return"unknown";if($.enum?.length)return $.enum.map(TJ).join(" | ");if($.type==="string")return"string";if($.type==="number"||$.type==="integer")return"number";if($.type==="boolean")return"boolean";if($.type==="null")return"null";if($.type==="array")return`Array<${w($.items)}>`;if($.type==="object"||$.properties||$.additionalProperties){let J=new Set($.required||[]),O=Object.entries($.properties||{}).map(([G,Z])=>`${JSON.stringify(G)}${J.has(G)?"":"?"}: ${w(Z)}`);if($.additionalProperties){let G=$.additionalProperties===!0?"unknown":w($.additionalProperties);O.push(`[key: string]: ${G}`)}return O.length?`{ ${O.join("; ")} }`:"Record<string, unknown>"}return"unknown"}function jJ($=[]){return`    parameters: {
 ${["query","header","path","cookie"].map((O)=>{let G=$.filter((z)=>z.in===O);if(!G.length)return`      ${O}?: never`;let Z=G.map((z)=>`${JSON.stringify(z.name)}${z.required?"":"?"}: ${w(z.schema)}`);return`      ${O}${G.every((z)=>!z.required)?"?":""}: { ${Z.join("; ")} }`}).join(`
 `)}
-    }`}function k$($){if(!$||!Object.keys($).length)return"never";return`{ ${Object.entries($).map(([J,O])=>`${JSON.stringify(J)}: ${w(O.schema)}`).join("; ")} }`}function jJ($){let J=$.requestBody?`
+    }`}function k$($){if(!$||!Object.keys($).length)return"never";return`{ ${Object.entries($).map(([J,O])=>`${JSON.stringify(J)}: ${w(O.schema)}`).join("; ")} }`}function AJ($){let J=$.requestBody?`
     requestBody${$.requestBody.required?"":"?"}: { content: ${k$($.requestBody.content)} }`:`
     requestBody?: never`,O=Object.entries($.responses||{}).map(([G,Z])=>`      ${JSON.stringify(G)}: { content: ${k$(Z.content)} }`);return`{
-${BJ($.parameters)}${J}
+${jJ($.parameters)}${J}
     responses: {
 ${O.join(`
 `)}
     }
-  }`}function TJ($){let J=Object.entries($.paths||{}).map(([G,Z])=>{let z=YJ.map((K)=>{let L=Z[K];return L?`    ${K}: ${jJ(L)}`:`    ${K}?: never`});return`  ${JSON.stringify(G)}: {
+  }`}function _J($){let J=Object.entries($.paths||{}).map(([G,Z])=>{let z=BJ.map((K)=>{let W=Z[K];return W?`    ${K}: ${AJ(W)}`:`    ${K}?: never`});return`  ${JSON.stringify(G)}: {
 ${z.join(`
 `)}
   }`}),O=Object.entries($.components?.schemas||{}).map(([G,Z])=>`    ${JSON.stringify(G)}: ${w(Z)}`);return`/**
@@ -29,13 +29,13 @@ ${O.join(`
 `)}
   }
 }
-`}var YJ;var z$=e(()=>{YJ=["get","put","post","delete","options","head","patch","trace"]});var f$={};x$(f$,{renderApiClient:()=>SJ,methodName:()=>P$});function P$($){let J=$.replace(/[{}]/g,"").split(/[^a-z0-9]+/i).filter(Boolean),O=J[0]?.toLowerCase()==="api"?J.slice(1):J[1]?.toLowerCase()==="api"?[J[0],...J.slice(2)]:J,[G,...Z]=O;if(!G)return"call";let z=G.charAt(0).toLowerCase()+G.slice(1),K=Z.map((W)=>W.charAt(0).toUpperCase()+W.slice(1)),L=[z,...K].join("");return/^[a-z_$]/i.test(L)?L:`call${L.charAt(0).toUpperCase()}${L.slice(1)}`}function _J($){let J=$.responses??{},O=Object.keys(J).find((z)=>z.startsWith("2"));if(!O)return"unknown";let G=J[O]?.content,Z=G?.["application/json"]??Object.values(G??{})[0];return Z?.schema?w(Z.schema):"unknown"}function NJ($,J="  "){let O=$.filter(Boolean);if(!O.length)return"";return`${J}/**
+`}var BJ;var z$=d(()=>{BJ=["get","put","post","delete","options","head","patch","trace"]});var f$={};x$(f$,{renderApiClient:()=>DJ,methodName:()=>P$});function P$($){let J=$.replace(/[{}]/g,"").split(/[^a-z0-9]+/i).filter(Boolean),O=J[0]?.toLowerCase()==="api"?J.slice(1):J[1]?.toLowerCase()==="api"?[J[0],...J.slice(2)]:J,[G,...Z]=O;if(!G)return"call";let z=G.charAt(0).toLowerCase()+G.slice(1),K=Z.map((L)=>L.charAt(0).toUpperCase()+L.slice(1)),W=[z,...K].join("");return/^[a-z_$]/i.test(W)?W:`call${W.charAt(0).toUpperCase()}${W.slice(1)}`}function HJ($){let J=$.responses??{},O=Object.keys(J).find((z)=>z.startsWith("2"));if(!O)return"unknown";let G=J[O]?.content,Z=G?.["application/json"]??Object.values(G??{})[0];return Z?.schema?w(Z.schema):"unknown"}function SJ($,J="  "){let O=$.filter(Boolean);if(!O.length)return"";return`${J}/**
 ${O.map((G)=>`${J} * ${G}`).join(`
 `)}
 ${J} */
-`}function HJ($,J,O,G){let Z=O.parameters??[],z=Z.filter((N)=>N.in==="path"),K=Z.filter((N)=>N.in==="query"),L=O.requestBody?.content?.["application/json"]?.schema,W=Boolean(O.requestBody?.required),Q=[];for(let N of[...z,...K]){let g=N.in==="path"||N.required;Q.push(`${JSON.stringify(N.name)}${g?"":"?"}: ${w(N.schema)}`)}if(L)Q.push(`body${W?"":"?"}: ${w(L)}`);let T=[...z,...K].every((N)=>N.in!=="path"&&!N.required)&&(!L||!W),U=Q.length?`input${T?"?":""}: { ${Q.join("; ")} }, `:"",D=K.length?`[${K.map((N)=>JSON.stringify(N.name)).join(", ")}]`:"[]";return`${NJ([O.summary&&O.summary!==$?O.summary:`${J.toUpperCase()} ${$}`,O.description??""])}  ${G}(${U}options?: RequestOptions): Promise<ApiResult<${_J(O)}>> {
-    return request(config, ${JSON.stringify(J.toUpperCase())}, ${JSON.stringify($)}, ${Q.length?"input ?? {}":"{}"}, ${D}, ${L?"true":"false"}, options)
-  },`}function SJ($,J={}){let O=J.name??"API",G=new Map,Z=[];for(let[z,K]of Object.entries($.paths??{}))for(let L of AJ){let W=K[L];if(!W)continue;let Q=P$(W.operationId??`${L}_${z}`),T=G.get(Q)??0;G.set(Q,T+1),Z.push(HJ(z,L,W,T===0?Q:`${Q}${T+1}`))}return`/* eslint-disable */
+`}function UJ($,J,O,G){let Z=O.parameters??[],z=Z.filter((N)=>N.in==="path"),K=Z.filter((N)=>N.in==="query"),W=O.requestBody?.content?.["application/json"]?.schema,L=Boolean(O.requestBody?.required),Q=[];for(let N of[...z,...K]){let y=N.in==="path"||N.required;Q.push(`${JSON.stringify(N.name)}${y?"":"?"}: ${w(N.schema)}`)}if(W)Q.push(`body${L?"":"?"}: ${w(W)}`);let j=[...z,...K].every((N)=>N.in!=="path"&&!N.required)&&(!W||!L),U=Q.length?`input${j?"?":""}: { ${Q.join("; ")} }, `:"",D=K.length?`[${K.map((N)=>JSON.stringify(N.name)).join(", ")}]`:"[]";return`${SJ([O.summary&&O.summary!==$?O.summary:`${J.toUpperCase()} ${$}`,O.description??""])}  ${G}(${U}options?: RequestOptions): Promise<ApiResult<${HJ(O)}>> {
+    return request(config, ${JSON.stringify(J.toUpperCase())}, ${JSON.stringify($)}, ${Q.length?"input ?? {}":"{}"}, ${D}, ${W?"true":"false"}, options)
+  },`}function DJ($,J={}){let O=J.name??"API",G=new Map,Z=[];for(let[z,K]of Object.entries($.paths??{}))for(let W of NJ){let L=K[W];if(!L)continue;let Q=P$(L.operationId??`${W}_${z}`),j=G.get(Q)??0;G.set(Q,j+1),Z.push(UJ(z,W,L,j===0?Q:`${Q}${j+1}`))}return`/* eslint-disable */
 /**
  * ${O} client, generated from the OpenAPI document.
  *
@@ -136,4 +136,4 @@ ${Z.join(`
 }
 
 export type Client = ReturnType<typeof createClient>
-`}var AJ;var B$=e(()=>{z$();AJ=["get","put","post","delete","options","head","patch"]});function UJ($){let J=$;return J?.code==="SQLITE_CONSTRAINT_UNIQUE"||J?.code==="SQLITE_CONSTRAINT"||J?.code==="23505"||J?.errno===1062||/unique|duplicate/i.test(J?.message??"")}function T$($,J,O){let G=$;if($ instanceof Error&&typeof G.status==="number"&&Number.isInteger(G.status)&&G.status>=400&&G.status<600){let Z={error:$.message};if(G.details!==void 0)Z.details=G.details;return{status:G.status,body:Z}}if(UJ($))return{status:409,body:{error:`${J} already exists`}};return{status:500,body:{error:`Failed to ${O} ${J}`,detail:String($)}}}function R($){return $.replace(/([a-z\d])([A-Z])/g,"$1_$2").replace(/([A-Z])([A-Z][a-z])/g,"$1_$2").toLowerCase()}function A$($){let J={};for(let[O,G]of Object.entries($))J[R(O)]=G;return J}function g$($){if(!$)return[];let J=Object.entries($.attributes??{}).filter(([,O])=>O?.fillable===!0).map(([O])=>O);for(let O of $.belongsTo??[]){if(typeof O!=="string"||!O.trim())continue;let G=R(O.trim()).split("_").filter(Boolean);if(G.length===0)continue;let Z=`${G[0]}${G.slice(1).map((z)=>`${z[0]?.toUpperCase()}${z.slice(1)}`).join("")}Id`;J.push(Z)}return[...new Set(J)]}function _$($,J){if(!$||J.length===0)return{};let O={};for(let G of J){if(G in $){O[G]=$[G];continue}let Z=R(G);if(Z!==G&&Z in $)O[G]=$[Z]}return O}function DJ($,J){if($?.name!=="date"||J instanceof Date||typeof J!=="string")return J;let O=/^(\d{4})-(\d{2})-(\d{2})$/.exec(J);if(!O)return J;let G=Number(O[1]),Z=Number(O[2]),z=Number(O[3]),K=new Date(Date.UTC(G,Z-1,z));if(K.getUTCFullYear()!==G||K.getUTCMonth()!==Z-1||K.getUTCDate()!==z)return J;return K}function N$($,J){if(!J.length)return $;let O={...$};for(let G of J)delete O[G],delete O[R(G)];return O}function t($,J){if(!$||J.length===0)return $;let O={...$};for(let G of J)delete O[G],delete O[R(G)];return O}function b$($,J){let O=new Map;for(let G of[...Object.keys($??{}),...EJ]){let Z=R(G);if(!/^\w+$/.test(Z))continue;O.set(G,Z),O.set(Z,Z)}for(let G of J)O.delete(G),O.delete(R(G));return O}function q$($,J,O){if(!J)return $;let G=String(J).split(",").map((z)=>z.trim()).filter(Boolean),Z=$;for(let z of G){let K=z.startsWith("-"),L=K?z.slice(1):z;if(!/^\w+$/.test(L))continue;let W=O.get(L);if(!W)continue;Z=Z.orderBy(W,K?"desc":"asc")}return Z}function FJ($){try{return JSON.parse($)}catch{return $}}function VJ($){try{return JSON.parse($)}catch{return[]}}function H$($,J,O){if(!$||typeof $!=="object"||!J||Object.keys(J).length===0)return $;let G={...$};for(let[Z,z]of Object.entries(J)){let K=typeof z==="string"?IJ[z]:z;if(!K||typeof K[O]!=="function")continue;if(Object.prototype.hasOwnProperty.call(G,Z))G[Z]=K[O](G[Z]);let L=R(Z);if(L!==Z&&Object.prototype.hasOwnProperty.call(G,L))G[L]=K[O](G[L])}return G}function S$($,J,O){let G=J?.attributes??{},Z={};for(let[z,K]of Object.entries(G)){let L=K?.validation?.rule;if(!L||typeof L.validate!=="function")continue;let W=Object.prototype.hasOwnProperty.call($,z);if(!W&&O==="updating")continue;let Q=K!==null&&typeof K==="object"&&Object.prototype.hasOwnProperty.call(K,"default"),T=W?$[z]:Q?K.default:void 0,U=DJ(L,T),D=L.validate(U);if(!D?.valid&&Array.isArray(D?.errors)&&D.errors.length>0)Z[z]=D.errors.map((V)=>K?.validation?.message?.[V?.code]??V?.message??"invalid")}return Object.keys(Z).length===0?{valid:!0}:{valid:!1,errors:Z}}function U$($){return $.replace(/\{[^}]*\}/g,"{}").replace(/:[^/]+/g,"{}")}function j$($){if(Array.isArray($))return $.filter((J)=>typeof J==="string"&&J.length>0);return typeof $==="string"&&$?[$]:[]}function c$($){let J=typeof $==="object"&&$!==null&&"middleware"in $,O=$?.middleware;if(!J)return{read:["auth"],write:["auth"],declared:!1};if(O&&typeof O==="object"&&!Array.isArray(O)){let Z=O;return{read:"read"in Z?j$(Z.read):["auth"],write:"write"in Z?j$(Z.write):["auth"],declared:!0}}let G=j$(O);return{read:G,write:G,declared:!0}}function w$($){let J=Number.parseInt($.get("page")||String(1),10),O=Number.isFinite(J)?Math.max(1,J):1,G=Number.parseInt($.get("per_page")||String(y$),10),Z=Math.min(Number.isFinite(G)?Math.max(1,G):y$,MJ);return{page:O,perPage:Z,offset:(O-1)*Z}}function K$($,J){let O=new URL($.toString());return O.searchParams.set("page",String(J)),`${O.pathname}${O.search}`}function Q$($,J,O,G,Z,z){let K=(J-1)*O,L=G===0,W={page:J,per_page:O,from:L?null:K+1,to:L?null:K+G,has_more_pages:Z,prev_page_url:J>1?K$($,J-1):null,next_page_url:Z?K$($,J+1):null};if(z!==void 0&&!Number.isNaN(z)){let Q=Math.max(1,Math.ceil(z/O));W.total=z,W.last_page=Q,W.first_page_url=K$($,1),W.last_page_url=K$($,Q)}return W}function D$($,J,O,G,Z,z){let{page:K,...L}=Q$($,J,O,G,Z,z);return{current_page:K,...L}}var EJ,IJ,y$=15,MJ=100;var v$=e(()=>{EJ=["id","uuid","created_at","updated_at","deleted_at"];IJ={string:{get:($)=>$!=null?String($):null,set:($)=>$!=null?String($):null},number:{get:($)=>$!=null?Number($):null,set:($)=>$!=null?Number($):null},integer:{get:($)=>$!=null?Math.trunc(Number($)):null,set:($)=>$!=null?Math.trunc(Number($)):null},float:{get:($)=>$!=null?Number.parseFloat(String($)):null,set:($)=>$!=null?Number.parseFloat(String($)):null},boolean:{get:($)=>$===1||$==="1"||$===!0||$==="true",set:($)=>$===!0||$===1||$==="1"||$==="true"?1:0},json:{get:($)=>$==null?null:typeof $==="string"?FJ($):$,set:($)=>$==null?null:typeof $==="string"?$:JSON.stringify($)},datetime:{get:($)=>$?new Date($):null,set:($)=>$ instanceof Date?$.toISOString():$},date:{get:($)=>$?new Date($):null,set:($)=>$ instanceof Date?$.toISOString().split("T")[0]:$},array:{get:($)=>$==null?[]:Array.isArray($)?$:typeof $==="string"?VJ($):[],set:($)=>$==null?null:Array.isArray($)?JSON.stringify($):$}}});import{readdirSync as CJ}from"fs";import{basename as kJ,extname as p$,join as RJ}from"path";function PJ($){let J=[],O=(G)=>{let Z;try{Z=CJ(G,{withFileTypes:!0})}catch{return}for(let z of Z){let K=RJ(G,z.name);if(z.isDirectory()){O(K);continue}if(![".ts",".js"].includes(p$(z.name)))continue;if(z.name.startsWith(".")||z.name.startsWith("index"))continue;J.push(K)}};return O($),J.sort()}async function h$($,J,O){for(let G of PJ($))try{let Z=p$(G),z=await import(`${G}?t=${Date.now()}`),K=z.default??z,L=K.name??kJ(G,Z);J[L]={...K,name:L}}catch(Z){O?.(G,Z)}}async function m$($){let J={};return await h$($.defaultsRoot,J,$.onImportError),await h$($.userRoot,J,$.onImportError),J}var i$=()=>{};var JJ={};x$(JJ,{default:()=>cJ});import{route as m}from"@stacksjs/router";import{env as l}from"@stacksjs/env";import{projectPath as r$,storagePath as fJ}from"@stacksjs/path";import{createQueryBuilder as yJ,defaultConfig as n$,setConfig as u$}from"@stacksjs/query-builder";import{HttpError as n}from"@stacksjs/error-handling";import{log as X$}from"@stacksjs/logging";function o($,J){let O=U$(J);return m.routes.some((G)=>G.method===$&&U$(String(G.path??""))===O)}function a$($){if(!$.attributes)return[];return Object.entries($.attributes).filter(([J,O])=>O.hidden===!0).map(([J])=>J)}function l$($){if($.endsWith("y")&&!/[aeiou]y$/i.test($))return`${$.slice(0,-1)}ies`;if(/(?:s|x|z|ch|sh)$/i.test($))return`${$}es`;return`${$}s`}async function o$($,J,O,G){if(!$.length)return $;let Z=O.split(",").map((Q)=>Q.trim()).filter(Boolean);if(!Z.length)return $;let z=Array.isArray(J.belongsTo)?J.belongsTo:[],K=Array.isArray(J.hasMany)?J.hasMany:[],L=Array.isArray(J.hasOne)?J.hasOne:[],W=new Map;for(let Q of z)W.set(R(Q),{kind:"belongsTo",modelName:Q});for(let Q of L)W.set(R(Q),{kind:"hasOne",modelName:Q});for(let Q of K)W.set(l$(R(Q)),{kind:"hasMany",modelName:Q});for(let Q of Z){let T=W.get(Q);if(!T)continue;let U=G[T.modelName];if(!U)continue;let D=U.table||l$(R(T.modelName)),V=a$(U),N=(g)=>t(O$(g,U),V);if(T.kind==="belongsTo"||T.kind==="hasOne"){let g=`${R(T.modelName)}_id`,I=[...new Set($.map((H)=>H[g]).filter((H)=>H!=null))];if(!I.length){for(let H of $)H[Q]=null;continue}let q=await b.selectFrom(D).whereIn("id",I).get(),C=new Map;for(let H of q??[])C.set(String(H.id),N(H));for(let H of $)H[Q]=C.get(String(H[g]))??null}else{let g=String(J.name??""),I=`${R(g)}_id`,q=[...new Set($.map((Y)=>Y.id).filter((Y)=>Y!=null))];if(!q.length){for(let Y of $)Y[Q]=[];continue}let C=await b.selectFrom(D).whereIn(I,q).get(),H=new Map;for(let Y of C??[]){let X=String(Y[I]),x=H.get(X)??[];x.push(N(Y)),H.set(X,x)}for(let Y of $)Y[Q]=H.get(String(Y.id))??[]}}return $}async function s$($,J){let O=J?.set;if(!O||typeof O!=="object")return $;let G={...$};for(let[Z,z]of Object.entries(O)){if(typeof z!=="function"||!(Z in G))continue;try{G[Z]=await z(G)}catch{}}return G}function d$($,J){return H$($,J?.casts,"set")}function O$($,J){return H$($,J?.casts,"get")}function B($,J=200){return new Response(JSON.stringify($),{status:J,headers:{"Content-Type":"application/json"}})}async function I$($){if(Number($.headers?.get?.("content-length")??0)>W$)throw new n(413,`Request body exceeds ${W$}-byte limit`);if($.jsonBody&&typeof $.jsonBody==="object")return $.jsonBody;if($.formBody&&typeof $.formBody==="object")return $.formBody;try{let O=await $.clone().text();if(O.length>W$)throw new n(413,`Request body exceeds ${W$}-byte limit`);if(!O)return{};let G=JSON.parse(O);return G&&typeof G==="object"&&!Array.isArray(G)?G:{}}catch(O){if(O instanceof n)throw O;throw new n(400,`Invalid JSON body: ${O.message}`)}}function L$($){if($==null)return null;if(typeof $==="number")return Number.isFinite($)&&$>0?$:null;if(typeof $==="string"){let J=$.trim();if(!J)return null;if(/^\d+$/.test(J)){let O=Number(J);return Number.isFinite(O)&&O>0?O:null}return J}return null}function e$($){let J=$.bearerToken;if(typeof J==="function"){let G=J.call($);if(G)return G}let O=$.headers?.get?.("authorization")||$.headers?.get?.("Authorization")||"";if(typeof O==="string"&&O.startsWith("Bearer "))return O.substring(7);return null}async function r($){let J=$._authenticatedUser;if(J)return J;let O=e$($);if(!O)return null;try{let{Auth:G}=await import("@stacksjs/auth"),Z=await G.getUserFromToken(O);if(Z)$._authenticatedUser=Z;return Z||null}catch{return null}}function $$($,J){if($==null||J==null)return!1;if(Array.isArray(J))return J.some((O)=>String(O)===String($));return String($)===String(J)}function bJ($){let J=$?.attributes||{},O=(G)=>Object.prototype.hasOwnProperty.call(J,G);return O("teamId")||O("team_id")?"team_id":null}function qJ($){let J=e$($),O=$.headers?.get?.("cookie")||"";return{bearerToken:()=>J,cookies:{get:(G)=>{for(let Z of O.split(";")){let z=Z.indexOf("=");if(z===-1)continue;if(Z.slice(0,z).trim()===G)return decodeURIComponent(Z.slice(z+1).trim())}return null}}}}function $J($){if($?.ownership)return $.ownership;let J=bJ($);if(!J)return null;return{field:J,resolve:async(O,G)=>{let{resolveAuthenticatedTeamId:Z}=await import("@stacksjs/auth");return Z(qJ(G))}}}async function J$($,J,O){let G=$J($);if(!G||!G.field||typeof G.resolve!=="function")return{enforced:!1,value:null,field:"",bypass:!1};let Z=typeof G.bypass==="function"?!!G.bypass(J,O):!1,z=null;try{z=await G.resolve(J,O)}catch{z=null}return{enforced:!0,value:z,field:String(G.field),bypass:Z}}async function t$($,J,O,G){let Z=$?.authedFill?.[J];if(!Z)return{};if(typeof Z==="function")try{let z=await Z(O,G);return z&&typeof z==="object"?z:{}}catch{return{}}if(typeof Z==="object"){let z={};for(let[K,L]of Object.entries(Z))try{z[K]=typeof L==="function"?await L(O,G):L}catch{}return z}return{}}var gJ,E$,b,W$=1048576,cJ;var OJ=e(async()=>{v$();i$();gJ=r$("config/qb.ts");try{let $=(await import(gJ)).default;u$($??n$)}catch{X$.debug("[orm] No config/qb.ts override found \u2014 deriving config from DB_CONNECTION");let $=l.DB_CONNECTION||"sqlite";u$({...n$,dialect:$,database:$==="sqlite"?{database:l.DB_DATABASE_PATH||"database/stacks.sqlite"}:{database:l.DB_DATABASE||"stacks",host:l.DB_HOST||"127.0.0.1",port:l.DB_PORT||($==="postgres"?5432:3306),username:l.DB_USERNAME||($==="postgres"?"postgres":"root"),password:l.DB_PASSWORD||""}})}E$=await m$({defaultsRoot:fJ("framework/defaults/app/Models"),userRoot:r$("app/Models"),onImportError:($,J)=>X$.warn(`[orm] Could not load model ${$}: ${J.message}`)}),b=yJ();for(let[$,J]of Object.entries(E$)){let O=J.traits?.useApi;if(!O)continue;let G=typeof O==="object"?O:{},Z=G.uri||J.table||$.toLowerCase()+"s",z=G.routes||["index","show","store","update","destroy"],K=J.table||Z,L=g$(J),W=a$(J),Q=`/api/${Z}`,T=b$(J.attributes,W),{read:U,write:D,declared:V}=c$(O);if(["store","update","destroy"].some((Y)=>z.includes(Y))&&V&&D.length===0)X$.warn(`[orm] ${$}: registering UNAUTHENTICATED mutating routes at ${Q} (explicit \`middleware: []\` opt-out)`);if(["index","show"].some((Y)=>z.includes(Y))&&V&&U.length===0)X$.debug(`[orm] ${$}: registering public read routes at ${Q} (declared \`middleware.read: []\`)`);let I=!!$J(J),q=I&&!U.includes("auth")?["auth",...U]:U,C=(Y,X=q)=>{let x=Y;for(let j of X)if(x&&typeof x.middleware==="function")x=x.middleware(j);return x};if(z.includes("index")&&!o("GET",Q))C(m.get(Q,async(Y)=>{try{let X=new URL(Y.url),{page:x,perPage:j,offset:E}=w$(X.searchParams),_=X.searchParams.get("sort"),A=b.selectFrom(K);A=q$(A,_,T);let c=new Set(["page","per_page","sort","fields","search","include","limit","offset","with_count","withTrashed","onlyTrashed"]);for(let[f,y]of X.searchParams.entries()){if(c.has(f)||!y)continue;if(!/^[a-z_][a-z0-9_]*$/i.test(f))continue;let u=T.get(f);if(u)A=A.where(u,"=",y)}let F=X.searchParams.get("search");if(F&&L.length>0){let f=L.slice(0,5);A=A.where((y)=>{for(let u of f)y=y.orWhere(R(u),"like",`%${F}%`);return y})}let M=X.searchParams.get("fields");if(M){let f=M.split(",").map((y)=>y.trim()).filter((y)=>/^[a-z_][a-z0-9_]*$/i.test(y)).map((y)=>R(y));if(f.length>0)A=A.select(f)}let k=!!J.traits?.useSoftDeletes,P=X.searchParams.get("withTrashed")==="true",i=X.searchParams.get("onlyTrashed")==="true";if(k&&!P)A=i?A.whereNotNull("deleted_at"):A.whereNull("deleted_at");let S=I?await J$(J,await r(Y),Y):{enforced:!1,value:null,field:"",bypass:!1};if(S.enforced&&!S.bypass){if(S.value==null||Array.isArray(S.value)&&S.value.length===0){let f=D$(X,x,j,0,!1,void 0);return new Response(JSON.stringify({data:[],...f,meta:Q$(X,x,j,0,!1,void 0)}),{status:200,headers:{"Content-Type":"application/json","Cache-Control":"private, no-store",Vary:"Authorization"}})}A=Array.isArray(S.value)?A.where(S.field,"in",S.value):A.where(S.field,"=",S.value)}let h=await A.limit(j+1).offset(E).get()||[],p=h.length>j,a=(p?h.slice(0,j):h).map((f)=>t(O$(f,J),W)),V$=X.searchParams.get("include");if(V$)a=await o$(a,J,V$,E$);let KJ=X.searchParams.get("with_count")==="true",s;if(KJ)try{let f=b.selectFrom(K);if(S.enforced&&!S.bypass&&S.value!=null)f=Array.isArray(S.value)?f.where(S.field,"in",S.value):f.where(S.field,"=",S.value);let y=await f.count(),u=typeof y==="number"?y:Number(y?.count??y);if(Number.isFinite(u))s=u}catch{}let Z$={"Content-Type":"application/json"};if(s!==void 0&&!Number.isNaN(s))Z$["X-Total-Count"]=String(s);Z$["Cache-Control"]=S.enforced&&!S.bypass?"private, no-store":"public, max-age=15, must-revalidate",Z$.Vary="Authorization";let QJ=D$(X,x,j,a.length,p,s);return new Response(JSON.stringify({data:a,...QJ,meta:Q$(X,x,j,a.length,p,s)}),{status:200,headers:Z$})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to fetch ${Z}`,detail:String(X)},500)}}));if(z.includes("show")&&!o("GET",`${Q}/{id}`))C(m.get(`${Q}/{id}`,async(Y)=>{try{let X=L$(Y.params?.id);if(X==null)return B({error:"Invalid ID parameter"},400);let x=await b.selectFrom(K).where({id:X}).executeTakeFirst();if(!x)return B({error:`${$} not found`},404);let j=new URL(Y.url);if(J.traits?.useSoftDeletes&&x.deleted_at&&j.searchParams.get("withTrashed")!=="true")return B({error:`${$} not found`},404);let E=I?await J$(J,await r(Y),Y):{enforced:!1,value:null,field:"",bypass:!1};if(E.enforced&&!E.bypass){if(E.value==null||!$$(x[E.field],E.value))return B({error:`${$} not found`},404)}let _=t(O$(x,J),W),A=j.searchParams.get("include");if(A){let[P]=await o$([_],J,A,E$);_=P}let c=_?.updated_at||_?.created_at,F=c?`W/"${_.id}-${String(c)}"`:void 0,M=Y.headers?.get?.("if-none-match");if(F&&M&&M===F)return new Response(null,{status:304,headers:{ETag:F}});let k={"Content-Type":"application/json"};if(F)k.ETag=F;return k["Cache-Control"]=E.enforced&&!E.bypass?"private, no-store":"public, max-age=30, must-revalidate",k.Vary="Authorization",new Response(JSON.stringify({data:_}),{status:200,headers:k})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to fetch ${$}`,detail:String(X)},500)}}));if(z.includes("store")&&!o("POST",Q))C(m.post(Q,async(Y)=>{try{let X=await I$(Y),x=N$(X,W),j=_$(x,L),E=await r(Y);if(E){let k=await t$(J,"creating",E,Y);for(let[P,i]of Object.entries(k))if(i!==void 0&&i!==null&&j[P]===void 0)j[P]=i}if(Object.keys(j).length===0)return B({error:"No fillable fields provided"},422);let _=S$(j,J,"creating");if(!_.valid)return B({success:!1,message:"Validation failed",errors:_.errors},422);if(J.traits?.useTimestamps!==!1){let k=new Date().toISOString();j.created_at=k,j.updated_at=k}let A=await s$(j,J),c=A$(d$(A,J)),F=await b.insertInto(K).values(c).execute(),M=c;try{let k=F?.lastInsertRowid??F?.insertId??F;if(k){let P=await b.selectFrom(K).where({id:k}).executeTakeFirst();if(P)M=P}}catch{}return B({data:t(O$(M,J),W)},201)}catch(X){let{status:x,body:j}=T$(X,$,"create");return B(j,x)}}),D);if(z.includes("update")){let Y=async(X)=>{try{let x=L$(X.params?.id);if(x==null)return B({error:"Invalid ID parameter"},400);let j=await I$(X),E=N$(j,W),_=_$(E,L),A=await r(X);if(A){let S=await t$(J,"updating",A,X);for(let[h,p]of Object.entries(S))if(p!==void 0&&p!==null&&_[h]===void 0)_[h]=p}if(Object.keys(_).length===0)return B({error:"No fillable fields provided"},422);let c=S$(_,J,"updating");if(!c.valid)return B({success:!1,message:"Validation failed",errors:c.errors},422);let F=await b.selectFrom(K).where({id:x}).executeTakeFirst();if(!F)return B({error:`${$} not found`},404);let M=await J$(J,A,X);if(M.enforced&&!M.bypass){if(!A)return B({error:"Auth required"},401);let S=F[M.field];if(!$$(S,M.value))return B({error:`Not your ${$}`},403);let h=Object.keys(_).find((p)=>R(p)===R(M.field));if(h!==void 0&&!$$(_[h],M.value))return B({error:`Cannot reassign ${$} ownership`},403)}if(J.traits?.useTimestamps!==!1)_.updated_at=new Date().toISOString();let k=await s$(_,J),P=A$(d$(k,J));await b.updateTable(K).set(P).where({id:x}).execute();let i={...F,...P};try{let S=await b.selectFrom(K).where({id:x}).executeTakeFirst();if(S)i=S}catch{}return B({data:t(O$(i,J),W)})}catch(x){let{status:j,body:E}=T$(x,$,"update");return B(E,j)}};if(!o("PUT",`${Q}/{id}`))C(m.put(`${Q}/{id}`,Y),D);if(!o("PATCH",`${Q}/{id}`))C(m.patch(`${Q}/{id}`,Y),D)}let H=!!J.traits?.useSoftDeletes;if(z.includes("destroy")&&!o("DELETE",`${Q}/{id}`))C(m.delete(`${Q}/{id}`,async(Y)=>{try{let X=L$(Y.params?.id);if(X==null)return B({error:"Invalid ID parameter"},400);let x=await b.selectFrom(K).where({id:X}).executeTakeFirst();if(!x)return B({error:`${$} not found`},404);let j=await r(Y),E=await J$(J,j,Y);if(E.enforced&&!E.bypass){if(!j)return B({error:"Auth required"},401);let _=x[E.field];if(!$$(_,E.value))return B({error:`Not your ${$}`},403)}if(H){let _=new Date().toISOString();await b.updateTable(K).set({deleted_at:_,updated_at:_}).where({id:X}).execute()}else await b.deleteFrom(K).where({id:X}).execute();return new Response(null,{status:204})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to delete ${$}`,detail:String(X)},500)}}),D);if(z.includes("destroy")&&!o("POST",`${Q}/bulk-delete`))C(m.post(`${Q}/bulk-delete`,async(Y)=>{try{let x=(await I$(Y))?.ids;if(!Array.isArray(x)||x.length===0)return B({error:"An array of IDs is required"},422);if(x.length>100)return B({error:"Cannot delete more than 100 records at once"},422);let j=[],E=[];for(let F of x){let M=L$(F);if(M!=null)j.push(M);else E.push(F)}if(E.length>0)return B({error:"Invalid IDs in batch",invalid:E},422);let _=await r(Y),A=await J$(J,_,Y);if(A.enforced&&!A.bypass){if(!_)return B({error:"Auth required"},401);if(A.value==null)return B({error:"Caller has no ownership identity"},403);let F=await b.selectFrom(K).select(["id",A.field]).execute(),M=new Set(F.filter((P)=>$$(P[A.field],A.value)).map((P)=>String(P.id))),k=j.filter((P)=>!M.has(String(P)));if(k.length>0)return B({error:`Cannot delete ${$} you don't own`,ids:k},403)}let c=new Date().toISOString();for(let F of j)if(H)await b.updateTable(K).set({deleted_at:c,updated_at:c}).where({id:F}).execute();else await b.deleteFrom(K).where({id:F}).execute();return B({message:`Successfully deleted ${j.length} ${Z}`})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to bulk delete ${Z}`,detail:String(X)},500)}}),D)}cJ=m});class M${data;status;headers;isOk;constructor($,J,O,G){this.data=$;this.status=J;this.headers=O;this.isOk=G}ok(){return this.status===200}created(){return this.status===201}accepted(){return this.status===202}noContent(){return this.status===204}movedPermanently(){return this.status===301}found(){return this.status===302}badRequest(){return this.status===400}unauthorized(){return this.status===401}paymentRequired(){return this.status===402}forbidden(){return this.status===403}notFound(){return this.status===404}requestTimeout(){return this.status===408}conflict(){return this.status===409}unprocessableEntity(){return this.status===422}tooManyRequests(){return this.status===429}serverError(){return this.status===500}}class C${defaultHeaders={Accept:"application/json","Content-Type":"application/json"};queryParams;bodyData;isFormData=!1;customHeaders={};attachments=[];isMultipart=!1;digestAuth;withQueryParams($){return this.queryParams=$,this}withHeaders($){return this.customHeaders={...this.customHeaders,...$},this}accept($){return this.defaultHeaders.Accept=$,this}acceptJson(){return this.accept("application/json")}withToken($){return this.customHeaders.Authorization=`Bearer ${$}`,this}withBasicAuth($,J){let O=btoa(`${$}:${J}`);return this.customHeaders.Authorization=`Basic ${O}`,this}withDigestAuth($,J){return this.digestAuth={username:$,password:J},this}withBody($){return this.bodyData=$,this}asForm(){return this.isFormData=!0,this.defaultHeaders["Content-Type"]="application/x-www-form-urlencoded",this}attach($,J,O,G){let Z=typeof J==="string"?new Blob([J],{type:G?.["Content-Type"]||"text/plain"}):J;return this.attachments.push({name:$,content:Z,filename:O,headers:G}),this.isMultipart=!0,delete this.defaultHeaders["Content-Type"],this}getHeaders(){return{...this.defaultHeaders,...this.customHeaders}}addQueryParams($){if(!this.queryParams)return $;let J=new URLSearchParams;Object.entries(this.queryParams).forEach(([Z,z])=>{if(z!=null)J.append(Z,String(z))});let O=J.toString();if(!O)return $;let G=$.includes("?");return $+(G?"&":"?")+O}async formatBody($){let J=$||this.bodyData;if(this.isMultipart){let O=new FormData;if(J)Object.entries(J).forEach(([G,Z])=>{O.append(G,String(Z))});for(let G of this.attachments)if(G.headers){let Z=G.content instanceof Blob?new Blob([G.content],{type:G.headers["Content-Type"]}):G.content;O.append(G.name,Z,G.filename)}else O.append(G.name,G.content,G.filename);return O}if(this.isFormData&&J){let O=new URLSearchParams;return Object.entries(J).forEach(([G,Z])=>{if(Z!=null)O.append(G,String(Z))}),O.toString()}return J?JSON.stringify(J):void 0}resetState(){this.queryParams=void 0,this.bodyData=void 0,this.isFormData=!1,this.isMultipart=!1,this.customHeaders={},this.attachments=[],this.digestAuth=void 0,this.defaultHeaders["Content-Type"]="application/json"}async handleDigestAuth($,J,O,G){if($.status!==401||!this.digestAuth)return $;let Z=$.headers.get("WWW-Authenticate");if(!Z?.startsWith("Digest "))return $;let z=Z.substring(7).split(",").reduce((V,N)=>{let[g,I]=N.trim().split("=");if(g)V[g]=I?.replace(/["']/g,"")??"";return V},{}),K=await this.generateMD5(`${this.digestAuth.username}:${z.realm}:${this.digestAuth.password}`),L=await this.generateMD5(`${O}:${J}`),W="00000001",Q=await this.generateMD5(Date.now().toString()).then((V)=>V.substring(0,8)),T=await this.generateMD5(`${K}:${z.nonce}:${W}:${Q}:${z.qop}:${L}`),U={username:`"${this.digestAuth.username}"`,realm:`"${z.realm}"`,nonce:`"${z.nonce}"`,uri:`"${J}"`,algorithm:z.algorithm?`"${z.algorithm}"`:void 0,qop:`"${z.qop}"`,nc:W,cnonce:`"${Q}"`,response:`"${T}"`,opaque:z.opaque?`"${z.opaque}"`:void 0},D=Object.entries(U).filter(([V,N])=>N!==void 0).map(([V,N])=>`${V}=${N}`).join(", ");return this.customHeaders.Authorization=`Digest ${D}`,fetch(J,{method:O,headers:this.getHeaders(),body:G?this.formatBody(G):void 0})}async generateMD5($){let O=new TextEncoder().encode($),G=await crypto.subtle.digest("SHA-256",O);return Array.from(new Uint8Array(G)).map((z)=>z.toString(16).padStart(2,"0")).join("")}async request($,J,O){let G=this.addQueryParams($),Z=await this.formatBody(O),z=await fetch(G,{method:J,headers:this.getHeaders(),body:Z});if(this.digestAuth)z=await this.handleDigestAuth(z,G,J,O);let K=await z.json();return this.resetState(),new M$(K,z.status,z.headers,z.ok)}async get($){return this.request($,"GET")}async post($,J){return this.request($,"POST",J)}async put($,J){return this.request($,"PUT",J)}async patch($,J){return this.request($,"PATCH",J)}async delete($){return this.request($,"DELETE")}}var iJ=new C$;B$();import{path as Y$}from"@stacksjs/path";function wJ($){if(!$||typeof $!=="object")return{type:"string"};let J=$,O=Array.isArray(J.rules)?J.rules:[],G=(T)=>O.find((U)=>U.name===T),Z=(T,U)=>{let D=G(T)?.params?.[U];return typeof D==="number"?D:void 0},z=J.name??J._type??"string",K={type:z==="enum"?"string":z},L=Z("min","min")??(typeof J._min==="number"?J._min:void 0),W=Z("max","max")??(typeof J._max==="number"?J._max:void 0);if(L!==void 0)K[z==="string"?"minLength":"minimum"]=L;if(W!==void 0)K[z==="string"?"maxLength":"maximum"]=W;if(G("email")||J._email)K.format="email";if(G("url")||J._url)K.format="uri";if(G("uuid")||J._uuid)K.format="uuid";let Q=Array.isArray(J.allowedValues)?J.allowedValues:Array.isArray(J._enum)?J._enum:null;if(Q)K.enum=Q;return K}function vJ($){if(!$||typeof $!=="object")return!1;let J=$;return Boolean(J.isRequired??J._required)}async function hJ($){if(typeof $!=="string"||!$||$.includes(".."))return null;try{let{path:J}=await import("@stacksjs/path"),O=[J.appPath(`${$}.ts`),J.storagePath(`framework/defaults/app/${$}.ts`)];for(let G of O)try{if(!await Bun.file(G).exists())continue;let K=(await import(G)).default;if(K&&typeof K==="object"&&"validations"in K){let L=K.validations;return L&&typeof L==="object"?L:null}return null}catch{}}catch{}return null}async function KO($={}){let J=$.portable??!0,{listRegisteredRoutes:O}=await import("@stacksjs/router");try{let{loadRoutes:W}=await import("@stacksjs/router"),{default:Q}=await import(Y$.appPath("Routes.ts"));await W(Q)}catch(W){let Q=W instanceof Error?W.message:String(W);if(J)throw Error(`[generateOpenApi] Refusing to emit a partial spec: failed to load routes/api.ts + framework routes: ${Q}`);console.warn(`[generateOpenApi] Failed to load routes/api.ts + framework routes: ${Q}`)}try{await OJ().then(() => JJ)}catch(W){let Q=W instanceof Error?W.message:String(W);if(J)throw Error(`[generateOpenApi] Refusing to emit a partial spec: failed to load useApi-generated ORM routes: ${Q}`);console.warn(`[generateOpenApi] Failed to load useApi-generated ORM routes: ${Q}`)}let G=(W)=>W.replace(/(^|\/):(\w+)(?=$|\/)/g,"$1{$2}"),Z=[...O()].map((W)=>({route:W,oasPath:G(W.path),method:W.method.toLowerCase()})).sort((W,Q)=>{if(W.oasPath!==Q.oasPath)return W.oasPath<Q.oasPath?-1:1;return W.method<Q.method?-1:W.method>Q.method?1:0});if(J&&Z.length===0)throw Error("[generateOpenApi] Refusing to emit an empty spec: no routes were registered. This usually means route loading failed silently rather than that the app has no API.");let z="Stacks API";if(!J)try{let{config:W}=await import("@stacksjs/config");if(W.app?.name)z=`${W.app.name} API`}catch{}let K={openapi:"3.0.0",info:{title:z,version:"1.0.0"},paths:{},components:{schemas:{}}},L=new Set;for(let{route:W,oasPath:Q,method:T}of Z){if(!K.paths[Q])K.paths[Q]={};let U=[];for(let I of W.path.matchAll(/\{(\w+)\}/g))if(I[1])U.push(I[1]);for(let I of W.path.matchAll(/(?:^|\/):(\w+)(?=$|\/)/g))if(I[1])U.push(I[1]);let D=W.name??`${T}_${Q.replace(/[^a-z0-9]/gi,"_")}`,V=D;if(L.has(V)){V=`${D}_${T}`;let I=2;while(L.has(V))V=`${D}_${T}_${I++}`}L.add(V);let N={summary:W.name??W.path,operationId:V,parameters:U.map((I)=>({name:I,in:"path",required:!0,schema:{type:"string"}})),responses:{200:{description:"Successful response",content:{"application/json":{schema:{type:"object"}}}},422:{description:"Validation failed"},500:{description:"Server error"}}},g=W.handler?await hJ(W.handler):null;if(g&&Object.keys(g).length>0){let I=Object.entries(g).map(([q,C])=>{let H=C?.rule;return{field:q,schema:wJ(H),required:vJ(H)}});if(T==="get"||T==="head"||T==="delete"){let q=new Set(U);for(let{field:C,schema:H,required:Y}of I){if(q.has(C))continue;N.parameters?.push({name:C,in:"query",required:Y,schema:H})}}else{let q={type:"object",properties:{},required:[]},C=q.properties,H=q.required;for(let Y of I)if(C[Y.field]=Y.schema,Y.required)H.push(Y.field);if(H.length===0)delete q.required;N.requestBody={required:H.length>0,content:{"application/json":{schema:q}}}}}K.paths[Q][T]=N}if($.write!==!1){let Q=Bun.file(Y$.frameworkPath("api/openapi.json")).writer();Q.write(JSON.stringify(K,null,2)),await Q.end();let{renderOpenApiTypes:T}=await Promise.resolve().then(() => (z$(),R$)),{renderApiClient:U}=await Promise.resolve().then(() => (B$(),f$));await Bun.write(Y$.frameworkPath("api/api-types.ts"),T(K)),await Bun.write(Y$.frameworkPath("api/client.ts"),U(K,{name:K.info.title}))}return K}z$();class v{static instance=new v;isMissing(){return!0}}class G${data;constructor($){this.data=$}}class GJ{condition;value;defaultValue;constructor($,J,O=new v){this.condition=$;this.value=J;this.defaultValue=O}resolve(){return(typeof this.condition==="function"?this.condition():this.condition)?this.value:this.defaultValue}}class ZJ{resource;additional={};request;static wrap="data";static additionalMeta={};constructor($){this.resource=$}withRequest($){return this.request=$,this}withAdditional($){return this.additional={...this.additional,...$},this}resolve($){let J=this.toArray($||this.request);return this.filterAndResolve(J)}toResponse($){let J=this.resolve($),O=this.constructor.wrap;if(O)return{[O]:J,...this.additional};return{...J,...this.additional}}toJson($){return JSON.stringify(this.toResponse($))}toJSON(){return this.toResponse()}static collection($){return new F$($,this)}when($,J,O){if(typeof $==="function"?$():$)return typeof J==="function"?J():J;return O!==void 0?O:v.instance}whenNotNull($,J){if($===null||$===void 0)return v.instance;return J?J($):$}whenLoaded($,J,O){let G=this.resource;if(!(($ in G)&&G[$]!==void 0))return O!==void 0?O:v.instance;if(J!==void 0)return typeof J==="function"?J():J;return G[$]}whenCounted($,J){let O=this.resource,G=`${$}_count`;if(G in O)return O[G];return J!==void 0?J:v.instance}merge($){return new G$($)}mergeWhen($,J){if(!(typeof $==="function"?$():$))return v.instance;let G=typeof J==="function"?J():J;return new G$(G)}static MAX_RESOLVE_DEPTH=20;filterAndResolve($,J=0){if(J>=ZJ.MAX_RESOLVE_DEPTH)return $;let O={};for(let[G,Z]of Object.entries($)){if(Z instanceof v)continue;if(Z instanceof G$){Object.assign(O,this.filterAndResolve(Z.data,J+1));continue}if(Z instanceof GJ){let z=Z.resolve();if(!(z instanceof v))O[G]=z;continue}if(Z!==null&&typeof Z==="object"&&!Array.isArray(Z)&&!(Z instanceof Date)){O[G]=this.filterAndResolve(Z,J+1);continue}if(Array.isArray(Z)){O[G]=Z.filter((z)=>!(z instanceof v)).map((z)=>{if(z instanceof G$)return z.data;if(z!==null&&typeof z==="object"&&!(z instanceof Date))return this.filterAndResolve(z,J+1);return z});continue}O[G]=Z}return O}static withoutWrapping(){this.wrap=null}static wrapWith($){this.wrap=$}}class F${resources;ResourceClass;additional={};request;static wrap="data";constructor($,J){this.resources=$,this.ResourceClass=J}withRequest($){return this.request=$,this}withAdditional($){return this.additional={...this.additional,...$},this}resolve($){let J=$||this.request;return this.resources.map((O)=>{let G=new this.ResourceClass(O);if(J)G.withRequest(J);return G.resolve(J)})}toResponse($){let J=this.resolve($),O=this.constructor.wrap;if(O)return{[O]:J,...this.additional};return{data:J,...this.additional}}toJson($){return JSON.stringify(this.toResponse($))}count(){return this.resources.length}isEmpty(){return this.resources.length===0}isNotEmpty(){return this.resources.length>0}}class zJ extends F${meta;links;constructor($,J){super($.data,J);this.meta=$.meta,this.links=$.links}static fromPagination($,J,O){let{currentPage:G,perPage:Z,total:z,baseUrl:K=""}=O,L=Math.ceil(z/Z),W=z>0?(G-1)*Z+1:null,Q=z>0?Math.min(G*Z,z):null;return new zJ({data:$,meta:{current_page:G,from:W,last_page:L,per_page:Z,to:Q,total:z},links:{first:`${K}?page=1`,last:`${K}?page=${L}`,prev:G>1?`${K}?page=${G-1}`:null,next:G<L?`${K}?page=${G+1}`:null}},J)}toResponse($){return{data:this.resolve($),meta:this.meta,links:this.links,...this.additional}}}function WO($,J){let O=J($);return{toResponse:()=>({data:O}),toJson:()=>JSON.stringify({data:O})}}function LO($,J){let O=$.map(J);return{toResponse:()=>({data:O}),toJson:()=>JSON.stringify({data:O})}}export{w as schemaType,wJ as ruleToSchema,vJ as ruleIsRequired,WO as resource,TJ as renderOpenApiTypes,SJ as renderApiClient,P$ as methodName,KO as generateOpenApi,iJ as fetcher,LO as collection,F$ as ResourceCollection,zJ as PaginatedResourceCollection,v as MissingValue,G$ as MergeValue,ZJ as JsonResource,GJ as ConditionalValue};
+`}var NJ;var B$=d(()=>{z$();NJ=["get","put","post","delete","options","head","patch"]});function EJ($){let J=$;return J?.code==="SQLITE_CONSTRAINT_UNIQUE"||J?.code==="SQLITE_CONSTRAINT"||J?.code==="23505"||J?.errno===1062||/unique|duplicate/i.test(J?.message??"")}function j$($,J,O){let G=$;if($ instanceof Error&&typeof G.status==="number"&&Number.isInteger(G.status)&&G.status>=400&&G.status<600){let Z={error:$.message};if(G.details!==void 0)Z.details=G.details;return{status:G.status,body:Z}}if(EJ($))return{status:409,body:{error:`${J} already exists`}};return{status:500,body:{error:`Failed to ${O} ${J}`,detail:String($)}}}function R($){return $.replace(/([a-z\d])([A-Z])/g,"$1_$2").replace(/([A-Z])([A-Z][a-z])/g,"$1_$2").toLowerCase()}function A$($){let J={};for(let[O,G]of Object.entries($))J[R(O)]=G;return J}function y$($){if(!$)return[];let J=Object.entries($.attributes??{}).filter(([,O])=>O?.fillable===!0).map(([O])=>O);for(let O of $.belongsTo??[]){if(typeof O!=="string"||!O.trim())continue;let G=R(O.trim()).split("_").filter(Boolean);if(G.length===0)continue;let Z=`${G[0]}${G.slice(1).map((z)=>`${z[0]?.toUpperCase()}${z.slice(1)}`).join("")}Id`;J.push(Z)}return[...new Set(J)]}function _$($,J){if(!$||J.length===0)return{};let O={};for(let G of J){if(G in $){O[G]=$[G];continue}let Z=R(G);if(Z!==G&&Z in $)O[G]=$[Z]}return O}function IJ($,J){if($?.name!=="date"||J instanceof Date||typeof J!=="string")return J;let O=/^(\d{4})-(\d{2})-(\d{2})$/.exec(J);if(!O)return J;let G=Number(O[1]),Z=Number(O[2]),z=Number(O[3]),K=new Date(Date.UTC(G,Z-1,z));if(K.getUTCFullYear()!==G||K.getUTCMonth()!==Z-1||K.getUTCDate()!==z)return J;return K}function N$($,J){if(!J.length)return $;let O={...$};for(let G of J)delete O[G],delete O[R(G)];return O}function r($,J){if(!$||J.length===0)return $;let O={...$};for(let G of J)delete O[G],delete O[R(G)];return O}function b$($,J){let O=new Map;for(let G of[...Object.keys($??{}),...FJ]){let Z=R(G);if(!/^\w+$/.test(Z))continue;O.set(G,Z),O.set(Z,Z)}for(let G of J)O.delete(G),O.delete(R(G));return O}function q$($,J,O){if(!J)return $;let G=String(J).split(",").map((z)=>z.trim()).filter(Boolean),Z=$;for(let z of G){let K=z.startsWith("-"),W=K?z.slice(1):z;if(!/^\w+$/.test(W))continue;let L=O.get(W);if(!L)continue;Z=Z.orderBy(L,K?"desc":"asc")}return Z}function MJ($){try{return JSON.parse($)}catch{return $}}function CJ($){try{return JSON.parse($)}catch{return[]}}function H$($,J,O){if(!$||typeof $!=="object"||!J||Object.keys(J).length===0)return $;let G={...$};for(let[Z,z]of Object.entries(J)){let K=typeof z==="string"?VJ[z]:z;if(!K||typeof K[O]!=="function")continue;if(Object.prototype.hasOwnProperty.call(G,Z))G[Z]=K[O](G[Z]);let W=R(Z);if(W!==Z&&Object.prototype.hasOwnProperty.call(G,W))G[W]=K[O](G[W])}return G}function S$($,J,O){let G=J?.attributes??{},Z={};for(let[z,K]of Object.entries(G)){let W=K?.validation?.rule;if(!W||typeof W.validate!=="function")continue;let L=Object.prototype.hasOwnProperty.call($,z);if(!L&&O==="updating")continue;let Q=K!==null&&typeof K==="object"&&Object.prototype.hasOwnProperty.call(K,"default"),j=L?$[z]:Q?K.default:void 0,U=IJ(W,j),D=W.validate(U);if(!D?.valid&&Array.isArray(D?.errors)&&D.errors.length>0)Z[z]=D.errors.map((V)=>K?.validation?.message?.[V?.code]??V?.message??"invalid")}return Object.keys(Z).length===0?{valid:!0}:{valid:!1,errors:Z}}function U$($){return $.replace(/\{[^}]*\}/g,"{}").replace(/:[^/]+/g,"{}")}function T$($){if(Array.isArray($))return $.filter((J)=>typeof J==="string"&&J.length>0);return typeof $==="string"&&$?[$]:[]}function c$($){let J=typeof $==="object"&&$!==null&&"middleware"in $,O=$?.middleware;if(!J)return{read:["auth"],write:["auth"],declared:!1};if(O&&typeof O==="object"&&!Array.isArray(O)){let Z=O;return{read:"read"in Z?T$(Z.read):["auth"],write:"write"in Z?T$(Z.write):["auth"],declared:!0}}let G=T$(O);return{read:G,write:G,declared:!0}}function w$($){let J=Number.parseInt($.get("page")||String(1),10),O=Number.isFinite(J)?Math.max(1,J):1,G=Number.parseInt($.get("per_page")||String(g$),10),Z=Math.min(Number.isFinite(G)?Math.max(1,G):g$,kJ);return{page:O,perPage:Z,offset:(O-1)*Z}}function K$($,J){let O=new URL($.toString());return O.searchParams.set("page",String(J)),`${O.pathname}${O.search}`}function Q$($,J,O,G,Z,z){let K=(J-1)*O,W=G===0,L={page:J,per_page:O,from:W?null:K+1,to:W?null:K+G,has_more_pages:Z,prev_page_url:J>1?K$($,J-1):null,next_page_url:Z?K$($,J+1):null};if(z!==void 0&&!Number.isNaN(z)){let Q=Math.max(1,Math.ceil(z/O));L.total=z,L.last_page=Q,L.first_page_url=K$($,1),L.last_page_url=K$($,Q)}return L}function D$($,J,O,G,Z,z){let{page:K,...W}=Q$($,J,O,G,Z,z);return{current_page:K,...W}}var FJ,VJ,g$=15,kJ=100;var v$=d(()=>{FJ=["id","uuid","created_at","updated_at","deleted_at"];VJ={string:{get:($)=>$!=null?String($):null,set:($)=>$!=null?String($):null},number:{get:($)=>$!=null?Number($):null,set:($)=>$!=null?Number($):null},integer:{get:($)=>$!=null?Math.trunc(Number($)):null,set:($)=>$!=null?Math.trunc(Number($)):null},float:{get:($)=>$!=null?Number.parseFloat(String($)):null,set:($)=>$!=null?Number.parseFloat(String($)):null},boolean:{get:($)=>$===1||$==="1"||$===!0||$==="true",set:($)=>$===!0||$===1||$==="1"||$==="true"?1:0},json:{get:($)=>$==null?null:typeof $==="string"?MJ($):$,set:($)=>$==null?null:typeof $==="string"?$:JSON.stringify($)},datetime:{get:($)=>$?new Date($):null,set:($)=>$ instanceof Date?$.toISOString():$},date:{get:($)=>$?new Date($):null,set:($)=>$ instanceof Date?$.toISOString().split("T")[0]:$},array:{get:($)=>$==null?[]:Array.isArray($)?$:typeof $==="string"?CJ($):[],set:($)=>$==null?null:Array.isArray($)?JSON.stringify($):$}}});import{readdirSync as RJ}from"fs";import{basename as PJ,extname as p$,join as fJ}from"path";function gJ($){let J=[],O=(G)=>{let Z;try{Z=RJ(G,{withFileTypes:!0})}catch{return}for(let z of Z){let K=fJ(G,z.name);if(z.isDirectory()){O(K);continue}if(![".ts",".js"].includes(p$(z.name)))continue;if(z.name.startsWith(".")||z.name.startsWith("index"))continue;J.push(K)}};return O($),J.sort()}async function h$($,J,O){for(let G of gJ($))try{let Z=p$(G),z=await import(`${G}?t=${Date.now()}`),K=z.default??z,W=K.name??PJ(G,Z);J[W]={...K,name:W}}catch(Z){O?.(G,Z)}}async function m$($){let J={};return await h$($.defaultsRoot,J,$.onImportError),await h$($.userRoot,J,$.onImportError),J}var i$=()=>{};import{route as m}from"@stacksjs/router";import{env as l}from"@stacksjs/env";import{projectPath as r$,storagePath as yJ}from"@stacksjs/path";import{createQueryBuilder as bJ,defaultConfig as n$,setConfig as u$}from"@stacksjs/query-builder";import{HttpError as n}from"@stacksjs/error-handling";import{log as X$}from"@stacksjs/logging";function s($,J){let O=U$(J);return m.routes.some((G)=>G.method===$&&U$(String(G.path??""))===O)}function a$($){if(!$.attributes)return[];return Object.entries($.attributes).filter(([J,O])=>O.hidden===!0).map(([J])=>J)}function o$($){if($.endsWith("y")&&!/[aeiou]y$/i.test($))return`${$.slice(0,-1)}ies`;if(/(?:s|x|z|ch|sh)$/i.test($))return`${$}es`;return`${$}s`}async function l$($,J,O,G){if(!$.length)return $;let Z=O.split(",").map((Q)=>Q.trim()).filter(Boolean);if(!Z.length)return $;let z=Array.isArray(J.belongsTo)?J.belongsTo:[],K=Array.isArray(J.hasMany)?J.hasMany:[],W=Array.isArray(J.hasOne)?J.hasOne:[],L=new Map;for(let Q of z)L.set(R(Q),{kind:"belongsTo",modelName:Q});for(let Q of W)L.set(R(Q),{kind:"hasOne",modelName:Q});for(let Q of K)L.set(o$(R(Q)),{kind:"hasMany",modelName:Q});for(let Q of Z){let j=L.get(Q);if(!j)continue;let U=G[j.modelName];if(!U)continue;let D=U.table||o$(R(j.modelName)),V=a$(U),N=(y)=>r(O$(y,U),V);if(j.kind==="belongsTo"||j.kind==="hasOne"){let y=`${R(j.modelName)}_id`,I=[...new Set($.map((H)=>H[y]).filter((H)=>H!=null))];if(!I.length){for(let H of $)H[Q]=null;continue}let q=await b.selectFrom(D).whereIn("id",I).get(),C=new Map;for(let H of q??[])C.set(String(H.id),N(H));for(let H of $)H[Q]=C.get(String(H[y]))??null}else{let y=String(J.name??""),I=`${R(y)}_id`,q=[...new Set($.map((Y)=>Y.id).filter((Y)=>Y!=null))];if(!q.length){for(let Y of $)Y[Q]=[];continue}let C=await b.selectFrom(D).whereIn(I,q).get(),H=new Map;for(let Y of C??[]){let X=String(Y[I]),x=H.get(X)??[];x.push(N(Y)),H.set(X,x)}for(let Y of $)Y[Q]=H.get(String(Y.id))??[]}}return $}async function s$($,J){let O=J?.set;if(!O||typeof O!=="object")return $;let G={...$};for(let[Z,z]of Object.entries(O)){if(typeof z!=="function"||!(Z in G))continue;try{G[Z]=await z(G)}catch{}}return G}function t$($,J){return H$($,J?.casts,"set")}function O$($,J){return H$($,J?.casts,"get")}function B($,J=200){return new Response(JSON.stringify($),{status:J,headers:{"Content-Type":"application/json"}})}async function I$($){if(Number($.headers?.get?.("content-length")??0)>L$)throw new n(413,`Request body exceeds ${L$}-byte limit`);if($.jsonBody&&typeof $.jsonBody==="object")return $.jsonBody;if($.formBody&&typeof $.formBody==="object")return $.formBody;try{let O=await $.clone().text();if(O.length>L$)throw new n(413,`Request body exceeds ${L$}-byte limit`);if(!O)return{};let G=JSON.parse(O);return G&&typeof G==="object"&&!Array.isArray(G)?G:{}}catch(O){if(O instanceof n)throw O;throw new n(400,`Invalid JSON body: ${O.message}`)}}function W$($){if($==null)return null;if(typeof $==="number")return Number.isFinite($)&&$>0?$:null;if(typeof $==="string"){let J=$.trim();if(!J)return null;if(/^\d+$/.test(J)){let O=Number(J);return Number.isFinite(O)&&O>0?O:null}return J}return null}function e$($){let J=$.bearerToken;if(typeof J==="function"){let G=J.call($);if(G)return G}let O=$.headers?.get?.("authorization")||$.headers?.get?.("Authorization")||"";if(typeof O==="string"&&O.startsWith("Bearer "))return O.substring(7);return null}async function a($){let J=$._authenticatedUser;if(J)return J;let O=e$($);if(!O)return null;try{let{Auth:G}=await import("@stacksjs/auth"),Z=await G.getUserFromToken(O);if(Z)$._authenticatedUser=Z;return Z||null}catch{return null}}function $$($,J){if($==null||J==null)return!1;if(Array.isArray(J))return J.some((O)=>String(O)===String($));return String($)===String(J)}function cJ($){let J=$?.attributes||{},O=(G)=>Object.prototype.hasOwnProperty.call(J,G);return O("teamId")||O("team_id")?"team_id":null}function wJ($){let J=e$($),O=$.headers?.get?.("cookie")||"";return{bearerToken:()=>J,cookies:{get:(G)=>{for(let Z of O.split(";")){let z=Z.indexOf("=");if(z===-1)continue;if(Z.slice(0,z).trim()===G)return decodeURIComponent(Z.slice(z+1).trim())}return null}}}}function $J($){if($?.ownership)return $.ownership;let J=cJ($);if(!J)return null;return{field:J,resolve:async(O,G)=>{let{resolveAuthenticatedTeamId:Z}=await import("@stacksjs/auth");return Z(wJ(G))}}}async function J$($,J,O){let G=$J($);if(!G||!G.field||typeof G.resolve!=="function")return{enforced:!1,value:null,field:"",bypass:!1};let Z=typeof G.bypass==="function"?!!G.bypass(J,O):!1,z=null;try{z=await G.resolve(J,O)}catch{z=null}return{enforced:!0,value:z,field:String(G.field),bypass:Z}}async function d$($,J,O,G){let Z=$?.authedFill?.[J];if(!Z)return{};if(typeof Z==="function")try{let z=await Z(O,G);return z&&typeof z==="object"?z:{}}catch{return{}}if(typeof Z==="object"){let z={};for(let[K,W]of Object.entries(Z))try{z[K]=typeof W==="function"?await W(O,G):W}catch{}return z}return{}}var qJ,E$,b,L$=1048576,JJ;var OJ=d(async()=>{v$();i$();qJ=r$("config/qb.ts");try{let $=(await import(qJ)).default;u$($??n$)}catch{X$.debug("[orm] No config/qb.ts override found \u2014 deriving config from DB_CONNECTION");let $=l.DB_CONNECTION||"sqlite";u$({...n$,dialect:$,database:$==="sqlite"?{database:l.DB_DATABASE_PATH||"database/stacks.sqlite"}:{database:l.DB_DATABASE||"stacks",host:l.DB_HOST||"127.0.0.1",port:l.DB_PORT||($==="postgres"?5432:3306),username:l.DB_USERNAME||($==="postgres"?"postgres":"root"),password:l.DB_PASSWORD||""}})}E$=await m$({defaultsRoot:yJ("framework/defaults/app/Models"),userRoot:r$("app/Models"),onImportError:($,J)=>X$.warn(`[orm] Could not load model ${$}: ${J.message}`)}),b=bJ();for(let[$,J]of Object.entries(E$)){let O=J.traits?.useApi;if(!O)continue;let G=typeof O==="object"?O:{},Z=G.uri||J.table||$.toLowerCase()+"s",z=G.routes||["index","show","store","update","destroy"],K=J.table||Z,W=y$(J),L=a$(J),Q=`/api/${Z}`,j=b$(J.attributes,L),{read:U,write:D,declared:V}=c$(O);if(["store","update","destroy"].some((Y)=>z.includes(Y))&&V&&D.length===0)X$.warn(`[orm] ${$}: registering UNAUTHENTICATED mutating routes at ${Q} (explicit \`middleware: []\` opt-out)`);if(["index","show"].some((Y)=>z.includes(Y))&&V&&U.length===0)X$.debug(`[orm] ${$}: registering public read routes at ${Q} (declared \`middleware.read: []\`)`);let I=!!$J(J),q=I&&!U.includes("auth")?["auth",...U]:U,C=(Y,X=q)=>{let x=Y;for(let T of X)if(x&&typeof x.middleware==="function")x=x.middleware(T);return x};if(z.includes("index")&&!s("GET",Q))C(m.get(Q,async(Y)=>{try{let X=new URL(Y.url),{page:x,perPage:T,offset:E}=w$(X.searchParams),_=X.searchParams.get("sort"),A=b.selectFrom(K);A=q$(A,_,j);let c=new Set(["page","per_page","sort","fields","search","include","limit","offset","with_count","withTrashed","onlyTrashed"]);for(let[f,g]of X.searchParams.entries()){if(c.has(f)||!g)continue;if(!/^[a-z_][a-z0-9_]*$/i.test(f))continue;let u=j.get(f);if(u)A=A.where(u,"=",g)}let F=X.searchParams.get("search");if(F&&W.length>0){let f=W.slice(0,5);A=A.where((g)=>{for(let u of f)g=g.orWhere(R(u),"like",`%${F}%`);return g})}let M=X.searchParams.get("fields");if(M){let f=M.split(",").map((g)=>g.trim()).filter((g)=>/^[a-z_][a-z0-9_]*$/i.test(g)).map((g)=>R(g));if(f.length>0)A=A.select(f)}let k=!!J.traits?.useSoftDeletes,P=X.searchParams.get("withTrashed")==="true",i=X.searchParams.get("onlyTrashed")==="true";if(k&&!P)A=i?A.whereNotNull("deleted_at"):A.whereNull("deleted_at");let S=I?await J$(J,await a(Y),Y):{enforced:!1,value:null,field:"",bypass:!1};if(S.enforced&&!S.bypass){if(S.value==null||Array.isArray(S.value)&&S.value.length===0){let f=D$(X,x,T,0,!1,void 0);return new Response(JSON.stringify({data:[],...f,meta:Q$(X,x,T,0,!1,void 0)}),{status:200,headers:{"Content-Type":"application/json","Cache-Control":"private, no-store",Vary:"Authorization"}})}A=Array.isArray(S.value)?A.where(S.field,"in",S.value):A.where(S.field,"=",S.value)}let h=await A.limit(T+1).offset(E).get()||[],p=h.length>T,e=(p?h.slice(0,T):h).map((f)=>r(O$(f,J),L)),V$=X.searchParams.get("include");if(V$)e=await l$(e,J,V$,E$);let LJ=X.searchParams.get("with_count")==="true",t;if(LJ)try{let f=b.selectFrom(K);if(S.enforced&&!S.bypass&&S.value!=null)f=Array.isArray(S.value)?f.where(S.field,"in",S.value):f.where(S.field,"=",S.value);let g=await f.count(),u=typeof g==="number"?g:Number(g?.count??g);if(Number.isFinite(u))t=u}catch{}let Z$={"Content-Type":"application/json"};if(t!==void 0&&!Number.isNaN(t))Z$["X-Total-Count"]=String(t);Z$["Cache-Control"]=S.enforced&&!S.bypass?"private, no-store":"public, max-age=15, must-revalidate",Z$.Vary="Authorization";let WJ=D$(X,x,T,e.length,p,t);return new Response(JSON.stringify({data:e,...WJ,meta:Q$(X,x,T,e.length,p,t)}),{status:200,headers:Z$})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to fetch ${Z}`,detail:String(X)},500)}}));if(z.includes("show")&&!s("GET",`${Q}/{id}`))C(m.get(`${Q}/{id}`,async(Y)=>{try{let X=W$(Y.params?.id);if(X==null)return B({error:"Invalid ID parameter"},400);let x=await b.selectFrom(K).where({id:X}).executeTakeFirst();if(!x)return B({error:`${$} not found`},404);let T=new URL(Y.url);if(J.traits?.useSoftDeletes&&x.deleted_at&&T.searchParams.get("withTrashed")!=="true")return B({error:`${$} not found`},404);let E=I?await J$(J,await a(Y),Y):{enforced:!1,value:null,field:"",bypass:!1};if(E.enforced&&!E.bypass){if(E.value==null||!$$(x[E.field],E.value))return B({error:`${$} not found`},404)}let _=r(O$(x,J),L),A=T.searchParams.get("include");if(A){let[P]=await l$([_],J,A,E$);_=P}let c=_?.updated_at||_?.created_at,F=c?`W/"${_.id}-${String(c)}"`:void 0,M=Y.headers?.get?.("if-none-match");if(F&&M&&M===F)return new Response(null,{status:304,headers:{ETag:F}});let k={"Content-Type":"application/json"};if(F)k.ETag=F;return k["Cache-Control"]=E.enforced&&!E.bypass?"private, no-store":"public, max-age=30, must-revalidate",k.Vary="Authorization",new Response(JSON.stringify({data:_}),{status:200,headers:k})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to fetch ${$}`,detail:String(X)},500)}}));if(z.includes("store")&&!s("POST",Q))C(m.post(Q,async(Y)=>{try{let X=await I$(Y),x=N$(X,L),T=_$(x,W),E=await a(Y);if(E){let k=await d$(J,"creating",E,Y);for(let[P,i]of Object.entries(k))if(i!==void 0&&i!==null&&T[P]===void 0)T[P]=i}if(Object.keys(T).length===0)return B({error:"No fillable fields provided"},422);let _=S$(T,J,"creating");if(!_.valid)return B({success:!1,message:"Validation failed",errors:_.errors},422);if(J.traits?.useTimestamps!==!1){let k=new Date().toISOString();T.created_at=k,T.updated_at=k}let A=await s$(T,J),c=A$(t$(A,J)),F=await b.insertInto(K).values(c).execute(),M=c;try{let k=F?.lastInsertRowid??F?.insertId??F;if(k){let P=await b.selectFrom(K).where({id:k}).executeTakeFirst();if(P)M=P}}catch{}return B({data:r(O$(M,J),L)},201)}catch(X){let{status:x,body:T}=j$(X,$,"create");return B(T,x)}}),D);if(z.includes("update")){let Y=async(X)=>{try{let x=W$(X.params?.id);if(x==null)return B({error:"Invalid ID parameter"},400);let T=await I$(X),E=N$(T,L),_=_$(E,W),A=await a(X);if(A){let S=await d$(J,"updating",A,X);for(let[h,p]of Object.entries(S))if(p!==void 0&&p!==null&&_[h]===void 0)_[h]=p}if(Object.keys(_).length===0)return B({error:"No fillable fields provided"},422);let c=S$(_,J,"updating");if(!c.valid)return B({success:!1,message:"Validation failed",errors:c.errors},422);let F=await b.selectFrom(K).where({id:x}).executeTakeFirst();if(!F)return B({error:`${$} not found`},404);let M=await J$(J,A,X);if(M.enforced&&!M.bypass){if(!A)return B({error:"Auth required"},401);let S=F[M.field];if(!$$(S,M.value))return B({error:`Not your ${$}`},403);let h=Object.keys(_).find((p)=>R(p)===R(M.field));if(h!==void 0&&!$$(_[h],M.value))return B({error:`Cannot reassign ${$} ownership`},403)}if(J.traits?.useTimestamps!==!1)_.updated_at=new Date().toISOString();let k=await s$(_,J),P=A$(t$(k,J));await b.updateTable(K).set(P).where({id:x}).execute();let i={...F,...P};try{let S=await b.selectFrom(K).where({id:x}).executeTakeFirst();if(S)i=S}catch{}return B({data:r(O$(i,J),L)})}catch(x){let{status:T,body:E}=j$(x,$,"update");return B(E,T)}};if(!s("PUT",`${Q}/{id}`))C(m.put(`${Q}/{id}`,Y),D);if(!s("PATCH",`${Q}/{id}`))C(m.patch(`${Q}/{id}`,Y),D)}let H=!!J.traits?.useSoftDeletes;if(z.includes("destroy")&&!s("DELETE",`${Q}/{id}`))C(m.delete(`${Q}/{id}`,async(Y)=>{try{let X=W$(Y.params?.id);if(X==null)return B({error:"Invalid ID parameter"},400);let x=await b.selectFrom(K).where({id:X}).executeTakeFirst();if(!x)return B({error:`${$} not found`},404);let T=await a(Y),E=await J$(J,T,Y);if(E.enforced&&!E.bypass){if(!T)return B({error:"Auth required"},401);let _=x[E.field];if(!$$(_,E.value))return B({error:`Not your ${$}`},403)}if(H){let _=new Date().toISOString();await b.updateTable(K).set({deleted_at:_,updated_at:_}).where({id:X}).execute()}else await b.deleteFrom(K).where({id:X}).execute();return new Response(null,{status:204})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to delete ${$}`,detail:String(X)},500)}}),D);if(z.includes("destroy")&&!s("POST",`${Q}/bulk-delete`))C(m.post(`${Q}/bulk-delete`,async(Y)=>{try{let x=(await I$(Y))?.ids;if(!Array.isArray(x)||x.length===0)return B({error:"An array of IDs is required"},422);if(x.length>100)return B({error:"Cannot delete more than 100 records at once"},422);let T=[],E=[];for(let F of x){let M=W$(F);if(M!=null)T.push(M);else E.push(F)}if(E.length>0)return B({error:"Invalid IDs in batch",invalid:E},422);let _=await a(Y),A=await J$(J,_,Y);if(A.enforced&&!A.bypass){if(!_)return B({error:"Auth required"},401);if(A.value==null)return B({error:"Caller has no ownership identity"},403);let F=await b.selectFrom(K).select(["id",A.field]).execute(),M=new Set(F.filter((P)=>$$(P[A.field],A.value)).map((P)=>String(P.id))),k=T.filter((P)=>!M.has(String(P)));if(k.length>0)return B({error:`Cannot delete ${$} you don't own`,ids:k},403)}let c=new Date().toISOString();for(let F of T)if(H)await b.updateTable(K).set({deleted_at:c,updated_at:c}).where({id:F}).execute();else await b.deleteFrom(K).where({id:F}).execute();return B({message:`Successfully deleted ${T.length} ${Z}`})}catch(X){if(X instanceof n){let x={error:X.message};if(X.details!==void 0)x.details=X.details;return B(x,X.status||400)}return B({error:`Failed to bulk delete ${Z}`,detail:String(X)},500)}}),D)}JJ=m});var GJ={};x$(GJ,{default:()=>JJ});var ZJ=d(async()=>{await OJ()});class M${data;status;headers;isOk;constructor($,J,O,G){this.data=$;this.status=J;this.headers=O;this.isOk=G}ok(){return this.status===200}created(){return this.status===201}accepted(){return this.status===202}noContent(){return this.status===204}movedPermanently(){return this.status===301}found(){return this.status===302}badRequest(){return this.status===400}unauthorized(){return this.status===401}paymentRequired(){return this.status===402}forbidden(){return this.status===403}notFound(){return this.status===404}requestTimeout(){return this.status===408}conflict(){return this.status===409}unprocessableEntity(){return this.status===422}tooManyRequests(){return this.status===429}serverError(){return this.status===500}}class C${defaultHeaders={Accept:"application/json","Content-Type":"application/json"};queryParams;bodyData;isFormData=!1;customHeaders={};attachments=[];isMultipart=!1;digestAuth;withQueryParams($){return this.queryParams=$,this}withHeaders($){return this.customHeaders={...this.customHeaders,...$},this}accept($){return this.defaultHeaders.Accept=$,this}acceptJson(){return this.accept("application/json")}withToken($){return this.customHeaders.Authorization=`Bearer ${$}`,this}withBasicAuth($,J){let O=btoa(`${$}:${J}`);return this.customHeaders.Authorization=`Basic ${O}`,this}withDigestAuth($,J){return this.digestAuth={username:$,password:J},this}withBody($){return this.bodyData=$,this}asForm(){return this.isFormData=!0,this.defaultHeaders["Content-Type"]="application/x-www-form-urlencoded",this}attach($,J,O,G){let Z=typeof J==="string"?new Blob([J],{type:G?.["Content-Type"]||"text/plain"}):J;return this.attachments.push({name:$,content:Z,filename:O,headers:G}),this.isMultipart=!0,delete this.defaultHeaders["Content-Type"],this}getHeaders(){return{...this.defaultHeaders,...this.customHeaders}}addQueryParams($){if(!this.queryParams)return $;let J=new URLSearchParams;Object.entries(this.queryParams).forEach(([Z,z])=>{if(z!=null)J.append(Z,String(z))});let O=J.toString();if(!O)return $;let G=$.includes("?");return $+(G?"&":"?")+O}async formatBody($){let J=$||this.bodyData;if(this.isMultipart){let O=new FormData;if(J)Object.entries(J).forEach(([G,Z])=>{O.append(G,String(Z))});for(let G of this.attachments)if(G.headers){let Z=G.content instanceof Blob?new Blob([G.content],{type:G.headers["Content-Type"]}):G.content;O.append(G.name,Z,G.filename)}else O.append(G.name,G.content,G.filename);return O}if(this.isFormData&&J){let O=new URLSearchParams;return Object.entries(J).forEach(([G,Z])=>{if(Z!=null)O.append(G,String(Z))}),O.toString()}return J?JSON.stringify(J):void 0}resetState(){this.queryParams=void 0,this.bodyData=void 0,this.isFormData=!1,this.isMultipart=!1,this.customHeaders={},this.attachments=[],this.digestAuth=void 0,this.defaultHeaders["Content-Type"]="application/json"}async handleDigestAuth($,J,O,G){if($.status!==401||!this.digestAuth)return $;let Z=$.headers.get("WWW-Authenticate");if(!Z?.startsWith("Digest "))return $;let z=Z.substring(7).split(",").reduce((V,N)=>{let[y,I]=N.trim().split("=");if(y)V[y]=I?.replace(/["']/g,"")??"";return V},{}),K=await this.generateMD5(`${this.digestAuth.username}:${z.realm}:${this.digestAuth.password}`),W=await this.generateMD5(`${O}:${J}`),L="00000001",Q=await this.generateMD5(Date.now().toString()).then((V)=>V.substring(0,8)),j=await this.generateMD5(`${K}:${z.nonce}:${L}:${Q}:${z.qop}:${W}`),U={username:`"${this.digestAuth.username}"`,realm:`"${z.realm}"`,nonce:`"${z.nonce}"`,uri:`"${J}"`,algorithm:z.algorithm?`"${z.algorithm}"`:void 0,qop:`"${z.qop}"`,nc:L,cnonce:`"${Q}"`,response:`"${j}"`,opaque:z.opaque?`"${z.opaque}"`:void 0},D=Object.entries(U).filter(([V,N])=>N!==void 0).map(([V,N])=>`${V}=${N}`).join(", ");return this.customHeaders.Authorization=`Digest ${D}`,fetch(J,{method:O,headers:this.getHeaders(),body:G?this.formatBody(G):void 0})}async generateMD5($){let O=new TextEncoder().encode($),G=await crypto.subtle.digest("SHA-256",O);return Array.from(new Uint8Array(G)).map((z)=>z.toString(16).padStart(2,"0")).join("")}async request($,J,O){let G=this.addQueryParams($),Z=await this.formatBody(O),z=await fetch(G,{method:J,headers:this.getHeaders(),body:Z});if(this.digestAuth)z=await this.handleDigestAuth(z,G,J,O);let K=await z.json();return this.resetState(),new M$(K,z.status,z.headers,z.ok)}async get($){return this.request($,"GET")}async post($,J){return this.request($,"POST",J)}async put($,J){return this.request($,"PUT",J)}async patch($,J){return this.request($,"PATCH",J)}async delete($){return this.request($,"DELETE")}}var nJ=new C$;B$();import{path as Y$}from"@stacksjs/path";function vJ($){if(!$||typeof $!=="object")return{type:"string"};let J=$,O=Array.isArray(J.rules)?J.rules:[],G=(j)=>O.find((U)=>U.name===j),Z=(j,U)=>{let D=G(j)?.params?.[U];return typeof D==="number"?D:void 0},z=J.name??J._type??"string",K={type:z==="enum"?"string":z},W=Z("min","min")??(typeof J._min==="number"?J._min:void 0),L=Z("max","max")??(typeof J._max==="number"?J._max:void 0);if(W!==void 0)K[z==="string"?"minLength":"minimum"]=W;if(L!==void 0)K[z==="string"?"maxLength":"maximum"]=L;if(G("email")||J._email)K.format="email";if(G("url")||J._url)K.format="uri";if(G("uuid")||J._uuid)K.format="uuid";let Q=Array.isArray(J.allowedValues)?J.allowedValues:Array.isArray(J._enum)?J._enum:null;if(Q)K.enum=Q;return K}function hJ($){if(!$||typeof $!=="object")return!1;let J=$;return Boolean(J.isRequired??J._required)}async function pJ($){if(typeof $!=="string"||!$||$.includes(".."))return null;try{let{path:J}=await import("@stacksjs/path"),O=[J.appPath(`${$}.ts`),J.storagePath(`framework/defaults/app/${$}.ts`)];for(let G of O)try{if(!await Bun.file(G).exists())continue;let K=(await import(G)).default;if(K&&typeof K==="object"&&"validations"in K){let W=K.validations;return W&&typeof W==="object"?W:null}return null}catch{}}catch{}return null}async function WO($={}){let J=$.portable??!0,{listRegisteredRoutes:O}=await import("@stacksjs/router");try{let{loadRoutes:L}=await import("@stacksjs/router"),{default:Q}=await import(Y$.appPath("Routes.ts"));await L(Q)}catch(L){let Q=L instanceof Error?L.message:String(L);if(J)throw Error(`[generateOpenApi] Refusing to emit a partial spec: failed to load routes/api.ts + framework routes: ${Q}`);console.warn(`[generateOpenApi] Failed to load routes/api.ts + framework routes: ${Q}`)}try{try{await import("@stacksjs/orm/routes")}catch{await ZJ().then(() => GJ)}}catch(L){let Q=L instanceof Error?L.message:String(L);if(J)throw Error(`[generateOpenApi] Refusing to emit a partial spec: failed to load useApi-generated ORM routes: ${Q}`);console.warn(`[generateOpenApi] Failed to load useApi-generated ORM routes: ${Q}`)}let G=(L)=>L.replace(/(^|\/):(\w+)(?=$|\/)/g,"$1{$2}"),Z=[...O()].map((L)=>({route:L,oasPath:G(L.path),method:L.method.toLowerCase()})).sort((L,Q)=>{if(L.oasPath!==Q.oasPath)return L.oasPath<Q.oasPath?-1:1;return L.method<Q.method?-1:L.method>Q.method?1:0});if(J&&Z.length===0)throw Error("[generateOpenApi] Refusing to emit an empty spec: no routes were registered. This usually means route loading failed silently rather than that the app has no API.");let z="Stacks API";if(!J)try{let{config:L}=await import("@stacksjs/config");if(L.app?.name)z=`${L.app.name} API`}catch{}let K={openapi:"3.0.0",info:{title:z,version:"1.0.0"},paths:{},components:{schemas:{}}},W=new Set;for(let{route:L,oasPath:Q,method:j}of Z){if(!K.paths[Q])K.paths[Q]={};let U=[];for(let I of L.path.matchAll(/\{(\w+)\}/g))if(I[1])U.push(I[1]);for(let I of L.path.matchAll(/(?:^|\/):(\w+)(?=$|\/)/g))if(I[1])U.push(I[1]);let D=L.name??`${j}_${Q.replace(/[^a-z0-9]/gi,"_")}`,V=D;if(W.has(V)){V=`${D}_${j}`;let I=2;while(W.has(V))V=`${D}_${j}_${I++}`}W.add(V);let N={summary:L.name??L.path,operationId:V,parameters:U.map((I)=>({name:I,in:"path",required:!0,schema:{type:"string"}})),responses:{200:{description:"Successful response",content:{"application/json":{schema:{type:"object"}}}},422:{description:"Validation failed"},500:{description:"Server error"}}},y=L.handler?await pJ(L.handler):null;if(y&&Object.keys(y).length>0){let I=Object.entries(y).map(([q,C])=>{let H=C?.rule;return{field:q,schema:vJ(H),required:hJ(H)}});if(j==="get"||j==="head"||j==="delete"){let q=new Set(U);for(let{field:C,schema:H,required:Y}of I){if(q.has(C))continue;N.parameters?.push({name:C,in:"query",required:Y,schema:H})}}else{let q={type:"object",properties:{},required:[]},C=q.properties,H=q.required;for(let Y of I)if(C[Y.field]=Y.schema,Y.required)H.push(Y.field);if(H.length===0)delete q.required;N.requestBody={required:H.length>0,content:{"application/json":{schema:q}}}}}K.paths[Q][j]=N}if($.write!==!1){let Q=Bun.file(Y$.frameworkPath("api/openapi.json")).writer();Q.write(JSON.stringify(K,null,2)),await Q.end();let{renderOpenApiTypes:j}=await Promise.resolve().then(() => (z$(),R$)),{renderApiClient:U}=await Promise.resolve().then(() => (B$(),f$));await Bun.write(Y$.frameworkPath("api/api-types.ts"),j(K)),await Bun.write(Y$.frameworkPath("api/client.ts"),U(K,{name:K.info.title}))}return K}z$();class v{static instance=new v;isMissing(){return!0}}class G${data;constructor($){this.data=$}}class zJ{condition;value;defaultValue;constructor($,J,O=new v){this.condition=$;this.value=J;this.defaultValue=O}resolve(){return(typeof this.condition==="function"?this.condition():this.condition)?this.value:this.defaultValue}}class KJ{resource;additional={};request;static wrap="data";static additionalMeta={};constructor($){this.resource=$}withRequest($){return this.request=$,this}withAdditional($){return this.additional={...this.additional,...$},this}resolve($){let J=this.toArray($||this.request);return this.filterAndResolve(J)}toResponse($){let J=this.resolve($),O=this.constructor.wrap;if(O)return{[O]:J,...this.additional};return{...J,...this.additional}}toJson($){return JSON.stringify(this.toResponse($))}toJSON(){return this.toResponse()}static collection($){return new F$($,this)}when($,J,O){if(typeof $==="function"?$():$)return typeof J==="function"?J():J;return O!==void 0?O:v.instance}whenNotNull($,J){if($===null||$===void 0)return v.instance;return J?J($):$}whenLoaded($,J,O){let G=this.resource;if(!(($ in G)&&G[$]!==void 0))return O!==void 0?O:v.instance;if(J!==void 0)return typeof J==="function"?J():J;return G[$]}whenCounted($,J){let O=this.resource,G=`${$}_count`;if(G in O)return O[G];return J!==void 0?J:v.instance}merge($){return new G$($)}mergeWhen($,J){if(!(typeof $==="function"?$():$))return v.instance;let G=typeof J==="function"?J():J;return new G$(G)}static MAX_RESOLVE_DEPTH=20;filterAndResolve($,J=0){if(J>=KJ.MAX_RESOLVE_DEPTH)return $;let O={};for(let[G,Z]of Object.entries($)){if(Z instanceof v)continue;if(Z instanceof G$){Object.assign(O,this.filterAndResolve(Z.data,J+1));continue}if(Z instanceof zJ){let z=Z.resolve();if(!(z instanceof v))O[G]=z;continue}if(Z!==null&&typeof Z==="object"&&!Array.isArray(Z)&&!(Z instanceof Date)){O[G]=this.filterAndResolve(Z,J+1);continue}if(Array.isArray(Z)){O[G]=Z.filter((z)=>!(z instanceof v)).map((z)=>{if(z instanceof G$)return z.data;if(z!==null&&typeof z==="object"&&!(z instanceof Date))return this.filterAndResolve(z,J+1);return z});continue}O[G]=Z}return O}static withoutWrapping(){this.wrap=null}static wrapWith($){this.wrap=$}}class F${resources;ResourceClass;additional={};request;static wrap="data";constructor($,J){this.resources=$,this.ResourceClass=J}withRequest($){return this.request=$,this}withAdditional($){return this.additional={...this.additional,...$},this}resolve($){let J=$||this.request;return this.resources.map((O)=>{let G=new this.ResourceClass(O);if(J)G.withRequest(J);return G.resolve(J)})}toResponse($){let J=this.resolve($),O=this.constructor.wrap;if(O)return{[O]:J,...this.additional};return{data:J,...this.additional}}toJson($){return JSON.stringify(this.toResponse($))}count(){return this.resources.length}isEmpty(){return this.resources.length===0}isNotEmpty(){return this.resources.length>0}}class QJ extends F${meta;links;constructor($,J){super($.data,J);this.meta=$.meta,this.links=$.links}static fromPagination($,J,O){let{currentPage:G,perPage:Z,total:z,baseUrl:K=""}=O,W=Math.ceil(z/Z),L=z>0?(G-1)*Z+1:null,Q=z>0?Math.min(G*Z,z):null;return new QJ({data:$,meta:{current_page:G,from:L,last_page:W,per_page:Z,to:Q,total:z},links:{first:`${K}?page=1`,last:`${K}?page=${W}`,prev:G>1?`${K}?page=${G-1}`:null,next:G<W?`${K}?page=${G+1}`:null}},J)}toResponse($){return{data:this.resolve($),meta:this.meta,links:this.links,...this.additional}}}function YO($,J){let O=J($);return{toResponse:()=>({data:O}),toJson:()=>JSON.stringify({data:O})}}function xO($,J){let O=$.map(J);return{toResponse:()=>({data:O}),toJson:()=>JSON.stringify({data:O})}}export{w as schemaType,vJ as ruleToSchema,hJ as ruleIsRequired,YO as resource,_J as renderOpenApiTypes,DJ as renderApiClient,P$ as methodName,WO as generateOpenApi,nJ as fetcher,xO as collection,F$ as ResourceCollection,QJ as PaginatedResourceCollection,v as MissingValue,G$ as MergeValue,KJ as JsonResource,zJ as ConditionalValue};

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/api",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.358",
+  "version": "0.70.362",
   "description": "The Stacks API utilities.",
   "author": "Chris Breuer",
   "contributors": [
@@ -62,6 +62,6 @@
   },
   "devDependencies": {
     "better-dx": "^0.2.17",
-    "@stacksjs/utils": "0.70.358"
+    "@stacksjs/utils": "0.70.362"
   }
 }