decocms 4.76.45 → 4.76.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "decocms",
-  "version": "4.76.45",
+  "version": "4.76.47",
   "description": "Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "repository": {

package/dist/client/assets/auth-entry-DA-DPJTf.js

@@ -1 +0,0 @@
-import{z as he,r as f,d as K,p as I,a as k,j as e,l as u,B as ue,c as Ne,S as pe}from"./index-B5cMFR-y.js";import{I as U}from"./input-BsEx9qgh.js";import{r as Pe,R as Ae}from"./retry-CErkP7V6.js";const Ce={signUpFailed:"Sign up failed",signInFailed:"Sign in failed",authenticationFailed:"Authentication failed",resetEmailFailed:"Failed to send reset email",otpSendFailed:"Failed to send code",invalidCode:"Invalid code",invalidEmail:"Invalid email address",invalidEmailOrPassword:"Invalid email or password. Please try again.",accountExists:"An account with this email already exists. Try signing in instead.",networkError:"Network error. Please check your connection and try again.",tooManyAttempts:"Too many attempts. Please wait a moment and try again.",invalidOrExpiredCode:"Invalid or expired code. Please try again.",genericError:"An error occurred. Please try again.",resetPasswordTitle:"Reset your password",verificationCodeTitle:"Enter verification code",welcomeTitle:"Welcome to deco",resetPasswordSubtitle:"We'll send you a reset link",codeSentTo:r=>`Code sent to ${r}`,defaultSubtitle:"Sign in or create a new account",resetEmailSent:"Check your email for a password reset link.",continueWith:r=>`Continue with ${r}`,divider:"or",emailLabel:"Email",emailPlaceholder:"Email address",sending:"Sending...",sendCode:"Send code",verificationCodeLabel:"Verification code",enterCodePlaceholder:"Enter code",verifying:"Verifying...",verify:"Verify",useDifferentEmail:"Use a different email",sendResetLink:"Send reset link",nameLabel:"Name",namePlaceholder:"Your name",passwordLabel:"Password",forgotPassword:"Forgot password?",creatingAccount:"Creating account...",signingIn:"Signing in...",continue:"Continue",backToSignIn:"Back to sign in",signInWithPassword:"Sign in with password instead",alreadyHaveAccount:"Already have an account? ",dontHaveAccount:"Don't have an account? ",signIn:"Sign in",signUp:"Sign up",signInWithEmailCode:"Sign in with email code"};function Ie({redirectUrl:r,callbackUrl:a="/",title:b,subtitle:x,brand:d,copy:v,variant:g="default",allowedSocialProviders:c,allowPassword:_=!0,onAuthEvent:W}){const{emailAndPassword:F,resetPassword:D,emailOtp:m,socialProviders:S}=he(),l=t=>{try{W?.(t)}catch{}},h=g==="compact",z=c?S.providers.filter(t=>c.includes(t.name)):S.providers,H=S.enabled&&z.length>0,Q=F.enabled&&(_||!m.enabled&&!H),$=S.enabled&&S.providers.length>0&&!H&&!m.enabled&&!Q?S.providers:z,y=S.enabled&&$.length>0,w=F.enabled&&(_||!m.enabled&&!y),[n,Y]=f.useState(""),[G,fe]=f.useState(""),[X,ie]=f.useState(""),[Z,ee]=f.useState(""),[L,te]=f.useState(!1),[se,xe]=f.useState(()=>m.enabled?"emailOtp":globalThis.localStorage?.getItem("hasLoggedIn")!=="true"?"signUp":"signIn"),[E,O]=f.useState(""),[ne,re]=f.useState(!1),s={...Ce,...v},p=se==="signUp",P=se==="forgotPassword",N=se==="emailOtp",q=K({mutationFn:async({email:t,password:i,name:A})=>{try{if(p){const j=await k.signUp.email({email:t,password:i,name:A||""});if(j.error)throw new Error(j.error.message||s.signUpFailed);return j}else{const j=await k.signIn.email({email:t,password:i});if(j.error)throw new Error(j.error.message||s.signInFailed);return j}}catch(j){throw j instanceof Error?j:new Error(s.authenticationFailed)}},onMutate:()=>{l({type:"started",method:"email_password",mode:p?"sign_up":"sign_in"})},onSuccess:()=>{l({type:"succeeded",method:"email_password",mode:p?"sign_up":"sign_in"}),globalThis.localStorage?.setItem("hasLoggedIn","true"),window.location.href=r??a},onError:t=>{l({type:"failed",method:"email_password",mode:p?"sign_up":"sign_in",stage:"authenticate",error:t instanceof Error?t.message:String(t)}),I(p?"user_signup_failed":"user_signin_failed",{error:t instanceof Error?t.message:String(t)})}}),B=K({mutationFn:async({email:t})=>{const i=await k.requestPasswordReset({email:t,redirectTo:"/reset-password"});if(i.error)throw new Error(i.error.message||s.resetEmailFailed);return i},onSuccess:()=>{I("password_reset_requested"),re(!0)},onError:t=>{I("password_reset_request_failed",{error:t instanceof Error?t.message:String(t)})}}),T=K({mutationFn:async({email:t})=>{const i=await k.emailOtp.sendVerificationOtp({email:t,type:"sign-in"});if(i.error)throw new Error(i.error.message||s.otpSendFailed);return i},onMutate:()=>{l({type:"started",method:"email_otp"})},onSuccess:()=>{l({type:"otp_sent",method:"email_otp"}),I("email_otp_sent"),te(!0)},onError:t=>{l({type:"failed",method:"email_otp",stage:"send_otp",error:t instanceof Error?t.message:String(t)}),I("email_otp_send_failed",{error:t instanceof Error?t.message:String(t)})}}),R=K({mutationFn:async({email:t,otp:i})=>{const A=await k.signIn.emailOtp({email:t,otp:i});if(A.error)throw new Error(A.error.message||s.invalidCode);return A},onMutate:()=>{l({type:"otp_submitted",method:"email_otp"})},onSuccess:()=>{l({type:"succeeded",method:"email_otp"}),globalThis.localStorage?.setItem("hasLoggedIn","true"),window.location.href=r??a},onError:t=>{l({type:"failed",method:"email_otp",stage:"verify_otp",error:t instanceof Error?t.message:String(t)}),I("email_otp_verify_failed",{error:t instanceof Error?t.message:String(t)})}}),J=t=>/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t),ae=()=>{n.trim()&&!J(n)&&O(s.invalidEmail)},be=t=>{if(t.preventDefault(),!J(n)){O(s.invalidEmail),l({type:"failed",method:"email_password",mode:p?"sign_up":"sign_in",stage:"validation",error:"invalid_email"});return}q.mutate({email:n,password:G,name:X})},ve=t=>{if(t.preventDefault(),!J(n)){O(s.invalidEmail);return}B.mutate({email:n})},ye=t=>{if(t.preventDefault(),!J(n)){O(s.invalidEmail),l({type:"failed",method:"email_otp",stage:"validation",error:"invalid_email"});return}T.mutate({email:n})},we=t=>{t.preventDefault(),R.mutate({email:n,otp:Z})},M=t=>i=>{t(i.target.value),oe&&q.reset(),le&&B.reset(),de&&(T.reset(),R.reset()),t===Y&&E&&O("")},V=t=>{xe(t),ie(""),ee(""),te(!1),O(""),re(!1),q.reset(),B.reset(),T.reset(),R.reset()},o=q.isPending||B.isPending||T.isPending||R.isPending,oe=q.error,le=B.error,de=T.error||R.error,C=p?n.trim()&&G.trim()&&X.trim():P?n.trim():N?L?Z.trim():n.trim():n.trim()&&G.trim(),Ee=t=>{if(!t)return null;const i=t.message.toLowerCase();return i.includes("unauthorized")||i.includes("401")?s.invalidEmailOrPassword:i.includes("already exists")||i.includes("409")?s.accountExists:i.includes("network")||i.includes("fetch")?s.networkError:i.includes("rate limit")||i.includes("429")?s.tooManyAttempts:i.includes("invalid")&&i.includes("otp")?s.invalidOrExpiredCode:t.message||s.genericError},ce=oe||le||de,je=async t=>{l({type:"started",method:"social",provider:t});try{const i=await k.signIn.social({provider:t,callbackURL:r??a});if(i.error)throw new Error(i.error.message||s.authenticationFailed)}catch(i){const A=i instanceof Error?i.message:String(i);l({type:"failed",method:"social",provider:t,stage:"redirect",error:A}),I("social_signin_failed",{provider:t,error:A})}},Se=P?s.resetPasswordTitle:N&&L?s.verificationCodeTitle:b??s.welcomeTitle,me=P?s.resetPasswordSubtitle:N&&L?s.codeSentTo(n):x===void 0?s.defaultSubtitle:x;return e.jsxs("div",{className:u("grid w-full",h?"gap-5":"gap-10"),children:[d??e.jsxs("div",{children:[e.jsx("img",{src:"/logos/deco logo.svg",alt:"Deco",className:"h-12 w-12 dark:hidden"}),e.jsx("img",{src:"/logos/deco logo negative.svg",alt:"Deco",className:"h-12 w-12 hidden dark:block"})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx("h1",{className:u("font-medium",h?"text-xl leading-7":"text-2xl leading-8"),children:Se}),me&&e.jsx("p",{className:u("text-muted-foreground",h?"text-sm leading-5":"text-base leading-6"),children:me})]}),ce&&e.jsx("div",{className:"rounded-xl bg-destructive/10 p-3 text-sm text-destructive text-center",children:Ee(ce)}),ne&&e.jsx("div",{className:"rounded-xl bg-success/10 p-3 text-sm text-success text-center",children:s.resetEmailSent}),!P&&!(N&&L)&&y&&e.jsx("div",{className:"grid gap-2",children:$.map(t=>e.jsxs("button",{type:"button",disabled:o,onClick:()=>{je(t.name)},className:u("flex w-full items-center justify-center gap-3 bg-background px-3 text-sm font-medium text-foreground card-shadow transition-colors hover:bg-accent hover:text-accent-foreground disabled:pointer-events-none disabled:opacity-50 dark:bg-input/30 dark:hover:bg-input/50",h?"h-11 rounded-lg":"h-12 rounded-xl"),children:[t.icon&&e.jsx("img",{src:t.icon,alt:"",className:u("h-5 w-5",t.name==="github"&&"dark:invert"),"aria-hidden":"true"}),s.continueWith(t.name.charAt(0).toUpperCase()+t.name.slice(1))]},t.name))}),!P&&!(N&&L)&&y&&(w||m.enabled)&&e.jsxs("div",{className:u("flex items-center gap-2.5",h?"my-0":"-my-4"),children:[e.jsx("div",{className:"h-px flex-1 bg-border"}),e.jsx("span",{className:u("text-muted-foreground",h?"text-sm":"text-base"),children:s.divider}),e.jsx("div",{className:"h-px flex-1 bg-border"})]}),N&&m.enabled&&e.jsx(e.Fragment,{children:L?e.jsxs("form",{onSubmit:we,className:u("grid gap-2",h&&"sm:grid-cols-[minmax(0,1fr)_auto] sm:items-start"),children:[e.jsxs("div",{className:"grid gap-2",children:[e.jsx("label",{className:u("text-sm font-medium text-foreground",h&&"sr-only"),children:s.verificationCodeLabel}),e.jsx(U,{type:"text",placeholder:s.enterCodePlaceholder,value:Z,onChange:M(ee),required:!0,disabled:o,autoFocus:!0,inputMode:"numeric",autoComplete:"one-time-code",className:"h-11 rounded-lg"})]}),e.jsx("button",{type:"submit",disabled:o||!C,className:u("flex items-center justify-center rounded-lg bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/80 disabled:pointer-events-none disabled:opacity-50",h?"h-11 sm:w-auto":"h-12 w-full"),children:o?s.verifying:s.verify}),e.jsx("button",{type:"button",onClick:()=>{te(!1),ee(""),T.reset(),R.reset()},disabled:o,className:u("mt-1 text-sm text-muted-foreground transition-colors hover:text-foreground",h&&"sm:col-span-2"),children:s.useDifferentEmail})]}):e.jsxs("form",{onSubmit:ye,className:u("grid gap-2",h&&"sm:grid-cols-[minmax(0,1fr)_auto] sm:items-start"),children:[e.jsxs("div",{className:"grid gap-2",children:[e.jsx("label",{className:u("text-sm font-medium text-foreground",h&&"sr-only"),children:s.emailLabel}),e.jsx(U,{type:"email",placeholder:s.emailPlaceholder,value:n,onChange:M(Y),onBlur:ae,required:!0,disabled:o,"aria-invalid":!!E,className:"h-11 rounded-lg"}),E&&e.jsx("p",{className:"text-xs text-destructive",children:E})]}),e.jsx("button",{type:"submit",disabled:o||!C,className:u("flex items-center justify-center rounded-lg bg-primary px-4 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/80 disabled:pointer-events-none disabled:opacity-50",h?"h-11 sm:w-auto":"h-12 w-full"),children:o?s.sending:s.sendCode})]})}),P&&w&&!ne&&e.jsxs("form",{onSubmit:ve,className:"grid gap-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"block text-sm font-medium text-foreground mb-2",children:s.emailLabel}),e.jsx(U,{type:"email",placeholder:"you@example.com",value:n,onChange:M(Y),onBlur:ae,required:!0,disabled:o,"aria-invalid":!!E,className:"h-11 rounded-lg"}),E&&e.jsx("p",{className:"text-xs text-destructive mt-1.5",children:E})]}),e.jsx(ue,{type:"submit",disabled:o||!C,className:"w-full font-semibold",size:"xl",children:o?s.sending:s.sendResetLink})]}),!P&&!N&&w&&e.jsxs("form",{onSubmit:be,className:"grid gap-5",children:[p&&e.jsxs("div",{children:[e.jsx("label",{className:"block text-sm font-medium text-foreground mb-2",children:s.nameLabel}),e.jsx(U,{type:"text",placeholder:s.namePlaceholder,value:X,onChange:M(ie),required:!0,disabled:o,className:"h-11 rounded-lg"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"block text-sm font-medium text-foreground mb-2",children:s.emailLabel}),e.jsx(U,{type:"email",placeholder:"you@example.com",value:n,onChange:M(Y),onBlur:ae,required:!0,disabled:o,"aria-invalid":!!E,className:"h-11 rounded-lg"}),E&&e.jsx("p",{className:"text-xs text-destructive mt-1.5",children:E})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"block text-sm font-medium text-foreground",children:s.passwordLabel}),!p&&D.enabled&&e.jsx("button",{type:"button",onClick:()=>V("forgotPassword"),className:"text-xs text-muted-foreground hover:text-foreground transition-colors",children:s.forgotPassword})]}),e.jsx(U,{type:"password",placeholder:"••••••••",value:G,onChange:M(fe),required:!0,disabled:o,className:"h-11 rounded-lg"})]}),e.jsx("div",{className:u("overflow-hidden transition-all duration-300 ease-[cubic-bezier(0.075,0.82,0.165,1)]",C?"max-h-[100px] opacity-100 translate-y-0":"max-h-0 opacity-0 -translate-y-2"),children:e.jsx("div",{className:u("p-1",!C&&"pointer-events-none"),children:e.jsx(ue,{type:"submit",disabled:o||!C,className:u("w-full font-semibold"),size:"xl","aria-hidden":!C,children:o?p?s.creatingAccount:s.signingIn:s.continue})})})]}),e.jsx("div",{className:"text-sm text-muted-foreground",children:P?e.jsx("button",{type:"button",onClick:()=>V("signIn"),disabled:o,className:"font-medium text-[#8CAA25] hover:underline disabled:opacity-50",children:s.backToSignIn}):N&&w?e.jsx("button",{type:"button",onClick:()=>V("signIn"),disabled:o,className:"font-medium text-[#8CAA25] hover:underline disabled:opacity-50",children:s.signInWithPassword}):!N&&w?e.jsxs(e.Fragment,{children:[p?s.alreadyHaveAccount:s.dontHaveAccount,e.jsx("button",{type:"button",onClick:()=>V(p?"signIn":"signUp"),disabled:o,className:"font-medium text-[#8CAA25] hover:underline disabled:opacity-50",children:p?s.signIn:s.signUp}),m.enabled&&e.jsxs(e.Fragment,{children:[e.jsx("span",{className:"mx-2",children:"·"}),e.jsx("button",{type:"button",onClick:()=>V("emailOtp"),disabled:o,className:"font-medium text-[#8CAA25] hover:underline disabled:opacity-50",children:s.signInWithEmailCode})]})]}):null})]})}class ge{constructor(a){this.response=a}response}function ke(r){return r.startsWith("/")&&!r.startsWith("//")?r:"/"}function _e({redirectTo:r,onAuthEvent:a}){const[b,x]=f.useState(null),d=f.useEffectEvent(v=>{try{a?.(v)}catch{}});return f.useEffect(()=>{let v=!1;return(async()=>{d({type:"started",method:"local"});try{let g;try{g=await Pe(async()=>{const c=await fetch("/api/auth/custom/local-session",{method:"POST",credentials:"include"});if(c.status>=500)throw new ge(c);return c},{maxAttempts:5,minTimeout:1e3,maxTimeout:1e4,multiplier:2,jitter:0})}catch(c){if(c instanceof Ae&&c.cause instanceof ge)g=c.cause.response;else throw c}if(!g.ok){const c=await g.json().catch(()=>({}));throw new Error(c?.error||"Auto-login failed")}v||(d({type:"succeeded",method:"local"}),window.location.href=ke(r))}catch(g){v||(d({type:"failed",method:"local",stage:"authenticate",error:g instanceof Error?g.message:String(g)}),x(g instanceof Error?g.message:"Auto-login failed"))}})(),()=>{v=!0}},[r]),b?e.jsx("div",{className:"flex min-h-screen items-center justify-center",children:e.jsxs("div",{className:"text-center",children:[e.jsxs("p",{className:"text-destructive mb-2",children:["Auto-login failed: ",b]}),e.jsx("p",{className:"text-muted-foreground text-sm",children:"Try restarting the server."})]})}):e.jsx(pe,{})}function Fe({callbackURL:r,providerId:a,onAuthEvent:b}){const x=f.useEffectEvent(d=>{try{b?.(d)}catch{}});return f.useEffect(()=>{(async()=>{x({type:"started",method:"sso",provider:a});try{const d=await k.signIn.sso({providerId:a,callbackURL:r});if(d.error)throw new Error(d.error.message||"SSO redirect failed")}catch(d){x({type:"failed",method:"sso",provider:a,stage:"redirect",error:d instanceof Error?d.message:String(d)})}})()},[a,r]),e.jsx(pe,{})}function Re(r){const a=Ne.c(19),{callbackUrl:b,redirectUrl:x,allowAutoLogin:d,title:v,subtitle:g,brand:c,copy:_,variant:W,allowedSocialProviders:F,allowPassword:D,onAuthEvent:m}=r,S=d===void 0?!0:d,{sso:l,emailAndPassword:h,magicLink:z,emailOtp:H,socialProviders:Q,localMode:$}=he(),y=x||b;if($&&S){let n;return a[0]!==m||a[1]!==y?(n=e.jsx(_e,{redirectTo:y,onAuthEvent:m}),a[0]=m,a[1]=y,a[2]=n):n=a[2],n}if(l.enabled){let n;return a[3]!==m||a[4]!==y||a[5]!==l.providerId?(n=e.jsx(Fe,{callbackURL:y,providerId:l.providerId,onAuthEvent:m}),a[3]=m,a[4]=y,a[5]=l.providerId,a[6]=n):n=a[6],n}if(h.enabled||z.enabled||H.enabled||Q.enabled){let n;return a[7]!==D||a[8]!==F||a[9]!==c||a[10]!==b||a[11]!==_||a[12]!==m||a[13]!==x||a[14]!==g||a[15]!==v||a[16]!==W?(n=e.jsx(Ie,{redirectUrl:x,callbackUrl:b,title:v,subtitle:g,brand:c,copy:_,variant:W,allowedSocialProviders:F,allowPassword:D,onAuthEvent:m}),a[7]=D,a[8]=F,a[9]=c,a[10]=b,a[11]=_,a[12]=m,a[13]=x,a[14]=g,a[15]=v,a[16]=W,a[17]=n):n=a[17],n}let w;return a[18]===Symbol.for("react.memo_cache_sentinel")?(w=e.jsx("div",{children:"No login options available"}),a[18]=w):w=a[18],w}export{Re as A};