asaihost-nodejs 0.0.9 → 0.0.10

package/dist/asaihost-nodejs.cjs

@@ -50,7 +50,7 @@ var _chunkO6LVLSNBcjs = require('./chunk-O6LVLSNB.cjs');
 
 
 
-var _chunkWXW5DYNUcjs = require('./chunk-WXW5DYNU.cjs');
+var _chunkH2QP5J7Xcjs = require('./chunk-H2QP5J7X.cjs');
 
 
 
@@ -62,7 +62,7 @@ var _chunkWXW5DYNUcjs = require('./chunk-WXW5DYNU.cjs');
 
 
 
-var _chunkZK4O4Z2Ocjs = require('./chunk-ZK4O4Z2O.cjs');
+var _chunk5EWEKXQIcjs = require('./chunk-5EWEKXQI.cjs');
 
 
 
@@ -75,7 +75,8 @@ var _chunkZK4O4Z2Ocjs = require('./chunk-ZK4O4Z2O.cjs');
 
 
 
-var _chunkGXOFLFFWcjs = require('./chunk-GXOFLFFW.cjs');
+
+var _chunkFRPN33BYcjs = require('./chunk-FRPN33BY.cjs');
 
 
 var _chunk2BCIIKRGcjs = require('./chunk-2BCIIKRG.cjs');
@@ -814,8 +815,8 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, checkNtpOffset, "checkNtpOffset");
 
 // src/infra/config-integrity.ts
 var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
-var _fs = require('fs'); var fs3 = _interopRequireWildcard(_fs); var fs6 = _interopRequireWildcard(_fs); var fs4 = _interopRequireWildcard(_fs); var fs5 = _interopRequireWildcard(_fs); var fs8 = _interopRequireWildcard(_fs); var fs10 = _interopRequireWildcard(_fs);
-var _path = require('path'); var nodePath2 = _interopRequireWildcard(_path); var path2 = _interopRequireWildcard(_path); var nodePath = _interopRequireWildcard(_path); var nodePath3 = _interopRequireWildcard(_path); var path4 = _interopRequireWildcard(_path); var path6 = _interopRequireWildcard(_path); var path7 = _interopRequireWildcard(_path);
+var _fs = require('fs'); var fs3 = _interopRequireWildcard(_fs); var fs6 = _interopRequireWildcard(_fs); var fs4 = _interopRequireWildcard(_fs); var fs5 = _interopRequireWildcard(_fs); var fs8 = _interopRequireWildcard(_fs); var fs11 = _interopRequireWildcard(_fs);
+var _path = require('path'); var nodePath2 = _interopRequireWildcard(_path); var path2 = _interopRequireWildcard(_path); var nodePath = _interopRequireWildcard(_path); var nodePath3 = _interopRequireWildcard(_path); var path5 = _interopRequireWildcard(_path); var path7 = _interopRequireWildcard(_path); var path8 = _interopRequireWildcard(_path);
 function computeConfigHash(configPath) {
   try {
     const raw = fs3.default.readFileSync(configPath);
@@ -869,7 +870,7 @@ function initAsaiHostNodejs($asai, _opt) {
       resAES
     };
   }
-  if (_chunkZK4O4Z2Ocjs.isDevDefaultPassword.call(void 0, _optionalChain([$asai, 'access', _102 => _102.hostconfig, 'optionalAccess', _103 => _103.password]) || "")) {
+  if (_chunk5EWEKXQIcjs.isDevDefaultPassword.call(void 0, _optionalChain([$asai, 'access', _102 => _102.hostconfig, 'optionalAccess', _103 => _103.password]) || "")) {
     logSecurityEvent($asai, {
       type: "CONFIG_WARN",
       detail: "Using dev-only password; set ASAI_HOST_PASSWORD for production (IEC 62443-4-2 CR 1.7)"
@@ -1000,15 +1001,20 @@ async function clearStaleWsIfDead($asai, hostdir, us, existingWs) {
     if (_optionalChain([map, 'optionalAccess', _122 => _122[us]])) delete map[us];
     return true;
   }
-  if (!isWsStillActive(existingWs)) {
+  if (existingWs._asaiKicked) {
     terminateWs(existingWs);
     if (_optionalChain([map, 'optionalAccess', _123 => _123[us]]) === existingWs) delete map[us];
     return true;
   }
+  if (!isWsStillActive(existingWs)) {
+    terminateWs(existingWs);
+    if (_optionalChain([map, 'optionalAccess', _124 => _124[us]]) === existingWs) delete map[us];
+    return true;
+  }
   const alive = await probeWsAlive($asai, existingWs);
   if (alive) return false;
   terminateWs(existingWs);
-  if (_optionalChain([map, 'optionalAccess', _124 => _124[us]]) === existingWs) delete map[us];
+  if (_optionalChain([map, 'optionalAccess', _125 => _125[us]]) === existingWs) delete map[us];
   return true;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, clearStaleWsIfDead, "clearStaleWsIfDead");
@@ -1016,7 +1022,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, clearStaleWsIfDead, "clearStaleWsIfDead");
 // src/ws/auth.ts
 function getWsUserinfo(req, $asai) {
   try {
-    const raw = _optionalChain([req, 'access', _125 => _125.headers, 'optionalAccess', _126 => _126["sec-websocket-protocol"]]);
+    const raw = _optionalChain([req, 'access', _126 => _126.headers, 'optionalAccess', _127 => _127["sec-websocket-protocol"]]);
     if (!raw) return null;
     return deUserInfoWithAsai(raw.split("##"), $asai);
   } catch (e20) {
@@ -1025,57 +1031,127 @@ function getWsUserinfo(req, $asai) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getWsUserinfo, "getWsUserinfo");
 function listOnlineWsUsers($asai, hostdir) {
+  return listOnlineWsEntries($asai, hostdir).map((e) => e.us);
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, listOnlineWsUsers, "listOnlineWsUsers");
+function listOnlineWsEntries($asai, hostdir) {
   const users = [];
+  const seen = /* @__PURE__ */ new Set();
   const map = $asai.connectionsws || {};
   const dirs = hostdir ? [hostdir] : Object.keys(map);
   for (const dir of dirs) {
     for (const [us, ws2] of Object.entries(map[dir] || {})) {
       if (!us || us === "asai") continue;
       if (isWsStillActive(ws2)) {
-        users.push(us);
-      } else if (_optionalChain([map, 'access', _127 => _127[dir], 'optionalAccess', _128 => _128[us]]) === ws2) {
+        if (seen.has(us)) continue;
+        seen.add(us);
+        const rawLv = _optionalChain([ws2, 'optionalAccess', _128 => _128.Userinfo, 'optionalAccess', _129 => _129[1]]);
+        if (rawLv === "" || rawLv == null) {
+          users.push({ us, lv: null });
+        } else {
+          const lvNum = Number(rawLv);
+          users.push({
+            us,
+            lv: Number.isFinite(lvNum) ? lvNum : null
+          });
+        }
+      } else if (_optionalChain([map, 'access', _130 => _130[dir], 'optionalAccess', _131 => _131[us]]) === ws2) {
         delete map[dir][us];
       }
     }
   }
-  return [...new Set(users)];
+  return users;
 }
-_chunkSMVZ3ZDJcjs.__name.call(void 0, listOnlineWsUsers, "listOnlineWsUsers");
+_chunkSMVZ3ZDJcjs.__name.call(void 0, listOnlineWsEntries, "listOnlineWsEntries");
 function isUserOnlineOnWs($asai, us, hostdir) {
   if (!us || us === "asai") return false;
   const map = $asai.connectionsws || {};
   const dirs = hostdir ? [hostdir] : Object.keys(map);
   for (const dir of dirs) {
-    const ws2 = _optionalChain([map, 'access', _129 => _129[dir], 'optionalAccess', _130 => _130[us]]);
+    const ws2 = _optionalChain([map, 'access', _132 => _132[dir], 'optionalAccess', _133 => _133[us]]);
     if (!ws2) continue;
     if (isWsStillActive(ws2)) return true;
-    if (_optionalChain([map, 'access', _131 => _131[dir], 'optionalAccess', _132 => _132[us]]) === ws2) delete map[dir][us];
+    if (_optionalChain([map, 'access', _134 => _134[dir], 'optionalAccess', _135 => _135[us]]) === ws2) delete map[dir][us];
   }
   return false;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isUserOnlineOnWs, "isUserOnlineOnWs");
-function kickUserWs($asai, us, hostdir) {
+async function kickUserWs($asai, us, hostdir) {
   if (!us || us === "asai") return;
   const map = $asai.connectionsws || {};
   const dirs = hostdir ? [hostdir] : Object.keys(map);
+  const waits = [];
   for (const dir of dirs) {
-    const ws2 = _optionalChain([map, 'access', _133 => _133[dir], 'optionalAccess', _134 => _134[us]]);
+    const ws2 = _optionalChain([map, 'access', _136 => _136[dir], 'optionalAccess', _137 => _137[us]]);
     if (!ws2) continue;
+    if (_optionalChain([map, 'access', _138 => _138[dir], 'optionalAccess', _139 => _139[us]]) === ws2) delete map[dir][us];
     try {
-      ws2.close();
+      ws2._asaiKicked = Date.now();
     } catch (e21) {
     }
-    if (_optionalChain([map, 'access', _135 => _135[dir], 'optionalAccess', _136 => _136[us]]) === ws2) delete map[dir][us];
+    waits.push(
+      new Promise((resolve6) => {
+        let done = false;
+        const finish = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, () => {
+          if (done) return;
+          done = true;
+          try {
+            _optionalChain([ws2, 'access', _140 => _140.off, 'optionalCall', _141 => _141("close", finish)]);
+          } catch (e22) {
+          }
+          resolve6();
+        }, "finish");
+        try {
+          _optionalChain([ws2, 'access', _142 => _142.once, 'optionalCall', _143 => _143("close", finish)]);
+        } catch (e23) {
+        }
+        const payload = JSON.stringify({
+          ty: "publish/web",
+          db: {
+            exit: 1,
+            type: "err",
+            lang: "forcedout",
+            langpm: `${us}`,
+            con: `${us} forced out by another login`
+          }
+        });
+        const hardClose = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, () => {
+          try {
+            if (typeof ws2.terminate === "function") ws2.terminate();
+            else ws2.close();
+          } catch (e24) {
+            try {
+              ws2.close();
+            } catch (e25) {
+            }
+          }
+        }, "hardClose");
+        try {
+          ws2.send(payload, () => {
+            hardClose();
+            finish();
+          });
+        } catch (e26) {
+          hardClose();
+          finish();
+        }
+        setTimeout(() => {
+          hardClose();
+          finish();
+        }, 150);
+      })
+    );
   }
+  if (waits.length) await Promise.all(waits);
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, kickUserWs, "kickUserWs");
 async function removeSessionOnWsClose($asai, us, token) {
   try {
-    const store = _chunkZK4O4Z2Ocjs.createUserStore.call(void 0, $asai);
+    const store = _chunk5EWEKXQIcjs.createUserStore.call(void 0, $asai);
     const sessions = await store.getSessions();
     const match = sessions.find((s) => s.us === us && s.pub === token);
     if (match) await store.removeSession(match.id);
-  } catch (e22) {
+  } catch (e27) {
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, removeSessionOnWsClose, "removeSessionOnWsClose");
@@ -1085,13 +1161,13 @@ function rejectIncomingWs(ws2, db) {
     ws2.send(payload, () => {
       try {
         ws2.close();
-      } catch (e23) {
+      } catch (e28) {
       }
     });
-  } catch (e24) {
+  } catch (e29) {
     try {
       ws2.close();
-    } catch (e25) {
+    } catch (e30) {
     }
   }
 }
@@ -1102,20 +1178,21 @@ async function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
     ws2.close();
     return false;
   }
-  if (us !== "asai" && _optionalChain([$asai, 'access', _137 => _137.connectionsws, 'access', _138 => _138[hostdir], 'optionalAccess', _139 => _139[us]])) {
+  if (us !== "asai" && _optionalChain([$asai, 'access', _144 => _144.connectionsws, 'access', _145 => _145[hostdir], 'optionalAccess', _146 => _146[us]])) {
     const existingWs = $asai.connectionsws[hostdir][us];
-    if (_optionalChain([existingWs, 'optionalAccess', _140 => _140.Userinfo, 'optionalAccess', _141 => _141[2]]) === tk) {
+    if (_optionalChain([existingWs, 'optionalAccess', _147 => _147.Userinfo, 'optionalAccess', _148 => _148[2]]) === tk) {
       if (isWsStillActive(existingWs)) {
         rejectIncomingWs(ws2, {
           lang: "pageworking",
           langpm: `${us}`,
-          con: `${us} page already running`
+          con: `${us} page already running`,
+          online: listOnlineWsEntries($asai, hostdir)
         });
         return false;
       }
       try {
         existingWs.close();
-      } catch (e26) {
+      } catch (e31) {
       }
       delete $asai.connectionsws[hostdir][us];
       return true;
@@ -1125,7 +1202,8 @@ async function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
       rejectIncomingWs(ws2, {
         lang: "logged",
         langpm: `${us}`,
-        con: `${us} logged in!`
+        con: `${us} logged in!`,
+        online: listOnlineWsEntries($asai, hostdir)
       });
       return false;
     }
@@ -1134,22 +1212,25 @@ async function isOkWs($asai, hostdir, ws2, _req, hostcfg) {
   if (us !== "asai") {
     const connections = $asai.connectionsws[hostdir] || {};
     const sameTkWs = Object.values(connections).find(
-      (item) => _optionalChain([item, 'access', _142 => _142.Userinfo, 'optionalAccess', _143 => _143[2]]) === tk && _optionalChain([item, 'access', _144 => _144.Userinfo, 'optionalAccess', _145 => _145[0]]) !== us
+      (item) => _optionalChain([item, 'access', _149 => _149.Userinfo, 'optionalAccess', _150 => _150[2]]) === tk && _optionalChain([item, 'access', _151 => _151.Userinfo, 'optionalAccess', _152 => _152[0]]) !== us
     );
     const maxOnline = hostcfg.maxonline || 100;
+    const online = listOnlineWsEntries($asai, hostdir);
     if (sameTkWs) {
       rejectIncomingWs(ws2, {
         lang: "loggedsametk",
         langpm: `${us}(${sameTkWs.Userinfo[0]})`,
-        con: `${us}(${sameTkWs.Userinfo[0]}) logged in!`
+        con: `${us}(${sameTkWs.Userinfo[0]}) logged in!`,
+        online
       });
       return false;
     }
-    if (Object.keys(connections).length >= maxOnline) {
+    if (online.length >= maxOnline) {
       rejectIncomingWs(ws2, {
         lang: "maxlogged",
         langpm: `${maxOnline}`,
-        con: `max ${maxOnline} users online!`
+        con: `max ${maxOnline} users online!`,
+        online
       });
       return false;
     }
@@ -1168,15 +1249,15 @@ function loginWs($asai, hostdir, ws2, req, hostcfg, wsWorkHandler, logWsMessage)
   }
   ws2.on("message", (msg) => {
     if (logWsMessage) $asai.$log("WS", "message", msg.toString());
-    _optionalChain([wsWorkHandler, 'optionalCall', _146 => _146(msg, ws2, hostdir, req)]);
+    _optionalChain([wsWorkHandler, 'optionalCall', _153 => _153(msg, ws2, hostdir, req)]);
   });
   ws2.on("close", () => {
-    const token = _optionalChain([ws2, 'access', _147 => _147.Userinfo, 'optionalAccess', _148 => _148[2]]);
+    const token = _optionalChain([ws2, 'access', _154 => _154.Userinfo, 'optionalAccess', _155 => _155[2]]);
     if (hostcfg.ckws && ws2.tasksws) {
       Object.values(ws2.tasksws).forEach((el) => el && clearInterval(el));
       ws2.tasksws = void 0;
     }
-    if (us && _optionalChain([$asai, 'access', _149 => _149.connectionsws, 'access', _150 => _150[hostdir], 'optionalAccess', _151 => _151[us]]) === ws2) delete $asai.connectionsws[hostdir][us];
+    if (us && _optionalChain([$asai, 'access', _156 => _156.connectionsws, 'access', _157 => _157[hostdir], 'optionalAccess', _158 => _158[us]]) === ws2) delete $asai.connectionsws[hostdir][us];
     if (us && token && !isUserOnlineOnWs($asai, us, hostdir)) {
       void removeSessionOnWsClose($asai, us, String(token));
     }
@@ -1200,7 +1281,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, clearWsServerTasks, "clearWsServerTasks");
 function resWsMsg(msg, $asai) {
   if (msg === "ping" || msg === "pong") return msg;
   if (typeof msg !== "object" || msg === null) return msg;
-  if ((_optionalChain([msg, 'optionalAccess', _152 => _152.aes]) || _optionalChain([$asai, 'access', _153 => _153.$lib, 'access', _154 => _154.aesfns, 'optionalAccess', _155 => _155.allaes])) && _optionalChain([msg, 'optionalAccess', _156 => _156.db]) && _optionalChain([$asai, 'access', _157 => _157.$lib, 'optionalAccess', _158 => _158.aesfns, 'optionalAccess', _159 => _159.resAES])) {
+  if ((_optionalChain([msg, 'optionalAccess', _159 => _159.aes]) || _optionalChain([$asai, 'access', _160 => _160.$lib, 'access', _161 => _161.aesfns, 'optionalAccess', _162 => _162.allaes])) && _optionalChain([msg, 'optionalAccess', _163 => _163.db]) && _optionalChain([$asai, 'access', _164 => _164.$lib, 'optionalAccess', _165 => _165.aesfns, 'optionalAccess', _166 => _166.resAES])) {
     msg.db = $asai.$lib.aesfns.resAES(msg.db);
   }
   return JSON.stringify(msg);
@@ -1222,7 +1303,7 @@ function attachWssHelpers(wss, $asai) {
   wss.broadws = (msg) => {
     const data = resWsMsg(msg, $asai);
     wss.clients.forEach((client) => {
-      if (_optionalChain([client, 'optionalAccess', _160 => _160.readyState]) === _ws.WebSocket.OPEN) client.send(data);
+      if (_optionalChain([client, 'optionalAccess', _167 => _167.readyState]) === _ws.WebSocket.OPEN) client.send(data);
     });
   };
 }
@@ -1235,7 +1316,7 @@ var apiPerIp = /* @__PURE__ */ new Map();
 var apiRatePerIp = /* @__PURE__ */ new Map();
 var wsPerIp = /* @__PURE__ */ new Map();
 function getQuota($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _161 => _161.hostconfig, 'optionalAccess', _162 => _162.security, 'optionalAccess', _163 => _163.quota]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _168 => _168.hostconfig, 'optionalAccess', _169 => _169.security, 'optionalAccess', _170 => _170.quota]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getQuota, "getQuota");
 function isEnabled($asai) {
@@ -1325,7 +1406,7 @@ function getMaxWebConnections($asai, hostcfg) {
   const q = getQuota($asai);
   const fromQuota = Number(q.maxWebConnections);
   if (fromQuota > 0) return fromQuota;
-  return Number(_optionalChain([hostcfg, 'optionalAccess', _164 => _164.maxws])) > 0 ? Number(hostcfg.maxws) : 100;
+  return Number(_optionalChain([hostcfg, 'optionalAccess', _171 => _171.maxws])) > 0 ? Number(hostcfg.maxws) : 100;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getMaxWebConnections, "getMaxWebConnections");
 function countActiveWsConnections(wss, incoming, $asai, hostdir, hostcfg, userinfo) {
@@ -1335,12 +1416,12 @@ function countActiveWsConnections(wss, incoming, $asai, hostdir, hostcfg, userin
     if (client === incoming) continue;
     if (client.readyState === _ws.WebSocket.CLOSED || client.readyState === _ws.WebSocket.CLOSING) continue;
     const cInfo = client.Userinfo;
-    const cUs = _optionalChain([cInfo, 'optionalAccess', _165 => _165[0]]);
-    const cTk = _optionalChain([cInfo, 'optionalAccess', _166 => _166[2]]);
+    const cUs = _optionalChain([cInfo, 'optionalAccess', _172 => _172[0]]);
+    const cTk = _optionalChain([cInfo, 'optionalAccess', _173 => _173[2]]);
     if (us && tk && cUs === us && cTk === tk) continue;
-    if (_optionalChain([hostcfg, 'optionalAccess', _167 => _167.ckws]) && us && tk) {
-      const existing = _optionalChain([$asai, 'optionalAccess', _168 => _168.connectionsws, 'optionalAccess', _169 => _169[hostdir], 'optionalAccess', _170 => _170[us]]);
-      if (existing === client && _optionalChain([existing, 'optionalAccess', _171 => _171.Userinfo, 'optionalAccess', _172 => _172[2]]) === tk) continue;
+    if (_optionalChain([hostcfg, 'optionalAccess', _174 => _174.ckws]) && us && tk) {
+      const existing = _optionalChain([$asai, 'optionalAccess', _175 => _175.connectionsws, 'optionalAccess', _176 => _176[hostdir], 'optionalAccess', _177 => _177[us]]);
+      if (existing === client && _optionalChain([existing, 'optionalAccess', _178 => _178.Userinfo, 'optionalAccess', _179 => _179[2]]) === tk) continue;
     }
     count += 1;
   }
@@ -1352,7 +1433,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, countActiveWsConnections, "countActiveWsCo
 function createWSHost($asai, hostdir) {
   const hostcfg = getHostCFG(hostdir, $asai);
   const wsWorkHandler = getWorkHandler("wsWork");
-  const logWsMessage = !!_optionalChain([$asai, 'access', _173 => _173.hostconfig, 'access', _174 => _174.logger, 'optionalAccess', _175 => _175.lv, 'optionalAccess', _176 => _176.view]);
+  const logWsMessage = !!_optionalChain([$asai, 'access', _180 => _180.hostconfig, 'access', _181 => _181.logger, 'optionalAccess', _182 => _182.lv, 'optionalAccess', _183 => _183.view]);
   try {
     if ($asai.serversws[hostdir]) return;
     if (hostcfg.ckws && !$asai.connectionsws[hostdir]) {
@@ -1364,14 +1445,14 @@ function createWSHost($asai, hostdir) {
     wss.on("error", (err) => {
       clearWsServerTasks($asai, hostdir);
       $asai.$log("WS", "WS    Server error!", err);
-      _optionalChain([wss, 'access', _177 => _177.close, 'optionalCall', _178 => _178(() => {
+      _optionalChain([wss, 'access', _184 => _184.close, 'optionalCall', _185 => _185(() => {
         $asai.$log("WS", "WS    Server closed");
         delete $asai.serversws[hostdir];
       })]);
     });
     wss.on("close", (code, reason) => {
       try {
-        $asai.$log("WS", `WebSocket closed, server ${hostdir}, code: ${code}, reason: ${_optionalChain([reason, 'optionalAccess', _179 => _179.toString, 'call', _180 => _180()])}`);
+        $asai.$log("WS", `WebSocket closed, server ${hostdir}, code: ${code}, reason: ${_optionalChain([reason, 'optionalAccess', _186 => _186.toString, 'call', _187 => _187()])}`);
         clearWsServerTasks($asai, hostdir);
       } catch (err) {
         $asai.$log("WS", "WS close handler error:", err);
@@ -1461,7 +1542,7 @@ var StaticPathCache = class {
       const stat = fs3.statSync(entry.filePath);
       if (!stat.isFile() || stat.mtimeMs !== entry.mtimeMs) return null;
       return stat;
-    } catch (e27) {
+    } catch (e32) {
       return null;
     }
   }
@@ -1480,8 +1561,8 @@ function applySecurityHeaders(res, isHttps = false, hostconfig) {
   if (isHttps) {
     res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
   }
-  const sec = _optionalChain([hostconfig, 'optionalAccess', _181 => _181.security]);
-  if (_optionalChain([sec, 'optionalAccess', _182 => _182.csp])) {
+  const sec = _optionalChain([hostconfig, 'optionalAccess', _188 => _188.security]);
+  if (_optionalChain([sec, 'optionalAccess', _189 => _189.csp])) {
     const csp = typeof sec.cspPolicy === "string" && sec.cspPolicy.length > 0 ? sec.cspPolicy : DEFAULT_CSP;
     res.setHeader("Content-Security-Policy", csp);
   }
@@ -1489,9 +1570,9 @@ function applySecurityHeaders(res, isHttps = false, hostconfig) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, applySecurityHeaders, "applySecurityHeaders");
 function getHttpUserinfo(req, $asai) {
   try {
-    const userinfo = _optionalChain([req, 'access', _183 => _183.headers, 'optionalAccess', _184 => _184["userinfo"], 'optionalAccess', _185 => _185.split, 'call', _186 => _186("##")]);
+    const userinfo = _optionalChain([req, 'access', _190 => _190.headers, 'optionalAccess', _191 => _191["userinfo"], 'optionalAccess', _192 => _192.split, 'call', _193 => _193("##")]);
     return deUserInfoWithAsai(userinfo, $asai);
-  } catch (e28) {
+  } catch (e33) {
     return "";
   }
 }
@@ -1522,7 +1603,7 @@ function normalizeRequestPath(url) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeRequestPath, "normalizeRequestPath");
 function createSkipChecker($asai) {
-  const skip = _optionalChain([$asai, 'access', _187 => _187.hostconfig, 'optionalAccess', _188 => _188.logger, 'optionalAccess', _189 => _189.skip]);
+  const skip = _optionalChain([$asai, 'access', _194 => _194.hostconfig, 'optionalAccess', _195 => _195.logger, 'optionalAccess', _196 => _196.skip]);
   if (!Array.isArray(skip) || skip.length === 0) return () => false;
   const exact = /* @__PURE__ */ new Set();
   const prefixes = [];
@@ -1533,11 +1614,11 @@ function createSkipChecker($asai) {
   }
   if (exact.size === 0 && prefixes.length === 0) return () => false;
   return (url) => {
-    const path8 = normalizeRequestPath(url);
-    if (!path8) return false;
-    if (exact.has(path8)) return true;
+    const path9 = normalizeRequestPath(url);
+    if (!path9) return false;
+    if (exact.has(path9)) return true;
     for (let i = 0; i < prefixes.length; i++) {
-      if (path8.startsWith(prefixes[i])) return true;
+      if (path9.startsWith(prefixes[i])) return true;
     }
     return false;
   };
@@ -1558,7 +1639,7 @@ function attachAccessLog($asai, req, res, logType) {
     try {
       const entry = _chunkOCEBEEP5cjs.buildAccessEntry.call(void 0, req, res, logType);
       void $asai.appendAccessLog(_chunkOCEBEEP5cjs.formatCLF.call(void 0, entry), _chunkOCEBEEP5cjs.formatW3CAccessRecord.call(void 0, entry));
-    } catch (e29) {
+    } catch (e34) {
     }
   }, "onFinish");
   if (res.writableEnded || res.finished) onFinish();
@@ -1617,7 +1698,7 @@ function findExistingFileUnderRoots(requestedPath, allowedRoots) {
       if (stat.isFile()) {
         return { filePath: absTarget, stat };
       }
-    } catch (e30) {
+    } catch (e35) {
     }
   }
   return null;
@@ -1630,13 +1711,13 @@ function getHostAllowedRoots(hostconfig) {
     try {
       const abs = path2.resolve("./" + dir.replace(/\\/g, "/"));
       if (fs4.existsSync(abs)) roots.add(abs);
-    } catch (e31) {
+    } catch (e36) {
     }
   }, "push");
-  for (const dir of _optionalChain([hostconfig, 'optionalAccess', _190 => _190.hostdirs]) || []) push(dir);
+  for (const dir of _optionalChain([hostconfig, 'optionalAccess', _197 => _197.hostdirs]) || []) push(dir);
   push("webdata");
   push("websys");
-  if (_optionalChain([hostconfig, 'optionalAccess', _191 => _191.weburls, 'optionalAccess', _192 => _192.webdir])) push(hostconfig.weburls.webdir);
+  if (_optionalChain([hostconfig, 'optionalAccess', _198 => _198.weburls, 'optionalAccess', _199 => _199.webdir])) push(hostconfig.weburls.webdir);
   const result = [];
   roots.forEach((r) => result.push(r));
   return result;
@@ -1667,7 +1748,7 @@ function getStaticBaseDirs($asai) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getStaticBaseDirs, "getStaticBaseDirs");
 function shouldForceHostdirs($asai) {
   if ($asai.pkgSnapshotDir) return true;
-  return _optionalChain([$asai, 'access', _193 => _193.hostconfig, 'optionalAccess', _194 => _194.pkg, 'optionalAccess', _195 => _195.type]) === 1;
+  return _optionalChain([$asai, 'access', _200 => _200.hostconfig, 'optionalAccess', _201 => _201.pkg, 'optionalAccess', _202 => _202.type]) === 1;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, shouldForceHostdirs, "shouldForceHostdirs");
 function buildStaticSearchDirs(hostcfg, $asai) {
@@ -1688,12 +1769,12 @@ function buildStaticSearchDirs(hostcfg, $asai) {
           ordered.push(dir);
           return;
         }
-      } catch (e32) {
+      } catch (e37) {
       }
     }
   }, "pushDir");
   for (const dir of hostcfg.hostdirs || []) pushDir(dir);
-  if (_optionalChain([hostcfg, 'access', _196 => _196.weburls, 'optionalAccess', _197 => _197.webdir])) pushDir(hostcfg.weburls.webdir);
+  if (_optionalChain([hostcfg, 'access', _203 => _203.weburls, 'optionalAccess', _204 => _204.webdir])) pushDir(hostcfg.weburls.webdir);
   return ordered;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, buildStaticSearchDirs, "buildStaticSearchDirs");
@@ -1721,7 +1802,7 @@ function parseUrlPath(requrl) {
     if (!requrl) return "/";
     const safeUrl = requrl.startsWith("http") ? requrl : encodeURI(requrl);
     return new URL(safeUrl, "http://localhost").pathname;
-  } catch (e33) {
+  } catch (e38) {
     return requrl;
   }
 }
@@ -1820,8 +1901,8 @@ function serveStaticFile(req, res, foundPath, mimeType, stat, $asai, urlPath = "
 _chunkSMVZ3ZDJcjs.__name.call(void 0, serveStaticFile, "serveStaticFile");
 function createStaticHandler(ctx) {
   const { hostcfg, hostdir, indexFile, $asai, staticPathCache } = ctx;
-  const hasRewrite = !!(_optionalChain([hostcfg, 'access', _198 => _198.weburls, 'optionalAccess', _199 => _199.rewrite]) && _optionalChain([hostcfg, 'access', _200 => _200.weburls, 'optionalAccess', _201 => _201.webdir]) && _optionalChain([hostcfg, 'access', _202 => _202.weburls, 'optionalAccess', _203 => _203.keys, 'optionalAccess', _204 => _204.length]));
-  const rewriteKeys = hasRewrite ? _optionalChain([hostcfg, 'access', _205 => _205.weburls, 'optionalAccess', _206 => _206.keys]) || [] : [];
+  const hasRewrite = !!(_optionalChain([hostcfg, 'access', _205 => _205.weburls, 'optionalAccess', _206 => _206.rewrite]) && _optionalChain([hostcfg, 'access', _207 => _207.weburls, 'optionalAccess', _208 => _208.webdir]) && _optionalChain([hostcfg, 'access', _209 => _209.weburls, 'optionalAccess', _210 => _210.keys, 'optionalAccess', _211 => _211.length]));
+  const rewriteKeys = hasRewrite ? _optionalChain([hostcfg, 'access', _212 => _212.weburls, 'optionalAccess', _213 => _213.keys]) || [] : [];
   const checkWebUrls = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (rurl) => {
     if (!hasRewrite || !rurl) return false;
     for (let i = 0; i < rewriteKeys.length; i++) {
@@ -1836,7 +1917,7 @@ function createStaticHandler(ctx) {
     const roots = rhostdirs.join("|") === primaryDirs.join("|") ? buildStaticRoots(primaryDirs, $asai) : buildStaticRoots(rhostdirs, $asai);
     const findValidFile = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (urlPath) => {
       const hit = staticPathCache.get(cacheKey);
-      if (_optionalChain([hit, 'optionalAccess', _207 => _207.is404])) return null;
+      if (_optionalChain([hit, 'optionalAccess', _214 => _214.is404])) return null;
       if (hit && !hit.is404) {
         const verified = staticPathCache.verify(hit);
         if (verified) return { filePath: hit.filePath, stat: verified };
@@ -1860,7 +1941,7 @@ function createStaticHandler(ctx) {
       showHostDirs(req, res, [hostcfg.weburls.webdir], "/" + indexFile, primaryDirs, rtm + 1);
       return;
     }
-    const mimeType = _optionalChain([hostcfg, 'access', _208 => _208.mimetypes, 'optionalAccess', _209 => _209[nodePath2.extname(found.filePath)]]) || "application/octet-stream";
+    const mimeType = _optionalChain([hostcfg, 'access', _215 => _215.mimetypes, 'optionalAccess', _216 => _216[nodePath2.extname(found.filePath)]]) || "application/octet-stream";
     serveStaticFile(req, res, found.filePath, mimeType, found.stat, $asai, processedUrl);
   }, "showHostDirs");
   return (req, res, url) => {
@@ -1885,7 +1966,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, createStaticHandler, "createStaticHandler"
 function setupHttpConnectionMonitor($asai, hostdir, server, hostcfg) {
   const maxHttp = hostcfg.maxhttp || 100;
   const monitorInterval = setInterval(() => {
-    const connCount = _optionalChain([$asai, 'access', _210 => _210.connectionshttp, 'access', _211 => _211[hostdir], 'optionalAccess', _212 => _212.size]) || 0;
+    const connCount = _optionalChain([$asai, 'access', _217 => _217.connectionshttp, 'access', _218 => _218[hostdir], 'optionalAccess', _219 => _219.size]) || 0;
     if (connCount > maxHttp * 0.8) {
       $asai.$log("HTTP", `HTTP Connection HIGH (${connCount}/${maxHttp})`);
     }
@@ -1956,10 +2037,10 @@ function findListeningPids(port) {
         stdio: ["pipe", "pipe", "ignore"]
       });
       return out.split(/\r?\n/).map((s) => parseInt(s.trim(), 10)).filter((n) => n > 0);
-    } catch (e34) {
+    } catch (e39) {
       return [];
     }
-  } catch (e35) {
+  } catch (e40) {
     return [];
   }
 }
@@ -1970,10 +2051,10 @@ function formatOccupants(port, exclude) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, formatOccupants, "formatOccupants");
 function releasePort(port, opts) {
-  const exclude = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _213 => _213.excludePid]), () => ( OWN_PID));
+  const exclude = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _220 => _220.excludePid]), () => ( OWN_PID));
   const occupants = formatOccupants(port, exclude);
   if (!occupants) return true;
-  const label = _optionalChain([opts, 'optionalAccess', _214 => _214.label]) ? `[${opts.label}] ` : "";
+  const label = _optionalChain([opts, 'optionalAccess', _221 => _221.label]) ? `[${opts.label}] ` : "";
   console.warn(
     `[AsaiHostNodejs] ${label}\u7AEF\u53E3 ${port} \u88AB\u5360\u7528\uFF08PID: ${occupants}\uFF09\uFF0C\u8BF7\u624B\u52A8\u7ED3\u675F\u5360\u7528\u8FDB\u7A0B\u540E\u91CD\u8BD5`
   );
@@ -1982,23 +2063,23 @@ function releasePort(port, opts) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, releasePort, "releasePort");
 function collectStartupPorts($asai) {
   const ports = /* @__PURE__ */ new Set();
-  const hosts = _optionalChain([$asai, 'access', _215 => _215.hostconfig, 'optionalAccess', _216 => _216.hosts]);
+  const hosts = _optionalChain([$asai, 'access', _222 => _222.hostconfig, 'optionalAccess', _223 => _223.hosts]);
   if (hosts) {
     for (const el of Object.keys(hosts)) {
       if (el === "default") continue;
       if (el !== "asai" && !validateHostdir(el)) continue;
       const cfg = getHostCFG(el, $asai);
-      if (_optionalChain([cfg, 'optionalAccess', _217 => _217.close])) continue;
-      if (_optionalChain([cfg, 'optionalAccess', _218 => _218.port])) ports.add(Number(cfg.port));
+      if (_optionalChain([cfg, 'optionalAccess', _224 => _224.close])) continue;
+      if (_optionalChain([cfg, 'optionalAccess', _225 => _225.port])) ports.add(Number(cfg.port));
     }
   }
-  const proxyhosts = _optionalChain([$asai, 'access', _219 => _219.hostconfig, 'optionalAccess', _220 => _220.proxyhosts]);
+  const proxyhosts = _optionalChain([$asai, 'access', _226 => _226.hostconfig, 'optionalAccess', _227 => _227.proxyhosts]);
   if (proxyhosts) {
     for (const el of Object.keys(proxyhosts)) {
       if (el === "default") continue;
       if (!validateHostdir(el)) continue;
       const cfg = getProxyHostCFG(el, $asai);
-      if (_optionalChain([cfg, 'optionalAccess', _221 => _221.proxyport])) ports.add(Number(cfg.proxyport));
+      if (_optionalChain([cfg, 'optionalAccess', _228 => _228.proxyport])) ports.add(Number(cfg.proxyport));
     }
   }
   return [...ports];
@@ -2023,7 +2104,7 @@ function scheduleHttpRetry($asai, hostdir) {
       clearTimeout($asai.hostconfig.guardtm);
       $asai.hostconfig.guardtm = null;
     }
-  }, _optionalChain([$asai, 'access', _222 => _222.hostconfig, 'access', _223 => _223.tm, 'optionalAccess', _224 => _224.d]) || 2e3);
+  }, _optionalChain([$asai, 'access', _229 => _229.hostconfig, 'access', _230 => _230.tm, 'optionalAccess', _231 => _231.d]) || 2e3);
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, scheduleHttpRetry, "scheduleHttpRetry");
 function clearFailedHttpHost($asai, hostdir, ws2) {
@@ -2036,7 +2117,7 @@ function getHTTPServer(httptype = "", cfg, $asai) {
     if (httptype.startsWith("https")) {
       return {
         AsCreateServer: /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (callback) => {
-          return https.createServer(_optionalChain([cfg, 'optionalAccess', _225 => _225.httpscert]) || $asai.hostconfig.httpscert, callback);
+          return https.createServer(_optionalChain([cfg, 'optionalAccess', _232 => _232.httpscert]) || $asai.hostconfig.httpscert, callback);
         }, "AsCreateServer"),
         Agent: https.Agent,
         request: https.request
@@ -2088,13 +2169,13 @@ function startHTTPServer($asai, hostdir) {
             return;
           }
           applySecurityHeaders(res, isHttps, $asai.hostconfig);
-          if (_optionalChain([req, 'access', _226 => _226.url, 'optionalAccess', _227 => _227.startsWith, 'call', _228 => _228("/sys")]) && sysWork) {
+          if (_optionalChain([req, 'access', _233 => _233.url, 'optionalAccess', _234 => _234.startsWith, 'call', _235 => _235("/sys")]) && sysWork) {
             logHttp($asai, "SYS", req.method, req.url, skipChecker, req, res);
             sysWork(req, res, hostdir);
-          } else if (_optionalChain([req, 'access', _229 => _229.url, 'optionalAccess', _230 => _230.startsWith, 'call', _231 => _231("/api")]) && apiWork) {
+          } else if (_optionalChain([req, 'access', _236 => _236.url, 'optionalAccess', _237 => _237.startsWith, 'call', _238 => _238("/api")]) && apiWork) {
             logHttp($asai, "API", req.method, req.url, skipChecker, req, res);
             apiWork(req, res, hostdir);
-          } else if (_optionalChain([req, 'access', _232 => _232.url, 'optionalAccess', _233 => _233.startsWith, 'call', _234 => _234("/jsonp")]) && jsonpWork) {
+          } else if (_optionalChain([req, 'access', _239 => _239.url, 'optionalAccess', _240 => _240.startsWith, 'call', _241 => _241("/jsonp")]) && jsonpWork) {
             logHttp($asai, "JSONP", req.method, req.url, skipChecker, req, res);
             jsonpWork(req, res, hostdir);
           } else if (handleStatic) {
@@ -2165,7 +2246,7 @@ function findSameProcessPortOwner($asai, port, excludeHostdir) {
   for (const hostdir of Object.keys($asai.servershttp || {})) {
     if (hostdir === excludeHostdir) continue;
     const cfg = getHostCFG(hostdir, $asai);
-    if (_optionalChain([cfg, 'optionalAccess', _235 => _235.port]) === port) return hostdir;
+    if (_optionalChain([cfg, 'optionalAccess', _242 => _242.port]) === port) return hostdir;
   }
   return null;
 }
@@ -2173,7 +2254,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, findSameProcessPortOwner, "findSameProcess
 function asaiGuard($asai, failedHostdir = "asai") {
   const conflictPorts = $asai.hostconfig.asaiport || [];
   const hostcfg = getHostCFG(failedHostdir, $asai);
-  const port = _optionalChain([hostcfg, 'optionalAccess', _236 => _236.port]);
+  const port = _optionalChain([hostcfg, 'optionalAccess', _243 => _243.port]);
   if (!port || !conflictPorts.includes(port)) {
     scheduleHttpRetry($asai, failedHostdir);
     return;
@@ -2205,7 +2286,7 @@ var PROXY_SKIP_HEADERS = /* @__PURE__ */ new Set([
 function startProxyServer($asai, proxyhostdir) {
   const proxycfg = getProxyHostCFG(proxyhostdir, $asai);
   if (!proxycfg.url) return;
-  if (_optionalChain([$asai, 'access', _237 => _237.serversproxy, 'optionalAccess', _238 => _238[proxyhostdir]])) return;
+  if (_optionalChain([$asai, 'access', _244 => _244.serversproxy, 'optionalAccess', _245 => _245[proxyhostdir]])) return;
   try {
     const httpServer = getHTTPServer(proxycfg.proxyhttptype, proxycfg, $asai);
     const targetHttp = getHTTPServer(proxycfg.url, proxycfg, $asai);
@@ -2287,12 +2368,12 @@ function startProxyServer($asai, proxyhostdir) {
     proxyServer.on("error", (err) => {
       if (err.code === "EADDRINUSE") {
         $asai.$log("PROXY", `\x1B[41mPort ${proxycfg.proxyport} is already start!\x1B[0m`);
-         _optionalChainDelete([$asai, 'access', _239 => _239.serversproxy, 'optionalAccess', _240 => delete _240[proxyhostdir]]);
+         _optionalChainDelete([$asai, 'access', _246 => _246.serversproxy, 'optionalAccess', _247 => delete _247[proxyhostdir]]);
         releasePort(proxycfg.proxyport, {
           excludePid: process.pid,
           label: proxyhostdir
         });
-        setTimeout(() => startProxyServer($asai, proxyhostdir), _optionalChain([$asai, 'access', _241 => _241.hostconfig, 'access', _242 => _242.tm, 'optionalAccess', _243 => _243.d]) || 2e3);
+        setTimeout(() => startProxyServer($asai, proxyhostdir), _optionalChain([$asai, 'access', _248 => _248.hostconfig, 'access', _249 => _249.tm, 'optionalAccess', _250 => _250.d]) || 2e3);
       } else {
         $asai.$log("PROXY", "Proxy server error:", err);
       }
@@ -2332,7 +2413,7 @@ function src_default($asai, opt) {
     initAsaiHostNodejs($asai, opt);
     console.log(`\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B\u203B`);
     releaseConfiguredPorts($asai);
-    if (_optionalChain([$asai, 'access', _244 => _244.hostconfig, 'optionalAccess', _245 => _245.hosts])) {
+    if (_optionalChain([$asai, 'access', _251 => _251.hostconfig, 'optionalAccess', _252 => _252.hosts])) {
       $asai.startHTTPServer = (hostdir) => startHTTPServer($asai, hostdir);
       Object.keys($asai.hostconfig.hosts).forEach((el) => {
         if (validateHostdir(el)) {
@@ -2343,7 +2424,7 @@ function src_default($asai, opt) {
         startHTTPServer($asai, "asai");
       }
     }
-    if (_optionalChain([$asai, 'access', _246 => _246.hostconfig, 'optionalAccess', _247 => _247.proxyhosts])) {
+    if (_optionalChain([$asai, 'access', _253 => _253.hostconfig, 'optionalAccess', _254 => _254.proxyhosts])) {
       Object.keys($asai.hostconfig.proxyhosts).forEach((el) => {
         if (validateHostdir(el)) {
           startProxyServer($asai, el);
@@ -2366,22 +2447,22 @@ _chunkSMVZ3ZDJcjs.__export.call(void 0, utils_exports, {
 // src/utils/ws-mock.ts
 function wsMock($asai) {
   function getKeyByData(reqdata, hostdir) {
-    return "_wstask_" + (hostdir || "") + "_" + (_optionalChain([reqdata, 'optionalAccess', _248 => _248.id]) || _optionalChain([reqdata, 'optionalAccess', _249 => _249.ty]) + "." + _optionalChain([reqdata, 'optionalAccess', _250 => _250.ac]));
+    return "_wstask_" + (hostdir || "") + "_" + (_optionalChain([reqdata, 'optionalAccess', _255 => _255.id]) || _optionalChain([reqdata, 'optionalAccess', _256 => _256.ty]) + "." + _optionalChain([reqdata, 'optionalAccess', _257 => _257.ac]));
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getKeyByData, "getKeyByData");
   function getMockDb(workopt) {
     const { reqdata, mockdata } = workopt;
-    const wsfn = _optionalChain([mockdata, 'optionalAccess', _251 => _251.fn]) ? _optionalChain([$asai, 'access', _252 => _252.asaimock, 'access', _253 => _253.fn, 'optionalAccess', _254 => _254[mockdata.fn]]) : null;
+    const wsfn = _optionalChain([mockdata, 'optionalAccess', _258 => _258.fn]) ? _optionalChain([$asai, 'access', _259 => _259.asaimock, 'access', _260 => _260.fn, 'optionalAccess', _261 => _261[mockdata.fn]]) : null;
     if (wsfn) return wsfn({ workopt, $asai, mockName: mockdata.fn });
     return { ...reqdata, ...mockdata || {} };
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getMockDb, "getMockDb");
   function wsWorkApi(workopt) {
-    _optionalChain([$asai, 'access', _255 => _255.serversws, 'access', _256 => _256[workopt.hostdir], 'optionalAccess', _257 => _257.sendws, 'optionalCall', _258 => _258(workopt.reqdataisobj ? getMockDb(workopt) : workopt.reqdata, 0, workopt.ws)]);
+    _optionalChain([$asai, 'access', _262 => _262.serversws, 'access', _263 => _263[workopt.hostdir], 'optionalAccess', _264 => _264.sendws, 'optionalCall', _265 => _265(workopt.reqdataisobj ? getMockDb(workopt) : workopt.reqdata, 0, workopt.ws)]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWorkApi, "wsWorkApi");
   function wsWorkListen(workopt, reqkey) {
-    if (_optionalChain([workopt, 'access', _259 => _259.reqdata, 'optionalAccess', _260 => _260.off])) {
+    if (_optionalChain([workopt, 'access', _266 => _266.reqdata, 'optionalAccess', _267 => _267.off])) {
       if ($asai.tasksws[workopt.hostdir][reqkey]) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
         $asai.tasksws[workopt.hostdir][reqkey] = null;
@@ -2396,9 +2477,9 @@ function wsMock($asai) {
       if (!$asai.tasksws[workopt.hostdir][reqkey]) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
       }
-    }, _optionalChain([newDataMock, 'optionalAccess', _261 => _261.tc]) || 2e3);
-    _optionalChain([workopt, 'access', _262 => _262.ws, 'optionalAccess', _263 => _263.once, 'optionalCall', _264 => _264("close", () => {
-      if (_optionalChain([$asai, 'access', _265 => _265.tasksws, 'access', _266 => _266[workopt.hostdir], 'optionalAccess', _267 => _267[reqkey]])) {
+    }, _optionalChain([newDataMock, 'optionalAccess', _268 => _268.tc]) || 2e3);
+    _optionalChain([workopt, 'access', _269 => _269.ws, 'optionalAccess', _270 => _270.once, 'optionalCall', _271 => _271("close", () => {
+      if (_optionalChain([$asai, 'access', _272 => _272.tasksws, 'access', _273 => _273[workopt.hostdir], 'optionalAccess', _274 => _274[reqkey]])) {
         clearInterval($asai.tasksws[workopt.hostdir][reqkey]);
         delete $asai.tasksws[workopt.hostdir][reqkey];
       }
@@ -2406,8 +2487,8 @@ function wsMock($asai) {
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWorkListen, "wsWorkListen");
   function wsWorkMock(workopt) {
-    workopt.mockdata = workopt.reqdataisobj && _optionalChain([$asai, 'access', _268 => _268.asaimock, 'optionalAccess', _269 => _269.db, 'optionalAccess', _270 => _270[workopt.hostdir], 'optionalAccess', _271 => _271[_optionalChain([workopt, 'access', _272 => _272.reqdata, 'optionalAccess', _273 => _273.ty])]]) || {};
-    if (_optionalChain([workopt, 'access', _274 => _274.mockdata, 'optionalAccess', _275 => _275.wc])) {
+    workopt.mockdata = workopt.reqdataisobj && _optionalChain([$asai, 'access', _275 => _275.asaimock, 'optionalAccess', _276 => _276.db, 'optionalAccess', _277 => _277[workopt.hostdir], 'optionalAccess', _278 => _278[_optionalChain([workopt, 'access', _279 => _279.reqdata, 'optionalAccess', _280 => _280.ty])]]) || {};
+    if (_optionalChain([workopt, 'access', _281 => _281.mockdata, 'optionalAccess', _282 => _282.wc])) {
       wsWorkListen(workopt, getKeyByData(workopt.reqdata, workopt.hostdir));
     } else {
       wsWorkApi(workopt);
@@ -2420,11 +2501,11 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, wsMock, "wsMock");
 
 // src/infra/user-auth.ts
 async function attachServerUserLevel(req, $asai) {
-  const userinfo = _optionalChain([req, 'optionalAccess', _276 => _276.Userinfo]);
+  const userinfo = _optionalChain([req, 'optionalAccess', _283 => _283.Userinfo]);
   if (!Array.isArray(userinfo) || !userinfo[0]) return;
   const us = String(userinfo[0]);
   try {
-    const { createUserStore: createUserStore2 } = await Promise.resolve().then(() => _interopRequireWildcard(require("./user-store-55HOLHEM.cjs")));
+    const { createUserStore: createUserStore2 } = await Promise.resolve().then(() => _interopRequireWildcard(require("./user-store-6QNAL4CK.cjs")));
     const user = await createUserStore2($asai).findByUsername(us);
     if (user && user.status === "active") {
       req._serverUser = { us: user.us, lv: user.lv, status: user.status };
@@ -2432,34 +2513,34 @@ async function attachServerUserLevel(req, $asai) {
     } else {
       req._serverUser = null;
     }
-  } catch (e36) {
+  } catch (e41) {
     req._serverUser = null;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, attachServerUserLevel, "attachServerUserLevel");
 function getRequestUserLevel(req) {
-  if (_optionalChain([req, 'optionalAccess', _277 => _277._serverUser, 'optionalAccess', _278 => _278.lv]) != null) return Number(req._serverUser.lv);
-  const n = Number(_nullishCoalesce(_optionalChain([req, 'optionalAccess', _279 => _279.Userinfo, 'optionalAccess', _280 => _280[1]]), () => ( -1)));
+  if (_optionalChain([req, 'optionalAccess', _284 => _284._serverUser, 'optionalAccess', _285 => _285.lv]) != null) return Number(req._serverUser.lv);
+  const n = Number(_nullishCoalesce(_optionalChain([req, 'optionalAccess', _286 => _286.Userinfo, 'optionalAccess', _287 => _287[1]]), () => ( -1)));
   return Number.isFinite(n) ? n : -1;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getRequestUserLevel, "getRequestUserLevel");
 function getRequestUsername(req) {
-  if (_optionalChain([req, 'optionalAccess', _281 => _281._serverUser, 'optionalAccess', _282 => _282.us])) return String(req._serverUser.us);
-  const us = _optionalChain([req, 'optionalAccess', _283 => _283.Userinfo, 'optionalAccess', _284 => _284[0]]);
+  if (_optionalChain([req, 'optionalAccess', _288 => _288._serverUser, 'optionalAccess', _289 => _289.us])) return String(req._serverUser.us);
+  const us = _optionalChain([req, 'optionalAccess', _290 => _290.Userinfo, 'optionalAccess', _291 => _291[0]]);
   return us ? String(us) : void 0;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getRequestUsername, "getRequestUsername");
 
 // src/infra/access-control.ts
 function getSecurityConfig($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _285 => _285.hostconfig, 'optionalAccess', _286 => _286.security]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _292 => _292.hostconfig, 'optionalAccess', _293 => _293.security]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSecurityConfig, "getSecurityConfig");
-function pathMatchesPattern(path8, pattern) {
+function pathMatchesPattern(path9, pattern) {
   if (pattern.endsWith("*")) {
-    return path8.startsWith(pattern.slice(0, -1));
+    return path9.startsWith(pattern.slice(0, -1));
   }
-  return path8 === pattern;
+  return path9 === pattern;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, pathMatchesPattern, "pathMatchesPattern");
 function isAuthSkipped($asai, pathname) {
@@ -2486,13 +2567,13 @@ function validateHttpAuth(req, $asai, pathname) {
   if (!isAuthRequired($asai, pathname)) {
     return { ok: true };
   }
-  const userinfo = _optionalChain([req, 'optionalAccess', _287 => _287.Userinfo]);
+  const userinfo = _optionalChain([req, 'optionalAccess', _294 => _294.Userinfo]);
   const ip = getClientIp(req);
   if (!Array.isArray(userinfo) || userinfo.length < 3 || !userinfo[0]) {
     logSecurityEvent($asai, {
       type: "AUTH_MISSING",
       path: pathname,
-      method: _optionalChain([req, 'optionalAccess', _288 => _288.method]),
+      method: _optionalChain([req, 'optionalAccess', _295 => _295.method]),
       ip,
       detail: "Userinfo header missing or invalid"
     });
@@ -2506,7 +2587,7 @@ function validateHttpAuth(req, $asai, pathname) {
     logSecurityEvent($asai, {
       type: "ACCESS_DENIED",
       path: pathname,
-      method: _optionalChain([req, 'optionalAccess', _289 => _289.method]),
+      method: _optionalChain([req, 'optionalAccess', _296 => _296.method]),
       user: String(us),
       level: userLevel,
       ip,
@@ -2518,13 +2599,13 @@ function validateHttpAuth(req, $asai, pathname) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, validateHttpAuth, "validateHttpAuth");
 async function validateHttpAuthAsync(req, $asai, pathname) {
-  if (Array.isArray(_optionalChain([req, 'optionalAccess', _290 => _290.Userinfo])) && req.Userinfo[0]) {
+  if (Array.isArray(_optionalChain([req, 'optionalAccess', _297 => _297.Userinfo])) && req.Userinfo[0]) {
     await attachServerUserLevel(req, $asai);
     if (!req._serverUser && isAuthRequired($asai, pathname)) {
       logSecurityEvent($asai, {
         type: "ACCESS_DENIED",
         path: pathname,
-        method: _optionalChain([req, 'optionalAccess', _291 => _291.method]),
+        method: _optionalChain([req, 'optionalAccess', _298 => _298.method]),
         user: String(req.Userinfo[0]),
         ip: getClientIp(req),
         detail: "User not found or inactive"
@@ -2586,7 +2667,7 @@ function resolveApiCorsOrigin(req, hostcfg, getHeader) {
     if (referer) {
       try {
         origin = new URL(referer).origin;
-      } catch (e37) {
+      } catch (e42) {
         const parts = referer.split("/");
         if (parts.length >= 3) origin = `${parts[0]}//${parts[2]}`;
       }
@@ -2598,7 +2679,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveApiCorsOrigin, "resolveApiCorsOrigi
 function isApiCorsAllowed(origin, hostcfg, hostHeader) {
   if (!origin) return false;
   if (origin === "*") return true;
-  const corsList = _optionalChain([hostcfg, 'optionalAccess', _292 => _292.cors]);
+  const corsList = _optionalChain([hostcfg, 'optionalAccess', _299 => _299.cors]);
   if (!Array.isArray(corsList) || !corsList.length) return true;
   if (corsList.includes(origin)) return true;
   if (hostHeader && origin.includes(hostHeader)) return true;
@@ -2644,19 +2725,19 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, isPlainSourcePost, "isPlainSourcePost");
 function processPostPayload($asai, req, postdata, pm) {
   let isAes = false;
   let out = postdata;
-  if ($asai.$lib.aesfns && _optionalChain([out, 'optionalAccess', _293 => _293.startsWith, 'optionalCall', _294 => _294('{"aes":')])) {
+  if ($asai.$lib.aesfns && _optionalChain([out, 'optionalAccess', _300 => _300.startsWith, 'optionalCall', _301 => _301('{"aes":')])) {
     isAes = true;
     const aesData = JSON.parse(out);
     out = $asai.$lib.aesfns.reqAES({ data: aesData });
-    if (_optionalChain([aesData, 'optionalAccess', _295 => _295.aes]) === 2 && typeof out === "string") {
+    if (_optionalChain([aesData, 'optionalAccess', _302 => _302.aes]) === 2 && typeof out === "string") {
       try {
         out = JSON.parse(out);
-      } catch (e38) {
+      } catch (e43) {
       }
     }
   }
   const plainJson = typeof out === "string" && out.trimStart().startsWith("{");
-  if (_optionalChain([req, 'optionalAccess', _296 => _296.Userinfo, 'optionalAccess', _297 => _297[2]]) && !plainJson && !isRawUploadPost(_optionalChain([req, 'optionalAccess', _298 => _298.url])) && !isPlainSourcePost(_optionalChain([req, 'optionalAccess', _299 => _299.url]))) {
+  if (_optionalChain([req, 'optionalAccess', _303 => _303.Userinfo, 'optionalAccess', _304 => _304[2]]) && !plainJson && !isRawUploadPost(_optionalChain([req, 'optionalAccess', _305 => _305.url])) && !isPlainSourcePost(_optionalChain([req, 'optionalAccess', _306 => _306.url]))) {
     pm = req.Userinfo[2];
     out = $asai.$lib.AsCode.asdecode(out, pm);
   }
@@ -2664,7 +2745,7 @@ function processPostPayload($asai, req, postdata, pm) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, processPostPayload, "processPostPayload");
 var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _300 => _300.fn, 'optionalCall', _301 => _301($asai)]);
+  _optionalChain([opt, 'optionalAccess', _307 => _307.fn, 'optionalCall', _308 => _308($asai)]);
   function getHeader(req, key) {
     return req.headers[key.toLowerCase()] || "";
   }
@@ -2673,7 +2754,7 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   let apiRouteCacheLen = -1;
   function findApiHandler($asai2, pathname) {
     const apis = $asai2.hostserverapis;
-    if (!_optionalChain([apis, 'optionalAccess', _302 => _302.length])) return void 0;
+    if (!_optionalChain([apis, 'optionalAccess', _309 => _309.length])) return void 0;
     if (!apiRouteCache || apiRouteCacheLen !== apis.length) {
       apiRouteCache = apis.map((elp) => ({ key: elp, path: `/api/${elp}` }));
       apiRouteCacheLen = apis.length;
@@ -2721,9 +2802,9 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
           pm: decodeURIComponent(urlParse.search.substring(4))
         };
         if (req.url.indexOf("binary") === -1) {
-          if (_optionalChain([req, 'optionalAccess', _303 => _303.Userinfo]) && _optionalChain([req, 'optionalAccess', _304 => _304.Userinfo, 'access', _305 => _305[2]]) && _optionalChain([query, 'optionalAccess', _306 => _306.pm])) {
+          if (_optionalChain([req, 'optionalAccess', _310 => _310.Userinfo]) && _optionalChain([req, 'optionalAccess', _311 => _311.Userinfo, 'access', _312 => _312[2]]) && _optionalChain([query, 'optionalAccess', _313 => _313.pm])) {
             pm = req.Userinfo[2];
-            query = $asai.$lib.AsCode.asdecode(_optionalChain([query, 'optionalAccess', _307 => _307.pm]), pm);
+            query = $asai.$lib.AsCode.asdecode(_optionalChain([query, 'optionalAccess', _314 => _314.pm]), pm);
             query = Object.fromEntries(new URLSearchParams("?" + query).entries());
           }
         }
@@ -2742,7 +2823,7 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       const releaseSlot = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, () => releaseApiSlot(hostdir, clientIp), "releaseSlot");
       res.once("finish", releaseSlot);
       res.once("close", releaseSlot);
-      const maxBody = _optionalChain([$asai, 'access', _308 => _308.hostconfig, 'optionalAccess', _309 => _309.maxbody]) || 100 * 1024 * 1024;
+      const maxBody = _optionalChain([$asai, 'access', _315 => _315.hostconfig, 'optionalAccess', _316 => _316.maxbody]) || 100 * 1024 * 1024;
       const isTextPost = req.method === "POST" && req.url.indexOf("binary") === -1;
       const bodyPromise = isTextPost ? readRequestBody(req, maxBody) : null;
       void (async () => {
@@ -2756,16 +2837,16 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
             ]);
           } catch (err) {
             releaseSlot();
-            if (_optionalChain([err, 'optionalAccess', _310 => _310.message]) === "PAYLOAD_TOO_LARGE") {
+            if (_optionalChain([err, 'optionalAccess', _317 => _317.message]) === "PAYLOAD_TOO_LARGE") {
               return sendError(res, 413, "Payload Too Large");
             }
-            return sendError(res, 400, _optionalChain([err, 'optionalAccess', _311 => _311.message]) || "Bad Request");
+            return sendError(res, 400, _optionalChain([err, 'optionalAccess', _318 => _318.message]) || "Bad Request");
           }
           if (!authResult.ok) {
             releaseSlot();
             return sendAuthError(res, authResult);
           }
-          let apiFn = _optionalChain([$asai, 'access', _312 => _312.hostserverapi, 'access', _313 => _313[apiHandlerKey], 'optionalCall', _314 => _314($asai, query)]);
+          let apiFn = _optionalChain([$asai, 'access', _319 => _319.hostserverapi, 'access', _320 => _320[apiHandlerKey], 'optionalCall', _321 => _321($asai, query)]);
           if (!apiFn) {
             return sendError(res, 501, "Not Implemented");
           }
@@ -2781,23 +2862,23 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
                 postdata = processed.postdata;
                 pm = processed.pm;
                 isAes = processed.isAes;
-              } catch (e39) {
+              } catch (e44) {
                 return sendError(res, 400, "AES decrypt failed");
               }
-              if (_optionalChain([apiFn, 'optionalAccess', _315 => _315.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _316 => _316.post]) === "function") {
+              if (_optionalChain([apiFn, 'optionalAccess', _322 => _322.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _323 => _323.post]) === "function") {
                 const optTmp = { qrdata, data: postdata, pm };
-                if (isAes || _optionalChain([$asai, 'access', _317 => _317.$lib, 'access', _318 => _318.aesfns, 'optionalAccess', _319 => _319.allaes])) {
-                  optTmp.resAES = _optionalChain([$asai, 'access', _320 => _320.$lib, 'access', _321 => _321.aesfns, 'optionalAccess', _322 => _322.resAES]);
+                if (isAes || _optionalChain([$asai, 'access', _324 => _324.$lib, 'access', _325 => _325.aesfns, 'optionalAccess', _326 => _326.allaes])) {
+                  optTmp.resAES = _optionalChain([$asai, 'access', _327 => _327.$lib, 'access', _328 => _328.aesfns, 'optionalAccess', _329 => _329.resAES]);
                 }
                 apiFn.post(req, res, hostdir, optTmp);
               } else {
                 res.end(typeof postdata === "string" ? postdata : JSON.stringify(_nullishCoalesce(postdata, () => ( ""))));
               }
             } else if (req.method === "GET") {
-              if (_optionalChain([apiFn, 'optionalAccess', _323 => _323.get]) && typeof _optionalChain([apiFn, 'optionalAccess', _324 => _324.get]) === "function") {
+              if (_optionalChain([apiFn, 'optionalAccess', _330 => _330.get]) && typeof _optionalChain([apiFn, 'optionalAccess', _331 => _331.get]) === "function") {
                 const optTmp = { qrdata, data: qrdata, pm };
-                if (isAes || _optionalChain([$asai, 'access', _325 => _325.$lib, 'access', _326 => _326.aesfns, 'optionalAccess', _327 => _327.allaes])) {
-                  optTmp.resAES = _optionalChain([$asai, 'access', _328 => _328.$lib, 'access', _329 => _329.aesfns, 'optionalAccess', _330 => _330.resAES]);
+                if (isAes || _optionalChain([$asai, 'access', _332 => _332.$lib, 'access', _333 => _333.aesfns, 'optionalAccess', _334 => _334.allaes])) {
+                  optTmp.resAES = _optionalChain([$asai, 'access', _335 => _335.$lib, 'access', _336 => _336.aesfns, 'optionalAccess', _337 => _337.resAES]);
                 }
                 apiFn.get(req, res, hostdir, optTmp);
               } else {
@@ -2805,12 +2886,12 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
               }
             }
           } else {
-            if (_optionalChain([Object, 'access', _331 => _331.keys, 'call', _332 => _332(query), 'optionalAccess', _333 => _333.length])) {
+            if (_optionalChain([Object, 'access', _338 => _338.keys, 'call', _339 => _339(query), 'optionalAccess', _340 => _340.length])) {
               qrdata = query;
             }
             if (req.method === "POST") {
               $asai.$lib.AsNodeTool.upBinary(req).then((postdata2) => {
-                if (_optionalChain([apiFn, 'optionalAccess', _334 => _334.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _335 => _335.post]) === "function") {
+                if (_optionalChain([apiFn, 'optionalAccess', _341 => _341.post]) && typeof _optionalChain([apiFn, 'optionalAccess', _342 => _342.post]) === "function") {
                   apiFn.post(req, res, hostdir, {
                     qrdata,
                     data: postdata2
@@ -2826,13 +2907,13 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         } catch (err) {
           releaseSlot();
           if (!res.headersSent) {
-            return sendError(res, 500, _optionalChain([err, 'optionalAccess', _336 => _336.message]) || "Internal Server Error");
+            return sendError(res, 500, _optionalChain([err, 'optionalAccess', _343 => _343.message]) || "Internal Server Error");
           }
         }
       })().catch((err) => {
         releaseSlot();
         if (!res.headersSent) {
-          sendError(res, 500, _optionalChain([err, 'optionalAccess', _337 => _337.message]) || "Internal Server Error");
+          sendError(res, 500, _optionalChain([err, 'optionalAccess', _344 => _344.message]) || "Internal Server Error");
         }
       });
     } else {
@@ -2845,12 +2926,12 @@ var Api_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
 
 // src/common/server/Ws.ts
 var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _338 => _338.fn, 'optionalCall', _339 => _339($asai)]);
+  _optionalChain([opt, 'optionalAccess', _345 => _345.fn, 'optionalCall', _346 => _346($asai)]);
   const wsHandlerCache = /* @__PURE__ */ new Map();
   const routeIndex = ensureWsRouteIndex($asai);
   function getWsHandler(handlerKey) {
     if (!wsHandlerCache.has(handlerKey)) {
-      wsHandlerCache.set(handlerKey, _optionalChain([$asai, 'access', _340 => _340.hostserverws, 'access', _341 => _341[handlerKey], 'optionalCall', _342 => _342($asai)]));
+      wsHandlerCache.set(handlerKey, _optionalChain([$asai, 'access', _347 => _347.hostserverws, 'access', _348 => _348[handlerKey], 'optionalCall', _349 => _349($asai)]));
     }
     return wsHandlerCache.get(handlerKey);
   }
@@ -2874,21 +2955,21 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
       let reqdata = parseMessage(msg);
       let handlerKey;
       if (reqdata === "ping") {
-        _optionalChain([ws2, 'access', _343 => _343.send, 'optionalCall', _344 => _344("pong")]);
+        _optionalChain([ws2, 'access', _350 => _350.send, 'optionalCall', _351 => _351("pong")]);
         return;
       } else {
         const reqdataisobj = typeof reqdata === "object" && reqdata !== null;
-        handlerKey = reqdataisobj ? routeIndex.matchTy(_optionalChain([reqdata, 'optionalAccess', _345 => _345.ty])) : routeIndex.matchString(reqdata);
-        if (!handlerKey && _optionalChain([$asai, 'access', _346 => _346.hostserverwss, 'optionalAccess', _347 => _347.length])) {
+        handlerKey = reqdataisobj ? routeIndex.matchTy(_optionalChain([reqdata, 'optionalAccess', _352 => _352.ty])) : routeIndex.matchString(reqdata);
+        if (!handlerKey && _optionalChain([$asai, 'access', _353 => _353.hostserverwss, 'optionalAccess', _354 => _354.length])) {
           handlerKey = $asai.hostserverwss.find((elp) => {
             if (reqdataisobj) {
-              return _optionalChain([reqdata, 'optionalAccess', _348 => _348.ty, 'optionalAccess', _349 => _349.startsWith, 'call', _350 => _350(elp)]);
+              return _optionalChain([reqdata, 'optionalAccess', _355 => _355.ty, 'optionalAccess', _356 => _356.startsWith, 'call', _357 => _357(elp)]);
             }
             return typeof reqdata === "string" && reqdata.startsWith(elp);
           });
         }
         if (!handlerKey) {
-          _optionalChain([$asai, 'access', _351 => _351.asaimock, 'optionalAccess', _352 => _352.wsWorkMock, 'call', _353 => _353({
+          _optionalChain([$asai, 'access', _358 => _358.asaimock, 'optionalAccess', _359 => _359.wsWorkMock, 'call', _360 => _360({
             msg,
             ws: ws2,
             hostdir,
@@ -2900,14 +2981,14 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
         }
       }
       if (!handlerKey) return;
-      _optionalChain([getWsHandler, 'call', _354 => _354(handlerKey), 'optionalAccess', _355 => _355.work, 'optionalCall', _356 => _356(reqdata, ws2, hostdir, req)]);
+      _optionalChain([getWsHandler, 'call', _361 => _361(handlerKey), 'optionalAccess', _362 => _362.work, 'optionalCall', _363 => _363(reqdata, ws2, hostdir, req)]);
     } catch (err) {
-      _optionalChain([($asai.$log || console.error), 'optionalCall', _357 => _357("WS", "handler error", err instanceof Error ? err.message : err)]);
+      _optionalChain([($asai.$log || console.error), 'optionalCall', _364 => _364("WS", "handler error", err instanceof Error ? err.message : err)]);
     }
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, wsWork, "wsWork");
   function _getMessage(msg) {
-    if (_optionalChain([msg, 'optionalAccess', _358 => _358.db, 'optionalAccess', _359 => _359.aes]) && _optionalChain([$asai, 'access', _360 => _360.$lib, 'optionalAccess', _361 => _361.aesfns, 'optionalAccess', _362 => _362.reqAES])) {
+    if (_optionalChain([msg, 'optionalAccess', _365 => _365.db, 'optionalAccess', _366 => _366.aes]) && _optionalChain([$asai, 'access', _367 => _367.$lib, 'optionalAccess', _368 => _368.aesfns, 'optionalAccess', _369 => _369.reqAES])) {
       msg.db = $asai.$lib.aesfns.reqAES({ data: msg.db });
     }
     return msg;
@@ -2934,12 +3015,12 @@ var Ws_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, o
 
 // src/common/server/Sys.ts
 var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, opt = {}) => {
-  _optionalChain([opt, 'optionalAccess', _363 => _363.fn, 'optionalCall', _364 => _364($asai)]);
+  _optionalChain([opt, 'optionalAccess', _370 => _370.fn, 'optionalCall', _371 => _371($asai)]);
   let sysRouteCache = null;
   let sysRouteCacheLen = -1;
   function findSystemHandler(req) {
     const routes = $asai.hostserversyss;
-    if (!_optionalChain([routes, 'optionalAccess', _365 => _365.length])) return void 0;
+    if (!_optionalChain([routes, 'optionalAccess', _372 => _372.length])) return void 0;
     if (!sysRouteCache || sysRouteCacheLen !== routes.length) {
       sysRouteCache = routes.map((elp) => ({ key: elp, route: `/${elp}` }));
       sysRouteCacheLen = routes.length;
@@ -2973,21 +3054,21 @@ var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         if (!authResult.ok) {
           return sendAuthError(res, authResult);
         }
-        const handler = _optionalChain([$asai, 'access', _366 => _366.hostserversys, 'access', _367 => _367[handlerKey], 'optionalCall', _368 => _368($asai)]);
+        const handler = _optionalChain([$asai, 'access', _373 => _373.hostserversys, 'access', _374 => _374[handlerKey], 'optionalCall', _375 => _375($asai)]);
         if (!handler) {
           return sendError(res, 500, "Handler Initialization Failed");
         }
-        if (_optionalChain([handler, 'optionalAccess', _369 => _369.show]) && typeof _optionalChain([handler, 'optionalAccess', _370 => _370.show]) === "function") {
+        if (_optionalChain([handler, 'optionalAccess', _376 => _376.show]) && typeof _optionalChain([handler, 'optionalAccess', _377 => _377.show]) === "function") {
           handler.show(req, res, hostdir);
         } else {
           res.end("postdata");
         }
       } catch (err) {
-        return sendError(res, 500, _optionalChain([err, 'optionalAccess', _371 => _371.message]) || "Internal Server Error");
+        return sendError(res, 500, _optionalChain([err, 'optionalAccess', _378 => _378.message]) || "Internal Server Error");
       }
     })().catch((err) => {
       if (!res.headersSent) {
-        sendError(res, 500, _optionalChain([err, 'optionalAccess', _372 => _372.message]) || "Internal Server Error");
+        sendError(res, 500, _optionalChain([err, 'optionalAccess', _379 => _379.message]) || "Internal Server Error");
       }
     });
   }
@@ -2997,14 +3078,14 @@ var Sys_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
 
 // src/common/server/WsClient.ts
 var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, wsname) => {
-  if (!_optionalChain([$asai, 'optionalAccess', _373 => _373.clientws])) {
+  if (!_optionalChain([$asai, 'optionalAccess', _380 => _380.clientws])) {
     $asai.clientws = {};
   }
   if (!$asai.clientws[wsname]) {
     $asai.clientws[wsname] = { tasks: /* @__PURE__ */ new Map() };
   }
   function getKeyByData(msgdata) {
-    return _optionalChain([msgdata, 'optionalAccess', _374 => _374.id]) || _optionalChain([msgdata, 'optionalAccess', _375 => _375.ty]);
+    return _optionalChain([msgdata, 'optionalAccess', _381 => _381.id]) || _optionalChain([msgdata, 'optionalAccess', _382 => _382.ty]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getKeyByData, "getKeyByData");
   function clientwsInit() {
@@ -3017,7 +3098,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
       };
       $asai.clientws[wsname].socket.on("error", (err) => {
         $asai.clientws[wsname].open = 0;
-        _optionalChain([$asai, 'access', _376 => _376.hostconfig, 'access', _377 => _377.logger, 'optionalAccess', _378 => _378.lv, 'optionalAccess', _379 => _379.view]) && console.error(
+        _optionalChain([$asai, 'access', _383 => _383.hostconfig, 'access', _384 => _384.logger, 'optionalAccess', _385 => _385.lv, 'optionalAccess', _386 => _386.view]) && console.error(
           666.2203,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is error.`,
           err
@@ -3026,14 +3107,14 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
       });
       $asai.clientws[wsname].socket.on("close", () => {
         $asai.clientws[wsname].open = 0;
-        _optionalChain([$asai, 'access', _380 => _380.hostconfig, 'access', _381 => _381.logger, 'optionalAccess', _382 => _382.lv, 'optionalAccess', _383 => _383.view]) && console.error(
+        _optionalChain([$asai, 'access', _387 => _387.hostconfig, 'access', _388 => _388.logger, 'optionalAccess', _389 => _389.lv, 'optionalAccess', _390 => _390.view]) && console.error(
           666.2205,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is close.`
         );
         reject();
       });
       $asai.clientws[wsname].socket.onopen = () => {
-        _optionalChain([$asai, 'access', _384 => _384.hostconfig, 'access', _385 => _385.logger, 'optionalAccess', _386 => _386.lv, 'optionalAccess', _387 => _387.view]) && console.log(
+        _optionalChain([$asai, 'access', _391 => _391.hostconfig, 'access', _392 => _392.logger, 'optionalAccess', _393 => _393.lv, 'optionalAccess', _394 => _394.view]) && console.log(
           666.2201,
           `${wsname}=${$asai.command.commandconfig.clientws[wsname]} is open.`
         );
@@ -3056,7 +3137,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
         const key = getKeyByData(messageData);
         const task = $asai.clientws[wsname].tasks.get(key);
         if (task) {
-          _optionalChain([task, 'optionalAccess', _388 => _388.callback, 'call', _389 => _389(messageData)]);
+          _optionalChain([task, 'optionalAccess', _395 => _395.callback, 'call', _396 => _396(messageData)]);
           if (messageData.ty && !messageData.id) {
           } else {
             $asai.clientws[wsname].tasks.delete(key);
@@ -3110,7 +3191,7 @@ var WsClient_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($a
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, clientwsWatch, "clientwsWatch");
   function clientwsWatchOff(messageData) {
-    if (_optionalChain([messageData, 'optionalAccess', _390 => _390.ty]) === "clear") {
+    if (_optionalChain([messageData, 'optionalAccess', _397 => _397.ty]) === "clear") {
       $asai.clientws[wsname].tasks = /* @__PURE__ */ new Map();
     } else {
       const key = getKeyByData(messageData);
@@ -3151,7 +3232,7 @@ var ping_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai)
 var web_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
   function chatBoard(msgdata, ws2, hostdir, req) {
     let room;
-    if (_optionalChain([msgdata, 'access', _391 => _391.db, 'optionalAccess', _392 => _392.room]) && typeof msgdata.db.room === "string") {
+    if (_optionalChain([msgdata, 'access', _398 => _398.db, 'optionalAccess', _399 => _399.room]) && typeof msgdata.db.room === "string") {
       room = msgdata.db.room;
       delete msgdata.db.room;
     } else {
@@ -3208,26 +3289,26 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
     removeFile: removeFile2,
     resolvePathUnderBase: resolvePathUnderBase2
   } = $asai.$lib.AsFs;
-  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'access', _393 => _393.$lib, 'optionalAccess', _394 => _394.reqWork, 'optionalCall', _395 => _395($asai)]);
+  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'access', _400 => _400.$lib, 'optionalAccess', _401 => _401.reqWork, 'optionalCall', _402 => _402($asai)]);
   function mgLog(...arg) {
     mnLog("LOG", ...arg);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mgLog, "mgLog");
   function getDir(opt) {
-    let tmpDir = _optionalChain([opt, 'access', _396 => _396.qrdata, 'optionalAccess', _397 => _397.dir]) || _optionalChain([opt, 'access', _398 => _398.data, 'optionalAccess', _399 => _399.dir]);
+    let tmpDir = _optionalChain([opt, 'access', _403 => _403.qrdata, 'optionalAccess', _404 => _404.dir]) || _optionalChain([opt, 'access', _405 => _405.data, 'optionalAccess', _406 => _406.dir]);
     if (tmpDir) {
       tmpDir = decodeURIComponent(tmpDir);
     } else {
-      tmpDir = _optionalChain([opt, 'access', _400 => _400.qrdata, 'optionalAccess', _401 => _401.ty]) || _optionalChain([opt, 'access', _402 => _402.data, 'optionalAccess', _403 => _403.ty]);
+      tmpDir = _optionalChain([opt, 'access', _407 => _407.qrdata, 'optionalAccess', _408 => _408.ty]) || _optionalChain([opt, 'access', _409 => _409.data, 'optionalAccess', _410 => _410.ty]);
       if (tmpDir) {
         tmpDir = decodeURIComponent(tmpDir);
         if (tmpDir === "access-clf" || tmpDir === "access-w3c") {
-          tmpDir = _optionalChain([$asai, 'access', _404 => _404.hostconfig, 'access', _405 => _405.logger, 'optionalAccess', _406 => _406.path, 'optionalAccess', _407 => _407.access]) || "";
+          tmpDir = _optionalChain([$asai, 'access', _411 => _411.hostconfig, 'access', _412 => _412.logger, 'optionalAccess', _413 => _413.path, 'optionalAccess', _414 => _414.access]) || "";
         } else {
-          tmpDir = _optionalChain([$asai, 'access', _408 => _408.hostconfig, 'access', _409 => _409.logger, 'optionalAccess', _410 => _410.path, 'optionalAccess', _411 => _411[tmpDir]]) || "";
+          tmpDir = _optionalChain([$asai, 'access', _415 => _415.hostconfig, 'access', _416 => _416.logger, 'optionalAccess', _417 => _417.path, 'optionalAccess', _418 => _418[tmpDir]]) || "";
         }
       } else {
-        tmpDir = _optionalChain([$asai, 'access', _412 => _412.hostconfig, 'access', _413 => _413.logger, 'optionalAccess', _414 => _414.path, 'optionalAccess', _415 => _415.client]) || "";
+        tmpDir = _optionalChain([$asai, 'access', _419 => _419.hostconfig, 'access', _420 => _420.logger, 'optionalAccess', _421 => _421.path, 'optionalAccess', _422 => _422.client]) || "";
       }
     }
     return tmpDir;
@@ -3245,7 +3326,7 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       return;
     }
     if (url.startsWith("/api/asailog/manage/add/")) {
-      if (!await ensureLv(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         mgLog("add", "server:", opt.data);
         await $asai.$log("LOG", "ADD", opt.data);
@@ -3259,7 +3340,7 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       if (!await ensureLv(req, $asai, 3)) return sendFail(res, "Forbidden", opt);
       try {
         const baseDir = getDir(opt);
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _416 => _416.qrdata, 'optionalAccess', _417 => _417.path]) || _optionalChain([opt, 'access', _418 => _418.data, 'optionalAccess', _419 => _419.path]));
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _423 => _423.qrdata, 'optionalAccess', _424 => _424.path]) || _optionalChain([opt, 'access', _425 => _425.data, 'optionalAccess', _426 => _426.path]));
         const jsonpath = resolvePathUnderBase2(baseDir, relPath);
         await ensureFile2(jsonpath);
         mgLog("ENSURE", jsonpath);
@@ -3278,9 +3359,9 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
   async function get(req, res, hostdir, opt) {
     const url = req.url;
     if (url.startsWith("/api/asailog/manage/selectlist/")) {
-      if (!await ensureLv(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ty = decodeURIComponent(_optionalChain([opt, 'access', _420 => _420.qrdata, 'optionalAccess', _421 => _421.ty]) || _optionalChain([opt, 'access', _422 => _422.data, 'optionalAccess', _423 => _423.ty]) || "client");
+        const ty = decodeURIComponent(_optionalChain([opt, 'access', _427 => _427.qrdata, 'optionalAccess', _428 => _428.ty]) || _optionalChain([opt, 'access', _429 => _429.data, 'optionalAccess', _430 => _430.ty]) || "client");
         if (!_chunkHR5JKN7Ycjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
           const kind = ty === "sec" ? "sec" : "web";
           const groups = await _chunkHR5JKN7Ycjs.listUnifiedGroups.call(void 0, $asai, { kind, source: ty === "sec" ? "sec" : ty });
@@ -3306,10 +3387,10 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       return;
     }
     if (url.startsWith("/api/asailog/manage/select/")) {
-      if (!await ensureLv(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLv(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ty = decodeURIComponent(_optionalChain([opt, 'access', _424 => _424.qrdata, 'optionalAccess', _425 => _425.ty]) || _optionalChain([opt, 'access', _426 => _426.data, 'optionalAccess', _427 => _427.ty]) || "client");
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _428 => _428.qrdata, 'optionalAccess', _429 => _429.path]) || _optionalChain([opt, 'access', _430 => _430.data, 'optionalAccess', _431 => _431.path]));
+        const ty = decodeURIComponent(_optionalChain([opt, 'access', _431 => _431.qrdata, 'optionalAccess', _432 => _432.ty]) || _optionalChain([opt, 'access', _433 => _433.data, 'optionalAccess', _434 => _434.ty]) || "client");
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _435 => _435.qrdata, 'optionalAccess', _436 => _436.path]) || _optionalChain([opt, 'access', _437 => _437.data, 'optionalAccess', _438 => _438.path]));
         if (!_chunkHR5JKN7Ycjs.prefersDiskLogAccess.call(void 0, $asai) && _chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai) && (ty === "client" || ty === "server" || ty === "sec")) {
           const data2 = await _chunkHR5JKN7Ycjs.readWebLogFromStore.call(void 0, $asai, ty, relPath);
           if (data2) {
@@ -3337,7 +3418,7 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
       if (!await ensureLv(req, $asai, 3)) return sendFail(res, "Forbidden", opt);
       try {
         const baseDir = getDir(opt);
-        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _432 => _432.qrdata, 'optionalAccess', _433 => _433.path]) || _optionalChain([opt, 'access', _434 => _434.data, 'optionalAccess', _435 => _435.path]));
+        const relPath = decodeURIComponent(_optionalChain([opt, 'access', _439 => _439.qrdata, 'optionalAccess', _440 => _440.path]) || _optionalChain([opt, 'access', _441 => _441.data, 'optionalAccess', _442 => _442.path]));
         const fileName = relPath.split(/[/\\]/).pop() || relPath;
         if (_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai)) {
           await _chunkHR5JKN7Ycjs.purgeStoreEntriesForFile.call(void 0, $asai, fileName).catch(() => void 0);
@@ -3360,14 +3441,14 @@ var logmanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($
 
 // src/infra/siem-auth.ts
 function isSiemEnabled($asai) {
-  const cfg = _optionalChain([$asai, 'optionalAccess', _436 => _436.hostconfig, 'optionalAccess', _437 => _437.logger, 'optionalAccess', _438 => _438.siem]);
-  return !!(_optionalChain([cfg, 'optionalAccess', _439 => _439.enabled]) && getSiemToken($asai));
+  const cfg = _optionalChain([$asai, 'optionalAccess', _443 => _443.hostconfig, 'optionalAccess', _444 => _444.logger, 'optionalAccess', _445 => _445.siem]);
+  return !!(_optionalChain([cfg, 'optionalAccess', _446 => _446.enabled]) && getSiemToken($asai));
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isSiemEnabled, "isSiemEnabled");
 function getSiemToken($asai) {
   const fromEnv = process.env.ASAI_SIEM_TOKEN;
   if (typeof fromEnv === "string" && fromEnv.trim()) return fromEnv.trim();
-  const fromCfg = _optionalChain([$asai, 'optionalAccess', _440 => _440.hostconfig, 'optionalAccess', _441 => _441.logger, 'optionalAccess', _442 => _442.siem, 'optionalAccess', _443 => _443.token]);
+  const fromCfg = _optionalChain([$asai, 'optionalAccess', _447 => _447.hostconfig, 'optionalAccess', _448 => _448.logger, 'optionalAccess', _449 => _449.siem, 'optionalAccess', _450 => _450.token]);
   return typeof fromCfg === "string" ? fromCfg.trim() : "";
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSiemToken, "getSiemToken");
@@ -3375,9 +3456,9 @@ function isSiemTokenValid($asai, req) {
   if (!isSiemEnabled($asai)) return false;
   const expected = getSiemToken($asai);
   if (!expected) return false;
-  const header = _optionalChain([req, 'optionalAccess', _444 => _444.headers, 'optionalAccess', _445 => _445["x-siem-token"]]) || _optionalChain([req, 'optionalAccess', _446 => _446.headers, 'optionalAccess', _447 => _447["x-api-key"]]);
+  const header = _optionalChain([req, 'optionalAccess', _451 => _451.headers, 'optionalAccess', _452 => _452["x-siem-token"]]) || _optionalChain([req, 'optionalAccess', _453 => _453.headers, 'optionalAccess', _454 => _454["x-api-key"]]);
   if (typeof header === "string" && header === expected) return true;
-  const q = _optionalChain([req, 'optionalAccess', _448 => _448.query]) || {};
+  const q = _optionalChain([req, 'optionalAccess', _455 => _455.query]) || {};
   const qToken = q.siem_token || q.token;
   return typeof qToken === "string" && qToken === expected;
 }
@@ -3401,20 +3482,20 @@ function getNs(raw) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getNs, "getNs");
 async function ensureServerUser(req, $asai) {
-  if (Array.isArray(_optionalChain([req, 'optionalAccess', _449 => _449.Userinfo])) && req.Userinfo[0]) {
+  if (Array.isArray(_optionalChain([req, 'optionalAccess', _456 => _456.Userinfo])) && req.Userinfo[0]) {
     await attachServerUserLevel(req, $asai);
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, ensureServerUser, "ensureServerUser");
 var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _450 => _450.$lib, 'optionalAccess', _451 => _451.reqWork, 'optionalCall', _452 => _452($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _457 => _457.$lib, 'optionalAccess', _458 => _458.reqWork, 'optionalCall', _459 => _459($asai)]) || {};
   const IL = $asai.$lib.InterventionLog;
   async function get(req, res, hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/asailog/intervention/selectlist/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const ns = getNs(_optionalChain([opt, 'access', _453 => _453.qrdata, 'optionalAccess', _454 => _454.ns]) || _optionalChain([opt, 'access', _455 => _455.data, 'optionalAccess', _456 => _456.ns]));
+        const ns = getNs(_optionalChain([opt, 'access', _460 => _460.qrdata, 'optionalAccess', _461 => _461.ns]) || _optionalChain([opt, 'access', _462 => _462.data, 'optionalAccess', _463 => _463.ns]));
         let list = await IL.listInterventionFiles($asai, ns);
         if (_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai) && !_chunkHR5JKN7Ycjs.prefersDiskLogAccess.call(void 0, $asai)) {
           const groups = await _chunkHR5JKN7Ycjs.listUnifiedGroups.call(void 0, $asai, { kind: "intervention", ns });
@@ -3426,27 +3507,27 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
         }
         return sendSuccess(res, { ns, files: list }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _457 => _457.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _464 => _464.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/intervention/select/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
-        const name = decodeURIComponent(_optionalChain([opt, 'access', _458 => _458.qrdata, 'optionalAccess', _459 => _459.name]) || _optionalChain([opt, 'access', _460 => _460.data, 'optionalAccess', _461 => _461.name]) || "");
-        const ns = getNs(_optionalChain([opt, 'access', _462 => _462.qrdata, 'optionalAccess', _463 => _463.ns]) || _optionalChain([opt, 'access', _464 => _464.data, 'optionalAccess', _465 => _465.ns]));
+        const name = decodeURIComponent(_optionalChain([opt, 'access', _465 => _465.qrdata, 'optionalAccess', _466 => _466.name]) || _optionalChain([opt, 'access', _467 => _467.data, 'optionalAccess', _468 => _468.name]) || "");
+        const ns = getNs(_optionalChain([opt, 'access', _469 => _469.qrdata, 'optionalAccess', _470 => _470.ns]) || _optionalChain([opt, 'access', _471 => _471.data, 'optionalAccess', _472 => _472.ns]));
         if (!name) return sendFail(res, "name required", opt);
         const content = await IL.readInterventionFile($asai, name, ns);
         return sendSuccess(res, { ns, ...content }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _466 => _466.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _473 => _473.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/intervention/types/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         return sendSuccess(res, IL.getInterventionTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _467 => _467.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _474 => _474.message]) || err, opt);
       }
     }
   }
@@ -3454,7 +3535,7 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
   async function post(req, res, hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/asailog/intervention/delete/")) {
-      if (!await ensureLogWriteAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogWriteAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
       await ensureServerUser(req, $asai);
       const lv = getRequestUserLevel(req);
       const us = getRequestUsername(req);
@@ -3476,7 +3557,7 @@ var interventionlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void
         );
         return sendSuccess(res, { ns, ...result }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _468 => _468.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _475 => _475.message]) || err, opt);
       }
     }
   }
@@ -3495,11 +3576,11 @@ function parseQuery(opt) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, parseQuery, "parseQuery");
 function parseBody(opt) {
-  if (!_optionalChain([opt, 'optionalAccess', _469 => _469.data])) return {};
+  if (!_optionalChain([opt, 'optionalAccess', _476 => _476.data])) return {};
   if (typeof opt.data === "string") {
     try {
       return JSON.parse(opt.data);
-    } catch (e40) {
+    } catch (e45) {
       return {};
     }
   }
@@ -3507,21 +3588,21 @@ function parseBody(opt) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, parseBody, "parseBody");
 var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _470 => _470.$lib, 'optionalAccess', _471 => _471.reqWork, 'optionalCall', _472 => _472($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _477 => _477.$lib, 'optionalAccess', _478 => _478.reqWork, 'optionalCall', _479 => _479($asai)]) || {};
   const IL = $asai.$lib.InterventionLog;
   async function get(req, res, hostdir, opt) {
     const url = req.url || "";
     const q = parseQuery(opt);
     if (url.startsWith("/api/asailog/store/config/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         return sendSuccess(res, _chunkHR5JKN7Ycjs.getLogStoreMeta.call(void 0, $asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _473 => _473.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _480 => _480.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/stats/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       if (!_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai)) {
         return sendSuccess(res, { store: "disabled", message: "logger.store not configured", config: _chunkHR5JKN7Ycjs.getLogStoreMeta.call(void 0, $asai) }, opt);
       }
@@ -3530,21 +3611,21 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         const stats = await _chunkHR5JKN7Ycjs.getUnifiedStats.call(void 0, $asai);
         return sendSuccess(res, { store: storeType, stats, config: _chunkHR5JKN7Ycjs.getLogStoreMeta.call(void 0, $asai) }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _474 => _474.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _481 => _481.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/compliance/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         const ns = q.ns === "test" ? "test" : "prod";
         const report = await _chunkHR5JKN7Ycjs.getComplianceReport.call(void 0, $asai, ns);
         return sendSuccess(res, report, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _475 => _475.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _482 => _482.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/search/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       if (!_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
         const result = await _chunkHR5JKN7Ycjs.searchUnifiedLogs.call(void 0, $asai, {
@@ -3562,11 +3643,11 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, result, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _476 => _476.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _483 => _483.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/export/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         const kind = q.kind || "intervention";
         const format = q.format || "raw";
@@ -3583,28 +3664,28 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, payload, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _477 => _477.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _484 => _484.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/taxonomy/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         return sendSuccess(res, IL.getInterventionTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _478 => _478.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _485 => _485.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/formats/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       try {
         const { getLogFormatTaxonomy } = await Promise.resolve().then(() => _interopRequireWildcard(require("./log-formats-TUXGMCCU.cjs")));
         return sendSuccess(res, getLogFormatTaxonomy($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _479 => _479.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _486 => _486.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/selectlist/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       if (!_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
         const kind = q.kind ? String(q.kind) : void 0;
@@ -3627,11 +3708,11 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         }
         return sendSuccess(res, { groups }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _480 => _480.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _487 => _487.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/asailog/store/select/")) {
-      if (!await ensureLogReadAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
+      if (!await ensureLogReadAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "logRead"))) return sendFail(res, "Forbidden", opt);
       if (!_chunkHR5JKN7Ycjs.isLogStoreEnabled.call(void 0, $asai)) return sendFail(res, "Log store not enabled", opt);
       try {
         const id = q.id;
@@ -3661,7 +3742,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
         });
         return sendSuccess(res, { entries: rows }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _481 => _481.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _488 => _488.message]) || err, opt);
       }
     }
   }
@@ -3669,7 +3750,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
   async function post(req, res, hostdir, opt) {
     const url = req.url || "";
     if (!url.startsWith("/api/asailog/store/archive/")) return;
-    if (!await ensureLogWriteAccess(req, $asai, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
+    if (!await ensureLogWriteAccess(req, $asai, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) return sendFail(res, "Forbidden", opt);
     try {
       const body = parseBody(opt);
       const year = Number(body.year);
@@ -3683,7 +3764,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
       });
       return sendSuccess(res, result, opt);
     } catch (err) {
-      return sendFail(res, _optionalChain([err, 'optionalAccess', _482 => _482.message]) || err, opt);
+      return sendFail(res, _optionalChain([err, 'optionalAccess', _489 => _489.message]) || err, opt);
     }
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, post, "post");
@@ -3695,7 +3776,7 @@ var unifiedlog_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
 
 var registry = null;
 function resolveFilePath($asai) {
-  const root = _optionalChain([$asai, 'optionalAccess', _483 => _483.serverRoot]) || process.cwd();
+  const root = _optionalChain([$asai, 'optionalAccess', _490 => _490.serverRoot]) || process.cwd();
   return nodePath3.join(root, "websys/sys/errorcodes.json");
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveFilePath, "resolveFilePath");
@@ -3705,7 +3786,7 @@ function loadErrorCodes($asai) {
   try {
     const raw = fs8.readFileSync(filePath, "utf8");
     registry = JSON.parse(raw);
-  } catch (e41) {
+  } catch (e46) {
     registry = { version: "0", errors: {} };
   }
   if ($asai) $asai.errorcodes = registry;
@@ -3713,7 +3794,7 @@ function loadErrorCodes($asai) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, loadErrorCodes, "loadErrorCodes");
 function getError(ec) {
-  return _optionalChain([registry, 'optionalAccess', _484 => _484.errors, 'optionalAccess', _485 => _485[ec]]) || null;
+  return _optionalChain([registry, 'optionalAccess', _491 => _491.errors, 'optionalAccess', _492 => _492[ec]]) || null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getError, "getError");
 function hasError(ec) {
@@ -3722,11 +3803,11 @@ function hasError(ec) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hasError, "hasError");
 function logError($asai, ec, params) {
   const entry = getError(ec);
-  const logFn = _optionalChain([$asai, 'optionalAccess', _486 => _486.$log]) || console.warn;
+  const logFn = _optionalChain([$asai, 'optionalAccess', _493 => _493.$log]) || console.warn;
   if (entry) {
-    logFn(`[EC:${ec}]`, entry.id || "", entry.detail || "", _optionalChain([params, 'optionalAccess', _487 => _487.length]) ? params : "");
+    logFn(`[EC:${ec}]`, entry.id || "", entry.detail || "", _optionalChain([params, 'optionalAccess', _494 => _494.length]) ? params : "");
   } else {
-    logFn(`[EC:${ec}]`, "(unregistered)", _optionalChain([params, 'optionalAccess', _488 => _488.length]) ? params : "");
+    logFn(`[EC:${ec}]`, "(unregistered)", _optionalChain([params, 'optionalAccess', _495 => _495.length]) ? params : "");
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, logError, "logError");
@@ -3754,14 +3835,14 @@ var ErrorCode_default = {
 
 // src/sysserver/api/common/errorcodes.ts
 var errorcodes_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _489 => _489.$lib, 'optionalAccess', _490 => _490.reqWork, 'optionalCall', _491 => _491($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _496 => _496.$lib, 'optionalAccess', _497 => _497.reqWork, 'optionalCall', _498 => _498($asai)]) || {};
   function get(req, res, _hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/sys/errorcodes/")) {
       try {
         return sendSuccess(res, loadErrorCodes($asai), opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _492 => _492.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _499 => _499.message]) || err, opt);
       }
     }
   }
@@ -3771,9 +3852,9 @@ var errorcodes_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (
 
 // src/sysserver/api/common/sqlitemanage.ts
 var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'optionalAccess', _493 => _493.$lib, 'optionalAccess', _494 => _494.reqWork, 'optionalCall', _495 => _495($asai)]) || {};
+  const { sendSuccess, sendFail, mnLog } = _optionalChain([$asai, 'optionalAccess', _500 => _500.$lib, 'optionalAccess', _501 => _501.reqWork, 'optionalCall', _502 => _502($asai)]) || {};
   function mgLog(...arg) {
-    _optionalChain([mnLog, 'optionalCall', _496 => _496("SQLite", ...arg)]);
+    _optionalChain([mnLog, 'optionalCall', _503 => _503("SQLite", ...arg)]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mgLog, "mgLog");
   return $asai.$lib.AsDb($asai, {
@@ -3791,7 +3872,7 @@ var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0,
       if (req.url.startsWith("/api/asaisqlite/manage/post")) {
         try {
           mgLog("POST", "custom handler triggered");
-          _optionalChain([sendSuccess, 'optionalCall', _497 => _497(res, { data: "post" }, opt)]);
+          _optionalChain([sendSuccess, 'optionalCall', _504 => _504(res, { data: "post" }, opt)]);
         } catch (err) {
           mgLog("ERROR", "post handler", err);
         }
@@ -3808,10 +3889,10 @@ var sqlitemanage_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0,
             table: dataObj.table
           });
           mgLog("SELECT", "completed");
-          _optionalChain([sendSuccess, 'optionalCall', _498 => _498(res, resdb, opt)]);
+          _optionalChain([sendSuccess, 'optionalCall', _505 => _505(res, resdb, opt)]);
         } catch (errdb) {
           mgLog("ERROR", "select", errdb);
-          _optionalChain([sendFail, 'optionalCall', _499 => _499(res, errdb, opt)]);
+          _optionalChain([sendFail, 'optionalCall', _506 => _506(res, errdb, opt)]);
         }
         return "ok";
       }
@@ -3827,7 +3908,7 @@ function promLine(name, value, labels) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, promLine, "promLine");
 var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _500 => _500.$lib, 'optionalAccess', _501 => _501.reqWork, 'optionalCall', _502 => _502($asai)]) || {};
+  const { sendSuccess, sendFail } = _optionalChain([$asai, 'access', _507 => _507.$lib, 'optionalAccess', _508 => _508.reqWork, 'optionalCall', _509 => _509($asai)]) || {};
   async function get(req, res, _hostdir, opt) {
     const url = req.url || "";
     if (url.startsWith("/api/sys/health/metrics/")) {
@@ -3836,10 +3917,10 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
         let httpTotal = 0;
         let wsTotal = 0;
         for (const set of Object.values($asai.connectionshttp || {})) {
-          httpTotal += _optionalChain([set, 'optionalAccess', _503 => _503.size]) || 0;
+          httpTotal += _optionalChain([set, 'optionalAccess', _510 => _510.size]) || 0;
         }
         for (const set of Object.values($asai.connectionsws || {})) {
-          wsTotal += _optionalChain([set, 'optionalAccess', _504 => _504.size]) || 0;
+          wsTotal += _optionalChain([set, 'optionalAccess', _511 => _511.size]) || 0;
         }
         const lines = [
           "# HELP asai_uptime_seconds Process uptime",
@@ -3861,7 +3942,7 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" });
         return res.end(lines.join("\n") + "\n");
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _505 => _505.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _512 => _512.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/sys/health/status/")) {
@@ -3874,10 +3955,10 @@ var health_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asa
           memory: process.memoryUsage(),
           quota: {
             http: Object.fromEntries(
-              Object.entries($asai.connectionshttp || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _506 => _506.size]) || 0])
+              Object.entries($asai.connectionshttp || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _513 => _513.size]) || 0])
             ),
             ws: Object.fromEntries(
-              Object.entries($asai.connectionsws || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _507 => _507.size]) || 0])
+              Object.entries($asai.connectionsws || {}).map(([k, v]) => [k, _optionalChain([v, 'optionalAccess', _514 => _514.size]) || 0])
             )
           }
         },
@@ -3918,7 +3999,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, sanitizeString, "sanitizeString");
 // src/sysserver/api/login/service/session.ts
 
 function getSessionTtlMs($asai) {
-  const hours = _nullishCoalesce(_optionalChain([$asai, 'optionalAccess', _508 => _508.hostconfig, 'optionalAccess', _509 => _509.security, 'optionalAccess', _510 => _510.sessionTtlHours]), () => ( 24));
+  const hours = _nullishCoalesce(_optionalChain([$asai, 'optionalAccess', _515 => _515.hostconfig, 'optionalAccess', _516 => _516.security, 'optionalAccess', _517 => _517.sessionTtlHours]), () => ( 24));
   return Number(hours) * 3600 * 1e3;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSessionTtlMs, "getSessionTtlMs");
@@ -3935,7 +4016,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, generatePriKey, "generatePriKey");
 function createSessionKeys($asai) {
   const sessionId = _crypto.randomUUID.call(void 0, );
   const pri = generatePriKey();
-  const sn = _optionalChain([$asai, 'optionalAccess', _511 => _511.hostconfig, 'optionalAccess', _512 => _512.asaisn]);
+  const sn = _optionalChain([$asai, 'optionalAccess', _518 => _518.hostconfig, 'optionalAccess', _519 => _519.asaisn]);
   if (!sn) throw new Error("[session] ASAI_ASAISN \u672A\u914D\u7F6E");
   const pub = $asai.$lib.AsCode.asencode(pri, sn);
   return { pri, pub, sessionId };
@@ -3962,9 +4043,9 @@ var API_ADMIN_PREFIXES = ["/api/user/login/admin/"];
 function getMinLevelForApiPath(pathname, $asai) {
   if (API_ADMIN_PREFIXES.some((p) => pathname.startsWith(p))) {
     if (pathname.includes("/admin/update") || pathname.includes("/admin/kick") || pathname.includes("/admin/delete") || pathname.includes("/admin/resetpass")) {
-      return $asai ? _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite") : _chunkZK4O4Z2Ocjs.USER_LV.DEVELOPER;
+      return $asai ? _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite") : _chunk5EWEKXQIcjs.USER_LV.DEVELOPER;
     }
-    return $asai ? _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminRead") : _chunkZK4O4Z2Ocjs.USER_LV.ADMIN;
+    return $asai ? _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminRead") : _chunk5EWEKXQIcjs.USER_LV.ADMIN;
   }
   return 0;
 }
@@ -3985,20 +4066,20 @@ function unwrapJsonString(value) {
   if (!text.startsWith("{") && !text.startsWith("[")) return value;
   try {
     return JSON.parse(text);
-  } catch (e42) {
+  } catch (e47) {
     return value;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, unwrapJsonString, "unwrapJsonString");
 function parseAuthBody(opt) {
-  let raw = _optionalChain([opt, 'optionalAccess', _513 => _513.data]);
+  let raw = _optionalChain([opt, 'optionalAccess', _520 => _520.data]);
   if (raw == null || raw === "") return {};
   if (typeof raw === "string") {
     const text = raw.trim();
     if (!text) return {};
     try {
       raw = JSON.parse(text);
-    } catch (e43) {
+    } catch (e48) {
       if (text.includes("=") && !text.startsWith("{") && !text.startsWith("[")) {
         raw = Object.fromEntries(new URLSearchParams(text));
       } else {
@@ -4066,8 +4147,39 @@ async function purgeOfflineSessions($asai, hostdir, store) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, purgeOfflineSessions, "purgeOfflineSessions");
 
 // src/sysserver/api/login/index.ts
+
+
+async function resolveUserLv($asai, store, us, wsLv) {
+  if (!us) return null;
+  try {
+    const user = await store.findByUsername(us);
+    if (user && user.lv != null && Number.isFinite(Number(user.lv))) {
+      return Number(user.lv);
+    }
+  } catch (e49) {
+  }
+  try {
+    const cfg = _chunkFRPN33BYcjs.getUserStoreConfig.call(void 0, $asai);
+    const dir = String(_optionalChain([cfg, 'optionalAccess', _521 => _521.opt, 'optionalAccess', _522 => _522.dir]) || "");
+    if (dir) {
+      const base = nodePath2.default.isAbsolute(dir) ? dir : nodePath2.default.join(process.cwd(), dir);
+      const safeUs = us.replace(/[\\/:*?"<>|]/g, "");
+      const file = nodePath2.default.join(base, "json", `${safeUs}.json`);
+      if (safeUs && fs3.default.existsSync(file)) {
+        const raw = JSON.parse(fs3.default.readFileSync(file, "utf8"));
+        const lv = Number(_optionalChain([raw, 'optionalAccess', _523 => _523.lv]));
+        if (Number.isFinite(lv)) return lv;
+      }
+    }
+  } catch (e50) {
+  }
+  if (wsLv === null || wsLv === void 0 || wsLv === "") return null;
+  const n = Number(wsLv);
+  return Number.isFinite(n) ? n : null;
+}
+_chunkSMVZ3ZDJcjs.__name.call(void 0, resolveUserLv, "resolveUserLv");
 function getSecurity($asai) {
-  return _optionalChain([$asai, 'optionalAccess', _514 => _514.hostconfig, 'optionalAccess', _515 => _515.security]) || {};
+  return _optionalChain([$asai, 'optionalAccess', _524 => _524.hostconfig, 'optionalAccess', _525 => _525.security]) || {};
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getSecurity, "getSecurity");
 function getQuota2($asai) {
@@ -4078,9 +4190,9 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, getQuota2, "getQuota");
 async function canLogin($asai, us, hostdir) {
   const quota = getQuota2($asai);
   if (!quota.enabled) return { ok: true };
-  const store = _chunkZK4O4Z2Ocjs.createUserStore.call(void 0, $asai);
+  const store = _chunk5EWEKXQIcjs.createUserStore.call(void 0, $asai);
   const total = await countOnlineSessions($asai, hostdir, store);
-  const maxLogin = _nullishCoalesce(_nullishCoalesce(quota.maxLoginSessions, () => ( _optionalChain([$asai, 'optionalAccess', _516 => _516.hostconfig, 'optionalAccess', _517 => _517.hosts, 'optionalAccess', _518 => _518.default, 'optionalAccess', _519 => _519.maxonline]))), () => ( 100));
+  const maxLogin = _nullishCoalesce(_nullishCoalesce(quota.maxLoginSessions, () => ( _optionalChain([$asai, 'optionalAccess', _526 => _526.hostconfig, 'optionalAccess', _527 => _527.hosts, 'optionalAccess', _528 => _528.default, 'optionalAccess', _529 => _529.maxonline]))), () => ( 100));
   if (total >= maxLogin) {
     return { ok: false, message: "LOGIN_QUOTA_FULL" };
   }
@@ -4093,7 +4205,7 @@ async function canLogin($asai, us, hostdir) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, canLogin, "canLogin");
 function publicUser($asai, user) {
-  const role = user.role || _chunkGXOFLFFWcjs.resolveRoleForLevel.call(void 0, $asai, user.lv).name;
+  const role = user.role || _chunkFRPN33BYcjs.resolveRoleForLevel.call(void 0, $asai, user.lv).name;
   return {
     us: user.us,
     lv: user.lv,
@@ -4107,14 +4219,14 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, publicUser, "publicUser");
 var bootstrapPromise = null;
 function ensureReady($asai) {
   if (!bootstrapPromise) {
-    bootstrapPromise = Promise.all([_chunkZK4O4Z2Ocjs.ensureBootstrapAdmin.call(void 0, $asai), _chunkGXOFLFFWcjs.loadUserLevelConfig.call(void 0, $asai)]).then(() => void 0);
+    bootstrapPromise = Promise.all([_chunk5EWEKXQIcjs.ensureBootstrapAdmin.call(void 0, $asai), _chunkFRPN33BYcjs.loadUserLevelConfig.call(void 0, $asai)]).then(() => void 0);
   }
   return bootstrapPromise;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, ensureReady, "ensureReady");
 var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai) => {
-  const { sendSuccess, sendFail, sendErr } = _optionalChain([$asai, 'access', _520 => _520.$lib, 'optionalAccess', _521 => _521.reqWork, 'optionalCall', _522 => _522($asai)]) || {};
-  const store = _chunkZK4O4Z2Ocjs.createUserStore.call(void 0, $asai);
+  const { sendSuccess, sendFail, sendErr } = _optionalChain([$asai, 'access', _530 => _530.$lib, 'optionalAccess', _531 => _531.reqWork, 'optionalCall', _532 => _532($asai)]) || {};
+  const store = _chunk5EWEKXQIcjs.createUserStore.call(void 0, $asai);
   async function checkAdmin(req, pathname, minOverride) {
     await attachServerUserLevel(req, $asai);
     const minLv = _nullishCoalesce(minOverride, () => ( getMinLevelForApiPath(pathname, $asai)));
@@ -4133,17 +4245,17 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
         if (!us || !pass || !newPass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
         const user = await store.findByUsername(us);
-        if (!user || !_chunkWXW5DYNUcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
+        if (!user || !_chunkH2QP5J7Xcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
           return sendErr(res, "AUTH_INVALID_CREDENTIALS", void 0, opt);
         }
-        const policy = _chunkGXOFLFFWcjs.getPasswordPolicy.call(void 0, $asai);
-        const policyErr = _chunkWXW5DYNUcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
+        const policy = _chunkFRPN33BYcjs.getPasswordPolicy.call(void 0, $asai);
+        const policyErr = _chunkH2QP5J7Xcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
         if (policyErr === "PASSWORD_TOO_SHORT") {
           return sendErr(res, policyErr, [String(policy.minLength)], opt);
         }
         if (policyErr) return sendErr(res, policyErr, void 0, opt);
-        const { passHash, passSalt } = _chunkWXW5DYNUcjs.hashPassword.call(void 0, newPass);
-        const passHistory = _chunkWXW5DYNUcjs.nextPassHistory.call(void 0, pass, user.passHistory, policy.historyCount);
+        const { passHash, passSalt } = _chunkH2QP5J7Xcjs.hashPassword.call(void 0, newPass);
+        const passHistory = _chunkH2QP5J7Xcjs.nextPassHistory.call(void 0, pass, user.passHistory, policy.historyCount);
         await store.updateUser(us, {
           passHash,
           passSalt,
@@ -4154,7 +4266,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         logSecurityEvent($asai, { type: "AUTH_SUCCESS", path: url, method: "POST", user: us, ip, detail: "password_changed" });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _523 => _523.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _533 => _533.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/register/")) {
@@ -4169,12 +4281,12 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const emailRaw = pickAuthField(body, "email");
         const email = emailRaw ? sanitizeString(emailRaw, 128) : void 0;
         if (!us || !pass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
-        const policyErr = _chunkWXW5DYNUcjs.validatePasswordChange.call(void 0, pass, $asai);
+        const policyErr = _chunkH2QP5J7Xcjs.validatePasswordChange.call(void 0, pass, $asai);
         if (policyErr === "PASSWORD_TOO_SHORT") {
-          return sendErr(res, policyErr, [String(_chunkGXOFLFFWcjs.getPasswordPolicy.call(void 0, $asai).minLength)], opt);
+          return sendErr(res, policyErr, [String(_chunkFRPN33BYcjs.getPasswordPolicy.call(void 0, $asai).minLength)], opt);
         }
         if (policyErr) return sendErr(res, policyErr, void 0, opt);
-        const { passHash, passSalt } = _chunkWXW5DYNUcjs.hashPassword.call(void 0, pass);
+        const { passHash, passSalt } = _chunkH2QP5J7Xcjs.hashPassword.call(void 0, pass);
         const user = await store.createUser({
           us,
           email,
@@ -4187,11 +4299,11 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         logSecurityEvent($asai, { type: "AUTH_SUCCESS", path: url, method: "POST", user: us, ip, detail: "register_ok" });
         return sendSuccess(res, { user: publicUser($asai, user) }, opt);
       } catch (err) {
-        const msg = _optionalChain([err, 'optionalAccess', _524 => _524.message]) || String(err);
+        const msg = _optionalChain([err, 'optionalAccess', _534 => _534.message]) || String(err);
         if (msg.includes("exists") || msg.includes("\u5DF2\u5B58\u5728")) {
           return sendErr(res, "USER_ALREADY_EXISTS", void 0, opt);
         }
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _525 => _525.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _535 => _535.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/auth/")) {
@@ -4201,7 +4313,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const pass = sanitizeString(pickAuthField(body, "pass", "password", "pwd"), 128);
         if (!us || !pass) return sendErr(res, "AUTH_CREDENTIALS_REQUIRED", void 0, opt);
         const user = await store.findByUsername(us);
-        if (!user || !_chunkWXW5DYNUcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
+        if (!user || !_chunkH2QP5J7Xcjs.verifyPassword.call(void 0, pass, user.passHash, user.passSalt)) {
           if (user) {
             const sec = getSecurity($asai);
             const lockoutMax = _nullishCoalesce(sec.lockoutMaxFails, () => ( 5));
@@ -4223,16 +4335,13 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (user.status === "locked" && user.lockedUntil && user.lockedUntil > Date.now()) {
           return sendErr(res, "AUTH_ACCOUNT_LOCKED", void 0, opt);
         }
-        const policy = _chunkGXOFLFFWcjs.getPasswordPolicy.call(void 0, $asai);
-        const mustChange = !!user.mustChangePassword || _chunkGXOFLFFWcjs.isPasswordExpired.call(void 0, user.passwordChangedAt, policy.maxAgeDays);
-        const hostcfg = _optionalChain([$asai, 'access', _526 => _526.getHost, 'optionalCall', _527 => _527(hostdir)]) || {};
+        const policy = _chunkFRPN33BYcjs.getPasswordPolicy.call(void 0, $asai);
+        const mustChange = !!user.mustChangePassword || _chunkFRPN33BYcjs.isPasswordExpired.call(void 0, user.passwordChangedAt, policy.maxAgeDays);
+        const hostcfg = _optionalChain([$asai, 'access', _536 => _536.getHost, 'optionalCall', _537 => _537(hostdir)]) || {};
         if (hostcfg.ckws) {
-          const existingWs = _optionalChain([$asai, 'access', _528 => _528.connectionsws, 'optionalAccess', _529 => _529[hostdir], 'optionalAccess', _530 => _530[us]]);
+          const existingWs = _optionalChain([$asai, 'access', _538 => _538.connectionsws, 'optionalAccess', _539 => _539[hostdir], 'optionalAccess', _540 => _540[us]]);
           if (existingWs) {
-            const cleared = await clearStaleWsIfDead($asai, hostdir, us, existingWs);
-            if (!cleared) {
-              kickUserWs($asai, us, hostdir);
-            }
+            await clearStaleWsIfDead($asai, hostdir, us, existingWs);
           }
         }
         const quotaCheck = await canLogin($asai, us, hostdir);
@@ -4256,13 +4365,13 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
           opt
         );
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _531 => _531.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _541 => _541.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/logout/")) {
       try {
         const bodySid = body.sessionId ? sanitizeString(body.sessionId, 64) : "";
-        const us = _optionalChain([req, 'optionalAccess', _532 => _532.Userinfo, 'optionalAccess', _533 => _533[0]]);
+        const us = _optionalChain([req, 'optionalAccess', _542 => _542.Userinfo, 'optionalAccess', _543 => _543[0]]);
         if (bodySid) {
           if (!us) {
             return sendErr(res, "AUTH_MISSING", void 0, opt);
@@ -4276,11 +4385,61 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (us) logSecurityEvent($asai, { type: "AUTH_SUCCESS", path: url, method: "POST", user: String(us), ip, detail: "logout" });
         return sendSuccess(res, "ok", opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _534 => _534.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _544 => _544.message]) || err, opt);
+      }
+    }
+    if (url.startsWith("/api/user/login/force/")) {
+      try {
+        const us = sanitizeString(String(_optionalChain([req, 'optionalAccess', _545 => _545.Userinfo, 'optionalAccess', _546 => _546[0]]) || ""), 64);
+        if (!us) return sendErr(res, "AUTH_MISSING", void 0, opt);
+        const myLv = Number(_nullishCoalesce(_optionalChain([req, 'optionalAccess', _547 => _547.Userinfo, 'optionalAccess', _548 => _548[1]]), () => ( 0)));
+        const targetUs = sanitizeString(String(_optionalChain([body, 'optionalAccess', _549 => _549.targetUs]) || _optionalChain([body, 'optionalAccess', _550 => _550.us]) || ""), 64);
+        const kicked = [];
+        if (isUserOnlineOnWs($asai, us, hostdir)) {
+          await kickUserWs($asai, us, hostdir);
+          kicked.push(us);
+        }
+        const onlineRaw = listOnlineWsEntries($asai, hostdir).filter((e) => e.us !== us);
+        const online = await Promise.all(
+          onlineRaw.map(async (e) => ({
+            us: e.us,
+            lv: await resolveUserLv($asai, store, e.us, e.lv)
+          }))
+        );
+        const candidates = targetUs ? online.filter((e) => e.us === targetUs) : online;
+        for (const entry of candidates) {
+          const entryLv = entry.lv == null ? NaN : Number(entry.lv);
+          if (!Number.isFinite(entryLv) || myLv < entryLv) {
+            if (targetUs) {
+              return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
+            }
+            continue;
+          }
+          await kickUserWs($asai, entry.us, hostdir);
+          kicked.push(entry.us);
+        }
+        if (!kicked.length && online.length) {
+          return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
+        }
+        logSecurityEvent($asai, {
+          type: "AUTH_SUCCESS",
+          path: url,
+          method: "POST",
+          user: us,
+          ip,
+          detail: `force_login_kick:${kicked.join(",") || "none"}`
+        });
+        return sendSuccess(
+          res,
+          { ok: true, us, kicked, online: listOnlineWsEntries($asai, hostdir) },
+          opt
+        );
+      } catch (err) {
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _551 => _551.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/kick/")) {
-      if (!await checkAdmin(req, url, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
@@ -4292,9 +4451,9 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (!isSessionUserOnline($asai, target.us, hostdir)) {
           return sendErr(res, "SESSION_NOT_ONLINE", void 0, opt);
         }
-        kickUserWs($asai, target.us, hostdir);
+        await kickUserWs($asai, target.us, hostdir);
         await store.removeSession(sessionId);
-        const operator = String(_optionalChain([req, 'optionalAccess', _535 => _535.Userinfo, 'optionalAccess', _536 => _536[0]]) || "");
+        const operator = String(_optionalChain([req, 'optionalAccess', _552 => _552.Userinfo, 'optionalAccess', _553 => _553[0]]) || "");
         await _chunkARHPHWT5cjs.logSessionTerminate.call(void 0, $asai, {
           operator,
           sessionId,
@@ -4303,11 +4462,11 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _537 => _537.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _554 => _554.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/delete/")) {
-      if (!await checkAdmin(req, url, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
@@ -4315,15 +4474,15 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (!targetUs || targetUs === "admin") return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
         const ok = await store.deleteUser(targetUs);
         if (!ok) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
-        const operator = String(_optionalChain([req, 'optionalAccess', _538 => _538.Userinfo, 'optionalAccess', _539 => _539[0]]) || "");
+        const operator = String(_optionalChain([req, 'optionalAccess', _555 => _555.Userinfo, 'optionalAccess', _556 => _556[0]]) || "");
         await _chunkARHPHWT5cjs.logAccountPurge.call(void 0, $asai, { operator, targetUs, ip });
         return sendSuccess(res, { ok: true }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _540 => _540.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _557 => _557.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/levels/")) {
-      if (!await checkAdmin(req, url, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
       try {
@@ -4331,8 +4490,8 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const thresholds = body.thresholds && typeof body.thresholds === "object" ? body.thresholds : void 0;
         const routeRights = Array.isArray(body.routeRights) ? body.routeRights : void 0;
         const defaultResetPassword = typeof body.defaultResetPassword === "string" ? body.defaultResetPassword : void 0;
-        const operator = String(_optionalChain([req, 'optionalAccess', _541 => _541.Userinfo, 'optionalAccess', _542 => _542[0]]) || "");
-        const cfg = await _chunkGXOFLFFWcjs.saveUserLevelConfig.call(void 0, 
+        const operator = String(_optionalChain([req, 'optionalAccess', _558 => _558.Userinfo, 'optionalAccess', _559 => _559[0]]) || "");
+        const cfg = await _chunkFRPN33BYcjs.saveUserLevelConfig.call(void 0, 
           $asai,
           {
             levels,
@@ -4344,18 +4503,18 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         );
         await _chunkARHPHWT5cjs.logSecurityConfigIntervention.call(void 0, $asai, {
           section: "user_levels",
-          detail: JSON.stringify({ levels: _optionalChain([levels, 'optionalAccess', _543 => _543.length]), thresholds: !!thresholds, routeRights: _optionalChain([routeRights, 'optionalAccess', _544 => _544.length]) }),
+          detail: JSON.stringify({ levels: _optionalChain([levels, 'optionalAccess', _560 => _560.length]), thresholds: !!thresholds, routeRights: _optionalChain([routeRights, 'optionalAccess', _561 => _561.length]) }),
           operator,
           ip
         });
         return sendSuccess(res, cfg, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _545 => _545.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _562 => _562.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/resetpass/")) {
       await ensureReady($asai);
-      if (!await checkAdmin(req, url, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
+      if (!await checkAdmin(req, url, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminWrite"))) {
         logSecurityEvent($asai, { type: "ACCESS_DENIED", path: url, method: "POST", ip });
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
@@ -4363,16 +4522,16 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const targetUs = sanitizeString(body.us, 64);
         if (!targetUs) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
         let newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
-        if (!newPass) newPass = _chunkGXOFLFFWcjs.getDefaultResetPassword.call(void 0, $asai);
-        const policy = _chunkGXOFLFFWcjs.getPasswordPolicy.call(void 0, $asai);
-        const policyErr = _chunkGXOFLFFWcjs.validatePasswordWithPolicy.call(void 0, newPass, policy);
+        if (!newPass) newPass = _chunkFRPN33BYcjs.getDefaultResetPassword.call(void 0, $asai);
+        const policy = _chunkFRPN33BYcjs.getPasswordPolicy.call(void 0, $asai);
+        const policyErr = _chunkFRPN33BYcjs.validatePasswordWithPolicy.call(void 0, newPass, policy);
         if (policyErr === "PASSWORD_TOO_SHORT") {
           return sendErr(res, policyErr, [String(policy.minLength)], opt);
         }
         if (policyErr) return sendErr(res, policyErr, void 0, opt);
         const user = await store.findByUsername(targetUs);
         if (!user) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
-        const { passHash, passSalt } = _chunkWXW5DYNUcjs.hashPassword.call(void 0, newPass);
+        const { passHash, passSalt } = _chunkH2QP5J7Xcjs.hashPassword.call(void 0, newPass);
         const updated = await store.updateUser(targetUs, {
           passHash,
           passSalt,
@@ -4384,7 +4543,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
           passHistory: "[]"
         });
         if (!updated) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
-        const operator = String(_optionalChain([req, 'optionalAccess', _546 => _546.Userinfo, 'optionalAccess', _547 => _547[0]]) || "");
+        const operator = String(_optionalChain([req, 'optionalAccess', _563 => _563.Userinfo, 'optionalAccess', _564 => _564[0]]) || "");
         await _chunkARHPHWT5cjs.logUserRbacChange.call(void 0, $asai, {
           operator,
           targetUs,
@@ -4401,7 +4560,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         });
         return sendSuccess(res, { user: publicUser($asai, updated) }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _548 => _548.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _565 => _565.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/admin/update/")) {
@@ -4415,11 +4574,11 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const patch = {};
         if (body.lv != null) {
           const newLv = Number(body.lv);
-          if (!Number.isFinite(newLv) || !_chunkGXOFLFFWcjs.isValidUserLv.call(void 0, $asai, newLv)) {
+          if (!Number.isFinite(newLv) || !_chunkFRPN33BYcjs.isValidUserLv.call(void 0, $asai, newLv)) {
             return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
           }
           patch.lv = newLv;
-          patch.role = _chunkGXOFLFFWcjs.resolveRoleForLevel.call(void 0, $asai, newLv).name;
+          patch.role = _chunkFRPN33BYcjs.resolveRoleForLevel.call(void 0, $asai, newLv).name;
         }
         if (body.status) patch.status = sanitizeString(body.status, 16);
         if (body.resetLock) {
@@ -4432,7 +4591,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         if (!updated) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
         if (Object.keys(patch).length) {
           await _chunkARHPHWT5cjs.logUserRbacChange.call(void 0, $asai, {
-            operator: String(_optionalChain([req, 'optionalAccess', _549 => _549.Userinfo, 'optionalAccess', _550 => _550[0]]) || ""),
+            operator: String(_optionalChain([req, 'optionalAccess', _566 => _566.Userinfo, 'optionalAccess', _567 => _567[0]]) || ""),
             targetUs,
             patch,
             ip
@@ -4440,33 +4599,33 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         }
         return sendSuccess(res, { user: publicUser($asai, updated) }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _551 => _551.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _568 => _568.message]) || err, opt);
       }
     }
     if (url.startsWith("/api/user/login/profile/")) {
-      const us = _optionalChain([req, 'optionalAccess', _552 => _552.Userinfo, 'optionalAccess', _553 => _553[0]]);
+      const us = _optionalChain([req, 'optionalAccess', _569 => _569.Userinfo, 'optionalAccess', _570 => _570[0]]);
       if (!us) return sendErr(res, "AUTH_UNAUTHORIZED", void 0, opt);
       try {
         const user = await store.findByUsername(String(us));
         if (!user) return sendErr(res, "AUTH_USER_NOT_FOUND", void 0, opt);
         if (pickAuthField(body, "newPass", "newPassword", "newpass")) {
           const newPass = sanitizeString(pickAuthField(body, "newPass", "newPassword", "newpass"), 128);
-          const policy = _chunkGXOFLFFWcjs.getPasswordPolicy.call(void 0, $asai);
+          const policy = _chunkFRPN33BYcjs.getPasswordPolicy.call(void 0, $asai);
           const oldPass = pickAuthField(body, "pass", "password", "pwd");
           if (oldPass) {
-            if (!_chunkWXW5DYNUcjs.verifyPassword.call(void 0, oldPass, user.passHash, user.passSalt)) {
+            if (!_chunkH2QP5J7Xcjs.verifyPassword.call(void 0, oldPass, user.passHash, user.passSalt)) {
               return sendErr(res, "AUTH_INVALID_PASSWORD", void 0, opt);
             }
           } else if (!user.mustChangePassword) {
             return sendErr(res, "AUTH_INVALID_PASSWORD", void 0, opt);
           }
-          const policyErr = _chunkWXW5DYNUcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
+          const policyErr = _chunkH2QP5J7Xcjs.validatePasswordChange.call(void 0, newPass, $asai, user.passHistory);
           if (policyErr === "PASSWORD_TOO_SHORT") {
             return sendErr(res, policyErr, [String(policy.minLength)], opt);
           }
           if (policyErr) return sendErr(res, policyErr, void 0, opt);
-          const { passHash, passSalt } = _chunkWXW5DYNUcjs.hashPassword.call(void 0, newPass);
-          const passHistory = _chunkWXW5DYNUcjs.nextPassHistory.call(void 0, oldPass || newPass, user.passHistory, policy.historyCount);
+          const { passHash, passSalt } = _chunkH2QP5J7Xcjs.hashPassword.call(void 0, newPass);
+          const passHistory = _chunkH2QP5J7Xcjs.nextPassHistory.call(void 0, oldPass || newPass, user.passHistory, policy.historyCount);
           await store.updateUser(String(us), {
             passHash,
             passSalt,
@@ -4478,7 +4637,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
         const fresh = await store.findByUsername(String(us));
         return sendSuccess(res, { user: fresh ? publicUser($asai, fresh) : null }, opt);
       } catch (err) {
-        return sendFail(res, _optionalChain([err, 'optionalAccess', _554 => _554.message]) || err, opt);
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _571 => _571.message]) || err, opt);
       }
     }
   }
@@ -4487,16 +4646,49 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     const url = req.url || "";
     const ip = getClientIp(req);
     if (url.startsWith("/api/user/login/config/")) {
-      const lang = String(_optionalChain([req, 'optionalAccess', _555 => _555.headers, 'optionalAccess', _556 => _556["accept-language"]]) || _optionalChain([opt, 'optionalAccess', _557 => _557.headers, 'optionalAccess', _558 => _558["accept-language"]]) || "zh-CN").split(",")[0];
-      await _chunkGXOFLFFWcjs.loadUserLevelConfig.call(void 0, $asai);
-      return sendSuccess(res, _chunkGXOFLFFWcjs.getPublicSecurityConfig.call(void 0, $asai, lang), opt);
+      const lang = String(_optionalChain([req, 'optionalAccess', _572 => _572.headers, 'optionalAccess', _573 => _573["accept-language"]]) || _optionalChain([opt, 'optionalAccess', _574 => _574.headers, 'optionalAccess', _575 => _575["accept-language"]]) || "zh-CN").split(",")[0];
+      await _chunkFRPN33BYcjs.loadUserLevelConfig.call(void 0, $asai);
+      return sendSuccess(res, _chunkFRPN33BYcjs.getPublicSecurityConfig.call(void 0, $asai, lang), opt);
+    }
+    if (url.startsWith("/api/user/login/online/")) {
+      try {
+        const us = sanitizeString(String(_optionalChain([req, 'optionalAccess', _576 => _576.Userinfo, 'optionalAccess', _577 => _577[0]]) || ""), 64);
+        if (!us) return sendErr(res, "AUTH_MISSING", void 0, opt);
+        const rawOnline = listOnlineWsEntries($asai, hostdir);
+        const online = await Promise.all(
+          rawOnline.map(async (e) => ({
+            us: e.us,
+            lv: await resolveUserLv($asai, store, e.us, e.lv)
+          }))
+        );
+        const rawMy = _optionalChain([req, 'optionalAccess', _578 => _578.Userinfo, 'optionalAccess', _579 => _579[1]]);
+        const wsMyLv = rawMy === null || rawMy === void 0 || rawMy === "" ? null : Number(rawMy);
+        const myLvOut = await resolveUserLv(
+          $asai,
+          store,
+          us,
+          Number.isFinite(wsMyLv) ? wsMyLv : null
+        );
+        return sendSuccess(
+          res,
+          {
+            us,
+            lv: myLvOut,
+            online,
+            maxonline: _nullishCoalesce(_optionalChain([$asai, 'access', _580 => _580.getHost, 'optionalCall', _581 => _581(hostdir), 'optionalAccess', _582 => _582.maxonline]), () => ( 100))
+          },
+          opt
+        );
+      } catch (err) {
+        return sendFail(res, _optionalChain([err, 'optionalAccess', _583 => _583.message]) || err, opt);
+      }
     }
     if (url.startsWith("/api/user/login/admin/levels/")) {
-      if (!await checkAdmin(req, url, _chunkGXOFLFFWcjs.getPermissionThreshold.call(void 0, $asai, "adminRead"))) {
+      if (!await checkAdmin(req, url, _chunkFRPN33BYcjs.getPermissionThreshold.call(void 0, $asai, "adminRead"))) {
         return sendErr(res, "AUTH_FORBIDDEN", void 0, opt);
       }
-      await _chunkGXOFLFFWcjs.loadUserLevelConfig.call(void 0, $asai);
-      return sendSuccess(res, _chunkGXOFLFFWcjs.getUserLevelConfigSync.call(void 0, $asai), opt);
+      await _chunkFRPN33BYcjs.loadUserLevelConfig.call(void 0, $asai);
+      return sendSuccess(res, _chunkFRPN33BYcjs.getUserLevelConfigSync.call(void 0, $asai), opt);
     }
     if (url.startsWith("/api/user/login/admin/sessions/")) {
       if (!await checkAdmin(req, url)) {
@@ -4548,7 +4740,7 @@ var login_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
       );
     }
     if (url.startsWith("/api/user/login/profile/")) {
-      const us = _optionalChain([req, 'optionalAccess', _559 => _559.Userinfo, 'optionalAccess', _560 => _560[0]]);
+      const us = _optionalChain([req, 'optionalAccess', _584 => _584.Userinfo, 'optionalAccess', _585 => _585[0]]);
       if (!us) return sendErr(res, "AUTH_UNAUTHORIZED", void 0, opt);
       const user = await store.findByUsername(String(us));
       return sendSuccess(res, { user: user ? publicUser($asai, user) : null }, opt);
@@ -4590,16 +4782,16 @@ var As_default = {
     return { code: 908, data: val };
   },
   ctxSuccess(val, opt = null) {
-    if (typeof _optionalChain([opt, 'optionalAccess', _561 => _561.resAES]) === "function") {
+    if (typeof _optionalChain([opt, 'optionalAccess', _586 => _586.resAES]) === "function") {
       val = opt.resAES(val);
     }
     return { code: 909, data: val };
   },
   getPath(str = "-") {
-    return _optionalChain([str, 'optionalAccess', _562 => _562.replace, 'call', _563 => _563(/[^a-zA-Z0-9.\-_\\\/]/g, "")]);
+    return _optionalChain([str, 'optionalAccess', _587 => _587.replace, 'call', _588 => _588(/[^a-zA-Z0-9.\-_\\\/]/g, "")]);
   },
   getName(str = "-") {
-    return _optionalChain([str, 'optionalAccess', _564 => _564.replace, 'call', _565 => _565(/[^a-zA-Z0-9.\-_]/g, "")]);
+    return _optionalChain([str, 'optionalAccess', _589 => _589.replace, 'call', _590 => _590(/[^a-zA-Z0-9.\-_]/g, "")]);
   },
   toDirPath(relativePath) {
     const pathArr = relativePath.split("/");
@@ -4613,10 +4805,10 @@ var As_default = {
     return relativePath;
   },
   //创建多层文件夹 同步
-  ensureDir(fs11, relativePath) {
+  ensureDir(fs12, relativePath) {
     const absPathDir = this.toDirPath(relativePath);
     const absPath = this.toAbsolutePath(relativePath);
-    if (!fs11.existsSync(absPath)) {
+    if (!fs12.existsSync(absPath)) {
       let pathTmp = "";
       absPathDir.split("/").forEach((el) => {
         if (el) {
@@ -4624,8 +4816,8 @@ var As_default = {
             pathTmp += "/";
           }
           pathTmp += el;
-          if (!fs11.existsSync(pathTmp)) {
-            if (!fs11.mkdirSync(pathTmp, { recursive: true })) {
+          if (!fs12.existsSync(pathTmp)) {
+            if (!fs12.mkdirSync(pathTmp, { recursive: true })) {
               return absPath;
             }
           }
@@ -4634,10 +4826,10 @@ var As_default = {
     }
     return absPath;
   },
-  makeDir(fs11, filePaths) {
+  makeDir(fs12, filePaths) {
     return new Promise((resolve6, reject) => {
       try {
-        const newPath = this.ensureDir(fs11, filePaths);
+        const newPath = this.ensureDir(fs12, filePaths);
         resolve6(newPath);
       } catch (err) {
         reject(err);
@@ -4670,7 +4862,7 @@ var As_default = {
   //     immediate: false,
   // });
   dtImmediate(fn, opt) {
-    if (_optionalChain([opt, 'optionalAccess', _566 => _566.immediate])) {
+    if (_optionalChain([opt, 'optionalAccess', _591 => _591.immediate])) {
       fn();
       opt.immediate = false;
     }
@@ -4692,7 +4884,7 @@ var As_default = {
     if (opt.endtime - opt.starttime < opt.wait) {
       this.dtClearTimeout(opt);
     }
-    if (!_optionalChain([opt, 'optionalAccess', _567 => _567.timeout])) {
+    if (!_optionalChain([opt, 'optionalAccess', _592 => _592.timeout])) {
       opt.starttime = opt.endtime;
       opt.timeout = this.dtSetTimeout(fn, opt);
     }
@@ -4700,7 +4892,7 @@ var As_default = {
   // 节流:指定长度时间内有多次触发，只fn最后一次触发
   throttle(fn, opt) {
     this.dtImmediate(fn, opt);
-    if (!_optionalChain([opt, 'optionalAccess', _568 => _568.timeout])) {
+    if (!_optionalChain([opt, 'optionalAccess', _593 => _593.timeout])) {
       opt.timeout = this.dtSetTimeout(fn, opt);
     }
   },
@@ -4736,8 +4928,8 @@ var As_default = {
 var AsCode_default = {
   // 加密
   asencode(str, keys) {
-    const strlen = _optionalChain([str, 'optionalAccess', _569 => _569.length]) || 0;
-    const keyslen = _optionalChain([keys, 'optionalAccess', _570 => _570.length]) || 0;
+    const strlen = _optionalChain([str, 'optionalAccess', _594 => _594.length]) || 0;
+    const keyslen = _optionalChain([keys, 'optionalAccess', _595 => _595.length]) || 0;
     let newstr = "";
     for (let i = 0; i < strlen; i++) {
       const rnum = Math.round(Math.random() * 1e3) % keyslen;
@@ -4762,7 +4954,7 @@ var AsCode_default = {
         const rnum = keys.indexOf(str[i + 3]);
         const rnumx = Number(rnum.toString().slice(-1)) + 1;
         const ylen = keyslen - rnumx;
-        newstr += _optionalChain([String, 'optionalAccess', _571 => _571.fromCodePoint, 'call', _572 => _572(
+        newstr += _optionalChain([String, 'optionalAccess', _596 => _596.fromCodePoint, 'call', _597 => _597(
           (keys.indexOf(str[i++]) - rnumx) * ylen * ylen + (keys.indexOf(str[i++]) - rnumx) * ylen + (keys.indexOf(str[i++]) - rnumx)
         )]);
       }
@@ -4809,7 +5001,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     if (typeof value !== "string") return value;
     try {
       return JSON.parse(value);
-    } catch (e44) {
+    } catch (e51) {
       return value;
     }
   }
@@ -4845,7 +5037,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, decrypt, "decrypt");
   function validateFields(payload, fields) {
-    return fields.every((key) => typeof _optionalChain([payload, 'optionalAccess', _573 => _573[key]]) === "string" && payload[key].length > 0);
+    return fields.every((key) => typeof _optionalChain([payload, 'optionalAccess', _598 => _598[key]]) === "string" && payload[key].length > 0);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, validateFields, "validateFields");
   function reqAES(opt, fn = (data) => data) {
@@ -4853,7 +5045,7 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
     try {
       if (validateFields(reqData, ["data", "iv", "auth"])) {
         let aesData = decrypt(reqData);
-        if (_optionalChain([reqData, 'optionalAccess', _574 => _574.aes]) === 2) {
+        if (_optionalChain([reqData, 'optionalAccess', _599 => _599.aes]) === 2) {
           aesData = JSON.parse(aesData);
         }
         return fn(aesData);
@@ -4887,24 +5079,24 @@ var AsAES_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai
 // src/sysserver/lib/common/AsDb.ts
 var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai, cfg) => {
   const DataServer = _chunk2BCIIKRGcjs.getDataServerForAsDb.call(void 0, $asai, {
-    type: _optionalChain([cfg, 'optionalAccess', _575 => _575.type]) || "sqlite",
+    type: _optionalChain([cfg, 'optionalAccess', _600 => _600.type]) || "sqlite",
     opt: {
-      ..._optionalChain([cfg, 'optionalAccess', _576 => _576.opt]) || {
+      ..._optionalChain([cfg, 'optionalAccess', _601 => _601.opt]) || {
         database: "./webdata/webdb/sqlite/asaisqlite.db",
         create: 1
       }
     },
-    storeKey: _optionalChain([cfg, 'optionalAccess', _577 => _577.storeKey])
+    storeKey: _optionalChain([cfg, 'optionalAccess', _602 => _602.storeKey])
   });
   function reqwherestr(str) {
-    if (_optionalChain([cfg, 'optionalAccess', _578 => _578.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _579 => _579.type]) === "mysql") {
+    if (_optionalChain([cfg, 'optionalAccess', _603 => _603.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _604 => _604.type]) === "mysql") {
       return `'${str}'`;
     }
     return str;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqwherestr, "reqwherestr");
   function reqfield(queryData) {
-    if (_optionalChain([queryData, 'optionalAccess', _580 => _580.fd])) {
+    if (_optionalChain([queryData, 'optionalAccess', _605 => _605.fd])) {
       return queryData.fd.split("-");
     }
     return cfg.field.data;
@@ -4912,14 +5104,14 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqfield, "reqfield");
   function reqwhere(queryData) {
     const wheretmp = [];
-    if ((_optionalChain([cfg, 'optionalAccess', _581 => _581.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _582 => _582.type]) === "mysql") && _optionalChain([queryData, 'optionalAccess', _583 => _583.wlv])) {
+    if ((_optionalChain([cfg, 'optionalAccess', _606 => _606.type]) === "sqlite" || _optionalChain([cfg, 'optionalAccess', _607 => _607.type]) === "mysql") && _optionalChain([queryData, 'optionalAccess', _608 => _608.wlv])) {
       const wlvarr = queryData.wlv.split("-");
       wheretmp.push([wlvarr[0], ">", Number(wlvarr[1] || 0)]);
     }
-    if (_optionalChain([queryData, 'optionalAccess', _584 => _584.fl])) {
+    if (_optionalChain([queryData, 'optionalAccess', _609 => _609.fl])) {
       wheretmp.push([cfg.field.class, "LIKE", reqwherestr(`${queryData.fl}%`)]);
     }
-    if (_optionalChain([queryData, 'optionalAccess', _585 => _585.ss]) && _optionalChain([queryData, 'optionalAccess', _586 => _586.ssty])) {
+    if (_optionalChain([queryData, 'optionalAccess', _610 => _610.ss]) && _optionalChain([queryData, 'optionalAccess', _611 => _611.ssty])) {
       wheretmp.push([queryData.ssty, "LIKE", reqwherestr(`%${queryData.ss}%`)]);
     }
     if (wheretmp.length > 1) {
@@ -4930,16 +5122,16 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqwhere, "reqwhere");
   function reqorder(queryData) {
     const ordertmp = [];
-    if (_optionalChain([queryData, 'optionalAccess', _587 => _587.sx])) {
-      ordertmp.push([queryData.sx, _optionalChain([queryData, 'optionalAccess', _588 => _588.sxty]) == 1 ? "DESC" : "ASC"]);
+    if (_optionalChain([queryData, 'optionalAccess', _612 => _612.sx])) {
+      ordertmp.push([queryData.sx, _optionalChain([queryData, 'optionalAccess', _613 => _613.sxty]) == 1 ? "DESC" : "ASC"]);
     }
     return ordertmp;
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, reqorder, "reqorder");
   function reqlimit(queryData) {
     let limittmp = "";
-    let limitps = _optionalChain([queryData, 'optionalAccess', _589 => _589.ps]);
-    if (_optionalChain([queryData, 'optionalAccess', _590 => _590.pg])) {
+    let limitps = _optionalChain([queryData, 'optionalAccess', _614 => _614.ps]);
+    if (_optionalChain([queryData, 'optionalAccess', _615 => _615.pg])) {
       limitps = limitps || 20;
       limittmp = `${(queryData.pg - 1) * limitps},${limitps}`;
     } else if (limitps) {
@@ -4951,7 +5143,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   function decodePathSegment(seg) {
     try {
       return decodeURIComponent(seg);
-    } catch (e45) {
+    } catch (e52) {
       return seg;
     }
   }
@@ -4967,7 +5159,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
     if (typeof body === "string") {
       try {
         body = JSON.parse(body);
-      } catch (e46) {
+      } catch (e53) {
         return { content: body };
       }
     }
@@ -4992,8 +5184,8 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   _chunkSMVZ3ZDJcjs.__name.call(void 0, fileKeyFromSegment, "fileKeyFromSegment");
   function getSqlParamsByUrl(req, opt) {
     let tmpSqlParams;
-    const reqArr = _optionalChain([req, 'optionalAccess', _591 => _591.url, 'optionalAccess', _592 => _592.split, 'call', _593 => _593("?"), 'access', _594 => _594[0], 'optionalAccess', _595 => _595.split, 'call', _596 => _596("/")]) || [];
-    const table = (_optionalChain([opt, 'optionalAccess', _597 => _597.qrdata, 'optionalAccess', _598 => _598.table]) || _optionalChain([opt, 'optionalAccess', _599 => _599.data, 'optionalAccess', _600 => _600.table]) || reqArr[3]).replaceAll("_", "/");
+    const reqArr = _optionalChain([req, 'optionalAccess', _616 => _616.url, 'optionalAccess', _617 => _617.split, 'call', _618 => _618("?"), 'access', _619 => _619[0], 'optionalAccess', _620 => _620.split, 'call', _621 => _621("/")]) || [];
+    const table = (_optionalChain([opt, 'optionalAccess', _622 => _622.qrdata, 'optionalAccess', _623 => _623.table]) || _optionalChain([opt, 'optionalAccess', _624 => _624.data, 'optionalAccess', _625 => _625.table]) || reqArr[3]).replaceAll("_", "/");
     if (!table) return tmpSqlParams;
     tmpSqlParams = {
       type: "select",
@@ -5002,7 +5194,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
     if (reqArr[5]) {
       if (reqArr[4] === "insert") {
         tmpSqlParams.type = reqArr[4];
-        if (_optionalChain([cfg, 'optionalAccess', _601 => _601.type]) === "file") {
+        if (_optionalChain([cfg, 'optionalAccess', _626 => _626.type]) === "file") {
           const { name: bodyName, content } = parseFileBody(opt.data);
           const fileKey = fileKeyFromSegment(reqArr[5], bodyName);
           tmpSqlParams.field = cfg.field.data;
@@ -5026,11 +5218,11 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         }
       } else if (reqArr[4] === "update") {
         tmpSqlParams.type = reqArr[4];
-        const rowKey = _optionalChain([cfg, 'optionalAccess', _602 => _602.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _627 => _627.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
         tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
-        if (_optionalChain([cfg, 'optionalAccess', _603 => _603.type]) === "file") {
+        if (_optionalChain([cfg, 'optionalAccess', _628 => _628.type]) === "file") {
           const { content } = parseFileBody(opt.data);
-          const contentField = _optionalChain([cfg, 'access', _604 => _604.field, 'access', _605 => _605.data, 'optionalAccess', _606 => _606[1]]) || "content";
+          const contentField = _optionalChain([cfg, 'access', _629 => _629.field, 'access', _630 => _630.data, 'optionalAccess', _631 => _631[1]]) || "content";
           tmpSqlParams.set = [[contentField, fileContentString(content)]];
         } else {
           tmpSqlParams.set = [];
@@ -5047,18 +5239,18 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         }
       } else if (reqArr[4] === "delete") {
         tmpSqlParams.type = reqArr[4];
-        const rowKey = _optionalChain([cfg, 'optionalAccess', _607 => _607.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _632 => _632.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
         tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
       } else {
-        if (_optionalChain([cfg, 'optionalAccess', _608 => _608.as]) > 1) {
+        if (_optionalChain([cfg, 'optionalAccess', _633 => _633.as]) > 1) {
           tmpSqlParams.as = +cfg.as - 1;
         }
         tmpSqlParams.field = cfg.field.data;
-        const rowKey = _optionalChain([cfg, 'optionalAccess', _609 => _609.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
+        const rowKey = _optionalChain([cfg, 'optionalAccess', _634 => _634.type]) === "file" ? fileKeyFromSegment(reqArr[5]) : decodePathSegment(reqArr[5]);
         tmpSqlParams.where = [[cfg.field.key, "=", reqwherestr(rowKey)]];
       }
     } else {
-      tmpSqlParams.as = _optionalChain([cfg, 'optionalAccess', _610 => _610.as]);
+      tmpSqlParams.as = _optionalChain([cfg, 'optionalAccess', _635 => _635.as]);
       tmpSqlParams.field = reqfield(opt.data);
       tmpSqlParams.where = reqwhere(opt.data);
       tmpSqlParams.order = reqorder(opt.data);
@@ -5068,8 +5260,8 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, getSqlParamsByUrl, "getSqlParamsByUrl");
   function dbFresh(req, resdb) {
-    if (_optionalChain([req, 'optionalAccess', _611 => _611.url, 'optionalAccess', _612 => _612.includes, 'call', _613 => _613("/selectlist/")])) {
-      const list = Array.isArray(resdb) ? resdb : _optionalChain([resdb, 'optionalAccess', _614 => _614.data]);
+    if (_optionalChain([req, 'optionalAccess', _636 => _636.url, 'optionalAccess', _637 => _637.includes, 'call', _638 => _638("/selectlist/")])) {
+      const list = Array.isArray(resdb) ? resdb : _optionalChain([resdb, 'optionalAccess', _639 => _639.data]);
       if (Array.isArray(list)) {
         const names = list.map((el) => {
           if (typeof el === "string") {
@@ -5091,8 +5283,8 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, dbFresh, "dbFresh");
   function normalizeFileSelectRow(row) {
-    const nameKey = _optionalChain([cfg, 'access', _615 => _615.field, 'optionalAccess', _616 => _616.data, 'optionalAccess', _617 => _617[0]]) || "name";
-    const contentKey = _optionalChain([cfg, 'access', _618 => _618.field, 'optionalAccess', _619 => _619.data, 'optionalAccess', _620 => _620[1]]) || "content";
+    const nameKey = _optionalChain([cfg, 'access', _640 => _640.field, 'optionalAccess', _641 => _641.data, 'optionalAccess', _642 => _642[0]]) || "name";
+    const contentKey = _optionalChain([cfg, 'access', _643 => _643.field, 'optionalAccess', _644 => _644.data, 'optionalAccess', _645 => _645[1]]) || "content";
     if (!row || typeof row !== "object") return row;
     const out = { ...row };
     if (out[nameKey] != null) {
@@ -5106,7 +5298,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeFileSelectRow, "normalizeFileSelectRow");
   function isFileSingleNameSelect(params) {
-    return _optionalChain([cfg, 'optionalAccess', _621 => _621.type]) === "file" && _optionalChain([params, 'optionalAccess', _622 => _622.type]) === "select" && !!_optionalChain([params, 'optionalAccess', _623 => _623.where, 'optionalAccess', _624 => _624.length]);
+    return _optionalChain([cfg, 'optionalAccess', _646 => _646.type]) === "file" && _optionalChain([params, 'optionalAccess', _647 => _647.type]) === "select" && !!_optionalChain([params, 'optionalAccess', _648 => _648.where, 'optionalAccess', _649 => _649.length]);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, isFileSingleNameSelect, "isFileSingleNameSelect");
   function normalizeSelectResult(params, resdb) {
@@ -5120,12 +5312,12 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       }
       return data;
     }
-    if (_optionalChain([params, 'optionalAccess', _625 => _625.where, 'optionalAccess', _626 => _626.length]) && Array.isArray(data) && data.length === 1) {
+    if (_optionalChain([params, 'optionalAccess', _650 => _650.where, 'optionalAccess', _651 => _651.length]) && Array.isArray(data) && data.length === 1) {
       data = data[0];
     }
-    if (_optionalChain([cfg, 'optionalAccess', _627 => _627.type]) === "file" && data && typeof data === "object" && !Array.isArray(data)) {
-      const nameKey = _optionalChain([cfg, 'access', _628 => _628.field, 'optionalAccess', _629 => _629.data, 'optionalAccess', _630 => _630[0]]) || "name";
-      const contentKey = _optionalChain([cfg, 'access', _631 => _631.field, 'optionalAccess', _632 => _632.data, 'optionalAccess', _633 => _633[1]]) || "content";
+    if (_optionalChain([cfg, 'optionalAccess', _652 => _652.type]) === "file" && data && typeof data === "object" && !Array.isArray(data)) {
+      const nameKey = _optionalChain([cfg, 'access', _653 => _653.field, 'optionalAccess', _654 => _654.data, 'optionalAccess', _655 => _655[0]]) || "name";
+      const contentKey = _optionalChain([cfg, 'access', _656 => _656.field, 'optionalAccess', _657 => _657.data, 'optionalAccess', _658 => _658[1]]) || "content";
       if (data[nameKey] != null) {
         data[nameKey] = bareFileName(String(data[nameKey]));
       }
@@ -5135,7 +5327,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
         if (text.startsWith("{") || text.startsWith("[")) {
           try {
             data[contentKey] = JSON.parse(text);
-          } catch (e47) {
+          } catch (e54) {
           }
         }
       }
@@ -5144,7 +5336,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, normalizeSelectResult, "normalizeSelectResult");
   function dbCodePm(req, resdb) {
-    if (_optionalChain([req, 'optionalAccess', _634 => _634.Userinfo]) && _optionalChain([req, 'optionalAccess', _635 => _635.Userinfo, 'access', _636 => _636[2]])) {
+    if (_optionalChain([req, 'optionalAccess', _659 => _659.Userinfo]) && _optionalChain([req, 'optionalAccess', _660 => _660.Userinfo, 'access', _661 => _661[2]])) {
       if (resdb != null && typeof resdb === "object") {
         resdb.data = $asai.$lib.AsCode.asencode(JSON.stringify(resdb.data), req.Userinfo[2]);
       }
@@ -5158,8 +5350,8 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       DataServer.sqlDb(params).then((resdb) => {
         res.end(JSON.stringify($asai.$lib.As.ctxSuccess(dbCodePm(req, dbFresh(req, resdb)), opt)));
       }).catch((errdb) => {
-        const msg = String(_optionalChain([errdb, 'optionalAccess', _637 => _637.message]) || errdb || "");
-        if (_optionalChain([params, 'optionalAccess', _638 => _638.type]) === "select" && msg.includes("no such table")) {
+        const msg = String(_optionalChain([errdb, 'optionalAccess', _662 => _662.message]) || errdb || "");
+        if (_optionalChain([params, 'optionalAccess', _663 => _663.type]) === "select" && msg.includes("no such table")) {
           res.end(JSON.stringify($asai.$lib.As.ctxSuccess([], opt)));
           return;
         }
@@ -5176,29 +5368,29 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
       try {
         DataServer.sqlDb(params).then((resdb) => {
           let resData = normalizeSelectResult(params, dbFresh(req, resdb));
-          if (_optionalChain([params, 'optionalAccess', _639 => _639.as]) === 2 && _optionalChain([params, 'optionalAccess', _640 => _640.field, 'optionalAccess', _641 => _641.length]) > 1) {
+          if (_optionalChain([params, 'optionalAccess', _664 => _664.as]) === 2 && _optionalChain([params, 'optionalAccess', _665 => _665.field, 'optionalAccess', _666 => _666.length]) > 1) {
             let limitArr = [];
-            if (_optionalChain([params, 'access', _642 => _642.limit, 'optionalAccess', _643 => _643.split, 'call', _644 => _644(","), 'optionalAccess', _645 => _645.length]) < 2) {
-              limitArr = [0, +_optionalChain([params, 'access', _646 => _646.limit, 'optionalAccess', _647 => _647.split, 'call', _648 => _648(","), 'optionalAccess', _649 => _649[0]])];
+            if (_optionalChain([params, 'access', _667 => _667.limit, 'optionalAccess', _668 => _668.split, 'call', _669 => _669(","), 'optionalAccess', _670 => _670.length]) < 2) {
+              limitArr = [0, +_optionalChain([params, 'access', _671 => _671.limit, 'optionalAccess', _672 => _672.split, 'call', _673 => _673(","), 'optionalAccess', _674 => _674[0]])];
             } else {
               limitArr = params.limit.split(",");
               limitArr = [+limitArr[0], +limitArr[0] + +limitArr[1]];
             }
-            if (_optionalChain([resData, 'access', _650 => _650.data, 'optionalAccess', _651 => _651.length])) {
+            if (_optionalChain([resData, 'access', _675 => _675.data, 'optionalAccess', _676 => _676.length])) {
               resData.data = resData.data.slice(+limitArr[0], +limitArr[1]);
             }
           }
           resData = dbCodePm(req, resData);
           res.end(JSON.stringify($asai.$lib.As.ctxSuccess(resData, opt)));
         }).catch((errdb) => {
-          const msg = String(_optionalChain([errdb, 'optionalAccess', _652 => _652.message]) || errdb || "");
-          if (_optionalChain([params, 'optionalAccess', _653 => _653.type]) === "select" && msg.includes("no such table")) {
+          const msg = String(_optionalChain([errdb, 'optionalAccess', _677 => _677.message]) || errdb || "");
+          if (_optionalChain([params, 'optionalAccess', _678 => _678.type]) === "select" && msg.includes("no such table")) {
             res.end(JSON.stringify($asai.$lib.As.ctxSuccess([], opt)));
             return;
           }
           res.end(JSON.stringify($asai.$lib.As.ctxFail(errdb)));
         });
-      } catch (e48) {
+      } catch (e55) {
         res.end(JSON.stringify({ code: 901 }));
       }
     } else {
@@ -5207,7 +5399,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, runDefaultGet, "runDefaultGet");
   function post(req, res, hostdir, opt) {
-    if (_optionalChain([cfg, 'optionalAccess', _654 => _654.post]) && typeof cfg.post === "function") {
+    if (_optionalChain([cfg, 'optionalAccess', _679 => _679.post]) && typeof cfg.post === "function") {
       Promise.resolve(cfg.post(req, res, hostdir, opt, DataServer)).then((reqstat) => {
         if (!reqstat) runDefaultPost(req, res, opt);
       }).catch((errdb) => {
@@ -5219,7 +5411,7 @@ var AsDb_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($asai,
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, post, "post");
   function get(req, res, hostdir, opt) {
-    if (_optionalChain([cfg, 'optionalAccess', _655 => _655.get]) && typeof cfg.get === "function") {
+    if (_optionalChain([cfg, 'optionalAccess', _680 => _680.get]) && typeof cfg.get === "function") {
       Promise.resolve(cfg.get(req, res, hostdir, opt, DataServer)).then((reqstat) => {
         if (!reqstat) runDefaultGet(req, res, opt);
       }).catch((errdb) => {
@@ -5245,30 +5437,30 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, hostDefault2, "hostDefault");
   function getPathFromOpt(opt) {
-    const rawPath = _optionalChain([opt, 'access', _656 => _656.qrdata, 'optionalAccess', _657 => _657.path]) || _optionalChain([opt, 'access', _658 => _658.data, 'optionalAccess', _659 => _659.path]);
+    const rawPath = _optionalChain([opt, 'access', _681 => _681.qrdata, 'optionalAccess', _682 => _682.path]) || _optionalChain([opt, 'access', _683 => _683.data, 'optionalAccess', _684 => _684.path]);
     if (!rawPath) {
       throw new Error("Missing path");
     }
     const decoded = decodeURIComponent(String(rawPath));
-    if (path4.isAbsolute(decoded)) {
-      return path4.normalize(decoded);
+    if (path5.isAbsolute(decoded)) {
+      return path5.normalize(decoded);
     }
     const rel = decoded.replace(/^\.(\/)?/, "");
-    const serverRoot = _optionalChain([$asai, 'optionalAccess', _660 => _660.serverRoot]);
+    const serverRoot = _optionalChain([$asai, 'optionalAccess', _685 => _685.serverRoot]);
     if (serverRoot && rel) {
-      const absRoot = path4.resolve(serverRoot);
-      const abs = path4.resolve(absRoot, rel);
-      const relCheck = path4.relative(absRoot, abs);
-      if (relCheck === "" || !relCheck.startsWith("..") && !path4.isAbsolute(relCheck)) {
+      const absRoot = path5.resolve(serverRoot);
+      const abs = path5.resolve(absRoot, rel);
+      const relCheck = path5.relative(absRoot, abs);
+      if (relCheck === "" || !relCheck.startsWith("..") && !path5.isAbsolute(relCheck)) {
         return abs;
       }
     }
-    const roots = _optionalChain([$asai, 'optionalAccess', _661 => _661.asaihost, 'optionalAccess', _662 => _662.getHostAllowedRoots, 'optionalCall', _663 => _663(_optionalChain([$asai, 'optionalAccess', _664 => _664.hostconfig]))]) || [];
+    const roots = _optionalChain([$asai, 'optionalAccess', _686 => _686.asaihost, 'optionalAccess', _687 => _687.getHostAllowedRoots, 'optionalCall', _688 => _688(_optionalChain([$asai, 'optionalAccess', _689 => _689.hostconfig]))]) || [];
     if (!roots.length) {
-      const fallback = _optionalChain([$asai, 'optionalAccess', _665 => _665.serverRoot]) || process.cwd();
+      const fallback = _optionalChain([$asai, 'optionalAccess', _690 => _690.serverRoot]) || process.cwd();
       if (fallback) roots.push(fallback);
     }
-    if (!_optionalChain([$asai, 'optionalAccess', _666 => _666.asaihost, 'optionalAccess', _667 => _667.resolvePathUnderRoots])) {
+    if (!_optionalChain([$asai, 'optionalAccess', _691 => _691.asaihost, 'optionalAccess', _692 => _692.resolvePathUnderRoots])) {
       throw new Error("Path resolver unavailable");
     }
     return $asai.asaihost.resolvePathUnderRoots(decoded, roots);
@@ -5280,18 +5472,18 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendSuccess, "sendSuccess");
   function sendErr(res, ec, params, opt) {
-    const ErrorCode = _optionalChain([$asai, 'access', _668 => _668.$lib, 'optionalAccess', _669 => _669.ErrorCode]);
-    _optionalChain([ErrorCode, 'optionalAccess', _670 => _670.loadErrorCodes, 'optionalCall', _671 => _671($asai)]);
-    _optionalChain([ErrorCode, 'optionalAccess', _672 => _672.logError, 'optionalCall', _673 => _673($asai, ec, Array.isArray(params) ? params.map(String) : params != null ? [String(params)] : void 0)]);
+    const ErrorCode = _optionalChain([$asai, 'access', _693 => _693.$lib, 'optionalAccess', _694 => _694.ErrorCode]);
+    _optionalChain([ErrorCode, 'optionalAccess', _695 => _695.loadErrorCodes, 'optionalCall', _696 => _696($asai)]);
+    _optionalChain([ErrorCode, 'optionalAccess', _697 => _697.logError, 'optionalCall', _698 => _698($asai, ec, Array.isArray(params) ? params.map(String) : params != null ? [String(params)] : void 0)]);
     const response = $asai.$lib.As.ctxErr(ec, params, opt);
     res.end(JSON.stringify(response));
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendErr, "sendErr");
   function sendFail(res, err, opt) {
-    const ErrorCode = _optionalChain([$asai, 'access', _674 => _674.$lib, 'optionalAccess', _675 => _675.ErrorCode]);
-    _optionalChain([ErrorCode, 'optionalAccess', _676 => _676.loadErrorCodes, 'optionalCall', _677 => _677($asai)]);
-    const normalized = _optionalChain([ErrorCode, 'optionalAccess', _678 => _678.normalizeErrPayload, 'optionalCall', _679 => _679(err)]);
-    if (_optionalChain([normalized, 'optionalAccess', _680 => _680.ec])) {
+    const ErrorCode = _optionalChain([$asai, 'access', _699 => _699.$lib, 'optionalAccess', _700 => _700.ErrorCode]);
+    _optionalChain([ErrorCode, 'optionalAccess', _701 => _701.loadErrorCodes, 'optionalCall', _702 => _702($asai)]);
+    const normalized = _optionalChain([ErrorCode, 'optionalAccess', _703 => _703.normalizeErrPayload, 'optionalCall', _704 => _704(err)]);
+    if (_optionalChain([normalized, 'optionalAccess', _705 => _705.ec])) {
       return sendErr(res, normalized.ec, normalized.pm, opt);
     }
     const response = $asai.$lib.As.ctxFail(err);
@@ -5299,7 +5491,7 @@ var reqWork_default = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, ($as
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, sendFail, "sendFail");
   function mnLog(...arg) {
-    (_optionalChain([$asai, 'optionalAccess', _681 => _681.$log]) || console.log)(...arg);
+    (_optionalChain([$asai, 'optionalAccess', _706 => _706.$log]) || console.log)(...arg);
   }
   _chunkSMVZ3ZDJcjs.__name.call(void 0, mnLog, "mnLog");
   return { hostDefault: hostDefault2, getPathFromOpt, sendSuccess, sendFail, sendErr, mnLog };
@@ -5332,7 +5524,7 @@ async function pathExists(filePath) {
   try {
     await _promises2.default.access(nodePath2.default.normalize(filePath));
     return true;
-  } catch (e49) {
+  } catch (e56) {
     return false;
   }
 }
@@ -5399,7 +5591,7 @@ async function removeFile(filePath) {
   try {
     await _promises2.default.unlink(nodePath2.default.normalize(filePath));
   } catch (err) {
-    if (_optionalChain([err, 'optionalAccess', _682 => _682.code]) !== "ENOENT") throw err;
+    if (_optionalChain([err, 'optionalAccess', _707 => _707.code]) !== "ENOENT") throw err;
   }
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, removeFile, "removeFile");
@@ -5512,11 +5704,11 @@ function toInsertRows(sql) {
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, toInsertRows, "toInsertRows");
 function isPathInside(baseDir, targetPath) {
-  const base = path6.resolve(baseDir);
-  const target = path6.resolve(targetPath);
-  const relative5 = path6.relative(base, target);
+  const base = path7.resolve(baseDir);
+  const target = path7.resolve(targetPath);
+  const relative5 = path7.relative(base, target);
   if (!relative5) return true;
-  return !relative5.startsWith("..") && !path6.isAbsolute(relative5);
+  return !relative5.startsWith("..") && !path7.isAbsolute(relative5);
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, isPathInside, "isPathInside");
 function joinTablePath(table, ...segments) {
@@ -5711,21 +5903,21 @@ function dbDriver(opt = {}) {
       this.fileExt = config.ext === ".*" ? "" : config.ext || "";
       this.fileDel = (config.del || 0) !== 0;
       this.createDir = config.create || false;
-      const root = _optionalChain([config, 'access', _683 => _683.$asai, 'optionalAccess', _684 => _684.serverRoot]) || _chunkHR5JKN7Ycjs.getPrimaryServerRoot.call(void 0, );
-      this.baseDirAbs = path7.resolve(root, config.dir);
+      const root = _optionalChain([config, 'access', _708 => _708.$asai, 'optionalAccess', _709 => _709.serverRoot]) || _chunkHR5JKN7Ycjs.getPrimaryServerRoot.call(void 0, );
+      this.baseDirAbs = path8.resolve(root, config.dir);
     }
     dbLog(...args) {
-      (_optionalChain([this, 'access', _685 => _685.config, 'optionalAccess', _686 => _686.$asai, 'optionalAccess', _687 => _687.$log]) || console.log)("FILE", ...args);
+      (_optionalChain([this, 'access', _710 => _710.config, 'optionalAccess', _711 => _711.$asai, 'optionalAccess', _712 => _712.$log]) || console.log)("FILE", ...args);
     }
     checkFile(file) {
-      return fs10.existsSync(this.getAbsPath(file, false));
+      return fs11.existsSync(this.getAbsPath(file, false));
     }
     /** 解析相对路径并限制在数据根目录内，防止路径穿越（跨平台） */
     resolvePath(relPath) {
       if (!relPath) {
         return this.baseDirAbs;
       }
-      const abs = path7.isAbsolute(relPath) ? path7.normalize(relPath) : path7.resolve(this.baseDirAbs, relPath);
+      const abs = path8.isAbsolute(relPath) ? path8.normalize(relPath) : path8.resolve(this.baseDirAbs, relPath);
       if (!isPathInside2(this.baseDirAbs, abs)) {
         throw new Error("Path not allowed");
       }
@@ -5739,15 +5931,15 @@ function dbDriver(opt = {}) {
       if (!relPath) {
         return "";
       }
-      return path7.isAbsolute(relPath) ? path7.relative(this.baseDirAbs, relPath) : relPath;
+      return path8.isAbsolute(relPath) ? path8.relative(this.baseDirAbs, relPath) : relPath;
     }
     ensureDir(relPath) {
       const relative5 = this.normalizeRelPath(relPath);
-      const dirPath = path7.dirname(relative5);
+      const dirPath = path8.dirname(relative5);
       const absDir = this.resolvePath(dirPath === "." ? "" : dirPath);
-      if (this.createDir && !fs10.existsSync(absDir)) {
+      if (this.createDir && !fs11.existsSync(absDir)) {
         this.dbLog("mkdir", "[MKDIR]", absDir);
-        fs10.mkdirSync(absDir, { recursive: true });
+        fs11.mkdirSync(absDir, { recursive: true });
       }
       return absDir;
     }
@@ -5763,34 +5955,34 @@ function dbDriver(opt = {}) {
     }
     deldir(relativePath) {
       const absPath = this.resolvePath(relativePath);
-      if (!fs10.existsSync(absPath)) {
+      if (!fs11.existsSync(absPath)) {
         return;
       }
       this.dbLog("delete", "[RMDIR]", absPath);
-      const entries = fs10.readdirSync(absPath, { withFileTypes: true });
+      const entries = fs11.readdirSync(absPath, { withFileTypes: true });
       for (const entry of entries) {
-        const current = path7.join(absPath, entry.name);
+        const current = path8.join(absPath, entry.name);
         if (entry.isDirectory()) {
-          this.deldir(path7.join(relativePath, entry.name));
+          this.deldir(path8.join(relativePath, entry.name));
         } else {
           this.dbLog("delete", "[UNLINK]", current);
-          fs10.unlinkSync(current);
+          fs11.unlinkSync(current);
         }
       }
-      fs10.rmdirSync(absPath);
+      fs11.rmdirSync(absPath);
     }
     getReadPath(file, sql) {
       const candidates = [];
-      if (_optionalChain([sql, 'optionalAccess', _688 => _688.filename])) {
-        candidates.push({ dir: path7.join(file, sql.filename) });
-        candidates.push({ dir: path7.join(file + ".delete" + this.fileExt, sql.filename) });
+      if (_optionalChain([sql, 'optionalAccess', _713 => _713.filename])) {
+        candidates.push({ dir: path8.join(file, sql.filename) });
+        candidates.push({ dir: path8.join(file + ".delete" + this.fileExt, sql.filename) });
       } else {
         candidates.push({ dir: file });
         candidates.push({ dir: file + this.fileExt + ".delete" });
       }
       for (const candidate of candidates) {
         const abs = this.getAbsPath(candidate.dir, false);
-        if (fs10.existsSync(abs)) {
+        if (fs11.existsSync(abs)) {
           return { path: abs, dir: candidate.dir };
         }
       }
@@ -5801,22 +5993,22 @@ function dbDriver(opt = {}) {
       if (!read2.path) {
         return { path: "", dir: read2.dir };
       }
-      if (_optionalChain([sql, 'optionalAccess', _689 => _689.filename])) {
-        return { path: path7.dirname(read2.path), dir: path7.dirname(read2.dir) };
+      if (_optionalChain([sql, 'optionalAccess', _714 => _714.filename])) {
+        return { path: path8.dirname(read2.path), dir: path8.dirname(read2.dir) };
       }
       return { path: read2.path, dir: read2.dir };
     }
     getNewPath(file, sql) {
-      if (_optionalChain([sql, 'optionalAccess', _690 => _690.filename])) {
-        return this.getAbsPath(path7.join(file, sql.filename), true);
+      if (_optionalChain([sql, 'optionalAccess', _715 => _715.filename])) {
+        return this.getAbsPath(path8.join(file, sql.filename), true);
       }
       return this.getAbsPath(file, true);
     }
     write(file, data, sql) {
       try {
-        const filePath = _optionalChain([sql, 'optionalAccess', _691 => _691.type]) === "insert" ? this.getNewPath(file, sql) : this.getReadPath(file, sql).path || this.getNewPath(file, sql);
+        const filePath = _optionalChain([sql, 'optionalAccess', _716 => _716.type]) === "insert" ? this.getNewPath(file, sql) : this.getReadPath(file, sql).path || this.getNewPath(file, sql);
         this.dbLog("write", "[WRITE]", filePath);
-        fs10.writeFileSync(filePath, data, "utf8");
+        fs11.writeFileSync(filePath, data, "utf8");
         return "ok";
       } catch (e) {
         this.dbLog("write failed", "[WRITE ERROR]", e);
@@ -5830,7 +6022,7 @@ function dbDriver(opt = {}) {
           return { error: "empty" };
         }
         this.dbLog("read", "[READ]", read2.path);
-        const data = fs10.readFileSync(read2.path, { encoding }) || "";
+        const data = fs11.readFileSync(read2.path, { encoding }) || "";
         const fileName = this.fileExt && read2.dir.endsWith(this.fileExt) ? read2.dir : read2.dir + this.fileExt;
         return [{ data, file: fileName }];
       } catch (e) {
@@ -5844,15 +6036,15 @@ function dbDriver(opt = {}) {
         if (!del.path) {
           return "";
         }
-        if (this.fileDel && _optionalChain([sql, 'optionalAccess', _692 => _692.deltrue])) {
+        if (this.fileDel && _optionalChain([sql, 'optionalAccess', _717 => _717.deltrue])) {
           const target = del.path + ".delete" + this.fileExt;
           this.dbLog("soft delete", "[SOFT DELETE]", `${del.path} -> ${target}`);
-          fs10.renameSync(del.path, target);
-        } else if (_optionalChain([sql, 'optionalAccess', _693 => _693.filename])) {
+          fs11.renameSync(del.path, target);
+        } else if (_optionalChain([sql, 'optionalAccess', _718 => _718.filename])) {
           this.deldir(del.dir);
         } else {
           this.dbLog("delete", "[DELETE]", del.path);
-          fs10.unlinkSync(del.path);
+          fs11.unlinkSync(del.path);
         }
         return "ok";
       } catch (e) {
@@ -5871,11 +6063,11 @@ function dbDriver(opt = {}) {
           const original = del.path.replace(new RegExp(`.delete${extPattern}$`), "");
           if (original !== del.path) {
             this.dbLog("restore", "[RESTORE]", `${del.path} -> ${original}`);
-            fs10.renameSync(del.path, original);
+            fs11.renameSync(del.path, original);
           }
         } else {
           this.dbLog("force delete", "[FORCE DELETE]", del.path);
-          fs10.unlinkSync(del.path);
+          fs11.unlinkSync(del.path);
         }
         return "ok";
       } catch (e) {
@@ -5889,9 +6081,9 @@ function dbDriver(opt = {}) {
         this.dbLog("list", "[LIST]", absDir);
         let entries;
         try {
-          entries = fs10.readdirSync(absDir, { withFileTypes: true });
-        } catch (e50) {
-          return _optionalChain([sql, 'optionalAccess', _694 => _694.list]) ? { open: [], delete: [] } : [];
+          entries = fs11.readdirSync(absDir, { withFileTypes: true });
+        } catch (e57) {
+          return _optionalChain([sql, 'optionalAccess', _719 => _719.list]) ? { open: [], delete: [] } : [];
         }
         const result = { open: [], delete: [] };
         const deleteSuffix = ".delete" + this.fileExt;
@@ -5901,19 +6093,19 @@ function dbDriver(opt = {}) {
           const isDelete = fileName.endsWith(deleteSuffix);
           const baseName = isDelete ? fileName.slice(0, -deleteSuffix.length) : fileName;
           if (this.fileExt && !baseName.endsWith(this.fileExt)) continue;
-          const fullPath = path7.join(absDir, fileName);
+          const fullPath = path8.join(absDir, fileName);
           try {
-            const data = fs10.readFileSync(fullPath, "utf8");
+            const data = fs11.readFileSync(fullPath, "utf8");
             const entryData = { data, file: baseName };
             if (isDelete) {
-              if (_optionalChain([sql, 'optionalAccess', _695 => _695.list])) result.delete.push(entryData);
+              if (_optionalChain([sql, 'optionalAccess', _720 => _720.list])) result.delete.push(entryData);
             } else {
               result.open.push(entryData);
             }
-          } catch (e51) {
+          } catch (e58) {
           }
         }
-        return _optionalChain([sql, 'optionalAccess', _696 => _696.list]) ? result : result.open;
+        return _optionalChain([sql, 'optionalAccess', _721 => _721.list]) ? result : result.open;
       } catch (e) {
         this.dbLog("list failed", "[LIST ERROR]", e);
         return e;
@@ -5923,7 +6115,7 @@ function dbDriver(opt = {}) {
     getFileNameFromWhere(where) {
       if (!where || !Array.isArray(where)) return "";
       const first = where.find((item) => Array.isArray(item));
-      const raw = _optionalChain([first, 'optionalAccess', _697 => _697[2]]);
+      const raw = _optionalChain([first, 'optionalAccess', _722 => _722[2]]);
       if (typeof raw === "string") {
         return raw.replace(/^'+|'+$/g, "");
       }
@@ -5948,22 +6140,22 @@ function dbDriver(opt = {}) {
             const data = sql.set[0][1];
             result = this.write(this.tableFilePath(sql.table, file), data, sql);
           } else if (sql.type === "select") {
-            if (_optionalChain([sql, 'optionalAccess', _698 => _698.where, 'optionalAccess', _699 => _699.length]) && _optionalChain([sql, 'optionalAccess', _700 => _700.as]) !== 2) {
+            if (_optionalChain([sql, 'optionalAccess', _723 => _723.where, 'optionalAccess', _724 => _724.length]) && _optionalChain([sql, 'optionalAccess', _725 => _725.as]) !== 2) {
               const file = this.getFileNameFromWhere(sql.where);
               const readRes = this.read(this.tableFilePath(sql.table, file), sql);
               const resObj = {};
-              if (_optionalChain([readRes, 'optionalAccess', _701 => _701[0], 'optionalAccess', _702 => _702.file]) && !readRes.error) {
+              if (_optionalChain([readRes, 'optionalAccess', _726 => _726[0], 'optionalAccess', _727 => _727.file]) && !readRes.error) {
                 if (sql.as === 1) {
                   try {
                     const parsed = JSON.parse(readRes[0].data);
-                    if (_optionalChain([sql, 'access', _703 => _703.field, 'optionalAccess', _704 => _704.length])) {
+                    if (_optionalChain([sql, 'access', _728 => _728.field, 'optionalAccess', _729 => _729.length])) {
                       sql.field.forEach((f) => {
                         resObj[f] = _nullishCoalesce(parsed[f], () => ( ""));
                       });
                     } else {
                       Object.assign(resObj, parsed);
                     }
-                  } catch (e52) {
+                  } catch (e59) {
                   }
                 } else {
                   const fields = sql.field;
@@ -5977,7 +6169,7 @@ function dbDriver(opt = {}) {
             } else {
               const listRes = this.list(tableDir, sql);
               if (listRes && !listRes.error) {
-                if (_optionalChain([sql, 'optionalAccess', _705 => _705.list])) {
+                if (_optionalChain([sql, 'optionalAccess', _730 => _730.list])) {
                   const mapEntry = /* @__PURE__ */ _chunkSMVZ3ZDJcjs.__name.call(void 0, (el) => {
                     const fields = sql.field;
                     const item = { [fields[0]]: el.file };
@@ -5988,9 +6180,9 @@ function dbDriver(opt = {}) {
                   if (listRes.delete) listRes.delete = listRes.delete.map(mapEntry);
                   result = listRes;
                 } else {
-                  if (_optionalChain([sql, 'optionalAccess', _706 => _706.as]) === 2) {
+                  if (_optionalChain([sql, 'optionalAccess', _731 => _731.as]) === 2) {
                     let items = listRes;
-                    if (_optionalChain([sql, 'access', _707 => _707.where, 'optionalAccess', _708 => _708.length])) {
+                    if (_optionalChain([sql, 'access', _732 => _732.where, 'optionalAccess', _733 => _733.length])) {
                       const where = sql.where;
                       const whereType = typeof where[0] === "string" ? where[0] : "and";
                       items = items.filter((el) => {
@@ -6004,7 +6196,7 @@ function dbDriver(opt = {}) {
                           let fieldVal = "";
                           try {
                             fieldVal = _nullishCoalesce(JSON.parse(el.data)[field], () => ( ""));
-                          } catch (e53) {
+                          } catch (e60) {
                           }
                           const condMatch = String(fieldVal).includes(searchVal);
                           if (whereType === "and") {
@@ -6022,18 +6214,18 @@ function dbDriver(opt = {}) {
                       const obj = {};
                       try {
                         const parsed = JSON.parse(el.data);
-                        if (_optionalChain([sql, 'access', _709 => _709.field, 'optionalAccess', _710 => _710.length])) {
+                        if (_optionalChain([sql, 'access', _734 => _734.field, 'optionalAccess', _735 => _735.length])) {
                           sql.field.forEach((f) => {
                             obj[f] = _nullishCoalesce(parsed[f], () => ( ""));
                           });
                         } else {
                           Object.assign(obj, parsed);
                         }
-                      } catch (e54) {
+                      } catch (e61) {
                       }
                       return obj;
                     });
-                    if (_optionalChain([sql, 'access', _711 => _711.order, 'optionalAccess', _712 => _712.length])) {
+                    if (_optionalChain([sql, 'access', _736 => _736.order, 'optionalAccess', _737 => _737.length])) {
                       const orderField = sql.order[0];
                       const orderFieldName = typeof orderField === "string" ? orderField : orderField[0];
                       const direction = typeof orderField === "string" ? "ASC" : String(orderField[1]).toUpperCase();
@@ -6054,7 +6246,7 @@ function dbDriver(opt = {}) {
                   }
                 }
               } else {
-                result = _optionalChain([sql, 'optionalAccess', _713 => _713.list]) ? { open: [], delete: [] } : [];
+                result = _optionalChain([sql, 'optionalAccess', _738 => _738.list]) ? { open: [], delete: [] } : [];
               }
             }
           }
@@ -6110,7 +6302,7 @@ function sysserver($asai, opt = {}) {
   if (!$asai.$lib) $asai.$lib = {};
   $asai.$lib = { ...lib_default, ...$asai.$lib, ...opt || {} };
   $asai.dataserver = db_default;
-  _optionalChain([$asai, 'access', _714 => _714.$lib, 'access', _715 => _715.ErrorCode, 'optionalAccess', _716 => _716.loadErrorCodes, 'optionalCall', _717 => _717($asai)]);
+  _optionalChain([$asai, 'access', _739 => _739.$lib, 'access', _740 => _740.ErrorCode, 'optionalAccess', _741 => _741.loadErrorCodes, 'optionalCall', _742 => _742($asai)]);
   if (!$asai.$lib.api) $asai.$lib.api = {};
   $asai.$lib.api = { ...api_default, ...$asai.$lib.api };
   if (!$asai.$lib.ws) $asai.$lib.ws = {};
@@ -6303,7 +6495,7 @@ function normalizeDataStoresConfig(cfg) {
     }
     if (userStore.opt.create == null) userStore.opt.create = 1;
   }
-  if (!stores.log && _optionalChain([cfg, 'access', _718 => _718.logger, 'optionalAccess', _719 => _719.store])) {
+  if (!stores.log && _optionalChain([cfg, 'access', _743 => _743.logger, 'optionalAccess', _744 => _744.store])) {
     const s = cfg.logger.store;
     stores.log = {
       type: s.type || "file",
@@ -6367,13 +6559,13 @@ function validateHostConfig(cfg) {
   if (cfg.asaisn != null) {
     errors.push("asaisn \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_ASAISN");
   }
-  if (_optionalChain([cfg, 'access', _720 => _720.aes, 'optionalAccess', _721 => _721.keybase64]) != null) {
+  if (_optionalChain([cfg, 'access', _745 => _745.aes, 'optionalAccess', _746 => _746.keybase64]) != null) {
     errors.push("aes.keybase64 \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_AES_KEYBASE64");
   }
-  if (_optionalChain([cfg, 'access', _722 => _722.httpscert, 'optionalAccess', _723 => _723.key]) != null || _optionalChain([cfg, 'access', _724 => _724.httpscert, 'optionalAccess', _725 => _725.cert]) != null) {
+  if (_optionalChain([cfg, 'access', _747 => _747.httpscert, 'optionalAccess', _748 => _748.key]) != null || _optionalChain([cfg, 'access', _749 => _749.httpscert, 'optionalAccess', _750 => _750.cert]) != null) {
     errors.push("httpscert.key/cert \u7981\u6B62\u5185\u8054\u4E8E asaihost.json\uFF0C\u8BF7\u4F7F\u7528 keyPath/certPath \u6216\u73AF\u5883\u53D8\u91CF");
   }
-  if (_optionalChain([cfg, 'access', _726 => _726.security, 'optionalAccess', _727 => _727.sessionSecret]) != null) {
+  if (_optionalChain([cfg, 'access', _751 => _751.security, 'optionalAccess', _752 => _752.sessionSecret]) != null) {
     errors.push("security.sessionSecret \u7981\u6B62\u5199\u5165 asaihost.json\uFF0C\u8BF7\u4F7F\u7528 ASAI_SESSION_SECRET");
   }
   if (Array.isArray(cfg.wssec) && typeof cfg.wssec[0] === "string" && cfg.wssec[0].length > 0) {
@@ -6428,10 +6620,10 @@ function validateHostConfig(cfg) {
       validateHostSiteLimits(name, h, errors);
     }
   }
-  if (_optionalChain([cfg, 'access', _728 => _728.logger, 'optionalAccess', _729 => _729.sample]) && typeof cfg.logger.sample !== "object") {
+  if (_optionalChain([cfg, 'access', _753 => _753.logger, 'optionalAccess', _754 => _754.sample]) && typeof cfg.logger.sample !== "object") {
     errors.push('logger.sample \u5FC5\u987B\u4E3A\u5BF9\u8C61\uFF08\u5982 { "REQ_OTHER": 0.1 }\uFF09');
   }
-  if (_optionalChain([cfg, 'access', _730 => _730.logger, 'optionalAccess', _731 => _731.skip]) != null && !Array.isArray(cfg.logger.skip)) {
+  if (_optionalChain([cfg, 'access', _755 => _755.logger, 'optionalAccess', _756 => _756.skip]) != null && !Array.isArray(cfg.logger.skip)) {
     errors.push('logger.skip \u5FC5\u987B\u4E3A\u5B57\u7B26\u4E32\u6570\u7EC4\uFF08\u5982 ["/sys/info/metrics"]\uFF09');
   }
   if (cfg.proxyhosts && typeof cfg.proxyhosts === "object") {
@@ -6465,7 +6657,7 @@ _chunkSMVZ3ZDJcjs.__name.call(void 0, validateHostSiteLimits, "validateHostSiteL
 function validateProductionSecurity(cfg) {
   const errors = [];
   if (process.env.NODE_ENV !== "production") return errors;
-  const sec = _optionalChain([cfg, 'optionalAccess', _732 => _732.security]);
+  const sec = _optionalChain([cfg, 'optionalAccess', _757 => _757.security]);
   if (!sec || typeof sec !== "object") {
     errors.push("\u751F\u4EA7\u73AF\u5883\u5FC5\u987B\u914D\u7F6E security \u5BF9\u8C61");
     return errors;
@@ -6476,7 +6668,7 @@ function validateProductionSecurity(cfg) {
   if (sec.allowRegister === 1) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.allowRegister \u5E94\u4E3A 0\uFF08CR 1.3 \u7981\u6B62\u5F00\u653E\u6CE8\u518C\uFF09");
   }
-  if (!_optionalChain([sec, 'access', _733 => _733.quota, 'optionalAccess', _734 => _734.enabled])) {
+  if (!_optionalChain([sec, 'access', _758 => _758.quota, 'optionalAccess', _759 => _759.enabled])) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.quota.enabled \u5E94\u4E3A 1\uFF08CR 7.1 \u8D44\u6E90\u9650\u5236\uFF09");
   }
   if (sec.csp !== 1) {
@@ -6485,7 +6677,7 @@ function validateProductionSecurity(cfg) {
   if (typeof sec.minUserLevel !== "number" || sec.minUserLevel < 0) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.minUserLevel \u5E94\u663E\u5F0F\u914D\u7F6E");
   }
-  if (sec.forceWss === 1 && !_optionalChain([cfg, 'optionalAccess', _735 => _735.httpscert, 'optionalAccess', _736 => _736.keyPath]) && !_optionalChain([cfg, 'optionalAccess', _737 => _737.httpscert, 'optionalAccess', _738 => _738.key])) {
+  if (sec.forceWss === 1 && !_optionalChain([cfg, 'optionalAccess', _760 => _760.httpscert, 'optionalAccess', _761 => _761.keyPath]) && !_optionalChain([cfg, 'optionalAccess', _762 => _762.httpscert, 'optionalAccess', _763 => _763.key])) {
     errors.push("\u751F\u4EA7\u73AF\u5883 security.forceWss=1 \u65F6\u9700\u914D\u7F6E HTTPS \u8BC1\u4E66");
   }
   return errors;
@@ -6504,12 +6696,12 @@ var DEFAULT_RECONNECT = {
   rs485: { enabled: true, maxRetries: 60, initialDelay: 3e3, maxDelay: 3e4, factor: 2 }
 };
 function getTransportBlock(cfg, kind) {
-  const block = _optionalChain([cfg, 'optionalAccess', _739 => _739[kind]]);
+  const block = _optionalChain([cfg, 'optionalAccess', _764 => _764[kind]]);
   return block && typeof block === "object" ? block : null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getTransportBlock, "getTransportBlock");
 function getTransportDefault(cfg, kind) {
-  const def = _optionalChain([getTransportBlock, 'call', _740 => _740(cfg, kind), 'optionalAccess', _741 => _741.default]);
+  const def = _optionalChain([getTransportBlock, 'call', _765 => _765(cfg, kind), 'optionalAccess', _766 => _766.default]);
   return def && typeof def === "object" ? def : null;
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getTransportDefault, "getTransportDefault");
@@ -6519,7 +6711,7 @@ function hasTransportDefault(cfg, kind) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, hasTransportDefault, "hasTransportDefault");
 function getDefaultConnId(cfg, kind) {
   const def = getTransportDefault(cfg, kind);
-  const id = _optionalChain([def, 'optionalAccess', _742 => _742.id]);
+  const id = _optionalChain([def, 'optionalAccess', _767 => _767.id]);
   return typeof id === "string" && id.length > 0 ? id : DEFAULT_CONN_ID[kind];
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, getDefaultConnId, "getDefaultConnId");
@@ -6530,14 +6722,14 @@ function shouldAutoConnect(def) {
 _chunkSMVZ3ZDJcjs.__name.call(void 0, shouldAutoConnect, "shouldAutoConnect");
 function resolveReconnectOptions(def, kind, cfg) {
   const base = DEFAULT_RECONNECT[kind];
-  const rc = _optionalChain([def, 'optionalAccess', _743 => _743.reconnect]);
-  const tmMaxTry = _optionalChain([cfg, 'optionalAccess', _744 => _744.tm, 'optionalAccess', _745 => _745.maxtry]);
+  const rc = _optionalChain([def, 'optionalAccess', _768 => _768.reconnect]);
+  const tmMaxTry = _optionalChain([cfg, 'optionalAccess', _769 => _769.tm, 'optionalAccess', _770 => _770.maxtry]);
   return {
-    enabled: _optionalChain([rc, 'optionalAccess', _746 => _746.enabled]) !== false && base.enabled !== false,
-    maxRetries: _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _747 => _747.maxRetries]), () => ( tmMaxTry)), () => ( base.maxRetries)), () => ( 60)),
-    initialDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _748 => _748.initialDelay]), () => ( base.initialDelay)), () => ( 1e3)),
-    maxDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _749 => _749.maxDelay]), () => ( base.maxDelay)), () => ( 3e4)),
-    factor: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _750 => _750.factor]), () => ( base.factor)), () => ( 2))
+    enabled: _optionalChain([rc, 'optionalAccess', _771 => _771.enabled]) !== false && base.enabled !== false,
+    maxRetries: _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _772 => _772.maxRetries]), () => ( tmMaxTry)), () => ( base.maxRetries)), () => ( 60)),
+    initialDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _773 => _773.initialDelay]), () => ( base.initialDelay)), () => ( 1e3)),
+    maxDelay: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _774 => _774.maxDelay]), () => ( base.maxDelay)), () => ( 3e4)),
+    factor: _nullishCoalesce(_nullishCoalesce(_optionalChain([rc, 'optionalAccess', _775 => _775.factor]), () => ( base.factor)), () => ( 2))
   };
 }
 _chunkSMVZ3ZDJcjs.__name.call(void 0, resolveReconnectOptions, "resolveReconnectOptions");
@@ -6587,17 +6779,17 @@ function createTransportDataHandler($asai, manager) {
     if (typeof event.data === "string") {
       try {
         event.data = JSON.parse(event.data);
-      } catch (e55) {
+      } catch (e62) {
       }
     }
-    if (_optionalChain([event, 'access', _751 => _751.data, 'optionalAccess', _752 => _752.id])) {
+    if (_optionalChain([event, 'access', _776 => _776.data, 'optionalAccess', _777 => _777.id])) {
       manager.watch(event.id, event.data);
       return;
     }
     try {
-      const wsKey = _optionalChain([$asai, 'optionalAccess', _753 => _753.command, 'optionalAccess', _754 => _754.commandconfig, 'optionalAccess', _755 => _755.config, 'optionalAccess', _756 => _756.commandclient]);
-      _optionalChain([$asai, 'access', _757 => _757.serversws, 'optionalAccess', _758 => _758[wsKey], 'optionalAccess', _759 => _759.broadws, 'optionalCall', _760 => _760(event.data)]);
-    } catch (e56) {
+      const wsKey = _optionalChain([$asai, 'optionalAccess', _778 => _778.command, 'optionalAccess', _779 => _779.commandconfig, 'optionalAccess', _780 => _780.config, 'optionalAccess', _781 => _781.commandclient]);
+      _optionalChain([$asai, 'access', _782 => _782.serversws, 'optionalAccess', _783 => _783[wsKey], 'optionalAccess', _784 => _784.broadws, 'optionalCall', _785 => _785(event.data)]);
+    } catch (e63) {
     }
   };
 }
@@ -6644,20 +6836,20 @@ var initAsaiHostNodejs2 = {
   initHostserverWs,
   syncApiRouteKeys,
   syncWsRouteKeys,
-  secureCompare: _chunkWXW5DYNUcjs.secureCompare,
+  secureCompare: _chunkH2QP5J7Xcjs.secureCompare,
   resolvePathUnderRoots,
   getHostAllowedRoots,
   logSecurityEvent,
   sanitizeString,
   validateHttpAuth,
   normalizeSecurityConfig,
-  stripForbiddenSecretsFromHostConfig: _chunkZK4O4Z2Ocjs.stripForbiddenSecretsFromHostConfig,
-  loadAsaiSecrets: _chunkZK4O4Z2Ocjs.loadAsaiSecrets,
-  loadDotEnvFile: _chunkZK4O4Z2Ocjs.loadDotEnvFile,
-  applySecretsToHostConfig: _chunkZK4O4Z2Ocjs.applySecretsToHostConfig,
-  resolveHttpsCertFromPaths: _chunkZK4O4Z2Ocjs.resolveHttpsCertFromPaths,
-  validateAsaiSecrets: _chunkZK4O4Z2Ocjs.validateAsaiSecrets,
-  isDevDefaultPassword: _chunkZK4O4Z2Ocjs.isDevDefaultPassword,
+  stripForbiddenSecretsFromHostConfig: _chunk5EWEKXQIcjs.stripForbiddenSecretsFromHostConfig,
+  loadAsaiSecrets: _chunk5EWEKXQIcjs.loadAsaiSecrets,
+  loadDotEnvFile: _chunk5EWEKXQIcjs.loadDotEnvFile,
+  applySecretsToHostConfig: _chunk5EWEKXQIcjs.applySecretsToHostConfig,
+  resolveHttpsCertFromPaths: _chunk5EWEKXQIcjs.resolveHttpsCertFromPaths,
+  validateAsaiSecrets: _chunk5EWEKXQIcjs.validateAsaiSecrets,
+  isDevDefaultPassword: _chunk5EWEKXQIcjs.isDevDefaultPassword,
   getTransportBlock,
   getTransportDefault,
   hasTransportDefault,
@@ -6669,7 +6861,7 @@ var initAsaiHostNodejs2 = {
   createTransportDataHandler,
   wireTransportConnectionLogs
 };
-var PLUGIN_VERSION = true ? "0.0.9" : "0.0.1";
+var PLUGIN_VERSION = true ? "0.0.10" : "0.0.1";
 var index_default = initAsaiHostNodejs2;
 
 
@@ -6712,5 +6904,5 @@ var index_default = initAsaiHostNodejs2;
 
 
 
-exports.AsaiCommon = Index_default; exports.AsaiUtils = utils_exports; exports.PLUGIN_NAME = PLUGIN_NAME; exports.PLUGIN_VERSION = PLUGIN_VERSION; exports.applySecretsToHostConfig = _chunkZK4O4Z2Ocjs.applySecretsToHostConfig; exports.createTransportDataHandler = createTransportDataHandler; exports.default = index_default; exports.ensureDefaultConnection = ensureDefaultConnection; exports.getDefaultConnId = getDefaultConnId; exports.getHostAllowedRoots = getHostAllowedRoots; exports.getTransportBlock = getTransportBlock; exports.getTransportDefault = getTransportDefault; exports.hasTransportDefault = hasTransportDefault; exports.initAsaiHostNodejs = initAsaiHostNodejs2; exports.initHostserverApi = initHostserverApi; exports.initHostserverWs = initHostserverWs; exports.initTransportBridge = initTransportBridge; exports.isDevDefaultPassword = _chunkZK4O4Z2Ocjs.isDevDefaultPassword; exports.loadAsaiSecrets = _chunkZK4O4Z2Ocjs.loadAsaiSecrets; exports.loadDotEnvFile = _chunkZK4O4Z2Ocjs.loadDotEnvFile; exports.logSecurityEvent = logSecurityEvent; exports.normalizeHostConfig = normalizeHostConfig; exports.normalizeSecurityConfig = normalizeSecurityConfig; exports.registerApi = registerApi; exports.registerWs = registerWs; exports.resolveHttpsCertFromPaths = _chunkZK4O4Z2Ocjs.resolveHttpsCertFromPaths; exports.resolvePathUnderRoots = resolvePathUnderRoots; exports.resolveReconnectOptions = resolveReconnectOptions; exports.sanitizeString = sanitizeString; exports.secureCompare = _chunkWXW5DYNUcjs.secureCompare; exports.shouldAutoConnect = shouldAutoConnect; exports.stripForbiddenSecretsFromHostConfig = _chunkZK4O4Z2Ocjs.stripForbiddenSecretsFromHostConfig; exports.syncApiRouteKeys = syncApiRouteKeys; exports.syncWsRouteKeys = syncWsRouteKeys; exports.sysserver = sysserver; exports.validateAsaiSecrets = _chunkZK4O4Z2Ocjs.validateAsaiSecrets; exports.validateHostConfig = validateHostConfig; exports.validateHttpAuth = validateHttpAuth; exports.validateProductionSecurity = validateProductionSecurity; exports.wireTransportConnectionLogs = wireTransportConnectionLogs;
+exports.AsaiCommon = Index_default; exports.AsaiUtils = utils_exports; exports.PLUGIN_NAME = PLUGIN_NAME; exports.PLUGIN_VERSION = PLUGIN_VERSION; exports.applySecretsToHostConfig = _chunk5EWEKXQIcjs.applySecretsToHostConfig; exports.createTransportDataHandler = createTransportDataHandler; exports.default = index_default; exports.ensureDefaultConnection = ensureDefaultConnection; exports.getDefaultConnId = getDefaultConnId; exports.getHostAllowedRoots = getHostAllowedRoots; exports.getTransportBlock = getTransportBlock; exports.getTransportDefault = getTransportDefault; exports.hasTransportDefault = hasTransportDefault; exports.initAsaiHostNodejs = initAsaiHostNodejs2; exports.initHostserverApi = initHostserverApi; exports.initHostserverWs = initHostserverWs; exports.initTransportBridge = initTransportBridge; exports.isDevDefaultPassword = _chunk5EWEKXQIcjs.isDevDefaultPassword; exports.loadAsaiSecrets = _chunk5EWEKXQIcjs.loadAsaiSecrets; exports.loadDotEnvFile = _chunk5EWEKXQIcjs.loadDotEnvFile; exports.logSecurityEvent = logSecurityEvent; exports.normalizeHostConfig = normalizeHostConfig; exports.normalizeSecurityConfig = normalizeSecurityConfig; exports.registerApi = registerApi; exports.registerWs = registerWs; exports.resolveHttpsCertFromPaths = _chunk5EWEKXQIcjs.resolveHttpsCertFromPaths; exports.resolvePathUnderRoots = resolvePathUnderRoots; exports.resolveReconnectOptions = resolveReconnectOptions; exports.sanitizeString = sanitizeString; exports.secureCompare = _chunkH2QP5J7Xcjs.secureCompare; exports.shouldAutoConnect = shouldAutoConnect; exports.stripForbiddenSecretsFromHostConfig = _chunk5EWEKXQIcjs.stripForbiddenSecretsFromHostConfig; exports.syncApiRouteKeys = syncApiRouteKeys; exports.syncWsRouteKeys = syncWsRouteKeys; exports.sysserver = sysserver; exports.validateAsaiSecrets = _chunk5EWEKXQIcjs.validateAsaiSecrets; exports.validateHostConfig = validateHostConfig; exports.validateHttpAuth = validateHttpAuth; exports.validateProductionSecurity = validateProductionSecurity; exports.wireTransportConnectionLogs = wireTransportConnectionLogs;
 //# sourceMappingURL=asaihost-nodejs.cjs.map