@ultrst-armada/kloks 1.7.1 → 1.8.0

package/packages/backend/dist/services/index.js

@@ -14,10 +14,11 @@ import {
 } from "../chunk-RBF2OGMC.js";
 import {
   workspaceGraphService
-} from "../chunk-F6IDQLC2.js";
-import "../chunk-R45CEV46.js";
+} from "../chunk-5RXXC6GE.js";
 import "../chunk-6K75XXFD.js";
 import "../chunk-VAFCR2MS.js";
+import "../chunk-SHZAQTIT.js";
+import "../chunk-KKRWZDMN.js";
 import "../chunk-TY32TUNI.js";
 export {
   CompositeBackend,

package/packages/backend/dist/srkl/index.js

@@ -16,8 +16,8 @@ import {
   getSrklAccounts,
   srklListBackblazeBuckets
 } from "../chunk-XHADDA75.js";
-import "../chunk-4QEMALXF.js";
 import "../chunk-VAFCR2MS.js";
+import "../chunk-4QEMALXF.js";
 export {
   CANONICAL_SRKL_URL,
   SrklClient,

package/packages/backend/dist/storage/index.d.ts

@@ -1,5 +1,5 @@
-import { B as BaseStorageAdapter, S as StorageConfig, F as FileInfo, D as DeleteFolderResult, R as RenameFolderResult, C as ConnectionTestResult } from '../BaseStorageAdapter-6x_BQiB3.js';
-export { a as StorageMode, b as StorageProviderType, U as UploadResult } from '../BaseStorageAdapter-6x_BQiB3.js';
+import { B as BaseStorageAdapter, S as StorageConfig, F as FileInfo, D as DeleteFolderResult, R as RenameFolderResult, C as ConnectionTestResult } from '../BaseStorageAdapter-EUCSvJse.js';
+export { a as StorageMode, b as StorageProviderType, U as UploadResult } from '../BaseStorageAdapter-EUCSvJse.js';
 import '@ultrst-armada/kloks/functions';
 
 declare class LocalFSAdapter extends BaseStorageAdapter {

package/packages/backend/dist/storage/index.js

@@ -1,31 +1,33 @@
 import {
   S3Adapter
-} from "../chunk-JUPWFW7V.js";
+} from "../chunk-RBQ4CW3T.js";
+import {
+  authorizeB2,
+  b2DownloadFile,
+  b2ListBuckets,
+  b2ListFileNames,
+  b2UploadFile
+} from "../chunk-4QEMALXF.js";
 import {
   BackblazeB2Adapter,
-  BaseStorageAdapter,
-  GoogleDriveAdapter,
   LocalFSAdapter,
   StorageAdapterFactory,
   SupabaseStorageAdapter,
-  createGoogleDriveAuthorizationUrl,
   ensureS3DirectoryMarker,
-  exchangeGoogleDriveCode,
   isSecretMasked,
   normalizeBackblazeCredentials,
   permanentDeleteS3Folder,
   permanentDeleteS3Object,
-  refreshGoogleDriveAccessToken,
   renameS3Folder,
   resolveBackblazeEndpoint
-} from "../chunk-R45CEV46.js";
+} from "../chunk-SHZAQTIT.js";
 import {
-  authorizeB2,
-  b2DownloadFile,
-  b2ListBuckets,
-  b2ListFileNames,
-  b2UploadFile
-} from "../chunk-4QEMALXF.js";
+  BaseStorageAdapter,
+  GoogleDriveAdapter,
+  createGoogleDriveAuthorizationUrl,
+  exchangeGoogleDriveCode,
+  refreshGoogleDriveAccessToken
+} from "../chunk-KKRWZDMN.js";
 export {
   BackblazeB2Adapter,
   BaseStorageAdapter,

package/packages/backend/dist/workspace/index.d.ts

@@ -1,4 +1,4 @@
-import { B as BaseStorageAdapter, F as FileInfo } from '../BaseStorageAdapter-6x_BQiB3.js';
+import { B as BaseStorageAdapter, F as FileInfo } from '../BaseStorageAdapter-EUCSvJse.js';
 import { SkipoBase } from '@ultrst-armada/kloks/functions';
 
 interface WorkspaceDescriptor {

package/packages/backend/dist/workspace/index.js

@@ -6,13 +6,14 @@ import {
   WorkspaceFS,
   remoteWorkspaceService,
   workingWorkspaceService
-} from "../chunk-6W7OAGNV.js";
+} from "../chunk-BTMIK44G.js";
 import {
   formatCanonicalWorkspaceFolderName,
   sanitizeWorkspaceName
 } from "../chunk-FZKBTF34.js";
 import "../chunk-6K75XXFD.js";
 import "../chunk-VAFCR2MS.js";
+import "../chunk-KKRWZDMN.js";
 export {
   RemoteWorkspaceService,
   SyncEngine,

package/packages/backend/dist/chunk-ZDH4XI7W.js

@@ -1,140 +0,0 @@
-// src/auth/SessionManager.ts
-var SessionManager = class {
-  ttl;
-  constructor(ttlMs = 864e5) {
-    this.ttl = ttlMs;
-  }
-  generateToken(userId) {
-    return `sess::${userId}::${Date.now()}::${Math.random().toString(36).substring(2, 9)}`;
-  }
-  createSession(userId, role) {
-    return {
-      token: this.generateToken(userId),
-      userId,
-      role,
-      expiresAt: Date.now() + this.ttl
-    };
-  }
-  isValid(session) {
-    return Date.now() < session.expiresAt;
-  }
-};
-
-// src/auth/RateLimiter.ts
-var RateLimiter = class {
-  attempts = /* @__PURE__ */ new Map();
-  windowMs;
-  maxUser;
-  maxAdmin;
-  constructor(windowMs = 9e5, maxUser = 5, maxAdmin = 3) {
-    this.windowMs = windowMs;
-    this.maxUser = maxUser;
-    this.maxAdmin = maxAdmin;
-  }
-  check(identifier, isAdminAttempt = false) {
-    const now = Date.now();
-    let record = this.attempts.get(identifier);
-    if (!record || now - record.windowStart > this.windowMs) {
-      record = { count: 0, windowStart: now };
-      this.attempts.set(identifier, record);
-    }
-    record.count++;
-    const limit = isAdminAttempt ? this.maxAdmin : this.maxUser;
-    if (record.count > limit) {
-      throw new Error("Too many requests. Please try again later.");
-    }
-  }
-  reset(identifier) {
-    this.attempts.delete(identifier);
-  }
-};
-
-// src/auth/UnifiedAuthCore.ts
-import bcrypt from "bcryptjs";
-async function loginSystemUser(email, rawPass, isAdmin, queryDb) {
-  const normEmail = (email || "").trim().toLowerCase();
-  const password = (rawPass || "").trim();
-  if (!normEmail || !password) {
-    return { success: false, status: 400, error: "Email and password are required" };
-  }
-  try {
-    if (isAdmin) {
-      const credRes = await queryDb(`SELECT * FROM "ultrst-credentials" WHERE id = 'system' LIMIT 1`, []);
-      if (credRes.rows.length > 0) {
-        const cred = credRes.rows[0];
-        const matchEmail = (cred.admin_email || "").toLowerCase() === normEmail;
-        const matchPass = cred.admin_password === password || cred.admin_password && bcrypt.compareSync(password, cred.admin_password);
-        if (matchEmail && matchPass) {
-          return {
-            success: true,
-            status: 200,
-            token: `adm_${Date.now()}_${Math.random().toString(36).slice(2)}`,
-            user: { id: "admin_sys", email: cred.admin_email, username: "System Admin", name: "System Admin", role: "admin", status: "ACTIVE" }
-          };
-        }
-      }
-    }
-    const uRes = await queryDb(`SELECT * FROM "ultrst-users" WHERE LOWER(email) = $1 LIMIT 1`, [normEmail]);
-    if (uRes.rows.length === 0) {
-      return { success: false, status: 401, error: "Invalid email or password" };
-    }
-    const user = uRes.rows[0];
-    const hash = user.password_hash || "";
-    let isMatch = false;
-    if (hash.startsWith("$2a$") || hash.startsWith("$2b$")) {
-      isMatch = bcrypt.compareSync(password, hash);
-    } else {
-      isMatch = hash === password;
-    }
-    if (!isMatch) {
-      return { success: false, status: 401, error: "Invalid email or password" };
-    }
-    if (isAdmin && user.role !== "admin") {
-      return { success: false, status: 403, error: "Insufficient administrative privileges" };
-    }
-    return {
-      success: true,
-      status: 200,
-      token: `usr_${Date.now()}_${Math.random().toString(36).slice(2)}`,
-      user: {
-        id: user.id,
-        email: user.email,
-        username: user.username || user.name || user.email.split("@")[0],
-        name: user.name || user.username || "Ecosystem User",
-        role: user.role || "user",
-        status: user.status || "ACTIVE",
-        appProfiles: typeof user.app_profiles === "string" ? JSON.parse(user.app_profiles) : user.app_profiles || {}
-      }
-    };
-  } catch (err) {
-    return { success: false, status: 500, error: err.message };
-  }
-}
-async function resolveUserFromToken(tokenOrUserId, queryDb) {
-  if (!tokenOrUserId) return null;
-  let targetId = tokenOrUserId;
-  if (targetId.startsWith("Bearer ")) targetId = targetId.slice(7).trim();
-  if (targetId.startsWith("sess::")) {
-    const parts = targetId.split("::");
-    if (parts[1]) targetId = parts[1];
-  }
-  const res = await queryDb(`SELECT * FROM "ultrst-users" WHERE id = $1 OR LOWER(email) = LOWER($1) LIMIT 1`, [targetId]);
-  if (res.rows.length === 0) return null;
-  const u = res.rows[0];
-  return {
-    id: u.id,
-    email: u.email,
-    username: u.username || u.name || u.email.split("@")[0],
-    name: u.name || u.username || "Ecosystem User",
-    role: u.role || "user",
-    status: u.status || "ACTIVE",
-    appProfiles: typeof u.app_profiles === "string" ? JSON.parse(u.app_profiles) : u.app_profiles || {}
-  };
-}
-
-export {
-  SessionManager,
-  RateLimiter,
-  loginSystemUser,
-  resolveUserFromToken
-};