@vitnode/core 1.2.0-canary.74 → 1.2.0-canary.76

package/dist/src/api/models/device.js

@@ -1 +1,2 @@
-import{eq}from"drizzle-orm";import{getCookie,setCookie}from"hono/cookie";import{randomBytes}from"node:crypto";import{core_sessions_known_devices}from"../../database/sessions.js";import{CONFIG}from"../../lib/config.js";export class DeviceModel{constructor(c){this.c=c}c;async createDevice(){const publicId=randomBytes(16).toString("hex");const[device]=await this.c.get("db").insert(core_sessions_known_devices).values({publicId,ipAddress:this.c.get("ipAddress"),userAgent:this.getUserAgent()}).returning({id:core_sessions_known_devices.id});this.setCookieDevice(publicId);return{id:device.id,publicId}}getUserAgent(){return this.c.req.header("User-Agent")??"node"}setCookieDevice(publicDeviceId){setCookie(this.c,this.c.get("core").authorization.deviceCookieName,publicDeviceId,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",domain:CONFIG.web.hostname,expires:new Date(Date.now()+this.c.get("core").authorization.deviceCookieExpires)})}async getDeviceId(){const deviceIdFromCookie=getCookie(this.c,this.c.get("core").authorization.deviceCookieName);try{if(deviceIdFromCookie){const[device]=await this.c.get("db").select({id:core_sessions_known_devices.id}).from(core_sessions_known_devices).where(eq(core_sessions_known_devices.publicId,deviceIdFromCookie));if(!device){return await this.createDevice()}await this.c.get("db").update(core_sessions_known_devices).set({ipAddress:this.c.get("ipAddress"),userAgent:this.getUserAgent()}).where(eq(core_sessions_known_devices.publicId,deviceIdFromCookie));return{id:device.id,publicId:deviceIdFromCookie}}}catch{}return await this.createDevice()}}
+import{CONFIG as e}from"../../lib/config.js";import{core_sessions_known_devices as t}from"../../database/sessions.js";import{eq as n}from"drizzle-orm";import{randomBytes as r}from"node:crypto";import{getCookie as i,setCookie as a}from"hono/cookie";var o=class{constructor(e){this.c=e}c;async createDevice(){let e=r(16).toString(`hex`),[n]=await this.c.get(`db`).insert(t).values({publicId:e,ipAddress:this.c.get(`ipAddress`),userAgent:this.getUserAgent()}).returning({id:t.id});return this.setCookieDevice(e),{id:n.id,publicId:e}}getUserAgent(){return this.c.req.header(`User-Agent`)??`node`}setCookieDevice(t){a(this.c,this.c.get(`core`).authorization.deviceCookieName,t,{httpOnly:!0,secure:this.c.get(`core`).authorization.cookieSecure,path:`/`,domain:e.web.hostname,expires:new Date(Date.now()+this.c.get(`core`).authorization.deviceCookieExpires)})}async getDeviceId(){let e=i(this.c,this.c.get(`core`).authorization.deviceCookieName);try{if(e){let[r]=await this.c.get(`db`).select({id:t.id}).from(t).where(n(t.publicId,e));return r?(await this.c.get(`db`).update(t).set({ipAddress:this.c.get(`ipAddress`),userAgent:this.getUserAgent()}).where(n(t.publicId,e)),{id:r.id,publicId:e}):await this.createDevice()}}catch{}return await this.createDevice()}};export{o as DeviceModel};
+//# sourceMappingURL=device.js.map

package/dist/src/api/models/device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.js","names":[],"sources":["../../../../src/api/models/device.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq } from \"drizzle-orm\";\nimport { getCookie, setCookie } from \"hono/cookie\";\nimport { randomBytes } from \"node:crypto\";\n\nimport { core_sessions_known_devices } from \"@/database/sessions\";\nimport { CONFIG } from \"@/lib/config\";\n\nexport class DeviceModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n  protected readonly c: Context;\n\n  private async createDevice() {\n    const publicId = randomBytes(16).toString(\"hex\");\n\n    const [device] = await this.c\n      .get(\"db\")\n      .insert(core_sessions_known_devices)\n      .values({\n        publicId,\n        ipAddress: this.c.get(\"ipAddress\"),\n        userAgent: this.getUserAgent(),\n      })\n      .returning({ id: core_sessions_known_devices.id });\n\n    this.setCookieDevice(publicId);\n\n    return { id: device.id, publicId };\n  }\n\n  private getUserAgent() {\n    return this.c.req.header(\"User-Agent\") ?? \"node\";\n  }\n\n  private setCookieDevice(publicDeviceId: string) {\n    setCookie(\n      this.c,\n      this.c.get(\"core\").authorization.deviceCookieName,\n      publicDeviceId,\n      {\n        httpOnly: true,\n        secure: this.c.get(\"core\").authorization.cookieSecure,\n        path: \"/\",\n        domain: CONFIG.web.hostname,\n        expires: new Date(\n          Date.now() + this.c.get(\"core\").authorization.deviceCookieExpires,\n        ),\n      },\n    );\n  }\n\n  async getDeviceId() {\n    const deviceIdFromCookie = getCookie(\n      this.c,\n      this.c.get(\"core\").authorization.deviceCookieName,\n    );\n\n    try {\n      if (deviceIdFromCookie) {\n        const [device] = await this.c\n          .get(\"db\")\n          .select({\n            id: core_sessions_known_devices.id,\n          })\n          .from(core_sessions_known_devices)\n          .where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));\n\n        if (!device) {\n          return await this.createDevice();\n        }\n\n        await this.c\n          .get(\"db\")\n          .update(core_sessions_known_devices)\n          .set({\n            ipAddress: this.c.get(\"ipAddress\"),\n            userAgent: this.getUserAgent(),\n          })\n          .where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));\n\n        return {\n          id: device.id,\n          publicId: deviceIdFromCookie,\n        };\n      }\n    } catch {\n      /* empty */\n    }\n\n    return await this.createDevice();\n  }\n}\n"],"mappings":"wPASA,IAAa,EAAb,KAAyB,CACvB,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CACA,EAEA,MAAc,cAAe,CAC3B,IAAM,EAAW,EAAY,EAAE,CAAC,CAAC,SAAS,KAAK,EAEzC,CAAC,GAAU,MAAM,KAAK,EACzB,IAAI,IAAI,CAAC,CACT,OAAO,CAA2B,CAAC,CACnC,OAAO,CACN,WACA,UAAW,KAAK,EAAE,IAAI,WAAW,EACjC,UAAW,KAAK,aAAa,CAC/B,CAAC,CAAC,CACD,UAAU,CAAE,GAAI,EAA4B,EAAG,CAAC,EAInD,OAFA,KAAK,gBAAgB,CAAQ,EAEtB,CAAE,GAAI,EAAO,GAAI,UAAS,CACnC,CAEA,cAAuB,CACrB,OAAO,KAAK,EAAE,IAAI,OAAO,YAAY,GAAK,MAC5C,CAEA,gBAAwB,EAAwB,CAC9C,EACE,KAAK,EACL,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,iBACjC,EACA,CACE,SAAU,GACV,OAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,aACzC,KAAM,IACN,OAAQ,EAAO,IAAI,SACnB,QAAS,IAAI,KACX,KAAK,IAAI,EAAI,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,mBAChD,CACF,CACF,CACF,CAEA,MAAM,aAAc,CAClB,IAAM,EAAqB,EACzB,KAAK,EACL,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,gBACnC,EAEA,GAAI,CACF,GAAI,EAAoB,CACtB,GAAM,CAAC,GAAU,MAAM,KAAK,EACzB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAA4B,EAClC,CAAC,CAAC,CACD,KAAK,CAA2B,CAAC,CACjC,MAAM,EAAG,EAA4B,SAAU,CAAkB,CAAC,EAerE,OAbK,GAIL,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAA2B,CAAC,CACnC,IAAI,CACH,UAAW,KAAK,EAAE,IAAI,WAAW,EACjC,UAAW,KAAK,aAAa,CAC/B,CAAC,CAAC,CACD,MAAM,EAAG,EAA4B,SAAU,CAAkB,CAAC,EAE9D,CACL,GAAI,EAAO,GACX,SAAU,CACZ,GAfS,MAAM,KAAK,aAAa,CAgBnC,CACF,MAAQ,CAER,CAEA,OAAO,MAAM,KAAK,aAAa,CACjC,CACF"}

package/dist/src/api/models/email.d.ts

@@ -1,43 +1,55 @@
-import type { Context, ContextVariableMap } from "hono";
-import type React from "react";
-import type { DefaultTemplateEmailProps } from "../../emails/default-template";
+import { DefaultTemplateEmailProps } from "../../emails/default-template.js";
+import React from "react";
+import { Context, ContextVariableMap } from "hono";
+//#region src/api/models/email.d.ts
 interface EmailModelSendArgsWithUser {
-    locale?: never;
-    to?: never;
-    user: {
-        email: string;
-        id: number;
-        language: string;
-        name?: string;
-        nameCode?: string;
-    };
+  locale?: never;
+  to?: never;
+  user: {
+    email: string;
+    id: number;
+    language: string;
+    name?: string;
+    nameCode?: string;
+  };
 }
 interface EmailModelSendArgsWithEmail {
-    locale: string;
-    to: string;
-    user?: never;
-}
-export interface EmailApiPlugin {
-    sendEmail: (args: {
-        html: string;
-        metadata: ContextVariableMap["core"]["metadata"];
-        replyTo?: string;
-        subject: string;
-        text: string;
-        to: string;
-    }) => Promise<void>;
+  locale: string;
+  to: string;
+  user?: never;
 }
-export type EmailModelSendArgs = {
-    content: (props: Omit<DefaultTemplateEmailProps, "children"> & Pick<EmailModelSendArgs, "user">) => React.ReactNode;
-    html?: string;
-    locale?: string;
+interface EmailApiPlugin {
+  sendEmail: (args: {
+    html: string;
+    metadata: ContextVariableMap["core"]["metadata"];
     replyTo?: string;
-    subject: ((props: Pick<DefaultTemplateEmailProps, "i18n">) => string) | string;
+    subject: string;
+    text: string;
+    to: string;
+  }) => Promise<void>;
+}
+type EmailModelSendArgs = {
+  content: (props: Omit<DefaultTemplateEmailProps, "children"> & Pick<EmailModelSendArgs, "user">) => React.ReactNode;
+  html?: string;
+  locale?: string;
+  replyTo?: string;
+  subject: ((props: Pick<DefaultTemplateEmailProps, "i18n">) => string) | string;
 } & (EmailModelSendArgsWithEmail | EmailModelSendArgsWithUser);
-export declare class EmailModel {
-    constructor(c: Context);
-    protected readonly c: Context;
-    send({ html, replyTo, subject, to, user, content, locale: localeFromArgs, }: EmailModelSendArgs): Promise<void>;
+interface BuiltEmail {
+  html: string;
+  replyTo?: string;
+  subject: string;
+  text: string;
+  to: string;
+}
+declare class EmailModel {
+  constructor(c: Context);
+  protected readonly c: Context;
+  private requireProvider;
+  build({ html, replyTo, subject, to, user, content, locale: localeFromArgs }: EmailModelSendArgs): Promise<BuiltEmail>;
+  deliver(email: BuiltEmail): Promise<void>;
+  send(args: EmailModelSendArgs): Promise<void>;
 }
-export {};
+//#endregion
+export { BuiltEmail, EmailApiPlugin, EmailModel, EmailModelSendArgs };
 //# sourceMappingURL=email.d.ts.map

package/dist/src/api/models/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/api/models/email.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI/E,UAAU,0BAA0B;IAClC,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,2BAA2B;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,CACP,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAChD,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAC/B,KAAK,CAAC,SAAS,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EACH,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,GAC5D,MAAM,CAAC;CAEZ,GAAG,CAAC,2BAA2B,GAAG,0BAA0B,CAAC,CAAC;AAE/D,qBAAa,UAAU;gBACT,CAAC,EAAE,OAAO;IAItB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EACT,IAAI,EACJ,OAAO,EACP,OAAO,EACP,EAAE,EACF,IAAI,EACJ,OAAO,EACP,MAAM,EAAE,cAAc,GACvB,EAAE,kBAAkB;CAkFtB"}
+{"version":3,"file":"email.d.ts","names":[],"sources":["../../../../src/api/models/email.ts"],"mappings":";;;;UAUU;EACR;EACA;EACA;IACE;IACA;IACA;IACA;IACA;;;UAIM;EACR;EACA;EACA;;UAGe;EACf,YAAY;IACV;IACA,UAAU;IACV;IACA;IACA;IACA;QACI;;KAGI;EACV,UACE,OAAO,KAAK,yCACV,KAAK,gCACJ,MAAM;EACX;EACA;EACA;EACA,WACI,OAAO,KAAK;KAEb,8BAA8B;UAElB;EACf;EACA;EACA;EACA;EACA;;cAGW;cACC,GAAG;qBAII,GAAG;UAEd;EAWF,QACJ,MACA,SACA,SACA,IACA,MACA,SACA,QAAQ,kBACP,qBAAqB,QAAQ;EAgE1B,QAAQ,OAAO,aAAa;EAa5B,KAAK,MAAM,qBAAqB"}

package/dist/src/api/models/email.js

@@ -1 +1,2 @@
-import{render}from"@react-email/components";import{HTTPException}from"hono/http-exception";import{CONFIG}from"../../lib/config.js";export class EmailModel{constructor(c){this.c=c}c;async send({html,replyTo,subject,to,user,content,locale:localeFromArgs}){const core=this.c.get("core");const provider=core.email?.adapter;if(!provider){throw new HTTPException(500,{message:"Email provider not found"})}const locale=localeFromArgs??user?.language??"en";const pluginIds=["@vitnode/core",...this.c.get("core").plugins.map(plugin=>plugin.id)];const messagesPromises=pluginIds.map(async pluginId=>{try{const path=`${pluginId}/${locale}.json`;const messages=await core.pathToMessages(path);return messages.default}catch{return{}}});const allMessages=await Promise.all(messagesPromises);const messages=Object.assign({},...allMessages);const htmlContent=html??content({i18n:{locale,messages},templateProps:{metadata:{...core.metadata,url:CONFIG.web.href},logo:core.email?.logo},user});const emailTo=user?.email??to;if(!emailTo){throw new HTTPException(400,{message:"Email address is required"})}try{await provider.sendEmail({html:await render(htmlContent),to:emailTo,subject:typeof subject==="function"?subject({i18n:{locale,messages}}):subject,replyTo,metadata:core.metadata,text:await render(htmlContent,{plainText:true})})}catch(err){const error=err instanceof Error?err:new Error("Unknown error from email provider");await this.c.get("log").error(`Failed to send email: ${error.message}`)}}}
+import{CONFIG as e}from"../../lib/config.js";import{HTTPException as t}from"hono/http-exception";import{render as n}from"react-email";var r=class{constructor(e){this.c=e}c;requireProvider(){let e=this.c.get(`core`).email?.adapter;if(!e)throw new t(500,{message:`Email provider not found`});return e}async build({html:r,replyTo:i,subject:a,to:o,user:s,content:c,locale:l}){let u=this.c.get(`core`),d=l??s?.language??`en`,f=[`@vitnode/core`,...u.plugins.map(e=>e.id)].map(async e=>{try{let t=`${e}/${d}.json`;return(await u.pathToMessages(t)).default}catch{return{}}}),p=await Promise.all(f),m=Object.assign({},...p),h=r??c({i18n:{locale:d,messages:m},templateProps:{metadata:{...u.metadata,url:e.web.href},logo:u.email?.logo},user:s}),g=s?.email??o;if(!g)throw new t(400,{message:`Email address is required`});return{to:g,subject:typeof a==`function`?a({i18n:{locale:d,messages:m}}):a,html:await n(h),text:await n(h,{plainText:!0}),replyTo:i}}async deliver(e){await this.requireProvider().sendEmail({html:e.html,to:e.to,subject:e.subject,replyTo:e.replyTo,metadata:this.c.get(`core`).metadata,text:e.text})}async send(e){this.requireProvider();let t=await this.build(e);await this.c.get(`queue`).dispatch({name:`send-email`,payload:{to:t.to,subject:t.subject,html:t.html,text:t.text,...t.replyTo?{replyTo:t.replyTo}:{}}})}};export{r as EmailModel};
+//# sourceMappingURL=email.js.map

package/dist/src/api/models/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","names":[],"sources":["../../../../src/api/models/email.ts"],"sourcesContent":["import type { Context, ContextVariableMap } from \"hono\";\nimport type React from \"react\";\n\nimport { HTTPException } from \"hono/http-exception\";\nimport { render } from \"react-email\";\n\nimport type { DefaultTemplateEmailProps } from \"../../emails/default-template\";\n\nimport { CONFIG } from \"../../lib/config\";\n\ninterface EmailModelSendArgsWithUser {\n  locale?: never;\n  to?: never;\n  user: {\n    email: string;\n    id: number;\n    language: string;\n    name?: string;\n    nameCode?: string;\n  };\n}\n\ninterface EmailModelSendArgsWithEmail {\n  locale: string;\n  to: string;\n  user?: never;\n}\n\nexport interface EmailApiPlugin {\n  sendEmail: (args: {\n    html: string;\n    metadata: ContextVariableMap[\"core\"][\"metadata\"];\n    replyTo?: string;\n    subject: string;\n    text: string;\n    to: string;\n  }) => Promise<void>;\n}\n\nexport type EmailModelSendArgs = {\n  content: (\n    props: Omit<DefaultTemplateEmailProps, \"children\"> &\n      Pick<EmailModelSendArgs, \"user\">,\n  ) => React.ReactNode;\n  html?: string;\n  locale?: string;\n  replyTo?: string;\n  subject:\n    ((props: Pick<DefaultTemplateEmailProps, \"i18n\">) => string) | string;\n  // eslint-disable-next-line perfectionist/sort-intersection-types\n} & (EmailModelSendArgsWithEmail | EmailModelSendArgsWithUser);\n\nexport interface BuiltEmail {\n  html: string;\n  replyTo?: string;\n  subject: string;\n  text: string;\n  to: string;\n}\n\nexport class EmailModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n\n  protected readonly c: Context;\n\n  private requireProvider() {\n    const provider = this.c.get(\"core\").email?.adapter;\n    if (!provider) {\n      throw new HTTPException(500, {\n        message: \"Email provider not found\",\n      });\n    }\n\n    return provider;\n  }\n\n  async build({\n    html,\n    replyTo,\n    subject,\n    to,\n    user,\n    content,\n    locale: localeFromArgs,\n  }: EmailModelSendArgs): Promise<BuiltEmail> {\n    const core = this.c.get(\"core\");\n    const locale = localeFromArgs ?? user?.language ?? \"en\";\n    const pluginIds: string[] = [\n      \"@vitnode/core\",\n      ...core.plugins.map(plugin => plugin.id),\n    ];\n\n    const messagesPromises = pluginIds.map(async pluginId => {\n      try {\n        const path = `${pluginId}/${locale}.json`;\n        const messages = await core.pathToMessages(path);\n\n        return messages.default;\n      } catch {\n        return {};\n      }\n    });\n\n    const allMessages = await Promise.all(messagesPromises);\n\n    // Optimize: Use Object.assign instead of reduce with spread operator\n    // to avoid creating intermediate objects on each iteration\n    const messages = Object.assign({}, ...allMessages) as Record<\n      string,\n      string\n    >;\n\n    const htmlContent =\n      html ??\n      content({\n        i18n: {\n          locale,\n          messages,\n        },\n        templateProps: {\n          metadata: {\n            ...core.metadata,\n            url: CONFIG.web.href,\n          },\n          logo: core.email?.logo,\n        },\n        user,\n      });\n\n    const emailTo = user?.email ?? to;\n    if (!emailTo) {\n      throw new HTTPException(400, {\n        message: \"Email address is required\",\n      });\n    }\n\n    return {\n      to: emailTo,\n      subject:\n        typeof subject === \"function\"\n          ? subject({ i18n: { locale, messages } })\n          : subject,\n      html: await render(htmlContent),\n      text: await render(htmlContent, { plainText: true }),\n      replyTo,\n    };\n  }\n\n  async deliver(email: BuiltEmail): Promise<void> {\n    const provider = this.requireProvider();\n\n    await provider.sendEmail({\n      html: email.html,\n      to: email.to,\n      subject: email.subject,\n      replyTo: email.replyTo,\n      metadata: this.c.get(\"core\").metadata,\n      text: email.text,\n    });\n  }\n\n  async send(args: EmailModelSendArgs): Promise<void> {\n    this.requireProvider();\n    const email = await this.build(args);\n\n    await this.c.get(\"queue\").dispatch({\n      name: \"send-email\",\n      payload: {\n        to: email.to,\n        subject: email.subject,\n        html: email.html,\n        text: email.text,\n        ...(email.replyTo ? { replyTo: email.replyTo } : {}),\n      },\n    });\n  }\n}\n"],"mappings":"sIA4DA,IAAa,EAAb,KAAwB,CACtB,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CAEA,EAEA,iBAA0B,CACxB,IAAM,EAAW,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,OAAO,QAC3C,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,0BACX,CAAC,EAGH,OAAO,CACT,CAEA,MAAM,MAAM,CACV,OACA,UACA,UACA,KACA,OACA,UACA,OAAQ,GACkC,CAC1C,IAAM,EAAO,KAAK,EAAE,IAAI,MAAM,EACxB,EAAS,GAAkB,GAAM,UAAY,KAM7C,EAAmB,CAJvB,gBACA,GAAG,EAAK,QAAQ,IAAI,GAAU,EAAO,EAAE,CAGR,CAAC,CAAC,IAAI,KAAM,IAAY,CACvD,GAAI,CACF,IAAM,EAAO,GAAG,EAAS,GAAG,EAAO,OAGnC,OAAO,MAFgB,EAAK,eAAe,CAAI,EAAA,CAE/B,OAClB,MAAQ,CACN,MAAO,CAAC,CACV,CACF,CAAC,EAEK,EAAc,MAAM,QAAQ,IAAI,CAAgB,EAIhD,EAAW,OAAO,OAAO,CAAC,EAAG,GAAG,CAAW,EAK3C,EACJ,GACA,EAAQ,CACN,KAAM,CACJ,SACA,UACF,EACA,cAAe,CACb,SAAU,CACR,GAAG,EAAK,SACR,IAAK,EAAO,IAAI,IAClB,EACA,KAAM,EAAK,OAAO,IACpB,EACA,MACF,CAAC,EAEG,EAAU,GAAM,OAAS,EAC/B,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,2BACX,CAAC,EAGH,MAAO,CACL,GAAI,EACJ,QACE,OAAO,GAAY,WACf,EAAQ,CAAE,KAAM,CAAE,SAAQ,UAAS,CAAE,CAAC,EACtC,EACN,KAAM,MAAM,EAAO,CAAW,EAC9B,KAAM,MAAM,EAAO,EAAa,CAAE,UAAW,EAAK,CAAC,EACnD,SACF,CACF,CAEA,MAAM,QAAQ,EAAkC,CAG9C,MAFiB,KAAK,gBAET,CAAC,CAAC,UAAU,CACvB,KAAM,EAAM,KACZ,GAAI,EAAM,GACV,QAAS,EAAM,QACf,QAAS,EAAM,QACf,SAAU,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,SAC7B,KAAM,EAAM,IACd,CAAC,CACH,CAEA,MAAM,KAAK,EAAyC,CAClD,KAAK,gBAAgB,EACrB,IAAM,EAAQ,MAAM,KAAK,MAAM,CAAI,EAEnC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,SAAS,CACjC,KAAM,aACN,QAAS,CACP,GAAI,EAAM,GACV,QAAS,EAAM,QACf,KAAM,EAAM,KACZ,KAAM,EAAM,KACZ,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,OAAQ,EAAI,CAAC,CACpD,CACF,CAAC,CACH,CACF"}

package/dist/src/api/models/password.d.ts

@@ -1,9 +1,12 @@
-export declare class PasswordModel {
-    encryptPassword(password: string): Promise<string>;
-    verifyPassword(password: string, hash: string): Promise<boolean>;
+//#region src/api/models/password.d.ts
+declare class PasswordModel {
+  encryptPassword(password: string): Promise<string>;
+  verifyPassword(password: string, hash: string): Promise<boolean>;
 }
-export declare class ForgotPasswordTokenModel {
-    generateResetToken(): string;
-    hashResetToken(token: string): string;
+declare class ForgotPasswordTokenModel {
+  generateResetToken(): string;
+  hashResetToken(token: string): string;
 }
+//#endregion
+export { ForgotPasswordTokenModel, PasswordModel };
 //# sourceMappingURL=password.d.ts.map

package/dist/src/api/models/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/api/models/password.ts"],"names":[],"mappings":"AAEA,qBAAa,aAAa;IAClB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYlD,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBvE;AAED,qBAAa,wBAAwB;IACnC,kBAAkB;IAIlB,cAAc,CAAC,KAAK,EAAE,MAAM;CAG7B"}
+{"version":3,"file":"password.d.ts","names":[],"sources":["../../../../src/api/models/password.ts"],"mappings":";cAEa;EACL,gBAAgB,mBAAmB;EAYnC,eAAe,kBAAkB,eAAe;;cAoB3C;EACX;EAIA,eAAe"}

package/dist/src/api/models/password.js

@@ -1 +1,2 @@
-import crypto from"node:crypto";export class PasswordModel{async encryptPassword(password){return await new Promise((resolve,reject)=>{const salt=crypto.randomBytes(8).toString("hex");crypto.scrypt(password,salt,64,(err,derivedKey)=>{if(err)reject(err);resolve(`${salt}:${derivedKey.toString("hex")}`)})})}async verifyPassword(password,hash){return await new Promise((resolve,reject)=>{const[salt,key]=hash.split(":");const keyBuffer=Buffer.from(key,"hex");crypto.scrypt(password,salt,64,(err,derivedKey)=>{if(err)reject(err);if(keyBuffer.length!==derivedKey.length){crypto.timingSafeEqual(derivedKey,derivedKey);resolve(false)}else{const areEqual=crypto.timingSafeEqual(keyBuffer,derivedKey);resolve(areEqual)}})})}}export class ForgotPasswordTokenModel{generateResetToken(){return crypto.randomBytes(32).toString("base64url")}hashResetToken(token){return crypto.createHash("sha256").update(token).digest("hex")}}
+import e from"node:crypto";var t=class{async encryptPassword(t){return await new Promise((n,r)=>{let i=e.randomBytes(8).toString(`hex`);e.scrypt(t,i,64,(e,t)=>{e&&r(e),n(`${i}:${t.toString(`hex`)}`)})})}async verifyPassword(t,n){return await new Promise((r,i)=>{let[a,o]=n.split(`:`),s=Buffer.from(o,`hex`);e.scrypt(t,a,64,(t,n)=>{t&&i(t),s.length===n.length?r(e.timingSafeEqual(s,n)):(e.timingSafeEqual(n,n),r(!1))})})}},n=class{generateResetToken(){return e.randomBytes(32).toString(`base64url`)}hashResetToken(t){return e.createHash(`sha256`).update(t).digest(`hex`)}};export{n as ForgotPasswordTokenModel,t as PasswordModel};
+//# sourceMappingURL=password.js.map

package/dist/src/api/models/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","names":[],"sources":["../../../../src/api/models/password.ts"],"sourcesContent":["import crypto from \"node:crypto\";\n\nexport class PasswordModel {\n  async encryptPassword(password: string): Promise<string> {\n    return await new Promise((resolve, reject) => {\n      const salt = crypto.randomBytes(8).toString(\"hex\");\n\n      crypto.scrypt(password, salt, 64, (err, derivedKey) => {\n        if (err) reject(err);\n\n        resolve(`${salt}:${derivedKey.toString(\"hex\")}`);\n      });\n    });\n  }\n\n  async verifyPassword(password: string, hash: string): Promise<boolean> {\n    return await new Promise((resolve, reject) => {\n      const [salt, key] = hash.split(\":\");\n      const keyBuffer = Buffer.from(key, \"hex\");\n\n      crypto.scrypt(password, salt, 64, (err, derivedKey) => {\n        if (err) reject(err);\n\n        if (keyBuffer.length !== derivedKey.length) {\n          crypto.timingSafeEqual(derivedKey, derivedKey);\n          resolve(false);\n        } else {\n          const areEqual = crypto.timingSafeEqual(keyBuffer, derivedKey);\n          resolve(areEqual);\n        }\n      });\n    });\n  }\n}\n\nexport class ForgotPasswordTokenModel {\n  generateResetToken() {\n    return crypto.randomBytes(32).toString(\"base64url\");\n  }\n\n  hashResetToken(token: string) {\n    return crypto.createHash(\"sha256\").update(token).digest(\"hex\");\n  }\n}\n"],"mappings":"2BAEA,IAAa,EAAb,KAA2B,CACzB,MAAM,gBAAgB,EAAmC,CACvD,OAAO,MAAM,IAAI,SAAS,EAAS,IAAW,CAC5C,IAAM,EAAO,EAAO,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK,EAEjD,EAAO,OAAO,EAAU,EAAM,IAAK,EAAK,IAAe,CACjD,GAAK,EAAO,CAAG,EAEnB,EAAQ,GAAG,EAAK,GAAG,EAAW,SAAS,KAAK,GAAG,CACjD,CAAC,CACH,CAAC,CACH,CAEA,MAAM,eAAe,EAAkB,EAAgC,CACrE,OAAO,MAAM,IAAI,SAAS,EAAS,IAAW,CAC5C,GAAM,CAAC,EAAM,GAAO,EAAK,MAAM,GAAG,EAC5B,EAAY,OAAO,KAAK,EAAK,KAAK,EAExC,EAAO,OAAO,EAAU,EAAM,IAAK,EAAK,IAAe,CACjD,GAAK,EAAO,CAAG,EAEf,EAAU,SAAW,EAAW,OAKlC,EADiB,EAAO,gBAAgB,EAAW,CACpC,CAAC,GAJhB,EAAO,gBAAgB,EAAY,CAAU,EAC7C,EAAQ,EAAK,EAKjB,CAAC,CACH,CAAC,CACH,CACF,EAEa,EAAb,KAAsC,CACpC,oBAAqB,CACnB,OAAO,EAAO,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW,CACpD,CAEA,eAAe,EAAe,CAC5B,OAAO,EAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,CAAK,CAAC,CAAC,OAAO,KAAK,CAC/D,CACF"}

package/dist/src/api/models/queue.d.ts

@@ -0,0 +1,20 @@
+import { Context } from "hono";
+//#region src/api/models/queue.d.ts
+interface QueueDispatchArgs {
+  availableAt?: Date;
+  maxAttempts?: number;
+  name: string;
+  payload?: Record<string, unknown>;
+  priority?: number;
+  queue?: string;
+}
+declare class QueueModel {
+  constructor(c: Context);
+  protected readonly c: Context;
+  dispatch({ name, payload, queue, priority, maxAttempts, availableAt }: QueueDispatchArgs): Promise<{
+    id: number;
+  }>;
+}
+//#endregion
+export { QueueDispatchArgs, QueueModel };
+//# sourceMappingURL=queue.d.ts.map

package/dist/src/api/models/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","names":[],"sources":["../../../../src/api/models/queue.ts"],"mappings":";;UAIiB;EACf,cAAc;EACd;EACA;EACA,UAAU;EACV;EACA;;cASW;cACC,GAAG;qBAII,GAAG;EAEhB,WACJ,MACA,SACA,OACA,UACA,aACA,eACC,oBAAoB;IAAU"}

package/dist/src/api/models/queue.js

@@ -0,0 +1,2 @@
+import{core_queue as e}from"../../database/queue.js";var t=class{constructor(e){this.c=e}c;async dispatch({name:t,payload:n={},queue:r=`default`,priority:i=0,maxAttempts:a,availableAt:o}){let s=this.c.get(`plugin`)?.id??`@vitnode/core`,c=this.c.get(`core`).queue.find(e=>e.pluginId===s&&e.name===t),[l]=await this.c.get(`db`).insert(e).values({pluginId:s,name:t,queue:r,payload:n,priority:i,maxAttempts:a??c?.maxAttempts??3,availableAt:o??new Date}).returning({id:e.id});return l}};export{t as QueueModel};
+//# sourceMappingURL=queue.js.map

package/dist/src/api/models/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","names":[],"sources":["../../../../src/api/models/queue.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { core_queue } from \"@/database/queue\";\n\nexport interface QueueDispatchArgs {\n  availableAt?: Date;\n  maxAttempts?: number;\n  name: string;\n  payload?: Record<string, unknown>;\n  priority?: number;\n  queue?: string;\n}\n\n/**\n * Enqueue background work into the database-backed task queue, exposed on the\n * request context as `c.get(\"queue\")`. Rows are drained by the `process-queue`\n * cron job. The task `name` must match a handler registered via\n * {@link buildQueueTask} in a module's `queueTasks`.\n */\nexport class QueueModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n\n  protected readonly c: Context;\n\n  async dispatch({\n    name,\n    payload = {},\n    queue = \"default\",\n    priority = 0,\n    maxAttempts,\n    availableAt,\n  }: QueueDispatchArgs): Promise<{ id: number }> {\n    const pluginId = this.c.get(\"plugin\")?.id ?? \"@vitnode/core\";\n\n    const registeredTask = this.c\n      .get(\"core\")\n      .queue.find(task => task.pluginId === pluginId && task.name === name);\n\n    const [row] = await this.c\n      .get(\"db\")\n      .insert(core_queue)\n      .values({\n        pluginId,\n        name,\n        queue,\n        payload,\n        priority,\n        maxAttempts: maxAttempts ?? registeredTask?.maxAttempts ?? 3,\n        availableAt: availableAt ?? new Date(),\n      })\n      .returning({ id: core_queue.id });\n\n    return row;\n  }\n}\n"],"mappings":"qDAmBA,IAAa,EAAb,KAAwB,CACtB,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CAEA,EAEA,MAAM,SAAS,CACb,OACA,UAAU,CAAC,EACX,QAAQ,UACR,WAAW,EACX,cACA,eAC6C,CAC7C,IAAM,EAAW,KAAK,EAAE,IAAI,QAAQ,CAAC,EAAE,IAAM,gBAEvC,EAAiB,KAAK,EACzB,IAAI,MAAM,CAAC,CACX,MAAM,KAAK,GAAQ,EAAK,WAAa,GAAY,EAAK,OAAS,CAAI,EAEhE,CAAC,GAAO,MAAM,KAAK,EACtB,IAAI,IAAI,CAAC,CACT,OAAO,CAAU,CAAC,CAClB,OAAO,CACN,WACA,OACA,QACA,UACA,WACA,YAAa,GAAe,GAAgB,aAAe,EAC3D,YAAa,GAAe,IAAI,IAClC,CAAC,CAAC,CACD,UAAU,CAAE,GAAI,EAAW,EAAG,CAAC,EAElC,OAAO,CACT,CACF"}

package/dist/src/api/models/session-admin.d.ts

@@ -1,25 +1,28 @@
-import type { Context } from "hono";
-export declare class SessionAdminModel {
-    constructor(c: Context);
-    protected readonly c: Context;
-    private hashToken;
-    checkIfUserIsAdmin(userId: number): Promise<boolean>;
-    createSessionByUserId(userId: number): Promise<{
-        token: string;
-    }>;
-    deleteSession(): Promise<void>;
-    getUser(): Promise<{
-        id: number;
-        email: string;
-        name: string;
-        nameCode: string;
-        createdAt: Date;
-        newsletter: boolean;
-        avatarColor: string;
-        emailVerified: boolean;
-        roleId: number;
-        birthday: Date | null;
-        language: string;
-    } | null>;
+import { Context } from "hono";
+//#region src/api/models/session-admin.d.ts
+declare class SessionAdminModel {
+  constructor(c: Context);
+  protected readonly c: Context;
+  private hashToken;
+  checkIfUserIsAdmin(userId: number): Promise<boolean>;
+  createSessionByUserId(userId: number): Promise<{
+    token: string;
+  }>;
+  deleteSession(): Promise<void>;
+  getUser(): Promise<{
+    id: number;
+    email: string;
+    name: string;
+    nameCode: string;
+    createdAt: Date;
+    newsletter: boolean;
+    avatarColor: string;
+    emailVerified: boolean;
+    roleId: number;
+    birthday: Date | null;
+    language: string;
+  } | null>;
 }
+//#endregion
+export { SessionAdminModel };
 //# sourceMappingURL=session-admin.d.ts.map

package/dist/src/api/models/session-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-admin.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAYpC,qBAAa,iBAAiB;gBAChB,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IAejB,kBAAkB,CAAC,MAAM,EAAE,MAAM;IAmBjC,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IA2CpC,aAAa;IAoBb,OAAO;;;;;;;;;;;;;CAiDd"}
+{"version":3,"file":"session-admin.d.ts","names":[],"sources":["../../../../src/api/models/session-admin.ts"],"mappings":";;cAkBa;cACC,GAAG;qBAGI,GAAG;UAER;EAeR,mBAAmB,iBAAc;EAmBjC,sBAAsB,iBAAc;;;EA2CpC,iBAAa;EA2Bb,WAAO"}

package/dist/src/api/models/session-admin.js

@@ -1 +1,2 @@
-import{and,eq,gt,or}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{HTTPException}from"hono/http-exception";import{core_admin_permissions,core_admin_sessions}from"../../database/admins.js";import{CONFIG}from"../../lib/config.js";import{DeviceModel}from"./device.js";import{UserModel}from"./user.js";export class SessionAdminModel{constructor(c){this.c=c}c;async hashToken(token){const encoder=new TextEncoder;const data=encoder.encode(token);const hashBuffer=await crypto.subtle.digest("SHA-256",data);const bytes=new Uint8Array(hashBuffer);let result="";for(const byte of bytes){result+=byte.toString(16).padStart(2,"0")}return result}async checkIfUserIsAdmin(userId){const user=await new UserModel().getUserById({id:userId,c:this.c});if(!user)return false;const[permission]=await this.c.get("db").select().from(core_admin_permissions).where(or(eq(core_admin_permissions.userId,user.id),eq(core_admin_permissions.roleId,user.roleId))).limit(1);return!!permission}async createSessionByUserId(userId){const isAdmin=await this.checkIfUserIsAdmin(userId);if(!isAdmin){throw new HTTPException(403,{message:"Forbidden"})}const randomBytes=new Uint8Array(64);crypto.getRandomValues(randomBytes);let token="";for(const byte of randomBytes){token+=byte.toString(16).padStart(2,"0")}const hashedToken=await this.hashToken(token);const device=await new DeviceModel(this.c).getDeviceId();await this.c.get("db").insert(core_admin_sessions).values({token:hashedToken,userId,expiresAt:new Date(Date.now()+this.c.get("core").authorization.adminCookieExpires),deviceId:device.id});setCookie(this.c,this.c.get("core").authorization.adminCookieName,token,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",expires:new Date(Date.now()+this.c.get("core").authorization.adminCookieExpires),domain:CONFIG.web.hostname});return{token}}async deleteSession(){const token=getCookie(this.c,this.c.get("core").authorization.adminCookieName);if(!token)return;const hashedToken=await this.hashToken(token);await this.c.get("db").delete(core_admin_sessions).where(eq(core_admin_sessions.token,hashedToken));deleteCookie(this.c,this.c.get("core").authorization.adminCookieName,{path:"/",domain:CONFIG.web.hostname})}async getUser(){const{authorization}=this.c.get("core");const token=getCookie(this.c,authorization.adminCookieName);if(!token)return null;const device=await new DeviceModel(this.c).getDeviceId();if(!device)return null;const hashedToken=await this.hashToken(token);const[session]=await this.c.get("db").select({userId:core_admin_sessions.userId}).from(core_admin_sessions).where(and(eq(core_admin_sessions.token,hashedToken),eq(core_admin_sessions.deviceId,device.id),gt(core_admin_sessions.expiresAt,new Date))).limit(1);if(!session){deleteCookie(this.c,this.c.get("core").authorization.adminCookieName,{path:"/",domain:CONFIG.web.hostname});return null}const user=await new UserModel().getUserById({id:session.userId,c:this.c});if(!user)return null;const isStillAdmin=await this.checkIfUserIsAdmin(user.id);if(!isStillAdmin){await this.deleteSession();return null}return user}}
+import{CONFIG as e}from"../../lib/config.js";import{core_admin_permissions as t,core_admin_sessions as n}from"../../database/admins.js";import{UserModel as r}from"./user.js";import{DeviceModel as i}from"./device.js";import{adminSessionCacheKey as a,reviveSessionUser as o,sessionCacheTtl as s}from"./session-cache.js";import{HTTPException as c}from"hono/http-exception";import{and as l,eq as u,gt as d,or as f}from"drizzle-orm";import{deleteCookie as p,getCookie as m,setCookie as h}from"hono/cookie";var g=class{constructor(e){this.c=e}c;async hashToken(e){let t=new TextEncoder().encode(e),n=await crypto.subtle.digest(`SHA-256`,t),r=new Uint8Array(n),i=``;for(let e of r)i+=e.toString(16).padStart(2,`0`);return i}async checkIfUserIsAdmin(e){let n=await new r().getUserById({id:e,c:this.c});if(!n)return!1;let[i]=await this.c.get(`db`).select().from(t).where(f(u(t.userId,n.id),u(t.roleId,n.roleId))).limit(1);return!!i}async createSessionByUserId(t){if(!await this.checkIfUserIsAdmin(t))throw new c(403,{message:`Forbidden`});let r=new Uint8Array(64);crypto.getRandomValues(r);let a=``;for(let e of r)a+=e.toString(16).padStart(2,`0`);let o=await this.hashToken(a),s=await new i(this.c).getDeviceId();return await this.c.get(`db`).insert(n).values({token:o,userId:t,expiresAt:new Date(Date.now()+this.c.get(`core`).authorization.adminCookieExpires),deviceId:s.id}),h(this.c,this.c.get(`core`).authorization.adminCookieName,a,{httpOnly:!0,secure:this.c.get(`core`).authorization.cookieSecure,path:`/`,expires:new Date(Date.now()+this.c.get(`core`).authorization.adminCookieExpires),domain:e.web.hostname}),{token:a}}async deleteSession(){let t=m(this.c,this.c.get(`core`).authorization.adminCookieName);if(!t)return;let r=await this.hashToken(t),o=await new i(this.c).getDeviceId();await this.c.get(`db`).delete(n).where(u(n.token,r)),await this.c.get(`cache`).deleteSystem(a(r,o.id)),p(this.c,this.c.get(`core`).authorization.adminCookieName,{path:`/`,domain:e.web.hostname})}async getUser(){let{authorization:t}=this.c.get(`core`),c=m(this.c,t.adminCookieName);if(!c)return null;let f=await new i(this.c).getDeviceId();if(!f)return null;let h=await this.hashToken(c),g=this.c.get(`cache`),_=a(h,f.id),v=await g.getSystem(_);if(v){let e=o(v);return await this.checkIfUserIsAdmin(e.id)?e:(await this.deleteSession(),null)}let[y]=await this.c.get(`db`).select({userId:n.userId,expiresAt:n.expiresAt}).from(n).where(l(u(n.token,h),u(n.deviceId,f.id),d(n.expiresAt,new Date))).limit(1);if(!y)return p(this.c,this.c.get(`core`).authorization.adminCookieName,{path:`/`,domain:e.web.hostname}),null;let b=await new r().getUserById({id:y.userId,c:this.c});if(!b)return null;if(!await this.checkIfUserIsAdmin(b.id))return await this.deleteSession(),null;let x=s(y.expiresAt);return x>0&&await g.setSystem(_,b,x),b}};export{g as SessionAdminModel};
+//# sourceMappingURL=session-admin.js.map

package/dist/src/api/models/session-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-admin.js","names":[],"sources":["../../../../src/api/models/session-admin.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { and, eq, gt, or } from \"drizzle-orm\"; // Removed 'or' as it's safer not to use it here\nimport { deleteCookie, getCookie, setCookie } from \"hono/cookie\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { core_admin_permissions, core_admin_sessions } from \"@/database/admins\";\nimport { CONFIG } from \"@/lib/config\";\n\nimport { DeviceModel } from \"./device\";\nimport {\n  adminSessionCacheKey,\n  reviveSessionUser,\n  sessionCacheTtl,\n  type SessionUser,\n} from \"./session-cache\";\nimport { UserModel } from \"./user\";\n\nexport class SessionAdminModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n  protected readonly c: Context;\n\n  private async hashToken(token: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(token);\n    const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n    const bytes = new Uint8Array(hashBuffer);\n\n    // Optimize: Use direct iteration instead of Array.from + map\n    let result = \"\";\n    for (const byte of bytes) {\n      result += byte.toString(16).padStart(2, \"0\");\n    }\n\n    return result;\n  }\n\n  async checkIfUserIsAdmin(userId: number) {\n    const user = await new UserModel().getUserById({ id: userId, c: this.c });\n    if (!user) return false;\n\n    const [permission] = await this.c\n      .get(\"db\")\n      .select()\n      .from(core_admin_permissions)\n      .where(\n        or(\n          eq(core_admin_permissions.userId, user.id),\n          eq(core_admin_permissions.roleId, user.roleId),\n        ),\n      )\n      .limit(1);\n\n    return !!permission;\n  }\n\n  async createSessionByUserId(userId: number) {\n    const isAdmin = await this.checkIfUserIsAdmin(userId);\n    if (!isAdmin) {\n      throw new HTTPException(403, { message: \"Forbidden\" });\n    }\n\n    const randomBytes = new Uint8Array(64);\n    crypto.getRandomValues(randomBytes);\n\n    // Optimize: Use direct iteration instead of Array.from + map\n    let token = \"\";\n    for (const byte of randomBytes) {\n      token += byte.toString(16).padStart(2, \"0\");\n    }\n\n    const hashedToken = await this.hashToken(token);\n    const device = await new DeviceModel(this.c).getDeviceId();\n\n    await this.c\n      .get(\"db\")\n      .insert(core_admin_sessions)\n      .values({\n        token: hashedToken,\n        userId,\n        expiresAt: new Date(\n          Date.now() + this.c.get(\"core\").authorization.adminCookieExpires,\n        ),\n        deviceId: device.id,\n      });\n\n    setCookie(this.c, this.c.get(\"core\").authorization.adminCookieName, token, {\n      httpOnly: true,\n      secure: this.c.get(\"core\").authorization.cookieSecure,\n      path: \"/\",\n      expires: new Date(\n        Date.now() + this.c.get(\"core\").authorization.adminCookieExpires,\n      ),\n      domain: CONFIG.web.hostname,\n    });\n\n    return { token };\n  }\n\n  async deleteSession() {\n    const token = getCookie(\n      this.c,\n      this.c.get(\"core\").authorization.adminCookieName,\n    );\n    if (!token) return;\n\n    const hashedToken = await this.hashToken(token);\n    const device = await new DeviceModel(this.c).getDeviceId();\n\n    await this.c\n      .get(\"db\")\n      .delete(core_admin_sessions)\n      .where(eq(core_admin_sessions.token, hashedToken));\n\n    // Drop the cached resolution so getUser stops returning this admin before\n    // the TTL would naturally expire it.\n    await this.c\n      .get(\"cache\")\n      .deleteSystem(adminSessionCacheKey(hashedToken, device.id));\n\n    deleteCookie(this.c, this.c.get(\"core\").authorization.adminCookieName, {\n      path: \"/\",\n      domain: CONFIG.web.hostname,\n    });\n  }\n\n  async getUser() {\n    const { authorization } = this.c.get(\"core\");\n    const token = getCookie(this.c, authorization.adminCookieName);\n    if (!token) return null;\n\n    const device = await new DeviceModel(this.c).getDeviceId();\n    if (!device) return null;\n\n    const hashedToken = await this.hashToken(token);\n    const cache = this.c.get(\"cache\");\n    const cacheKey = adminSessionCacheKey(hashedToken, device.id);\n\n    // Fast path: skip the session + user lookups for a session resolved on a\n    // recent request. Admin status is still re-checked live below so a revoked\n    // admin loses access immediately, not when the cache expires.\n    const cached = await cache.getSystem<SessionUser>(cacheKey);\n    if (cached) {\n      const user = reviveSessionUser(cached);\n      if (!(await this.checkIfUserIsAdmin(user.id))) {\n        await this.deleteSession();\n\n        return null;\n      }\n\n      return user;\n    }\n\n    const [session] = await this.c\n      .get(\"db\")\n      .select({\n        userId: core_admin_sessions.userId,\n        expiresAt: core_admin_sessions.expiresAt,\n      })\n      .from(core_admin_sessions)\n      .where(\n        and(\n          eq(core_admin_sessions.token, hashedToken),\n          eq(core_admin_sessions.deviceId, device.id),\n          gt(core_admin_sessions.expiresAt, new Date()),\n        ),\n      )\n      .limit(1);\n\n    if (!session) {\n      deleteCookie(this.c, this.c.get(\"core\").authorization.adminCookieName, {\n        path: \"/\",\n        domain: CONFIG.web.hostname,\n      });\n\n      return null;\n    }\n\n    const user = await new UserModel().getUserById({\n      id: session.userId,\n      c: this.c,\n    });\n\n    if (!user) return null;\n    const isStillAdmin = await this.checkIfUserIsAdmin(user.id);\n    if (!isStillAdmin) {\n      await this.deleteSession();\n\n      return null;\n    }\n\n    // Cap the TTL to the session's remaining lifetime so an expired session is\n    // never served from cache.\n    const ttl = sessionCacheTtl(session.expiresAt);\n    if (ttl > 0) await cache.setSystem(cacheKey, user, ttl);\n\n    return user;\n  }\n}\n"],"mappings":"qfAkBA,IAAa,EAAb,KAA+B,CAC7B,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CACA,EAEA,MAAc,UAAU,EAAgC,CAEtD,IAAM,EAAO,IADO,YACD,CAAC,CAAC,OAAO,CAAK,EAC3B,EAAa,MAAM,OAAO,OAAO,OAAO,UAAW,CAAI,EACvD,EAAQ,IAAI,WAAW,CAAU,EAGnC,EAAS,GACb,IAAK,IAAM,KAAQ,EACjB,GAAU,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,EAG7C,OAAO,CACT,CAEA,MAAM,mBAAmB,EAAgB,CACvC,IAAM,EAAO,MAAM,IAAI,EAAU,CAAC,CAAC,YAAY,CAAE,GAAI,EAAQ,EAAG,KAAK,CAAE,CAAC,EACxE,GAAI,CAAC,EAAM,MAAO,GAElB,GAAM,CAAC,GAAc,MAAM,KAAK,EAC7B,IAAI,IAAI,CAAC,CACT,OAAO,CAAC,CACR,KAAK,CAAsB,CAAC,CAC5B,MACC,EACE,EAAG,EAAuB,OAAQ,EAAK,EAAE,EACzC,EAAG,EAAuB,OAAQ,EAAK,MAAM,CAC/C,CACF,CAAC,CACA,MAAM,CAAC,EAEV,MAAO,CAAC,CAAC,CACX,CAEA,MAAM,sBAAsB,EAAgB,CAE1C,GAAI,CAAC,MADiB,KAAK,mBAAmB,CAAM,EAElD,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,EAGvD,IAAM,EAAc,IAAI,WAAW,EAAE,EACrC,OAAO,gBAAgB,CAAW,EAGlC,IAAI,EAAQ,GACZ,IAAK,IAAM,KAAQ,EACjB,GAAS,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,EAG5C,IAAM,EAAc,MAAM,KAAK,UAAU,CAAK,EACxC,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EAwBzD,OAtBA,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAAmB,CAAC,CAC3B,OAAO,CACN,MAAO,EACP,SACA,UAAW,IAAI,KACb,KAAK,IAAI,EAAI,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,kBAChD,EACA,SAAU,EAAO,EACnB,CAAC,EAEH,EAAU,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,gBAAiB,EAAO,CACzE,SAAU,GACV,OAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,aACzC,KAAM,IACN,QAAS,IAAI,KACX,KAAK,IAAI,EAAI,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,kBAChD,EACA,OAAQ,EAAO,IAAI,QACrB,CAAC,EAEM,CAAE,OAAM,CACjB,CAEA,MAAM,eAAgB,CACpB,IAAM,EAAQ,EACZ,KAAK,EACL,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,eACnC,EACA,GAAI,CAAC,EAAO,OAEZ,IAAM,EAAc,MAAM,KAAK,UAAU,CAAK,EACxC,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EAEzD,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAAmB,CAAC,CAC3B,MAAM,EAAG,EAAoB,MAAO,CAAW,CAAC,EAInD,MAAM,KAAK,EACR,IAAI,OAAO,CAAC,CACZ,aAAa,EAAqB,EAAa,EAAO,EAAE,CAAC,EAE5D,EAAa,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,gBAAiB,CACrE,KAAM,IACN,OAAQ,EAAO,IAAI,QACrB,CAAC,CACH,CAEA,MAAM,SAAU,CACd,GAAM,CAAE,iBAAkB,KAAK,EAAE,IAAI,MAAM,EACrC,EAAQ,EAAU,KAAK,EAAG,EAAc,eAAe,EAC7D,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EACzD,GAAI,CAAC,EAAQ,OAAO,KAEpB,IAAM,EAAc,MAAM,KAAK,UAAU,CAAK,EACxC,EAAQ,KAAK,EAAE,IAAI,OAAO,EAC1B,EAAW,EAAqB,EAAa,EAAO,EAAE,EAKtD,EAAS,MAAM,EAAM,UAAuB,CAAQ,EAC1D,GAAI,EAAQ,CACV,IAAM,EAAO,EAAkB,CAAM,EAOrC,OANM,MAAM,KAAK,mBAAmB,EAAK,EAAE,EAMpC,GALL,MAAM,KAAK,cAAc,EAElB,KAIX,CAEA,GAAM,CAAC,GAAW,MAAM,KAAK,EAC1B,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAAoB,OAC5B,UAAW,EAAoB,SACjC,CAAC,CAAC,CACD,KAAK,CAAmB,CAAC,CACzB,MACC,EACE,EAAG,EAAoB,MAAO,CAAW,EACzC,EAAG,EAAoB,SAAU,EAAO,EAAE,EAC1C,EAAG,EAAoB,UAAW,IAAI,IAAM,CAC9C,CACF,CAAC,CACA,MAAM,CAAC,EAEV,GAAI,CAAC,EAMH,OALA,EAAa,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,gBAAiB,CACrE,KAAM,IACN,OAAQ,EAAO,IAAI,QACrB,CAAC,EAEM,KAGT,IAAM,EAAO,MAAM,IAAI,EAAU,CAAC,CAAC,YAAY,CAC7C,GAAI,EAAQ,OACZ,EAAG,KAAK,CACV,CAAC,EAED,GAAI,CAAC,EAAM,OAAO,KAElB,GAAI,CAAC,MADsB,KAAK,mBAAmB,EAAK,EAAE,EAIxD,OAFA,MAAM,KAAK,cAAc,EAElB,KAKT,IAAM,EAAM,EAAgB,EAAQ,SAAS,EAG7C,OAFI,EAAM,GAAG,MAAM,EAAM,UAAU,EAAU,EAAM,CAAG,EAE/C,CACT,CACF"}

package/dist/src/api/models/session-cache.d.ts

@@ -0,0 +1,11 @@
+import { getUserById } from "./user/get-user-by-id.js";
+//#region src/api/models/session-cache.d.ts
+type SessionUser = NonNullable<Awaited<ReturnType<typeof getUserById>>>;
+declare const SESSION_CACHE_TTL_SECONDS = 60;
+declare const sessionCacheKey: (hashedToken: string, deviceId: number) => string;
+declare const adminSessionCacheKey: (hashedToken: string, deviceId: number) => string;
+declare const sessionCacheTtl: (expiresAt: Date) => number;
+declare const reviveSessionUser: (user: SessionUser) => SessionUser;
+//#endregion
+export { SESSION_CACHE_TTL_SECONDS, SessionUser, adminSessionCacheKey, reviveSessionUser, sessionCacheKey, sessionCacheTtl };
+//# sourceMappingURL=session-cache.d.ts.map

package/dist/src/api/models/session-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cache.d.ts","names":[],"sources":["../../../../src/api/models/session-cache.ts"],"mappings":";;KAEY,cAAc,YAAY,QAAQ,kBAAkB;cAEnD;cAEA,kBACX,qBACA;cAGW,uBACX,qBACA;cAGW,kBAAmB,WAAW;cAM9B,oBAAqB,MAAM,gBAAc"}

package/dist/src/api/models/session-cache.js

@@ -0,0 +1,2 @@
+const e=60,t=(e,t)=>`session:user:${t}:${e}`,n=(e,t)=>`session:admin:${t}:${e}`,r=e=>Math.min(60,Math.floor((e.getTime()-Date.now())/1e3)),i=e=>({...e,createdAt:new Date(e.createdAt),birthday:e.birthday?new Date(e.birthday):null});export{e as SESSION_CACHE_TTL_SECONDS,n as adminSessionCacheKey,i as reviveSessionUser,t as sessionCacheKey,r as sessionCacheTtl};
+//# sourceMappingURL=session-cache.js.map

package/dist/src/api/models/session-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cache.js","names":[],"sources":["../../../../src/api/models/session-cache.ts"],"sourcesContent":["import type { getUserById } from \"./user/get-user-by-id\";\n\nexport type SessionUser = NonNullable<Awaited<ReturnType<typeof getUserById>>>;\n\nexport const SESSION_CACHE_TTL_SECONDS = 60;\n\nexport const sessionCacheKey = (\n  hashedToken: string,\n  deviceId: number,\n): string => `session:user:${deviceId}:${hashedToken}`;\n\nexport const adminSessionCacheKey = (\n  hashedToken: string,\n  deviceId: number,\n): string => `session:admin:${deviceId}:${hashedToken}`;\n\nexport const sessionCacheTtl = (expiresAt: Date): number =>\n  Math.min(\n    SESSION_CACHE_TTL_SECONDS,\n    Math.floor((expiresAt.getTime() - Date.now()) / 1000),\n  );\n\nexport const reviveSessionUser = (user: SessionUser): SessionUser => ({\n  ...user,\n  createdAt: new Date(user.createdAt),\n  birthday: user.birthday ? new Date(user.birthday) : null,\n});\n"],"mappings":"AAIA,MAAa,EAA4B,GAE5B,GACX,EACA,IACW,gBAAgB,EAAS,GAAG,IAE5B,GACX,EACA,IACW,iBAAiB,EAAS,GAAG,IAE7B,EAAmB,GAC9B,KAAK,IAAA,GAEH,KAAK,OAAO,EAAU,QAAQ,EAAI,KAAK,IAAI,GAAK,GAAI,CACtD,EAEW,EAAqB,IAAoC,CACpE,GAAG,EACH,UAAW,IAAI,KAAK,EAAK,SAAS,EAClC,SAAU,EAAK,SAAW,IAAI,KAAK,EAAK,QAAQ,EAAI,IACtD"}

package/dist/src/api/models/session.d.ts

@@ -1,24 +1,27 @@
-import type { Context } from "hono";
-export declare class SessionModel {
-    constructor(c: Context);
-    protected readonly c: Context;
-    private hashToken;
-    createSessionByUserId(userId: number): Promise<{
-        token: string;
-    }>;
-    deleteSession(): Promise<void>;
-    getUser(): Promise<{
-        id: number;
-        email: string;
-        name: string;
-        nameCode: string;
-        createdAt: Date;
-        newsletter: boolean;
-        avatarColor: string;
-        emailVerified: boolean;
-        roleId: number;
-        birthday: Date | null;
-        language: string;
-    } | null>;
+import { Context } from "hono";
+//#region src/api/models/session.d.ts
+declare class SessionModel {
+  constructor(c: Context);
+  protected readonly c: Context;
+  private hashToken;
+  createSessionByUserId(userId: number): Promise<{
+    token: string;
+  }>;
+  deleteSession(): Promise<void>;
+  getUser(): Promise<{
+    id: number;
+    email: string;
+    name: string;
+    nameCode: string;
+    createdAt: Date;
+    newsletter: boolean;
+    avatarColor: string;
+    emailVerified: boolean;
+    roleId: number;
+    birthday: Date | null;
+    language: string;
+  } | null>;
 }
+//#endregion
+export { SessionModel };
 //# sourceMappingURL=session.d.ts.map

package/dist/src/api/models/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAWpC,qBAAa,YAAY;gBACX,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IAejB,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IA0CpC,aAAa;IA8Bb,OAAO;;;;;;;;;;;;;CA0Cd"}
+{"version":3,"file":"session.d.ts","names":[],"sources":["../../../../src/api/models/session.ts"],"mappings":";;cAiBa;cACC,GAAG;qBAGI,GAAG;UAER;EAeR,sBAAsB,iBAAc;;;EA0CpC,iBAAa;EAkCb,WAAO"}

package/dist/src/api/models/session.js

@@ -1 +1,2 @@
-import{and,eq,gt}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{core_sessions}from"../../database/sessions.js";import{CONFIG}from"../../lib/config.js";import{DeviceModel}from"./device.js";import{UserModel}from"./user.js";export class SessionModel{constructor(c){this.c=c}c;async hashToken(token){const encoder=new TextEncoder;const data=encoder.encode(token);const hashBuffer=await crypto.subtle.digest("SHA-256",data);const bytes=new Uint8Array(hashBuffer);let result="";for(const byte of bytes){result+=byte.toString(16).padStart(2,"0")}return result}async createSessionByUserId(userId){const randomBytes=new Uint8Array(64);crypto.getRandomValues(randomBytes);let token="";for(const byte of randomBytes){token+=byte.toString(16).padStart(2,"0")}const device=await new DeviceModel(this.c).getDeviceId();const hashedToken=await this.hashToken(token);await this.c.get("db").insert(core_sessions).values({token:hashedToken,userId,expiresAt:new Date(Date.now()+this.c.get("core").authorization.cookie_expires),deviceId:device.id});setCookie(this.c,this.c.get("core").authorization.cookieName,token,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",expires:this.c.get("core").authorization.cookie_expires>0?new Date(Date.now()+this.c.get("core").authorization.cookie_expires):undefined,domain:CONFIG.web.hostname});return{token}}async deleteSession(){const token=getCookie(this.c,this.c.get("core").authorization.cookieName);const device=await new DeviceModel(this.c).getDeviceId();if(!(token&&device.id)){deleteCookie(this.c,this.c.get("core").authorization.cookieName);return}const hashedToken=await this.hashToken(token);await this.c.get("db").delete(core_sessions).where(and(eq(core_sessions.token,hashedToken),eq(core_sessions.deviceId,device.id)));deleteCookie(this.c,this.c.get("core").authorization.cookieName)}async getUser(){const token=getCookie(this.c,this.c.get("core").authorization.cookieName);if(!token)return null;const device=await new DeviceModel(this.c).getDeviceId();if(!device)return null;const hashedToken=await this.hashToken(token);const[session]=await this.c.get("db").select({userId:core_sessions.userId}).from(core_sessions).where(and(eq(core_sessions.token,hashedToken),eq(core_sessions.deviceId,device.id),gt(core_sessions.expiresAt,new Date))).limit(1);if(!session){deleteCookie(this.c,this.c.get("core").authorization.cookieName);return null}const user=await new UserModel().getUserById({id:session.userId,c:this.c});if(!user)return null;return user}}
+import{CONFIG as e}from"../../lib/config.js";import{core_sessions as t}from"../../database/sessions.js";import{UserModel as n}from"./user.js";import{DeviceModel as r}from"./device.js";import{reviveSessionUser as i,sessionCacheKey as a,sessionCacheTtl as o}from"./session-cache.js";import{and as s,eq as c,gt as l}from"drizzle-orm";import{deleteCookie as u,getCookie as d,setCookie as f}from"hono/cookie";var p=class{constructor(e){this.c=e}c;async hashToken(e){let t=new TextEncoder().encode(e),n=await crypto.subtle.digest(`SHA-256`,t),r=new Uint8Array(n),i=``;for(let e of r)i+=e.toString(16).padStart(2,`0`);return i}async createSessionByUserId(n){let i=new Uint8Array(64);crypto.getRandomValues(i);let a=``;for(let e of i)a+=e.toString(16).padStart(2,`0`);let o=await new r(this.c).getDeviceId(),s=await this.hashToken(a);return await this.c.get(`db`).insert(t).values({token:s,userId:n,expiresAt:new Date(Date.now()+this.c.get(`core`).authorization.cookie_expires),deviceId:o.id}),f(this.c,this.c.get(`core`).authorization.cookieName,a,{httpOnly:!0,secure:this.c.get(`core`).authorization.cookieSecure,path:`/`,expires:this.c.get(`core`).authorization.cookie_expires>0?new Date(Date.now()+this.c.get(`core`).authorization.cookie_expires):void 0,domain:e.web.hostname}),{token:a}}async deleteSession(){let e=d(this.c,this.c.get(`core`).authorization.cookieName),n=await new r(this.c).getDeviceId();if(!(e&&n.id)){u(this.c,this.c.get(`core`).authorization.cookieName);return}let i=await this.hashToken(e);await this.c.get(`db`).delete(t).where(s(c(t.token,i),c(t.deviceId,n.id))),await this.c.get(`cache`).deleteSystem(a(i,n.id)),u(this.c,this.c.get(`core`).authorization.cookieName)}async getUser(){let e=d(this.c,this.c.get(`core`).authorization.cookieName);if(!e)return null;let f=await new r(this.c).getDeviceId();if(!f)return null;let p=await this.hashToken(e),m=this.c.get(`cache`),h=a(p,f.id),g=await m.getSystem(h);if(g)return i(g);let[_]=await this.c.get(`db`).select({userId:t.userId,expiresAt:t.expiresAt}).from(t).where(s(c(t.token,p),c(t.deviceId,f.id),l(t.expiresAt,new Date))).limit(1);if(!_)return u(this.c,this.c.get(`core`).authorization.cookieName),null;let v=await new n().getUserById({id:_.userId,c:this.c});if(!v)return null;let y=o(_.expiresAt);return y>0&&await m.setSystem(h,v,y),v}};export{p as SessionModel};
+//# sourceMappingURL=session.js.map

package/dist/src/api/models/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","names":[],"sources":["../../../../src/api/models/session.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { and, eq, gt } from \"drizzle-orm\";\nimport { deleteCookie, getCookie, setCookie } from \"hono/cookie\";\n\nimport { core_sessions } from \"@/database/sessions\";\nimport { CONFIG } from \"@/lib/config\";\n\nimport { DeviceModel } from \"./device\";\nimport {\n  reviveSessionUser,\n  sessionCacheKey,\n  sessionCacheTtl,\n  type SessionUser,\n} from \"./session-cache\";\nimport { UserModel } from \"./user\";\n\nexport class SessionModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n  protected readonly c: Context;\n\n  private async hashToken(token: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(token);\n    const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n    const bytes = new Uint8Array(hashBuffer);\n\n    // Optimize: Use direct iteration instead of Array.from + map\n    let result = \"\";\n    for (const byte of bytes) {\n      result += byte.toString(16).padStart(2, \"0\");\n    }\n\n    return result;\n  }\n\n  async createSessionByUserId(userId: number) {\n    // Generate secure random bytes using Web Crypto API\n    const randomBytes = new Uint8Array(64);\n    crypto.getRandomValues(randomBytes);\n\n    // Optimize: Use direct iteration instead of Array.from + map\n    let token = \"\";\n    for (const byte of randomBytes) {\n      token += byte.toString(16).padStart(2, \"0\");\n    }\n\n    const device = await new DeviceModel(this.c).getDeviceId();\n    const hashedToken = await this.hashToken(token);\n\n    await this.c\n      .get(\"db\")\n      .insert(core_sessions)\n      .values({\n        token: hashedToken,\n        userId,\n        expiresAt: new Date(\n          Date.now() + this.c.get(\"core\").authorization.cookie_expires,\n        ),\n        deviceId: device.id,\n      });\n\n    setCookie(this.c, this.c.get(\"core\").authorization.cookieName, token, {\n      httpOnly: true,\n      secure: this.c.get(\"core\").authorization.cookieSecure,\n      path: \"/\",\n      expires:\n        this.c.get(\"core\").authorization.cookie_expires > 0\n          ? new Date(\n              Date.now() + this.c.get(\"core\").authorization.cookie_expires,\n            )\n          : undefined,\n      domain: CONFIG.web.hostname,\n    });\n\n    return { token };\n  }\n\n  async deleteSession() {\n    const token = getCookie(\n      this.c,\n      this.c.get(\"core\").authorization.cookieName,\n    );\n    const device = await new DeviceModel(this.c).getDeviceId();\n\n    // Ensure both token and deviceId exist before proceeding\n    if (!(token && device.id)) {\n      deleteCookie(this.c, this.c.get(\"core\").authorization.cookieName);\n\n      return;\n    }\n\n    const hashedToken = await this.hashToken(token);\n\n    await this.c\n      .get(\"db\")\n      .delete(core_sessions)\n      // Harden the query to ensure a user can only delete their own device's session\n      .where(\n        and(\n          eq(core_sessions.token, hashedToken),\n          eq(core_sessions.deviceId, device.id),\n        ),\n      );\n\n    await this.c\n      .get(\"cache\")\n      .deleteSystem(sessionCacheKey(hashedToken, device.id));\n\n    deleteCookie(this.c, this.c.get(\"core\").authorization.cookieName);\n  }\n\n  async getUser() {\n    const token = getCookie(\n      this.c,\n      this.c.get(\"core\").authorization.cookieName,\n    );\n    if (!token) return null;\n\n    const device = await new DeviceModel(this.c).getDeviceId();\n    if (!device) return null;\n\n    const hashedToken = await this.hashToken(token);\n    const cache = this.c.get(\"cache\");\n    const cacheKey = sessionCacheKey(hashedToken, device.id);\n\n    // Fast path: a still-valid session resolved on a recent request. Only\n    // positive hits are cached, so a miss always re-runs the full lookup below.\n    const cached = await cache.getSystem<SessionUser>(cacheKey);\n    if (cached) return reviveSessionUser(cached);\n\n    const [session] = await this.c\n      .get(\"db\")\n      .select({\n        userId: core_sessions.userId,\n        expiresAt: core_sessions.expiresAt,\n      })\n      .from(core_sessions)\n      .where(\n        and(\n          eq(core_sessions.token, hashedToken),\n          eq(core_sessions.deviceId, device.id),\n          gt(core_sessions.expiresAt, new Date()),\n        ),\n      )\n      .limit(1);\n\n    if (!session) {\n      deleteCookie(this.c, this.c.get(\"core\").authorization.cookieName);\n\n      return null;\n    }\n\n    const user = await new UserModel().getUserById({\n      id: session.userId,\n      c: this.c,\n    });\n\n    if (!user) return null;\n\n    // Cap the TTL to the session's remaining lifetime so an expired session is\n    // never served from cache.\n    const ttl = sessionCacheTtl(session.expiresAt);\n    if (ttl > 0) await cache.setSystem(cacheKey, user, ttl);\n\n    return user;\n  }\n}\n"],"mappings":"oZAiBA,IAAa,EAAb,KAA0B,CACxB,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CACA,EAEA,MAAc,UAAU,EAAgC,CAEtD,IAAM,EAAO,IADO,YACD,CAAC,CAAC,OAAO,CAAK,EAC3B,EAAa,MAAM,OAAO,OAAO,OAAO,UAAW,CAAI,EACvD,EAAQ,IAAI,WAAW,CAAU,EAGnC,EAAS,GACb,IAAK,IAAM,KAAQ,EACjB,GAAU,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,EAG7C,OAAO,CACT,CAEA,MAAM,sBAAsB,EAAgB,CAE1C,IAAM,EAAc,IAAI,WAAW,EAAE,EACrC,OAAO,gBAAgB,CAAW,EAGlC,IAAI,EAAQ,GACZ,IAAK,IAAM,KAAQ,EACjB,GAAS,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,EAG5C,IAAM,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EACnD,EAAc,MAAM,KAAK,UAAU,CAAK,EA2B9C,OAzBA,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAAa,CAAC,CACrB,OAAO,CACN,MAAO,EACP,SACA,UAAW,IAAI,KACb,KAAK,IAAI,EAAI,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,cAChD,EACA,SAAU,EAAO,EACnB,CAAC,EAEH,EAAU,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,WAAY,EAAO,CACpE,SAAU,GACV,OAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,aACzC,KAAM,IACN,QACE,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,eAAiB,EAC9C,IAAI,KACF,KAAK,IAAI,EAAI,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,cAChD,EACA,IAAA,GACN,OAAQ,EAAO,IAAI,QACrB,CAAC,EAEM,CAAE,OAAM,CACjB,CAEA,MAAM,eAAgB,CACpB,IAAM,EAAQ,EACZ,KAAK,EACL,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,UACnC,EACM,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EAGzD,GAAI,EAAE,GAAS,EAAO,IAAK,CACzB,EAAa,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,UAAU,EAEhE,MACF,CAEA,IAAM,EAAc,MAAM,KAAK,UAAU,CAAK,EAE9C,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAAa,CAAC,CAErB,MACC,EACE,EAAG,EAAc,MAAO,CAAW,EACnC,EAAG,EAAc,SAAU,EAAO,EAAE,CACtC,CACF,EAEF,MAAM,KAAK,EACR,IAAI,OAAO,CAAC,CACZ,aAAa,EAAgB,EAAa,EAAO,EAAE,CAAC,EAEvD,EAAa,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,UAAU,CAClE,CAEA,MAAM,SAAU,CACd,IAAM,EAAQ,EACZ,KAAK,EACL,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,UACnC,EACA,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAS,MAAM,IAAI,EAAY,KAAK,CAAC,CAAC,CAAC,YAAY,EACzD,GAAI,CAAC,EAAQ,OAAO,KAEpB,IAAM,EAAc,MAAM,KAAK,UAAU,CAAK,EACxC,EAAQ,KAAK,EAAE,IAAI,OAAO,EAC1B,EAAW,EAAgB,EAAa,EAAO,EAAE,EAIjD,EAAS,MAAM,EAAM,UAAuB,CAAQ,EAC1D,GAAI,EAAQ,OAAO,EAAkB,CAAM,EAE3C,GAAM,CAAC,GAAW,MAAM,KAAK,EAC1B,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAAc,OACtB,UAAW,EAAc,SAC3B,CAAC,CAAC,CACD,KAAK,CAAa,CAAC,CACnB,MACC,EACE,EAAG,EAAc,MAAO,CAAW,EACnC,EAAG,EAAc,SAAU,EAAO,EAAE,EACpC,EAAG,EAAc,UAAW,IAAI,IAAM,CACxC,CACF,CAAC,CACA,MAAM,CAAC,EAEV,GAAI,CAAC,EAGH,OAFA,EAAa,KAAK,EAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,cAAc,UAAU,EAEzD,KAGT,IAAM,EAAO,MAAM,IAAI,EAAU,CAAC,CAAC,YAAY,CAC7C,GAAI,EAAQ,OACZ,EAAG,KAAK,CACV,CAAC,EAED,GAAI,CAAC,EAAM,OAAO,KAIlB,IAAM,EAAM,EAAgB,EAAQ,SAAS,EAG7C,OAFI,EAAM,GAAG,MAAM,EAAM,UAAU,EAAU,EAAM,CAAG,EAE/C,CACT,CACF"}

package/dist/src/api/models/sso.d.ts

@@ -1,38 +1,41 @@
-import type { Context } from "hono";
-export interface SSOApiPlugin {
-    fetchToken: (code: string) => Promise<{
-        access_token: string;
-        token_type: string;
-    }>;
-    fetchUser: (args: {
-        access_token: string;
-        token_type: string;
-    }) => Promise<{
-        email: string;
-        id: string;
-        username: string;
-    }>;
-    getUrl: (props: {
-        state: string;
-    }) => string;
+import { Context } from "hono";
+//#region src/api/models/sso.d.ts
+interface SSOApiPlugin {
+  fetchToken: (code: string) => Promise<{
+    access_token: string;
+    token_type: string;
+  }>;
+  fetchUser: (args: {
+    access_token: string;
+    token_type: string;
+  }) => Promise<{
+    email: string;
     id: string;
-    name: string;
+    username: string;
+  }>;
+  getUrl: (props: {
+    state: string;
+  }) => string;
+  id: string;
+  name: string;
 }
-export declare const getRedirectUri: (code: string) => string;
-export declare class SSOModel {
-    constructor(c: Context);
-    private readonly c;
-    private readonly plugins;
-    private readonly signUpUser;
-    callback({ code, providerId, state, }: {
-        code: string;
-        providerId: string;
-        state: string;
-    }): Promise<{
-        userId: number;
-    }>;
-    encryptState(): Promise<string>;
-    getUrl(providerId: string): Promise<string>;
-    verifyState(state: string): Promise<void>;
+declare const getRedirectUri: (code: string) => string;
+declare class SSOModel {
+  constructor(c: Context);
+  private readonly c;
+  private readonly plugins;
+  private readonly signUpUser;
+  callback({ code, providerId, state }: {
+    code: string;
+    providerId: string;
+    state: string;
+  }): Promise<{
+    userId: number;
+  }>;
+  encryptState(): Promise<string>;
+  getUrl(providerId: string): Promise<string>;
+  verifyState(state: string): Promise<void>;
 }
+//#endregion
+export { SSOApiPlugin, SSOModel, getRedirectUri };
 //# sourceMappingURL=sso.d.ts.map

package/dist/src/api/models/sso.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sso.d.ts","sourceRoot":"","sources":["../../../../src/api/models/sso.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAapC,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,CACV,IAAI,EAAE,MAAM,KACT,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,WACgB,CAAC;AAE5D,qBAAa,QAAQ;gBACP,CAAC,EAAE,OAAO;IAKtB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAU;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IAEzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CA6BzB;IAEI,QAAQ,CAAC,EACb,IAAI,EACJ,UAAU,EACV,KAAK,GACN,EAAE;QACD,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC;QACV,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IA8DI,YAAY;IA2BZ,MAAM,CAAC,UAAU,EAAE,MAAM;IASzB,WAAW,CAAC,KAAK,EAAE,MAAM;CA+BhC"}
+{"version":3,"file":"sso.d.ts","names":[],"sources":["../../../../src/api/models/sso.ts"],"mappings":";;UAaiB;EACf,aACE,iBACG;IAAU;IAAsB;;EACrC,YAAY;IACV;IACA;QACI;IAAU;IAAe;IAAY;;EAC3C,SAAS;IAAS;;EAClB;EACA;;cAGW,iBAAkB;cAGlB;cACC,GAAG;mBAKE;mBACA;mBAEA;EA+BX,WACJ,MACA,YACA;IAEA;IACA;IACA;MACE;IACF;;EA+DI,gBAAY;EA2BZ,OAAO,qBAAkB;EASzB,YAAY,gBAAa"}

package/dist/src/api/models/sso.js

@@ -1 +1,2 @@
-import{and,eq}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{HTTPException}from"hono/http-exception";import crypto from"node:crypto";import{core_users,core_users_sso}from"../../database/users.js";import{CONFIG}from"../../lib/config.js";import{removeSpecialCharacters}from"../../lib/special-characters.js";import{UserModel}from"./user.js";export const getRedirectUri=code=>new URL(`${CONFIG.web.href}login/sso/${code}`).toString();export class SSOModel{constructor(c){this.c=c;this.plugins=c.get("core").authorization.ssoAdapters}c;plugins;signUpUser=async({providerId,user,c})=>{const data=await new UserModel().signUp({email:user.email,name:removeSpecialCharacters(user.username,false),newsletter:false,hashedPassword:undefined},c);await c.get("db").insert(core_users_sso).values({userId:data.id,providerId:providerId,providerAccountId:user.id});return{userId:data.id}};async callback({code,providerId,state}){await this.verifyState(state);const provider=this.plugins.find(p=>p.id===providerId);if(!provider){throw new HTTPException(404)}const ssoToken=await provider.fetchToken(code);const userFromSSO=await provider.fetchUser(ssoToken);return await this.c.get("db").transaction(async tx=>{const[dataSSOFromDb]=await tx.select({userId:core_users_sso.userId}).from(core_users_sso).leftJoin(core_users,eq(core_users.id,core_users_sso.userId)).where(and(eq(core_users_sso.providerId,providerId),eq(core_users_sso.providerAccountId,userFromSSO.id))).limit(1);if(!dataSSOFromDb){const[userWithEmail]=await tx.select({id:core_users.id,email:core_users.email}).from(core_users).where(eq(core_users.email,userFromSSO.email)).limit(1);if(!userWithEmail){const signUpUser=await this.signUpUser({providerId,user:userFromSSO,c:this.c});return signUpUser}throw new HTTPException(409,{message:"Email already exists"})}return{userId:dataSSOFromDb.userId}})}async encryptState(){const state=crypto.randomBytes(8).toString("hex");const encryptedState=await new Promise((resolve,reject)=>{const salt=crypto.randomBytes(4).toString("hex");crypto.scrypt(state,salt,16,(err,derivedKey)=>{if(err)reject(err);resolve(`${salt}:${derivedKey.toString("hex")}`)})});setCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`,encryptedState,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",domain:CONFIG.web.hostname});return state}async getUrl(providerId){const provider=this.plugins.find(p=>p.id===providerId);if(!provider){throw new HTTPException(404)}return provider.getUrl({state:await this.encryptState()})}async verifyState(state){const storedState=getCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`);if(!storedState){throw new HTTPException(400,{message:"Invalid state"})}const isValid=await new Promise((resolve,reject)=>{const[salt,storedHash]=storedState.split(":");crypto.scrypt(state,salt,16,(err,derivedKey)=>{if(err)reject(err);resolve(storedHash===derivedKey.toString("hex"))})});if(!isValid){throw new HTTPException(400,{message:"Invalid state"})}deleteCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`)}}
+import{CONFIG as e}from"../../lib/config.js";import{core_users as t,core_users_sso as n}from"../../database/users.js";import{removeSpecialCharacters as r}from"../../lib/special-characters.js";import{UserModel as i}from"./user.js";import{HTTPException as a}from"hono/http-exception";import{and as o,eq as s}from"drizzle-orm";import c from"node:crypto";import{deleteCookie as l,getCookie as u,setCookie as d}from"hono/cookie";const f=t=>new URL(`${e.web.href}login/sso/${t}`).toString();var p=class{constructor(e){this.c=e,this.plugins=e.get(`core`).authorization.ssoAdapters}c;plugins;signUpUser=async({providerId:e,user:t,c:a})=>{let o=await new i().signUp({email:t.email,name:r(t.username,!1),newsletter:!1,hashedPassword:void 0},a);return await a.get(`db`).insert(n).values({userId:o.id,providerId:e,providerAccountId:t.id}),{userId:o.id}};async callback({code:e,providerId:r,state:i}){await this.verifyState(i);let c=this.plugins.find(e=>e.id===r);if(!c)throw new a(404);let l=await c.fetchToken(e),u=await c.fetchUser(l);return await this.c.get(`db`).transaction(async e=>{let[i]=await e.select({userId:n.userId}).from(n).leftJoin(t,s(t.id,n.userId)).where(o(s(n.providerId,r),s(n.providerAccountId,u.id))).limit(1);if(!i){let[n]=await e.select({id:t.id,email:t.email}).from(t).where(s(t.email,u.email)).limit(1);if(!n)return await this.signUpUser({providerId:r,user:u,c:this.c});throw new a(409,{message:`Email already exists`})}return{userId:i.userId}})}async encryptState(){let t=c.randomBytes(8).toString(`hex`),n=await new Promise((e,n)=>{let r=c.randomBytes(4).toString(`hex`);c.scrypt(t,r,16,(t,i)=>{t&&n(t),e(`${r}:${i.toString(`hex`)}`)})});return d(this.c,`${this.c.get(`core`).authorization.cookieName}--state-sso`,n,{httpOnly:!0,secure:this.c.get(`core`).authorization.cookieSecure,path:`/`,domain:e.web.hostname}),t}async getUrl(e){let t=this.plugins.find(t=>t.id===e);if(!t)throw new a(404);return t.getUrl({state:await this.encryptState()})}async verifyState(e){let t=u(this.c,`${this.c.get(`core`).authorization.cookieName}--state-sso`);if(!t||!await new Promise((n,r)=>{let[i,a]=t.split(`:`);c.scrypt(e,i,16,(e,t)=>{e&&r(e),n(a===t.toString(`hex`))})}))throw new a(400,{message:`Invalid state`});l(this.c,`${this.c.get(`core`).authorization.cookieName}--state-sso`)}};export{p as SSOModel,f as getRedirectUri};
+//# sourceMappingURL=sso.js.map