asaihost-nodejs 0.0.1 → 0.0.2

package/dist/asaihost-nodejs.cjs

@@ -4,10 +4,10 @@
 
 
 
-var _chunkNLBFIRDBcjs = require('./chunk-NLBFIRDB.cjs');
+var _chunkRIRKIYETcjs = require('./chunk-RIRKIYET.cjs');
 
 
-var _chunkG4WVDUBHcjs = require('./chunk-G4WVDUBH.cjs');
+var _chunk4E7Z5K5Ucjs = require('./chunk-4E7Z5K5U.cjs');
 
 
 
@@ -28,7 +28,7 @@ var _chunkG4WVDUBHcjs = require('./chunk-G4WVDUBH.cjs');
 
 
 
-var _chunkVLMM735Qcjs = require('./chunk-VLMM735Q.cjs');
+var _chunkTKJAHTPOcjs = require('./chunk-TKJAHTPO.cjs');
 
 
 
@@ -38,7 +38,7 @@ var _chunkVLMM735Qcjs = require('./chunk-VLMM735Q.cjs');
 
 
 
-var _chunkW7DVKGX5cjs = require('./chunk-W7DVKGX5.cjs');
+var _chunkOCEBEEP5cjs = require('./chunk-OCEBEEP5.cjs');
 
 
 var _chunkO6LVLSNBcjs = require('./chunk-O6LVLSNB.cjs');
@@ -48,7 +48,7 @@ var _chunkO6LVLSNBcjs = require('./chunk-O6LVLSNB.cjs');
 
 
 
-var _chunkKOFCBB3Ncjs = require('./chunk-KOFCBB3N.cjs');
+var _chunkK2QPSQEVcjs = require('./chunk-K2QPSQEV.cjs');
 
 
 
@@ -60,7 +60,7 @@ var _chunkKOFCBB3Ncjs = require('./chunk-KOFCBB3N.cjs');
 
 
 
-var _chunkQWVR2HNTcjs = require('./chunk-QWVR2HNT.cjs');
+var _chunkLXJMGLKWcjs = require('./chunk-LXJMGLKW.cjs');
 
 
 
@@ -71,10 +71,12 @@ var _chunkQWVR2HNTcjs = require('./chunk-QWVR2HNT.cjs');
 
 
 
-var _chunkX7VHW2TDcjs = require('./chunk-X7VHW2TD.cjs');
 
 
-var _chunkHHPGUJ75cjs = require('./chunk-HHPGUJ75.cjs');
+var _chunkH3K33HBAcjs = require('./chunk-H3K33HBA.cjs');
+
+
+var _chunk2BCIIKRGcjs = require('./chunk-2BCIIKRG.cjs');
 
 
 
@@ -210,7 +212,7 @@ ${reason.name}: ${reason.message}`;
     if (restartTimes.length > MAX_RESTARTS) {
       try {
         $asai.$log("NO_RESTART", "Process crashed too frequently, gracefully shutdown and wait for daemon restart.");
-        void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-LE6X4C6N.cjs"))).then(
+        void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-KF3SNB5Q.cjs"))).then(
           ({ logProcessGuardEvent }) => logProcessGuardEvent($asai, {
             action: "crash_loop_shutdown",
             detail: `${restartTimes.length} crashes in ${RESTART_WINDOW}ms window`,
@@ -252,7 +254,7 @@ ${reason.name}: ${reason.message}`;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, initProcess, "initProcess");
 function gracefulShutdown($asai) {
-  void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-LE6X4C6N.cjs"))).then(
+  void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-KF3SNB5Q.cjs"))).then(
     ({ logProcessGuardEvent }) => logProcessGuardEvent($asai, {
       action: "graceful_shutdown",
       detail: "SIGTERM/SIGINT or crash guard triggered",
@@ -377,7 +379,7 @@ var LogBuffer = class _LogBuffer {
       await _promises2.default.appendFile(this.filePath, logContent, "utf8");
       const src = this.filePath.includes("/client/") || this.filePath.includes("\\client\\") ? "client" : "server";
       const kind = logContent.includes("[SEC-AUDIT]") ? "sec" : src;
-      void _chunkVLMM735Qcjs.mirrorWebLog.call(void 0, this.$asai, {
+      void _chunkTKJAHTPOcjs.mirrorWebLog.call(void 0, this.$asai, {
         source: kind === "sec" ? "sec" : src,
         rawLine: logContent
       }).catch(() => void 0);
@@ -395,7 +397,7 @@ var LogBuffer = class _LogBuffer {
   }
 };
 function saveLog($asai, src, logstr) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     try {
       const bufferKey = `${$asai.id || "default"}_${src}`;
       let logBuffer = logBuffers.get(bufferKey);
@@ -404,7 +406,7 @@ function saveLog($asai, src, logstr) {
         logBuffers.set(bufferKey, logBuffer);
       }
       logBuffer.add(logstr);
-      resolve7();
+      resolve6();
     } catch (err) {
       console.error(err);
       reject(err);
@@ -423,10 +425,10 @@ async function ensureW3CHeader($asai, filePath, dateCur) {
     }
   } catch (e9) {
   }
-  const header = _chunkW7DVKGX5cjs.formatW3CHeader.call(void 0, {
-    software: _optionalChain([$asai, 'access', _28 => _28.hostconfig, 'access', _29 => _29.website, 'optionalAccess', _30 => _30.title]) || "AsaiHost",
+  const header = _chunkOCEBEEP5cjs.formatW3CHeader.call(void 0, {
+    software: _optionalChain([$asai, 'access', _28 => _28.hostconfig, 'access', _29 => _29.website, 'optionalAccess', _30 => _30.title]) || "AsaiHostNodejs",
     version: _optionalChain([$asai, 'access', _31 => _31.hostconfig, 'access', _32 => _32.website, 'optionalAccess', _33 => _33.ver]) || "1.0.0.0",
-    fields: [..._chunkW7DVKGX5cjs.W3C_SERVER_FIELDS],
+    fields: [..._chunkOCEBEEP5cjs.W3C_SERVER_FIELDS],
     date: dateCur
   });
   await _promises2.default.appendFile(filePath, header, "utf8");
@@ -477,8 +479,8 @@ async function appendAccessLog($asai, clfLine, w3cLine) {
     await _promises2.default.appendFile(clfPath, clfLine, "utf8");
     await ensureW3CAccessHeader($asai, w3cPath, dateCur);
     await _promises2.default.appendFile(w3cPath, w3cLine, "utf8");
-    const clfParsed = _chunkW7DVKGX5cjs.parseCLF.call(void 0, clfLine);
-    void _chunkVLMM735Qcjs.mirrorAccessLog.call(void 0, $asai, {
+    const clfParsed = _chunkOCEBEEP5cjs.parseCLF.call(void 0, clfLine);
+    void _chunkTKJAHTPOcjs.mirrorAccessLog.call(void 0, $asai, {
       format: "clf",
       rawLine: clfLine,
       host: _optionalChain([clfParsed, 'optionalAccess', _42 => _42.host]),
@@ -486,7 +488,7 @@ async function appendAccessLog($asai, clfLine, w3cLine) {
       url: _optionalChain([clfParsed, 'optionalAccess', _44 => _44.url]),
       status: _optionalChain([clfParsed, 'optionalAccess', _45 => _45.status])
     }).catch(() => void 0);
-    void _chunkVLMM735Qcjs.mirrorAccessLog.call(void 0, $asai, {
+    void _chunkTKJAHTPOcjs.mirrorAccessLog.call(void 0, $asai, {
       format: "w3c",
       rawLine: w3cLine
     }).catch(() => void 0);
@@ -506,10 +508,10 @@ async function ensureW3CAccessHeader($asai, filePath, dateCur) {
     }
   } catch (e10) {
   }
-  const header = _chunkW7DVKGX5cjs.formatW3CHeader.call(void 0, {
-    software: _optionalChain([$asai, 'access', _46 => _46.hostconfig, 'access', _47 => _47.website, 'optionalAccess', _48 => _48.title]) || "AsaiHost",
+  const header = _chunkOCEBEEP5cjs.formatW3CHeader.call(void 0, {
+    software: _optionalChain([$asai, 'access', _46 => _46.hostconfig, 'access', _47 => _47.website, 'optionalAccess', _48 => _48.title]) || "AsaiHostNodejs",
     version: _optionalChain([$asai, 'access', _49 => _49.hostconfig, 'access', _50 => _50.website, 'optionalAccess', _51 => _51.ver]) || "1.0.0.0",
-    fields: [..._chunkW7DVKGX5cjs.W3C_ACCESS_FIELDS],
+    fields: [..._chunkOCEBEEP5cjs.W3C_ACCESS_FIELDS],
     date: dateCur
   });
   await _promises2.default.appendFile(filePath, header, "utf8");
@@ -548,7 +550,7 @@ function initLog($asai) {
   _chunkSMVZ3ZDJcjs.__name.call(void 0, shouldSample, "shouldSample");
   function enqueueServerLog(logType, method, url, message, dateCur) {
     const filePath = `${$asai.hostconfig.logger.path.server}log-${_chunkO6LVLSNBcjs.getNowTime.call(void 0, 2, dateCur)}.txt`;
-    const logstr = _chunkW7DVKGX5cjs.formatW3CServerRecord.call(void 0, {
+    const logstr = _chunkOCEBEEP5cjs.formatW3CServerRecord.call(void 0, {
       date: dateCur,
       logType,
       method,
@@ -576,7 +578,7 @@ function initLog($asai) {
     if (argType === 1) {
       if (_optionalChain([$asai, 'access', _59 => _59.hostconfig, 'access', _60 => _60.logger, 'optionalAccess', _61 => _61.path, 'optionalAccess', _62 => _62.client])) {
         const logMsg = args.slice(1).map(formatArg).join("\n");
-        const logstr = _chunkW7DVKGX5cjs.formatW3CServerRecord.call(void 0, {
+        const logstr = _chunkOCEBEEP5cjs.formatW3CServerRecord.call(void 0, {
           date: dateCur,
           logType: "CLIENT",
           message: logMsg
@@ -810,8 +812,8 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, checkNtpOffset, "checkNtpOffset");
 
 // src/infra/config-integrity.ts
 var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
-var _fs = require('fs'); var fs3 = _interopRequireWildcard(_fs); var fs6 = _interopRequireWildcard(_fs); var fs4 = _interopRequireWildcard(_fs); var fs5 = _interopRequireWildcard(_fs); var fs8 = _interopRequireWildcard(_fs); var fs10 = _interopRequireWildcard(_fs); var fs11 = _interopRequireWildcard(_fs); var fs12 = _interopRequireWildcard(_fs);
-var _path = require('path'); var nodePath2 = _interopRequireWildcard(_path); var path2 = _interopRequireWildcard(_path); var nodePath = _interopRequireWildcard(_path); var nodePath3 = _interopRequireWildcard(_path); var nodePath4 = _interopRequireWildcard(_path); var path5 = _interopRequireWildcard(_path); var path6 = _interopRequireWildcard(_path); var path7 = _interopRequireWildcard(_path);
+var _fs = require('fs'); var fs3 = _interopRequireWildcard(_fs); var fs6 = _interopRequireWildcard(_fs); var fs4 = _interopRequireWildcard(_fs); var fs5 = _interopRequireWildcard(_fs); var fs8 = _interopRequireWildcard(_fs); var fs10 = _interopRequireWildcard(_fs); var fs11 = _interopRequireWildcard(_fs);
+var _path = require('path'); var nodePath2 = _interopRequireWildcard(_path); var path2 = _interopRequireWildcard(_path); var nodePath = _interopRequireWildcard(_path); var nodePath3 = _interopRequireWildcard(_path); var nodePath4 = _interopRequireWildcard(_path); var path5 = _interopRequireWildcard(_path); var path6 = _interopRequireWildcard(_path);
 function computeConfigHash(configPath) {
   try {
     const raw = fs3.default.readFileSync(configPath);
@@ -843,7 +845,7 @@ function verifyConfigManifest(serverRoot) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, verifyConfigManifest, "verifyConfigManifest");
 
 // src/core/init.ts
-function initAsaiHost($asai, _opt) {
+function initAsaiHostNodejs($asai, _opt) {
   if (!_optionalChain([$asai, 'access', _93 => _93.hostconfig, 'optionalAccess', _94 => _94.ip])) {
     $asai.hostconfig.ip = getIp();
   }
@@ -865,12 +867,12 @@ function initAsaiHost($asai, _opt) {
       resAES
     };
   }
-  if (_chunkQWVR2HNTcjs.isDevDefaultPassword.call(void 0, _optionalChain([$asai, 'access', _102 => _102.hostconfig, 'optionalAccess', _103 => _103.password]) || "")) {
+  if (_chunkLXJMGLKWcjs.isDevDefaultPassword.call(void 0, _optionalChain([$asai, 'access', _102 => _102.hostconfig, 'optionalAccess', _103 => _103.password]) || "")) {
     logSecurityEvent($asai, {
       type: "CONFIG_WARN",
       detail: "Using dev-only password; set ASAI_HOST_PASSWORD for production (IEC 62443-4-2 CR 1.7)"
     });
-    void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-LE6X4C6N.cjs"))).then(
+    void Promise.resolve().then(() => _interopRequireWildcard(require("./intervention-hooks-KF3SNB5Q.cjs"))).then(
       ({ logSecurityConfigIntervention: logSecurityConfigIntervention2 }) => logSecurityConfigIntervention2($asai, {
         section: "password",
         detail: "dev-default-password detected at startup"
@@ -890,13 +892,13 @@ function initAsaiHost($asai, _opt) {
     if (!ntp.ok) logSecurityEvent($asai, { type: "CONFIG_WARN", detail: `NTP: ${ntp.detail}` });
   });
 }
-_chunkSMVZ3ZDJcjs.__name.call(void 0, initAsaiHost, "initAsaiHost");
+_chunkSMVZ3ZDJcjs.__name.call(void 0, initAsaiHostNodejs, "initAsaiHostNodejs");
 function scheduleLogComplianceCheck($asai) {
   const hours = Number(_optionalChain([$asai, 'optionalAccess', _104 => _104.hostconfig, 'optionalAccess', _105 => _105.logger, 'optionalAccess', _106 => _106.complianceIntervalHours])) || 6;
   if (hours <= 0) return;
   const ms = hours * 3600 * 1e3;
   setInterval(() => {
-    void Promise.resolve().then(() => _interopRequireWildcard(require("./LogStore-M2AUBNGO.cjs"))).then(
+    void Promise.resolve().then(() => _interopRequireWildcard(require("./LogStore-7MTUQA4G.cjs"))).then(
       ({ getComplianceReport: getComplianceReport2 }) => getComplianceReport2($asai, "prod")
     ).catch(() => void 0);
   }, ms);
@@ -947,16 +949,61 @@ function getWsUserinfo(req, $asai) {
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getWsUserinfo, "getWsUserinfo");
+function listOnlineWsUsers($asai, hostdir) {
+  const users = [];
+  const map = $asai.connectionsws || {};
+  const dirs = hostdir ? [hostdir] : Object.keys(map);
+  for (const dir of dirs) {
+    for (const [us, ws2] of Object.entries(map[dir] || {})) {
+      if (!us || us === "asai") continue;
+      if (isWsStillActive(ws2)) {
+        users.push(us);
+      } else if (_optionalChain([map, 'access', _111 => _111[dir], 'optionalAccess', _112 => _112[us]]) === ws2) {
+        delete map[dir][us];
+      }
+    }
+  }
+  return [...new Set(users)];
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, listOnlineWsUsers, "listOnlineWsUsers");
 function isUserOnlineOnWs($asai, us, hostdir) {
   if (!us || us === "asai") return false;
   const map = $asai.connectionsws || {};
   const dirs = hostdir ? [hostdir] : Object.keys(map);
   for (const dir of dirs) {
-    if (_optionalChain([map, 'access', _111 => _111[dir], 'optionalAccess', _112 => _112[us]])) return true;
+    const ws2 = _optionalChain([map, 'access', _113 => _113[dir], 'optionalAccess', _114 => _114[us]]);
+    if (!ws2) continue;
+    if (isWsStillActive(ws2)) return true;
+    if (_optionalChain([map, 'access', _115 => _115[dir], 'optionalAccess', _116 => _116[us]]) === ws2) delete map[dir][us];
   }
   return false;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isUserOnlineOnWs, "isUserOnlineOnWs");
+function kickUserWs($asai, us, hostdir) {
+  if (!us || us === "asai") return;
+  const map = $asai.connectionsws || {};
+  const dirs = hostdir ? [hostdir] : Object.keys(map);
+  for (const dir of dirs) {
+    const ws2 = _optionalChain([map, 'access', _117 => _117[dir], 'optionalAccess', _118 => _118[us]]);
+    if (!ws2) continue;
+    try {
+      ws2.close();
+    } catch (e17) {
+    }
+    if (_optionalChain([map, 'access', _119 => _119[dir], 'optionalAccess', _120 => _120[us]]) === ws2) delete map[dir][us];
+  }
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, kickUserWs, "kickUserWs");
+async function removeSessionOnWsClose($asai, us, token) {
+  try {
+    const store = _chunkLXJMGLKWcjs.createUserStore.call(void 0, $asai);
+    const sessions = await store.getSessions();
+    const match = sessions.find((s) => s.us === us && s.pub === token);
+    if (match) await store.removeSession(match.id);
+  } catch (e18) {
+  }
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, removeSessionOnWsClose, "removeSessionOnWsClose");
 function isWsStillActive(ws2) {
   if (!ws2) return false;
   const state = ws2.readyState;
@@ -969,13 +1016,13 @@ function rejectIncomingWs(ws2, db) {
     ws2.send(payload, () => {
       try {
         ws2.close();
-      } catch (e17) {
+      } catch (e19) {
       }
     });
-  } catch (e18) {
+  } catch (e20) {
     try {
       ws2.close();
-    } catch (e19) {
+    } catch (e21) {
     }
   }
 }
@@ -986,9 +1033,9 @@ function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
     ws2.close();
     return false;
   }
-  if (us !== "asai" && _optionalChain([$asai, 'access', _113 => _113.connectionsws, 'access', _114 => _114[hostdir], 'optionalAccess', _115 => _115[us]])) {
+  if (us !== "asai" && _optionalChain([$asai, 'access', _121 => _121.connectionsws, 'access', _122 => _122[hostdir], 'optionalAccess', _123 => _123[us]])) {
     const existingWs = $asai.connectionsws[hostdir][us];
-    if (_optionalChain([existingWs, 'optionalAccess', _116 => _116.Userinfo, 'optionalAccess', _117 => _117[2]]) === tk) {
+    if (_optionalChain([existingWs, 'optionalAccess', _124 => _124.Userinfo, 'optionalAccess', _125 => _125[2]]) === tk) {
       if (isWsStillActive(existingWs)) {
         rejectIncomingWs(ws2, {
           lang: "pageworking",
@@ -999,7 +1046,7 @@ function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
       }
       try {
         existingWs.close();
-      } catch (e20) {
+      } catch (e22) {
       }
       delete $asai.connectionsws[hostdir][us];
       return true;
@@ -1014,7 +1061,7 @@ function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
   if (us !== "asai") {
     const connections = $asai.connectionsws[hostdir] || {};
     const sameTkWs = Object.values(connections).find(
-      (item) => _optionalChain([item, 'access', _118 => _118.Userinfo, 'optionalAccess', _119 => _119[2]]) === tk && _optionalChain([item, 'access', _120 => _120.Userinfo, 'optionalAccess', _121 => _121[0]]) !== us
+      (item) => _optionalChain([item, 'access', _126 => _126.Userinfo, 'optionalAccess', _127 => _127[2]]) === tk && _optionalChain([item, 'access', _128 => _128.Userinfo, 'optionalAccess', _129 => _129[0]]) !== us
     );
     const maxOnline = hostcfg.maxonline || 100;
     if (sameTkWs) {
@@ -1039,21 +1086,26 @@ function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isOkWs, "isOkWs");
 function loginWs($asai, hostdir, ws2, req, hostcfg, wsWorkHandler, logWsMessage) {
   const [us] = ws2.Userinfo || [];
-  if (hostcfg.ckws && us) {
-    if (!ws2.tasksws) ws2.tasksws = {};
+  if (!$asai.connectionsws[hostdir]) {
+    $asai.connectionsws[hostdir] = {};
+  }
+  if (us && us !== "asai") {
+    if (hostcfg.ckws && !ws2.tasksws) ws2.tasksws = {};
     $asai.connectionsws[hostdir][us] = ws2;
   }
   ws2.on("message", (msg) => {
     if (logWsMessage) $asai.$log("WS", "message", msg.toString());
-    _optionalChain([wsWorkHandler, 'optionalCall', _122 => _122(msg, ws2, hostdir, req)]);
+    _optionalChain([wsWorkHandler, 'optionalCall', _130 => _130(msg, ws2, hostdir, req)]);
   });
   ws2.on("close", () => {
-    if (hostcfg.ckws) {
-      if (ws2.tasksws) {
-        Object.values(ws2.tasksws).forEach((el) => el && clearInterval(el));
-        ws2.tasksws = void 0;
-      }
-      if (us && _optionalChain([$asai, 'access', _123 => _123.connectionsws, 'access', _124 => _124[hostdir], 'optionalAccess', _125 => _125[us]]) === ws2) delete $asai.connectionsws[hostdir][us];
+    const token = _optionalChain([ws2, 'access', _131 => _131.Userinfo, 'optionalAccess', _132 => _132[2]]);
+    if (hostcfg.ckws && ws2.tasksws) {
+      Object.values(ws2.tasksws).forEach((el) => el && clearInterval(el));
+      ws2.tasksws = void 0;
+    }
+    if (us && _optionalChain([$asai, 'access', _133 => _133.connectionsws, 'access', _134 => _134[hostdir], 'optionalAccess', _135 => _135[us]]) === ws2) delete $asai.connectionsws[hostdir][us];
+    if (us && token && !isUserOnlineOnWs($asai, us, hostdir)) {
+      void removeSessionOnWsClose($asai, us, String(token));
     }
     if (ws2.readyState !== _ws.WebSocket.CLOSED && ws2.readyState !== _ws.WebSocket.CLOSING) ws2.close();
   });
@@ -1075,7 +1127,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, clearWsServerTasks, "clearWsServerTasks");
 function resWsMsg(msg, $asai) {
   if (msg === "ping" || msg === "pong") return msg;
   if (typeof msg !== "object" || msg === null) return msg;
-  if ((_optionalChain([msg, 'optionalAccess', _126 => _126.aes]) || _optionalChain([$asai, 'access', _127 => _127.$lib, 'access', _128 => _128.aesfns, 'optionalAccess', _129 => _129.allaes])) && _optionalChain([msg, 'optionalAccess', _130 => _130.db]) && _optionalChain([$asai, 'access', _131 => _131.$lib, 'optionalAccess', _132 => _132.aesfns, 'optionalAccess', _133 => _133.resAES])) {
+  if ((_optionalChain([msg, 'optionalAccess', _136 => _136.aes]) || _optionalChain([$asai, 'access', _137 => _137.$lib, 'access', _138 => _138.aesfns, 'optionalAccess', _139 => _139.allaes])) && _optionalChain([msg, 'optionalAccess', _140 => _140.db]) && _optionalChain([$asai, 'access', _141 => _141.$lib, 'optionalAccess', _142 => _142.aesfns, 'optionalAccess', _143 => _143.resAES])) {
     msg.db = $asai.$lib.aesfns.resAES(msg.db);
   }
   return JSON.stringify(msg);
@@ -1097,7 +1149,7 @@ function attachWssHelpers(wss, $asai) {
   wss.broadws = (msg) => {
     const data = resWsMsg(msg, $asai);
     wss.clients.forEach((client) => {
-      if (_optionalChain([client, 'optionalAccess', _134 => _134.readyState]) === _ws.WebSocket.OPEN) client.send(data);
+      if (_optionalChain([client, 'optionalAccess', _144 => _144.readyState]) === _ws.WebSocket.OPEN) client.send(data);
     });
   };
 }
@@ -1110,7 +1162,7 @@ var apiPerIp = /* @__PURE__ */ new Map();
 var apiRatePerIp = /* @__PURE__ */ new Map();
 var wsPerIp = /* @__PURE__ */ new Map();
 function getQuota($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _135 => _135.hostconfig, 'optionalAccess', _136 => _136.security, 'optionalAccess', _137 => _137.quota]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _145 => _145.hostconfig, 'optionalAccess', _146 => _146.security, 'optionalAccess', _147 => _147.quota]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getQuota, "getQuota");
 function isEnabled($asai) {
@@ -1200,7 +1252,7 @@ function getMaxWebConnections($asai, hostcfg) {
   const q = getQuota($asai);
   const fromQuota = Number(q.maxWebConnections);
   if (fromQuota > 0) return fromQuota;
-  return Number(_optionalChain([hostcfg, 'optionalAccess', _138 => _138.maxws])) > 0 ? Number(hostcfg.maxws) : 100;
+  return Number(_optionalChain([hostcfg, 'optionalAccess', _148 => _148.maxws])) > 0 ? Number(hostcfg.maxws) : 100;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getMaxWebConnections, "getMaxWebConnections");
 function countActiveWsConnections(wss, incoming, $asai, hostdir, hostcfg, userinfo) {
@@ -1210,12 +1262,12 @@ function countActiveWsConnections(wss, incoming, $asai, hostdir, hostcfg, userin
     if (client === incoming) continue;
     if (client.readyState === _ws.WebSocket.CLOSED || client.readyState === _ws.WebSocket.CLOSING) continue;
     const cInfo = client.Userinfo;
-    const cUs = _optionalChain([cInfo, 'optionalAccess', _139 => _139[0]]);
-    const cTk = _optionalChain([cInfo, 'optionalAccess', _140 => _140[2]]);
+    const cUs = _optionalChain([cInfo, 'optionalAccess', _149 => _149[0]]);
+    const cTk = _optionalChain([cInfo, 'optionalAccess', _150 => _150[2]]);
     if (us && tk && cUs === us && cTk === tk) continue;
-    if (_optionalChain([hostcfg, 'optionalAccess', _141 => _141.ckws]) && us && tk) {
-      const existing = _optionalChain([$asai, 'optionalAccess', _142 => _142.connectionsws, 'optionalAccess', _143 => _143[hostdir], 'optionalAccess', _144 => _144[us]]);
-      if (existing === client && _optionalChain([existing, 'optionalAccess', _145 => _145.Userinfo, 'optionalAccess', _146 => _146[2]]) === tk) continue;
+    if (_optionalChain([hostcfg, 'optionalAccess', _151 => _151.ckws]) && us && tk) {
+      const existing = _optionalChain([$asai, 'optionalAccess', _152 => _152.connectionsws, 'optionalAccess', _153 => _153[hostdir], 'optionalAccess', _154 => _154[us]]);
+      if (existing === client && _optionalChain([existing, 'optionalAccess', _155 => _155.Userinfo, 'optionalAccess', _156 => _156[2]]) === tk) continue;
     }
     count += 1;
   }
@@ -1227,7 +1279,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, countActiveWsConnections, "countActiveWsCo
 function createWSHost($asai, hostdir) {
   const hostcfg = getHostCFG(hostdir, $asai);
   const wsWorkHandler = getWorkHandler("wsWork");
-  const logWsMessage = !!_optionalChain([$asai, 'access', _147 => _147.hostconfig, 'access', _148 => _148.logger, 'optionalAccess', _149 => _149.lv, 'optionalAccess', _150 => _150.view]);
+  const logWsMessage = !!_optionalChain([$asai, 'access', _157 => _157.hostconfig, 'access', _158 => _158.logger, 'optionalAccess', _159 => _159.lv, 'optionalAccess', _160 => _160.view]);
   try {
     if ($asai.serversws[hostdir]) return;
     if (hostcfg.ckws && !$asai.connectionsws[hostdir]) {
@@ -1239,14 +1291,14 @@ function createWSHost($asai, hostdir) {
     wss.on("error", (err) => {
       clearWsServerTasks($asai, hostdir);
       $asai.$log("WS", "WS    Server error!", err);
-      _optionalChain([wss, 'access', _151 => _151.close, 'optionalCall', _152 => _152(() => {
+      _optionalChain([wss, 'access', _161 => _161.close, 'optionalCall', _162 => _162(() => {
         $asai.$log("WS", "WS    Server closed");
         delete $asai.serversws[hostdir];
       })]);
     });
     wss.on("close", (code, reason) => {
       try {
-        $asai.$log("WS", `WebSocket closed, server ${hostdir}, code: ${code}, reason: ${_optionalChain([reason, 'optionalAccess', _153 => _153.toString, 'call', _154 => _154()])}`);
+        $asai.$log("WS", `WebSocket closed, server ${hostdir}, code: ${code}, reason: ${_optionalChain([reason, 'optionalAccess', _163 => _163.toString, 'call', _164 => _164()])}`);
         clearWsServerTasks($asai, hostdir);
       } catch (err) {
         $asai.$log("WS", "WS close handler error:", err);
@@ -1334,7 +1386,7 @@ var StaticPathCache = class {
       const stat = fs3.statSync(entry.filePath);
       if (!stat.isFile() || stat.mtimeMs !== entry.mtimeMs) return null;
       return stat;
-    } catch (e21) {
+    } catch (e23) {
       return null;
     }
   }
@@ -1353,8 +1405,8 @@ function applySecurityHeaders(res, isHttps = false, hostconfig) {
   if (isHttps) {
     res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
   }
-  const sec = _optionalChain([hostconfig, 'optionalAccess', _155 => _155.security]);
-  if (_optionalChain([sec, 'optionalAccess', _156 => _156.csp])) {
+  const sec = _optionalChain([hostconfig, 'optionalAccess', _165 => _165.security]);
+  if (_optionalChain([sec, 'optionalAccess', _166 => _166.csp])) {
     const csp = typeof sec.cspPolicy === "string" && sec.cspPolicy.length > 0 ? sec.cspPolicy : DEFAULT_CSP;
     res.setHeader("Content-Security-Policy", csp);
   }
@@ -1362,9 +1414,9 @@ function applySecurityHeaders(res, isHttps = false, hostconfig) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, applySecurityHeaders, "applySecurityHeaders");
 function getHttpUserinfo(req, $asai) {
   try {
-    const userinfo = _optionalChain([req, 'access', _157 => _157.headers, 'optionalAccess', _158 => _158["userinfo"], 'optionalAccess', _159 => _159.split, 'call', _160 => _160("##")]);
+    const userinfo = _optionalChain([req, 'access', _167 => _167.headers, 'optionalAccess', _168 => _168["userinfo"], 'optionalAccess', _169 => _169.split, 'call', _170 => _170("##")]);
     return deUserInfoWithAsai(userinfo, $asai);
-  } catch (e22) {
+  } catch (e24) {
     return "";
   }
 }
@@ -1395,7 +1447,7 @@ function normalizeRequestPath(url) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeRequestPath, "normalizeRequestPath");
 function createSkipChecker($asai) {
-  const skip = _optionalChain([$asai, 'access', _161 => _161.hostconfig, 'optionalAccess', _162 => _162.logger, 'optionalAccess', _163 => _163.skip]);
+  const skip = _optionalChain([$asai, 'access', _171 => _171.hostconfig, 'optionalAccess', _172 => _172.logger, 'optionalAccess', _173 => _173.skip]);
   if (!Array.isArray(skip) || skip.length === 0) return () => false;
   const exact = /* @__PURE__ */ new Set();
   const prefixes = [];
@@ -1406,11 +1458,11 @@ function createSkipChecker($asai) {
   }
   if (exact.size === 0 && prefixes.length === 0) return () => false;
   return (url) => {
-    const path8 = normalizeRequestPath(url);
-    if (!path8) return false;
-    if (exact.has(path8)) return true;
+    const path7 = normalizeRequestPath(url);
+    if (!path7) return false;
+    if (exact.has(path7)) return true;
     for (let i = 0; i < prefixes.length; i++) {
-      if (path8.startsWith(prefixes[i])) return true;
+      if (path7.startsWith(prefixes[i])) return true;
     }
     return false;
   };
@@ -1429,9 +1481,9 @@ function attachAccessLog($asai, req, res, logType) {
   res.__asaiAccessLogged = true;
   const onFinish = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, () => {
     try {
-      const entry = _chunkW7DVKGX5cjs.buildAccessEntry.call(void 0, req, res, logType);
-      void $asai.appendAccessLog(_chunkW7DVKGX5cjs.formatCLF.call(void 0, entry), _chunkW7DVKGX5cjs.formatW3CAccessRecord.call(void 0, entry));
-    } catch (e23) {
+      const entry = _chunkOCEBEEP5cjs.buildAccessEntry.call(void 0, req, res, logType);
+      void $asai.appendAccessLog(_chunkOCEBEEP5cjs.formatCLF.call(void 0, entry), _chunkOCEBEEP5cjs.formatW3CAccessRecord.call(void 0, entry));
+    } catch (e25) {
     }
   }, "onFinish");
   if (res.writableEnded || res.finished) onFinish();
@@ -1490,7 +1542,7 @@ function findExistingFileUnderRoots(requestedPath, allowedRoots) {
       if (stat.isFile()) {
         return { filePath: absTarget, stat };
       }
-    } catch (e24) {
+    } catch (e26) {
     }
   }
   return null;
@@ -1503,13 +1555,13 @@ function getHostAllowedRoots(hostconfig) {
     try {
       const abs = path2.resolve("./" + dir.replace(/\\/g, "/"));
       if (fs4.existsSync(abs)) roots.add(abs);
-    } catch (e25) {
+    } catch (e27) {
     }
   }, "push");
-  for (const dir of _optionalChain([hostconfig, 'optionalAccess', _164 => _164.hostdirs]) || []) push(dir);
+  for (const dir of _optionalChain([hostconfig, 'optionalAccess', _174 => _174.hostdirs]) || []) push(dir);
   push("webdata");
   push("websys");
-  if (_optionalChain([hostconfig, 'optionalAccess', _165 => _165.weburls, 'optionalAccess', _166 => _166.webdir])) push(hostconfig.weburls.webdir);
+  if (_optionalChain([hostconfig, 'optionalAccess', _175 => _175.weburls, 'optionalAccess', _176 => _176.webdir])) push(hostconfig.weburls.webdir);
   const result = [];
   roots.forEach((r) => result.push(r));
   return result;
@@ -1540,7 +1592,7 @@ function getStaticBaseDirs($asai) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getStaticBaseDirs, "getStaticBaseDirs");
 function shouldForceHostdirs($asai) {
   if ($asai.pkgSnapshotDir) return true;
-  return _optionalChain([$asai, 'access', _167 => _167.hostconfig, 'optionalAccess', _168 => _168.pkg, 'optionalAccess', _169 => _169.type]) === 1;
+  return _optionalChain([$asai, 'access', _177 => _177.hostconfig, 'optionalAccess', _178 => _178.pkg, 'optionalAccess', _179 => _179.type]) === 1;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, shouldForceHostdirs, "shouldForceHostdirs");
 function buildStaticSearchDirs(hostcfg, $asai) {
@@ -1561,12 +1613,12 @@ function buildStaticSearchDirs(hostcfg, $asai) {
           ordered.push(dir);
           return;
         }
-      } catch (e26) {
+      } catch (e28) {
       }
     }
   }, "pushDir");
   for (const dir of hostcfg.hostdirs || []) pushDir(dir);
-  if (_optionalChain([hostcfg, 'access', _170 => _170.weburls, 'optionalAccess', _171 => _171.webdir])) pushDir(hostcfg.weburls.webdir);
+  if (_optionalChain([hostcfg, 'access', _180 => _180.weburls, 'optionalAccess', _181 => _181.webdir])) pushDir(hostcfg.weburls.webdir);
   return ordered;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, buildStaticSearchDirs, "buildStaticSearchDirs");
@@ -1594,7 +1646,7 @@ function parseUrlPath(requrl) {
     if (!requrl) return "/";
     const safeUrl = requrl.startsWith("http") ? requrl : encodeURI(requrl);
     return new URL(safeUrl, "http://localhost").pathname;
-  } catch (e27) {
+  } catch (e29) {
     return requrl;
   }
 }
@@ -1686,8 +1738,8 @@ function serveStaticFile(req, res, foundPath, mimeType, stat, $asai) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, serveStaticFile, "serveStaticFile");
 function createStaticHandler(ctx) {
   const { hostcfg, hostdir, indexFile, $asai, staticPathCache } = ctx;
-  const hasRewrite = !!(_optionalChain([hostcfg, 'access', _172 => _172.weburls, 'optionalAccess', _173 => _173.rewrite]) && _optionalChain([hostcfg, 'access', _174 => _174.weburls, 'optionalAccess', _175 => _175.webdir]) && _optionalChain([hostcfg, 'access', _176 => _176.weburls, 'optionalAccess', _177 => _177.keys, 'optionalAccess', _178 => _178.length]));
-  const rewriteKeys = hasRewrite ? _optionalChain([hostcfg, 'access', _179 => _179.weburls, 'optionalAccess', _180 => _180.keys]) || [] : [];
+  const hasRewrite = !!(_optionalChain([hostcfg, 'access', _182 => _182.weburls, 'optionalAccess', _183 => _183.rewrite]) && _optionalChain([hostcfg, 'access', _184 => _184.weburls, 'optionalAccess', _185 => _185.webdir]) && _optionalChain([hostcfg, 'access', _186 => _186.weburls, 'optionalAccess', _187 => _187.keys, 'optionalAccess', _188 => _188.length]));
+  const rewriteKeys = hasRewrite ? _optionalChain([hostcfg, 'access', _189 => _189.weburls, 'optionalAccess', _190 => _190.keys]) || [] : [];
   const checkWebUrls = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (rurl) => {
     if (!hasRewrite || !rurl) return false;
     for (let i = 0; i < rewriteKeys.length; i++) {
@@ -1702,7 +1754,7 @@ function createStaticHandler(ctx) {
     const roots = rhostdirs.join("|") === primaryDirs.join("|") ? buildStaticRoots(primaryDirs, $asai) : buildStaticRoots(rhostdirs, $asai);
     const findValidFile = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (urlPath) => {
       const hit = staticPathCache.get(cacheKey);
-      if (_optionalChain([hit, 'optionalAccess', _181 => _181.is404])) return null;
+      if (_optionalChain([hit, 'optionalAccess', _191 => _191.is404])) return null;
       if (hit && !hit.is404) {
         const verified = staticPathCache.verify(hit);
         if (verified) return { filePath: hit.filePath, stat: verified };
@@ -1726,7 +1778,7 @@ function createStaticHandler(ctx) {
       showHostDirs(req, res, [hostcfg.weburls.webdir], "/" + indexFile, primaryDirs, rtm + 1);
       return;
     }
-    const mimeType = _optionalChain([hostcfg, 'access', _182 => _182.mimetypes, 'optionalAccess', _183 => _183[nodePath2.extname(found.filePath)]]) || "application/octet-stream";
+    const mimeType = _optionalChain([hostcfg, 'access', _192 => _192.mimetypes, 'optionalAccess', _193 => _193[nodePath2.extname(found.filePath)]]) || "application/octet-stream";
     serveStaticFile(req, res, found.filePath, mimeType, found.stat, $asai);
   }, "showHostDirs");
   return (req, res, url) => {
@@ -1751,7 +1803,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, createStaticHandler, "createStaticHandler"
 function setupHttpConnectionMonitor($asai, hostdir, server, hostcfg) {
   const maxHttp = hostcfg.maxhttp || 100;
   const monitorInterval = setInterval(() => {
-    const connCount = _optionalChain([$asai, 'access', _184 => _184.connectionshttp, 'access', _185 => _185[hostdir], 'optionalAccess', _186 => _186.size]) || 0;
+    const connCount = _optionalChain([$asai, 'access', _194 => _194.connectionshttp, 'access', _195 => _195[hostdir], 'optionalAccess', _196 => _196.size]) || 0;
     if (connCount > maxHttp * 0.8) {
       $asai.$log("HTTP", `HTTP Connection HIGH (${connCount}/${maxHttp})`);
     }
@@ -1828,10 +1880,10 @@ function findListeningPids(port) {
         stdio: ["pipe", "pipe", "ignore"]
       });
       return out.split(/\r?\n/).map((s) => parseInt(s.trim(), 10)).filter((n) => n > 0);
-    } catch (e28) {
+    } catch (e30) {
       return [];
     }
-  } catch (e29) {
+  } catch (e31) {
     return [];
   }
 }
@@ -1845,17 +1897,17 @@ function killPid(pid) {
       _child_process.execSync.call(void 0, `kill -9 ${pid}`, { stdio: "ignore" });
     }
     return true;
-  } catch (e30) {
+  } catch (e32) {
     return false;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, killPid, "killPid");
 function releasePort(port, opts) {
-  const exclude = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _187 => _187.excludePid]), () => ( OWN_PID));
+  const exclude = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _197 => _197.excludePid]), () => ( OWN_PID));
   const occupants = findListeningPids(port).filter((p) => p !== exclude && p !== OWN_PID);
   if (!occupants.length) return true;
-  const label = _optionalChain([opts, 'optionalAccess', _188 => _188.label]) ? `[${opts.label}] ` : "";
-  console.warn(`[AsaiHost] ${label}\u7AEF\u53E3 ${port} \u88AB\u5360\u7528\uFF0C\u6B63\u5728\u7ED3\u675F\u8FDB\u7A0B: ${occupants.join(", ")}`);
+  const label = _optionalChain([opts, 'optionalAccess', _198 => _198.label]) ? `[${opts.label}] ` : "";
+  console.warn(`[AsaiHostNodejs] ${label}\u7AEF\u53E3 ${port} \u88AB\u5360\u7528\uFF0C\u6B63\u5728\u7ED3\u675F\u8FDB\u7A0B: ${occupants.join(", ")}`);
   for (const pid of occupants) {
     killPid(pid);
   }
@@ -1866,23 +1918,23 @@ function releasePort(port, opts) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, releasePort, "releasePort");
 function collectStartupPorts($asai) {
   const ports = /* @__PURE__ */ new Set();
-  const hosts = _optionalChain([$asai, 'access', _189 => _189.hostconfig, 'optionalAccess', _190 => _190.hosts]);
+  const hosts = _optionalChain([$asai, 'access', _199 => _199.hostconfig, 'optionalAccess', _200 => _200.hosts]);
   if (hosts) {
     for (const el of Object.keys(hosts)) {
       if (el === "default") continue;
       if (el !== "asai" && !validateHostdir(el)) continue;
       const cfg = getHostCFG(el, $asai);
-      if (_optionalChain([cfg, 'optionalAccess', _191 => _191.close])) continue;
-      if (_optionalChain([cfg, 'optionalAccess', _192 => _192.port])) ports.add(Number(cfg.port));
+      if (_optionalChain([cfg, 'optionalAccess', _201 => _201.close])) continue;
+      if (_optionalChain([cfg, 'optionalAccess', _202 => _202.port])) ports.add(Number(cfg.port));
     }
   }
-  const proxyhosts = _optionalChain([$asai, 'access', _193 => _193.hostconfig, 'optionalAccess', _194 => _194.proxyhosts]);
+  const proxyhosts = _optionalChain([$asai, 'access', _203 => _203.hostconfig, 'optionalAccess', _204 => _204.proxyhosts]);
   if (proxyhosts) {
     for (const el of Object.keys(proxyhosts)) {
       if (el === "default") continue;
       if (!validateHostdir(el)) continue;
       const cfg = getProxyHostCFG(el, $asai);
-      if (_optionalChain([cfg, 'optionalAccess', _195 => _195.proxyport])) ports.add(Number(cfg.proxyport));
+      if (_optionalChain([cfg, 'optionalAccess', _205 => _205.proxyport])) ports.add(Number(cfg.proxyport));
     }
   }
   return [...ports];
@@ -1907,7 +1959,7 @@ function scheduleHttpRetry($asai, hostdir) {
       clearTimeout($asai.hostconfig.guardtm);
       $asai.hostconfig.guardtm = null;
     }
-  }, _optionalChain([$asai, 'access', _196 => _196.hostconfig, 'access', _197 => _197.tm, 'optionalAccess', _198 => _198.d]) || 2e3);
+  }, _optionalChain([$asai, 'access', _206 => _206.hostconfig, 'access', _207 => _207.tm, 'optionalAccess', _208 => _208.d]) || 2e3);
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, scheduleHttpRetry, "scheduleHttpRetry");
 function clearFailedHttpHost($asai, hostdir, ws2) {
@@ -1920,7 +1972,7 @@ function getHTTPServer(httptype = "", cfg, $asai) {
     if (httptype.startsWith("https")) {
       return {
         AsCreateServer: /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (callback) => {
-          return https.createServer(_optionalChain([cfg, 'optionalAccess', _199 => _199.httpscert]) || $asai.hostconfig.httpscert, callback);
+          return https.createServer(_optionalChain([cfg, 'optionalAccess', _209 => _209.httpscert]) || $asai.hostconfig.httpscert, callback);
         }, "AsCreateServer"),
         Agent: https.Agent,
         request: https.request
@@ -1972,13 +2024,13 @@ function startHTTPServer($asai, hostdir) {
             return;
           }
           applySecurityHeaders(res, isHttps, $asai.hostconfig);
-          if (_optionalChain([req, 'access', _200 => _200.url, 'optionalAccess', _201 => _201.startsWith, 'call', _202 => _202("/sys")]) && sysWork) {
+          if (_optionalChain([req, 'access', _210 => _210.url, 'optionalAccess', _211 => _211.startsWith, 'call', _212 => _212("/sys")]) && sysWork) {
             logHttp($asai, "SYS", req.method, req.url, skipChecker, req, res);
             sysWork(req, res, hostdir);
-          } else if (_optionalChain([req, 'access', _203 => _203.url, 'optionalAccess', _204 => _204.startsWith, 'call', _205 => _205("/api")]) && apiWork) {
+          } else if (_optionalChain([req, 'access', _213 => _213.url, 'optionalAccess', _214 => _214.startsWith, 'call', _215 => _215("/api")]) && apiWork) {
             logHttp($asai, "API", req.method, req.url, skipChecker, req, res);
             apiWork(req, res, hostdir);
-          } else if (_optionalChain([req, 'access', _206 => _206.url, 'optionalAccess', _207 => _207.startsWith, 'call', _208 => _208("/jsonp")]) && jsonpWork) {
+          } else if (_optionalChain([req, 'access', _216 => _216.url, 'optionalAccess', _217 => _217.startsWith, 'call', _218 => _218("/jsonp")]) && jsonpWork) {
             logHttp($asai, "JSONP", req.method, req.url, skipChecker, req, res);
             jsonpWork(req, res, hostdir);
           } else if (handleStatic) {
@@ -2050,7 +2102,7 @@ function findSameProcessPortOwner($asai, port, excludeHostdir) {
   for (const hostdir of Object.keys($asai.servershttp || {})) {
     if (hostdir === excludeHostdir) continue;
     const cfg = getHostCFG(hostdir, $asai);
-    if (_optionalChain([cfg, 'optionalAccess', _209 => _209.port]) === port) return hostdir;
+    if (_optionalChain([cfg, 'optionalAccess', _219 => _219.port]) === port) return hostdir;
   }
   return null;
 }
@@ -2058,7 +2110,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, findSameProcessPortOwner, "findSameProcess
 function asaiGuard($asai, failedHostdir = "asai") {
   const conflictPorts = $asai.hostconfig.asaiport || [];
   const hostcfg = getHostCFG(failedHostdir, $asai);
-  const port = _optionalChain([hostcfg, 'optionalAccess', _210 => _210.port]);
+  const port = _optionalChain([hostcfg, 'optionalAccess', _220 => _220.port]);
   if (!port || !conflictPorts.includes(port)) {
     scheduleHttpRetry($asai, failedHostdir);
     return;
@@ -2066,18 +2118,18 @@ function asaiGuard($asai, failedHostdir = "asai") {
   const sameProcessOwner = findSameProcessPortOwner($asai, port, failedHostdir);
   if (sameProcessOwner) {
     console.error(
-      `[AsaiHost] \u7AEF\u53E3 ${port} \u5DF2\u88AB\u540C\u8FDB\u7A0B\u7AD9\u70B9 [${sameProcessOwner}] \u5360\u7528\uFF0C[${failedHostdir}] \u505C\u6B62\u91CD\u8BD5\uFF08\u8BF7\u68C0\u67E5 asaihost.json \u662F\u5426\u91CD\u590D\u914D\u7F6E port\uFF09`
+      `[AsaiHostNodejs] \u7AEF\u53E3 ${port} \u5DF2\u88AB\u540C\u8FDB\u7A0B\u7AD9\u70B9 [${sameProcessOwner}] \u5360\u7528\uFF0C[${failedHostdir}] \u505C\u6B62\u91CD\u8BD5\uFF08\u8BF7\u68C0\u67E5 asaihost.json \u662F\u5426\u91CD\u590D\u914D\u7F6E port\uFF09`
     );
     return;
   }
   const released = releasePort(port, { excludePid: process.pid, label: failedHostdir });
   $asai.hostconfig.asaiport = conflictPorts.filter((p) => p !== port);
   if (released) {
-    console.warn(`[AsaiHost] \u7AEF\u53E3 ${port} \u5DF2\u91CA\u653E\uFF0C\u6B63\u5728\u91CD\u65B0\u542F\u52A8 [${failedHostdir}]`);
+    console.warn(`[AsaiHostNodejs] \u7AEF\u53E3 ${port} \u5DF2\u91CA\u653E\uFF0C\u6B63\u5728\u91CD\u65B0\u542F\u52A8 [${failedHostdir}]`);
     scheduleHttpRetry($asai, failedHostdir);
     return;
   }
-  console.error(`[AsaiHost] \u7AEF\u53E3 ${port} \u65E0\u6CD5\u91CA\u653E\uFF0C\u542F\u52A8\u5931\u8D25\uFF08netstat -ano | findstr :${port}\uFF09`);
+  console.error(`[AsaiHostNodejs] \u7AEF\u53E3 ${port} \u65E0\u6CD5\u91CA\u653E\uFF0C\u542F\u52A8\u5931\u8D25\uFF08netstat -ano | findstr :${port}\uFF09`);
   process.exit(1);
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, asaiGuard, "asaiGuard");
@@ -2096,7 +2148,7 @@ var PROXY_SKIP_HEADERS = /* @__PURE__ */ new Set([
 function startProxyServer($asai, proxyhostdir) {
   const proxycfg = getProxyHostCFG(proxyhostdir, $asai);
   if (!proxycfg.url) return;
-  if (_optionalChain([$asai, 'access', _211 => _211.serversproxy, 'optionalAccess', _212 => _212[proxyhostdir]])) return;
+  if (_optionalChain([$asai, 'access', _221 => _221.serversproxy, 'optionalAccess', _222 => _222[proxyhostdir]])) return;
   try {
     const httpServer = getHTTPServer(proxycfg.proxyhttptype, proxycfg, $asai);
     const targetHttp = getHTTPServer(proxycfg.url, proxycfg, $asai);
@@ -2178,14 +2230,14 @@ function startProxyServer($asai, proxyhostdir) {
     proxyServer.on("error", (err) => {
       if (err.code === "EADDRINUSE") {
         $asai.$log("PROXY", `\x1B[41mPort ${proxycfg.proxyport} is already start!\x1B[0m`);
-         _optionalChainDelete([$asai, 'access', _213 => _213.serversproxy, 'optionalAccess', _214 => delete _214[proxyhostdir]]);
+         _optionalChainDelete([$asai, 'access', _223 => _223.serversproxy, 'optionalAccess', _224 => delete _224[proxyhostdir]]);
         const released = releasePort(proxycfg.proxyport, {
           excludePid: process.pid,
           label: proxyhostdir
         });
         if (released) {
-          console.warn(`[AsaiHost] \u4EE3\u7406\u7AEF\u53E3 ${proxycfg.proxyport} \u5DF2\u91CA\u653E\uFF0C\u6B63\u5728\u91CD\u65B0\u542F\u52A8 [${proxyhostdir}]`);
-          setTimeout(() => startProxyServer($asai, proxyhostdir), _optionalChain([$asai, 'access', _215 => _215.hostconfig, 'access', _216 => _216.tm, 'optionalAccess', _217 => _217.d]) || 2e3);
+          console.warn(`[AsaiHostNodejs] \u4EE3\u7406\u7AEF\u53E3 ${proxycfg.proxyport} \u5DF2\u91CA\u653E\uFF0C\u6B63\u5728\u91CD\u65B0\u542F\u52A8 [${proxyhostdir}]`);
+          setTimeout(() => startProxyServer($asai, proxyhostdir), _optionalChain([$asai, 'access', _225 => _225.hostconfig, 'access', _226 => _226.tm, 'optionalAccess', _227 => _227.d]) || 2e3);
         }
       } else {
         $asai.$log("PROXY", "Proxy server error:", err);
@@ -2223,11 +2275,11 @@ function src_default($asai, opt) {
   workHandlers.set("apiWork", opt.apiWork);
   workHandlers.set("wsWork", opt.wsWork);
   workHandlers.set("jsonpWork", opt.jsonpWork);
-  function StartAsaiHost() {
-    initAsaiHost($asai, opt);
+  function StartAsaiHostNodejs() {
+    initAsaiHostNodejs($asai, opt);
     console.log(`\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B`);
     releaseConfiguredPorts($asai);
-    if (_optionalChain([$asai, 'access', _218 => _218.hostconfig, 'optionalAccess', _219 => _219.hosts])) {
+    if (_optionalChain([$asai, 'access', _228 => _228.hostconfig, 'optionalAccess', _229 => _229.hosts])) {
       $asai.startHTTPServer = (hostdir) => startHTTPServer($asai, hostdir);
       Object.keys($asai.hostconfig.hosts).forEach((el) => {
         if (validateHostdir(el)) {
@@ -2238,7 +2290,7 @@ function src_default($asai, opt) {
         startHTTPServer($asai, "asai");
       }
     }
-    if (_optionalChain([$asai, 'access', _220 => _220.hostconfig, 'optionalAccess', _221 => _221.proxyhosts])) {
+    if (_optionalChain([$asai, 'access', _230 => _230.hostconfig, 'optionalAccess', _231 => _231.proxyhosts])) {
       Object.keys($asai.hostconfig.proxyhosts).forEach((el) => {
         if (validateHostdir(el)) {
           startProxyServer($asai, el);
@@ -2246,8 +2298,8 @@ function src_default($asai, opt) {
       });
     }
   }
-  _chunkSMVZ3ZDJcjs.__name.call(void 0, StartAsaiHost, "StartAsaiHost");
-  return { StartAsaiHost, asaiWs: ws };
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, StartAsaiHostNodejs, "StartAsaiHostNodejs");
+  return { StartAsaiHostNodejs, asaiWs: ws };
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, src_default, "default");
 
@@ -2261,22 +2313,22 @@ _chunkSMVZ3ZDJcjs.__export.call(void 0, utils_exports, {
 // src/utils/ws-mock.ts
 function wsMock($asai) {
   function getKeyByData(reqdata, hostdir) {
-    return "_wstask_" + (hostdir || "") + "_" + (_optionalChain([reqdata, 'optionalAccess', _222 => _222.id]) || _optionalChain([reqdata, 'optionalAccess', _223 => _223.ty]) + "." + _optionalChain([reqdata, 'optionalAccess', _224 => _224.ac]));
+    return "_wstask_" + (hostdir || "") + "_" + (_optionalChain([reqdata, 'optionalAccess', _232 => _232.id]) || _optionalChain([reqdata, 'optionalAccess', _233 => _233.ty]) + "." + _optionalChain([reqdata, 'optionalAccess', _234 => _234.ac]));
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getKeyByData, "getKeyByData");
   function getMockDb(workopt) {
     const { reqdata, mockdata } = workopt;
-    const wsfn = _optionalChain([mockdata, 'optionalAccess', _225 => _225.fn]) ? _optionalChain([$asai, 'access', _226 => _226.asaimock, 'access', _227 => _227.fn, 'optionalAccess', _228 => _228[mockdata.fn]]) : null;
+    const wsfn = _optionalChain([mockdata, 'optionalAccess', _235 => _235.fn]) ? _optionalChain([$asai, 'access', _236 => _236.asaimock, 'access', _237 => _237.fn, 'optionalAccess', _238 => _238[mockdata.fn]]) : null;
     if (wsfn) return wsfn({ workopt, $asai, mockName: mockdata.fn });
     return { ...reqdata, ...mockdata || {} };
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getMockDb, "getMockDb");
   function wsWorkApi(workopt) {
-    _optionalChain([$asai, 'access', _229 => _229.serversws, 'access', _230 => _230[workopt.hostdir], 'optionalAccess', _231 => _231.sendws, 'optionalCall', _232 => _232(workopt.reqdataisobj ? getMockDb(workopt) : workopt.reqdata, 0, workopt.ws)]);
+    _optionalChain([$asai, 'access', _239 => _239.serversws, 'access', _240 => _240[workopt.hostdir], 'optionalAccess', _241 => _241.sendws, 'optionalCall', _242 => _242(workopt.reqdataisobj ? getMockDb(workopt) : workopt.reqdata, 0, workopt.ws)]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWorkApi, "wsWorkApi");
   function wsWorkListen(workopt, reqkey) {
-    if (_optionalChain([workopt, 'access', _233 => _233.reqdata, 'optionalAccess', _234 => _234.off])) {
+    if (_optionalChain([workopt, 'access', _243 => _243.reqdata, 'optionalAccess', _244 => _244.off])) {
       if ($asai.tasksws[workopt.hostdir][reqkey]) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
         $asai.tasksws[workopt.hostdir][reqkey] = null;
@@ -2291,9 +2343,9 @@ function wsMock($asai) {
       if (!$asai.tasksws[workopt.hostdir][reqkey]) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
       }
-    }, _optionalChain([newDataMock, 'optionalAccess', _235 => _235.tc]) || 2e3);
-    _optionalChain([workopt, 'access', _236 => _236.ws, 'optionalAccess', _237 => _237.once, 'optionalCall', _238 => _238("close", () => {
-      if (_optionalChain([$asai, 'access', _239 => _239.tasksws, 'access', _240 => _240[workopt.hostdir], 'optionalAccess', _241 => _241[reqkey]])) {
+    }, _optionalChain([newDataMock, 'optionalAccess', _245 => _245.tc]) || 2e3);
+    _optionalChain([workopt, 'access', _246 => _246.ws, 'optionalAccess', _247 => _247.once, 'optionalCall', _248 => _248("close", () => {
+      if (_optionalChain([$asai, 'access', _249 => _249.tasksws, 'access', _250 => _250[workopt.hostdir], 'optionalAccess', _251 => _251[reqkey]])) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
         delete $asai.tasksws[workopt.hostdir][reqkey];
       }
@@ -2301,8 +2353,8 @@ function wsMock($asai) {
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWorkListen, "wsWorkListen");
   function wsWorkMock(workopt) {
-    workopt.mockdata = workopt.reqdataisobj && _optionalChain([$asai, 'access', _242 => _242.asaimock, 'optionalAccess', _243 => _243.db, 'optionalAccess', _244 => _244[workopt.hostdir], 'optionalAccess', _245 => _245[_optionalChain([workopt, 'access', _246 => _246.reqdata, 'optionalAccess', _247 => _247.ty])]]) || {};
-    if (_optionalChain([workopt, 'access', _248 => _248.mockdata, 'optionalAccess', _249 => _249.wc])) {
+    workopt.mockdata = workopt.reqdataisobj && _optionalChain([$asai, 'access', _252 => _252.asaimock, 'optionalAccess', _253 => _253.db, 'optionalAccess', _254 => _254[workopt.hostdir], 'optionalAccess', _255 => _255[_optionalChain([workopt, 'access', _256 => _256.reqdata, 'optionalAccess', _257 => _257.ty])]]) || {};
+    if (_optionalChain([workopt, 'access', _258 => _258.mockdata, 'optionalAccess', _259 => _259.wc])) {
       wsWorkListen(workopt, getKeyByData(workopt.reqdata, workopt.hostdir));
     } else {
       wsWorkApi(workopt);
@@ -2315,11 +2367,11 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, wsMock, "wsMock");
 
 // src/infra/user-auth.ts
 async function attachServerUserLevel(req, $asai) {
-  const userinfo = _optionalChain([req, 'optionalAccess', _250 => _250.Userinfo]);
+  const userinfo = _optionalChain([req, 'optionalAccess', _260 => _260.Userinfo]);
   if (!Array.isArray(userinfo) || !userinfo[0]) return;
   const us = String(userinfo[0]);
   try {
-    const { createUserStore: createUserStore2 } = await Promise.resolve().then(() => _interopRequireWildcard(require("./user-store-SX4N6PQ4.cjs")));
+    const { createUserStore: createUserStore2 } = await Promise.resolve().then(() => _interopRequireWildcard(require("./user-store-6J2PSEIN.cjs")));
     const user = await createUserStore2($asai).findByUsername(us);
     if (user && user.status === "active") {
       req._serverUser = { us: user.us, lv: user.lv, status: user.status };
@@ -2327,34 +2379,34 @@ async function attachServerUserLevel(req, $asai) {
     } else {
       req._serverUser = null;
     }
-  } catch (e31) {
+  } catch (e33) {
     req._serverUser = null;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, attachServerUserLevel, "attachServerUserLevel");
 function getRequestUserLevel(req) {
-  if (_optionalChain([req, 'optionalAccess', _251 => _251._serverUser, 'optionalAccess', _252 => _252.lv]) != null) return Number(req._serverUser.lv);
-  const n = Number(_nullishCoalesce(_optionalChain([req, 'optionalAccess', _253 => _253.Userinfo, 'optionalAccess', _254 => _254[1]]), () => ( -1)));
+  if (_optionalChain([req, 'optionalAccess', _261 => _261._serverUser, 'optionalAccess', _262 => _262.lv]) != null) return Number(req._serverUser.lv);
+  const n = Number(_nullishCoalesce(_optionalChain([req, 'optionalAccess', _263 => _263.Userinfo, 'optionalAccess', _264 => _264[1]]), () => ( -1)));
   return Number.isFinite(n) ? n : -1;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getRequestUserLevel, "getRequestUserLevel");
 function getRequestUsername(req) {
-  if (_optionalChain([req, 'optionalAccess', _255 => _255._serverUser, 'optionalAccess', _256 => _256.us])) return String(req._serverUser.us);
-  const us = _optionalChain([req, 'optionalAccess', _257 => _257.Userinfo, 'optionalAccess', _258 => _258[0]]);
+  if (_optionalChain([req, 'optionalAccess', _265 => _265._serverUser, 'optionalAccess', _266 => _266.us])) return String(req._serverUser.us);
+  const us = _optionalChain([req, 'optionalAccess', _267 => _267.Userinfo, 'optionalAccess', _268 => _268[0]]);
   return us ? String(us) : void 0;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getRequestUsername, "getRequestUsername");
 
 // src/infra/access-control.ts
 function getSecurityConfig($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _259 => _259.hostconfig, 'optionalAccess', _260 => _260.security]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _269 => _269.hostconfig, 'optionalAccess', _270 => _270.security]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSecurityConfig, "getSecurityConfig");
-function pathMatchesPattern(path8, pattern) {
+function pathMatchesPattern(path7, pattern) {
   if (pattern.endsWith("*")) {
-    return path8.startsWith(pattern.slice(0, -1));
+    return path7.startsWith(pattern.slice(0, -1));
   }
-  return path8 === pattern;
+  return path7 === pattern;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, pathMatchesPattern, "pathMatchesPattern");
 function isAuthSkipped($asai, pathname) {
@@ -2381,13 +2433,13 @@ function validateHttpAuth(req, $asai, pathname) {
   if (!isAuthRequired($asai, pathname)) {
     return { ok: true };
   }
-  const userinfo = _optionalChain([req, 'optionalAccess', _261 => _261.Userinfo]);
+  const userinfo = _optionalChain([req, 'optionalAccess', _271 => _271.Userinfo]);
   const ip = getClientIp(req);
   if (!Array.isArray(userinfo) || userinfo.length < 3 || !userinfo[0]) {
     logSecurityEvent($asai, {
       type: "AUTH_MISSING",
       path: pathname,
-      method: _optionalChain([req, 'optionalAccess', _262 => _262.method]),
+      method: _optionalChain([req, 'optionalAccess', _272 => _272.method]),
       ip,
       detail: "Userinfo header missing or invalid"
     });
@@ -2401,7 +2453,7 @@ function validateHttpAuth(req, $asai, pathname) {
     logSecurityEvent($asai, {
       type: "ACCESS_DENIED",
       path: pathname,
-      method: _optionalChain([req, 'optionalAccess', _263 => _263.method]),
+      method: _optionalChain([req, 'optionalAccess', _273 => _273.method]),
       user: String(us),
       level: userLevel,
       ip,
@@ -2413,13 +2465,13 @@ function validateHttpAuth(req, $asai, pathname) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, validateHttpAuth, "validateHttpAuth");
 async function validateHttpAuthAsync(req, $asai, pathname) {
-  if (Array.isArray(_optionalChain([req, 'optionalAccess', _264 => _264.Userinfo])) && req.Userinfo[0]) {
+  if (Array.isArray(_optionalChain([req, 'optionalAccess', _274 => _274.Userinfo])) && req.Userinfo[0]) {
     await attachServerUserLevel(req, $asai);
     if (!req._serverUser && isAuthRequired($asai, pathname)) {
       logSecurityEvent($asai, {
         type: "ACCESS_DENIED",
         path: pathname,
-        method: _optionalChain([req, 'optionalAccess', _265 => _265.method]),
+        method: _optionalChain([req, 'optionalAccess', _275 => _275.method]),
         user: String(req.Userinfo[0]),
         ip: getClientIp(req),
         detail: "User not found or inactive"
@@ -2481,7 +2533,7 @@ function resolveApiCorsOrigin(req, hostcfg, getHeader) {
     if (referer) {
       try {
         origin = new URL(referer).origin;
-      } catch (e32) {
+      } catch (e34) {
         const parts = referer.split("/");
         if (parts.length >= 3) origin = `${parts[0]}//${parts[2]}`;
       }
@@ -2493,7 +2545,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveApiCorsOrigin, "resolveApiCorsOrigi
 function isApiCorsAllowed(origin, hostcfg, hostHeader) {
   if (!origin) return false;
   if (origin === "*") return true;
-  const corsList = _optionalChain([hostcfg, 'optionalAccess', _266 => _266.cors]);
+  const corsList = _optionalChain([hostcfg, 'optionalAccess', _276 => _276.cors]);
   if (!Array.isArray(corsList) || !corsList.length) return true;
   if (corsList.includes(origin)) return true;
   if (hostHeader && origin.includes(hostHeader)) return true;
@@ -2502,8 +2554,56 @@ function isApiCorsAllowed(origin, hostcfg, hostHeader) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isApiCorsAllowed, "isApiCorsAllowed");
 
 // src/common/server/Api.ts
+function readRequestBody(req, maxBody) {
+  return new Promise((resolve6, reject) => {
+    const chunks = [];
+    let received = 0;
+    let settled = false;
+    const finish = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (err, data) => {
+      if (settled) return;
+      settled = true;
+      if (err) reject(err);
+      else resolve6(_nullishCoalesce(data, () => ( "")));
+    }, "finish");
+    req.on("data", (chunk) => {
+      if (settled) return;
+      received += chunk.length;
+      if (received > maxBody) {
+        req.destroy();
+        finish(new Error("PAYLOAD_TOO_LARGE"));
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on("end", () => finish(null, Buffer.concat(chunks).toString("utf8")));
+    req.on("error", (err) => finish(err));
+  });
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, readRequestBody, "readRequestBody");
+function processPostPayload($asai, req, postdata, pm) {
+  let isAes = false;
+  let out = postdata;
+  if ($asai.$lib.aesfns && _optionalChain([out, 'optionalAccess', _277 => _277.startsWith, 'optionalCall', _278 => _278('{"aes":')])) {
+    isAes = true;
+    const aesData = JSON.parse(out);
+    out = $asai.$lib.aesfns.reqAES({ data: aesData });
+    if (_optionalChain([aesData, 'optionalAccess', _279 => _279.aes]) === 2 && typeof out === "string") {
+      try {
+        out = JSON.parse(out);
+      } catch (e35) {
+      }
+    }
+  }
+  const plainJson = typeof out === "string" && out.trimStart().startsWith("{");
+  if (_optionalChain([req, 'optionalAccess', _280 => _280.Userinfo, 'optionalAccess', _281 => _281[2]]) && !plainJson) {
+    pm = req.Userinfo[2];
+    out = $asai.$lib.AsCode.asdecode(out, pm);
+  }
+  return { postdata: out, pm, isAes };
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, processPostPayload, "processPostPayload");
 var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _267 => _267.fn, 'optionalCall', _268 => _268($asai)]);
+  _optionalChain([opt, 'optionalAccess', _282 => _282.fn, 'optionalCall', _283 => _283($asai)]);
   function getHeader(req, key) {
     return req.headers[key.toLowerCase()] || "";
   }
@@ -2512,7 +2612,7 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   let apiRouteCacheLen = -1;
   function findApiHandler($asai2, pathname) {
     const apis = $asai2.hostserverapis;
-    if (!_optionalChain([apis, 'optionalAccess', _269 => _269.length])) return void 0;
+    if (!_optionalChain([apis, 'optionalAccess', _284 => _284.length])) return void 0;
     if (!apiRouteCache || apiRouteCacheLen !== apis.length) {
       apiRouteCache = apis.map((elp) => ({ key: elp, path: `/api/${elp}` }));
       apiRouteCacheLen = apis.length;
@@ -2560,9 +2660,9 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
           pm: decodeURIComponent(urlParse.search.substring(4))
         };
         if (req.url.indexOf("binary") === -1) {
-          if (_optionalChain([req, 'optionalAccess', _270 => _270.Userinfo]) && _optionalChain([req, 'optionalAccess', _271 => _271.Userinfo, 'access', _272 => _272[2]]) && _optionalChain([query, 'optionalAccess', _273 => _273.pm])) {
+          if (_optionalChain([req, 'optionalAccess', _285 => _285.Userinfo]) && _optionalChain([req, 'optionalAccess', _286 => _286.Userinfo, 'access', _287 => _287[2]]) && _optionalChain([query, 'optionalAccess', _288 => _288.pm])) {
             pm = req.Userinfo[2];
-            query = $asai.$lib.AsCode.asdecode(_optionalChain([query, 'optionalAccess', _274 => _274.pm]), pm);
+            query = $asai.$lib.AsCode.asdecode(_optionalChain([query, 'optionalAccess', _289 => _289.pm]), pm);
             query = Object.fromEntries(new URLSearchParams("?" + query).entries());
           }
         }
@@ -2581,13 +2681,29 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       const releaseSlot = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, () => releaseApiSlot(hostdir, clientIp), "releaseSlot");
       res.once("finish", releaseSlot);
       res.once("close", releaseSlot);
+      const maxBody = _optionalChain([$asai, 'access', _290 => _290.hostconfig, 'optionalAccess', _291 => _291.maxbody]) || 100 * 1024 * 1024;
+      const isTextPost = req.method === "POST" && req.url.indexOf("binary") === -1;
+      const bodyPromise = isTextPost ? readRequestBody(req, maxBody) : null;
       void (async () => {
-        const authResult = await validateHttpAuthAsync(req, $asai, pathname);
+        let authResult;
+        let rawBody = "";
+        try {
+          [authResult, rawBody] = await Promise.all([
+            validateHttpAuthAsync(req, $asai, pathname),
+            _nullishCoalesce(bodyPromise, () => ( Promise.resolve("")))
+          ]);
+        } catch (err) {
+          releaseSlot();
+          if (_optionalChain([err, 'optionalAccess', _292 => _292.message]) === "PAYLOAD_TOO_LARGE") {
+            return sendError(res, 413, "Payload Too Large");
+          }
+          return sendError(res, 400, _optionalChain([err, 'optionalAccess', _293 => _293.message]) || "Bad Request");
+        }
         if (!authResult.ok) {
           releaseSlot();
           return sendAuthError(res, authResult);
         }
-        let apiFn = _optionalChain([$asai, 'access', _275 => _275.hostserverapi, 'access', _276 => _276[apiHandlerKey], 'optionalCall', _277 => _277($asai, query)]);
+        let apiFn = _optionalChain([$asai, 'access', _294 => _294.hostserverapi, 'access', _295 => _295[apiHandlerKey], 'optionalCall', _296 => _296($asai, query)]);
         if (!apiFn) {
           return sendError(res, 501, "Not Implemented");
         }
@@ -2596,57 +2712,30 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         let qrdata;
         let postdata;
         if (req.url.indexOf("binary") === -1) {
-          postdata = "";
           qrdata = query;
           if (req.method === "POST") {
-            const chunks = [];
-            const maxBody = _optionalChain([$asai, 'access', _278 => _278.hostconfig, 'optionalAccess', _279 => _279.maxbody]) || 100 * 1024 * 1024;
-            let received = 0;
-            let aborted = false;
-            req.on("data", (chunk) => {
-              if (aborted) return;
-              received += chunk.length;
-              if (received > maxBody) {
-                aborted = true;
-                sendError(res, 413, "Payload Too Large");
-                req.destroy();
-                return;
-              }
-              chunks.push(chunk);
-            });
-            req.on("end", () => {
-              if (aborted) return;
-              postdata = Buffer.concat(chunks).toString();
-              isAes = $asai.$lib.aesfns && _optionalChain([postdata, 'optionalAccess', _280 => _280.startsWith, 'optionalCall', _281 => _281('{"aes":')]);
-              if (isAes) {
-                const aesData = JSON.parse(postdata);
-                postdata = $asai.$lib.aesfns.reqAES({ data: aesData });
-                if (_optionalChain([aesData, 'optionalAccess', _282 => _282.aes]) === 2) {
-                  try {
-                    postdata = JSON.parse(postdata);
-                  } catch (err) {
-                  }
-                }
-              }
-              if (_optionalChain([req, 'optionalAccess', _283 => _283.Userinfo]) && _optionalChain([req, 'optionalAccess', _284 => _284.Userinfo, 'access', _285 => _285[2]])) {
-                pm = req.Userinfo[2];
-                postdata = $asai.$lib.AsCode.asdecode(postdata, pm);
-              }
-              if (_optionalChain([apiFn, 'optionalAccess', _286 => _286.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _287 => _287.post]) === "function") {
-                const optTmp = { qrdata, data: postdata, pm };
-                if (isAes || _optionalChain([$asai, 'access', _288 => _288.$lib, 'access', _289 => _289.aesfns, 'optionalAccess', _290 => _290.allaes])) {
-                  optTmp.resAES = _optionalChain([$asai, 'access', _291 => _291.$lib, 'access', _292 => _292.aesfns, 'optionalAccess', _293 => _293.resAES]);
-                }
-                apiFn.post(req, res, hostdir, optTmp);
-              } else {
-                res.end(postdata);
+            try {
+              const processed = processPostPayload($asai, req, rawBody, pm);
+              postdata = processed.postdata;
+              pm = processed.pm;
+              isAes = processed.isAes;
+            } catch (e36) {
+              return sendError(res, 400, "AES decrypt failed");
+            }
+            if (_optionalChain([apiFn, 'optionalAccess', _297 => _297.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _298 => _298.post]) === "function") {
+              const optTmp = { qrdata, data: postdata, pm };
+              if (isAes || _optionalChain([$asai, 'access', _299 => _299.$lib, 'access', _300 => _300.aesfns, 'optionalAccess', _301 => _301.allaes])) {
+                optTmp.resAES = _optionalChain([$asai, 'access', _302 => _302.$lib, 'access', _303 => _303.aesfns, 'optionalAccess', _304 => _304.resAES]);
               }
-            });
+              apiFn.post(req, res, hostdir, optTmp);
+            } else {
+              res.end(typeof postdata === "string" ? postdata : JSON.stringify(_nullishCoalesce(postdata, () => ( ""))));
+            }
           } else if (req.method === "GET") {
-            if (_optionalChain([apiFn, 'optionalAccess', _294 => _294.get]) && typeof _optionalChain([apiFn, 'optionalAccess', _295 => _295.get]) === "function") {
+            if (_optionalChain([apiFn, 'optionalAccess', _305 => _305.get]) && typeof _optionalChain([apiFn, 'optionalAccess', _306 => _306.get]) === "function") {
               const optTmp = { qrdata, data: qrdata, pm };
-              if (isAes || _optionalChain([$asai, 'access', _296 => _296.$lib, 'access', _297 => _297.aesfns, 'optionalAccess', _298 => _298.allaes])) {
-                optTmp.resAES = _optionalChain([$asai, 'access', _299 => _299.$lib, 'access', _300 => _300.aesfns, 'optionalAccess', _301 => _301.resAES]);
+              if (isAes || _optionalChain([$asai, 'access', _307 => _307.$lib, 'access', _308 => _308.aesfns, 'optionalAccess', _309 => _309.allaes])) {
+                optTmp.resAES = _optionalChain([$asai, 'access', _310 => _310.$lib, 'access', _311 => _311.aesfns, 'optionalAccess', _312 => _312.resAES]);
               }
               apiFn.get(req, res, hostdir, optTmp);
             } else {
@@ -2654,12 +2743,12 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
             }
           }
         } else {
-          if (_optionalChain([Object, 'access', _302 => _302.keys, 'call', _303 => _303(query), 'optionalAccess', _304 => _304.length])) {
+          if (_optionalChain([Object, 'access', _313 => _313.keys, 'call', _314 => _314(query), 'optionalAccess', _315 => _315.length])) {
             qrdata = query;
           }
           if (req.method === "POST") {
             $asai.$lib.AsNodeTool.upBinary(req).then((postdata2) => {
-              if (_optionalChain([apiFn, 'optionalAccess', _305 => _305.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _306 => _306.post]) === "function") {
+              if (_optionalChain([apiFn, 'optionalAccess', _316 => _316.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _317 => _317.post]) === "function") {
                 apiFn.post(req, res, hostdir, {
                   qrdata,
                   data: postdata2
@@ -2683,12 +2772,12 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
 
 // src/common/server/Ws.ts
 var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _307 => _307.fn, 'optionalCall', _308 => _308($asai)]);
+  _optionalChain([opt, 'optionalAccess', _318 => _318.fn, 'optionalCall', _319 => _319($asai)]);
   const wsHandlerCache = /* @__PURE__ */ new Map();
   const routeIndex = ensureWsRouteIndex($asai);
   function getWsHandler(handlerKey) {
     if (!wsHandlerCache.has(handlerKey)) {
-      wsHandlerCache.set(handlerKey, _optionalChain([$asai, 'access', _309 => _309.hostserverws, 'access', _310 => _310[handlerKey], 'optionalCall', _311 => _311($asai)]));
+      wsHandlerCache.set(handlerKey, _optionalChain([$asai, 'access', _320 => _320.hostserverws, 'access', _321 => _321[handlerKey], 'optionalCall', _322 => _322($asai)]));
     }
     return wsHandlerCache.get(handlerKey);
   }
@@ -2712,21 +2801,21 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
       let reqdata = parseMessage(msg);
       let handlerKey;
       if (reqdata === "ping") {
-        _optionalChain([ws2, 'access', _312 => _312.send, 'optionalCall', _313 => _313("pong")]);
+        _optionalChain([ws2, 'access', _323 => _323.send, 'optionalCall', _324 => _324("pong")]);
         return;
       } else {
         const reqdataisobj = typeof reqdata === "object" && reqdata !== null;
-        handlerKey = reqdataisobj ? routeIndex.matchTy(_optionalChain([reqdata, 'optionalAccess', _314 => _314.ty])) : routeIndex.matchString(reqdata);
-        if (!handlerKey && _optionalChain([$asai, 'access', _315 => _315.hostserverwss, 'optionalAccess', _316 => _316.length])) {
+        handlerKey = reqdataisobj ? routeIndex.matchTy(_optionalChain([reqdata, 'optionalAccess', _325 => _325.ty])) : routeIndex.matchString(reqdata);
+        if (!handlerKey && _optionalChain([$asai, 'access', _326 => _326.hostserverwss, 'optionalAccess', _327 => _327.length])) {
           handlerKey = $asai.hostserverwss.find((elp) => {
             if (reqdataisobj) {
-              return _optionalChain([reqdata, 'optionalAccess', _317 => _317.ty, 'optionalAccess', _318 => _318.startsWith, 'call', _319 => _319(elp)]);
+              return _optionalChain([reqdata, 'optionalAccess', _328 => _328.ty, 'optionalAccess', _329 => _329.startsWith, 'call', _330 => _330(elp)]);
             }
             return typeof reqdata === "string" && reqdata.startsWith(elp);
           });
         }
         if (!handlerKey) {
-          _optionalChain([$asai, 'access', _320 => _320.asaimock, 'optionalAccess', _321 => _321.wsWorkMock, 'call', _322 => _322({
+          _optionalChain([$asai, 'access', _331 => _331.asaimock, 'optionalAccess', _332 => _332.wsWorkMock, 'call', _333 => _333({
             msg,
             ws: ws2,
             hostdir,
@@ -2738,14 +2827,14 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
         }
       }
       if (!handlerKey) return;
-      _optionalChain([getWsHandler, 'call', _323 => _323(handlerKey), 'optionalAccess', _324 => _324.work, 'optionalCall', _325 => _325(reqdata, ws2, hostdir, req)]);
+      _optionalChain([getWsHandler, 'call', _334 => _334(handlerKey), 'optionalAccess', _335 => _335.work, 'optionalCall', _336 => _336(reqdata, ws2, hostdir, req)]);
     } catch (err) {
-      _optionalChain([($asai.$log || console.error), 'optionalCall', _326 => _326("WS", "handler error", err instanceof Error ? err.message : err)]);
+      _optionalChain([($asai.$log || console.error), 'optionalCall', _337 => _337("WS", "handler error", err instanceof Error ? err.message : err)]);
     }
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWork, "wsWork");
   function _getMessage(msg) {
-    if (_optionalChain([msg, 'optionalAccess', _327 => _327.db, 'optionalAccess', _328 => _328.aes]) && _optionalChain([$asai, 'access', _329 => _329.$lib, 'optionalAccess', _330 => _330.aesfns, 'optionalAccess', _331 => _331.reqAES])) {
+    if (_optionalChain([msg, 'optionalAccess', _338 => _338.db, 'optionalAccess', _339 => _339.aes]) && _optionalChain([$asai, 'access', _340 => _340.$lib, 'optionalAccess', _341 => _341.aesfns, 'optionalAccess', _342 => _342.reqAES])) {
       msg.db = $asai.$lib.aesfns.reqAES({ data: msg.db });
     }
     return msg;
@@ -2772,12 +2861,12 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
 
 // src/common/server/Sys.ts
 var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _332 => _332.fn, 'optionalCall', _333 => _333($asai)]);
+  _optionalChain([opt, 'optionalAccess', _343 => _343.fn, 'optionalCall', _344 => _344($asai)]);
   let sysRouteCache = null;
   let sysRouteCacheLen = -1;
   function findSystemHandler(req) {
     const routes = $asai.hostserversyss;
-    if (!_optionalChain([routes, 'optionalAccess', _334 => _334.length])) return void 0;
+    if (!_optionalChain([routes, 'optionalAccess', _345 => _345.length])) return void 0;
     if (!sysRouteCache || sysRouteCacheLen !== routes.length) {
       sysRouteCache = routes.map((elp) => ({ key: elp, route: `/${elp}` }));
       sysRouteCacheLen = routes.length;
@@ -2810,11 +2899,11 @@ var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       if (!authResult.ok) {
         return sendAuthError(res, authResult);
       }
-      const handler = _optionalChain([$asai, 'access', _335 => _335.hostserversys, 'access', _336 => _336[handlerKey], 'optionalCall', _337 => _337($asai)]);
+      const handler = _optionalChain([$asai, 'access', _346 => _346.hostserversys, 'access', _347 => _347[handlerKey], 'optionalCall', _348 => _348($asai)]);
       if (!handler) {
         return sendError(res, 500, "Handler Initialization Failed");
       }
-      if (_optionalChain([handler, 'optionalAccess', _338 => _338.show]) && typeof _optionalChain([handler, 'optionalAccess', _339 => _339.show]) === "function") {
+      if (_optionalChain([handler, 'optionalAccess', _349 => _349.show]) && typeof _optionalChain([handler, 'optionalAccess', _350 => _350.show]) === "function") {
         handler.show(req, res, hostdir);
       } else {
         res.end("postdata");
@@ -2834,18 +2923,18 @@ var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
 
 // src/common/server/WsClient.ts
 var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, wsname) => {
-  if (!_optionalChain([$asai, 'optionalAccess', _340 => _340.clientws])) {
+  if (!_optionalChain([$asai, 'optionalAccess', _351 => _351.clientws])) {
     $asai.clientws = {};
   }
   if (!$asai.clientws[wsname]) {
     $asai.clientws[wsname] = { tasks: /* @__PURE__ */ new Map() };
   }
   function getKeyByData(msgdata) {
-    return _optionalChain([msgdata, 'optionalAccess', _341 => _341.id]) || _optionalChain([msgdata, 'optionalAccess', _342 => _342.ty]);
+    return _optionalChain([msgdata, 'optionalAccess', _352 => _352.id]) || _optionalChain([msgdata, 'optionalAccess', _353 => _353.ty]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getKeyByData, "getKeyByData");
   function clientwsInit() {
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve6, reject) => {
       $asai.clientws[wsname].socket = new $asai.asaiWs(
         $asai.command.commandconfig.clientws[wsname]
       );
@@ -2854,7 +2943,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
       };
       $asai.clientws[wsname].socket.on("error", (err) => {
         $asai.clientws[wsname].open = 0;
-        _optionalChain([$asai, 'access', _343 => _343.hostconfig, 'access', _344 => _344.logger, 'optionalAccess', _345 => _345.lv, 'optionalAccess', _346 => _346.view]) && console.error(
+        _optionalChain([$asai, 'access', _354 => _354.hostconfig, 'access', _355 => _355.logger, 'optionalAccess', _356 => _356.lv, 'optionalAccess', _357 => _357.view]) && console.error(
           666.2203,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is error.`,
           err
@@ -2863,19 +2952,19 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
       });
       $asai.clientws[wsname].socket.on("close", () => {
         $asai.clientws[wsname].open = 0;
-        _optionalChain([$asai, 'access', _347 => _347.hostconfig, 'access', _348 => _348.logger, 'optionalAccess', _349 => _349.lv, 'optionalAccess', _350 => _350.view]) && console.error(
+        _optionalChain([$asai, 'access', _358 => _358.hostconfig, 'access', _359 => _359.logger, 'optionalAccess', _360 => _360.lv, 'optionalAccess', _361 => _361.view]) && console.error(
           666.2205,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is close.`
         );
         reject();
       });
       $asai.clientws[wsname].socket.onopen = () => {
-        _optionalChain([$asai, 'access', _351 => _351.hostconfig, 'access', _352 => _352.logger, 'optionalAccess', _353 => _353.lv, 'optionalAccess', _354 => _354.view]) && console.log(
+        _optionalChain([$asai, 'access', _362 => _362.hostconfig, 'access', _363 => _363.logger, 'optionalAccess', _364 => _364.lv, 'optionalAccess', _365 => _365.view]) && console.log(
           666.2201,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is open.`
         );
         $asai.clientws[wsname].open = 1;
-        resolve7();
+        resolve6();
       };
     });
   }
@@ -2893,7 +2982,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
         const key = getKeyByData(messageData);
         const task = $asai.clientws[wsname].tasks.get(key);
         if (task) {
-          _optionalChain([task, 'optionalAccess', _355 => _355.callback, 'call', _356 => _356(messageData)]);
+          _optionalChain([task, 'optionalAccess', _366 => _366.callback, 'call', _367 => _367(messageData)]);
           if (messageData.ty && !messageData.id) {
           } else {
             $asai.clientws[wsname].tasks.delete(key);
@@ -2905,7 +2994,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, clientwsOnmessage, "clientwsOnmessage");
   function clientwsApi(messageData) {
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve6, reject) => {
       if ($asai.clientws[wsname].open) {
         try {
           const taskOpt = {};
@@ -2917,7 +3006,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
             getKeyByData(messageData),
             {
               callback: /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (res) => {
-                resolve7(res);
+                resolve6(res);
               }, "callback"),
               ...messageData,
               ...taskOpt
@@ -2947,7 +3036,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, clientwsWatch, "clientwsWatch");
   function clientwsWatchOff(messageData) {
-    if (_optionalChain([messageData, 'optionalAccess', _357 => _357.ty]) === "clear") {
+    if (_optionalChain([messageData, 'optionalAccess', _368 => _368.ty]) === "clear") {
       $asai.clientws[wsname].tasks = /* @__PURE__ */ new Map();
     } else {
       const key = getKeyByData(messageData);
@@ -2988,7 +3077,7 @@ var ping_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai)
 var web_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
   function chatBoard(msgdata, ws2, hostdir, req) {
     let room;
-    if (_optionalChain([msgdata, 'access', _358 => _358.db, 'optionalAccess', _359 => _359.room]) && typeof msgdata.db.room === "string") {
+    if (_optionalChain([msgdata, 'access', _369 => _369.db, 'optionalAccess', _370 => _370.room]) && typeof msgdata.db.room === "string") {
       room = msgdata.db.room;
       delete msgdata.db.room;
     } else {
@@ -3045,26 +3134,26 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
     removeFile: removeFile2,
     resolvePathUnderBase: resolvePathUnderBase2
   } = $asai.$lib.AsFs;
-  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'access', _360 => _360.$lib, 'optionalAccess', _361 => _361.reqWork, 'optionalCall', _362 => _362($asai)]);
+  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'access', _371 => _371.$lib, 'optionalAccess', _372 => _372.reqWork, 'optionalCall', _373 => _373($asai)]);
   function mgLog(...arg) {
     mnLog("LOG", ...arg);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mgLog, "mgLog");
   function getDir(opt) {
-    let tmpDir = _optionalChain([opt, 'access', _363 => _363.qrdata, 'optionalAccess', _364 => _364.dir]) || _optionalChain([opt, 'access', _365 => _365.data, 'optionalAccess', _366 => _366.dir]);
+    let tmpDir = _optionalChain([opt, 'access', _374 => _374.qrdata, 'optionalAccess', _375 => _375.dir]) || _optionalChain([opt, 'access', _376 => _376.data, 'optionalAccess', _377 => _377.dir]);
     if (tmpDir) {
       tmpDir = decodeURIComponent(tmpDir);
     } else {
-      tmpDir = _optionalChain([opt, 'access', _367 => _367.qrdata, 'optionalAccess', _368 => _368.ty]) || _optionalChain([opt, 'access', _369 => _369.data, 'optionalAccess', _370 => _370.ty]);
+      tmpDir = _optionalChain([opt, 'access', _378 => _378.qrdata, 'optionalAccess', _379 => _379.ty]) || _optionalChain([opt, 'access', _380 => _380.data, 'optionalAccess', _381 => _381.ty]);
       if (tmpDir) {
         tmpDir = decodeURIComponent(tmpDir);
         if (tmpDir === "access-clf" || tmpDir === "access-w3c") {
-          tmpDir = _optionalChain([$asai, 'access', _371 => _371.hostconfig, 'access', _372 => _372.logger, 'optionalAccess', _373 => _373.path, 'optionalAccess', _374 => _374.access]) || "";
+          tmpDir = _optionalChain([$asai, 'access', _382 => _382.hostconfig, 'access', _383 => _383.logger, 'optionalAccess', _384 => _384.path, 'optionalAccess', _385 => _385.access]) || "";
         } else {
-          tmpDir = _optionalChain([$asai, 'access', _375 => _375.hostconfig, 'access', _376 => _376.logger, 'optionalAccess', _377 => _377.path, 'optionalAccess', _378 => _378[tmpDir]]) || "";
+          tmpDir = _optionalChain([$asai, 'access', _386 => _386.hostconfig, 'access', _387 => _387.logger, 'optionalAccess', _388 => _388.path, 'optionalAccess', _389 => _389[tmpDir]]) || "";
         }
       } else {
-        tmpDir = _optionalChain([$asai, 'access', _379 => _379.hostconfig, 'access', _380 => _380.logger, 'optionalAccess', _381 => _381.path, 'optionalAccess', _382 => _382.client]) || "";
+        tmpDir = _optionalChain([$asai, 'access', _390 => _390.hostconfig, 'access', _391 => _391.logger, 'optionalAccess', _392 => _392.path, 'optionalAccess', _393 => _393.client]) || "";
       }
     }
     return tmpDir;
@@ -3082,7 +3171,7 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       return;
     }
     if (url.startsWith("/api/asailog/manage/add/")) {
-      if (!await ensureLv(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         mgLog("add", "server:", opt.data);
         await $asai.$log("LOG", "ADD", opt.data);
@@ -3096,7 +3185,7 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       if (!await ensureLv(req, $asai, 3)) return sendFail(res, "Forbidden", opt);
       try {
         const baseDir = getDir(opt);
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _383 => _383.qrdata, 'optionalAccess', _384 => _384.path]) || _optionalChain([opt, 'access', _385 => _385.data, 'optionalAccess', _386 => _386.path]));
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _394 => _394.qrdata, 'optionalAccess', _395 => _395.path]) || _optionalChain([opt, 'access', _396 => _396.data, 'optionalAccess', _397 => _397.path]));
         const jsonpath = resolvePathUnderBase2(baseDir, relPath);
         await ensureFile2(jsonpath);
         mgLog("ENSURE", jsonpath);
@@ -3115,13 +3204,13 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
   async function get(req, res, hostdir, opt) {
     const url = req.url;
     if (url.startsWith("/api/asailog/manage/selectlist/")) {
-      if (!await ensureLv(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ty = decodeURIComponent(_optionalChain([opt, 'access', _387 => _387.qrdata, 'optionalAccess', _388 => _388.ty]) || _optionalChain([opt, 'access', _389 => _389.data, 'optionalAccess', _390 => _390.ty]) || "client");
-        if (!_chunkVLMM735Qcjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
+        const ty = decodeURIComponent(_optionalChain([opt, 'access', _398 => _398.qrdata, 'optionalAccess', _399 => _399.ty]) || _optionalChain([opt, 'access', _400 => _400.data, 'optionalAccess', _401 => _401.ty]) || "client");
+        if (!_chunkTKJAHTPOcjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
           const kind = ty === "sec" ? "sec" : "web";
-          const groups = await _chunkVLMM735Qcjs.listUnifiedGroups.call(void 0, $asai, { kind, source: ty === "sec" ? "sec" : ty });
-          const children = _chunkVLMM735Qcjs.groupsToManageChildren.call(void 0, groups);
+          const groups = await _chunkTKJAHTPOcjs.listUnifiedGroups.call(void 0, $asai, { kind, source: ty === "sec" ? "sec" : ty });
+          const children = _chunkTKJAHTPOcjs.groupsToManageChildren.call(void 0, groups);
           if (children.length) {
             mgLog("LIST", `store:${ty}`, children.length);
             return sendSuccess(res, { children, fromStore: true }, opt);
@@ -3143,12 +3232,12 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       return;
     }
     if (url.startsWith("/api/asailog/manage/select/")) {
-      if (!await ensureLv(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ty = decodeURIComponent(_optionalChain([opt, 'access', _391 => _391.qrdata, 'optionalAccess', _392 => _392.ty]) || _optionalChain([opt, 'access', _393 => _393.data, 'optionalAccess', _394 => _394.ty]) || "client");
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _395 => _395.qrdata, 'optionalAccess', _396 => _396.path]) || _optionalChain([opt, 'access', _397 => _397.data, 'optionalAccess', _398 => _398.path]));
-        if (!_chunkVLMM735Qcjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
-          const data2 = await _chunkVLMM735Qcjs.readWebLogFromStore.call(void 0, $asai, ty, relPath);
+        const ty = decodeURIComponent(_optionalChain([opt, 'access', _402 => _402.qrdata, 'optionalAccess', _403 => _403.ty]) || _optionalChain([opt, 'access', _404 => _404.data, 'optionalAccess', _405 => _405.ty]) || "client");
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _406 => _406.qrdata, 'optionalAccess', _407 => _407.path]) || _optionalChain([opt, 'access', _408 => _408.data, 'optionalAccess', _409 => _409.path]));
+        if (!_chunkTKJAHTPOcjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
+          const data2 = await _chunkTKJAHTPOcjs.readWebLogFromStore.call(void 0, $asai, ty, relPath);
           if (data2) {
             mgLog("READ", `store:${ty}/${relPath}`);
             return sendSuccess(res, data2, opt);
@@ -3174,10 +3263,10 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       if (!await ensureLv(req, $asai, 3)) return sendFail(res, "Forbidden", opt);
       try {
         const baseDir = getDir(opt);
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _399 => _399.qrdata, 'optionalAccess', _400 => _400.path]) || _optionalChain([opt, 'access', _401 => _401.data, 'optionalAccess', _402 => _402.path]));
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _410 => _410.qrdata, 'optionalAccess', _411 => _411.path]) || _optionalChain([opt, 'access', _412 => _412.data, 'optionalAccess', _413 => _413.path]));
         const fileName = relPath.split(/[/\\]/).pop() || relPath;
-        if (_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai)) {
-          await _chunkVLMM735Qcjs.purgeStoreEntriesForFile.call(void 0, $asai, fileName).catch(() => void 0);
+        if (_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai)) {
+          await _chunkTKJAHTPOcjs.purgeStoreEntriesForFile.call(void 0, $asai, fileName).catch(() => void 0);
         }
         const filepath = resolvePathUnderBase2(baseDir, relPath);
         mgLog("DELETE", filepath);
@@ -3197,14 +3286,14 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
 
 // src/infra/siem-auth.ts
 function isSiemEnabled($asai) {
-  const cfg = _optionalChain([$asai, 'optionalAccess', _403 => _403.hostconfig, 'optionalAccess', _404 => _404.logger, 'optionalAccess', _405 => _405.siem]);
-  return !!(_optionalChain([cfg, 'optionalAccess', _406 => _406.enabled]) && getSiemToken($asai));
+  const cfg = _optionalChain([$asai, 'optionalAccess', _414 => _414.hostconfig, 'optionalAccess', _415 => _415.logger, 'optionalAccess', _416 => _416.siem]);
+  return !!(_optionalChain([cfg, 'optionalAccess', _417 => _417.enabled]) && getSiemToken($asai));
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isSiemEnabled, "isSiemEnabled");
 function getSiemToken($asai) {
   const fromEnv = process.env.ASAI_SIEM_TOKEN;
   if (typeof fromEnv === "string" && fromEnv.trim()) return fromEnv.trim();
-  const fromCfg = _optionalChain([$asai, 'optionalAccess', _407 => _407.hostconfig, 'optionalAccess', _408 => _408.logger, 'optionalAccess', _409 => _409.siem, 'optionalAccess', _410 => _410.token]);
+  const fromCfg = _optionalChain([$asai, 'optionalAccess', _418 => _418.hostconfig, 'optionalAccess', _419 => _419.logger, 'optionalAccess', _420 => _420.siem, 'optionalAccess', _421 => _421.token]);
   return typeof fromCfg === "string" ? fromCfg.trim() : "";
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSiemToken, "getSiemToken");
@@ -3212,9 +3301,9 @@ function isSiemTokenValid($asai, req) {
   if (!isSiemEnabled($asai)) return false;
   const expected = getSiemToken($asai);
   if (!expected) return false;
-  const header = _optionalChain([req, 'optionalAccess', _411 => _411.headers, 'optionalAccess', _412 => _412["x-siem-token"]]) || _optionalChain([req, 'optionalAccess', _413 => _413.headers, 'optionalAccess', _414 => _414["x-api-key"]]);
+  const header = _optionalChain([req, 'optionalAccess', _422 => _422.headers, 'optionalAccess', _423 => _423["x-siem-token"]]) || _optionalChain([req, 'optionalAccess', _424 => _424.headers, 'optionalAccess', _425 => _425["x-api-key"]]);
   if (typeof header === "string" && header === expected) return true;
-  const q = _optionalChain([req, 'optionalAccess', _415 => _415.query]) || {};
+  const q = _optionalChain([req, 'optionalAccess', _426 => _426.query]) || {};
   const qToken = q.siem_token || q.token;
   return typeof qToken === "string" && qToken === expected;
 }
@@ -3238,24 +3327,24 @@ function getNs(raw) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getNs, "getNs");
 async function ensureServerUser(req, $asai) {
-  if (Array.isArray(_optionalChain([req, 'optionalAccess', _416 => _416.Userinfo])) && req.Userinfo[0]) {
+  if (Array.isArray(_optionalChain([req, 'optionalAccess', _427 => _427.Userinfo])) && req.Userinfo[0]) {
     await attachServerUserLevel(req, $asai);
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, ensureServerUser, "ensureServerUser");
 var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _417 => _417.$lib, 'optionalAccess', _418 => _418.reqWork, 'optionalCall', _419 => _419($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _428 => _428.$lib, 'optionalAccess', _429 => _429.reqWork, 'optionalCall', _430 => _430($asai)]) || {};
   const IL = $asai.$lib.InterventionLog;
   async function get(req, res, hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/asailog/intervention/selectlist/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ns = getNs(_optionalChain([opt, 'access', _420 => _420.qrdata, 'optionalAccess', _421 => _421.ns]) || _optionalChain([opt, 'access', _422 => _422.data, 'optionalAccess', _423 => _423.ns]));
+        const ns = getNs(_optionalChain([opt, 'access', _431 => _431.qrdata, 'optionalAccess', _432 => _432.ns]) || _optionalChain([opt, 'access', _433 => _433.data, 'optionalAccess', _434 => _434.ns]));
         let list = await IL.listInterventionFiles($asai, ns);
-        if (_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai) && !_chunkVLMM735Qcjs.prefersDiskLogAccess.call(void 0, $asai)) {
-          const groups = await _chunkVLMM735Qcjs.listUnifiedGroups.call(void 0, $asai, { kind: "intervention", ns });
-          const fromStore = _chunkVLMM735Qcjs.groupsToInterventionFiles.call(void 0, groups, ns);
+        if (_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai) && !_chunkTKJAHTPOcjs.prefersDiskLogAccess.call(void 0, $asai)) {
+          const groups = await _chunkTKJAHTPOcjs.listUnifiedGroups.call(void 0, $asai, { kind: "intervention", ns });
+          const fromStore = _chunkTKJAHTPOcjs.groupsToInterventionFiles.call(void 0, groups, ns);
           const names = new Set(list.map((f) => f.name));
           for (const f of fromStore) {
             if (!names.has(f.name)) list.push(f);
@@ -3263,27 +3352,27 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
         }
         return sendSuccess(res, { ns, files: list }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _424 => _424.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _435 => _435.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/intervention/select/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const name = decodeURIComponent(_optionalChain([opt, 'access', _425 => _425.qrdata, 'optionalAccess', _426 => _426.name]) || _optionalChain([opt, 'access', _427 => _427.data, 'optionalAccess', _428 => _428.name]) || "");
-        const ns = getNs(_optionalChain([opt, 'access', _429 => _429.qrdata, 'optionalAccess', _430 => _430.ns]) || _optionalChain([opt, 'access', _431 => _431.data, 'optionalAccess', _432 => _432.ns]));
+        const name = decodeURIComponent(_optionalChain([opt, 'access', _436 => _436.qrdata, 'optionalAccess', _437 => _437.name]) || _optionalChain([opt, 'access', _438 => _438.data, 'optionalAccess', _439 => _439.name]) || "");
+        const ns = getNs(_optionalChain([opt, 'access', _440 => _440.qrdata, 'optionalAccess', _441 => _441.ns]) || _optionalChain([opt, 'access', _442 => _442.data, 'optionalAccess', _443 => _443.ns]));
         if (!name) return sendFail(res, "name required", opt);
         const content = await IL.readInterventionFile($asai, name, ns);
         return sendSuccess(res, { ns, ...content }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _433 => _433.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _444 => _444.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/intervention/types/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         return sendSuccess(res, IL.getInterventionTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _434 => _434.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _445 => _445.message]) || err, opt);
       }
     }
   }
@@ -3291,7 +3380,7 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
   async function post(req, res, hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/asailog/intervention/delete/")) {
-      if (!await ensureLogWriteAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogWriteAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
       await ensureServerUser(req, $asai);
       const lv = getRequestUserLevel(req);
       const us = getRequestUsername(req);
@@ -3313,7 +3402,7 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
         );
         return sendSuccess(res, { ns, ...result }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _435 => _435.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _446 => _446.message]) || err, opt);
       }
     }
   }
@@ -3332,11 +3421,11 @@ function parseQuery(opt) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, parseQuery, "parseQuery");
 function parseBody(opt) {
-  if (!_optionalChain([opt, 'optionalAccess', _436 => _436.data])) return {};
+  if (!_optionalChain([opt, 'optionalAccess', _447 => _447.data])) return {};
   if (typeof opt.data === "string") {
     try {
       return JSON.parse(opt.data);
-    } catch (e33) {
+    } catch (e37) {
       return {};
     }
   }
@@ -3344,47 +3433,47 @@ function parseBody(opt) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, parseBody, "parseBody");
 var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _437 => _437.$lib, 'optionalAccess', _438 => _438.reqWork, 'optionalCall', _439 => _439($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _448 => _448.$lib, 'optionalAccess', _449 => _449.reqWork, 'optionalCall', _450 => _450($asai)]) || {};
   const IL = $asai.$lib.InterventionLog;
   async function get(req, res, hostdir, opt) {
     const url = req.url || "";
     const q = parseQuery(opt);
     if (url.startsWith("/api/asailog/store/config/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        return sendSuccess(res, _chunkVLMM735Qcjs.getLogStoreMeta.call(void 0, $asai), opt);
+        return sendSuccess(res, _chunkTKJAHTPOcjs.getLogStoreMeta.call(void 0, $asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _440 => _440.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _451 => _451.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/stats/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
-      if (!_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai)) {
-        return sendSuccess(res, { store: "disabled", message: "logger.store not configured", config: _chunkVLMM735Qcjs.getLogStoreMeta.call(void 0, $asai) }, opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai)) {
+        return sendSuccess(res, { store: "disabled", message: "logger.store not configured", config: _chunkTKJAHTPOcjs.getLogStoreMeta.call(void 0, $asai) }, opt);
       }
       try {
-        const storeType = _chunkVLMM735Qcjs.getEffectiveStoreType.call(void 0, $asai);
-        const stats = await _chunkVLMM735Qcjs.getUnifiedStats.call(void 0, $asai);
-        return sendSuccess(res, { store: storeType, stats, config: _chunkVLMM735Qcjs.getLogStoreMeta.call(void 0, $asai) }, opt);
+        const storeType = _chunkTKJAHTPOcjs.getEffectiveStoreType.call(void 0, $asai);
+        const stats = await _chunkTKJAHTPOcjs.getUnifiedStats.call(void 0, $asai);
+        return sendSuccess(res, { store: storeType, stats, config: _chunkTKJAHTPOcjs.getLogStoreMeta.call(void 0, $asai) }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _441 => _441.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _452 => _452.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/compliance/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         const ns = q.ns === "test" ? "test" : "prod";
-        const report = await _chunkVLMM735Qcjs.getComplianceReport.call(void 0, $asai, ns);
+        const report = await _chunkTKJAHTPOcjs.getComplianceReport.call(void 0, $asai, ns);
         return sendSuccess(res, report, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _442 => _442.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _453 => _453.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/search/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
-      if (!_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
-        const result = await _chunkVLMM735Qcjs.searchUnifiedLogs.call(void 0, $asai, {
+        const result = await _chunkTKJAHTPOcjs.searchUnifiedLogs.call(void 0, $asai, {
           kind: q.kind ? q.kind : void 0,
           ns: q.ns ? q.ns : void 0,
           source: q.source || q.ty || void 0,
@@ -3399,11 +3488,11 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, result, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _443 => _443.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _454 => _454.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/export/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         const kind = q.kind || "intervention";
         const format = q.format || "raw";
@@ -3411,7 +3500,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         const ns = q.ns === "test" ? "test" : "prod";
         const source = q.source || q.ty || "server";
         if (!fileName && kind === "intervention") return sendFail(res, "name required", opt);
-        const payload = await _chunkVLMM735Qcjs.exportLogContent.call(void 0, $asai, {
+        const payload = await _chunkTKJAHTPOcjs.exportLogContent.call(void 0, $asai, {
           kind,
           ns: kind === "intervention" ? ns : void 0,
           fileName: fileName || void 0,
@@ -3420,36 +3509,36 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, payload, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _444 => _444.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _455 => _455.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/taxonomy/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         return sendSuccess(res, IL.getInterventionTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _445 => _445.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _456 => _456.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/formats/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const { getLogFormatTaxonomy } = await Promise.resolve().then(() => _interopRequireWildcard(require("./log-formats-FKFMQKNO.cjs")));
+        const { getLogFormatTaxonomy } = await Promise.resolve().then(() => _interopRequireWildcard(require("./log-formats-TUXGMCCU.cjs")));
         return sendSuccess(res, getLogFormatTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _446 => _446.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _457 => _457.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/selectlist/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
-      if (!_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
         const kind = q.kind ? String(q.kind) : void 0;
         const ns = q.ns ? String(q.ns) : void 0;
         const source = q.source || q.ty ? String(q.source || q.ty) : void 0;
-        const groups = await _chunkVLMM735Qcjs.listUnifiedGroups.call(void 0, $asai, { kind, ns, source });
+        const groups = await _chunkTKJAHTPOcjs.listUnifiedGroups.call(void 0, $asai, { kind, ns, source });
         if (kind === "intervention" || ns) {
-          return sendSuccess(res, { files: _chunkVLMM735Qcjs.groupsToInterventionFiles.call(void 0, groups, ns || "prod"), ns: ns || "prod" }, opt);
+          return sendSuccess(res, { files: _chunkTKJAHTPOcjs.groupsToInterventionFiles.call(void 0, groups, ns || "prod"), ns: ns || "prod" }, opt);
         }
         if (kind === "web" || kind === "sec" || kind === "access" || source) {
           const children = kind === "access" ? groups.filter((g) => g.kind === "access").map((g) => ({
@@ -3459,21 +3548,21 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
             entryCount: g.entryCount,
             source: g.source,
             fromStore: true
-          })) : _chunkVLMM735Qcjs.groupsToManageChildren.call(void 0, groups);
+          })) : _chunkTKJAHTPOcjs.groupsToManageChildren.call(void 0, groups);
           return sendSuccess(res, { children, source }, opt);
         }
         return sendSuccess(res, { groups }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _447 => _447.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _458 => _458.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/select/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
-      if (!_chunkVLMM735Qcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!_chunkTKJAHTPOcjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
         const id = q.id;
         if (id != null) {
-          const row = await _chunkVLMM735Qcjs.getUnifiedEntry.call(void 0, $asai, id);
+          const row = await _chunkTKJAHTPOcjs.getUnifiedEntry.call(void 0, $asai, id);
           if (!row) return sendFail(res, "not found", opt);
           return sendSuccess(res, { entry: row }, opt);
         }
@@ -3482,14 +3571,14 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         const ns = q.ns ? String(q.ns) : "";
         const source = q.source || q.ty ? String(q.source || q.ty) : "server";
         if (kind === "web" || kind === "sec" || !kind && fileName.startsWith("log-")) {
-          const content = await _chunkVLMM735Qcjs.readWebLogFromStore.call(void 0, $asai, source, fileName);
+          const content = await _chunkTKJAHTPOcjs.readWebLogFromStore.call(void 0, $asai, source, fileName);
           return sendSuccess(res, content, opt);
         }
         if (kind === "intervention" || fileName.includes(".cef.log")) {
           const content = await IL.readInterventionFile($asai, fileName, ns === "test" ? "test" : "prod");
           return sendSuccess(res, { ns: ns || "prod", ...content, fromStore: true }, opt);
         }
-        const rows = await _chunkVLMM735Qcjs.queryUnifiedLogs.call(void 0, $asai, {
+        const rows = await _chunkTKJAHTPOcjs.queryUnifiedLogs.call(void 0, $asai, {
           kind,
           ns,
           source,
@@ -3498,7 +3587,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, { entries: rows }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _448 => _448.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _459 => _459.message]) || err, opt);
       }
     }
   }
@@ -3506,13 +3595,13 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
   async function post(req, res, hostdir, opt) {
     const url = req.url || "";
     if (!url.startsWith("/api/asailog/store/archive/")) return;
-    if (!await ensureLogWriteAccess(req, $asai, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
+    if (!await ensureLogWriteAccess(req, $asai, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
     try {
       const body = parseBody(opt);
       const year = Number(body.year);
       if (!year || year < 2e3 || year > 2100) return sendFail(res, "invalid year", opt);
       const ns = body.ns === "test" ? "test" : "prod";
-      const result = await _chunkVLMM735Qcjs.archiveInterventionYear.call(void 0, $asai, {
+      const result = await _chunkTKJAHTPOcjs.archiveInterventionYear.call(void 0, $asai, {
         year,
         ns,
         dryRun: !!body.dryRun,
@@ -3520,7 +3609,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
       });
       return sendSuccess(res, result, opt);
     } catch (err) {
-      return sendFail(res, _optionalChain([err, 'optionalAccess', _449 => _449.message]) || err, opt);
+      return sendFail(res, _optionalChain([err, 'optionalAccess', _460 => _460.message]) || err, opt);
     }
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, post, "post");
@@ -3532,7 +3621,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
 
 var registry = null;
 function resolveFilePath($asai) {
-  const root = _optionalChain([$asai, 'optionalAccess', _450 => _450.serverRoot]) || process.cwd();
+  const root = _optionalChain([$asai, 'optionalAccess', _461 => _461.serverRoot]) || process.cwd();
   return nodePath3.join(root, "websys/sys/errorcodes.json");
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveFilePath, "resolveFilePath");
@@ -3542,7 +3631,7 @@ function loadErrorCodes($asai) {
   try {
     const raw = fs8.readFileSync(filePath, "utf8");
     registry = JSON.parse(raw);
-  } catch (e34) {
+  } catch (e38) {
     registry = { version: "0", errors: {} };
   }
   if ($asai) $asai.errorcodes = registry;
@@ -3550,7 +3639,7 @@ function loadErrorCodes($asai) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, loadErrorCodes, "loadErrorCodes");
 function getError(ec) {
-  return _optionalChain([registry, 'optionalAccess', _451 => _451.errors, 'optionalAccess', _452 => _452[ec]]) || null;
+  return _optionalChain([registry, 'optionalAccess', _462 => _462.errors, 'optionalAccess', _463 => _463[ec]]) || null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getError, "getError");
 function hasError(ec) {
@@ -3559,11 +3648,11 @@ function hasError(ec) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hasError, "hasError");
 function logError($asai, ec, params) {
   const entry = getError(ec);
-  const logFn = _optionalChain([$asai, 'optionalAccess', _453 => _453.$log]) || console.warn;
+  const logFn = _optionalChain([$asai, 'optionalAccess', _464 => _464.$log]) || console.warn;
   if (entry) {
-    logFn(`[EC:${ec}]`, entry.id || "", entry.detail || "", _optionalChain([params, 'optionalAccess', _454 => _454.length]) ? params : "");
+    logFn(`[EC:${ec}]`, entry.id || "", entry.detail || "", _optionalChain([params, 'optionalAccess', _465 => _465.length]) ? params : "");
   } else {
-    logFn(`[EC:${ec}]`, "(unregistered)", _optionalChain([params, 'optionalAccess', _455 => _455.length]) ? params : "");
+    logFn(`[EC:${ec}]`, "(unregistered)", _optionalChain([params, 'optionalAccess', _466 => _466.length]) ? params : "");
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, logError, "logError");
@@ -3591,14 +3680,14 @@ var ErrorCode_default = {
 
 // src/sysserver/api/common/errorcodes.ts
 var errorcodes_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _456 => _456.$lib, 'optionalAccess', _457 => _457.reqWork, 'optionalCall', _458 => _458($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _467 => _467.$lib, 'optionalAccess', _468 => _468.reqWork, 'optionalCall', _469 => _469($asai)]) || {};
   function get(req, res, _hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/sys/errorcodes/")) {
       try {
         return sendSuccess(res, loadErrorCodes($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _459 => _459.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _470 => _470.message]) || err, opt);
       }
     }
   }
@@ -3608,9 +3697,9 @@ var errorcodes_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
 
 // src/sysserver/api/common/sqlitemanage.ts
 var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'optionalAccess', _460 => _460.$lib, 'optionalAccess', _461 => _461.reqWork, 'optionalCall', _462 => _462($asai)]) || {};
+  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'optionalAccess', _471 => _471.$lib, 'optionalAccess', _472 => _472.reqWork, 'optionalCall', _473 => _473($asai)]) || {};
   function mgLog(...arg) {
-    _optionalChain([mnLog, 'optionalCall', _463 => _463("SQLite", ...arg)]);
+    _optionalChain([mnLog, 'optionalCall', _474 => _474("SQLite", ...arg)]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mgLog, "mgLog");
   return $asai.$lib.AsDb($asai, {
@@ -3628,7 +3717,7 @@ var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0,
       if (req.url.startsWith("/api/asaisqlite/manage/post")) {
         try {
           mgLog("POST", "custom handler triggered");
-          _optionalChain([sendSuccess, 'optionalCall', _464 => _464(res, { data: "post" }, opt)]);
+          _optionalChain([sendSuccess, 'optionalCall', _475 => _475(res, { data: "post" }, opt)]);
         } catch (err) {
           mgLog("ERROR", "post handler", err);
         }
@@ -3645,10 +3734,10 @@ var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0,
             table: dataObj.table
           });
           mgLog("SELECT", "completed");
-          _optionalChain([sendSuccess, 'optionalCall', _465 => _465(res, resdb, opt)]);
+          _optionalChain([sendSuccess, 'optionalCall', _476 => _476(res, resdb, opt)]);
         } catch (errdb) {
           mgLog("ERROR", "select", errdb);
-          _optionalChain([sendFail, 'optionalCall', _466 => _466(res, errdb, opt)]);
+          _optionalChain([sendFail, 'optionalCall', _477 => _477(res, errdb, opt)]);
         }
         return "ok";
       }
@@ -3664,7 +3753,7 @@ function promLine(name, value, labels) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, promLine, "promLine");
 var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _467 => _467.$lib, 'optionalAccess', _468 => _468.reqWork, 'optionalCall', _469 => _469($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _478 => _478.$lib, 'optionalAccess', _479 => _479.reqWork, 'optionalCall', _480 => _480($asai)]) || {};
   async function get(req, res, _hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/sys/health/metrics/")) {
@@ -3673,10 +3762,10 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
         let httpTotal = 0;
         let wsTotal = 0;
         for (const set of Object.values($asai.connectionshttp || {})) {
-          httpTotal += _optionalChain([set, 'optionalAccess', _470 => _470.size]) || 0;
+          httpTotal += _optionalChain([set, 'optionalAccess', _481 => _481.size]) || 0;
         }
         for (const set of Object.values($asai.connectionsws || {})) {
-          wsTotal += _optionalChain([set, 'optionalAccess', _471 => _471.size]) || 0;
+          wsTotal += _optionalChain([set, 'optionalAccess', _482 => _482.size]) || 0;
         }
         const lines = [
           "# HELP asai_uptime_seconds Process uptime",
@@ -3698,7 +3787,7 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" });
         return res.end(lines.join("\n") + "\n");
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _472 => _472.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _483 => _483.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/sys/health/status/")) {
@@ -3711,10 +3800,10 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
           memory: process.memoryUsage(),
           quota: {
             http: Object.fromEntries(
-              Object.entries($asai.connectionshttp || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _473 => _473.size]) || 0])
+              Object.entries($asai.connectionshttp || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _484 => _484.size]) || 0])
             ),
             ws: Object.fromEntries(
-              Object.entries($asai.connectionsws || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _474 => _474.size]) || 0])
+              Object.entries($asai.connectionsws || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _485 => _485.size]) || 0])
             )
           }
         },
@@ -3755,7 +3844,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, sanitizeString, "sanitizeString");
 // src/sysserver/api/login/service/session.ts
 
 function getSessionTtlMs($asai) {
-  const hours = _nullishCoalesce(_optionalChain([$asai, 'optionalAccess', _475 => _475.hostconfig, 'optionalAccess', _476 => _476.security, 'optionalAccess', _477 => _477.sessionTtlHours]), () => ( 24));
+  const hours = _nullishCoalesce(_optionalChain([$asai, 'optionalAccess', _486 => _486.hostconfig, 'optionalAccess', _487 => _487.security, 'optionalAccess', _488 => _488.sessionTtlHours]), () => ( 24));
   return Number(hours) * 3600 * 1e3;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSessionTtlMs, "getSessionTtlMs");
@@ -3772,7 +3861,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, generatePriKey, "generatePriKey");
 function createSessionKeys($asai) {
   const sessionId = _crypto.randomUUID.call(void 0, );
   const pri = generatePriKey();
-  const sn = _optionalChain([$asai, 'optionalAccess', _478 => _478.hostconfig, 'optionalAccess', _479 => _479.asaisn]);
+  const sn = _optionalChain([$asai, 'optionalAccess', _489 => _489.hostconfig, 'optionalAccess', _490 => _490.asaisn]);
   if (!sn) throw new Error("[session] ASAI_ASAISN \u672A\u914D\u7F6E");
   const pub = $asai.$lib.AsCode.asencode(pri, sn);
   return { pri, pub, sessionId };
@@ -3798,10 +3887,10 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, buildSessionRecord, "buildSessionRecord");
 var API_ADMIN_PREFIXES = ["/api/user/login/admin/"];
 function getMinLevelForApiPath(pathname, $asai) {
   if (API_ADMIN_PREFIXES.some((p) => pathname.startsWith(p))) {
-    if (pathname.includes("/admin/update") || pathname.includes("/admin/kick") || pathname.includes("/admin/delete")) {
-      return $asai ? _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite") : _chunkQWVR2HNTcjs.USER_LV.DEVELOPER;
+    if (pathname.includes("/admin/update") || pathname.includes("/admin/kick") || pathname.includes("/admin/delete") || pathname.includes("/admin/resetpass")) {
+      return $asai ? _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite") : _chunkLXJMGLKWcjs.USER_LV.DEVELOPER;
     }
-    return $asai ? _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminRead") : _chunkQWVR2HNTcjs.USER_LV.ADMIN;
+    return $asai ? _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminRead") : _chunkLXJMGLKWcjs.USER_LV.ADMIN;
   }
   return 0;
 }
@@ -3811,21 +3900,100 @@ function hasLevel(userLevel, required) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hasLevel, "hasLevel");
 
-// src/sysserver/api/login/index.ts
-function parseBody2(opt) {
-  if (!_optionalChain([opt, 'optionalAccess', _480 => _480.data])) return {};
-  if (typeof opt.data === "string") {
+// src/sysserver/api/login/service/request-body.ts
+function isAesEnvelope(body) {
+  return typeof body.data === "string" && typeof body.iv === "string" && typeof body.auth === "string" && body.aes != null && body.us == null && body.pass == null && body.password == null;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, isAesEnvelope, "isAesEnvelope");
+function unwrapJsonString(value) {
+  if (typeof value !== "string") return value;
+  const text = value.trim();
+  if (!text.startsWith("{") && !text.startsWith("[")) return value;
+  try {
+    return JSON.parse(text);
+  } catch (e39) {
+    return value;
+  }
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, unwrapJsonString, "unwrapJsonString");
+function parseAuthBody(opt) {
+  let raw = _optionalChain([opt, 'optionalAccess', _491 => _491.data]);
+  if (raw == null || raw === "") return {};
+  if (typeof raw === "string") {
+    const text = raw.trim();
+    if (!text) return {};
     try {
-      return JSON.parse(opt.data);
-    } catch (e35) {
-      return {};
+      raw = JSON.parse(text);
+    } catch (e40) {
+      if (text.includes("=") && !text.startsWith("{") && !text.startsWith("[")) {
+        raw = Object.fromEntries(new URLSearchParams(text));
+      } else {
+        return {};
+      }
     }
+    raw = unwrapJsonString(raw);
   }
-  return typeof opt.data === "object" ? opt.data : {};
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
+  const body = raw;
+  if (isAesEnvelope(body)) return {};
+  return body;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, parseAuthBody, "parseAuthBody");
+function pickAuthField(body, ...keys) {
+  for (const key of keys) {
+    const val = body[key];
+    if (val != null && String(val).length > 0) return String(val);
+  }
+  return "";
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, pickAuthField, "pickAuthField");
+
+// src/sysserver/api/login/service/online-sessions.ts
+function resolveOnlineSessions($asai, hostdir, allSessions) {
+  const onlineUsers = new Set(listOnlineWsUsers($asai, hostdir));
+  if (!onlineUsers.size) return [];
+  const byUser = /* @__PURE__ */ new Map();
+  for (const s of allSessions) {
+    if (!onlineUsers.has(s.us)) continue;
+    const prev = byUser.get(s.us);
+    const sTime = _nullishCoalesce(s.lastActivityAt, () => ( s.createdAt));
+    const prevTime = prev ? _nullishCoalesce(prev.lastActivityAt, () => ( prev.createdAt)) : 0;
+    if (!prev || sTime > prevTime) byUser.set(s.us, s);
+  }
+  return [...byUser.values()].sort((a, b) => b.createdAt - a.createdAt);
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, resolveOnlineSessions, "resolveOnlineSessions");
+function isSessionUserOnline($asai, us, hostdir) {
+  if (!us) return false;
+  return isUserOnlineOnWs($asai, us, hostdir);
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, isSessionUserOnline, "isSessionUserOnline");
+async function countOnlineSessions($asai, hostdir, store) {
+  const all = await store.getSessions();
+  return resolveOnlineSessions($asai, hostdir, all).length;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, countOnlineSessions, "countOnlineSessions");
+async function countOnlineSessionsByUser($asai, hostdir, store, us) {
+  const all = await store.getSessions();
+  return resolveOnlineSessions($asai, hostdir, all).filter((s) => s.us === us).length;
 }
-_chunkSMVZ3ZDJcjs.__name.call(void 0, parseBody2, "parseBody");
+_chunkSMVZ3ZDJcjs.__name.call(void 0, countOnlineSessionsByUser, "countOnlineSessionsByUser");
+async function purgeOfflineSessions($asai, hostdir, store) {
+  const onlineUsers = new Set(listOnlineWsUsers($asai, hostdir));
+  const all = await store.getSessions();
+  let purged = 0;
+  for (const s of all) {
+    if (onlineUsers.has(s.us)) continue;
+    await store.removeSession(s.id);
+    purged += 1;
+  }
+  return purged;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, purgeOfflineSessions, "purgeOfflineSessions");
+
+// src/sysserver/api/login/index.ts
 function getSecurity($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _481 => _481.hostconfig, 'optionalAccess', _482 => _482.security]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _492 => _492.hostconfig, 'optionalAccess', _493 => _493.security]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSecurity, "getSecurity");
 function getQuota2($asai) {
@@ -3833,16 +4001,16 @@ function getQuota2($asai) {
   return sec.quota || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getQuota2, "getQuota");
-async function canLogin($asai, us) {
+async function canLogin($asai, us, hostdir) {
   const quota = getQuota2($asai);
   if (!quota.enabled) return { ok: true };
-  const store = _chunkQWVR2HNTcjs.createUserStore.call(void 0, $asai);
-  const total = await store.countSessions();
-  const maxLogin = _nullishCoalesce(_nullishCoalesce(quota.maxLoginSessions, () => ( _optionalChain([$asai, 'optionalAccess', _483 => _483.hostconfig, 'optionalAccess', _484 => _484.hosts, 'optionalAccess', _485 => _485.default, 'optionalAccess', _486 => _486.maxonline]))), () => ( 100));
+  const store = _chunkLXJMGLKWcjs.createUserStore.call(void 0, $asai);
+  const total = await countOnlineSessions($asai, hostdir, store);
+  const maxLogin = _nullishCoalesce(_nullishCoalesce(quota.maxLoginSessions, () => ( _optionalChain([$asai, 'optionalAccess', _494 => _494.hostconfig, 'optionalAccess', _495 => _495.hosts, 'optionalAccess', _496 => _496.default, 'optionalAccess', _497 => _497.maxonline]))), () => ( 100));
   if (total >= maxLogin) {
     return { ok: false, message: "LOGIN_QUOTA_FULL" };
   }
-  const perUser = await store.countSessionsByUser(us);
+  const perUser = await countOnlineSessionsByUser($asai, hostdir, store, us);
   const maxPerUser = _nullishCoalesce(quota.maxSessionsPerUser, () => ( 3));
   if (perUser >= maxPerUser) {
     return { ok: false, message: "USER_SESSION_LIMIT" };
@@ -3851,7 +4019,7 @@ async function canLogin($asai, us) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, canLogin, "canLogin");
 function publicUser($asai, user) {
-  const role = user.role || _chunkX7VHW2TDcjs.resolveRoleForLevel.call(void 0, $asai, user.lv).name;
+  const role = user.role || _chunkH3K33HBAcjs.resolveRoleForLevel.call(void 0, $asai, user.lv).name;
   return {
     us: user.us,
     lv: user.lv,
@@ -3865,14 +4033,14 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, publicUser, "publicUser");
 var bootstrapPromise = null;
 function ensureReady($asai) {
   if (!bootstrapPromise) {
-    bootstrapPromise = Promise.all([_chunkQWVR2HNTcjs.ensureBootstrapAdmin.call(void 0, $asai), _chunkX7VHW2TDcjs.loadUserLevelConfig.call(void 0, $asai)]).then(() => void 0);
+    bootstrapPromise = Promise.all([_chunkLXJMGLKWcjs.ensureBootstrapAdmin.call(void 0, $asai), _chunkH3K33HBAcjs.loadUserLevelConfig.call(void 0, $asai)]).then(() => void 0);
   }
   return bootstrapPromise;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, ensureReady, "ensureReady");
 var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail, sendErr } = _optionalChain([$asai, 'access', _487 => _487.$lib, 'optionalAccess', _488 => _488.reqWork, 'optionalCall', _489 => _489($asai)]) || {};
-  const store = _chunkQWVR2HNTcjs.createUserStore.call(void 0, $asai);
+  const { sendSuccess, sendFail, sendErr } = _optionalChain([$asai, 'access', _498 => _498.$lib, 'optionalAccess', _499 => _499.reqWork, 'optionalCall', _500 => _500($asai)]) || {};
+  const store = _chunkLXJMGLKWcjs.createUserStore.call(void 0, $asai);
   async function checkAdmin(req, pathname, minOverride) {
     await attachServerUserLevel(req, $asai);
     const minLv = _nullishCoalesce(minOverride, () => ( getMinLevelForApiPath(pathname, $asai)));
@@ -3882,26 +4050,26 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
   async function post(req, res, hostdir, opt) {
     const url = req.url || "";
     const ip = getClientIp(req);
-    const body = parseBody2(opt);
+    const body = parseAuthBody(opt);
     if (url.startsWith("/api/user/login/changepass/")) {
       await ensureReady($asai);
       try {
-        const us = sanitizeString(body.us, 64);
-        const pass = sanitizeString(body.pass, 128);
-        const newPass = sanitizeString(body.newPass, 128);
+        const us = sanitizeString(pickAuthField(body, "us", "username"), 64);
+        const pass = sanitizeString(pickAuthField(body, "pass", "password", "pwd"), 128);
+        const newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
         if (!us || !pass || !newPass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
         const user = await store.findByUsername(us);
-        if (!user || !_chunkKOFCBB3Ncjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
+        if (!user || !_chunkK2QPSQEVcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
           return sendErr(res, "AUTH_INVALID_CREDENTIALS", void 0, opt);
         }
-        const policy = _chunkX7VHW2TDcjs.getPasswordPolicy.call(void 0, $asai);
-        const policyErr = _chunkKOFCBB3Ncjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
+        const policy = _chunkH3K33HBAcjs.getPasswordPolicy.call(void 0, $asai);
+        const policyErr = _chunkK2QPSQEVcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
         if (policyErr === "PASSWORD_TOO_SHORT") {
           return sendErr(res, policyErr, [String(policy.minLength)], opt);
         }
         if (policyErr) return sendErr(res, policyErr, void 0, opt);
-        const { passHash, passSalt } = _chunkKOFCBB3Ncjs.hashPassword.call(void 0, newPass);
-        const passHistory = _chunkKOFCBB3Ncjs.nextPassHistory.call(void 0, pass, user.passHistory, policy.historyCount);
+        const { passHash, passSalt } = _chunkK2QPSQEVcjs.hashPassword.call(void 0, newPass);
+        const passHistory = _chunkK2QPSQEVcjs.nextPassHistory.call(void 0, pass, user.passHistory, policy.historyCount);
         await store.updateUser(us, {
           passHash,
           passSalt,
@@ -3912,7 +4080,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         logSecurityEvent($asai, { type: "AUTH_FAIL", path: url, method: "POST", user: us, ip, detail: "password_changed" });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _490 => _490.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _501 => _501.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/register/")) {
@@ -3922,15 +4090,17 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         return sendErr(res, "AUTH_REG_DISABLED", void 0, opt);
       }
       try {
-        const us = sanitizeString(body.us, 64);
-        const pass = sanitizeString(body.pass, 128);
-        const email = body.email ? sanitizeString(body.email, 128) : void 0;
-        const policyErr = _chunkKOFCBB3Ncjs.validatePasswordChange.call(void 0, pass, $asai);
+        const us = sanitizeString(pickAuthField(body, "us", "username"), 64);
+        const pass = sanitizeString(pickAuthField(body, "pass", "password", "pwd"), 128);
+        const emailRaw = pickAuthField(body, "email");
+        const email = emailRaw ? sanitizeString(emailRaw, 128) : void 0;
+        if (!us || !pass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
+        const policyErr = _chunkK2QPSQEVcjs.validatePasswordChange.call(void 0, pass, $asai);
         if (policyErr === "PASSWORD_TOO_SHORT") {
-          return sendErr(res, policyErr, [String(_chunkX7VHW2TDcjs.getPasswordPolicy.call(void 0, $asai).minLength)], opt);
+          return sendErr(res, policyErr, [String(_chunkH3K33HBAcjs.getPasswordPolicy.call(void 0, $asai).minLength)], opt);
         }
         if (policyErr) return sendErr(res, policyErr, void 0, opt);
-        const { passHash, passSalt } = _chunkKOFCBB3Ncjs.hashPassword.call(void 0, pass);
+        const { passHash, passSalt } = _chunkK2QPSQEVcjs.hashPassword.call(void 0, pass);
         const user = await store.createUser({
           us,
           email,
@@ -3943,21 +4113,21 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         logSecurityEvent($asai, { type: "AUTH_FAIL", path: url, method: "POST", user: us, ip, detail: "register_ok" });
         return sendSuccess(res, { user: publicUser($asai, user) }, opt);
       } catch (err) {
-        const msg = _optionalChain([err, 'optionalAccess', _491 => _491.message]) || String(err);
+        const msg = _optionalChain([err, 'optionalAccess', _502 => _502.message]) || String(err);
         if (msg.includes("exists") || msg.includes("\u5DF2\u5B58\u5728")) {
           return sendErr(res, "USER_ALREADY_EXISTS", void 0, opt);
         }
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _492 => _492.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _503 => _503.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/auth/")) {
       await ensureReady($asai);
       try {
-        const us = sanitizeString(body.us, 64);
-        const pass = sanitizeString(body.pass, 128);
+        const us = sanitizeString(pickAuthField(body, "us", "username"), 64);
+        const pass = sanitizeString(pickAuthField(body, "pass", "password", "pwd"), 128);
         if (!us || !pass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
         const user = await store.findByUsername(us);
-        if (!user || !_chunkKOFCBB3Ncjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
+        if (!user || !_chunkK2QPSQEVcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
           if (user) {
             const sec = getSecurity($asai);
             const lockoutMax = _nullishCoalesce(sec.lockoutMaxFails, () => ( 5));
@@ -3979,21 +4149,13 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (user.status === "locked" && user.lockedUntil && user.lockedUntil > Date.now()) {
           return sendErr(res, "AUTH_ACCOUNT_LOCKED", void 0, opt);
         }
-        const policy = _chunkX7VHW2TDcjs.getPasswordPolicy.call(void 0, $asai);
-        const mustChange = !!user.mustChangePassword || _chunkX7VHW2TDcjs.isPasswordExpired.call(void 0, user.passwordChangedAt, policy.maxAgeDays);
-        const hostcfg = _optionalChain([$asai, 'access', _493 => _493.getHost, 'optionalCall', _494 => _494(hostdir)]) || {};
+        const policy = _chunkH3K33HBAcjs.getPasswordPolicy.call(void 0, $asai);
+        const mustChange = !!user.mustChangePassword || _chunkH3K33HBAcjs.isPasswordExpired.call(void 0, user.passwordChangedAt, policy.maxAgeDays);
+        const hostcfg = _optionalChain([$asai, 'access', _504 => _504.getHost, 'optionalCall', _505 => _505(hostdir)]) || {};
         if (hostcfg.ckws && isUserOnlineOnWs($asai, us, hostdir)) {
-          logSecurityEvent($asai, {
-            type: "AUTH_FAIL",
-            path: url,
-            method: "POST",
-            user: us,
-            ip,
-            detail: "user_already_online"
-          });
-          return sendErr(res, "USER_ALREADY_LOGGED", void 0, opt);
+          kickUserWs($asai, us, hostdir);
         }
-        const quotaCheck = await canLogin($asai, us);
+        const quotaCheck = await canLogin($asai, us, hostdir);
         if (!quotaCheck.ok) {
           logSecurityEvent($asai, { type: "RATE_LIMIT", path: url, method: "POST", user: us, ip, detail: quotaCheck.message });
           return sendErr(res, quotaCheck.message || "LOGIN_QUOTA_FULL", void 0, opt);
@@ -4014,22 +4176,22 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
           opt
         );
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _495 => _495.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _506 => _506.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/logout/")) {
       try {
         const bodySid = body.sessionId ? sanitizeString(body.sessionId, 64) : "";
         if (bodySid) await store.removeSession(bodySid);
-        const us = _optionalChain([req, 'optionalAccess', _496 => _496.Userinfo, 'optionalAccess', _497 => _497[0]]);
+        const us = _optionalChain([req, 'optionalAccess', _507 => _507.Userinfo, 'optionalAccess', _508 => _508[0]]);
         if (us) logSecurityEvent($asai, { type: "AUTH_FAIL", path: url, method: "POST", user: String(us), ip, detail: "logout" });
         return sendSuccess(res, "ok", opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _498 => _498.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _509 => _509.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/kick/")) {
-      if (!await checkAdmin(req, url, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
@@ -4037,21 +4199,26 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (!sessionId) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
         const sessions = await store.getSessions();
         const target = sessions.find((s) => s.id === sessionId);
+        if (!target) return sendErr(res, "AUTH_SESSION_NOT_FOUND", void 0, opt);
+        if (!isSessionUserOnline($asai, target.us, hostdir)) {
+          return sendErr(res, "SESSION_NOT_ONLINE", void 0, opt);
+        }
+        kickUserWs($asai, target.us, hostdir);
         await store.removeSession(sessionId);
-        const operator = String(_optionalChain([req, 'optionalAccess', _499 => _499.Userinfo, 'optionalAccess', _500 => _500[0]]) || "");
-        await _chunkNLBFIRDBcjs.logSessionTerminate.call(void 0, $asai, {
+        const operator = String(_optionalChain([req, 'optionalAccess', _510 => _510.Userinfo, 'optionalAccess', _511 => _511[0]]) || "");
+        await _chunkRIRKIYETcjs.logSessionTerminate.call(void 0, $asai, {
           operator,
           sessionId,
-          targetUs: _optionalChain([target, 'optionalAccess', _501 => _501.us]),
+          targetUs: target.us,
           ip
         });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _502 => _502.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _512 => _512.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/delete/")) {
-      if (!await checkAdmin(req, url, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
@@ -4059,36 +4226,93 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (!targetUs || targetUs === "admin") return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
         const ok = await store.deleteUser(targetUs);
         if (!ok) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
-        const operator = String(_optionalChain([req, 'optionalAccess', _503 => _503.Userinfo, 'optionalAccess', _504 => _504[0]]) || "");
-        await _chunkNLBFIRDBcjs.logAccountPurge.call(void 0, $asai, { operator, targetUs, ip });
+        const operator = String(_optionalChain([req, 'optionalAccess', _513 => _513.Userinfo, 'optionalAccess', _514 => _514[0]]) || "");
+        await _chunkRIRKIYETcjs.logAccountPurge.call(void 0, $asai, { operator, targetUs, ip });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _505 => _505.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _515 => _515.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/levels/")) {
-      if (!await checkAdmin(req, url, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
         const levels = Array.isArray(body.levels) ? body.levels : void 0;
         const thresholds = body.thresholds && typeof body.thresholds === "object" ? body.thresholds : void 0;
         const routeRights = Array.isArray(body.routeRights) ? body.routeRights : void 0;
-        const operator = String(_optionalChain([req, 'optionalAccess', _506 => _506.Userinfo, 'optionalAccess', _507 => _507[0]]) || "");
-        const cfg = await _chunkX7VHW2TDcjs.saveUserLevelConfig.call(void 0, 
+        const defaultResetPassword = typeof body.defaultResetPassword === "string" ? body.defaultResetPassword : void 0;
+        const operator = String(_optionalChain([req, 'optionalAccess', _516 => _516.Userinfo, 'optionalAccess', _517 => _517[0]]) || "");
+        const cfg = await _chunkH3K33HBAcjs.saveUserLevelConfig.call(void 0, 
           $asai,
-          { levels, thresholds, routeRights },
+          {
+            levels,
+            thresholds,
+            routeRights,
+            defaultResetPassword
+          },
           operator
         );
-        await _chunkNLBFIRDBcjs.logSecurityConfigIntervention.call(void 0, $asai, {
+        await _chunkRIRKIYETcjs.logSecurityConfigIntervention.call(void 0, $asai, {
           section: "user_levels",
-          detail: JSON.stringify({ levels: _optionalChain([levels, 'optionalAccess', _508 => _508.length]), thresholds: !!thresholds, routeRights: _optionalChain([routeRights, 'optionalAccess', _509 => _509.length]) }),
+          detail: JSON.stringify({ levels: _optionalChain([levels, 'optionalAccess', _518 => _518.length]), thresholds: !!thresholds, routeRights: _optionalChain([routeRights, 'optionalAccess', _519 => _519.length]) }),
           operator,
           ip
         });
         return sendSuccess(res, cfg, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _510 => _510.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _520 => _520.message]) || err, opt);
+      }
+    }
+    if (url.startsWith("/api/user/login/admin/resetpass/")) {
+      await ensureReady($asai);
+      if (!await checkAdmin(req, url, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+        logSecurityEvent($asai, { type: "ACCESS_DENIED", path: url, method: "POST", ip });
+        return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
+      }
+      try {
+        const targetUs = sanitizeString(body.us, 64);
+        if (!targetUs) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
+        let newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
+        if (!newPass) newPass = _chunkH3K33HBAcjs.getDefaultResetPassword.call(void 0, $asai);
+        const policy = _chunkH3K33HBAcjs.getPasswordPolicy.call(void 0, $asai);
+        const policyErr = _chunkH3K33HBAcjs.validatePasswordWithPolicy.call(void 0, newPass, policy);
+        if (policyErr === "PASSWORD_TOO_SHORT") {
+          return sendErr(res, policyErr, [String(policy.minLength)], opt);
+        }
+        if (policyErr) return sendErr(res, policyErr, void 0, opt);
+        const user = await store.findByUsername(targetUs);
+        if (!user) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
+        const { passHash, passSalt } = _chunkK2QPSQEVcjs.hashPassword.call(void 0, newPass);
+        const updated = await store.updateUser(targetUs, {
+          passHash,
+          passSalt,
+          mustChangePassword: 1,
+          passwordChangedAt: Date.now(),
+          failCount: 0,
+          status: "active",
+          lockedUntil: void 0,
+          passHistory: "[]"
+        });
+        if (!updated) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
+        const operator = String(_optionalChain([req, 'optionalAccess', _521 => _521.Userinfo, 'optionalAccess', _522 => _522[0]]) || "");
+        await _chunkRIRKIYETcjs.logUserRbacChange.call(void 0, $asai, {
+          operator,
+          targetUs,
+          patch: { resetPassword: true, mustChangePassword: 1 },
+          ip
+        });
+        logSecurityEvent($asai, {
+          type: "AUTH_FAIL",
+          path: url,
+          method: "POST",
+          user: targetUs,
+          ip,
+          detail: "admin_password_reset"
+        });
+        return sendSuccess(res, { user: publicUser($asai, updated) }, opt);
+      } catch (err) {
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _523 => _523.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/update/")) {
@@ -4102,11 +4326,11 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const patch = {};
         if (body.lv != null) {
           const newLv = Number(body.lv);
-          if (!Number.isFinite(newLv) || !_chunkX7VHW2TDcjs.isValidUserLv.call(void 0, $asai, newLv)) {
+          if (!Number.isFinite(newLv) || !_chunkH3K33HBAcjs.isValidUserLv.call(void 0, $asai, newLv)) {
             return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
           }
           patch.lv = newLv;
-          patch.role = _chunkX7VHW2TDcjs.resolveRoleForLevel.call(void 0, $asai, newLv).name;
+          patch.role = _chunkH3K33HBAcjs.resolveRoleForLevel.call(void 0, $asai, newLv).name;
         }
         if (body.status) patch.status = sanitizeString(body.status, 16);
         if (body.resetLock) {
@@ -4118,8 +4342,8 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const updated = await store.updateUser(targetUs, patch);
         if (!updated) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
         if (Object.keys(patch).length) {
-          await _chunkNLBFIRDBcjs.logUserRbacChange.call(void 0, $asai, {
-            operator: String(_optionalChain([req, 'optionalAccess', _511 => _511.Userinfo, 'optionalAccess', _512 => _512[0]]) || ""),
+          await _chunkRIRKIYETcjs.logUserRbacChange.call(void 0, $asai, {
+            operator: String(_optionalChain([req, 'optionalAccess', _524 => _524.Userinfo, 'optionalAccess', _525 => _525[0]]) || ""),
             targetUs,
             patch,
             ip
@@ -4127,32 +4351,33 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         }
         return sendSuccess(res, { user: publicUser($asai, updated) }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _513 => _513.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _526 => _526.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/profile/")) {
-      const us = _optionalChain([req, 'optionalAccess', _514 => _514.Userinfo, 'optionalAccess', _515 => _515[0]]);
+      const us = _optionalChain([req, 'optionalAccess', _527 => _527.Userinfo, 'optionalAccess', _528 => _528[0]]);
       if (!us) return sendErr(res, "AUTH_UNAUTHORIZED", void 0, opt);
       try {
         const user = await store.findByUsername(String(us));
         if (!user) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
-        if (body.newPass) {
-          const newPass = sanitizeString(body.newPass, 128);
-          const policy = _chunkX7VHW2TDcjs.getPasswordPolicy.call(void 0, $asai);
-          if (body.pass) {
-            if (!_chunkKOFCBB3Ncjs.verifyPassword.call(void 0, String(body.pass), user.passHash, user.passSalt)) {
+        if (pickAuthField(body, "newPass", "newPassword", "newpass")) {
+          const newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
+          const policy = _chunkH3K33HBAcjs.getPasswordPolicy.call(void 0, $asai);
+          const oldPass = pickAuthField(body, "pass", "password", "pwd");
+          if (oldPass) {
+            if (!_chunkK2QPSQEVcjs.verifyPassword.call(void 0, oldPass, user.passHash, user.passSalt)) {
               return sendErr(res, "AUTH_INVALID_PASSWORD", void 0, opt);
             }
           } else if (!user.mustChangePassword) {
             return sendErr(res, "AUTH_INVALID_PASSWORD", void 0, opt);
           }
-          const policyErr = _chunkKOFCBB3Ncjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
+          const policyErr = _chunkK2QPSQEVcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
           if (policyErr === "PASSWORD_TOO_SHORT") {
             return sendErr(res, policyErr, [String(policy.minLength)], opt);
           }
           if (policyErr) return sendErr(res, policyErr, void 0, opt);
-          const { passHash, passSalt } = _chunkKOFCBB3Ncjs.hashPassword.call(void 0, newPass);
-          const passHistory = _chunkKOFCBB3Ncjs.nextPassHistory.call(void 0, String(body.pass || newPass), user.passHistory, policy.historyCount);
+          const { passHash, passSalt } = _chunkK2QPSQEVcjs.hashPassword.call(void 0, newPass);
+          const passHistory = _chunkK2QPSQEVcjs.nextPassHistory.call(void 0, oldPass || newPass, user.passHistory, policy.historyCount);
           await store.updateUser(String(us), {
             passHash,
             passSalt,
@@ -4164,7 +4389,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const fresh = await store.findByUsername(String(us));
         return sendSuccess(res, { user: fresh ? publicUser($asai, fresh) : null }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _516 => _516.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _529 => _529.message]) || err, opt);
       }
     }
   }
@@ -4173,21 +4398,23 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     const url = req.url || "";
     const ip = getClientIp(req);
     if (url.startsWith("/api/user/login/config/")) {
-      const lang = String(_optionalChain([req, 'optionalAccess', _517 => _517.headers, 'optionalAccess', _518 => _518["accept-language"]]) || _optionalChain([opt, 'optionalAccess', _519 => _519.headers, 'optionalAccess', _520 => _520["accept-language"]]) || "zh-CN").split(",")[0];
-      return sendSuccess(res, _chunkX7VHW2TDcjs.getPublicSecurityConfig.call(void 0, $asai, lang), opt);
+      const lang = String(_optionalChain([req, 'optionalAccess', _530 => _530.headers, 'optionalAccess', _531 => _531["accept-language"]]) || _optionalChain([opt, 'optionalAccess', _532 => _532.headers, 'optionalAccess', _533 => _533["accept-language"]]) || "zh-CN").split(",")[0];
+      await _chunkH3K33HBAcjs.loadUserLevelConfig.call(void 0, $asai);
+      return sendSuccess(res, _chunkH3K33HBAcjs.getPublicSecurityConfig.call(void 0, $asai, lang), opt);
     }
     if (url.startsWith("/api/user/login/admin/levels/")) {
-      if (!await checkAdmin(req, url, _chunkX7VHW2TDcjs.getPermissionThreshold.call(void 0, $asai, "adminRead"))) {
+      if (!await checkAdmin(req, url, _chunkH3K33HBAcjs.getPermissionThreshold.call(void 0, $asai, "adminRead"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
-      await _chunkX7VHW2TDcjs.loadUserLevelConfig.call(void 0, $asai);
-      return sendSuccess(res, _chunkX7VHW2TDcjs.getUserLevelConfigSync.call(void 0, $asai), opt);
+      await _chunkH3K33HBAcjs.loadUserLevelConfig.call(void 0, $asai);
+      return sendSuccess(res, _chunkH3K33HBAcjs.getUserLevelConfigSync.call(void 0, $asai), opt);
     }
     if (url.startsWith("/api/user/login/admin/sessions/")) {
       if (!await checkAdmin(req, url)) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
-      const sessions = await store.getSessions();
+      const allSessions = await store.getSessions();
+      const sessions = resolveOnlineSessions($asai, hostdir, allSessions);
       return sendSuccess(
         res,
         {
@@ -4197,7 +4424,8 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
             ip: s.ip,
             createdAt: s.createdAt,
             expiresAt: s.expiresAt,
-            lastActivityAt: s.lastActivityAt
+            lastActivityAt: s.lastActivityAt,
+            online: true
           }))
         },
         opt
@@ -4215,12 +4443,13 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
       if (!await checkAdmin(req, url)) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
-      const sessions = await store.getSessions();
+      await purgeOfflineSessions($asai, hostdir, store);
+      const onlineCount = await countOnlineSessions($asai, hostdir, store);
       const quota = getQuota2($asai);
       return sendSuccess(
         res,
         {
-          sessions: sessions.length,
+          sessions: onlineCount,
           maxLoginSessions: _nullishCoalesce(quota.maxLoginSessions, () => ( 100)),
           quotaEnabled: !!quota.enabled,
           http: $asai.connectionshttp,
@@ -4230,7 +4459,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
       );
     }
     if (url.startsWith("/api/user/login/profile/")) {
-      const us = _optionalChain([req, 'optionalAccess', _521 => _521.Userinfo, 'optionalAccess', _522 => _522[0]]);
+      const us = _optionalChain([req, 'optionalAccess', _534 => _534.Userinfo, 'optionalAccess', _535 => _535[0]]);
       if (!us) return sendErr(res, "AUTH_UNAUTHORIZED", void 0, opt);
       const user = await store.findByUsername(String(us));
       return sendSuccess(res, { user: user ? publicUser($asai, user) : null }, opt);
@@ -4272,16 +4501,16 @@ var As_default = {
     return { code: 908, data: val };
   },
   ctxSuccess(val, opt = null) {
-    if (typeof _optionalChain([opt, 'optionalAccess', _523 => _523.resAES]) === "function") {
+    if (typeof _optionalChain([opt, 'optionalAccess', _536 => _536.resAES]) === "function") {
       val = opt.resAES(val);
     }
     return { code: 909, data: val };
   },
   getPath(str = "-") {
-    return _optionalChain([str, 'optionalAccess', _524 => _524.replace, 'call', _525 => _525(/[^a-zA-Z0-9.\-_\\\/]/g, "")]);
+    return _optionalChain([str, 'optionalAccess', _537 => _537.replace, 'call', _538 => _538(/[^a-zA-Z0-9.\-_\\\/]/g, "")]);
   },
   getName(str = "-") {
-    return _optionalChain([str, 'optionalAccess', _526 => _526.replace, 'call', _527 => _527(/[^a-zA-Z0-9.\-_]/g, "")]);
+    return _optionalChain([str, 'optionalAccess', _539 => _539.replace, 'call', _540 => _540(/[^a-zA-Z0-9.\-_]/g, "")]);
   },
   toDirPath(relativePath) {
     const pathArr = relativePath.split("/");
@@ -4295,10 +4524,10 @@ var As_default = {
     return relativePath;
   },
   //创建多层文件夹 同步
-  ensureDir(fs13, relativePath) {
+  ensureDir(fs12, relativePath) {
     const absPathDir = this.toDirPath(relativePath);
     const absPath = this.toAbsolutePath(relativePath);
-    if (!fs13.existsSync(absPath)) {
+    if (!fs12.existsSync(absPath)) {
       let pathTmp = "";
       absPathDir.split("/").forEach((el) => {
         if (el) {
@@ -4306,8 +4535,8 @@ var As_default = {
             pathTmp += "/";
           }
           pathTmp += el;
-          if (!fs13.existsSync(pathTmp)) {
-            if (!fs13.mkdirSync(pathTmp, { recursive: true })) {
+          if (!fs12.existsSync(pathTmp)) {
+            if (!fs12.mkdirSync(pathTmp, { recursive: true })) {
               return absPath;
             }
           }
@@ -4316,11 +4545,11 @@ var As_default = {
     }
     return absPath;
   },
-  makeDir(fs13, filePaths) {
-    return new Promise((resolve7, reject) => {
+  makeDir(fs12, filePaths) {
+    return new Promise((resolve6, reject) => {
       try {
-        const newPath = this.ensureDir(fs13, filePaths);
-        resolve7(newPath);
+        const newPath = this.ensureDir(fs12, filePaths);
+        resolve6(newPath);
       } catch (err) {
         reject(err);
       }
@@ -4352,7 +4581,7 @@ var As_default = {
   //     immediate: false,
   // });
   dtImmediate(fn, opt) {
-    if (_optionalChain([opt, 'optionalAccess', _528 => _528.immediate])) {
+    if (_optionalChain([opt, 'optionalAccess', _541 => _541.immediate])) {
       fn();
       opt.immediate = false;
     }
@@ -4374,7 +4603,7 @@ var As_default = {
     if (opt.endtime - opt.starttime < opt.wait) {
       this.dtClearTimeout(opt);
     }
-    if (!_optionalChain([opt, 'optionalAccess', _529 => _529.timeout])) {
+    if (!_optionalChain([opt, 'optionalAccess', _542 => _542.timeout])) {
       opt.starttime = opt.endtime;
       opt.timeout = this.dtSetTimeout(fn, opt);
     }
@@ -4382,7 +4611,7 @@ var As_default = {
   // 节流:指定长度时间内有多次触发，只fn最后一次触发
   throttle(fn, opt) {
     this.dtImmediate(fn, opt);
-    if (!_optionalChain([opt, 'optionalAccess', _530 => _530.timeout])) {
+    if (!_optionalChain([opt, 'optionalAccess', _543 => _543.timeout])) {
       opt.timeout = this.dtSetTimeout(fn, opt);
     }
   },
@@ -4418,8 +4647,8 @@ var As_default = {
 var AsCode_default = {
   // 加密
   asencode(str, keys) {
-    const strlen = _optionalChain([str, 'optionalAccess', _531 => _531.length]) || 0;
-    const keyslen = _optionalChain([keys, 'optionalAccess', _532 => _532.length]) || 0;
+    const strlen = _optionalChain([str, 'optionalAccess', _544 => _544.length]) || 0;
+    const keyslen = _optionalChain([keys, 'optionalAccess', _545 => _545.length]) || 0;
     let newstr = "";
     for (let i = 0; i < strlen; i++) {
       const rnum = Math.round(Math.random() * 1e3) % keyslen;
@@ -4444,7 +4673,7 @@ var AsCode_default = {
         const rnum = keys.indexOf(str[i + 3]);
         const rnumx = Number(rnum.toString().slice(-1)) + 1;
         const ylen = keyslen - rnumx;
-        newstr += _optionalChain([String, 'optionalAccess', _533 => _533.fromCodePoint, 'call', _534 => _534(
+        newstr += _optionalChain([String, 'optionalAccess', _546 => _546.fromCodePoint, 'call', _547 => _547(
           (keys.indexOf(str[i++]) - rnumx) * ylen * ylen + (keys.indexOf(str[i++]) - rnumx) * ylen + (keys.indexOf(str[i++]) - rnumx)
         )]);
       }
@@ -4491,7 +4720,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     if (typeof value !== "string") return value;
     try {
       return JSON.parse(value);
-    } catch (e36) {
+    } catch (e41) {
       return value;
     }
   }
@@ -4527,7 +4756,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, decrypt, "decrypt");
   function validateFields(payload, fields) {
-    return fields.every((key) => typeof _optionalChain([payload, 'optionalAccess', _535 => _535[key]]) === "string" && payload[key].length > 0);
+    return fields.every((key) => typeof _optionalChain([payload, 'optionalAccess', _548 => _548[key]]) === "string" && payload[key].length > 0);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, validateFields, "validateFields");
   function reqAES(opt, fn = (data) => data) {
@@ -4535,7 +4764,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     try {
       if (validateFields(reqData, ["data", "iv", "auth"])) {
         let aesData = decrypt(reqData);
-        if (_optionalChain([reqData, 'optionalAccess', _536 => _536.aes]) === 2) {
+        if (_optionalChain([reqData, 'optionalAccess', _549 => _549.aes]) === 2) {
           aesData = JSON.parse(aesData);
         }
         return fn(aesData);
@@ -4543,7 +4772,10 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         return fn(reqData);
       }
     } catch (error) {
-      return reqData;
+      if (validateFields(reqData, ["data", "iv", "auth"])) {
+        throw error;
+      }
+      return fn(reqData);
     }
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqAES, "reqAES");
@@ -4565,25 +4797,25 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
 
 // src/sysserver/lib/common/AsDb.ts
 var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, cfg) => {
-  const DataServer = _chunkHHPGUJ75cjs.getDataServerForAsDb.call(void 0, $asai, {
-    type: _optionalChain([cfg, 'optionalAccess', _537 => _537.type]) || "sqlite",
+  const DataServer = _chunk2BCIIKRGcjs.getDataServerForAsDb.call(void 0, $asai, {
+    type: _optionalChain([cfg, 'optionalAccess', _550 => _550.type]) || "sqlite",
     opt: {
-      ..._optionalChain([cfg, 'optionalAccess', _538 => _538.opt]) || {
+      ..._optionalChain([cfg, 'optionalAccess', _551 => _551.opt]) || {
         database: "./webdata/webdb/sqlite/asaisqlite.db",
         create: 1
       }
     },
-    storeKey: _optionalChain([cfg, 'optionalAccess', _539 => _539.storeKey])
+    storeKey: _optionalChain([cfg, 'optionalAccess', _552 => _552.storeKey])
   });
   function reqwherestr(str) {
-    if (_optionalChain([cfg, 'optionalAccess', _540 => _540.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _541 => _541.type]) === "mysql") {
+    if (_optionalChain([cfg, 'optionalAccess', _553 => _553.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _554 => _554.type]) === "mysql") {
       return `'${str}'`;
     }
     return str;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqwherestr, "reqwherestr");
   function reqfield(queryData) {
-    if (_optionalChain([queryData, 'optionalAccess', _542 => _542.fd])) {
+    if (_optionalChain([queryData, 'optionalAccess', _555 => _555.fd])) {
       return queryData.fd.split("-");
     }
     return cfg.field.data;
@@ -4591,14 +4823,14 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqfield, "reqfield");
   function reqwhere(queryData) {
     const wheretmp = [];
-    if ((_optionalChain([cfg, 'optionalAccess', _543 => _543.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _544 => _544.type]) === "mysql") && _optionalChain([queryData, 'optionalAccess', _545 => _545.wlv])) {
+    if ((_optionalChain([cfg, 'optionalAccess', _556 => _556.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _557 => _557.type]) === "mysql") && _optionalChain([queryData, 'optionalAccess', _558 => _558.wlv])) {
       const wlvarr = queryData.wlv.split("-");
       wheretmp.push([wlvarr[0], ">", Number(wlvarr[1] || 0)]);
     }
-    if (_optionalChain([queryData, 'optionalAccess', _546 => _546.fl])) {
+    if (_optionalChain([queryData, 'optionalAccess', _559 => _559.fl])) {
       wheretmp.push([cfg.field.class, "LIKE", reqwherestr(`${queryData.fl}%`)]);
     }
-    if (_optionalChain([queryData, 'optionalAccess', _547 => _547.ss]) && _optionalChain([queryData, 'optionalAccess', _548 => _548.ssty])) {
+    if (_optionalChain([queryData, 'optionalAccess', _560 => _560.ss]) && _optionalChain([queryData, 'optionalAccess', _561 => _561.ssty])) {
       wheretmp.push([queryData.ssty, "LIKE", reqwherestr(`%${queryData.ss}%`)]);
     }
     if (wheretmp.length > 1) {
@@ -4609,16 +4841,16 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqwhere, "reqwhere");
   function reqorder(queryData) {
     const ordertmp = [];
-    if (_optionalChain([queryData, 'optionalAccess', _549 => _549.sx])) {
-      ordertmp.push([queryData.sx, _optionalChain([queryData, 'optionalAccess', _550 => _550.sxty]) == 1 ? "DESC" : "ASC"]);
+    if (_optionalChain([queryData, 'optionalAccess', _562 => _562.sx])) {
+      ordertmp.push([queryData.sx, _optionalChain([queryData, 'optionalAccess', _563 => _563.sxty]) == 1 ? "DESC" : "ASC"]);
     }
     return ordertmp;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqorder, "reqorder");
   function reqlimit(queryData) {
     let limittmp = "";
-    let limitps = _optionalChain([queryData, 'optionalAccess', _551 => _551.ps]);
-    if (_optionalChain([queryData, 'optionalAccess', _552 => _552.pg])) {
+    let limitps = _optionalChain([queryData, 'optionalAccess', _564 => _564.ps]);
+    if (_optionalChain([queryData, 'optionalAccess', _565 => _565.pg])) {
       limitps = limitps || 20;
       limittmp = `${(queryData.pg - 1) * limitps},${limitps}`;
     } else if (limitps) {
@@ -4627,10 +4859,52 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
     return limittmp;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqlimit, "reqlimit");
+  function decodePathSegment(seg) {
+    try {
+      return decodeURIComponent(seg);
+    } catch (e42) {
+      return seg;
+    }
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, decodePathSegment, "decodePathSegment");
+  function bareFileName(name) {
+    const base = String(name).replace(/\.json$/i, "");
+    const slash = base.lastIndexOf("/");
+    return slash > -1 ? base.substring(slash + 1) : base;
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, bareFileName, "bareFileName");
+  function parseFileBody(raw) {
+    let body = raw;
+    if (typeof body === "string") {
+      try {
+        body = JSON.parse(body);
+      } catch (e43) {
+        return { content: body };
+      }
+    }
+    if (body && typeof body === "object" && !Array.isArray(body)) {
+      return {
+        name: body.name != null ? String(body.name) : void 0,
+        content: body.content !== void 0 ? body.content : body
+      };
+    }
+    return { content: body };
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, parseFileBody, "parseFileBody");
+  function fileContentString(content) {
+    if (content == null) return "";
+    if (typeof content === "string") return content;
+    return JSON.stringify(content);
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, fileContentString, "fileContentString");
+  function fileKeyFromSegment(seg, bodyName) {
+    return bareFileName(decodePathSegment(seg || bodyName || ""));
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, fileKeyFromSegment, "fileKeyFromSegment");
   function getSqlParamsByUrl(req, opt) {
     let tmpSqlParams;
-    const reqArr = _optionalChain([req, 'optionalAccess', _553 => _553.url, 'optionalAccess', _554 => _554.split, 'call', _555 => _555("?"), 'access', _556 => _556[0], 'optionalAccess', _557 => _557.split, 'call', _558 => _558("/")]) || [];
-    const table = (_optionalChain([opt, 'optionalAccess', _559 => _559.qrdata, 'optionalAccess', _560 => _560.table]) || _optionalChain([opt, 'optionalAccess', _561 => _561.data, 'optionalAccess', _562 => _562.table]) || reqArr[3]).replaceAll("_", "/");
+    const reqArr = _optionalChain([req, 'optionalAccess', _566 => _566.url, 'optionalAccess', _567 => _567.split, 'call', _568 => _568("?"), 'access', _569 => _569[0], 'optionalAccess', _570 => _570.split, 'call', _571 => _571("/")]) || [];
+    const table = (_optionalChain([opt, 'optionalAccess', _572 => _572.qrdata, 'optionalAccess', _573 => _573.table]) || _optionalChain([opt, 'optionalAccess', _574 => _574.data, 'optionalAccess', _575 => _575.table]) || reqArr[3]).replaceAll("_", "/");
     if (!table) return tmpSqlParams;
     tmpSqlParams = {
       type: "select",
@@ -4639,9 +4913,11 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
     if (reqArr[5]) {
       if (reqArr[4] === "insert") {
         tmpSqlParams.type = reqArr[4];
-        if (_optionalChain([cfg, 'optionalAccess', _563 => _563.type]) === "file") {
+        if (_optionalChain([cfg, 'optionalAccess', _576 => _576.type]) === "file") {
+          const { name: bodyName, content } = parseFileBody(opt.data);
+          const fileKey = fileKeyFromSegment(reqArr[5], bodyName);
           tmpSqlParams.field = cfg.field.data;
-          tmpSqlParams.value = [[reqwherestr(reqArr[5]), reqwherestr(opt.data)]];
+          tmpSqlParams.value = [[fileKey, fileContentString(content)]];
         } else {
           tmpSqlParams.field = [];
           tmpSqlParams.value = [];
@@ -4661,9 +4937,12 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         }
       } else if (reqArr[4] === "update") {
         tmpSqlParams.type = reqArr[4];
-        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(reqArr[5])]];
-        if (_optionalChain([cfg, 'optionalAccess', _564 => _564.type]) === "file") {
-          tmpSqlParams.set = [[cfg.field.key, reqwherestr(opt.data)]];
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _577 => _577.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
+        if (_optionalChain([cfg, 'optionalAccess', _578 => _578.type]) === "file") {
+          const { content } = parseFileBody(opt.data);
+          const contentField = _optionalChain([cfg, 'access', _579 => _579.field, 'access', _580 => _580.data, 'optionalAccess', _581 => _581[1]]) || "content";
+          tmpSqlParams.set = [[contentField, fileContentString(content)]];
         } else {
           tmpSqlParams.set = [];
           const dbData = typeof opt.data === "string" ? JSON.parse(opt.data) : opt.data;
@@ -4679,16 +4958,18 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         }
       } else if (reqArr[4] === "delete") {
         tmpSqlParams.type = reqArr[4];
-        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(reqArr[5])]];
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _582 => _582.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
       } else {
-        if (_optionalChain([cfg, 'optionalAccess', _565 => _565.as]) > 1) {
+        if (_optionalChain([cfg, 'optionalAccess', _583 => _583.as]) > 1) {
           tmpSqlParams.as = +cfg.as - 1;
         }
         tmpSqlParams.field = cfg.field.data;
-        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(reqArr[5])]];
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _584 => _584.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
       }
     } else {
-      tmpSqlParams.as = _optionalChain([cfg, 'optionalAccess', _566 => _566.as]);
+      tmpSqlParams.as = _optionalChain([cfg, 'optionalAccess', _585 => _585.as]);
       tmpSqlParams.field = reqfield(opt.data);
       tmpSqlParams.where = reqwhere(opt.data);
       tmpSqlParams.order = reqorder(opt.data);
@@ -4698,24 +4979,55 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getSqlParamsByUrl, "getSqlParamsByUrl");
   function dbFresh(req, resdb) {
-    if (_optionalChain([req, 'optionalAccess', _567 => _567.url, 'optionalAccess', _568 => _568.includes, 'call', _569 => _569("/selectlist/")])) {
-      const list = Array.isArray(resdb) ? resdb : _optionalChain([resdb, 'optionalAccess', _570 => _570.data]);
+    if (_optionalChain([req, 'optionalAccess', _586 => _586.url, 'optionalAccess', _587 => _587.includes, 'call', _588 => _588("/selectlist/")])) {
+      const list = Array.isArray(resdb) ? resdb : _optionalChain([resdb, 'optionalAccess', _589 => _589.data]);
       if (Array.isArray(list)) {
-        const mapped = list.map((el) => {
+        const names = list.map((el) => {
+          if (typeof el === "string") {
+            const dot2 = el.lastIndexOf(".");
+            return dot2 > -1 ? el.substring(0, dot2) : el;
+          }
           const rawName = _nullishCoalesce(_nullishCoalesce(el.name, () => ( el.file)), () => ( ""));
           let tmpName = String(rawName).substring(String(rawName).lastIndexOf("/") + 1);
           const dot = tmpName.lastIndexOf(".");
           return dot > -1 ? tmpName.substring(0, dot) : tmpName;
         });
-        if (Array.isArray(resdb)) return mapped;
-        resdb.data = mapped;
+        const children = names.map((name) => ({ name, path: name }));
+        if (Array.isArray(resdb)) return { children };
+        resdb.data = children;
+        return resdb;
       }
     }
     return resdb;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, dbFresh, "dbFresh");
+  function normalizeSelectResult(params, resdb) {
+    let data = resdb;
+    if (_optionalChain([params, 'optionalAccess', _590 => _590.where, 'optionalAccess', _591 => _591.length]) && Array.isArray(data) && data.length === 1) {
+      data = data[0];
+    }
+    if (_optionalChain([cfg, 'optionalAccess', _592 => _592.type]) === "file" && data && typeof data === "object" && !Array.isArray(data)) {
+      const nameKey = _optionalChain([cfg, 'access', _593 => _593.field, 'optionalAccess', _594 => _594.data, 'optionalAccess', _595 => _595[0]]) || "name";
+      const contentKey = _optionalChain([cfg, 'access', _596 => _596.field, 'optionalAccess', _597 => _597.data, 'optionalAccess', _598 => _598[1]]) || "content";
+      if (data[nameKey] != null) {
+        data[nameKey] = bareFileName(String(data[nameKey]));
+      }
+      const raw = data[contentKey];
+      if (typeof raw === "string") {
+        const text = raw.trim();
+        if (text.startsWith("{") || text.startsWith("[")) {
+          try {
+            data[contentKey] = JSON.parse(text);
+          } catch (e44) {
+          }
+        }
+      }
+    }
+    return data;
+  }
+  _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeSelectResult, "normalizeSelectResult");
   function dbCodePm(req, resdb) {
-    if (_optionalChain([req, 'optionalAccess', _571 => _571.Userinfo]) && _optionalChain([req, 'optionalAccess', _572 => _572.Userinfo, 'access', _573 => _573[2]])) {
+    if (_optionalChain([req, 'optionalAccess', _599 => _599.Userinfo]) && _optionalChain([req, 'optionalAccess', _600 => _600.Userinfo, 'access', _601 => _601[2]])) {
       resdb.data = $asai.$lib.AsCode.asencode(JSON.stringify(resdb.data), req.Userinfo[2]);
     }
     return resdb;
@@ -4727,8 +5039,8 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       DataServer.sqlDb(params).then((resdb) => {
         res.end(JSON.stringify($asai.$lib.As.ctxSuccess(dbCodePm(req, dbFresh(req, resdb)), opt)));
       }).catch((errdb) => {
-        const msg = String(_optionalChain([errdb, 'optionalAccess', _574 => _574.message]) || errdb || "");
-        if (_optionalChain([params, 'optionalAccess', _575 => _575.type]) === "select" && msg.includes("no such table")) {
+        const msg = String(_optionalChain([errdb, 'optionalAccess', _602 => _602.message]) || errdb || "");
+        if (_optionalChain([params, 'optionalAccess', _603 => _603.type]) === "select" && msg.includes("no such table")) {
           res.end(JSON.stringify($asai.$lib.As.ctxSuccess([], opt)));
           return;
         }
@@ -4744,30 +5056,30 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
     if (params && typeof DataServer.sqlDb === "function") {
       try {
         DataServer.sqlDb(params).then((resdb) => {
-          let resData = dbFresh(req, resdb);
-          if (_optionalChain([params, 'optionalAccess', _576 => _576.as]) === 2 && _optionalChain([params, 'optionalAccess', _577 => _577.field, 'optionalAccess', _578 => _578.length]) > 1) {
+          let resData = normalizeSelectResult(params, dbFresh(req, resdb));
+          if (_optionalChain([params, 'optionalAccess', _604 => _604.as]) === 2 && _optionalChain([params, 'optionalAccess', _605 => _605.field, 'optionalAccess', _606 => _606.length]) > 1) {
             let limitArr = [];
-            if (_optionalChain([params, 'access', _579 => _579.limit, 'optionalAccess', _580 => _580.split, 'call', _581 => _581(","), 'optionalAccess', _582 => _582.length]) < 2) {
-              limitArr = [0, +_optionalChain([params, 'access', _583 => _583.limit, 'optionalAccess', _584 => _584.split, 'call', _585 => _585(","), 'optionalAccess', _586 => _586[0]])];
+            if (_optionalChain([params, 'access', _607 => _607.limit, 'optionalAccess', _608 => _608.split, 'call', _609 => _609(","), 'optionalAccess', _610 => _610.length]) < 2) {
+              limitArr = [0, +_optionalChain([params, 'access', _611 => _611.limit, 'optionalAccess', _612 => _612.split, 'call', _613 => _613(","), 'optionalAccess', _614 => _614[0]])];
             } else {
               limitArr = params.limit.split(",");
               limitArr = [+limitArr[0], +limitArr[0] + +limitArr[1]];
             }
-            if (_optionalChain([resData, 'access', _587 => _587.data, 'optionalAccess', _588 => _588.length])) {
+            if (_optionalChain([resData, 'access', _615 => _615.data, 'optionalAccess', _616 => _616.length])) {
               resData.data = resData.data.slice(+limitArr[0], +limitArr[1]);
             }
           }
           resData = dbCodePm(req, resData);
           res.end(JSON.stringify($asai.$lib.As.ctxSuccess(resData, opt)));
         }).catch((errdb) => {
-          const msg = String(_optionalChain([errdb, 'optionalAccess', _589 => _589.message]) || errdb || "");
-          if (_optionalChain([params, 'optionalAccess', _590 => _590.type]) === "select" && msg.includes("no such table")) {
+          const msg = String(_optionalChain([errdb, 'optionalAccess', _617 => _617.message]) || errdb || "");
+          if (_optionalChain([params, 'optionalAccess', _618 => _618.type]) === "select" && msg.includes("no such table")) {
             res.end(JSON.stringify($asai.$lib.As.ctxSuccess([], opt)));
             return;
           }
           res.end(JSON.stringify($asai.$lib.As.ctxFail(errdb)));
         });
-      } catch (e37) {
+      } catch (e45) {
         res.end(JSON.stringify({ code: 901 }));
       }
     } else {
@@ -4776,7 +5088,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, runDefaultGet, "runDefaultGet");
   function post(req, res, hostdir, opt) {
-    if (_optionalChain([cfg, 'optionalAccess', _591 => _591.post]) && typeof cfg.post === "function") {
+    if (_optionalChain([cfg, 'optionalAccess', _619 => _619.post]) && typeof cfg.post === "function") {
       Promise.resolve(cfg.post(req, res, hostdir, opt, DataServer)).then((reqstat) => {
         if (!reqstat) runDefaultPost(req, res, opt);
       }).catch((errdb) => {
@@ -4788,7 +5100,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, post, "post");
   function get(req, res, hostdir, opt) {
-    if (_optionalChain([cfg, 'optionalAccess', _592 => _592.get]) && typeof cfg.get === "function") {
+    if (_optionalChain([cfg, 'optionalAccess', _620 => _620.get]) && typeof cfg.get === "function") {
       Promise.resolve(cfg.get(req, res, hostdir, opt, DataServer)).then((reqstat) => {
         if (!reqstat) runDefaultGet(req, res, opt);
       }).catch((errdb) => {
@@ -4813,7 +5125,7 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, hostDefault2, "hostDefault");
   function getPathFromOpt(opt) {
-    const rawPath = _optionalChain([opt, 'access', _593 => _593.qrdata, 'optionalAccess', _594 => _594.path]) || _optionalChain([opt, 'access', _595 => _595.data, 'optionalAccess', _596 => _596.path]);
+    const rawPath = _optionalChain([opt, 'access', _621 => _621.qrdata, 'optionalAccess', _622 => _622.path]) || _optionalChain([opt, 'access', _623 => _623.data, 'optionalAccess', _624 => _624.path]);
     return decodeURIComponent(rawPath);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getPathFromOpt, "getPathFromOpt");
@@ -4823,18 +5135,18 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendSuccess, "sendSuccess");
   function sendErr(res, ec, params, opt) {
-    const ErrorCode = _optionalChain([$asai, 'access', _597 => _597.$lib, 'optionalAccess', _598 => _598.ErrorCode]);
-    _optionalChain([ErrorCode, 'optionalAccess', _599 => _599.loadErrorCodes, 'optionalCall', _600 => _600($asai)]);
-    _optionalChain([ErrorCode, 'optionalAccess', _601 => _601.logError, 'optionalCall', _602 => _602($asai, ec, Array.isArray(params) ? params.map(String) : params != null ? [String(params)] : void 0)]);
+    const ErrorCode = _optionalChain([$asai, 'access', _625 => _625.$lib, 'optionalAccess', _626 => _626.ErrorCode]);
+    _optionalChain([ErrorCode, 'optionalAccess', _627 => _627.loadErrorCodes, 'optionalCall', _628 => _628($asai)]);
+    _optionalChain([ErrorCode, 'optionalAccess', _629 => _629.logError, 'optionalCall', _630 => _630($asai, ec, Array.isArray(params) ? params.map(String) : params != null ? [String(params)] : void 0)]);
     const response = $asai.$lib.As.ctxErr(ec, params, opt);
     res.end(JSON.stringify(response));
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendErr, "sendErr");
   function sendFail(res, err, opt) {
-    const ErrorCode = _optionalChain([$asai, 'access', _603 => _603.$lib, 'optionalAccess', _604 => _604.ErrorCode]);
-    _optionalChain([ErrorCode, 'optionalAccess', _605 => _605.loadErrorCodes, 'optionalCall', _606 => _606($asai)]);
-    const normalized = _optionalChain([ErrorCode, 'optionalAccess', _607 => _607.normalizeErrPayload, 'optionalCall', _608 => _608(err)]);
-    if (_optionalChain([normalized, 'optionalAccess', _609 => _609.ec])) {
+    const ErrorCode = _optionalChain([$asai, 'access', _631 => _631.$lib, 'optionalAccess', _632 => _632.ErrorCode]);
+    _optionalChain([ErrorCode, 'optionalAccess', _633 => _633.loadErrorCodes, 'optionalCall', _634 => _634($asai)]);
+    const normalized = _optionalChain([ErrorCode, 'optionalAccess', _635 => _635.normalizeErrPayload, 'optionalCall', _636 => _636(err)]);
+    if (_optionalChain([normalized, 'optionalAccess', _637 => _637.ec])) {
       return sendErr(res, normalized.ec, normalized.pm, opt);
     }
     const response = $asai.$lib.As.ctxFail(err);
@@ -4842,7 +5154,7 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendFail, "sendFail");
   function mnLog(...arg) {
-    (_optionalChain([$asai, 'optionalAccess', _610 => _610.$log]) || console.log)(...arg);
+    (_optionalChain([$asai, 'optionalAccess', _638 => _638.$log]) || console.log)(...arg);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mnLog, "mnLog");
   return { hostDefault: hostDefault2, getPathFromOpt, sendSuccess, sendFail, sendErr, mnLog };
@@ -4875,7 +5187,7 @@ async function pathExists(filePath) {
   try {
     await _promises2.default.access(nodePath2.default.normalize(filePath));
     return true;
-  } catch (e38) {
+  } catch (e46) {
     return false;
   }
 }
@@ -4942,7 +5254,7 @@ async function removeFile(filePath) {
   try {
     await _promises2.default.unlink(nodePath2.default.normalize(filePath));
   } catch (err) {
-    if (_optionalChain([err, 'optionalAccess', _611 => _611.code]) !== "ENOENT") throw err;
+    if (_optionalChain([err, 'optionalAccess', _639 => _639.code]) !== "ENOENT") throw err;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, removeFile, "removeFile");
@@ -4980,7 +5292,7 @@ function isPkgRuntime() {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isPkgRuntime, "isPkgRuntime");
 function getPkgSnapshotDir() {
   if (!isPkgRuntime()) return void 0;
-  const entry = _nullishCoalesce(_optionalChain([process, 'access', _612 => _612.pkg, 'optionalAccess', _613 => _613.entrypoint]), () => ( _optionalChain([process, 'access', _614 => _614.pkg, 'optionalAccess', _615 => _615.defaultEntrypoint])));
+  const entry = _nullishCoalesce(_optionalChain([process, 'access', _640 => _640.pkg, 'optionalAccess', _641 => _641.entrypoint]), () => ( _optionalChain([process, 'access', _642 => _642.pkg, 'optionalAccess', _643 => _643.defaultEntrypoint])));
   if (!entry) return void 0;
   return nodePath4.resolve(nodePath4.dirname(entry));
 }
@@ -5029,7 +5341,7 @@ function getPrimaryServerRoot() {
       if (fs10.statSync(nodePath4.join(base, "websys")).isDirectory()) {
         return base;
       }
-    } catch (e39) {
+    } catch (e47) {
     }
   }
   if (isPkgRuntime()) {
@@ -5049,25 +5361,37 @@ var lib_default = {
   AsPath: AsPath_exports,
   reqWork: reqWork_default,
   ErrorCode: ErrorCode_default,
-  InterventionLog: _chunkG4WVDUBHcjs.InterventionLog_exports,
-  LogStore: _chunkVLMM735Qcjs.LogStore_exports,
-  InterventionHooks: _chunkNLBFIRDBcjs.intervention_hooks_exports
+  InterventionLog: _chunk4E7Z5K5Ucjs.InterventionLog_exports,
+  LogStore: _chunkTKJAHTPOcjs.LogStore_exports,
+  InterventionHooks: _chunkRIRKIYETcjs.intervention_hooks_exports
 };
 
 // src/sysserver/db/src/common.ts
+var common_exports = {};
+_chunkSMVZ3ZDJcjs.__export.call(void 0, common_exports, {
+  fieldHasId: () => fieldHasId,
+  isPathInside: () => isPathInside,
+  isTableMissingError: () => isTableMissingError,
+  joinTablePath: () => joinTablePath,
+  promisifySqlDb: () => promisifySqlDb,
+  toFieldArray: () => toFieldArray,
+  toInsertRows: () => toInsertRows,
+  toSetObject: () => toSetObject,
+  toWherePairs: () => toWherePairs
+});
 
 function promisifySqlDb(query, sql) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     query(sql, (err, result) => {
       if (err) {
         reject(err);
         return;
       }
       if (!result || Array.isArray(result) && result.length === 0) {
-        resolve7("");
+        resolve6("");
         return;
       }
-      resolve7(result);
+      resolve6(result);
     });
   });
 }
@@ -5077,6 +5401,48 @@ function toFieldArray(field) {
   return typeof field === "string" ? field.split(",") : field;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, toFieldArray, "toFieldArray");
+function toWherePairs(where) {
+  if (!where || !Array.isArray(where)) return [];
+  const pairs = [];
+  for (const item of where) {
+    if (typeof item === "string") continue;
+    if (Array.isArray(item) && item.length >= 3) {
+      pairs.push([item[0], item[2]]);
+    }
+  }
+  return pairs;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, toWherePairs, "toWherePairs");
+function toSetObject(set) {
+  if (!set) return {};
+  if (typeof set === "string") return {};
+  const obj = {};
+  for (const item of set) {
+    if (typeof item === "string") continue;
+    if (Array.isArray(item)) {
+      if (item.length >= 3 && typeof item[1] === "string") {
+        obj[item[0]] = item[2];
+      } else if (item.length >= 2) {
+        obj[item[0]] = item[1];
+      }
+    }
+  }
+  return obj;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, toSetObject, "toSetObject");
+function toInsertRows(sql) {
+  const fields = toFieldArray(sql.field);
+  const values = sql.value;
+  if (!fields.length || !Array.isArray(values)) return [];
+  return values.map((row) => {
+    const rowObj = {};
+    fields.forEach((field, index) => {
+      rowObj[field] = row[index];
+    });
+    return rowObj;
+  });
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, toInsertRows, "toInsertRows");
 function isPathInside(baseDir, targetPath) {
   const base = path5.resolve(baseDir);
   const target = path5.resolve(targetPath);
@@ -5262,936 +5628,426 @@ var Sql_default = {
   }
 };
 
-// src/sysserver/db/src/mysql/Index.ts
-var _mysql = require('mysql'); var _mysql2 = _interopRequireDefault(_mysql);
-var DbMySQL = class {
-  static {
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "DbMySQL");
-  }
-  constructor(config) {
-    this.config = config;
-    this.pool = _mysql2.default.createPool(config);
-  }
-  getErr(sql, err) {
-    if (this.config.create && isTableMissingError(err)) {
-      this.createTable(sql);
+// src/sysserver/db/src/file/Index.ts
+
+
+function dbDriver(opt = {}) {
+  const { Sql, DbCommon } = opt;
+  const { isPathInside: isPathInside2, joinTablePath: joinTablePath2 } = DbCommon;
+  class DbFile {
+    static {
+      _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "DbFile");
     }
-    return _optionalChain([err, 'optionalAccess', _616 => _616.message]) || null;
-  }
-  getResult(rows) {
-    return _nullishCoalesce(rows, () => ( null));
-  }
-  query(sql, callback) {
-    this.pool.getConnection((error, connection) => {
-      if (error) {
-        callback(this.getErr(sql, error), this.getResult(null));
-        return;
-      }
-      connection.query(Sql_default.makeSql(sql), (err, rows) => {
-        try {
-          callback(this.getErr(sql, err), this.getResult(rows));
-        } finally {
-          connection.release();
-        }
-      });
-    });
-  }
-  sqlDb(sql) {
-    return promisifySqlDb(this.query.bind(this), sql);
-  }
-  /** 关闭连接池，释放所有连接 */
-  close(callback) {
-    this.pool.end(callback);
-  }
-  /** 表不存在时自动创建数据库与表（需 config.create 为 true） */
-  createTable(sql) {
-    if (!this.config.create) return;
-    const conn = _mysql2.default.createConnection({
-      host: this.config.host,
-      user: this.config.user,
-      password: this.config.password
-    });
-    conn.connect((err) => {
-      if (err) {
-        conn.end();
-        return;
-      }
-      conn.query(`CREATE DATABASE IF NOT EXISTS ${this.config.database};`, (dbErr) => {
-        if (dbErr) {
-          conn.end();
-          return;
-        }
-        this.pool = _mysql2.default.createPool(this.config);
-        this.pool.getConnection((poolErr, connection) => {
-          if (poolErr || !connection) {
-            conn.end();
-            return;
-          }
-          connection.query(Sql_default.createSql(sql, "mysql"), () => {
-            connection.release();
-            conn.end();
-          });
-        });
-      });
-    });
-  }
-};
-var Index_default2 = DbMySQL;
-
-// src/sysserver/db/src/sqlite/Index.ts
-
-
-var _sqlite3 = require('sqlite3'); var _sqlite32 = _interopRequireDefault(_sqlite3);
-var sqlite3 = _nullishCoalesce(_sqlite32.default.default, () => ( _sqlite32.default));
-var DEFAULT_BUSY_TIMEOUT_MS = 1e4;
-var DEFAULT_ACQUIRE_TIMEOUT_MS = 15e3;
-function configureSqliteConnection(db, busyTimeoutMs = DEFAULT_BUSY_TIMEOUT_MS) {
-  const busyMs = Math.max(0, Math.floor(busyTimeoutMs));
-  return new Promise((resolve7, reject) => {
-    db.serialize(() => {
-      db.run("PRAGMA journal_mode = WAL");
-      db.run(`PRAGMA busy_timeout = ${busyMs}`);
-      db.run("PRAGMA synchronous = NORMAL", (err) => {
-        if (err) reject(err);
-        else resolve7();
-      });
-    });
-  });
-}
-_chunkSMVZ3ZDJcjs.__name.call(void 0, configureSqliteConnection, "configureSqliteConnection");
-var PooledConnection = class _PooledConnection {
-  static {
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "PooledConnection");
-  }
-  // 连接是否有效
-  constructor(db, config) {
-    this.db = db;
-    this.config = config;
-    this.lastUsed = Date.now();
-    this.inUse = false;
-    this.isValid = true;
-  }
-  /**
-   * 异步创建连接，确保目录存在并打开数据库
-   */
-  static async create(config) {
-    function dbLog(...args) {
-      (_optionalChain([config, 'optionalAccess', _617 => _617.$asai, 'optionalAccess', _618 => _618.$log]) || console.log)("SQLITE", ...args);
-    }
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, dbLog, "dbLog");
-    const absolutePath = path6.resolve(config.database);
-    const dir = path6.dirname(absolutePath);
-    if (!fs11.existsSync(dir)) {
-      fs11.mkdirSync(dir, { recursive: true });
-      dbLog("MKDIR", dir);
-    }
-    return new Promise((resolve7, reject) => {
-      const db = new sqlite3.Database(absolutePath, sqlite3.OPEN_READWRITE | sqlite3.OPEN_CREATE, async (err) => {
-        if (err) {
-          dbLog("open failed", "[ERROR] Failed to open database:", absolutePath, err.message);
-          reject(err);
-          return;
-        }
-        try {
-          await configureSqliteConnection(db, _nullishCoalesce(config.busyTimeout, () => ( DEFAULT_BUSY_TIMEOUT_MS)));
-          dbLog("OPEN", absolutePath);
-          resolve7(new _PooledConnection(db, config));
-        } catch (pragmaErr) {
-          db.close(() => {
-          });
-          reject(pragmaErr);
-        }
-      });
-    });
-  }
-  /** 测试连接是否有效（执行 SELECT 1） */
-  async test() {
-    return new Promise((resolve7) => {
-      if (!this.isValid) return resolve7(false);
-      this.db.get("SELECT 1", (err) => {
-        this.isValid = !err;
-        resolve7(this.isValid);
-      });
-    });
-  }
-  /** 关闭连接 */
-  async close() {
-    return new Promise((resolve7, reject) => {
-      this.db.close((err) => {
-        if (err) reject(err);
-        else resolve7();
-      });
-    });
-  }
-  /** 标记连接为无效 */
-  invalidate() {
-    this.isValid = false;
-  }
-};
-var SQLitePool = class {
-  // 初始化完成 Promise
-  constructor(config) {
-    this.pool = [];
-    this.waitingQueue = [];
-    this.idleCheckerTimer = null;
-    this.isDestroyed = false;
-    this.config = {
-      database: config.database,
-      poolMin: _nullishCoalesce(config.poolMin, () => ( 1)),
-      poolMax: _nullishCoalesce(config.poolMax, () => ( 1)),
-      idleTimeout: _nullishCoalesce(config.idleTimeout, () => ( 3e4)),
-      acquireTimeout: _nullishCoalesce(config.acquireTimeout, () => ( DEFAULT_ACQUIRE_TIMEOUT_MS)),
-      busyTimeout: _nullishCoalesce(config.busyTimeout, () => ( DEFAULT_BUSY_TIMEOUT_MS)),
-      enableCreateTable: _nullishCoalesce(config.enableCreateTable, () => ( true)),
-      $asai: _nullishCoalesce(config.$asai, () => ( null))
-    };
-    this.initPromise = this.initializePool();
-    this.startIdleChecker();
-  }
-  static {
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "SQLitePool");
-  }
-  /** 统一日志输出（前缀 ♣ 标识来自 SQLite 连接池模块） */
-  dbLog(...args) {
-    (_optionalChain([this, 'access', _619 => _619.config, 'optionalAccess', _620 => _620.$asai, 'optionalAccess', _621 => _621.$log]) || console.log)("sqlite", ...args);
-  }
-  /** 初始化连接池，创建最小连接数 */
-  async initializePool() {
-    const promises = [];
-    for (let i = 0; i < this.config.poolMin; i++) {
-      promises.push(this.createConnection());
-    }
-    const results = await Promise.allSettled(promises);
-    const successCount = results.filter((r) => r.status === "fulfilled").length;
-    if (successCount === 0) {
-      this.dbLog("Initialization failed", "[POOL] Initialization failed: no connections created");
-    } else {
-      this.dbLog("Initialized", "[POOL] Initialized, size:", this.pool.length);
+    constructor(config) {
+      this.config = config;
+      this.fileExt = config.ext === ".*" ? "" : config.ext || "";
+      this.fileDel = (config.del || 0) !== 0;
+      this.createDir = config.create || false;
+      this.baseDirAbs = path6.resolve(process.cwd(), config.dir);
     }
-  }
-  /** 创建一个新连接并加入池中 */
-  async createConnection() {
-    if (this.pool.length >= this.config.poolMax) return;
-    try {
-      const conn = await PooledConnection.create(this.config);
-      const isValid = await conn.test();
-      if (isValid) {
-        this.pool.push(conn);
-      } else {
-        await conn.close().catch(() => {
-        });
-        throw new Error("Connection test failed");
-      }
-    } catch (err) {
-      this.dbLog("Database create failed", "[CONN] Failed to create connection:", err.message);
-      throw err;
+    dbLog(...args) {
+      (_optionalChain([this, 'access', _644 => _644.config, 'optionalAccess', _645 => _645.$asai, 'optionalAccess', _646 => _646.$log]) || console.log)("FILE", ...args);
     }
-  }
-  /**
-   * 获取一个可用连接
-   * - 优先返回空闲连接
-   * - 若连接数未达上限则创建新连接
-   * - 否则进入等待队列
-   */
-  async acquire() {
-    await this.initPromise;
-    if (this.isDestroyed) {
-      throw new Error("Pool has been destroyed");
+    checkFile(file) {
+      return fs11.existsSync(this.getAbsPath(file, false));
     }
-    const now = Date.now();
-    const staleCheckMs = Math.min(this.config.idleTimeout, 5e3);
-    for (const conn of this.pool) {
-      if (!conn.inUse) {
-        if (now - conn.lastUsed > staleCheckMs) {
-          const isValid = await conn.test();
-          if (!isValid) {
-            this.removeConnection(conn);
-            continue;
-          }
-        }
-        conn.inUse = true;
-        conn.lastUsed = now;
-        return conn;
+    /** 解析相对路径并限制在数据根目录内，防止路径穿越（跨平台） */
+    resolvePath(relPath) {
+      if (!relPath) {
+        return this.baseDirAbs;
       }
-    }
-    if (this.pool.length < this.config.poolMax) {
-      try {
-        const conn = await PooledConnection.create(this.config);
-        const isValid = await conn.test();
-        if (isValid) {
-          conn.inUse = true;
-          conn.lastUsed = Date.now();
-          this.pool.push(conn);
-          return conn;
-        } else {
-          await conn.close().catch(() => {
-          });
-        }
-      } catch (e) {
-        this.dbLog("create failed", "[ACQUIRE] Failed to create new connection, waiting:", e.message);
+      const abs = path6.isAbsolute(relPath) ? path6.normalize(relPath) : path6.resolve(this.baseDirAbs, relPath);
+      if (!isPathInside2(this.baseDirAbs, abs)) {
+        return this.baseDirAbs;
       }
+      return abs;
     }
-    return new Promise((resolve7, reject) => {
-      const timer = setTimeout(() => {
-        const idx = this.waitingQueue.findIndex((item) => item.timer === timer);
-        if (idx !== -1) {
-          this.waitingQueue.splice(idx, 1);
-        }
-        reject(new Error(`Acquire timeout (${this.config.acquireTimeout}ms)`));
-      }, this.config.acquireTimeout);
-      this.waitingQueue.push({ resolve: resolve7, reject, timer });
-    });
-  }
-  /** 释放连接回池中 */
-  release(conn) {
-    if (!conn) return;
-    conn.inUse = false;
-    conn.lastUsed = Date.now();
-    if (this.waitingQueue.length > 0) {
-      const next = this.waitingQueue.shift();
-      clearTimeout(next.timer);
-      conn.inUse = true;
-      conn.lastUsed = Date.now();
-      next.resolve(conn);
-    }
-  }
-  /** 从池中移除并关闭指定连接 */
-  removeConnection(conn) {
-    const index = this.pool.indexOf(conn);
-    if (index !== -1) {
-      this.pool.splice(index, 1);
-      conn.close().catch(() => {
-      });
+    /** 将 table 与文件名片段拼为平台无关相对路径 */
+    tableFilePath(table, ...segments) {
+      return joinTablePath2(table, ...segments);
     }
-  }
-  /** 启动空闲连接回收定时器（每 60 秒检查一次） */
-  startIdleChecker() {
-    this.idleCheckerTimer = setInterval(async () => {
-      if (this.isDestroyed) return;
-      const now = Date.now();
-      const toRemove = [];
-      for (const conn of this.pool) {
-        if (!conn.inUse && now - conn.lastUsed > this.config.idleTimeout && this.pool.length > this.config.poolMin) {
-          toRemove.push(conn);
-        }
-      }
-      for (const conn of toRemove) {
-        this.removeConnection(conn);
-      }
-      if (toRemove.length > 0) {
-        this.dbLog("Reclaimed", "[IDLE] Reclaimed", toRemove.length, "idle connections, current pool size:", this.pool.length);
+    normalizeRelPath(relPath) {
+      if (!relPath) {
+        return "";
       }
-    }, 6e4);
-  }
-  /** 获取连接池当前状态 */
-  getStatus() {
-    const inUse = this.pool.filter((c) => c.inUse).length;
-    return {
-      total: this.pool.length,
-      inUse,
-      idle: this.pool.length - inUse,
-      waiting: this.waitingQueue.length,
-      min: this.config.poolMin,
-      max: this.config.poolMax
-    };
-  }
-  /** 销毁连接池，释放所有资源 */
-  async destroy() {
-    if (this.isDestroyed) return;
-    this.isDestroyed = true;
-    if (this.idleCheckerTimer) {
-      clearInterval(this.idleCheckerTimer);
-      this.idleCheckerTimer = null;
+      return path6.isAbsolute(relPath) ? path6.relative(this.baseDirAbs, relPath) : relPath;
     }
-    for (const waiter of this.waitingQueue) {
-      clearTimeout(waiter.timer);
-      waiter.reject(new Error("Pool has been closed"));
+    ensureDir(relPath) {
+      const relative4 = this.normalizeRelPath(relPath);
+      const dirPath = path6.dirname(relative4);
+      const absDir = this.resolvePath(dirPath === "." ? "" : dirPath);
+      if (this.createDir && !fs11.existsSync(absDir)) {
+        this.dbLog("mkdir", "[MKDIR]", absDir);
+        fs11.mkdirSync(absDir, { recursive: true });
+      }
+      return absDir;
     }
-    this.waitingQueue = [];
-    await Promise.allSettled(this.pool.map((conn) => conn.close()));
-    this.pool = [];
-    this.dbLog("Destroyed", "[POOL] Destroyed");
-  }
-};
-var DbSQLite3 = class {
-  constructor(config) {
-    this.pool = null;
-    this.singleDb = null;
-    this.singleDbReady = null;
-    /** 串行化同库 CRUD，避免 node-sqlite3 回调并发导致锁等待与连接泄漏 */
-    this.opChain = Promise.resolve();
-    this.config = config;
-    const verbose = sqlite3.verbose();
-    if (config.usePool === true) {
-      this.pool = new SQLitePool({
-        database: config.database,
-        poolMin: _nullishCoalesce(config.poolMin, () => ( 1)),
-        poolMax: _nullishCoalesce(config.poolMax, () => ( 1)),
-        idleTimeout: config.idleTimeout,
-        acquireTimeout: _nullishCoalesce(config.acquireTimeout, () => ( DEFAULT_ACQUIRE_TIMEOUT_MS)),
-        busyTimeout: _nullishCoalesce(config.busyTimeout, () => ( DEFAULT_BUSY_TIMEOUT_MS)),
-        enableCreateTable: config.create,
-        $asai: config.$asai
-      });
-    } else {
-      this.singleDbReady = this.initSingleConnection(config.database, verbose);
+    getAbsPath(file, autoCreateDir = true) {
+      let rel = file;
+      if (this.fileExt && !rel.endsWith(this.fileExt)) {
+        rel += this.fileExt;
+      }
+      if (autoCreateDir) {
+        this.ensureDir(rel);
+      }
+      return this.resolvePath(rel);
     }
-  }
-  static {
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "DbSQLite3");
-  }
-  runSerialized(task) {
-    const run = this.opChain.then(() => task());
-    this.opChain = run.then(
-      () => void 0,
-      () => void 0
-    );
-    return run;
-  }
-  dbLog(...args) {
-    (_optionalChain([this, 'access', _622 => _622.config, 'optionalAccess', _623 => _623.$asai, 'optionalAccess', _624 => _624.$log]) || console.log)("sqlite", ...args);
-  }
-  async initSingleConnection(databasePath, verbose) {
-    const absolutePath = path6.resolve(databasePath);
-    const dir = path6.dirname(absolutePath);
-    if (!fs11.existsSync(dir)) {
-      fs11.mkdirSync(dir, { recursive: true });
-      this.dbLog("mkdir", "[MKDIR]", dir);
-    }
-    return new Promise((resolve7, reject) => {
-      this.singleDb = new verbose.Database(absolutePath, sqlite3.OPEN_READWRITE | sqlite3.OPEN_CREATE, async (err) => {
-        if (err) {
-          this.dbLog("open failed", "[ERROR] Failed to open single connection:", absolutePath, err.message);
-          reject(err);
-          return;
-        }
-        try {
-          await configureSqliteConnection(this.singleDb, _nullishCoalesce(this.config.busyTimeout, () => ( DEFAULT_BUSY_TIMEOUT_MS)));
-          this.dbLog("open", "[OPEN] Single connection:", absolutePath);
-          resolve7();
-        } catch (pragmaErr) {
-          this.singleDb.close(() => {
-          });
-          reject(pragmaErr);
-        }
-      });
-    });
-  }
-  getErr(_sql, err) {
-    return _optionalChain([err, 'optionalAccess', _625 => _625.message]) || null;
-  }
-  getResult(rows) {
-    return _nullishCoalesce(rows, () => ( "OK"));
-  }
-  /**
-   * 执行 SQL 查询（回调风格）
-   */
-  query(sql, callback) {
-    const sqlStr = Sql_default.makeSql(sql);
-    const executeQuery = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (db, release) => {
-      const finish = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (err, rows) => {
-        _optionalChain([release, 'optionalCall', _626 => _626()]);
-        callback(this.getErr(sql, err), this.getResult(rows));
-      }, "finish");
-      try {
-        if (sql.type === "select") {
-          db.all(sqlStr, finish);
+    deldir(relativePath) {
+      const absPath = this.resolvePath(relativePath);
+      if (!fs11.existsSync(absPath)) {
+        return;
+      }
+      this.dbLog("delete", "[RMDIR]", absPath);
+      const entries = fs11.readdirSync(absPath, { withFileTypes: true });
+      for (const entry of entries) {
+        const current = path6.join(absPath, entry.name);
+        if (entry.isDirectory()) {
+          this.deldir(path6.join(relativePath, entry.name));
         } else {
-          db.run(sqlStr, (err) => {
-            finish(err, "OK");
-          });
+          this.dbLog("delete", "[UNLINK]", current);
+          fs11.unlinkSync(current);
         }
-      } catch (e) {
-        _optionalChain([release, 'optionalCall', _627 => _627()]);
-        callback(this.getErr(sql, e), this.getResult("sql error"));
-      }
-    }, "executeQuery");
-    if (this.pool) {
-      this.pool.acquire().then((conn) => {
-        executeQuery(conn.db, () => this.pool.release(conn));
-      }).catch((err) => {
-        callback(this.getErr(sql, err), this.getResult("pool error"));
-      });
-    } else {
-      (this.singleDbReady || Promise.resolve()).then(() => {
-        executeQuery(this.singleDb);
-      }).catch((err) => {
-        callback(this.getErr(sql, err), this.getResult("connection error"));
-      });
-    }
-  }
-  /** 执行 SQL 操作（Promise 风格，串行 + 缺表时自动建表并重试一次） */
-  sqlDb(sql) {
-    return this.runSerialized(() => this.executeSqlDb(sql));
-  }
-  async executeSqlDb(sql) {
-    try {
-      return await promisifySqlDb(this.query.bind(this), sql);
-    } catch (err) {
-      const errObj = { message: String(_optionalChain([err, 'optionalAccess', _628 => _628.message]) || err || "") };
-      if (this.config.create && sql.type === "insert" && isTableMissingError(errObj)) {
-        await this.createTable(sql);
-        return promisifySqlDb(this.query.bind(this), sql);
-      }
-      throw err;
-    }
-  }
-  /**
-   * 自动建表（当表不存在时触发）
-   */
-  async createTable(sql) {
-    const createSql = Sql_default.createSql(sql, "sqlite");
-    if (!createSql) return;
-    if (this.pool) {
-      let conn = null;
-      try {
-        conn = await this.pool.acquire();
-        await new Promise((resolve7, reject) => {
-          conn.db.run(createSql, (err) => {
-            if (err) reject(err);
-            else resolve7();
-          });
-        });
-        this.dbLog("Created", "[TABLE] Created:", createSql);
-      } catch (e) {
-        this.dbLog("Creation failed", "[TABLE] Creation failed:", e);
-      } finally {
-        if (conn) this.pool.release(conn);
       }
-    } else {
-      await this.singleDbReady;
-      await new Promise((resolve7, reject) => {
-        this.singleDb.run(createSql, (err) => {
-          if (err) reject(err);
-          else resolve7();
-        });
-      });
+      fs11.rmdirSync(absPath);
     }
-  }
-  /** 获取连接池状态（仅连接池模式有效） */
-  getPoolStatus() {
-    if (this.pool) {
-      return this.pool.getStatus();
-    }
-    return { mode: "single-connection" };
-  }
-  /** 关闭所有连接 */
-  async close() {
-    if (this.pool) {
-      await this.pool.destroy();
-    } else if (this.singleDb) {
-      await new Promise((resolve7, reject) => {
-        this.singleDb.close((err) => {
-          if (err) reject(err);
-          else resolve7();
-        });
-      });
-    }
-  }
-};
-var Index_default3 = DbSQLite3;
-
-// src/sysserver/db/src/file/Index.ts
-
-
-var DbFile = class {
-  static {
-    _chunkSMVZ3ZDJcjs.__name.call(void 0, this, "DbFile");
-  }
-  constructor(config) {
-    this.config = config;
-    this.fileExt = config.ext === ".*" ? "" : config.ext || "";
-    this.fileDel = (config.del || 0) !== 0;
-    this.createDir = config.create || false;
-    this.baseDirAbs = path7.resolve(process.cwd(), config.dir);
-  }
-  dbLog(...args) {
-    (_optionalChain([this, 'access', _629 => _629.config, 'optionalAccess', _630 => _630.$asai, 'optionalAccess', _631 => _631.$log]) || console.log)("FILE", ...args);
-  }
-  checkFile(file) {
-    return fs12.existsSync(this.getAbsPath(file, false));
-  }
-  /** 解析相对路径并限制在数据根目录内，防止路径穿越（跨平台） */
-  resolvePath(relPath) {
-    if (!relPath) {
-      return this.baseDirAbs;
-    }
-    const abs = path7.isAbsolute(relPath) ? path7.normalize(relPath) : path7.resolve(this.baseDirAbs, relPath);
-    if (!isPathInside(this.baseDirAbs, abs)) {
-      return this.baseDirAbs;
-    }
-    return abs;
-  }
-  /** 将 table 与文件名片段拼为平台无关相对路径 */
-  tableFilePath(table, ...segments) {
-    return joinTablePath(table, ...segments);
-  }
-  normalizeRelPath(relPath) {
-    if (!relPath) {
-      return "";
-    }
-    return path7.isAbsolute(relPath) ? path7.relative(this.baseDirAbs, relPath) : relPath;
-  }
-  ensureDir(relPath) {
-    const relative4 = this.normalizeRelPath(relPath);
-    const dirPath = path7.dirname(relative4);
-    const absDir = this.resolvePath(dirPath === "." ? "" : dirPath);
-    if (this.createDir && !fs12.existsSync(absDir)) {
-      this.dbLog("mkdir", "[MKDIR]", absDir);
-      fs12.mkdirSync(absDir, { recursive: true });
-    }
-    return absDir;
-  }
-  getAbsPath(file, autoCreateDir = true) {
-    let rel = file;
-    if (this.fileExt && !rel.endsWith(this.fileExt)) {
-      rel += this.fileExt;
-    }
-    if (autoCreateDir) {
-      this.ensureDir(rel);
-    }
-    return this.resolvePath(rel);
-  }
-  deldir(relativePath) {
-    const absPath = this.resolvePath(relativePath);
-    if (!fs12.existsSync(absPath)) {
-      return;
-    }
-    this.dbLog("delete", "[RMDIR]", absPath);
-    const entries = fs12.readdirSync(absPath, { withFileTypes: true });
-    for (const entry of entries) {
-      const current = path7.join(absPath, entry.name);
-      if (entry.isDirectory()) {
-        this.deldir(path7.join(relativePath, entry.name));
+    getReadPath(file, sql) {
+      const candidates = [];
+      if (_optionalChain([sql, 'optionalAccess', _647 => _647.filename])) {
+        candidates.push({ dir: path6.join(file, sql.filename) });
+        candidates.push({ dir: path6.join(file + ".delete" + this.fileExt, sql.filename) });
       } else {
-        this.dbLog("delete", "[UNLINK]", current);
-        fs12.unlinkSync(current);
+        candidates.push({ dir: file });
+        candidates.push({ dir: file + this.fileExt + ".delete" });
       }
-    }
-    fs12.rmdirSync(absPath);
-  }
-  getReadPath(file, sql) {
-    const candidates = [];
-    if (_optionalChain([sql, 'optionalAccess', _632 => _632.filename])) {
-      candidates.push({ dir: path7.join(file, sql.filename) });
-      candidates.push({ dir: path7.join(file + ".delete" + this.fileExt, sql.filename) });
-    } else {
-      candidates.push({ dir: file });
-      candidates.push({ dir: file + this.fileExt + ".delete" });
-    }
-    for (const candidate of candidates) {
-      const abs = this.getAbsPath(candidate.dir, false);
-      if (fs12.existsSync(abs)) {
-        return { path: abs, dir: candidate.dir };
+      for (const candidate of candidates) {
+        const abs = this.getAbsPath(candidate.dir, false);
+        if (fs11.existsSync(abs)) {
+          return { path: abs, dir: candidate.dir };
+        }
       }
+      return { path: "", dir: "" };
     }
-    return { path: "", dir: "" };
-  }
-  getDelPath(file, sql) {
-    const read2 = this.getReadPath(file, sql);
-    if (!read2.path) {
-      return { path: "", dir: read2.dir };
-    }
-    if (_optionalChain([sql, 'optionalAccess', _633 => _633.filename])) {
-      return { path: path7.dirname(read2.path), dir: path7.dirname(read2.dir) };
-    }
-    return { path: read2.path, dir: read2.dir };
-  }
-  getNewPath(file, sql) {
-    if (_optionalChain([sql, 'optionalAccess', _634 => _634.filename])) {
-      return this.getAbsPath(path7.join(file, sql.filename), true);
-    }
-    return this.getAbsPath(file, true);
-  }
-  write(file, data, sql) {
-    try {
-      const filePath = _optionalChain([sql, 'optionalAccess', _635 => _635.type]) === "insert" ? this.getNewPath(file, sql) : this.getReadPath(file, sql).path || this.getNewPath(file, sql);
-      this.dbLog("write", "[WRITE]", filePath);
-      fs12.writeFileSync(filePath, data, "utf8");
-      return "ok";
-    } catch (e) {
-      this.dbLog("write failed", "[WRITE ERROR]", e);
-      return e;
-    }
-  }
-  read(file, sql, encoding = "utf8") {
-    try {
+    getDelPath(file, sql) {
       const read2 = this.getReadPath(file, sql);
       if (!read2.path) {
-        return { error: "empty" };
+        return { path: "", dir: read2.dir };
+      }
+      if (_optionalChain([sql, 'optionalAccess', _648 => _648.filename])) {
+        return { path: path6.dirname(read2.path), dir: path6.dirname(read2.dir) };
       }
-      this.dbLog("read", "[READ]", read2.path);
-      const data = fs12.readFileSync(read2.path, { encoding }) || "";
-      const fileName = this.fileExt && read2.dir.endsWith(this.fileExt) ? read2.dir : read2.dir + this.fileExt;
-      return [{ data, file: fileName }];
-    } catch (e) {
-      this.dbLog("read failed", "[READ ERROR]", e);
-      return e;
+      return { path: read2.path, dir: read2.dir };
     }
-  }
-  del(file, sql) {
-    try {
-      const del = this.getDelPath(file, sql);
-      if (!del.path) {
-        return "";
+    getNewPath(file, sql) {
+      if (_optionalChain([sql, 'optionalAccess', _649 => _649.filename])) {
+        return this.getAbsPath(path6.join(file, sql.filename), true);
       }
-      if (this.fileDel && _optionalChain([sql, 'optionalAccess', _636 => _636.deltrue])) {
-        const target = del.path + ".delete" + this.fileExt;
-        this.dbLog("soft delete", "[SOFT DELETE]", `${del.path} -> ${target}`);
-        fs12.renameSync(del.path, target);
-      } else if (_optionalChain([sql, 'optionalAccess', _637 => _637.filename])) {
-        this.deldir(del.dir);
-      } else {
-        this.dbLog("delete", "[DELETE]", del.path);
-        fs12.unlinkSync(del.path);
+      return this.getAbsPath(file, true);
+    }
+    write(file, data, sql) {
+      try {
+        const filePath = _optionalChain([sql, 'optionalAccess', _650 => _650.type]) === "insert" ? this.getNewPath(file, sql) : this.getReadPath(file, sql).path || this.getNewPath(file, sql);
+        this.dbLog("write", "[WRITE]", filePath);
+        fs11.writeFileSync(filePath, data, "utf8");
+        return "ok";
+      } catch (e) {
+        this.dbLog("write failed", "[WRITE ERROR]", e);
+        return e;
       }
-      return "ok";
-    } catch (e) {
-      this.dbLog("delete failed", "[DELETE ERROR]", e);
-      return e;
     }
-  }
-  re(file, sql) {
-    try {
-      const del = this.getDelPath(file, sql);
-      if (!del.path) {
-        return "";
+    read(file, sql, encoding = "utf8") {
+      try {
+        const read2 = this.getReadPath(file, sql);
+        if (!read2.path) {
+          return { error: "empty" };
+        }
+        this.dbLog("read", "[READ]", read2.path);
+        const data = fs11.readFileSync(read2.path, { encoding }) || "";
+        const fileName = this.fileExt && read2.dir.endsWith(this.fileExt) ? read2.dir : read2.dir + this.fileExt;
+        return [{ data, file: fileName }];
+      } catch (e) {
+        this.dbLog("read failed", "[READ ERROR]", e);
+        return e;
       }
-      if (this.fileDel) {
-        const extPattern = this.fileExt ? this.fileExt.replace(/\./g, "\\.") : "";
-        const original = del.path.replace(new RegExp(`.delete${extPattern}$`), "");
-        if (original !== del.path) {
-          this.dbLog("restore", "[RESTORE]", `${del.path} -> ${original}`);
-          fs12.renameSync(del.path, original);
+    }
+    del(file, sql) {
+      try {
+        const del = this.getDelPath(file, sql);
+        if (!del.path) {
+          return "";
         }
-      } else {
-        this.dbLog("force delete", "[FORCE DELETE]", del.path);
-        fs12.unlinkSync(del.path);
+        if (this.fileDel && _optionalChain([sql, 'optionalAccess', _651 => _651.deltrue])) {
+          const target = del.path + ".delete" + this.fileExt;
+          this.dbLog("soft delete", "[SOFT DELETE]", `${del.path} -> ${target}`);
+          fs11.renameSync(del.path, target);
+        } else if (_optionalChain([sql, 'optionalAccess', _652 => _652.filename])) {
+          this.deldir(del.dir);
+        } else {
+          this.dbLog("delete", "[DELETE]", del.path);
+          fs11.unlinkSync(del.path);
+        }
+        return "ok";
+      } catch (e) {
+        this.dbLog("delete failed", "[DELETE ERROR]", e);
+        return e;
       }
-      return "ok";
-    } catch (e) {
-      this.dbLog("restore failed", "[RESTORE ERROR]", e);
-      return e;
     }
-  }
-  list(dir, sql) {
-    try {
-      const absDir = this.resolvePath(dir);
-      this.dbLog("list", "[LIST]", absDir);
-      let entries;
+    re(file, sql) {
       try {
-        entries = fs12.readdirSync(absDir, { withFileTypes: true });
-      } catch (e40) {
-        return _optionalChain([sql, 'optionalAccess', _638 => _638.list]) ? { open: [], delete: [] } : [];
+        const del = this.getDelPath(file, sql);
+        if (!del.path) {
+          return "";
+        }
+        if (this.fileDel) {
+          const extPattern = this.fileExt ? this.fileExt.replace(/\./g, "\\.") : "";
+          const original = del.path.replace(new RegExp(`.delete${extPattern}$`), "");
+          if (original !== del.path) {
+            this.dbLog("restore", "[RESTORE]", `${del.path} -> ${original}`);
+            fs11.renameSync(del.path, original);
+          }
+        } else {
+          this.dbLog("force delete", "[FORCE DELETE]", del.path);
+          fs11.unlinkSync(del.path);
+        }
+        return "ok";
+      } catch (e) {
+        this.dbLog("restore failed", "[RESTORE ERROR]", e);
+        return e;
       }
-      const result = { open: [], delete: [] };
-      const deleteSuffix = ".delete" + this.fileExt;
-      for (const entry of entries) {
-        if (!entry.isFile()) continue;
-        const fileName = entry.name;
-        const isDelete = fileName.endsWith(deleteSuffix);
-        const baseName = isDelete ? fileName.slice(0, -deleteSuffix.length) : fileName;
-        if (this.fileExt && !baseName.endsWith(this.fileExt)) continue;
-        const fullPath = path7.join(absDir, fileName);
+    }
+    list(dir, sql) {
+      try {
+        const absDir = this.resolvePath(dir);
+        this.dbLog("list", "[LIST]", absDir);
+        let entries;
         try {
-          const data = fs12.readFileSync(fullPath, "utf8");
-          const entryData = { data, file: baseName };
-          if (isDelete) {
-            if (_optionalChain([sql, 'optionalAccess', _639 => _639.list])) result.delete.push(entryData);
-          } else {
-            result.open.push(entryData);
+          entries = fs11.readdirSync(absDir, { withFileTypes: true });
+        } catch (e48) {
+          return _optionalChain([sql, 'optionalAccess', _653 => _653.list]) ? { open: [], delete: [] } : [];
+        }
+        const result = { open: [], delete: [] };
+        const deleteSuffix = ".delete" + this.fileExt;
+        for (const entry of entries) {
+          if (!entry.isFile()) continue;
+          const fileName = entry.name;
+          const isDelete = fileName.endsWith(deleteSuffix);
+          const baseName = isDelete ? fileName.slice(0, -deleteSuffix.length) : fileName;
+          if (this.fileExt && !baseName.endsWith(this.fileExt)) continue;
+          const fullPath = path6.join(absDir, fileName);
+          try {
+            const data = fs11.readFileSync(fullPath, "utf8");
+            const entryData = { data, file: baseName };
+            if (isDelete) {
+              if (_optionalChain([sql, 'optionalAccess', _654 => _654.list])) result.delete.push(entryData);
+            } else {
+              result.open.push(entryData);
+            }
+          } catch (e49) {
           }
-        } catch (e41) {
         }
+        return _optionalChain([sql, 'optionalAccess', _655 => _655.list]) ? result : result.open;
+      } catch (e) {
+        this.dbLog("list failed", "[LIST ERROR]", e);
+        return e;
       }
-      return _optionalChain([sql, 'optionalAccess', _640 => _640.list]) ? result : result.open;
-    } catch (e) {
-      this.dbLog("list failed", "[LIST ERROR]", e);
-      return e;
     }
-  }
-  /** 从 where 首条条件中提取文件名（去掉 SQL 风格引号） */
-  getFileNameFromWhere(where) {
-    if (!where || !Array.isArray(where)) return "";
-    const first = where.find((item) => Array.isArray(item));
-    const raw = _optionalChain([first, 'optionalAccess', _641 => _641[2]]);
-    if (typeof raw === "string") {
-      return raw.replace(/^'+|'+$/g, "");
+    /** 从 where 首条条件中提取文件名（去掉 SQL 风格引号） */
+    getFileNameFromWhere(where) {
+      if (!where || !Array.isArray(where)) return "";
+      const first = where.find((item) => Array.isArray(item));
+      const raw = _optionalChain([first, 'optionalAccess', _656 => _656[2]]);
+      if (typeof raw === "string") {
+        return raw.replace(/^'+|'+$/g, "");
+      }
+      return String(_nullishCoalesce(raw, () => ( "")));
     }
-    return String(_nullishCoalesce(raw, () => ( "")));
-  }
-  sqlDb(sql) {
-    return new Promise((resolve7, reject) => {
-      try {
-        let result;
-        const tableDir = this.tableFilePath(sql.table);
-        if (sql.type === "insert") {
-          const [file, data] = sql.value[0];
-          result = this.write(this.tableFilePath(sql.table, file), data, sql);
-        } else if (sql.type === "delete") {
-          const file = this.getFileNameFromWhere(sql.where);
-          result = this.del(this.tableFilePath(sql.table, file), sql);
-        } else if (sql.type === "re") {
-          const file = this.getFileNameFromWhere(sql.where);
-          result = this.re(this.tableFilePath(sql.table, file), sql);
-        } else if (sql.type === "update") {
-          const file = this.getFileNameFromWhere(sql.where);
-          const data = sql.set[0][1];
-          result = this.write(this.tableFilePath(sql.table, file), data, sql);
-        } else if (sql.type === "select") {
-          if (_optionalChain([sql, 'optionalAccess', _642 => _642.where, 'optionalAccess', _643 => _643.length]) && _optionalChain([sql, 'optionalAccess', _644 => _644.as]) !== 2) {
+    sqlDb(sql) {
+      return new Promise((resolve6, reject) => {
+        try {
+          let result;
+          const tableDir = this.tableFilePath(sql.table);
+          if (sql.type === "insert") {
+            const [file, data] = sql.value[0];
+            result = this.write(this.tableFilePath(sql.table, file), data, sql);
+          } else if (sql.type === "delete") {
             const file = this.getFileNameFromWhere(sql.where);
-            const readRes = this.read(this.tableFilePath(sql.table, file), sql);
-            const resObj = {};
-            if (_optionalChain([readRes, 'optionalAccess', _645 => _645[0], 'optionalAccess', _646 => _646.file]) && !readRes.error) {
-              if (sql.as === 1) {
-                try {
-                  const parsed = JSON.parse(readRes[0].data);
-                  if (_optionalChain([sql, 'access', _647 => _647.field, 'optionalAccess', _648 => _648.length])) {
-                    sql.field.forEach((f) => {
-                      resObj[f] = _nullishCoalesce(parsed[f], () => ( ""));
-                    });
-                  } else {
-                    Object.assign(resObj, parsed);
+            result = this.del(this.tableFilePath(sql.table, file), sql);
+          } else if (sql.type === "re") {
+            const file = this.getFileNameFromWhere(sql.where);
+            result = this.re(this.tableFilePath(sql.table, file), sql);
+          } else if (sql.type === "update") {
+            const file = this.getFileNameFromWhere(sql.where);
+            const data = sql.set[0][1];
+            result = this.write(this.tableFilePath(sql.table, file), data, sql);
+          } else if (sql.type === "select") {
+            if (_optionalChain([sql, 'optionalAccess', _657 => _657.where, 'optionalAccess', _658 => _658.length]) && _optionalChain([sql, 'optionalAccess', _659 => _659.as]) !== 2) {
+              const file = this.getFileNameFromWhere(sql.where);
+              const readRes = this.read(this.tableFilePath(sql.table, file), sql);
+              const resObj = {};
+              if (_optionalChain([readRes, 'optionalAccess', _660 => _660[0], 'optionalAccess', _661 => _661.file]) && !readRes.error) {
+                if (sql.as === 1) {
+                  try {
+                    const parsed = JSON.parse(readRes[0].data);
+                    if (_optionalChain([sql, 'access', _662 => _662.field, 'optionalAccess', _663 => _663.length])) {
+                      sql.field.forEach((f) => {
+                        resObj[f] = _nullishCoalesce(parsed[f], () => ( ""));
+                      });
+                    } else {
+                      Object.assign(resObj, parsed);
+                    }
+                  } catch (e50) {
+                  }
+                } else {
+                  const fields = sql.field;
+                  resObj[fields[0]] = readRes[0].file;
+                  if (fields[1]) {
+                    resObj[fields[1]] = readRes[0].data;
                   }
-                } catch (e42) {
-                }
-              } else {
-                const fields = sql.field;
-                resObj[fields[0]] = readRes[0].file;
-                if (fields[1]) {
-                  resObj[fields[1]] = readRes[0].data;
                 }
               }
-            }
-            result = [resObj];
-          } else {
-            const listRes = this.list(tableDir, sql);
-            if (listRes && !listRes.error) {
-              if (_optionalChain([sql, 'optionalAccess', _649 => _649.list])) {
-                const mapEntry = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (el) => {
-                  const fields = sql.field;
-                  const item = { [fields[0]]: el.file };
-                  if (fields[1]) item[fields[1]] = el.data;
-                  return item;
-                }, "mapEntry");
-                if (listRes.open) listRes.open = listRes.open.map(mapEntry);
-                if (listRes.delete) listRes.delete = listRes.delete.map(mapEntry);
-                result = listRes;
-              } else {
-                if (_optionalChain([sql, 'optionalAccess', _650 => _650.as]) === 2) {
-                  let items = listRes;
-                  if (_optionalChain([sql, 'access', _651 => _651.where, 'optionalAccess', _652 => _652.length])) {
-                    const where = sql.where;
-                    const whereType = typeof where[0] === "string" ? where[0] : "and";
-                    items = items.filter((el) => {
-                      let match = whereType === "and";
-                      for (let i = 0; i < where.length; i++) {
-                        if (typeof where[i] === "string") continue;
-                        const cond = where[i];
-                        if (!cond) continue;
-                        const field = cond[0];
-                        const searchVal = String(cond[2]).replace(/%/g, "");
-                        let fieldVal = "";
-                        try {
-                          fieldVal = _nullishCoalesce(JSON.parse(el.data)[field], () => ( ""));
-                        } catch (e43) {
+              result = [resObj];
+            } else {
+              const listRes = this.list(tableDir, sql);
+              if (listRes && !listRes.error) {
+                if (_optionalChain([sql, 'optionalAccess', _664 => _664.list])) {
+                  const mapEntry = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (el) => {
+                    const fields = sql.field;
+                    const item = { [fields[0]]: el.file };
+                    if (fields[1]) item[fields[1]] = el.data;
+                    return item;
+                  }, "mapEntry");
+                  if (listRes.open) listRes.open = listRes.open.map(mapEntry);
+                  if (listRes.delete) listRes.delete = listRes.delete.map(mapEntry);
+                  result = listRes;
+                } else {
+                  if (_optionalChain([sql, 'optionalAccess', _665 => _665.as]) === 2) {
+                    let items = listRes;
+                    if (_optionalChain([sql, 'access', _666 => _666.where, 'optionalAccess', _667 => _667.length])) {
+                      const where = sql.where;
+                      const whereType = typeof where[0] === "string" ? where[0] : "and";
+                      items = items.filter((el) => {
+                        let match = whereType === "and";
+                        for (let i = 0; i < where.length; i++) {
+                          if (typeof where[i] === "string") continue;
+                          const cond = where[i];
+                          if (!cond) continue;
+                          const field = cond[0];
+                          const searchVal = String(cond[2]).replace(/%/g, "");
+                          let fieldVal = "";
+                          try {
+                            fieldVal = _nullishCoalesce(JSON.parse(el.data)[field], () => ( ""));
+                          } catch (e51) {
+                          }
+                          const condMatch = String(fieldVal).includes(searchVal);
+                          if (whereType === "and") {
+                            match = match && condMatch;
+                            if (!match) break;
+                          } else {
+                            match = match || condMatch;
+                            if (match) break;
+                          }
                         }
-                        const condMatch = String(fieldVal).includes(searchVal);
-                        if (whereType === "and") {
-                          match = match && condMatch;
-                          if (!match) break;
+                        return match;
+                      });
+                    }
+                    items = items.map((el) => {
+                      const obj = {};
+                      try {
+                        const parsed = JSON.parse(el.data);
+                        if (_optionalChain([sql, 'access', _668 => _668.field, 'optionalAccess', _669 => _669.length])) {
+                          sql.field.forEach((f) => {
+                            obj[f] = _nullishCoalesce(parsed[f], () => ( ""));
+                          });
                         } else {
-                          match = match || condMatch;
-                          if (match) break;
+                          Object.assign(obj, parsed);
                         }
+                      } catch (e52) {
                       }
-                      return match;
+                      return obj;
                     });
-                  }
-                  items = items.map((el) => {
-                    const obj = {};
-                    try {
-                      const parsed = JSON.parse(el.data);
-                      if (_optionalChain([sql, 'access', _653 => _653.field, 'optionalAccess', _654 => _654.length])) {
-                        sql.field.forEach((f) => {
-                          obj[f] = _nullishCoalesce(parsed[f], () => ( ""));
-                        });
-                      } else {
-                        Object.assign(obj, parsed);
-                      }
-                    } catch (e44) {
+                    if (_optionalChain([sql, 'access', _670 => _670.order, 'optionalAccess', _671 => _671.length])) {
+                      const orderField = sql.order[0];
+                      const orderFieldName = typeof orderField === "string" ? orderField : orderField[0];
+                      const direction = typeof orderField === "string" ? "ASC" : String(orderField[1]).toUpperCase();
+                      items.sort((a, b) => {
+                        const valA = String(_nullishCoalesce(a[orderFieldName], () => ( "")));
+                        const valB = String(_nullishCoalesce(b[orderFieldName], () => ( "")));
+                        const cmp = valA.localeCompare(valB);
+                        return direction === "DESC" ? -cmp : cmp;
+                      });
                     }
-                    return obj;
-                  });
-                  if (_optionalChain([sql, 'access', _655 => _655.order, 'optionalAccess', _656 => _656.length])) {
-                    const orderField = sql.order[0];
-                    const orderFieldName = typeof orderField === "string" ? orderField : orderField[0];
-                    const direction = typeof orderField === "string" ? "ASC" : String(orderField[1]).toUpperCase();
-                    items.sort((a, b) => {
-                      const valA = String(_nullishCoalesce(a[orderFieldName], () => ( "")));
-                      const valB = String(_nullishCoalesce(b[orderFieldName], () => ( "")));
-                      const cmp = valA.localeCompare(valB);
-                      return direction === "DESC" ? -cmp : cmp;
-                    });
+                    result = items;
+                  } else {
+                    const fields = sql.field;
+                    result = listRes.map((el) => ({
+                      [fields[0]]: el.file,
+                      ...fields[1] ? { [fields[1]]: el.data } : {}
+                    }));
                   }
-                  result = items;
-                } else {
-                  const fields = sql.field;
-                  result = listRes.map((el) => ({
-                    [fields[0]]: el.file,
-                    ...fields[1] ? { [fields[1]]: el.data } : {}
-                  }));
                 }
+              } else {
+                result = _optionalChain([sql, 'optionalAccess', _672 => _672.list]) ? { open: [], delete: [] } : [];
               }
-            } else {
-              result = _optionalChain([sql, 'optionalAccess', _657 => _657.list]) ? { open: [], delete: [] } : [];
             }
           }
+          if (result !== void 0) {
+            resolve6(result);
+          } else {
+            reject("");
+          }
+        } catch (e) {
+          reject(e);
         }
-        if (result !== void 0) {
-          resolve7(result);
-        } else {
-          reject("");
-        }
-      } catch (e) {
-        reject(e);
-      }
-    });
+      });
+    }
   }
-};
-var Index_default4 = DbFile;
+  return DbFile;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, dbDriver, "dbDriver");
+var Index_default2 = dbDriver;
 
 // src/sysserver/db/db.ts
-var DRIVERS = {
-  mysql: Index_default2,
-  sqlite: Index_default3,
-  file: Index_default4
-};
-function initDb(type = "file", config = {}) {
-  const Driver = DRIVERS[type];
-  if (Driver) {
-    return new Driver(config);
+var BUILTIN_FILE = "file";
+function buildFileDriver() {
+  return Index_default2({ IdbType: {}, Sql: Sql_default, DbCommon: common_exports });
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, buildFileDriver, "buildFileDriver");
+function resolveDriver(type, dbDrivers) {
+  if (type === BUILTIN_FILE) {
+    return buildFileDriver();
+  }
+  const factory = dbDrivers[type];
+  if (typeof factory !== "function") {
+    return null;
   }
-  return {};
+  return factory({ IdbType: {}, Sql: Sql_default, DbCommon: common_exports });
 }
-_chunkSMVZ3ZDJcjs.__name.call(void 0, initDb, "initDb");
+_chunkSMVZ3ZDJcjs.__name.call(void 0, resolveDriver, "resolveDriver");
+var initDb = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (type = BUILTIN_FILE, config = {}, dbDrivers = {}) => {
+  let Driver = resolveDriver(type, dbDrivers);
+  if (!Driver) {
+    if (type !== BUILTIN_FILE) {
+      console.warn(
+        `[initDb] \u672A\u6CE8\u518C\u9A71\u52A8 "${type}"\uFF08\u8BF7\u5728 sysserver($asai, { db: { ${type}: driver } }) \u6302\u8F7D\uFF09\uFF0C\u5DF2\u56DE\u9000 file \u5B58\u50A8`
+      );
+    }
+    Driver = buildFileDriver();
+  }
+  return new Driver(config);
+}, "initDb");
 var db_default = initDb;
 
 // src/sysserver/index.ts
-var sysserver_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
+function sysserver($asai, opt = {}) {
   if (!$asai.$lib) $asai.$lib = {};
+  $asai.$lib = { ...lib_default, ...$asai.$lib, ...opt || {} };
   $asai.dataserver = db_default;
-  $asai.$lib = { ...lib_default, ...$asai.$lib };
-  if (!$asai.asaifs) {
-    $asai.asaifs = $asai.$lib.AsFs;
-  }
-  _optionalChain([$asai, 'access', _658 => _658.$lib, 'access', _659 => _659.ErrorCode, 'optionalAccess', _660 => _660.loadErrorCodes, 'optionalCall', _661 => _661($asai)]);
+  _optionalChain([$asai, 'access', _673 => _673.$lib, 'access', _674 => _674.ErrorCode, 'optionalAccess', _675 => _675.loadErrorCodes, 'optionalCall', _676 => _676($asai)]);
   if (!$asai.$lib.api) $asai.$lib.api = {};
   $asai.$lib.api = { ...api_default, ...$asai.$lib.api };
   if (!$asai.$lib.ws) $asai.$lib.ws = {};
   $asai.$lib.ws = { ...ws_default, ...$asai.$lib.ws };
-}, "default");
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, sysserver, "sysserver");
 
 // src/config/validate.ts
 function normalizeHostConfig(cfg) {
@@ -6306,6 +6162,12 @@ function normalizeUserStoreConfig(cfg) {
   } else if (store.type === "sqlite") {
     if (!store.opt.database) store.opt.database = "./webdata/webdb/users/users.db";
     if (store.opt.create == null) store.opt.create = 1;
+  } else if (store.type === "mysql") {
+    if (!store.opt.host) store.opt.host = "127.0.0.1";
+    if (!store.opt.user) store.opt.user = "root";
+    if (store.opt.password == null) store.opt.password = "";
+    if (!store.opt.database) store.opt.database = "asai";
+    if (store.opt.create == null) store.opt.create = 1;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeUserStoreConfig, "normalizeUserStoreConfig");
@@ -6348,7 +6210,31 @@ function normalizeDataStoresConfig(cfg) {
   if (!stores.user && cfg.userStore) {
     stores.user = { type: cfg.userStore.type || "file", opt: { ...cfg.userStore.opt || {} } };
   }
-  if (!stores.log && _optionalChain([cfg, 'access', _662 => _662.logger, 'optionalAccess', _663 => _663.store])) {
+  if (!stores.user) {
+    stores.user = {
+      type: "file",
+      opt: { dir: "webdata/webdb/users/", ext: ".json", create: 1 }
+    };
+  }
+  if (stores.user && typeof stores.user === "object") {
+    const userStore = stores.user;
+    const userType = userStore.type || "file";
+    if (!userStore.type) userStore.type = "file";
+    if (!userStore.opt || typeof userStore.opt !== "object") userStore.opt = {};
+    if (userType === "file") {
+      if (!userStore.opt.dir) userStore.opt.dir = "webdata/webdb/users/";
+      if (!userStore.opt.ext) userStore.opt.ext = ".json";
+    } else if (userType === "sqlite") {
+      if (!userStore.opt.database) userStore.opt.database = "./webdata/webdb/users/users.db";
+    } else if (userType === "mysql") {
+      if (!userStore.opt.host) userStore.opt.host = "127.0.0.1";
+      if (!userStore.opt.user) userStore.opt.user = "root";
+      if (userStore.opt.password == null) userStore.opt.password = "";
+      if (!userStore.opt.database) userStore.opt.database = "asai";
+    }
+    if (userStore.opt.create == null) userStore.opt.create = 1;
+  }
+  if (!stores.log && _optionalChain([cfg, 'access', _677 => _677.logger, 'optionalAccess', _678 => _678.store])) {
     const s = cfg.logger.store;
     stores.log = {
       type: s.type || "file",
@@ -6412,13 +6298,13 @@ function validateHostConfig(cfg) {
   if (cfg.asaisn != null) {
     errors.push("asaisn \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_ASAISN");
   }
-  if (_optionalChain([cfg, 'access', _664 => _664.aes, 'optionalAccess', _665 => _665.keybase64]) != null) {
+  if (_optionalChain([cfg, 'access', _679 => _679.aes, 'optionalAccess', _680 => _680.keybase64]) != null) {
     errors.push("aes.keybase64 \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_AES_KEYBASE64");
   }
-  if (_optionalChain([cfg, 'access', _666 => _666.httpscert, 'optionalAccess', _667 => _667.key]) != null || _optionalChain([cfg, 'access', _668 => _668.httpscert, 'optionalAccess', _669 => _669.cert]) != null) {
+  if (_optionalChain([cfg, 'access', _681 => _681.httpscert, 'optionalAccess', _682 => _682.key]) != null || _optionalChain([cfg, 'access', _683 => _683.httpscert, 'optionalAccess', _684 => _684.cert]) != null) {
     errors.push("httpscert.key/cert \u7981\u6B62\u5185\u8054\u4E8E asaihost.json\uFF0C\u8BF7\u4F7F\u7528 keyPath/certPath \u6216\u73AF\u5883\u53D8\u91CF");
   }
-  if (_optionalChain([cfg, 'access', _670 => _670.security, 'optionalAccess', _671 => _671.sessionSecret]) != null) {
+  if (_optionalChain([cfg, 'access', _685 => _685.security, 'optionalAccess', _686 => _686.sessionSecret]) != null) {
     errors.push("security.sessionSecret \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_SESSION_SECRET");
   }
   if (Array.isArray(cfg.wssec) && typeof cfg.wssec[0] === "string" && cfg.wssec[0].length > 0) {
@@ -6473,10 +6359,10 @@ function validateHostConfig(cfg) {
       validateHostSiteLimits(name, h, errors);
     }
   }
-  if (_optionalChain([cfg, 'access', _672 => _672.logger, 'optionalAccess', _673 => _673.sample]) && typeof cfg.logger.sample !== "object") {
+  if (_optionalChain([cfg, 'access', _687 => _687.logger, 'optionalAccess', _688 => _688.sample]) && typeof cfg.logger.sample !== "object") {
     errors.push('logger.sample \u5FC5\u987B\u4E3A\u5BF9\u8C61\uFF08\u5982 { "REQ_OTHER": 0.1 }\uFF09');
   }
-  if (_optionalChain([cfg, 'access', _674 => _674.logger, 'optionalAccess', _675 => _675.skip]) != null && !Array.isArray(cfg.logger.skip)) {
+  if (_optionalChain([cfg, 'access', _689 => _689.logger, 'optionalAccess', _690 => _690.skip]) != null && !Array.isArray(cfg.logger.skip)) {
     errors.push('logger.skip \u5FC5\u987B\u4E3A\u5B57\u7B26\u4E32\u6570\u7EC4\uFF08\u5982 ["/sys/info/metrics"]\uFF09');
   }
   if (cfg.proxyhosts && typeof cfg.proxyhosts === "object") {
@@ -6510,7 +6396,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, validateHostSiteLimits, "validateHostSiteL
 function validateProductionSecurity(cfg) {
   const errors = [];
   if (process.env.NODE_ENV !== "production") return errors;
-  const sec = _optionalChain([cfg, 'optionalAccess', _676 => _676.security]);
+  const sec = _optionalChain([cfg, 'optionalAccess', _691 => _691.security]);
   if (!sec || typeof sec !== "object") {
     errors.push("\u751F\u4EA7\u73AF\u5883\u5FC5\u987B\u914D\u7F6E security \u5BF9\u8C61");
     return errors;
@@ -6521,7 +6407,7 @@ function validateProductionSecurity(cfg) {
   if (sec.allowRegister === 1) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.allowRegister \u5E94\u4E3A 0\uFF08CR 1.3 \u7981\u6B62\u5F00\u653E\u6CE8\u518C\uFF09");
   }
-  if (!_optionalChain([sec, 'access', _677 => _677.quota, 'optionalAccess', _678 => _678.enabled])) {
+  if (!_optionalChain([sec, 'access', _692 => _692.quota, 'optionalAccess', _693 => _693.enabled])) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.quota.enabled \u5E94\u4E3A 1\uFF08CR 7.1 \u8D44\u6E90\u9650\u5236\uFF09");
   }
   if (sec.csp !== 1) {
@@ -6530,7 +6416,7 @@ function validateProductionSecurity(cfg) {
   if (typeof sec.minUserLevel !== "number" || sec.minUserLevel < 0) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.minUserLevel \u5E94\u663E\u5F0F\u914D\u7F6E");
   }
-  if (sec.forceWss === 1 && !_optionalChain([cfg, 'optionalAccess', _679 => _679.httpscert, 'optionalAccess', _680 => _680.keyPath]) && !_optionalChain([cfg, 'optionalAccess', _681 => _681.httpscert, 'optionalAccess', _682 => _682.key])) {
+  if (sec.forceWss === 1 && !_optionalChain([cfg, 'optionalAccess', _694 => _694.httpscert, 'optionalAccess', _695 => _695.keyPath]) && !_optionalChain([cfg, 'optionalAccess', _696 => _696.httpscert, 'optionalAccess', _697 => _697.key])) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.forceWss=1 \u65F6\u9700\u914D\u7F6E HTTPS \u8BC1\u4E66");
   }
   return errors;
@@ -6549,12 +6435,12 @@ var DEFAULT_RECONNECT = {
   rs485: { enabled: true, maxRetries: 60, initialDelay: 3e3, maxDelay: 3e4, factor: 2 }
 };
 function getTransportBlock(cfg, kind) {
-  const block = _optionalChain([cfg, 'optionalAccess', _683 => _683[kind]]);
+  const block = _optionalChain([cfg, 'optionalAccess', _698 => _698[kind]]);
   return block && typeof block === "object" ? block : null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getTransportBlock, "getTransportBlock");
 function getTransportDefault(cfg, kind) {
-  const def = _optionalChain([getTransportBlock, 'call', _684 => _684(cfg, kind), 'optionalAccess', _685 => _685.default]);
+  const def = _optionalChain([getTransportBlock, 'call', _699 => _699(cfg, kind), 'optionalAccess', _700 => _700.default]);
   return def && typeof def === "object" ? def : null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getTransportDefault, "getTransportDefault");
@@ -6564,7 +6450,7 @@ function hasTransportDefault(cfg, kind) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hasTransportDefault, "hasTransportDefault");
 function getDefaultConnId(cfg, kind) {
   const def = getTransportDefault(cfg, kind);
-  const id = _optionalChain([def, 'optionalAccess', _686 => _686.id]);
+  const id = _optionalChain([def, 'optionalAccess', _701 => _701.id]);
   return typeof id === "string" && id.length > 0 ? id : DEFAULT_CONN_ID[kind];
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getDefaultConnId, "getDefaultConnId");
@@ -6575,14 +6461,14 @@ function shouldAutoConnect(def) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, shouldAutoConnect, "shouldAutoConnect");
 function resolveReconnectOptions(def, kind, cfg) {
   const base = DEFAULT_RECONNECT[kind];
-  const rc = _optionalChain([def, 'optionalAccess', _687 => _687.reconnect]);
-  const tmMaxTry = _optionalChain([cfg, 'optionalAccess', _688 => _688.tm, 'optionalAccess', _689 => _689.maxtry]);
+  const rc = _optionalChain([def, 'optionalAccess', _702 => _702.reconnect]);
+  const tmMaxTry = _optionalChain([cfg, 'optionalAccess', _703 => _703.tm, 'optionalAccess', _704 => _704.maxtry]);
   return {
-    enabled: _optionalChain([rc, 'optionalAccess', _690 => _690.enabled]) !== false && base.enabled !== false,
-    maxRetries: _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _691 => _691.maxRetries]), () => ( tmMaxTry)), () => ( base.maxRetries)), () => ( 60)),
-    initialDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _692 => _692.initialDelay]), () => ( base.initialDelay)), () => ( 1e3)),
-    maxDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _693 => _693.maxDelay]), () => ( base.maxDelay)), () => ( 3e4)),
-    factor: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _694 => _694.factor]), () => ( base.factor)), () => ( 2))
+    enabled: _optionalChain([rc, 'optionalAccess', _705 => _705.enabled]) !== false && base.enabled !== false,
+    maxRetries: _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _706 => _706.maxRetries]), () => ( tmMaxTry)), () => ( base.maxRetries)), () => ( 60)),
+    initialDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _707 => _707.initialDelay]), () => ( base.initialDelay)), () => ( 1e3)),
+    maxDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _708 => _708.maxDelay]), () => ( base.maxDelay)), () => ( 3e4)),
+    factor: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _709 => _709.factor]), () => ( base.factor)), () => ( 2))
   };
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveReconnectOptions, "resolveReconnectOptions");
@@ -6632,17 +6518,17 @@ function createTransportDataHandler($asai, manager) {
     if (typeof event.data === "string") {
       try {
         event.data = JSON.parse(event.data);
-      } catch (e45) {
+      } catch (e53) {
       }
     }
-    if (_optionalChain([event, 'access', _695 => _695.data, 'optionalAccess', _696 => _696.id])) {
+    if (_optionalChain([event, 'access', _710 => _710.data, 'optionalAccess', _711 => _711.id])) {
       manager.watch(event.id, event.data);
       return;
     }
     try {
-      const wsKey = _optionalChain([$asai, 'optionalAccess', _697 => _697.command, 'optionalAccess', _698 => _698.commandconfig, 'optionalAccess', _699 => _699.config, 'optionalAccess', _700 => _700.commandclient]);
-      _optionalChain([$asai, 'access', _701 => _701.serversws, 'optionalAccess', _702 => _702[wsKey], 'optionalAccess', _703 => _703.broadws, 'optionalCall', _704 => _704(event.data)]);
-    } catch (e46) {
+      const wsKey = _optionalChain([$asai, 'optionalAccess', _712 => _712.command, 'optionalAccess', _713 => _713.commandconfig, 'optionalAccess', _714 => _714.config, 'optionalAccess', _715 => _715.commandclient]);
+      _optionalChain([$asai, 'access', _716 => _716.serversws, 'optionalAccess', _717 => _717[wsKey], 'optionalAccess', _718 => _718.broadws, 'optionalCall', _719 => _719(event.data)]);
+    } catch (e54) {
     }
   };
 }
@@ -6674,10 +6560,10 @@ function hostDefault(mod) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hostDefault, "hostDefault");
 var hostMain = hostDefault(src_default);
-var initAsaiHost2 = {
+var initAsaiHostNodejs2 = {
   name: PLUGIN_NAME,
   fn: /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt) => hostMain($asai, opt), "fn"),
-  sysserver: sysserver_default,
+  sysserver,
   AsaiCommon: Index_default,
   AsaiUtils: utils_exports,
   normalizeHostConfig,
@@ -6689,20 +6575,20 @@ var initAsaiHost2 = {
   initHostserverWs,
   syncApiRouteKeys,
   syncWsRouteKeys,
-  secureCompare: _chunkKOFCBB3Ncjs.secureCompare,
+  secureCompare: _chunkK2QPSQEVcjs.secureCompare,
   resolvePathUnderRoots,
   getHostAllowedRoots,
   logSecurityEvent,
   sanitizeString,
   validateHttpAuth,
   normalizeSecurityConfig,
-  stripForbiddenSecretsFromHostConfig: _chunkQWVR2HNTcjs.stripForbiddenSecretsFromHostConfig,
-  loadAsaiSecrets: _chunkQWVR2HNTcjs.loadAsaiSecrets,
-  loadDotEnvFile: _chunkQWVR2HNTcjs.loadDotEnvFile,
-  applySecretsToHostConfig: _chunkQWVR2HNTcjs.applySecretsToHostConfig,
-  resolveHttpsCertFromPaths: _chunkQWVR2HNTcjs.resolveHttpsCertFromPaths,
-  validateAsaiSecrets: _chunkQWVR2HNTcjs.validateAsaiSecrets,
-  isDevDefaultPassword: _chunkQWVR2HNTcjs.isDevDefaultPassword,
+  stripForbiddenSecretsFromHostConfig: _chunkLXJMGLKWcjs.stripForbiddenSecretsFromHostConfig,
+  loadAsaiSecrets: _chunkLXJMGLKWcjs.loadAsaiSecrets,
+  loadDotEnvFile: _chunkLXJMGLKWcjs.loadDotEnvFile,
+  applySecretsToHostConfig: _chunkLXJMGLKWcjs.applySecretsToHostConfig,
+  resolveHttpsCertFromPaths: _chunkLXJMGLKWcjs.resolveHttpsCertFromPaths,
+  validateAsaiSecrets: _chunkLXJMGLKWcjs.validateAsaiSecrets,
+  isDevDefaultPassword: _chunkLXJMGLKWcjs.isDevDefaultPassword,
   getTransportBlock,
   getTransportDefault,
   hasTransportDefault,
@@ -6714,8 +6600,8 @@ var initAsaiHost2 = {
   createTransportDataHandler,
   wireTransportConnectionLogs
 };
-var PLUGIN_VERSION = true ? "0.0.1" : "0.0.1";
-var index_default = initAsaiHost2;
+var PLUGIN_VERSION = true ? "0.0.2" : "0.0.1";
+var index_default = initAsaiHostNodejs2;
 
 
 
@@ -6757,5 +6643,5 @@ var index_default = initAsaiHost2;
 
 
 
-exports.AsaiCommon = Index_default; exports.AsaiUtils = utils_exports; exports.PLUGIN_NAME = PLUGIN_NAME; exports.PLUGIN_VERSION = PLUGIN_VERSION; exports.applySecretsToHostConfig = _chunkQWVR2HNTcjs.applySecretsToHostConfig; exports.createTransportDataHandler = createTransportDataHandler; exports.default = index_default; exports.ensureDefaultConnection = ensureDefaultConnection; exports.getDefaultConnId = getDefaultConnId; exports.getHostAllowedRoots = getHostAllowedRoots; exports.getTransportBlock = getTransportBlock; exports.getTransportDefault = getTransportDefault; exports.hasTransportDefault = hasTransportDefault; exports.initAsaiHost = initAsaiHost2; exports.initHostserverApi = initHostserverApi; exports.initHostserverWs = initHostserverWs; exports.initTransportBridge = initTransportBridge; exports.isDevDefaultPassword = _chunkQWVR2HNTcjs.isDevDefaultPassword; exports.loadAsaiSecrets = _chunkQWVR2HNTcjs.loadAsaiSecrets; exports.loadDotEnvFile = _chunkQWVR2HNTcjs.loadDotEnvFile; exports.logSecurityEvent = logSecurityEvent; exports.normalizeHostConfig = normalizeHostConfig; exports.normalizeSecurityConfig = normalizeSecurityConfig; exports.registerApi = registerApi; exports.registerWs = registerWs; exports.resolveHttpsCertFromPaths = _chunkQWVR2HNTcjs.resolveHttpsCertFromPaths; exports.resolvePathUnderRoots = resolvePathUnderRoots; exports.resolveReconnectOptions = resolveReconnectOptions; exports.sanitizeString = sanitizeString; exports.secureCompare = _chunkKOFCBB3Ncjs.secureCompare; exports.shouldAutoConnect = shouldAutoConnect; exports.stripForbiddenSecretsFromHostConfig = _chunkQWVR2HNTcjs.stripForbiddenSecretsFromHostConfig; exports.syncApiRouteKeys = syncApiRouteKeys; exports.syncWsRouteKeys = syncWsRouteKeys; exports.sysserver = sysserver_default; exports.validateAsaiSecrets = _chunkQWVR2HNTcjs.validateAsaiSecrets; exports.validateHostConfig = validateHostConfig; exports.validateHttpAuth = validateHttpAuth; exports.validateProductionSecurity = validateProductionSecurity; exports.wireTransportConnectionLogs = wireTransportConnectionLogs;
+exports.AsaiCommon = Index_default; exports.AsaiUtils = utils_exports; exports.PLUGIN_NAME = PLUGIN_NAME; exports.PLUGIN_VERSION = PLUGIN_VERSION; exports.applySecretsToHostConfig = _chunkLXJMGLKWcjs.applySecretsToHostConfig; exports.createTransportDataHandler = createTransportDataHandler; exports.default = index_default; exports.ensureDefaultConnection = ensureDefaultConnection; exports.getDefaultConnId = getDefaultConnId; exports.getHostAllowedRoots = getHostAllowedRoots; exports.getTransportBlock = getTransportBlock; exports.getTransportDefault = getTransportDefault; exports.hasTransportDefault = hasTransportDefault; exports.initAsaiHostNodejs = initAsaiHostNodejs2; exports.initHostserverApi = initHostserverApi; exports.initHostserverWs = initHostserverWs; exports.initTransportBridge = initTransportBridge; exports.isDevDefaultPassword = _chunkLXJMGLKWcjs.isDevDefaultPassword; exports.loadAsaiSecrets = _chunkLXJMGLKWcjs.loadAsaiSecrets; exports.loadDotEnvFile = _chunkLXJMGLKWcjs.loadDotEnvFile; exports.logSecurityEvent = logSecurityEvent; exports.normalizeHostConfig = normalizeHostConfig; exports.normalizeSecurityConfig = normalizeSecurityConfig; exports.registerApi = registerApi; exports.registerWs = registerWs; exports.resolveHttpsCertFromPaths = _chunkLXJMGLKWcjs.resolveHttpsCertFromPaths; exports.resolvePathUnderRoots = resolvePathUnderRoots; exports.resolveReconnectOptions = resolveReconnectOptions; exports.sanitizeString = sanitizeString; exports.secureCompare = _chunkK2QPSQEVcjs.secureCompare; exports.shouldAutoConnect = shouldAutoConnect; exports.stripForbiddenSecretsFromHostConfig = _chunkLXJMGLKWcjs.stripForbiddenSecretsFromHostConfig; exports.syncApiRouteKeys = syncApiRouteKeys; exports.syncWsRouteKeys = syncWsRouteKeys; exports.sysserver = sysserver; exports.validateAsaiSecrets = _chunkLXJMGLKWcjs.validateAsaiSecrets; exports.validateHostConfig = validateHostConfig; exports.validateHttpAuth = validateHttpAuth; exports.validateProductionSecurity = validateProductionSecurity; exports.wireTransportConnectionLogs = wireTransportConnectionLogs;
 //# sourceMappingURL=asaihost-nodejs.cjs.map