@vitnode/core 1.2.0-canary.75 → 1.2.0-canary.76

package/dist/src/api/adapters/sso/discord.d.ts

@@ -1,6 +1,9 @@
-import type { SSOApiPlugin } from "../../../api/models/sso";
-export declare const DiscordSSOApiPlugin: ({ clientId, clientSecret, }: {
-    clientId: string | undefined;
-    clientSecret: string | undefined;
+import { SSOApiPlugin } from "../../models/sso.js";
+//#region src/api/adapters/sso/discord.d.ts
+declare const DiscordSSOApiPlugin: ({ clientId, clientSecret }: {
+  clientId: string | undefined;
+  clientSecret: string | undefined;
 }) => SSOApiPlugin;
+//#endregion
+export { DiscordSSOApiPlugin };
 //# sourceMappingURL=discord.d.ts.map

package/dist/src/api/adapters/sso/discord.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discord.d.ts","sourceRoot":"","sources":["../../../../../src/api/adapters/sso/discord.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,eAAO,MAAM,mBAAmB,GAAI,6BAGjC;IACD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,KAAG,YAoFH,CAAC"}
+{"version":3,"file":"discord.d.ts","names":[],"sources":["../../../../../src/api/adapters/sso/discord.ts"],"mappings":";;cASa,wBAAuB,UAAA;EAIlC;EACA;MACE"}

package/dist/src/api/adapters/sso/discord.js

@@ -1 +1,2 @@
-import{HTTPException}from"hono/http-exception";import{z}from"zod";import{getRedirectUri}from"../../models/sso.js";export const DiscordSSOApiPlugin=({clientId="",clientSecret=""})=>{const id="discord";const redirectUri=getRedirectUri(id);const userSchema=z.object({id:z.string(),email:z.string(),username:z.string()});const tokenSchema=z.object({access_token:z.string(),token_type:z.string()});return{fetchToken:async code=>{if(!(clientId&&clientSecret)){throw new Error("Missing Discord client ID or secret")}const res=await fetch("https://discord.com/api/oauth2/token",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams({code,redirect_uri:redirectUri,grant_type:"authorization_code",client_id:clientId,client_secret:clientSecret})});if(!res.ok){throw new HTTPException(+res.status.toString(),{message:"Internal error requesting token"})}const{data,error}=tokenSchema.safeParse(await res.json());if(error||!data){throw new HTTPException(400,{message:"Invalid token response"})}return data},fetchUser:async({token_type,access_token})=>{const res=await fetch("https://discord.com/api/users/@me",{headers:{Authorization:`${token_type} ${access_token}`}});const{data,error}=userSchema.safeParse(await res.json());if(error||!data){throw new HTTPException(400,{message:"Invalid user response"})}return data},getUrl:({state})=>{if(!clientId){throw new Error("Missing Discord client ID")}const url=new URL("https://discord.com/oauth2/authorize");url.searchParams.set("client_id",clientId);url.searchParams.set("redirect_uri",redirectUri);url.searchParams.set("response_type","code");url.searchParams.set("scope","identify email");url.searchParams.set("state",state);return url.toString()},id,name:"Discord"}};
+import{getRedirectUri as e}from"../../models/sso.js";import{HTTPException as t}from"hono/http-exception";import{z as n}from"zod";const r=({clientId:r=``,clientSecret:i=``})=>{let a=`discord`,o=e(a),s=n.object({id:n.string(),email:n.string(),username:n.string()}),c=n.object({access_token:n.string(),token_type:n.string()});return{fetchToken:async e=>{if(!(r&&i))throw Error(`Missing Discord client ID or secret`);let n=await fetch(`https://discord.com/api/oauth2/token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`},body:new URLSearchParams({code:e,redirect_uri:o,grant_type:`authorization_code`,client_id:r,client_secret:i})});if(!n.ok)throw new t(+n.status.toString(),{message:`Internal error requesting token`});let{data:a,error:s}=c.safeParse(await n.json());if(s||!a)throw new t(400,{message:`Invalid token response`});return a},fetchUser:async({token_type:e,access_token:n})=>{let r=await fetch(`https://discord.com/api/users/@me`,{headers:{Authorization:`${e} ${n}`}}),{data:i,error:a}=s.safeParse(await r.json());if(a||!i)throw new t(400,{message:`Invalid user response`});return i},getUrl:({state:e})=>{if(!r)throw Error(`Missing Discord client ID`);let t=new URL(`https://discord.com/oauth2/authorize`);return t.searchParams.set(`client_id`,r),t.searchParams.set(`redirect_uri`,o),t.searchParams.set(`response_type`,`code`),t.searchParams.set(`scope`,`identify email`),t.searchParams.set(`state`,e),t.toString()},id:a,name:`Discord`}};export{r as DiscordSSOApiPlugin};
+//# sourceMappingURL=discord.js.map

package/dist/src/api/adapters/sso/discord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord.js","names":["z"],"sources":["../../../../../src/api/adapters/sso/discord.ts"],"sourcesContent":["import type { ContentfulStatusCode } from \"hono/utils/http-status\";\n\nimport { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport type { SSOApiPlugin } from \"@/api/models/sso\";\n\nimport { getRedirectUri } from \"@/api/models/sso\";\n\nexport const DiscordSSOApiPlugin = ({\n  clientId = \"\",\n  clientSecret = \"\",\n}: {\n  clientId: string | undefined;\n  clientSecret: string | undefined;\n}): SSOApiPlugin => {\n  const id = \"discord\";\n  const redirectUri = getRedirectUri(id);\n  const userSchema = z.object({\n    id: z.string(),\n    email: z.string(),\n    username: z.string(),\n  });\n  const tokenSchema = z.object({\n    access_token: z.string(),\n    token_type: z.string(),\n  });\n\n  return {\n    fetchToken: async code => {\n      if (!(clientId && clientSecret)) {\n        throw new Error(\"Missing Discord client ID or secret\");\n      }\n\n      const res = await fetch(\"https://discord.com/api/oauth2/token\", {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/x-www-form-urlencoded\",\n          Accept: \"application/json\",\n        },\n        body: new URLSearchParams({\n          code,\n          redirect_uri: redirectUri,\n          grant_type: \"authorization_code\",\n          client_id: clientId,\n          client_secret: clientSecret,\n        }),\n      });\n\n      if (!res.ok) {\n        throw new HTTPException(\n          +res.status.toString() as ContentfulStatusCode,\n          {\n            message: \"Internal error requesting token\",\n          },\n        );\n      }\n\n      const { data, error } = tokenSchema.safeParse(await res.json());\n      if (error || !data) {\n        throw new HTTPException(400, {\n          message: \"Invalid token response\",\n        });\n      }\n\n      return data;\n    },\n    fetchUser: async ({ token_type, access_token }) => {\n      const res = await fetch(\"https://discord.com/api/users/@me\", {\n        headers: {\n          Authorization: `${token_type} ${access_token}`,\n        },\n      });\n      const { data, error } = userSchema.safeParse(await res.json());\n      if (error || !data) {\n        throw new HTTPException(400, {\n          message: \"Invalid user response\",\n        });\n      }\n\n      return data;\n    },\n    getUrl: ({ state }) => {\n      if (!clientId) {\n        throw new Error(\"Missing Discord client ID\");\n      }\n\n      const url = new URL(\"https://discord.com/oauth2/authorize\");\n      url.searchParams.set(\"client_id\", clientId);\n      url.searchParams.set(\"redirect_uri\", redirectUri);\n      url.searchParams.set(\"response_type\", \"code\");\n      url.searchParams.set(\"scope\", \"identify email\");\n      url.searchParams.set(\"state\", state);\n\n      return url.toString();\n    },\n    id,\n    name: \"Discord\",\n  };\n};\n"],"mappings":"iIASA,MAAa,GAAuB,CAClC,WAAW,GACX,eAAe,MAIG,CAClB,IAAM,EAAK,UACL,EAAc,EAAe,CAAE,EAC/B,EAAaA,EAAE,OAAO,CAC1B,GAAIA,EAAE,OAAO,EACb,MAAOA,EAAE,OAAO,EAChB,SAAUA,EAAE,OAAO,CACrB,CAAC,EACK,EAAcA,EAAE,OAAO,CAC3B,aAAcA,EAAE,OAAO,EACvB,WAAYA,EAAE,OAAO,CACvB,CAAC,EAED,MAAO,CACL,WAAY,KAAM,IAAQ,CACxB,GAAI,EAAE,GAAY,GAChB,MAAU,MAAM,qCAAqC,EAGvD,IAAM,EAAM,MAAM,MAAM,uCAAwC,CAC9D,OAAQ,OACR,QAAS,CACP,eAAgB,oCAChB,OAAQ,kBACV,EACA,KAAM,IAAI,gBAAgB,CACxB,OACA,aAAc,EACd,WAAY,qBACZ,UAAW,EACX,cAAe,CACjB,CAAC,CACH,CAAC,EAED,GAAI,CAAC,EAAI,GACP,MAAM,IAAI,EACR,CAAC,EAAI,OAAO,SAAS,EACrB,CACE,QAAS,iCACX,CACF,EAGF,GAAM,CAAE,OAAM,SAAU,EAAY,UAAU,MAAM,EAAI,KAAK,CAAC,EAC9D,GAAI,GAAS,CAAC,EACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,wBACX,CAAC,EAGH,OAAO,CACT,EACA,UAAW,MAAO,CAAE,aAAY,kBAAmB,CACjD,IAAM,EAAM,MAAM,MAAM,oCAAqC,CAC3D,QAAS,CACP,cAAe,GAAG,EAAW,GAAG,GAClC,CACF,CAAC,EACK,CAAE,OAAM,SAAU,EAAW,UAAU,MAAM,EAAI,KAAK,CAAC,EAC7D,GAAI,GAAS,CAAC,EACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,uBACX,CAAC,EAGH,OAAO,CACT,EACA,QAAS,CAAE,WAAY,CACrB,GAAI,CAAC,EACH,MAAU,MAAM,2BAA2B,EAG7C,IAAM,EAAM,IAAI,IAAI,sCAAsC,EAO1D,OANA,EAAI,aAAa,IAAI,YAAa,CAAQ,EAC1C,EAAI,aAAa,IAAI,eAAgB,CAAW,EAChD,EAAI,aAAa,IAAI,gBAAiB,MAAM,EAC5C,EAAI,aAAa,IAAI,QAAS,gBAAgB,EAC9C,EAAI,aAAa,IAAI,QAAS,CAAK,EAE5B,EAAI,SAAS,CACtB,EACA,KACA,KAAM,SACR,CACF"}

package/dist/src/api/adapters/sso/facebook.d.ts

@@ -1,6 +1,9 @@
-import type { SSOApiPlugin } from "../../../api/models/sso";
-export declare const FacebookSSOApiPlugin: ({ clientId, clientSecret, }: {
-    clientId: string | undefined;
-    clientSecret: string | undefined;
+import { SSOApiPlugin } from "../../models/sso.js";
+//#region src/api/adapters/sso/facebook.d.ts
+declare const FacebookSSOApiPlugin: ({ clientId, clientSecret }: {
+  clientId: string | undefined;
+  clientSecret: string | undefined;
 }) => SSOApiPlugin;
+//#endregion
+export { FacebookSSOApiPlugin };
 //# sourceMappingURL=facebook.d.ts.map

package/dist/src/api/adapters/sso/facebook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../../../src/api/adapters/sso/facebook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,eAAO,MAAM,oBAAoB,GAAI,6BAGlC;IACD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,KAAG,YAwFH,CAAC"}
+{"version":3,"file":"facebook.d.ts","names":[],"sources":["../../../../../src/api/adapters/sso/facebook.ts"],"mappings":";;cASa,yBAAwB,UAAA;EAInC;EACA;MACE"}

package/dist/src/api/adapters/sso/facebook.js

@@ -1 +1,2 @@
-import{HTTPException}from"hono/http-exception";import{z}from"zod";import{getRedirectUri}from"../../models/sso.js";export const FacebookSSOApiPlugin=({clientId,clientSecret})=>{const id="facebook";const redirectUri=getRedirectUri(id);const tokenSchema=z.object({access_token:z.string(),token_type:z.string()});const userSchema=z.object({id:z.string(),name:z.string(),email:z.string()});return{id,name:"Facebook",fetchToken:async code=>{if(!(clientId&&clientSecret)){throw new Error("Missing Facebook client ID or secret")}const url=new URL("https://graph.facebook.com/v22.0/oauth/access_token");url.searchParams.set("code",code);url.searchParams.set("redirect_uri",redirectUri);url.searchParams.set("client_id",clientId);url.searchParams.set("client_secret",clientSecret);const res=await fetch(url.toString());if(!res.ok){throw new HTTPException(+res.status.toString(),{message:"Internal error requesting token"})}const{data,error}=tokenSchema.safeParse(await res.json());if(error||!data){throw new HTTPException(400,{message:"Invalid token response"})}return data},fetchUser:async({access_token})=>{const url=new URL("https://graph.facebook.com/v22.0/me");url.searchParams.set("fields","id,name,email");url.searchParams.set("access_token",access_token);const res=await fetch(url.toString());if(!res.ok){throw new HTTPException(+res.status.toString(),{message:"Internal error requesting user"})}const{data:userData,error:userError}=userSchema.safeParse(await res.json());if(userError||!userData){throw new HTTPException(400,{message:"Invalid user response"})}return{...userData,username:userData.name}},getUrl:({state})=>{if(!clientId){throw new Error("Missing Facebook client ID")}const url=new URL("https://www.facebook.com/v22.0/dialog/oauth");url.searchParams.set("client_id",clientId);url.searchParams.set("redirect_uri",redirectUri);url.searchParams.set("scope","public_profile,email");url.searchParams.set("response_type","code");url.searchParams.set("state",state);return url.toString()}}};
+import{getRedirectUri as e}from"../../models/sso.js";import{HTTPException as t}from"hono/http-exception";import{z as n}from"zod";const r=({clientId:r,clientSecret:i})=>{let a=`facebook`,o=e(a),s=n.object({access_token:n.string(),token_type:n.string()}),c=n.object({id:n.string(),name:n.string(),email:n.string()});return{id:a,name:`Facebook`,fetchToken:async e=>{if(!(r&&i))throw Error(`Missing Facebook client ID or secret`);let n=new URL(`https://graph.facebook.com/v22.0/oauth/access_token`);n.searchParams.set(`code`,e),n.searchParams.set(`redirect_uri`,o),n.searchParams.set(`client_id`,r),n.searchParams.set(`client_secret`,i);let a=await fetch(n.toString());if(!a.ok)throw new t(+a.status.toString(),{message:`Internal error requesting token`});let{data:c,error:l}=s.safeParse(await a.json());if(l||!c)throw new t(400,{message:`Invalid token response`});return c},fetchUser:async({access_token:e})=>{let n=new URL(`https://graph.facebook.com/v22.0/me`);n.searchParams.set(`fields`,`id,name,email`),n.searchParams.set(`access_token`,e);let r=await fetch(n.toString());if(!r.ok)throw new t(+r.status.toString(),{message:`Internal error requesting user`});let{data:i,error:a}=c.safeParse(await r.json());if(a||!i)throw new t(400,{message:`Invalid user response`});return{...i,username:i.name}},getUrl:({state:e})=>{if(!r)throw Error(`Missing Facebook client ID`);let t=new URL(`https://www.facebook.com/v22.0/dialog/oauth`);return t.searchParams.set(`client_id`,r),t.searchParams.set(`redirect_uri`,o),t.searchParams.set(`scope`,`public_profile,email`),t.searchParams.set(`response_type`,`code`),t.searchParams.set(`state`,e),t.toString()}}};export{r as FacebookSSOApiPlugin};
+//# sourceMappingURL=facebook.js.map

package/dist/src/api/adapters/sso/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.js","names":["z"],"sources":["../../../../../src/api/adapters/sso/facebook.ts"],"sourcesContent":["import type { ContentfulStatusCode } from \"hono/utils/http-status\";\n\nimport { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport type { SSOApiPlugin } from \"@/api/models/sso\";\n\nimport { getRedirectUri } from \"@/api/models/sso\";\n\nexport const FacebookSSOApiPlugin = ({\n  clientId,\n  clientSecret,\n}: {\n  clientId: string | undefined;\n  clientSecret: string | undefined;\n}): SSOApiPlugin => {\n  const id = \"facebook\";\n  const redirectUri = getRedirectUri(id);\n  const tokenSchema = z.object({\n    access_token: z.string(),\n    token_type: z.string(),\n  });\n  const userSchema = z.object({\n    id: z.string(),\n    name: z.string(),\n    email: z.string(),\n  });\n\n  return {\n    id,\n    name: \"Facebook\",\n    fetchToken: async code => {\n      if (!(clientId && clientSecret)) {\n        throw new Error(\"Missing Facebook client ID or secret\");\n      }\n\n      const url = new URL(\n        \"https://graph.facebook.com/v22.0/oauth/access_token\",\n      );\n      url.searchParams.set(\"code\", code);\n      url.searchParams.set(\"redirect_uri\", redirectUri);\n      url.searchParams.set(\"client_id\", clientId);\n      url.searchParams.set(\"client_secret\", clientSecret);\n      const res = await fetch(url.toString());\n      if (!res.ok) {\n        throw new HTTPException(\n          +res.status.toString() as ContentfulStatusCode,\n          {\n            message: \"Internal error requesting token\",\n          },\n        );\n      }\n\n      const { data, error } = tokenSchema.safeParse(await res.json());\n      if (error || !data) {\n        throw new HTTPException(400, {\n          message: \"Invalid token response\",\n        });\n      }\n\n      return data;\n    },\n\n    fetchUser: async ({ access_token }) => {\n      const url = new URL(\"https://graph.facebook.com/v22.0/me\");\n      url.searchParams.set(\"fields\", \"id,name,email\");\n      url.searchParams.set(\"access_token\", access_token);\n      const res = await fetch(url.toString());\n      if (!res.ok) {\n        throw new HTTPException(\n          +res.status.toString() as ContentfulStatusCode,\n          {\n            message: \"Internal error requesting user\",\n          },\n        );\n      }\n      const { data: userData, error: userError } = userSchema.safeParse(\n        await res.json(),\n      );\n      if (userError || !userData) {\n        throw new HTTPException(400, {\n          message: \"Invalid user response\",\n        });\n      }\n\n      return { ...userData, username: userData.name };\n    },\n\n    getUrl: ({ state }) => {\n      if (!clientId) {\n        throw new Error(\"Missing Facebook client ID\");\n      }\n\n      const url = new URL(\"https://www.facebook.com/v22.0/dialog/oauth\");\n      url.searchParams.set(\"client_id\", clientId);\n      url.searchParams.set(\"redirect_uri\", redirectUri);\n      url.searchParams.set(\"scope\", \"public_profile,email\");\n      url.searchParams.set(\"response_type\", \"code\");\n      url.searchParams.set(\"state\", state);\n\n      return url.toString();\n    },\n  };\n};\n"],"mappings":"iIASA,MAAa,GAAwB,CACnC,WACA,kBAIkB,CAClB,IAAM,EAAK,WACL,EAAc,EAAe,CAAE,EAC/B,EAAcA,EAAE,OAAO,CAC3B,aAAcA,EAAE,OAAO,EACvB,WAAYA,EAAE,OAAO,CACvB,CAAC,EACK,EAAaA,EAAE,OAAO,CAC1B,GAAIA,EAAE,OAAO,EACb,KAAMA,EAAE,OAAO,EACf,MAAOA,EAAE,OAAO,CAClB,CAAC,EAED,MAAO,CACL,KACA,KAAM,WACN,WAAY,KAAM,IAAQ,CACxB,GAAI,EAAE,GAAY,GAChB,MAAU,MAAM,sCAAsC,EAGxD,IAAM,EAAM,IAAI,IACd,qDACF,EACA,EAAI,aAAa,IAAI,OAAQ,CAAI,EACjC,EAAI,aAAa,IAAI,eAAgB,CAAW,EAChD,EAAI,aAAa,IAAI,YAAa,CAAQ,EAC1C,EAAI,aAAa,IAAI,gBAAiB,CAAY,EAClD,IAAM,EAAM,MAAM,MAAM,EAAI,SAAS,CAAC,EACtC,GAAI,CAAC,EAAI,GACP,MAAM,IAAI,EACR,CAAC,EAAI,OAAO,SAAS,EACrB,CACE,QAAS,iCACX,CACF,EAGF,GAAM,CAAE,OAAM,SAAU,EAAY,UAAU,MAAM,EAAI,KAAK,CAAC,EAC9D,GAAI,GAAS,CAAC,EACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,wBACX,CAAC,EAGH,OAAO,CACT,EAEA,UAAW,MAAO,CAAE,kBAAmB,CACrC,IAAM,EAAM,IAAI,IAAI,qCAAqC,EACzD,EAAI,aAAa,IAAI,SAAU,eAAe,EAC9C,EAAI,aAAa,IAAI,eAAgB,CAAY,EACjD,IAAM,EAAM,MAAM,MAAM,EAAI,SAAS,CAAC,EACtC,GAAI,CAAC,EAAI,GACP,MAAM,IAAI,EACR,CAAC,EAAI,OAAO,SAAS,EACrB,CACE,QAAS,gCACX,CACF,EAEF,GAAM,CAAE,KAAM,EAAU,MAAO,GAAc,EAAW,UACtD,MAAM,EAAI,KAAK,CACjB,EACA,GAAI,GAAa,CAAC,EAChB,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,uBACX,CAAC,EAGH,MAAO,CAAE,GAAG,EAAU,SAAU,EAAS,IAAK,CAChD,EAEA,QAAS,CAAE,WAAY,CACrB,GAAI,CAAC,EACH,MAAU,MAAM,4BAA4B,EAG9C,IAAM,EAAM,IAAI,IAAI,6CAA6C,EAOjE,OANA,EAAI,aAAa,IAAI,YAAa,CAAQ,EAC1C,EAAI,aAAa,IAAI,eAAgB,CAAW,EAChD,EAAI,aAAa,IAAI,QAAS,sBAAsB,EACpD,EAAI,aAAa,IAAI,gBAAiB,MAAM,EAC5C,EAAI,aAAa,IAAI,QAAS,CAAK,EAE5B,EAAI,SAAS,CACtB,CACF,CACF"}

package/dist/src/api/adapters/sso/google.d.ts

@@ -1,6 +1,9 @@
-import type { SSOApiPlugin } from "../../../api/models/sso";
-export declare const GoogleSSOApiPlugin: ({ clientId, clientSecret, }: {
-    clientId: string | undefined;
-    clientSecret: string | undefined;
+import { SSOApiPlugin } from "../../models/sso.js";
+//#region src/api/adapters/sso/google.d.ts
+declare const GoogleSSOApiPlugin: ({ clientId, clientSecret }: {
+  clientId: string | undefined;
+  clientSecret: string | undefined;
 }) => SSOApiPlugin;
+//#endregion
+export { GoogleSSOApiPlugin };
 //# sourceMappingURL=google.d.ts.map

package/dist/src/api/adapters/sso/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../../src/api/adapters/sso/google.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,eAAO,MAAM,kBAAkB,GAAI,6BAGhC;IACD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,KAAG,YA+FH,CAAC"}
+{"version":3,"file":"google.d.ts","names":[],"sources":["../../../../../src/api/adapters/sso/google.ts"],"mappings":";;cASa,uBAAsB,UAAA;EAIjC;EACA;MACE"}

package/dist/src/api/adapters/sso/google.js

@@ -1 +1,2 @@
-import{HTTPException}from"hono/http-exception";import{z}from"zod";import{getRedirectUri}from"../../models/sso.js";export const GoogleSSOApiPlugin=({clientId,clientSecret})=>{const id="google";const redirectUri=getRedirectUri(id);const tokenSchema=z.object({access_token:z.string(),token_type:z.string()});const userSchema=z.object({id:z.string(),email:z.string(),name:z.string(),verified_email:z.boolean()});return{id,name:"Google",fetchToken:async code=>{if(!(clientId&&clientSecret)){throw new Error("Missing Google client ID or secret")}const res=await fetch("https://oauth2.googleapis.com/token",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams({code,redirect_uri:redirectUri,grant_type:"authorization_code",client_id:clientId,client_secret:clientSecret})});if(!res.ok){throw new HTTPException(+res.status.toString(),{message:"Internal error requesting token"})}const{data,error}=tokenSchema.safeParse(await res.json());if(error||!data){throw new HTTPException(400,{message:"Invalid token response"})}return data},fetchUser:async({token_type,access_token})=>{const res=await fetch("https://www.googleapis.com/oauth2/v1/userinfo",{headers:{Authorization:`${token_type} ${access_token}`}});const dataFromRes=await res.json();const{data,error}=userSchema.safeParse(dataFromRes);if(error||!data){throw new HTTPException(400,{message:"Invalid user response"})}if(!data.verified_email){throw new HTTPException(400,{message:"Email not verified"})}return{...data,username:data.name}},getUrl:({state})=>{if(!clientId){throw new Error("Missing Google client ID")}const url=new URL("https://accounts.google.com/o/oauth2/auth");url.searchParams.set("client_id",clientId);url.searchParams.set("redirect_uri",redirectUri);url.searchParams.set("response_type","code");url.searchParams.set("scope","openid profile email");url.searchParams.set("state",state);return url.toString()}}};
+import{getRedirectUri as e}from"../../models/sso.js";import{HTTPException as t}from"hono/http-exception";import{z as n}from"zod";const r=({clientId:r,clientSecret:i})=>{let a=`google`,o=e(a),s=n.object({access_token:n.string(),token_type:n.string()}),c=n.object({id:n.string(),email:n.string(),name:n.string(),verified_email:n.boolean()});return{id:a,name:`Google`,fetchToken:async e=>{if(!(r&&i))throw Error(`Missing Google client ID or secret`);let n=await fetch(`https://oauth2.googleapis.com/token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`},body:new URLSearchParams({code:e,redirect_uri:o,grant_type:`authorization_code`,client_id:r,client_secret:i})});if(!n.ok)throw new t(+n.status.toString(),{message:`Internal error requesting token`});let{data:a,error:c}=s.safeParse(await n.json());if(c||!a)throw new t(400,{message:`Invalid token response`});return a},fetchUser:async({token_type:e,access_token:n})=>{let r=await(await fetch(`https://www.googleapis.com/oauth2/v1/userinfo`,{headers:{Authorization:`${e} ${n}`}})).json(),{data:i,error:a}=c.safeParse(r);if(a||!i)throw new t(400,{message:`Invalid user response`});if(!i.verified_email)throw new t(400,{message:`Email not verified`});return{...i,username:i.name}},getUrl:({state:e})=>{if(!r)throw Error(`Missing Google client ID`);let t=new URL(`https://accounts.google.com/o/oauth2/auth`);return t.searchParams.set(`client_id`,r),t.searchParams.set(`redirect_uri`,o),t.searchParams.set(`response_type`,`code`),t.searchParams.set(`scope`,`openid profile email`),t.searchParams.set(`state`,e),t.toString()}}};export{r as GoogleSSOApiPlugin};
+//# sourceMappingURL=google.js.map

package/dist/src/api/adapters/sso/google.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.js","names":["z"],"sources":["../../../../../src/api/adapters/sso/google.ts"],"sourcesContent":["import type { ContentfulStatusCode } from \"hono/utils/http-status\";\n\nimport { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport type { SSOApiPlugin } from \"@/api/models/sso\";\n\nimport { getRedirectUri } from \"@/api/models/sso\";\n\nexport const GoogleSSOApiPlugin = ({\n  clientId,\n  clientSecret,\n}: {\n  clientId: string | undefined;\n  clientSecret: string | undefined;\n}): SSOApiPlugin => {\n  const id = \"google\";\n  const redirectUri = getRedirectUri(id);\n  const tokenSchema = z.object({\n    access_token: z.string(),\n    token_type: z.string(),\n  });\n  const userSchema = z.object({\n    id: z.string(),\n    email: z.string(),\n    name: z.string(),\n    verified_email: z.boolean(),\n  });\n\n  return {\n    id,\n    name: \"Google\",\n    fetchToken: async code => {\n      if (!(clientId && clientSecret)) {\n        throw new Error(\"Missing Google client ID or secret\");\n      }\n\n      const res = await fetch(\"https://oauth2.googleapis.com/token\", {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/x-www-form-urlencoded\",\n          Accept: \"application/json\",\n        },\n        body: new URLSearchParams({\n          code,\n          redirect_uri: redirectUri,\n          grant_type: \"authorization_code\",\n          client_id: clientId,\n          client_secret: clientSecret,\n        }),\n      });\n\n      if (!res.ok) {\n        throw new HTTPException(\n          +res.status.toString() as ContentfulStatusCode,\n          {\n            message: \"Internal error requesting token\",\n          },\n        );\n      }\n\n      const { data, error } = tokenSchema.safeParse(await res.json());\n      if (error || !data) {\n        throw new HTTPException(400, {\n          message: \"Invalid token response\",\n        });\n      }\n\n      return data;\n    },\n    fetchUser: async ({ token_type, access_token }) => {\n      const res = await fetch(\"https://www.googleapis.com/oauth2/v1/userinfo\", {\n        headers: {\n          Authorization: `${token_type} ${access_token}`,\n        },\n      });\n      const dataFromRes = await res.json();\n      const { data, error } = userSchema.safeParse(dataFromRes);\n      if (error || !data) {\n        throw new HTTPException(400, {\n          message: \"Invalid user response\",\n        });\n      }\n\n      if (!data.verified_email) {\n        throw new HTTPException(400, {\n          message: \"Email not verified\",\n        });\n      }\n\n      return {\n        ...data,\n        username: data.name,\n      };\n    },\n    getUrl: ({ state }) => {\n      if (!clientId) {\n        throw new Error(\"Missing Google client ID\");\n      }\n\n      const url = new URL(\"https://accounts.google.com/o/oauth2/auth\");\n      url.searchParams.set(\"client_id\", clientId);\n      url.searchParams.set(\"redirect_uri\", redirectUri);\n      url.searchParams.set(\"response_type\", \"code\");\n      url.searchParams.set(\"scope\", \"openid profile email\");\n      url.searchParams.set(\"state\", state);\n\n      return url.toString();\n    },\n  };\n};\n"],"mappings":"iIASA,MAAa,GAAsB,CACjC,WACA,kBAIkB,CAClB,IAAM,EAAK,SACL,EAAc,EAAe,CAAE,EAC/B,EAAcA,EAAE,OAAO,CAC3B,aAAcA,EAAE,OAAO,EACvB,WAAYA,EAAE,OAAO,CACvB,CAAC,EACK,EAAaA,EAAE,OAAO,CAC1B,GAAIA,EAAE,OAAO,EACb,MAAOA,EAAE,OAAO,EAChB,KAAMA,EAAE,OAAO,EACf,eAAgBA,EAAE,QAAQ,CAC5B,CAAC,EAED,MAAO,CACL,KACA,KAAM,SACN,WAAY,KAAM,IAAQ,CACxB,GAAI,EAAE,GAAY,GAChB,MAAU,MAAM,oCAAoC,EAGtD,IAAM,EAAM,MAAM,MAAM,sCAAuC,CAC7D,OAAQ,OACR,QAAS,CACP,eAAgB,oCAChB,OAAQ,kBACV,EACA,KAAM,IAAI,gBAAgB,CACxB,OACA,aAAc,EACd,WAAY,qBACZ,UAAW,EACX,cAAe,CACjB,CAAC,CACH,CAAC,EAED,GAAI,CAAC,EAAI,GACP,MAAM,IAAI,EACR,CAAC,EAAI,OAAO,SAAS,EACrB,CACE,QAAS,iCACX,CACF,EAGF,GAAM,CAAE,OAAM,SAAU,EAAY,UAAU,MAAM,EAAI,KAAK,CAAC,EAC9D,GAAI,GAAS,CAAC,EACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,wBACX,CAAC,EAGH,OAAO,CACT,EACA,UAAW,MAAO,CAAE,aAAY,kBAAmB,CAMjD,IAAM,EAAc,MAAM,MALR,MAAM,gDAAiD,CACvE,QAAS,CACP,cAAe,GAAG,EAAW,GAAG,GAClC,CACF,CAAC,EAAA,CAC6B,KAAK,EAC7B,CAAE,OAAM,SAAU,EAAW,UAAU,CAAW,EACxD,GAAI,GAAS,CAAC,EACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,uBACX,CAAC,EAGH,GAAI,CAAC,EAAK,eACR,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,oBACX,CAAC,EAGH,MAAO,CACL,GAAG,EACH,SAAU,EAAK,IACjB,CACF,EACA,QAAS,CAAE,WAAY,CACrB,GAAI,CAAC,EACH,MAAU,MAAM,0BAA0B,EAG5C,IAAM,EAAM,IAAI,IAAI,2CAA2C,EAO/D,OANA,EAAI,aAAa,IAAI,YAAa,CAAQ,EAC1C,EAAI,aAAa,IAAI,eAAgB,CAAW,EAChD,EAAI,aAAa,IAAI,gBAAiB,MAAM,EAC5C,EAAI,aAAa,IAAI,QAAS,sBAAsB,EACpD,EAAI,aAAa,IAAI,QAAS,CAAK,EAE5B,EAAI,SAAS,CACtB,CACF,CACF"}

package/dist/src/api/adapters/storage/local.d.ts

@@ -0,0 +1,9 @@
+import { StorageApiPlugin } from "../../models/storage.js";
+//#region src/api/adapters/storage/local.d.ts
+declare const LocalStorageAdapter: ({ baseUrl, publicPath }?: {
+  baseUrl?: string;
+  publicPath?: string;
+}) => StorageApiPlugin;
+//#endregion
+export { LocalStorageAdapter };
+//# sourceMappingURL=local.d.ts.map

package/dist/src/api/adapters/storage/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","names":[],"sources":["../../../../../src/api/adapters/storage/local.ts"],"mappings":";;cAuBa,wBAAuB,SAAA;EAIlC;EACA;MACO"}

package/dist/src/api/adapters/storage/local.js

@@ -0,0 +1,2 @@
+import{CONFIG as e}from"../../../lib/config.js";import{dirname as t,join as n}from"node:path";import{mkdir as r,rm as i,writeFile as a}from"node:fs/promises";const o=({baseUrl:o,publicPath:s=`/api/uploads`}={})=>{let c=e=>n(process.cwd(),`public`,`uploads`,e),l=t=>`${(o??e.api.origin).replace(/\/$/,``)}/${s.replace(/^\/|\/$/g,``)}/${t}`;return{delete:async e=>{await i(c(e),{force:!0})},getUrl:l,static:{mountPath:`${s.replace(/^\/api/,``)}/*`,root:`./public/uploads`,stripPrefix:s},upload:async({body:e,key:n})=>{let i=c(n);return await r(t(i),{recursive:!0}),await a(i,e),{key:n,url:l(n)}}}};export{o as LocalStorageAdapter};
+//# sourceMappingURL=local.js.map

package/dist/src/api/adapters/storage/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","names":[],"sources":["../../../../../src/api/adapters/storage/local.ts"],"sourcesContent":["import { mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\n\nimport type {\n  StorageApiPlugin,\n  StorageUploadArgs,\n  StorageUploadResult,\n} from \"@/api/models/storage\";\n\nimport { CONFIG } from \"@/lib/config\";\n\n/**\n * Zero-config storage backend that writes uploads to the local disk under\n * `public/uploads`.\n *\n * - On the standalone Node API (`@hono/node-server`) files are served by Hono's\n *   `serveStatic`, wired from the `static` descriptor below. The API is mounted\n *   under `/api`, so `publicPath` defaults to `/api/uploads`.\n * - Inside a Next.js app the `public/` directory is served at the site root, so\n *   pass `publicPath: \"/uploads\"` there (the `static` descriptor is unused).\n *\n * Local disk is not durable on serverless platforms - use a cloud adapter there.\n */\nexport const LocalStorageAdapter = ({\n  baseUrl,\n  publicPath = \"/api/uploads\",\n}: {\n  baseUrl?: string;\n  publicPath?: string;\n} = {}): StorageApiPlugin => {\n  // Static path segments (not a variable) so Next's file tracer can scope the\n  // trace to `public/uploads` instead of the whole project.\n  const resolvePath = (key: string): string =>\n    join(process.cwd(), \"public\", \"uploads\", key);\n  const getUrl = (key: string): string => {\n    const base = (baseUrl ?? CONFIG.api.origin).replace(/\\/$/, \"\");\n    const path = publicPath.replace(/^\\/|\\/$/g, \"\");\n\n    return `${base}/${path}/${key}`;\n  };\n  // Route registered on the API app, which already carries the `/api` basePath.\n  const mountPath = `${publicPath.replace(/^\\/api/, \"\")}/*`;\n\n  return {\n    delete: async (key: string): Promise<void> => {\n      await rm(resolvePath(key), { force: true });\n    },\n    getUrl,\n    static: {\n      mountPath,\n      root: \"./public/uploads\",\n      stripPrefix: publicPath,\n    },\n    upload: async ({\n      body,\n      key,\n    }: StorageUploadArgs): Promise<StorageUploadResult> => {\n      const filePath = resolvePath(key);\n      await mkdir(dirname(filePath), { recursive: true });\n      await writeFile(filePath, body);\n\n      return { key, url: getUrl(key) };\n    },\n  };\n};\n"],"mappings":"8JAuBA,MAAa,GAAuB,CAClC,UACA,aAAa,gBAIX,CAAC,IAAwB,CAG3B,IAAM,EAAe,GACnB,EAAK,QAAQ,IAAI,EAAG,SAAU,UAAW,CAAG,EACxC,EAAU,GAIP,IAHO,GAAW,EAAO,IAAI,OAAA,CAAQ,QAAQ,MAAO,EAG9C,EAAE,GAFF,EAAW,QAAQ,WAAY,EAEvB,EAAE,GAAG,IAK5B,MAAO,CACL,OAAQ,KAAO,IAA+B,CAC5C,MAAM,EAAG,EAAY,CAAG,EAAG,CAAE,MAAO,EAAK,CAAC,CAC5C,EACA,SACA,OAAQ,CACN,UAAA,GARiB,EAAW,QAAQ,SAAU,EAAE,EAAE,IASlD,KAAM,mBACN,YAAa,CACf,EACA,OAAQ,MAAO,CACb,OACA,SACqD,CACrD,IAAM,EAAW,EAAY,CAAG,EAIhC,OAHA,MAAM,EAAM,EAAQ,CAAQ,EAAG,CAAE,UAAW,EAAK,CAAC,EAClD,MAAM,EAAU,EAAU,CAAI,EAEvB,CAAE,MAAK,IAAK,EAAO,CAAG,CAAE,CACjC,CACF,CACF"}

package/dist/src/api/config.d.ts

@@ -1,23 +1,25 @@
-import type { OpenAPIHono } from "@hono/zod-openapi";
-import type { Context, Env, Schema } from "hono";
-import type { VitNodeApiConfig } from "../vitnode.config";
+import { VitNodeApiConfig } from "../vitnode.config.js";
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { Context, Env, Schema } from "hono";
+//#region src/api/config.d.ts
 interface CORSOptions {
-    allowHeaders?: string[];
-    allowMethods?: string[];
-    credentials?: boolean;
-    exposeHeaders?: string[];
-    maxAge?: number;
-    origin: ((origin: string, c: Context) => null | string | undefined) | string | string[];
+  allowHeaders?: string[];
+  allowMethods?: string[];
+  credentials?: boolean;
+  exposeHeaders?: string[];
+  maxAge?: number;
+  origin: ((origin: string, c: Context) => null | string | undefined) | string | string[];
 }
 type IsAllowedOriginHandler = (origin: string, context: Context) => boolean;
 interface CSRFOptions {
-    origin?: IsAllowedOriginHandler | string | string[];
+  origin?: IsAllowedOriginHandler | string | string[];
 }
-export declare function VitNodeAPI({ app, cors: corsOptions, csrf: csrfOptions, vitNodeApiConfig, }: {
-    app: OpenAPIHono<Env, Schema, string>;
-    cors?: CORSOptions;
-    csrf?: CSRFOptions;
-    vitNodeApiConfig: VitNodeApiConfig;
+declare function VitNodeAPI({ app, cors: corsOptions, csrf: csrfOptions, vitNodeApiConfig }: {
+  app: OpenAPIHono<Env, Schema, string>;
+  cors?: CORSOptions;
+  csrf?: CSRFOptions;
+  vitNodeApiConfig: VitNodeApiConfig;
 }): OpenAPIHono<Env, Schema, string>;
-export {};
+//#endregion
+export { VitNodeAPI };
 //# sourceMappingURL=config.d.ts.map

package/dist/src/api/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/api/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAOjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAazD,UAAU,WAAW;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EACF,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC,GAC3D,MAAM,GACN,MAAM,EAAE,CAAC;CACd;AAED,KAAK,sBAAsB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;AAC5E,UAAU,WAAW;IACnB,MAAM,CAAC,EAAE,sBAAsB,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;CACrD;AAED,wBAAgB,UAAU,CAAC,EACzB,GAAG,EACH,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,gBAAgB,GACjB,EAAE;IACD,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,gBAAgB,EAAE,gBAAgB,CAAC;CACpC,oCAkFA"}
+{"version":3,"file":"config.d.ts","names":[],"sources":["../../../src/api/config.ts"],"mappings":";;;;UAqBU;EACR;EACA;EACA;EACA;EACA;EACA,UACM,gBAAgB,GAAG;;KAKtB,0BAA0B,gBAAgB,SAAS;UAC9C;EACR,SAAS;;iBAGK,aACd,KACA,MAAM,aACN,MAAM,aACN;EAEA,KAAK,YAAY,KAAK;EACtB,OAAO;EACP,OAAO;EACP,kBAAkB;IACnB,YAAA,KAAA"}

package/dist/src/api/config.js

@@ -1 +1,2 @@
-import{swaggerUI}from"@hono/swagger-ui";import{cors}from"hono/cors";import{csrf}from"hono/csrf";import{HTTPException}from"hono/http-exception";import{createCacheClient}from"./lib/cache-client.js";import{newBuildPluginApiCore}from"./plugin.js";import{CONFIG_PLUGIN}from"../config.js";import{initRealtimePubSub}from"../ws/registry.js";import{globalAdminMiddleware,globalMiddleware}from"./middlewares/global.middleware.js";import{rateLimiterMiddleware}from"./middlewares/rate-limiter.middleware.js";export function VitNodeAPI({app,cors:corsOptions,csrf:csrfOptions,vitNodeApiConfig}){const redisClient=createCacheClient(vitNodeApiConfig.redis);initRealtimePubSub(redisClient);app.doc("/swagger/doc",{openapi:"3.0.0",info:{version:CONFIG_PLUGIN.version,title:"VitNode API"}});app.use(cors(corsOptions));app.use(csrf(csrfOptions));app.use("*",rateLimiterMiddleware(vitNodeApiConfig.rateLimiter,redisClient));app.get("/swagger",swaggerUI({url:"/api/swagger/doc"}));app.use("*",globalMiddleware({pathToMessages:vitNodeApiConfig.pathToMessages,email:vitNodeApiConfig.email,metadata:vitNodeApiConfig.metadata,authorization:vitNodeApiConfig.authorization,dbProvider:vitNodeApiConfig.dbProvider,captcha:vitNodeApiConfig.captcha,cron:vitNodeApiConfig.cron,plugins:[newBuildPluginApiCore,...vitNodeApiConfig.plugins],cacheClient:redisClient}));app.use(async(c,next)=>{if(c.req.path.includes("/admin/")){return await globalAdminMiddleware()(c,next)}return next()});if(vitNodeApiConfig.cron){vitNodeApiConfig.cron.schedule()}[newBuildPluginApiCore,...vitNodeApiConfig.plugins].map(root=>{app.route(`/${root.pluginId}`,root.hono)});app.onError(async(error,c)=>{if(error instanceof HTTPException){return error.getResponse()}const errorMessage=error?.message??"Unknown error";try{const logger=c.get("log");if(logger){await logger.error(`Unhandled error: ${errorMessage}`)}}catch{}return new Response(process.env.NODE_ENV==="development"?errorMessage:"Internal Server Error",{status:500})});return app}
+import{CONFIG_PLUGIN as e}from"../config.js";import{createCacheClient as t}from"./lib/cache-client.js";import{initRealtimePubSub as n}from"../ws/registry.js";import{newBuildPluginApiCore as r}from"./plugin.js";import{globalAdminMiddleware as i,globalMiddleware as a}from"./middlewares/global.middleware.js";import{rateLimiterMiddleware as o}from"./middlewares/rate-limiter.middleware.js";import{swaggerUI as s}from"@hono/swagger-ui";import{cors as c}from"hono/cors";import{csrf as l}from"hono/csrf";import{HTTPException as u}from"hono/http-exception";function d({app:d,cors:f,csrf:p,vitNodeApiConfig:m}){let h=t(m.redis);return n(h),d.doc(`/swagger/doc`,{openapi:`3.0.0`,info:{version:e.version,title:`VitNode API`}}),d.use(c(f)),d.use(l(p)),d.use(`*`,o(m.rateLimiter,h)),d.get(`/swagger`,s({url:`/api/swagger/doc`})),d.use(`*`,a({pathToMessages:m.pathToMessages,email:m.email,metadata:m.metadata,authorization:m.authorization,dbProvider:m.dbProvider,captcha:m.captcha,cron:m.cron,storage:m.storage,plugins:[r,...m.plugins],cacheClient:h})),d.use(async(e,t)=>e.req.path.includes(`/admin/`)?await i()(e,t):t()),m.cron&&m.cron.schedule(),[r,...m.plugins].map(e=>{d.route(`/${e.pluginId}`,e.hono)}),d.onError(async(e,t)=>{if(e instanceof u)return e.getResponse();let n=e?.message??`Unknown error`;try{let e=t.get(`log`);e&&await e.error(`Unhandled error: ${n}`)}catch{}return new Response(process.env.NODE_ENV===`development`?n:`Internal Server Error`,{status:500})}),d}export{d as VitNodeAPI};
+//# sourceMappingURL=config.js.map

package/dist/src/api/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","names":[],"sources":["../../../src/api/config.ts"],"sourcesContent":["import type { OpenAPIHono } from \"@hono/zod-openapi\";\nimport type { Context, Env, Schema } from \"hono\";\n\nimport { swaggerUI } from \"@hono/swagger-ui\";\nimport { cors } from \"hono/cors\";\nimport { csrf } from \"hono/csrf\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport type { VitNodeApiConfig } from \"@/vitnode.config\";\n\nimport { createCacheClient } from \"@/api/lib/cache-client\";\nimport { newBuildPluginApiCore } from \"@/api/plugin\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { initRealtimePubSub } from \"@/ws/registry\";\n\nimport {\n  globalAdminMiddleware,\n  globalMiddleware,\n} from \"./middlewares/global.middleware\";\nimport { rateLimiterMiddleware } from \"./middlewares/rate-limiter.middleware\";\n\ninterface CORSOptions {\n  allowHeaders?: string[];\n  allowMethods?: string[];\n  credentials?: boolean;\n  exposeHeaders?: string[];\n  maxAge?: number;\n  origin:\n    | ((origin: string, c: Context) => null | string | undefined)\n    | string\n    | string[];\n}\n\ntype IsAllowedOriginHandler = (origin: string, context: Context) => boolean;\ninterface CSRFOptions {\n  origin?: IsAllowedOriginHandler | string | string[];\n}\n\nexport function VitNodeAPI({\n  app,\n  cors: corsOptions,\n  csrf: csrfOptions,\n  vitNodeApiConfig,\n}: {\n  app: OpenAPIHono<Env, Schema, string>;\n  cors?: CORSOptions;\n  csrf?: CSRFOptions;\n  vitNodeApiConfig: VitNodeApiConfig;\n}) {\n  // Shared Redis client, created once at boot. Reused by the rate limiter\n  // (which runs before the request context exists), the realtime pub/sub bridge,\n  // and the per-request cache exposed as `c.get(\"cache\")`. Safe no-op when\n  // `redis` is unset.\n  const redisClient = createCacheClient(vitNodeApiConfig.redis);\n\n  // Bridge realtime (WebSocket) messages across instances via Redis pub/sub, so\n  // `broadcast`/`sendToUser` reach clients on every instance. No-op without Redis.\n  initRealtimePubSub(redisClient);\n\n  app.doc(\"/swagger/doc\", {\n    openapi: \"3.0.0\",\n    info: {\n      version: CONFIG_PLUGIN.version,\n      title: \"VitNode API\",\n    },\n  });\n  app.use(cors(corsOptions));\n  app.use(csrf(csrfOptions));\n  app.use(\n    \"*\",\n    rateLimiterMiddleware(vitNodeApiConfig.rateLimiter, redisClient),\n  );\n  app.get(\"/swagger\", swaggerUI({ url: \"/api/swagger/doc\" }));\n  app.use(\n    \"*\",\n    globalMiddleware({\n      pathToMessages: vitNodeApiConfig.pathToMessages,\n      email: vitNodeApiConfig.email,\n      metadata: vitNodeApiConfig.metadata,\n      authorization: vitNodeApiConfig.authorization,\n      dbProvider: vitNodeApiConfig.dbProvider,\n      captcha: vitNodeApiConfig.captcha,\n      cron: vitNodeApiConfig.cron,\n      storage: vitNodeApiConfig.storage,\n      plugins: [newBuildPluginApiCore, ...vitNodeApiConfig.plugins],\n      cacheClient: redisClient,\n    }),\n  );\n  app.use(async (c, next) => {\n    if (c.req.path.includes(\"/admin/\")) {\n      return await globalAdminMiddleware()(c, next);\n    }\n\n    return next();\n  });\n\n  if (vitNodeApiConfig.cron) {\n    vitNodeApiConfig.cron.schedule();\n  }\n\n  [newBuildPluginApiCore, ...vitNodeApiConfig.plugins].map(root => {\n    app.route(`/${root.pluginId}`, root.hono);\n  });\n\n  app.onError(async (error, c) => {\n    if (error instanceof HTTPException) {\n      return error.getResponse();\n    }\n\n    const errorMessage = error?.message ?? \"Unknown error\";\n\n    try {\n      const logger = c.get(\"log\");\n      if (logger) {\n        await logger.error(`Unhandled error: ${errorMessage}`);\n      }\n    } catch {\n      /* empty */\n    }\n\n    return new Response(\n      process.env.NODE_ENV === \"development\"\n        ? errorMessage\n        : \"Internal Server Error\",\n      {\n        status: 500,\n      },\n    );\n  });\n\n  return app;\n}\n"],"mappings":"uiBAsCA,SAAgB,EAAW,CACzB,MACA,KAAM,EACN,KAAM,EACN,oBAMC,CAKD,IAAM,EAAc,EAAkB,EAAiB,KAAK,EA6E5D,OAzEA,EAAmB,CAAW,EAE9B,EAAI,IAAI,eAAgB,CACtB,QAAS,QACT,KAAM,CACJ,QAAS,EAAc,QACvB,MAAO,aACT,CACF,CAAC,EACD,EAAI,IAAI,EAAK,CAAW,CAAC,EACzB,EAAI,IAAI,EAAK,CAAW,CAAC,EACzB,EAAI,IACF,IACA,EAAsB,EAAiB,YAAa,CAAW,CACjE,EACA,EAAI,IAAI,WAAY,EAAU,CAAE,IAAK,kBAAmB,CAAC,CAAC,EAC1D,EAAI,IACF,IACA,EAAiB,CACf,eAAgB,EAAiB,eACjC,MAAO,EAAiB,MACxB,SAAU,EAAiB,SAC3B,cAAe,EAAiB,cAChC,WAAY,EAAiB,WAC7B,QAAS,EAAiB,QAC1B,KAAM,EAAiB,KACvB,QAAS,EAAiB,QAC1B,QAAS,CAAC,EAAuB,GAAG,EAAiB,OAAO,EAC5D,YAAa,CACf,CAAC,CACH,EACA,EAAI,IAAI,MAAO,EAAG,IACZ,EAAE,IAAI,KAAK,SAAS,SAAS,EACxB,MAAM,EAAsB,CAAC,CAAC,EAAG,CAAI,EAGvC,EAAK,CACb,EAEG,EAAiB,MACnB,EAAiB,KAAK,SAAS,EAGjC,CAAC,EAAuB,GAAG,EAAiB,OAAO,CAAC,CAAC,IAAI,GAAQ,CAC/D,EAAI,MAAM,IAAI,EAAK,WAAY,EAAK,IAAI,CAC1C,CAAC,EAED,EAAI,QAAQ,MAAO,EAAO,IAAM,CAC9B,GAAI,aAAiB,EACnB,OAAO,EAAM,YAAY,EAG3B,IAAM,EAAe,GAAO,SAAW,gBAEvC,GAAI,CACF,IAAM,EAAS,EAAE,IAAI,KAAK,EACtB,GACF,MAAM,EAAO,MAAM,oBAAoB,GAAc,CAEzD,MAAQ,CAER,CAEA,OAAO,IAAI,SACT,QAAQ,IAAI,WAAa,cACrB,EACA,wBACJ,CACE,OAAQ,GACV,CACF,CACF,CAAC,EAEM,CACT"}

package/dist/src/api/lib/cache-client.d.ts

@@ -1,4 +1,7 @@
+import { CacheConfig } from "./cache.js";
 import { Redis } from "ioredis";
-import type { CacheConfig } from "./cache";
-export declare const createCacheClient: (config?: CacheConfig) => null | Redis;
+//#region src/api/lib/cache-client.d.ts
+declare const createCacheClient: (config?: CacheConfig) => null | Redis;
+//#endregion
+export { createCacheClient };
 //# sourceMappingURL=cache-client.d.ts.map

package/dist/src/api/lib/cache-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-client.d.ts","sourceRoot":"","sources":["../../../../src/api/lib/cache-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,eAAO,MAAM,iBAAiB,GAAI,SAAS,WAAW,KAAG,IAAI,GAAG,KAkB/D,CAAC"}
+{"version":3,"file":"cache-client.d.ts","names":[],"sources":["../../../../src/api/lib/cache-client.ts"],"mappings":";;;cAIa,oBAAqB,SAAS,uBAAqB"}

package/dist/src/api/lib/cache-client.js

@@ -1 +1,2 @@
-import{Redis}from"ioredis";export const createCacheClient=config=>{if(!config)return null;const{url,...options}=config;const client=url?new Redis(url,{enableOfflineQueue:false,...options}):new Redis({enableOfflineQueue:false,...options});client.on("error",()=>{});return client};
+import{Redis as e}from"ioredis";const t=t=>{if(!t)return null;let{url:n,...r}=t,i=n?new e(n,{enableOfflineQueue:!1,...r}):new e({enableOfflineQueue:!1,...r});return i.on(`error`,()=>{}),i};export{t as createCacheClient};
+//# sourceMappingURL=cache-client.js.map

package/dist/src/api/lib/cache-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-client.js","names":[],"sources":["../../../../src/api/lib/cache-client.ts"],"sourcesContent":["import { Redis } from \"ioredis\";\n\nimport type { CacheConfig } from \"./cache\";\n\nexport const createCacheClient = (config?: CacheConfig): null | Redis => {\n  if (!config) return null;\n\n  const { url, ...options } = config;\n  // `enableOfflineQueue: false` makes commands fail fast (instead of queueing)\n  // when Redis is unreachable, so `remember` falls through to its loader rather\n  // than hanging. Callers can override it via the config.\n  const client = url\n    ? new Redis(url, { enableOfflineQueue: false, ...options })\n    : new Redis({ enableOfflineQueue: false, ...options });\n\n  // Without a listener, an \"error\" event (e.g. Redis down) is thrown as an\n  // unhandled exception and crashes the process. Swallow it here.\n  client.on(\"error\", () => {\n    /* cache methods handle failures individually */\n  });\n\n  return client;\n};\n"],"mappings":"gCAIA,MAAa,EAAqB,GAAuC,CACvE,GAAI,CAAC,EAAQ,OAAO,KAEpB,GAAM,CAAE,MAAK,GAAG,GAAY,EAItB,EAAS,EACX,IAAI,EAAM,EAAK,CAAE,mBAAoB,GAAO,GAAG,CAAQ,CAAC,EACxD,IAAI,EAAM,CAAE,mBAAoB,GAAO,GAAG,CAAQ,CAAC,EAQvD,OAJA,EAAO,GAAG,YAAe,CAEzB,CAAC,EAEM,CACT"}

package/dist/src/api/lib/cache.d.ts

@@ -1,32 +1,35 @@
-import type { Context } from "hono";
-import type { Redis, RedisOptions } from "ioredis";
-export type CacheConfig = RedisOptions & {
-    url?: string;
+import { Redis, RedisOptions } from "ioredis";
+import { Context } from "hono";
+//#region src/api/lib/cache.d.ts
+type CacheConfig = RedisOptions & {
+  url?: string;
 };
-export declare class CacheModel {
-    constructor(client: null | Redis, c: Context);
-    protected readonly c: Context;
-    protected readonly client: null | Redis;
-    private key;
-    private prefix;
-    private readKey;
-    private removeKeys;
-    private systemKey;
-    private writeKey;
-    acquireLock(key: string, ttlSeconds: number): Promise<boolean>;
-    delete(key: string | string[]): Promise<void>;
-    deleteSystem(key: string | string[]): Promise<void>;
-    flush(): Promise<void>;
-    get<T>(key: string): Promise<null | T>;
-    getSystem<T>(key: string): Promise<null | T>;
-    has(key: string): Promise<boolean>;
-    releaseLock(key: string): Promise<void>;
-    remember<T>(key: string, ttlSeconds: number, loader: () => Promise<T>): Promise<T>;
-    set<T>(key: string, value: T, ttlSeconds?: number): Promise<void>;
-    setSystem<T>(key: string, value: T, ttlSeconds?: number): Promise<void>;
-    status(): Promise<{
-        configured: boolean;
-        connected: boolean;
-    }>;
+declare class CacheModel {
+  constructor(client: null | Redis, c: Context);
+  protected readonly c: Context;
+  protected readonly client: null | Redis;
+  private key;
+  private prefix;
+  private readKey;
+  private removeKeys;
+  private systemKey;
+  private writeKey;
+  acquireLock(key: string, ttlSeconds: number): Promise<boolean>;
+  delete(key: string | string[]): Promise<void>;
+  deleteSystem(key: string | string[]): Promise<void>;
+  flush(): Promise<void>;
+  get<T>(key: string): Promise<null | T>;
+  getSystem<T>(key: string): Promise<null | T>;
+  has(key: string): Promise<boolean>;
+  releaseLock(key: string): Promise<void>;
+  remember<T>(key: string, ttlSeconds: number, loader: () => Promise<T>): Promise<T>;
+  set<T>(key: string, value: T, ttlSeconds?: number): Promise<void>;
+  setSystem<T>(key: string, value: T, ttlSeconds?: number): Promise<void>;
+  status(): Promise<{
+    configured: boolean;
+    connected: boolean;
+  }>;
 }
+//#endregion
+export { CacheConfig, CacheModel };
 //# sourceMappingURL=cache.d.ts.map

package/dist/src/api/lib/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../src/api/lib/cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAmB1D,qBAAa,UAAU;gBACT,MAAM,EAAE,IAAI,GAAG,KAAK,EAAE,CAAC,EAAE,OAAO;IAK5C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAC9B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,KAAK,CAAC;IAExC,OAAO,CAAC,GAAG;IAUX,OAAO,CAAC,MAAM;YAMA,OAAO;YAYP,UAAU;IAUxB,OAAO,CAAC,SAAS;YAIH,QAAQ;IA2BhB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBtB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAItC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAK5C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWlC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,QAAQ,CAAC,CAAC,EACd,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC;IAUP,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,SAAS,CAAC,CAAC,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,CAAC,EACR,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAIV,MAAM,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CAWrE"}
+{"version":3,"file":"cache.d.ts","names":[],"sources":["../../../../src/api/lib/cache.ts"],"mappings":";;;KAGY,cAAc;EAAiB;;cAmB9B;cACC,eAAe,OAAO,GAAG;qBAKlB,GAAG;qBACH,eAAe;UAE1B;UAUA;UAMM;UAYA;UAUN;UAIM;EA2BR,YAAY,aAAa,qBAAqB;EAmB9C,OAAO,yBAAyB;EAShC,aAAa,yBAAyB;EAUtC,SAAS;EAmBT,IAAI,GAAG,cAAc,eAAe;EAIpC,UAAU,GAAG,cAAc,eAAe;EAK1C,IAAI,cAAc;EAWlB,YAAY,cAAc;EAI1B,SAAS,GACb,aACA,oBACA,cAAc,QAAQ,KACrB,QAAQ;EAUL,IAAI,GAAG,aAAa,OAAO,GAAG,sBAAsB;EAIpD,UAAU,GACd,aACA,OAAO,GACP,sBACC;EAIG,UAAU;IAAU;IAAqB"}

package/dist/src/api/lib/cache.js

@@ -1 +1,2 @@
-const CACHE_PREFIX="vitnode:cache:";const SYSTEM_NAMESPACE="__system__";export class CacheModel{constructor(client,c){this.c=c;this.client=client}c;client;key(key){return`${this.prefix()}${key}`}prefix(){const pluginId=this.c.get("plugin")?.id;return pluginId?`${CACHE_PREFIX}${pluginId}:`:CACHE_PREFIX}async readKey(fullKey){if(!this.client)return null;try{const raw=await this.client.get(fullKey);return raw===null?null:JSON.parse(raw)}catch{return null}}async removeKeys(fullKeys){if(!this.client)return;try{if(fullKeys.length>0)await this.client.del(...fullKeys)}catch{}}systemKey(key){return`${CACHE_PREFIX}${SYSTEM_NAMESPACE}:${key}`}async writeKey(fullKey,value,ttlSeconds){if(!this.client)return;try{const raw=JSON.stringify(value);if(ttlSeconds&&ttlSeconds>0){await this.client.set(fullKey,raw,"EX",ttlSeconds)}else{await this.client.set(fullKey,raw)}}catch{}}async acquireLock(key,ttlSeconds){if(!this.client)return true;try{const result=await this.client.set(this.systemKey(`lock:${key}`),"1","EX",ttlSeconds,"NX");return result==="OK"}catch{return false}}async delete(key){const keys=(Array.isArray(key)?key:[key]).map(k=>this.key(k));await this.removeKeys(keys)}async deleteSystem(key){const keys=(Array.isArray(key)?key:[key]).map(k=>this.systemKey(k));await this.removeKeys(keys)}async flush(){if(!this.client)return;try{const stream=this.client.scanStream({match:`${this.prefix()}*`,count:100});for await(const keys of stream){const batch=keys;if(batch.length>0)await this.client.del(...batch)}}catch{}}async get(key){return this.readKey(this.key(key))}async getSystem(key){return this.readKey(this.systemKey(key))}async has(key){if(!this.client)return false;try{return await this.client.exists(this.key(key))===1}catch{return false}}async releaseLock(key){await this.removeKeys([this.systemKey(`lock:${key}`)])}async remember(key,ttlSeconds,loader){const cached=await this.get(key);if(cached!==null)return cached;const value=await loader();await this.set(key,value,ttlSeconds);return value}async set(key,value,ttlSeconds){await this.writeKey(this.key(key),value,ttlSeconds)}async setSystem(key,value,ttlSeconds){await this.writeKey(this.systemKey(key),value,ttlSeconds)}async status(){if(!this.client)return{configured:false,connected:false};try{const pong=await this.client.ping();return{configured:true,connected:pong==="PONG"}}catch{return{configured:true,connected:false}}}}
+const e=`vitnode:cache:`;var t=class{constructor(e,t){this.c=t,this.client=e}c;client;key(e){return`${this.prefix()}${e}`}prefix(){let t=this.c.get(`plugin`)?.id;return t?`${e}${t}:`:e}async readKey(e){if(!this.client)return null;try{let t=await this.client.get(e);return t===null?null:JSON.parse(t)}catch{return null}}async removeKeys(e){if(this.client)try{e.length>0&&await this.client.del(...e)}catch{}}systemKey(t){return`${e}__system__:${t}`}async writeKey(e,t,n){if(this.client)try{let r=JSON.stringify(t);n&&n>0?await this.client.set(e,r,`EX`,n):await this.client.set(e,r)}catch{}}async acquireLock(e,t){if(!this.client)return!0;try{return await this.client.set(this.systemKey(`lock:${e}`),`1`,`EX`,t,`NX`)===`OK`}catch{return!1}}async delete(e){let t=(Array.isArray(e)?e:[e]).map(e=>this.key(e));await this.removeKeys(t)}async deleteSystem(e){let t=(Array.isArray(e)?e:[e]).map(e=>this.systemKey(e));await this.removeKeys(t)}async flush(){if(this.client)try{let e=this.client.scanStream({match:`${this.prefix()}*`,count:100});for await(let t of e){let e=t;e.length>0&&await this.client.del(...e)}}catch{}}async get(e){return this.readKey(this.key(e))}async getSystem(e){return this.readKey(this.systemKey(e))}async has(e){if(!this.client)return!1;try{return await this.client.exists(this.key(e))===1}catch{return!1}}async releaseLock(e){await this.removeKeys([this.systemKey(`lock:${e}`)])}async remember(e,t,n){let r=await this.get(e);if(r!==null)return r;let i=await n();return await this.set(e,i,t),i}async set(e,t,n){await this.writeKey(this.key(e),t,n)}async setSystem(e,t,n){await this.writeKey(this.systemKey(e),t,n)}async status(){if(!this.client)return{configured:!1,connected:!1};try{return{configured:!0,connected:await this.client.ping()===`PONG`}}catch{return{configured:!0,connected:!1}}}};export{t as CacheModel};
+//# sourceMappingURL=cache.js.map

package/dist/src/api/lib/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","names":[],"sources":["../../../../src/api/lib/cache.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport type { Redis, RedisOptions } from \"ioredis\";\n\nexport type CacheConfig = RedisOptions & { url?: string };\n\n/**\n * Root prefix applied to every key VitNode writes, so the cache can be flushed\n * without touching unrelated data that may live in the same Redis instance.\n * Keys are further namespaced per plugin - see {@link CacheModel.prefix}.\n */\nconst CACHE_PREFIX = \"vitnode:cache:\";\nconst SYSTEM_NAMESPACE = \"__system__\";\n\n/**\n * A small, safe cache facade exposed on the request context as\n * `c.get(\"cache\")`. Values are JSON-serialized and namespaced per plugin (see\n * {@link CacheModel.prefix}), so the `hello` key a plugin writes actually lives\n * at `vitnode:cache:{plugin_code}:hello`. When Redis is not configured (client\n * is `null`) or a command fails, reads return `null`/`false`, writes are\n * no-ops, and {@link CacheModel.remember} simply runs its loader - caching must\n * never break a request.\n */\nexport class CacheModel {\n  constructor(client: null | Redis, c: Context) {\n    this.c = c;\n    this.client = client;\n  }\n\n  protected readonly c: Context;\n  protected readonly client: null | Redis;\n\n  private key(key: string): string {\n    return `${this.prefix()}${key}`;\n  }\n\n  /**\n   * Key prefix for the current request's plugin, e.g.\n   * `vitnode:cache:@vitnode/blog:`. Keys are scoped per plugin so one plugin\n   * can't read or clobber another's cache. Falls back to the shared\n   * `vitnode:cache:` namespace when there is no plugin on the context.\n   */\n  private prefix(): string {\n    const pluginId = this.c.get(\"plugin\")?.id;\n\n    return pluginId ? `${CACHE_PREFIX}${pluginId}:` : CACHE_PREFIX;\n  }\n\n  private async readKey<T>(fullKey: string): Promise<null | T> {\n    if (!this.client) return null;\n\n    try {\n      const raw = await this.client.get(fullKey);\n\n      return raw === null ? null : (JSON.parse(raw) as T);\n    } catch {\n      return null;\n    }\n  }\n\n  private async removeKeys(fullKeys: string[]): Promise<void> {\n    if (!this.client) return;\n\n    try {\n      if (fullKeys.length > 0) await this.client.del(...fullKeys);\n    } catch {\n      /* swallow */\n    }\n  }\n\n  private systemKey(key: string): string {\n    return `${CACHE_PREFIX}${SYSTEM_NAMESPACE}:${key}`;\n  }\n\n  private async writeKey<T>(\n    fullKey: string,\n    value: T,\n    ttlSeconds?: number,\n  ): Promise<void> {\n    if (!this.client) return;\n\n    try {\n      const raw = JSON.stringify(value);\n      if (ttlSeconds && ttlSeconds > 0) {\n        await this.client.set(fullKey, raw, \"EX\", ttlSeconds);\n      } else {\n        await this.client.set(fullKey, raw);\n      }\n    } catch {\n      /* caching must never break the request */\n    }\n  }\n\n  /**\n   * Acquire a short-lived distributed lock (`SET key val NX EX ttl`) in the\n   * system namespace. Returns `true` when the lock is held by this caller.\n   * **Without Redis it returns `true`** so cache-less / single-instance\n   * deployments still make progress - callers must guard correctness some other\n   * way (e.g. Postgres `FOR UPDATE SKIP LOCKED`). Returns `false` on a Redis\n   * error so a flaky connection skips rather than double-runs work.\n   */\n  async acquireLock(key: string, ttlSeconds: number): Promise<boolean> {\n    if (!this.client) return true;\n\n    try {\n      const result = await this.client.set(\n        this.systemKey(`lock:${key}`),\n        \"1\",\n        \"EX\",\n        ttlSeconds,\n        \"NX\",\n      );\n\n      return result === \"OK\";\n    } catch {\n      return false;\n    }\n  }\n\n  /** Remove one or more keys. No-op without Redis. */\n  async delete(key: string | string[]): Promise<void> {\n    const keys = (Array.isArray(key) ? key : [key]).map(k => this.key(k));\n    await this.removeKeys(keys);\n  }\n\n  /**\n   * Remove one or more keys from the framework system namespace. No-op without\n   * Redis. See {@link SYSTEM_NAMESPACE}.\n   */\n  async deleteSystem(key: string | string[]): Promise<void> {\n    const keys = (Array.isArray(key) ? key : [key]).map(k => this.systemKey(k));\n    await this.removeKeys(keys);\n  }\n\n  /**\n   * Delete every cache key for the current plugin\n   * (`vitnode:cache:{plugin_code}:*`). Other plugins' keys and unrelated Redis\n   * data are left untouched. No-op without Redis.\n   */\n  async flush(): Promise<void> {\n    if (!this.client) return;\n\n    try {\n      const stream = this.client.scanStream({\n        match: `${this.prefix()}*`,\n        count: 100,\n      });\n\n      for await (const keys of stream) {\n        const batch = keys as string[];\n        if (batch.length > 0) await this.client.del(...batch);\n      }\n    } catch {\n      /* swallow */\n    }\n  }\n\n  /** Read a JSON value. Returns `null` on a miss, without Redis, or on error. */\n  async get<T>(key: string): Promise<null | T> {\n    return this.readKey<T>(this.key(key));\n  }\n\n  async getSystem<T>(key: string): Promise<null | T> {\n    return this.readKey<T>(this.systemKey(key));\n  }\n\n  /** Whether a key currently exists. `false` without Redis or on error. */\n  async has(key: string): Promise<boolean> {\n    if (!this.client) return false;\n\n    try {\n      return (await this.client.exists(this.key(key))) === 1;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Release a lock taken with {@link acquireLock}. No-op without Redis. */\n  async releaseLock(key: string): Promise<void> {\n    await this.removeKeys([this.systemKey(`lock:${key}`)]);\n  }\n\n  async remember<T>(\n    key: string,\n    ttlSeconds: number,\n    loader: () => Promise<T>,\n  ): Promise<T> {\n    const cached = await this.get<T>(key);\n    if (cached !== null) return cached;\n\n    const value = await loader();\n    await this.set(key, value, ttlSeconds);\n\n    return value;\n  }\n\n  async set<T>(key: string, value: T, ttlSeconds?: number): Promise<void> {\n    await this.writeKey(this.key(key), value, ttlSeconds);\n  }\n\n  async setSystem<T>(\n    key: string,\n    value: T,\n    ttlSeconds?: number,\n  ): Promise<void> {\n    await this.writeKey(this.systemKey(key), value, ttlSeconds);\n  }\n\n  async status(): Promise<{ configured: boolean; connected: boolean }> {\n    if (!this.client) return { configured: false, connected: false };\n\n    try {\n      const pong = await this.client.ping();\n\n      return { configured: true, connected: pong === \"PONG\" };\n    } catch {\n      return { configured: true, connected: false };\n    }\n  }\n}\n"],"mappings":"AAUA,MAAM,EAAe,iBAYrB,IAAa,EAAb,KAAwB,CACtB,YAAY,EAAsB,EAAY,CAC5C,KAAK,EAAI,EACT,KAAK,OAAS,CAChB,CAEA,EACA,OAEA,IAAY,EAAqB,CAC/B,MAAO,GAAG,KAAK,OAAO,IAAI,GAC5B,CAQA,QAAyB,CACvB,IAAM,EAAW,KAAK,EAAE,IAAI,QAAQ,CAAC,EAAE,GAEvC,OAAO,EAAW,GAAG,IAAe,EAAS,GAAK,CACpD,CAEA,MAAc,QAAW,EAAoC,CAC3D,GAAI,CAAC,KAAK,OAAQ,OAAO,KAEzB,GAAI,CACF,IAAM,EAAM,MAAM,KAAK,OAAO,IAAI,CAAO,EAEzC,OAAO,IAAQ,KAAO,KAAQ,KAAK,MAAM,CAAG,CAC9C,MAAQ,CACN,OAAO,IACT,CACF,CAEA,MAAc,WAAW,EAAmC,CACrD,QAAK,OAEV,GAAI,CACE,EAAS,OAAS,GAAG,MAAM,KAAK,OAAO,IAAI,GAAG,CAAQ,CAC5D,MAAQ,CAER,CACF,CAEA,UAAkB,EAAqB,CACrC,MAAO,GAAG,eAAmC,GAC/C,CAEA,MAAc,SACZ,EACA,EACA,EACe,CACV,QAAK,OAEV,GAAI,CACF,IAAM,EAAM,KAAK,UAAU,CAAK,EAC5B,GAAc,EAAa,EAC7B,MAAM,KAAK,OAAO,IAAI,EAAS,EAAK,KAAM,CAAU,EAEpD,MAAM,KAAK,OAAO,IAAI,EAAS,CAAG,CAEtC,MAAQ,CAER,CACF,CAUA,MAAM,YAAY,EAAa,EAAsC,CACnE,GAAI,CAAC,KAAK,OAAQ,MAAO,GAEzB,GAAI,CASF,OAAO,MARc,KAAK,OAAO,IAC/B,KAAK,UAAU,QAAQ,GAAK,EAC5B,IACA,KACA,EACA,IACF,IAEkB,IACpB,MAAQ,CACN,MAAO,EACT,CACF,CAGA,MAAM,OAAO,EAAuC,CAClD,IAAM,GAAQ,MAAM,QAAQ,CAAG,EAAI,EAAM,CAAC,CAAG,EAAA,CAAG,IAAI,GAAK,KAAK,IAAI,CAAC,CAAC,EACpE,MAAM,KAAK,WAAW,CAAI,CAC5B,CAMA,MAAM,aAAa,EAAuC,CACxD,IAAM,GAAQ,MAAM,QAAQ,CAAG,EAAI,EAAM,CAAC,CAAG,EAAA,CAAG,IAAI,GAAK,KAAK,UAAU,CAAC,CAAC,EAC1E,MAAM,KAAK,WAAW,CAAI,CAC5B,CAOA,MAAM,OAAuB,CACtB,QAAK,OAEV,GAAI,CACF,IAAM,EAAS,KAAK,OAAO,WAAW,CACpC,MAAO,GAAG,KAAK,OAAO,EAAE,GACxB,MAAO,GACT,CAAC,EAED,UAAW,IAAM,KAAQ,EAAQ,CAC/B,IAAM,EAAQ,EACV,EAAM,OAAS,GAAG,MAAM,KAAK,OAAO,IAAI,GAAG,CAAK,CACtD,CACF,MAAQ,CAER,CACF,CAGA,MAAM,IAAO,EAAgC,CAC3C,OAAO,KAAK,QAAW,KAAK,IAAI,CAAG,CAAC,CACtC,CAEA,MAAM,UAAa,EAAgC,CACjD,OAAO,KAAK,QAAW,KAAK,UAAU,CAAG,CAAC,CAC5C,CAGA,MAAM,IAAI,EAA+B,CACvC,GAAI,CAAC,KAAK,OAAQ,MAAO,GAEzB,GAAI,CACF,OAAQ,MAAM,KAAK,OAAO,OAAO,KAAK,IAAI,CAAG,CAAC,IAAO,CACvD,MAAQ,CACN,MAAO,EACT,CACF,CAGA,MAAM,YAAY,EAA4B,CAC5C,MAAM,KAAK,WAAW,CAAC,KAAK,UAAU,QAAQ,GAAK,CAAC,CAAC,CACvD,CAEA,MAAM,SACJ,EACA,EACA,EACY,CACZ,IAAM,EAAS,MAAM,KAAK,IAAO,CAAG,EACpC,GAAI,IAAW,KAAM,OAAO,EAE5B,IAAM,EAAQ,MAAM,EAAO,EAG3B,OAFA,MAAM,KAAK,IAAI,EAAK,EAAO,CAAU,EAE9B,CACT,CAEA,MAAM,IAAO,EAAa,EAAU,EAAoC,CACtE,MAAM,KAAK,SAAS,KAAK,IAAI,CAAG,EAAG,EAAO,CAAU,CACtD,CAEA,MAAM,UACJ,EACA,EACA,EACe,CACf,MAAM,KAAK,SAAS,KAAK,UAAU,CAAG,EAAG,EAAO,CAAU,CAC5D,CAEA,MAAM,QAA+D,CACnE,GAAI,CAAC,KAAK,OAAQ,MAAO,CAAE,WAAY,GAAO,UAAW,EAAM,EAE/D,GAAI,CAGF,MAAO,CAAE,WAAY,GAAM,UAAW,MAFnB,KAAK,OAAO,KAAK,IAEW,MAAO,CACxD,MAAQ,CACN,MAAO,CAAE,WAAY,GAAM,UAAW,EAAM,CAC9C,CACF,CACF"}

package/dist/src/api/lib/check-plugin-id.d.ts

@@ -1,15 +1,18 @@
-export interface PackageJSON {
-    dependencies?: Record<string, string>;
-    devDependencies?: Record<string, string>;
-    exports?: Record<string, Record<string, string>>;
-    name: string;
-    overrides?: Record<string, string>;
-    packageManager?: string;
-    pnpm?: Record<string, Record<string, string>>;
-    private: boolean;
-    scripts?: Record<string, string>;
-    version: string;
-    workspaces?: string[];
+//#region src/api/lib/check-plugin-id.d.ts
+interface PackageJSON {
+  dependencies?: Record<string, string>;
+  devDependencies?: Record<string, string>;
+  exports?: Record<string, Record<string, string>>;
+  name: string;
+  overrides?: Record<string, string>;
+  packageManager?: string;
+  pnpm?: Record<string, Record<string, string>>;
+  private: boolean;
+  scripts?: Record<string, string>;
+  version: string;
+  workspaces?: string[];
 }
-export declare const checkPluginId: (pluginName: string) => null | PackageJSON;
+declare const checkPluginId: (pluginName: string) => null | PackageJSON;
+//#endregion
+export { PackageJSON, checkPluginId };
 //# sourceMappingURL=check-plugin-id.d.ts.map

package/dist/src/api/lib/check-plugin-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-plugin-id.d.ts","sourceRoot":"","sources":["../../../../src/api/lib/check-plugin-id.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,eAAO,MAAM,aAAa,GAAI,YAAY,MAAM,KAAG,IAAI,GAAG,WA2DzD,CAAC"}
+{"version":3,"file":"check-plugin-id.d.ts","names":[],"sources":["../../../../src/api/lib/check-plugin-id.ts"],"mappings":";UAKiB;EACf,eAAe;EACf,kBAAkB;EAClB,UAAU,eAAe;EACzB;EACA,YAAY;EACZ;EACA,OAAO,eAAe;EACtB;EACA,UAAU;EACV;EACA;;cAGW,gBAAiB,8BAA4B"}

package/dist/src/api/lib/check-plugin-id.js

@@ -1 +1,2 @@
-import{existsSync,readFileSync}from"node:fs";import{join,resolve}from"node:path";import{CONFIG}from"../../lib/config.js";export const checkPluginId=pluginName=>{if(!CONFIG.node_development)return null;const findMonorepoRoot=startPath=>{let currentPath=startPath;while(currentPath!==resolve(currentPath,"..")){const turboConfigPath=join(currentPath,"turbo.json");if(existsSync(turboConfigPath)){return currentPath}currentPath=resolve(currentPath,"..")}return null};const findPluginPath=pluginName=>{const cwd=process.cwd();const monorepoRoot=findMonorepoRoot(cwd);const cwdPluginPath=join(cwd,"node_modules",pluginName,"package.json");if(existsSync(cwdPluginPath)){return cwdPluginPath}if(monorepoRoot&&monorepoRoot!==cwd){const rootPluginPath=join(monorepoRoot,"node_modules",pluginName,"package.json");if(existsSync(rootPluginPath)){return rootPluginPath}}return null};const path=findPluginPath(pluginName);if(!path){throw new Error(`package.json file not found for plugin "${pluginName}". Please ensure you are using the correct plugin name as specified in its package.json.`)}const content=JSON.parse(readFileSync(path,"utf-8"));if(content.name!==pluginName){throw new Error(`The plugin name in package.json (${content.name}) does not match the requested plugin name (${pluginName}). Please check the plugin name.`)}return content};
+import{CONFIG as e}from"../../lib/config.js";import{existsSync as t,readFileSync as n}from"node:fs";import{join as r,resolve as i}from"node:path";const a=a=>{if(!e.node_development)return null;let o=e=>{let n=e;for(;n!==i(n,`..`);){if(t(r(n,`turbo.json`)))return n;n=i(n,`..`)}return null},s=(e=>{let n=process.cwd(),i=o(n),a=r(n,`node_modules`,e,`package.json`);if(t(a))return a;if(i&&i!==n){let n=r(i,`node_modules`,e,`package.json`);if(t(n))return n}return null})(a);if(!s)throw Error(`package.json file not found for plugin "${a}". Please ensure you are using the correct plugin name as specified in its package.json.`);let c=JSON.parse(n(s,`utf-8`));if(c.name!==a)throw Error(`The plugin name in package.json (${c.name}) does not match the requested plugin name (${a}). Please check the plugin name.`);return c};export{a as checkPluginId};
+//# sourceMappingURL=check-plugin-id.js.map

package/dist/src/api/lib/check-plugin-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-plugin-id.js","names":[],"sources":["../../../../src/api/lib/check-plugin-id.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\n\nimport { CONFIG } from \"../../lib/config\";\n\nexport interface PackageJSON {\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  exports?: Record<string, Record<string, string>>;\n  name: string;\n  overrides?: Record<string, string>;\n  packageManager?: string;\n  pnpm?: Record<string, Record<string, string>>;\n  private: boolean;\n  scripts?: Record<string, string>;\n  version: string;\n  workspaces?: string[];\n}\n\nexport const checkPluginId = (pluginName: string): null | PackageJSON => {\n  if (!CONFIG.node_development) return null;\n\n  const findMonorepoRoot = (startPath: string): null | string => {\n    let currentPath = startPath;\n    while (currentPath !== resolve(currentPath, \"..\")) {\n      const turboConfigPath = join(currentPath, \"turbo.json\");\n\n      if (existsSync(turboConfigPath)) {\n        return currentPath;\n      }\n      currentPath = resolve(currentPath, \"..\");\n    }\n\n    return null;\n  };\n\n  const findPluginPath = (pluginName: string): null | string => {\n    const cwd = process.cwd();\n    const monorepoRoot = findMonorepoRoot(cwd);\n\n    // Check in current working directory first\n    const cwdPluginPath = join(cwd, \"node_modules\", pluginName, \"package.json\");\n    if (existsSync(cwdPluginPath)) {\n      return cwdPluginPath;\n    }\n\n    // Check in monorepo root if it exists and is different from cwd\n    if (monorepoRoot && monorepoRoot !== cwd) {\n      const rootPluginPath = join(\n        monorepoRoot,\n        \"node_modules\",\n        pluginName,\n        \"package.json\",\n      );\n      if (existsSync(rootPluginPath)) {\n        return rootPluginPath;\n      }\n    }\n\n    return null;\n  };\n\n  const path = findPluginPath(pluginName);\n\n  if (!path) {\n    throw new Error(\n      `package.json file not found for plugin \"${pluginName}\". Please ensure you are using the correct plugin name as specified in its package.json.`,\n    );\n  }\n\n  const content: PackageJSON = JSON.parse(readFileSync(path, \"utf-8\"));\n  if (content.name !== pluginName) {\n    throw new Error(\n      `The plugin name in package.json (${content.name}) does not match the requested plugin name (${pluginName}). Please check the plugin name.`,\n    );\n  }\n\n  return content;\n};\n"],"mappings":"kJAmBA,MAAa,EAAiB,GAA2C,CACvE,GAAI,CAAC,EAAO,iBAAkB,OAAO,KAErC,IAAM,EAAoB,GAAqC,CAC7D,IAAI,EAAc,EAClB,KAAO,IAAgB,EAAQ,EAAa,IAAI,GAAG,CAGjD,GAAI,EAFoB,EAAK,EAAa,YAEb,CAAC,EAC5B,OAAO,EAET,EAAc,EAAQ,EAAa,IAAI,CACzC,CAEA,OAAO,IACT,EA4BM,GA1BkB,GAAsC,CAC5D,IAAM,EAAM,QAAQ,IAAI,EAClB,EAAe,EAAiB,CAAG,EAGnC,EAAgB,EAAK,EAAK,eAAgB,EAAY,cAAc,EAC1E,GAAI,EAAW,CAAa,EAC1B,OAAO,EAIT,GAAI,GAAgB,IAAiB,EAAK,CACxC,IAAM,EAAiB,EACrB,EACA,eACA,EACA,cACF,EACA,GAAI,EAAW,CAAc,EAC3B,OAAO,CAEX,CAEA,OAAO,IACT,EAEa,CAAe,CAAU,EAEtC,GAAI,CAAC,EACH,MAAU,MACR,2CAA2C,EAAW,yFACxD,EAGF,IAAM,EAAuB,KAAK,MAAM,EAAa,EAAM,OAAO,CAAC,EACnE,GAAI,EAAQ,OAAS,EACnB,MAAU,MACR,oCAAoC,EAAQ,KAAK,8CAA8C,EAAW,iCAC5G,EAGF,OAAO,CACT"}

package/dist/src/api/lib/check-staff-permission.d.ts

@@ -1,20 +1,23 @@
-import type { Context } from "hono";
-import type { PermissionsStaffArgs, PermissionStaffType, StaffPermissionSet } from "./permission-staff";
-export declare const getUserRoleIds: (c: Context, user: {
+import { PermissionStaffType, PermissionsStaffArgs, StaffPermissionSet } from "./permission-staff.js";
+import { Context } from "hono";
+//#region src/api/lib/check-staff-permission.d.ts
+declare const getUserRoleIds: (c: Context, user: {
+  id: number;
+  roleId: number;
+}) => Promise<number[]>;
+declare const resolveStaffPermissions: (c: Context, { type, user }: {
+  type: PermissionStaffType;
+  user: {
     id: number;
     roleId: number;
-}) => Promise<number[]>;
-export declare const resolveStaffPermissions: (c: Context, { type, user, }: {
-    type: PermissionStaffType;
-    user: {
-        id: number;
-        roleId: number;
-    };
+  };
 }) => Promise<StaffPermissionSet>;
-export declare const checkStaffPermission: (c: Context, { type, ...args }: PermissionsStaffArgs & {
-    type: PermissionStaffType;
+declare const checkStaffPermission: (c: Context, { type, ...args }: PermissionsStaffArgs & {
+  type: PermissionStaffType;
 }) => Promise<boolean>;
-export declare const assertStaffPermission: (c: Context, args: PermissionsStaffArgs & {
-    type: PermissionStaffType;
+declare const assertStaffPermission: (c: Context, args: PermissionsStaffArgs & {
+  type: PermissionStaffType;
 }) => Promise<void>;
+//#endregion
+export { assertStaffPermission, checkStaffPermission, getUserRoleIds, resolveStaffPermissions };
 //# sourceMappingURL=check-staff-permission.d.ts.map

package/dist/src/api/lib/check-staff-permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-staff-permission.d.ts","sourceRoot":"","sources":["../../../../src/api/lib/check-staff-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAUpC,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAS5B,eAAO,MAAM,cAAc,GACzB,GAAG,OAAO,EACV,MAAM;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,KACnC,OAAO,CAAC,MAAM,EAAE,CAQlB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,GAAG,OAAO,EACV,iBAGG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,KACrE,OAAO,CAAC,kBAAkB,CAqC5B,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,GAAG,OAAO,EACV,mBAAmB,oBAAoB,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,KACtE,OAAO,CAAC,OAAO,CAOjB,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,GAAG,OAAO,EACV,MAAM,oBAAoB,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,KACzD,OAAO,CAAC,IAAI,CAKd,CAAC"}
+{"version":3,"file":"check-staff-permission.d.ts","names":[],"sources":["../../../../src/api/lib/check-staff-permission.ts"],"mappings":";;;cAuBa,iBACX,GAAG,SACH;EAAQ;EAAY;MACnB;cAUU,0BACX,GAAG,WACH,MAAA;EAGK,MAAM;EAAqB;IAAQ;IAAY;;MACnD,QAAQ;cAuCE,uBACX,GAAG,WACH,SAAA,QAAmB;EAAyB,MAAM;MACjD;cASU,wBACX,GAAG,SACH,MAAM;EAAyB,MAAM;MACpC"}

package/dist/src/api/lib/check-staff-permission.js

@@ -1 +1,2 @@
-import{and,eq,inArray,or}from"drizzle-orm";import{HTTPException}from"hono/http-exception";import{core_admin_permissions}from"../../database/admins.js";import{core_moderators_permissions}from"../../database/moderators.js";import{core_roles}from"../../database/roles.js";import{core_users_secondary_roles}from"../../database/users.js";import{hasStaffPermission,staffPermissionKey}from"./staff-permission.js";const tableByType={admin:core_admin_permissions,moderator:core_moderators_permissions};export const getUserRoleIds=async(c,user)=>{const secondary=await c.get("db").select({roleId:core_users_secondary_roles.roleId}).from(core_users_secondary_roles).where(eq(core_users_secondary_roles.userId,user.id));return[...new Set([user.roleId,...secondary.map(row=>row.roleId)])]};export const resolveStaffPermissions=async(c,{type,user})=>{const roleIds=await getUserRoleIds(c,user);const rootRoles=await c.get("db").select({id:core_roles.id}).from(core_roles).where(and(inArray(core_roles.id,roleIds),eq(core_roles.root,true))).limit(1);if(rootRoles.length>0){return{root:true,permissions:[]}}const table=tableByType[type];const entries=await c.get("db").select({data:table.data}).from(table).where(or(eq(table.userId,user.id),inArray(table.roleId,roleIds)));if(entries.some(entry=>entry.data?.unrestricted)){return{root:true,permissions:[]}}const seen=new Set;const permissions=[];for(const entry of entries){for(const permission of entry.data?.permissions??[]){const key=staffPermissionKey(permission);if(seen.has(key))continue;seen.add(key);permissions.push(permission)}}return{root:false,permissions}};export const checkStaffPermission=async(c,{type,...args})=>{const user=type==="admin"?c.get("admin")?.user:c.get("user");if(!user)return false;const set=await resolveStaffPermissions(c,{type,user});return hasStaffPermission(set,args)};export const assertStaffPermission=async(c,args)=>{const allowed=await checkStaffPermission(c,args);if(!allowed){throw new HTTPException(403,{message:"Forbidden"})}};
+import{core_roles as e}from"../../database/roles.js";import{core_users_secondary_roles as t}from"../../database/users.js";import{core_admin_permissions as n}from"../../database/admins.js";import{core_moderators_permissions as r}from"../../database/moderators.js";import{hasStaffPermission as i,staffPermissionKey as a}from"./staff-permission.js";import{HTTPException as o}from"hono/http-exception";import{and as s,eq as c,inArray as l,or as u}from"drizzle-orm";const d={admin:n,moderator:r},f=async(e,n)=>{let r=await e.get(`db`).select({roleId:t.roleId}).from(t).where(c(t.userId,n.id));return[...new Set([n.roleId,...r.map(e=>e.roleId)])]},p=async(t,{type:n,user:r})=>{let i=await f(t,r);if((await t.get(`db`).select({id:e.id}).from(e).where(s(l(e.id,i),c(e.root,!0))).limit(1)).length>0)return{root:!0,permissions:[]};let o=d[n],p=await t.get(`db`).select({data:o.data}).from(o).where(u(c(o.userId,r.id),l(o.roleId,i)));if(p.some(e=>e.data?.unrestricted))return{root:!0,permissions:[]};let m=new Set,h=[];for(let e of p)for(let t of e.data?.permissions??[]){let e=a(t);m.has(e)||(m.add(e),h.push(t))}return{root:!1,permissions:h}},m=async(e,{type:t,...n})=>{let r=t===`admin`?e.get(`admin`)?.user:e.get(`user`);return r?i(await p(e,{type:t,user:r}),n):!1},h=async(e,t)=>{if(!await m(e,t))throw new o(403,{message:`Forbidden`})};export{h as assertStaffPermission,m as checkStaffPermission,f as getUserRoleIds,p as resolveStaffPermissions};
+//# sourceMappingURL=check-staff-permission.js.map

package/dist/src/api/lib/check-staff-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-staff-permission.js","names":[],"sources":["../../../../src/api/lib/check-staff-permission.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { and, eq, inArray, or } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users_secondary_roles } from \"@/database/users\";\n\nimport type {\n  PermissionsStaffArgs,\n  PermissionStaffType,\n  StaffPermissionSet,\n} from \"./permission-staff\";\n\nimport { hasStaffPermission, staffPermissionKey } from \"./staff-permission\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const getUserRoleIds = async (\n  c: Context,\n  user: { id: number; roleId: number },\n): Promise<number[]> => {\n  const secondary = await c\n    .get(\"db\")\n    .select({ roleId: core_users_secondary_roles.roleId })\n    .from(core_users_secondary_roles)\n    .where(eq(core_users_secondary_roles.userId, user.id));\n\n  return [...new Set([user.roleId, ...secondary.map(row => row.roleId)])];\n};\n\nexport const resolveStaffPermissions = async (\n  c: Context,\n  {\n    type,\n    user,\n  }: { type: PermissionStaffType; user: { id: number; roleId: number } },\n): Promise<StaffPermissionSet> => {\n  const roleIds = await getUserRoleIds(c, user);\n\n  const rootRoles = await c\n    .get(\"db\")\n    .select({ id: core_roles.id })\n    .from(core_roles)\n    .where(and(inArray(core_roles.id, roleIds), eq(core_roles.root, true)))\n    .limit(1);\n\n  if (rootRoles.length > 0) {\n    return { root: true, permissions: [] };\n  }\n\n  const table = tableByType[type];\n  const entries = await c\n    .get(\"db\")\n    .select({ data: table.data })\n    .from(table)\n    .where(or(eq(table.userId, user.id), inArray(table.roleId, roleIds)));\n\n  if (entries.some(entry => entry.data?.unrestricted)) {\n    return { root: true, permissions: [] };\n  }\n\n  const seen = new Set<string>();\n  const permissions: PermissionsStaffArgs[] = [];\n  for (const entry of entries) {\n    for (const permission of entry.data?.permissions ?? []) {\n      const key = staffPermissionKey(permission);\n      if (seen.has(key)) continue;\n      seen.add(key);\n      permissions.push(permission);\n    }\n  }\n\n  return { root: false, permissions };\n};\n\nexport const checkStaffPermission = async (\n  c: Context,\n  { type, ...args }: PermissionsStaffArgs & { type: PermissionStaffType },\n): Promise<boolean> => {\n  const user = type === \"admin\" ? c.get(\"admin\")?.user : c.get(\"user\");\n  if (!user) return false;\n\n  const set = await resolveStaffPermissions(c, { type, user });\n\n  return hasStaffPermission(set, args);\n};\n\nexport const assertStaffPermission = async (\n  c: Context,\n  args: PermissionsStaffArgs & { type: PermissionStaffType },\n): Promise<void> => {\n  const allowed = await checkStaffPermission(c, args);\n  if (!allowed) {\n    throw new HTTPException(403, { message: \"Forbidden\" });\n  }\n};\n"],"mappings":"6cAkBA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAiB,MAC5B,EACA,IACsB,CACtB,IAAM,EAAY,MAAM,EACrB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,OAAQ,EAA2B,MAAO,CAAC,CAAC,CACrD,KAAK,CAA0B,CAAC,CAChC,MAAM,EAAG,EAA2B,OAAQ,EAAK,EAAE,CAAC,EAEvD,MAAO,CAAC,GAAG,IAAI,IAAI,CAAC,EAAK,OAAQ,GAAG,EAAU,IAAI,GAAO,EAAI,MAAM,CAAC,CAAC,CAAC,CACxE,EAEa,EAA0B,MACrC,EACA,CACE,OACA,UAE8B,CAChC,IAAM,EAAU,MAAM,EAAe,EAAG,CAAI,EAS5C,IAAI,MAPoB,EACrB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,GAAI,EAAW,EAAG,CAAC,CAAC,CAC7B,KAAK,CAAU,CAAC,CAChB,MAAM,EAAI,EAAQ,EAAW,GAAI,CAAO,EAAG,EAAG,EAAW,KAAM,EAAI,CAAC,CAAC,CAAC,CACtE,MAAM,CAAC,EAAA,CAEI,OAAS,EACrB,MAAO,CAAE,KAAM,GAAM,YAAa,CAAC,CAAE,EAGvC,IAAM,EAAQ,EAAY,GACpB,EAAU,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,KAAM,EAAM,IAAK,CAAC,CAAC,CAC5B,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAG,EAAM,OAAQ,EAAK,EAAE,EAAG,EAAQ,EAAM,OAAQ,CAAO,CAAC,CAAC,EAEtE,GAAI,EAAQ,KAAK,GAAS,EAAM,MAAM,YAAY,EAChD,MAAO,CAAE,KAAM,GAAM,YAAa,CAAC,CAAE,EAGvC,IAAM,EAAO,IAAI,IACX,EAAsC,CAAC,EAC7C,IAAK,IAAM,KAAS,EAClB,IAAK,IAAM,KAAc,EAAM,MAAM,aAAe,CAAC,EAAG,CACtD,IAAM,EAAM,EAAmB,CAAU,EACrC,EAAK,IAAI,CAAG,IAChB,EAAK,IAAI,CAAG,EACZ,EAAY,KAAK,CAAU,EAC7B,CAGF,MAAO,CAAE,KAAM,GAAO,aAAY,CACpC,EAEa,EAAuB,MAClC,EACA,CAAE,OAAM,GAAG,KACU,CACrB,IAAM,EAAO,IAAS,QAAU,EAAE,IAAI,OAAO,CAAC,EAAE,KAAO,EAAE,IAAI,MAAM,EAKnE,OAJK,EAIE,EAAmB,MAFR,EAAwB,EAAG,CAAE,OAAM,MAAK,CAAC,EAE5B,CAAI,EAJjB,EAKpB,EAEa,EAAwB,MACnC,EACA,IACkB,CAElB,GAAI,CAAC,MADiB,EAAqB,EAAG,CAAI,EAEhD,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,CAEzD"}