better-auth-studio 1.1.3-beta.9 → 1.1.3

package/dist/studio.d.ts

@@ -17,4 +17,3 @@ export declare function startStudio(options: StudioOptions): Promise<{
     wss: WebSocketServer | null;
 }>;
 export {};
-//# sourceMappingURL=studio.d.ts.map

package/dist/studio.js

@@ -58,9 +58,12 @@ export async function startStudio(options) {
         });
     }
     app.use(createRoutes(authConfig, configPath, geoDbPath));
-    const publicDir = existsSync(join(__dirname, "../public"))
-        ? join(__dirname, "../public")
-        : join(__dirname, "../../public");
+    const publicDirCandidates = [
+        join(__dirname, "public"),
+        join(__dirname, "../public"),
+        join(__dirname, "../../public"),
+    ];
+    const publicDir = publicDirCandidates.find((candidate) => existsSync(candidate)) || publicDirCandidates[0];
     let studioEnabled = false;
     let studioConfigPath = null;
     const possibleFiles = [
@@ -213,4 +216,3 @@ export async function startStudio(options) {
     });
     return { server, wss };
 }
-//# sourceMappingURL=studio.js.map

package/dist/types/events.d.ts

@@ -51,4 +51,3 @@ export declare function getEventSeverity(event: AuthEvent | {
     type: AuthEventType;
     status?: "success" | "failed";
 }, status?: "success" | "failed"): "info" | "success" | "warning" | "failed";
-//# sourceMappingURL=events.d.ts.map

package/dist/types/events.js

@@ -259,4 +259,3 @@ export function getEventSeverity(event, status) {
     // rejected, cancelled, removed, updated are informational
     return "info";
 }
-//# sourceMappingURL=events.js.map

package/dist/types/handler.d.ts

@@ -2,12 +2,14 @@ export type UniversalRequest = {
     url: string;
     method: string;
     headers: Record<string, string>;
+    ip?: string;
     body?: any;
 };
 export type UniversalResponse = {
     status: number;
     headers: Record<string, string>;
-    body: string | Buffer;
+    setCookies?: string[];
+    body: string | Uint8Array | ArrayBuffer;
 };
 export type TimeWindowPreset = "15m" | "30m" | "1h" | "2h" | "4h" | "6h" | "12h" | "1d" | "2d" | "3d" | "7d" | "14d" | "30d";
 export type TimeWindowConfig = {
@@ -59,6 +61,15 @@ export type StudioMetadata = {
 export type StudioAccessConfig = {
     roles?: string[];
     allowEmails?: string[];
+    /**
+     * Optional IP allowlist. Supports exact IPs and wildcard patterns (e.g. "10.0.*").
+     * When set, only matching IPs can access Studio.
+     */
+    allowIpAddresses?: string[];
+    /**
+     * Optional IP blocklist. Supports exact IPs and wildcard patterns (e.g. "203.0.113.*").
+     */
+    blockIpAddresses?: string[];
     sessionDuration?: number;
     secret?: string;
 };
@@ -113,7 +124,7 @@ export type StudioConfig = {
         tableName?: string;
         provider?: EventIngestionProvider;
         client?: any;
-        clientType?: "postgres" | "prisma" | "drizzle" | "clickhouse" | "https" | "custom" | "sqlite" | "node-sqlite";
+        clientType?: "postgres" | "prisma" | "drizzle" | "kysely" | "clickhouse" | "https" | "custom" | "sqlite" | "node-sqlite";
         include?: AuthEventType[];
         exclude?: AuthEventType[];
         batchSize?: number;
@@ -140,4 +151,3 @@ export type WindowStudioConfig = {
     };
 };
 export declare function defineStudioConfig(config: StudioConfig): StudioConfig;
-//# sourceMappingURL=handler.d.ts.map

package/dist/types/handler.js

@@ -18,4 +18,3 @@ export const STUDIO_TOOL_IDS = [
 export function defineStudioConfig(config) {
     return config;
 }
-//# sourceMappingURL=handler.js.map

package/dist/types/index.d.ts

@@ -6,4 +6,3 @@ export interface DatabaseDetectionResult extends DetectionInfo {
     dialect?: string;
     adapter?: string;
 }
-//# sourceMappingURL=index.d.ts.map

package/dist/types/index.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=index.js.map

package/dist/utils/access-rules.d.ts

@@ -0,0 +1,19 @@
+import type { StudioAccessConfig } from "../types/handler.js";
+export type AccessEvaluationInput = {
+    accessConfig?: StudioAccessConfig;
+    path: string;
+    method: string;
+    headers: Record<string, string>;
+    ip?: string | null;
+};
+export type AccessEvaluationResult = {
+    allowed: true;
+    ipAddress: string | null;
+} | {
+    allowed: false;
+    ipAddress: string | null;
+    reason: "ip_not_allowed" | "ip_blocked";
+    message: string;
+};
+export declare function extractClientIp(headers: Record<string, string>, fallbackIp?: string | null): string | null;
+export declare function evaluateRequestAccess(input: AccessEvaluationInput): AccessEvaluationResult;

package/dist/utils/access-rules.js

@@ -0,0 +1,126 @@
+import { isIP } from "node:net";
+const IP_HEADER_CANDIDATES = [
+    "x-forwarded-for",
+    "cf-connecting-ip",
+    "x-real-ip",
+    "x-client-ip",
+    "true-client-ip",
+];
+function normalizeIpToken(raw) {
+    if (!raw)
+        return null;
+    let value = raw.trim();
+    if (!value || value.toLowerCase() === "unknown") {
+        return null;
+    }
+    // RFC 7239 may include entries like: for="1.2.3.4:1234"
+    if (value.toLowerCase().startsWith("for=")) {
+        value = value.slice(4).trim();
+    }
+    value = value.replace(/^"+|"+$/g, "");
+    // Strip IPv6 brackets when present.
+    if (value.startsWith("[")) {
+        const end = value.indexOf("]");
+        if (end > 0) {
+            value = value.slice(1, end);
+        }
+    }
+    // Handle IPv4 with port.
+    if (/^\d{1,3}(?:\.\d{1,3}){3}:\d+$/.test(value)) {
+        value = value.split(":")[0] || value;
+    }
+    // Normalize IPv6-mapped IPv4 (e.g. ::ffff:127.0.0.1)
+    if (value.startsWith("::ffff:")) {
+        value = value.slice(7);
+    }
+    return isIP(value) ? value : null;
+}
+function getHeaderValue(headers, headerName) {
+    const target = headerName.toLowerCase();
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() === target) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function getForwardedIp(headers) {
+    const forwarded = getHeaderValue(headers, "forwarded");
+    if (!forwarded)
+        return null;
+    const entries = forwarded.split(",");
+    for (const entry of entries) {
+        const match = entry.match(/for=("?\[?[a-fA-F0-9:.]+\]?"?)/i);
+        if (!match)
+            continue;
+        const ip = normalizeIpToken(match[1]);
+        if (ip)
+            return ip;
+    }
+    return null;
+}
+export function extractClientIp(headers, fallbackIp) {
+    for (const header of IP_HEADER_CANDIDATES) {
+        const value = getHeaderValue(headers, header);
+        if (!value)
+            continue;
+        const firstValue = value.split(",")[0];
+        const ip = normalizeIpToken(firstValue);
+        if (ip)
+            return ip;
+    }
+    const forwardedIp = getForwardedIp(headers);
+    if (forwardedIp)
+        return forwardedIp;
+    return normalizeIpToken(fallbackIp);
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function ipMatchesRule(ipAddress, rule) {
+    const trimmedRule = rule.trim();
+    if (!trimmedRule)
+        return false;
+    if (trimmedRule.includes("*")) {
+        const pattern = `^${escapeRegExp(trimmedRule).replace(/\\\*/g, ".*")}$`;
+        return new RegExp(pattern).test(ipAddress);
+    }
+    const normalizedRuleIp = normalizeIpToken(trimmedRule);
+    if (!normalizedRuleIp)
+        return false;
+    return normalizedRuleIp === ipAddress;
+}
+function hasRules(values) {
+    return Array.isArray(values) && values.some((value) => value.trim().length > 0);
+}
+export function evaluateRequestAccess(input) {
+    const { accessConfig, headers, ip } = input;
+    const ipAddress = extractClientIp(headers, ip);
+    const allowIpAddresses = accessConfig?.allowIpAddresses?.filter((value) => value.trim().length > 0);
+    if (hasRules(allowIpAddresses)) {
+        if (!ipAddress || !allowIpAddresses.some((rule) => ipMatchesRule(ipAddress, rule))) {
+            return {
+                allowed: false,
+                ipAddress,
+                reason: "ip_not_allowed",
+                message: "Access denied. This IP address is not in the allowed list.",
+            };
+        }
+    }
+    const blockIpAddresses = accessConfig?.blockIpAddresses?.filter((value) => value.trim().length > 0);
+    if (hasRules(blockIpAddresses) && ipAddress) {
+        const blocked = blockIpAddresses.some((rule) => ipMatchesRule(ipAddress, rule));
+        if (blocked) {
+            return {
+                allowed: false,
+                ipAddress,
+                reason: "ip_blocked",
+                message: "Access denied. This IP address is blocked.",
+            };
+        }
+    }
+    return {
+        allowed: true,
+        ipAddress,
+    };
+}

package/dist/utils/auth-callbacks-injector.d.ts

@@ -1,3 +1,2 @@
 import type { StudioConfig } from "../types/handler.js";
 export declare function wrapAuthCallbacks(auth: any, eventsConfig: StudioConfig["events"]): void;
-//# sourceMappingURL=auth-callbacks-injector.d.ts.map

package/dist/utils/auth-callbacks-injector.js

@@ -222,4 +222,3 @@ export function wrapAuthCallbacks(auth, eventsConfig) {
     }
     catch (error) { }
 }
-//# sourceMappingURL=auth-callbacks-injector.js.map

package/dist/utils/database-detection.d.ts

@@ -17,4 +17,3 @@ export declare function detectDatabaseWithDialect(cwd?: string): Promise<Databas
  * @returns Array of all detected databases
  */
 export declare function detectAllDatabases(cwd?: string): Promise<DatabaseDetectionResult[]>;
-//# sourceMappingURL=database-detection.d.ts.map

package/dist/utils/database-detection.js

@@ -1,7 +1,8 @@
-import { getPackageVersion } from "./package-json.js";
+import { getDirectPackageVersion, getPackageVersion } from "./package-json.js";
 const DATABASES = {
     "drizzle-orm": "drizzle",
     "@prisma/client": "prisma",
+    kysely: "kysely",
     mongoose: "mongodb",
     mongodb: "mongodb",
     pg: "postgresql",
@@ -16,6 +17,7 @@ const _DATABASE_DIALECTS = {
     mariadb: ["mariadb"],
     sqlite: ["sqlite3", "better-sqlite3"],
     prisma: ["@prisma/client"],
+    kysely: ["kysely"],
     mongodb: ["mongoose", "mongodb"],
     drizzle: ["drizzle-orm"],
 };
@@ -26,7 +28,7 @@ const _DATABASE_DIALECTS = {
  */
 export async function detectDatabase(cwd) {
     for (const [pkg, name] of Object.entries(DATABASES)) {
-        const version = await getPackageVersion(pkg, cwd);
+        const version = pkg === "kysely" ? getDirectPackageVersion(pkg, cwd) : await getPackageVersion(pkg, cwd);
         if (version)
             return { name, version };
     }
@@ -79,6 +81,14 @@ export async function detectDatabaseWithDialect(cwd) {
             adapter = "drizzle";
             break;
         }
+        case "kysely": {
+            const kyselyDialect = await detectKyselyDialect(cwd);
+            if (kyselyDialect) {
+                dialect = kyselyDialect;
+            }
+            adapter = "kysely";
+            break;
+        }
     }
     return {
         name: detection.name,
@@ -113,6 +123,26 @@ async function detectDrizzleDialect(cwd) {
         { pkg: "better-sqlite3", dialect: "sqlite" },
     ];
     for (const { pkg, dialect } of drizzleDrivers) {
+        try {
+            const version = await getPackageVersion(pkg, cwd);
+            if (version)
+                return dialect;
+        }
+        catch { }
+    }
+    return undefined;
+}
+async function detectKyselyDialect(cwd) {
+    const kyselyDrivers = [
+        { pkg: "pg", dialect: "postgresql" },
+        { pkg: "postgres", dialect: "postgresql" },
+        { pkg: "mysql2", dialect: "mysql" },
+        { pkg: "better-sqlite3", dialect: "sqlite" },
+        { pkg: "sqlite3", dialect: "sqlite" },
+        { pkg: "tedious", dialect: "mssql" },
+        { pkg: "mssql", dialect: "mssql" },
+    ];
+    for (const { pkg, dialect } of kyselyDrivers) {
         try {
             const version = await getPackageVersion(pkg, cwd);
             if (version)
@@ -130,7 +160,7 @@ async function detectDrizzleDialect(cwd) {
 export async function detectAllDatabases(cwd) {
     const results = [];
     for (const [pkg, name] of Object.entries(DATABASES)) {
-        const version = await getPackageVersion(pkg, cwd);
+        const version = pkg === "kysely" ? getDirectPackageVersion(pkg, cwd) : await getPackageVersion(pkg, cwd);
         if (version) {
             const detection = await detectDatabaseWithDialect(cwd);
             if (detection && detection.name === name) {
@@ -140,4 +170,3 @@ export async function detectAllDatabases(cwd) {
     }
     return results;
 }
-//# sourceMappingURL=database-detection.js.map

package/dist/utils/event-ingestion.d.ts

@@ -35,4 +35,3 @@ export declare function getEventQueueSize(): number;
  * Get the current event ingestion provider
  */
 export declare function getEventIngestionProvider(): EventIngestionProvider | null;
-//# sourceMappingURL=event-ingestion.d.ts.map

package/dist/utils/event-ingestion.js

@@ -25,6 +25,7 @@ export function initializeEventIngestion(eventsConfig) {
             case "postgres":
             case "prisma":
             case "drizzle":
+            case "kysely":
                 try {
                     provider = createPostgresProvider({
                         client: eventsConfig.client,
@@ -244,4 +245,3 @@ export function getEventQueueSize() {
 export function getEventIngestionProvider() {
     return provider;
 }
-//# sourceMappingURL=event-ingestion.js.map

package/dist/utils/hook-injector.d.ts

@@ -9,4 +9,3 @@ export declare function injectLastSeenAtHooks(auth: any, config?: {
  * Inject middleware hooks into Better Auth using plugins
  */
 export declare function injectEventHooks(auth: any, eventsConfig: StudioConfig["events"]): void;
-//# sourceMappingURL=hook-injector.d.ts.map

package/dist/utils/hook-injector.js

@@ -1,4 +1,4 @@
-import { createAuthMiddleware } from "better-auth/plugins";
+import { createAuthMiddleware } from "better-auth/api";
 import { createClickHouseProvider, createHttpProvider, createNodeSqliteProvider, createPostgresProvider, createSqliteProvider, } from "../providers/events/helpers.js";
 import { wrapAuthCallbacks } from "./auth-callbacks-injector.js";
 import { emitEvent, isEventIngestionInitialized, } from "./event-ingestion.js";
@@ -967,6 +967,7 @@ function createEventIngestionPlugin(eventsConfig) {
                             case "postgres":
                             case "prisma":
                             case "drizzle":
+                            case "kysely":
                                 provider = createPostgresProvider({
                                     client: capturedConfig.client,
                                     tableName: capturedConfig.tableName,
@@ -1261,4 +1262,3 @@ export function injectEventHooks(auth, eventsConfig) {
         console.error("[Event Hooks] Failed to inject:", error);
     }
 }
-//# sourceMappingURL=hook-injector.js.map

package/dist/utils/html-injector.d.ts

@@ -1,3 +1,4 @@
+import type { StudioAccessConfig } from "../types/handler.js";
 export interface StudioMetadata {
     title?: string;
     logo?: string;
@@ -9,12 +10,6 @@ export interface StudioMetadata {
     theme?: "light" | "dark";
     customStyles?: string;
 }
-export interface StudioAccessConfig {
-    roles?: string[];
-    allowEmails?: string[];
-    sessionDuration?: number;
-    secret?: string;
-}
 export interface StudioConfig {
     basePath?: string;
     metadata?: StudioMetadata;
@@ -63,4 +58,3 @@ export interface WindowStudioConfig {
     };
 }
 export declare function serveIndexHtml(publicDir: string, config?: Partial<StudioConfig>): string;
-//# sourceMappingURL=html-injector.d.ts.map

package/dist/utils/html-injector.js

@@ -71,8 +71,23 @@ function injectConfig(html, config) {
         .replace(/'/g, "'");
     const script = `
     <script>
+      const __BAS_THEME_KEY__ = "better-auth-studio-theme";
       window.__STUDIO_CONFIG__ = ${safeJson};
       Object.freeze(window.__STUDIO_CONFIG__);
+      try {
+        const configuredTheme = window.__STUDIO_CONFIG__?.metadata?.theme === "light" ? "light" : "dark";
+        const storedTheme = window.localStorage.getItem(__BAS_THEME_KEY__);
+        const activeTheme = storedTheme === "light" || storedTheme === "dark" ? storedTheme : configuredTheme;
+        document.documentElement.dataset.theme = activeTheme;
+        document.documentElement.style.colorScheme = activeTheme;
+        document.documentElement.classList.remove("light", "dark");
+        document.documentElement.classList.add(activeTheme);
+      } catch {
+        document.documentElement.dataset.theme = window.__STUDIO_CONFIG__?.metadata?.theme === "light" ? "light" : "dark";
+        document.documentElement.style.colorScheme = document.documentElement.dataset.theme;
+        document.documentElement.classList.remove("light", "dark");
+        document.documentElement.classList.add(document.documentElement.dataset.theme);
+      }
       // Update document title from config
       if (window.__STUDIO_CONFIG__?.metadata?.title) {
         document.title = window.__STUDIO_CONFIG__.metadata.title;
@@ -124,4 +139,3 @@ function injectConfig(html, config) {
     }
     return modifiedHtml.replace("</head>", `${script}</head>`);
 }
-//# sourceMappingURL=html-injector.js.map

package/dist/utils/org-hooks-injector.d.ts

@@ -71,4 +71,3 @@ export declare function createOrganizationHooksWithEvents(eventsConfig: StudioCo
  * This should be called during Better Auth initialization
  */
 export declare function wrapOrganizationPluginHooks(auth: any, eventsConfig: StudioConfig["events"]): void;
-//# sourceMappingURL=org-hooks-injector.d.ts.map

package/dist/utils/org-hooks-injector.js

@@ -645,4 +645,3 @@ export function wrapOrganizationPluginHooks(auth, eventsConfig) {
         console.error("[Organization Hooks] Failed to wrap hooks:", error);
     }
 }
-//# sourceMappingURL=org-hooks-injector.js.map

package/dist/utils/package-json.d.ts

@@ -5,4 +5,4 @@
  * @returns The version string if found, undefined otherwise
  */
 export declare function getPackageVersion(packageName: string, cwd?: string): Promise<string | undefined>;
-//# sourceMappingURL=package-json.d.ts.map
+export declare function getDirectPackageVersion(packageName: string, cwd?: string): string | undefined;

package/dist/utils/package-json.js

@@ -60,4 +60,24 @@ export async function getPackageVersion(packageName, cwd) {
         return undefined;
     }
 }
-//# sourceMappingURL=package-json.js.map
+export function getDirectPackageVersion(packageName, cwd) {
+    const searchDir = cwd || process.cwd();
+    const projectRoot = findProjectRoot(searchDir);
+    const packageJsonPaths = Array.from(new Set([join(searchDir, "package.json"), join(projectRoot, "package.json")]));
+    for (const packageJsonPath of packageJsonPaths) {
+        if (!existsSync(packageJsonPath)) {
+            continue;
+        }
+        try {
+            const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+            const version = packageJson.dependencies?.[packageName] ||
+                packageJson.devDependencies?.[packageName] ||
+                packageJson.peerDependencies?.[packageName];
+            if (version) {
+                return version.replace(/[\^~]/, "");
+            }
+        }
+        catch { }
+    }
+    return undefined;
+}

package/dist/utils/paths.d.ts

@@ -1,2 +1 @@
 export declare const possiblePaths: string[];
-//# sourceMappingURL=paths.d.ts.map

package/dist/utils/paths.js

@@ -9,4 +9,3 @@ export const possiblePaths = [
     ...basePaths.map((it) => `app/${it}`),
     ...basePaths.map((it) => `apps/${it}`),
 ];
-//# sourceMappingURL=paths.js.map

package/dist/utils/reason-messages.d.ts

@@ -3,4 +3,3 @@
  * Known codes (e.g. invalid_credentials) are mapped; other values are used as-is (e.g. API messages).
  */
 export declare function reasonToMessage(reason: string | undefined): string;
-//# sourceMappingURL=reason-messages.d.ts.map

package/dist/utils/reason-messages.js

@@ -30,4 +30,3 @@ export function reasonToMessage(reason) {
         return mapped;
     return trimmed;
 }
-//# sourceMappingURL=reason-messages.js.map

package/dist/utils/session.d.ts

@@ -17,4 +17,3 @@ export declare function createStudioSession(user: {
     image?: string;
 }, durationMs?: number): StudioSession;
 export declare const STUDIO_COOKIE_NAME = "better_auth_studio_session";
-//# sourceMappingURL=session.d.ts.map

package/dist/utils/session.js

@@ -55,4 +55,3 @@ export function createStudioSession(user, durationMs = 7 * 24 * 60 * 60 * 1000)
     };
 }
 export const STUDIO_COOKIE_NAME = "better_auth_studio_session";
-//# sourceMappingURL=session.js.map

package/dist/utils.d.ts

@@ -1,2 +1 @@
 export declare const possibleConfigFiles: string[];
-//# sourceMappingURL=utils.d.ts.map

package/dist/utils.js

@@ -24,4 +24,3 @@ export const possibleConfigFiles = [
     "auth.config.ts",
     "auth.config.js",
 ];
-//# sourceMappingURL=utils.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth-studio",
-  "version": "1.1.3-beta.9",
+  "version": "1.1.3",
   "description": "Studio for Better Auth",
   "keywords": [
     "admin",
@@ -19,8 +19,7 @@
     "README.md",
     "data/default-geo.json",
     "dist/",
-    "public/",
-    "scripts/"
+    "scripts/postinstall.js"
   ],
   "type": "module",
   "main": "dist/index.js",
@@ -29,6 +28,7 @@
     "./express": "./dist/adapters/express.js",
     "./nextjs": "./dist/adapters/nextjs.js",
     "./hono": "./dist/adapters/hono.js",
+    "./cloudflare-workers": "./dist/adapters/cloudflare-workers.js",
     "./elysia": "./dist/adapters/elysia.js",
     "./svelte-kit": "./dist/adapters/svelte-kit.js",
     "./solid-start": "./dist/adapters/solid-start.js",
@@ -38,33 +38,6 @@
     "./nuxt": "./dist/adapters/nuxt.js",
     "./config": "./dist/types/handler.js"
   },
-  "scripts": {
-    "build": "tsc && pnpm run frontend:build && pnpm run copy:public && pnpm run verify:public",
-    "geo:update": "node scripts/download-geolite2.js",
-    "copy:public": "rm -rf dist/public && cp -r public dist/",
-    "verify:public": "test -f dist/public/index.html && echo '✓ Public directory copied successfully' || (echo '✗ ERROR: Public directory not copied!' && exit 1)",
-    "postinstall": "node scripts/postinstall.js",
-    "dev": "tsx src/cli.ts",
-    "start": "node dist/cli.js",
-    "studio": "tsx src/cli.ts",
-    "clean": "rm -rf dist",
-    "frontend:dev": "cd frontend && pnpm run dev",
-    "frontend:build": "cd frontend && pnpm run build",
-    "frontend:preview": "cd frontend && pnpm run preview",
-    "lint": "oxlint . && oxfmt --check .",
-    "format": "oxlint --fix . && oxfmt .",
-    "lint:fix": "oxlint --fix . && oxfmt .",
-    "type-check": "tsc --noEmit",
-    "test": "vitest",
-    "test:watch": "vitest --watch",
-    "test:coverage": "vitest --coverage",
-    "test:ci": "pnpm test --run",
-    "release": "pnpm build && bumpp && pnpm publish --access public --no-git-checks",
-    "release:beta": "pnpm build && bumpp --preid beta && pnpm publish --access public --tag beta --no-git-checks",
-    "release:no-build": "bumpp && pnpm publish --access public --no-git-checks --tag next",
-    "release:canary": "pnpm build && bumpp --preid canary --no-commit --no-tag --no-push && pnpm publish --access public --tag canary --no-git-checks",
-    "bump": "bumpp"
-  },
   "dependencies": {
     "@babel/preset-react": "^7.27.1",
     "@babel/preset-typescript": "^7.27.1",
@@ -104,13 +77,31 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "pnpm": {
-    "overrides": {
-      "qs": ">=6.14.1",
-      "@remix-run/router": ">=1.23.2",
-      "devalue": ">=5.6.2",
-      "@sveltejs/kit": ">=2.49.5",
-      "next": ">=15.5.10"
-    }
+  "scripts": {
+    "build": "pnpm run clean && tsc && pnpm run frontend:build && pnpm run copy:public && pnpm run verify:public",
+    "geo:update": "node scripts/download-geolite2.js",
+    "copy:public": "rm -rf dist/public && cp -r public dist/",
+    "verify:public": "test -f dist/public/index.html && echo '✓ Public directory copied successfully' || (echo '✗ ERROR: Public directory not copied!' && exit 1)",
+    "postinstall": "node scripts/postinstall.js",
+    "dev": "tsx src/cli.ts",
+    "start": "node dist/cli.js",
+    "studio": "tsx src/cli.ts",
+    "clean": "rm -rf dist",
+    "frontend:dev": "cd frontend && pnpm run dev",
+    "frontend:build": "cd frontend && pnpm run build",
+    "frontend:preview": "cd frontend && pnpm run preview",
+    "lint": "oxlint . && oxfmt --check .",
+    "format": "oxlint --fix . && oxfmt .",
+    "lint:fix": "oxlint --fix . && oxfmt .",
+    "type-check": "tsc --noEmit",
+    "test": "vitest",
+    "test:watch": "vitest --watch",
+    "test:coverage": "vitest --coverage",
+    "test:ci": "pnpm test --run",
+    "release": "pnpm build && bumpp && pnpm publish --access public --no-git-checks",
+    "release:beta": "pnpm build && bumpp --preid beta && pnpm publish --access public --tag beta --no-git-checks",
+    "release:no-build": "bumpp && pnpm publish --access public --no-git-checks --tag next",
+    "release:canary": "pnpm build && bumpp --preid canary --no-commit --no-tag --no-push && pnpm publish --access public --tag canary --no-git-checks",
+    "bump": "bumpp"
   }
-}
+}

package/dist/adapters/astro.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"astro.d.ts","sourceRoot":"","sources":["../../src/adapters/astro.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAuC,MAAM,qBAAqB,CAAC;AAG7F;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,IAMrC,KAAK;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,KAAG,OAAO,CAAC,QAAQ,CAAC,CAa5D"}

package/dist/adapters/astro.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"astro.js","sourceRoot":"","sources":["../../src/adapters/astro.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEpF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO;YAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,KAAK,EAAE,GAAyB,EAAqB,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACrE,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE;gBACtE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,GAAyB,EACzB,MAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,IAAS,CAAC;IACd,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;aAAM,IACL,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACzD,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC3C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACxB,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE;QACrD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC;IAClD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAErF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAExB,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;IAExC,OAAO;QACL,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;AACL,CAAC"}